ftown 0.20.6 → 0.20.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ftown",
-  "version": "0.20.6",
+  "version": "0.20.7",
   "description": "CLI bridge for ftown — generic PTY-over-Centrifugo relay",
   "type": "module",
   "main": "dist/index.js",
@@ -9,8 +9,7 @@
     "ftown": "dist/ftown-cli.js",
     "ftown-harness": "dist/harness-cli.js",
     "ftown-env": "dist/ftown-env-cli.js",
-    "ftown-sessions": "bin/ftown-sessions",
-    "ftown-mcp": "dist/mcp-cli.js"
+    "ftown-sessions": "bin/ftown-sessions"
   },
   "files": [
     "dist",
@@ -28,8 +27,7 @@
     "prepublishOnly": "npm run build",
     "start": "tsx src/index.ts",
     "dev": "tsx watch src/index.ts",
-    "harness": "tsx src/harness-cli.ts",
-    "mcp": "tsx src/mcp-cli.ts"
+    "harness": "tsx src/harness-cli.ts"
   },
   "engines": {
     "node": "^22.23.4 || ^24.22.1 || >=26.12.1"
@@ -51,26 +49,20 @@
   "dependencies": {
     "@hpke/common": "1.10.1",
     "@hpke/core": "1.9.0",
-    "@modelcontextprotocol/sdk": "^1.32.1",
     "@xterm/addon-serialize": "^0.14.0",
     "@xterm/headless": "^6.0.0",
     "centrifuge": "^5.2.2",
     "commander": "^13.1.0",
-    "express": "^5.3.0",
-    "express-rate-limit": "^8.7.1",
     "jsonwebtoken": "^9.0.3",
     "node-datachannel": "^0.32.3",
     "node-pty": "^1.2.0-beta.12",
-    "pg": "^8.23.1",
     "uuid": "^11.1.0",
     "ws": "^8.18.0",
     "zod": "^4.6.7"
   },
   "devDependencies": {
-    "@types/express": "^5.0.6",
     "@types/jsonwebtoken": "^9.0.10",
     "@types/node": "^22.13.0",
-    "@types/pg": "^8.23.1",
     "@types/uuid": "^10.0.0",
     "@types/ws": "^8.5.14",
     "tsx": "^4.19.0",
@@ -80,5 +72,5 @@
   "overrides": {
     "qs": "6.16.1"
   },
-  "gitHead": "eccd344488ad893042a5fe081fcb9c3badf7f986"
+  "gitHead": "5828f409f518cbb17ebc19aef0166dec90b7a04b"
 }

package/skills/ftown/SKILL.md

@@ -127,24 +127,20 @@ authorize a merge or other action. Both commands target trimmed
 `$FTOWN_SESSION_ID` unless you supply `--session-id <id>`; they never guess identity from the working directory.
 Older bridges report `bridge_upgrade_required` before mutation.
 
-Remote MCP callers use `attention_request` with explicit `machine` and
-`sessionId`, or `sessions_update` with `pullRequestUrl` (string to set, null to
-clear). Mutation tools require control access; remote callers have no automatic
-local self identity. To ask with options or free text, pass `questions` to
-`attention_request`, then poll `attention_get` (`eventId`, optional
-`waitSeconds` 0..25) until the event is resolved (`resolvedAt` set).
-`event.answer` holds the answer; a resolution without an answer means it was
-dismissed. Keep the returned attention event ID: the
-inbox, acknowledge and resolve operations never answer the agent's question.
+To ask with options or free text, use `ftown sessions attention --option ...` or
+`--questions-json`, then check the returned event ID with `ftown sessions
+attention-status <event-id>` until it is resolved. `event.answer` holds the
+answer; a resolution without an answer means it was dismissed. The inbox,
+acknowledge and resolve operations never answer the agent's question.
 
 For tasks performed in an FTown session, associate the task's GitHub PR when
-created or updated, before the completion notice: use `ftown sessions pr <URL>`
-or MCP `sessions_update.pullRequestUrl`. Omit this step for tasks without a PR;
-never invent a PR or guess a session identity.
+created or updated, before the completion notice: use `ftown sessions pr <URL>`.
+Omit this step for tasks without a PR; never invent a PR or guess a session
+identity.
 
 Once the task is complete, request user attention **once per completed task**,
 before the final handoff, using `ftown sessions attention --title 'Work complete'
---message "<truthful outcome, checks and PR summary>"` or MCP `attention_request`.
+--message "<truthful outcome, checks and PR summary>"`.
 Do not send a completion notice every turn; retain the uncertain-result guidance
 above. Children must still report their result to the parent as assigned; user
 attention does not replace that reporting. See the completion example in

package/skills/ftown/references/sessions.md

@@ -79,8 +79,7 @@ printf 'First line\nSecond line\n' | ftown sessions preview-reply --message-file
 The target defaults to `FTOWN_SESSION_ID`; `--session-id` selects an explicit
 session. Replies are limited to 4096 UTF-8 bytes. Preserve the returned ID and
 pass it with `--id <uuid>` alongside the same text when retrying an uncertain
-result. An MCP controller can instead call `preview_chat_reply` with explicit
-machine and session ID. A queued message does not mean an agent has read it.
+result. A queued message does not mean an agent has read it.
 
 ## Ask the human or associate a pull request
 
@@ -156,7 +155,7 @@ Without `--wait`, `attention` prints the event ID when questions are present, so
 the agent can check later with `attention-status`.
 
 Delivery: the human answers in the dashboard inbox. A live waiter (`--wait`,
-`attention-status --wait`, or MCP `attention_get` polling) receives the answer
+or `attention-status --wait`) receives the answer
 directly. If nobody is waiting, the answer is sent as ftown mail from "You"
 (`fromName` "You", thread `attention:<id>`) whose body starts with
 `[ftown attention answer id=<id>]`. Claude Code `AskUserQuestion` calls inside an
@@ -171,19 +170,7 @@ Attaching/replacing/clearing is metadata-only; omitting it on an update preserve
 its value. New sessions/children do not implicitly inherit a parent's PR.
 
 New commands probe the exact bridge capability before writing; update old bridges
-with the exact version setup command in their readiness hint. For remote MCP,
-`attention_request` requires explicit `{machine, sessionId, message, title?}` and
-returns `{machine, sessionId, event}`; it also accepts optional `questions` (1 to
-4 entries, shaped as above) when the bridge reports `prompt`. `attention_get`
-takes `{machine, sessionId, eventId, waitSeconds?}` (`waitSeconds` 0..25) and
-returns `{machine, sessionId, event}`. Poll it until the event is resolved
-(`resolvedAt` set): `event.answer` holds the answer, and a resolution without an
-answer means the question was dismissed.
-
-`sessions_update` accepts `pullRequestUrl` (string or null), alongside existing
-name/parent fields. A mixed PR+name update rejects an old bridge before changing
-either field. Read-only MCP clients cannot see these mutation tools; control
-authorization and machine ownership still apply.
+with the exact version setup command in their readiness hint.
 
 ## Messaging (mail)
 
@@ -265,10 +252,7 @@ ftown sessions attention --title 'Work complete' \
 ```
 
 For tasks without a PR, omit the PR command and PR summary. Use the verified
-`FTOWN_SESSION_ID` or explicit `--session-id`; never guess a target. MCP callers
-instead use `sessions_update` with `pullRequestUrl` when applicable, then
-`attention_request` with title `Work complete` and the same truthful summary,
-always supplying explicit `machine` and `sessionId`.
+`FTOWN_SESSION_ID` or explicit `--session-id`; never guess a target.
 
 Send one completion request per completed task, not repeated per-turn notices.
 Logical duplicate coalescing does not justify retries after an uncertain outcome;

package/dist/mcp/fleet.d.ts

@@ -1,67 +0,0 @@
-import { z } from "zod";
-import { type McpRequestContext } from './secure-client.js';
-export declare const configSchema: z.ZodObject<{
-    concurrency: z.ZodDefault<z.ZodNumber>;
-    timeoutMs: z.ZodDefault<z.ZodNumber>;
-    machines: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-        transport: z.ZodLiteral<"relay">;
-        userId: z.ZodString;
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>, z.ZodObject<{
-        transport: z.ZodLiteral<"local">;
-        bridgeFile: z.ZodOptional<z.ZodString>;
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>, z.ZodObject<{
-        transport: z.ZodLiteral<"ssh">;
-        host: z.ZodString;
-        executable: z.ZodDefault<z.ZodString>;
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>, z.ZodObject<{
-        transport: z.ZodLiteral<"http">;
-        url: z.ZodString;
-        tokenEnv: z.ZodString;
-        id: z.ZodString;
-        label: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>], "transport">>;
-}, z.core.$strict>;
-export type FleetConfig = z.infer<typeof configSchema>;
-export declare const requestSchema: z.ZodObject<{
-    method: z.ZodEnum<{
-        GET: "GET";
-        POST: "POST";
-        PATCH: "PATCH";
-        DELETE: "DELETE";
-    }>;
-    path: z.ZodString;
-    body: z.ZodOptional<z.ZodUnknown>;
-    timeoutMs: z.ZodNumber;
-}, z.core.$strict>;
-export type BridgeRequest = z.infer<typeof requestSchema>;
-export declare class FleetError extends Error {
-    readonly code: string;
-    readonly outcomeUnknown: boolean;
-    readonly status?: number | undefined;
-    constructor(code: string, message: string, outcomeUnknown?: boolean, status?: number | undefined);
-}
-export declare function errorResult(error: unknown): {
-    status?: number | undefined;
-    code: string;
-    message: string;
-    outcomeUnknown: boolean;
-};
-export declare function httpRequest(origin: string, token: string, request: BridgeRequest, signal?: AbortSignal): Promise<any>;
-export declare function localRequest(request: BridgeRequest, bridgeFile?: string, signal?: AbortSignal, context?: McpRequestContext, machineId?: string): Promise<unknown>;
-export declare function loadConfig(path?: string): Promise<FleetConfig>;
-export declare function mapLimit<T, R>(items: T[], concurrency: number, fn: (item: T, index: number) => Promise<R>): Promise<R[]>;
-export declare class Fleet {
-    readonly config: FleetConfig;
-    private relay?;
-    private active;
-    private waiters;
-    constructor(config: FleetConfig, relay?: ((userId: string, machineId: string, request: BridgeRequest, signal?: AbortSignal, context?: McpRequestContext) => Promise<unknown>) | undefined);
-    scoped(context: McpRequestContext): Pick<Fleet, 'config' | 'request'>;
-    request(machineId: string, method: BridgeRequest["method"], path: string, body?: unknown, signal?: AbortSignal, timeoutMs?: number, context?: McpRequestContext): Promise<any>;
-}

package/dist/mcp/fleet.js

@@ -1,298 +0,0 @@
-import { readFile } from "node:fs/promises";
-import { homedir } from "node:os";
-import { join } from "node:path";
-import { z } from "zod";
-import { parseSecureEnvelope, MAX_ENVELOPE_BYTES, SecurityError } from '../security/crypto.js';
-import { SecureMcpClient } from './secure-client.js';
-const machineBase = {
-    id: z.string().regex(/^[a-zA-Z0-9_-]+$/),
-    label: z.string().optional(),
-};
-export const configSchema = z
-    .object({
-    concurrency: z.number().int().min(1).max(32).default(8),
-    timeoutMs: z.number().int().min(1000).max(60000).default(15000),
-    machines: z
-        .array(z.discriminatedUnion("transport", [
-        z
-            .object({
-            ...machineBase,
-            transport: z.literal("relay"),
-            userId: z.string().email(),
-        })
-            .strict(),
-        z
-            .object({
-            ...machineBase,
-            transport: z.literal("local"),
-            bridgeFile: z.string().optional(),
-        })
-            .strict(),
-        z
-            .object({
-            ...machineBase,
-            transport: z.literal("ssh"),
-            host: z.string().regex(/^[a-zA-Z0-9_][a-zA-Z0-9_.@:-]*$/),
-            executable: z.string().min(1).default("ftown-mcp"),
-        })
-            .strict(),
-        z
-            .object({
-            ...machineBase,
-            transport: z.literal("http"),
-            url: z.string().url(),
-            tokenEnv: z.string().min(1),
-        })
-            .strict(),
-    ]))
-        .min(1)
-        .max(1000),
-})
-    .strict()
-    .superRefine((config, ctx) => {
-    if (new Set(config.machines.map((m) => m.id)).size !== config.machines.length)
-        ctx.addIssue({ code: "custom", message: "Machine IDs must be unique" });
-    for (const m of config.machines)
-        if (m.transport === "http") {
-            const u = new URL(m.url);
-            if (u.username ||
-                u.password ||
-                u.search ||
-                u.hash ||
-                u.pathname !== "/" ||
-                !(u.protocol === "https:" ||
-                    (u.protocol === "http:" &&
-                        ["localhost", "127.0.0.1", "[::1]"].includes(u.hostname)))) {
-                ctx.addIssue({
-                    code: "custom",
-                    message: "HTTP machines require an HTTPS origin or loopback HTTP origin without embedded credentials",
-                });
-            }
-        }
-});
-export const requestSchema = z
-    .object({
-    method: z.enum(["GET", "POST", "PATCH", "DELETE"]),
-    path: z
-        .string()
-        .regex(/^\/api\/(?:archive|sessions(?:\/[a-zA-Z0-9_-]+(?:\/(?:screen|grep|keys|message|inbox|resize|usage|running|revive|stop|retry|preview-chat\/reply|attention(?:\/(?:ack|resolve))?))?)?)(?:\?[^#]*)?$/),
-    body: z.unknown().optional(),
-    timeoutMs: z.number().int().min(1000).max(60000),
-})
-    .strict();
-export class FleetError extends Error {
-    code;
-    outcomeUnknown;
-    status;
-    constructor(code, message, outcomeUnknown = false, status) {
-        super(message);
-        this.code = code;
-        this.outcomeUnknown = outcomeUnknown;
-        this.status = status;
-    }
-}
-export function errorResult(error) {
-    if (error instanceof SecurityError)
-        return { code: error.code, message: error.message, outcomeUnknown: error.code === 'outcome_unknown' };
-    if (error instanceof FleetError)
-        return {
-            code: error.code,
-            message: error.message,
-            outcomeUnknown: error.outcomeUnknown,
-            ...(error.status ? { status: error.status } : {}),
-        };
-    return {
-        code: "internal_error",
-        message: "Operation failed",
-        outcomeUnknown: false,
-    };
-}
-const maxBytes = 4 * 1024 * 1024;
-export async function httpRequest(origin, token, request, signal) {
-    const timeout = AbortSignal.timeout(request.timeoutMs);
-    try {
-        const res = await fetch(new URL(request.path, origin), {
-            method: request.method,
-            redirect: "error",
-            headers: {
-                Authorization: `Bearer ${token}`,
-                "Content-Type": "application/json",
-            },
-            body: request.body === undefined ? undefined : JSON.stringify(request.body),
-            signal: signal ? AbortSignal.any([signal, timeout]) : timeout,
-        });
-        const reader = res.body?.getReader();
-        let size = 0;
-        const chunks = [];
-        if (reader)
-            try {
-                while (true) {
-                    const { done, value } = await reader.read();
-                    if (done)
-                        break;
-                    size += value.byteLength;
-                    if (size > maxBytes) {
-                        await reader.cancel();
-                        throw new FleetError("response_too_large", "Bridge response exceeds 4 MiB; narrow the request", request.method !== "GET");
-                    }
-                    chunks.push(value);
-                }
-            }
-            finally {
-                reader.releaseLock();
-            }
-        const data = JSON.parse(Buffer.concat(chunks).toString("utf8"));
-        if (!res.ok) {
-            const detail = typeof data?.error === "string"
-                ? data.error.replaceAll(token, "[redacted]").slice(0, 1000)
-                : "Bridge request rejected";
-            throw new FleetError(typeof data?.code === "string" && ["unknown_session", "invalid_cursor", "unknown_attention", "attention_not_found", "attention_storage_error", "cancelled", "attention_not_ready"].includes(data.code) ? data.code : "bridge_error", `${detail} (HTTP ${res.status})`, request.method !== "GET" && res.status >= 500, res.status);
-        }
-        return data;
-    }
-    catch (error) {
-        if (error instanceof FleetError)
-            throw error;
-        throw new FleetError(signal?.aborted
-            ? "cancelled"
-            : timeout.aborted
-                ? "timeout"
-                : "connection_error", "Bridge request failed; check machine connectivity and credentials", request.method !== "GET");
-    }
-}
-export async function localRequest(request, bridgeFile = join(homedir(), ".ftown", "bridge.json"), signal, context, machineId) {
-    if (!context || !machineId)
-        throw new FleetError('upgrade_required', 'Legacy MCP proxy requests require an approved encrypted endpoint');
-    let credentials;
-    try {
-        credentials = z
-            .object({
-            port: z.number().int().min(1).max(65535),
-        })
-            .parse(JSON.parse(await readFile(bridgeFile, "utf8")));
-    }
-    catch {
-        throw new FleetError("configuration_error", "Cannot read bridge credentials; start ftown-bridge on this machine");
-    }
-    return secureHttpRequest(`http://127.0.0.1:${credentials.port}`, context, machineId, requestSchema.parse(request), signal);
-}
-async function secureHttpRequest(origin, context, machineId, request, signal) {
-    const client = new SecureMcpClient(context, machineId, `local-http:${machineId}`, async (packet, deadline, mutating, abort) => {
-        let sent = false;
-        try {
-            if (abort?.aborted || Date.now() >= deadline)
-                throw new FleetError('cancelled', 'Encrypted request cancelled before dispatch');
-            sent = true;
-            const timeout = AbortSignal.timeout(Math.max(1, deadline - Date.now()));
-            const response = await fetch(new URL('/api/security/envelope', origin), { method: 'POST', redirect: 'error', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(packet), signal: abort ? AbortSignal.any([abort, timeout]) : timeout });
-            if (!response.ok)
-                throw new FleetError([404, 426].includes(response.status) ? 'upgrade_required' : 'bridge_error', 'Bridge encrypted endpoint is unavailable', mutating && response.status >= 500, response.status);
-            const reader = response.body?.getReader();
-            if (!reader)
-                throw new FleetError('bridge_error', 'Bridge encrypted response is missing', mutating);
-            let size = 0;
-            const chunks = [];
-            try {
-                while (true) {
-                    const chunk = await reader.read();
-                    if (chunk.done)
-                        break;
-                    size += chunk.value.byteLength;
-                    if (size > MAX_ENVELOPE_BYTES) {
-                        await reader.cancel();
-                        throw new FleetError('response_too_large', 'Encrypted bridge response is too large', mutating);
-                    }
-                    chunks.push(chunk.value);
-                }
-            }
-            finally {
-                reader.releaseLock();
-            }
-            return parseSecureEnvelope(JSON.parse(Buffer.concat(chunks).toString('utf8')));
-        }
-        catch (error) {
-            if (error instanceof FleetError)
-                throw error;
-            throw new FleetError(abort?.aborted ? 'cancelled' : 'connection_error', 'Encrypted bridge request failed', sent && mutating);
-        }
-    });
-    return client.request(request, signal);
-}
-export async function loadConfig(path) {
-    return configSchema.parse(path
-        ? JSON.parse(await readFile(path, "utf8"))
-        : { machines: [{ id: "local", transport: "local" }] });
-}
-export async function mapLimit(items, concurrency, fn) {
-    const results = new Array(items.length);
-    let next = 0;
-    await Promise.all(Array.from({ length: Math.min(concurrency, items.length) }, async () => {
-        while (next < items.length) {
-            const index = next++;
-            results[index] = await fn(items[index], index);
-        }
-    }));
-    return results;
-}
-export class Fleet {
-    config;
-    relay;
-    active = 0;
-    waiters = [];
-    constructor(config, relay) {
-        this.config = config;
-        this.relay = relay;
-    }
-    scoped(context) {
-        return { config: this.config, request: (machineId, method, path, body, signal, timeout) => this.request(machineId, method, path, body, signal, timeout, context) };
-    }
-    async request(machineId, method, path, body, signal, timeoutMs = this.config.timeoutMs, context) {
-        const machine = this.config.machines.find((m) => m.id === machineId);
-        if (!machine)
-            throw new FleetError("unknown_machine", `Unknown machine: ${machineId}`);
-        const request = requestSchema.parse({ method, path, body, timeoutMs });
-        if (!context)
-            throw new FleetError('approval_required', 'An encrypted MCP grant is required');
-        if (this.active >= this.config.concurrency)
-            await new Promise((resolve, reject) => {
-                const acquire = () => { signal?.removeEventListener("abort", cancel); resolve(); };
-                const cancel = () => {
-                    const index = this.waiters.indexOf(acquire);
-                    if (index !== -1)
-                        this.waiters.splice(index, 1);
-                    signal?.removeEventListener("abort", cancel);
-                    reject(new FleetError("cancelled", "Request cancelled before dispatch"));
-                };
-                this.waiters.push(acquire);
-                signal?.addEventListener("abort", cancel, { once: true });
-                if (signal?.aborted)
-                    cancel();
-            });
-        else
-            this.active++;
-        try {
-            await context.revalidate?.();
-            if (signal?.aborted)
-                throw new FleetError("cancelled", "Request cancelled before dispatch");
-            if (machine.transport === "relay") {
-                if (!this.relay)
-                    throw new FleetError("configuration_error", "Relay transport is not configured");
-                return await this.relay(machine.userId, machine.id, request, signal, context);
-            }
-            if (machine.transport === "local")
-                return await localRequest(request, machine.bridgeFile, signal, context, machine.id);
-            if (machine.transport === "http") {
-                return await secureHttpRequest(machine.url, context, machine.id, request, signal);
-            }
-            throw new FleetError('upgrade_required', 'Legacy SSH MCP adapters do not negotiate encrypted endpoint framing');
-        }
-        finally {
-            const next = this.waiters.shift();
-            if (next)
-                next();
-            else
-                this.active--;
-        }
-    }
-}
-//# sourceMappingURL=fleet.js.map

package/dist/mcp/fleet.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fleet.js","sourceRoot":"","sources":["../../src/mcp/fleet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EAAE,eAAe,EAA0B,MAAM,oBAAoB,CAAC;AAE7E,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC;AACF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/D,QAAQ,EAAE,CAAC;SACR,KAAK,CACJ,CAAC,CAAC,kBAAkB,CAAC,WAAW,EAAE;QAChC,CAAC;aACE,MAAM,CAAC;YACN,GAAG,WAAW;YACd,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;SAC3B,CAAC;aACD,MAAM,EAAE;QACX,CAAC;aACE,MAAM,CAAC;YACN,GAAG,WAAW;YACd,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAClC,CAAC;aACD,MAAM,EAAE;QACX,CAAC;aACE,MAAM,CAAC;YACN,GAAG,WAAW;YACd,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC;YACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;SACnD,CAAC;aACD,MAAM,EAAE;QACX,CAAC;aACE,MAAM,CAAC;YACN,GAAG,WAAW;YACd,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SAC5B,CAAC;aACD,MAAM,EAAE;KACZ,CAAC,CACH;SACA,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,IAAI,CAAC;CACb,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC3B,IACE,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;QAEzE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;IAC1E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;QAC7B,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACzB,IACE,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,QAAQ,KAAK,GAAG;gBAClB,CAAC,CACC,CAAC,CAAC,QAAQ,KAAK,QAAQ;oBACvB,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO;wBACrB,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAC5D,EACD,CAAC;gBACD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,OAAO,EACL,4FAA4F;iBAC/F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,KAAK,CACJ,oMAAoM,CACrM;IACH,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;CACjD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,OAAO,UAAW,SAAQ,KAAK;IAExB;IAEA;IACA;IAJX,YACW,IAAY,EACrB,OAAe,EACN,iBAAiB,KAAK,EACtB,MAAe;QAExB,KAAK,CAAC,OAAO,CAAC,CAAC;QALN,SAAI,GAAJ,IAAI,CAAQ;QAEZ,mBAAc,GAAd,cAAc,CAAQ;QACtB,WAAM,GAAN,MAAM,CAAS;IAG1B,CAAC;CACF;AACD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,KAAK,YAAY,aAAa;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;IAC1I,IAAI,KAAK,YAAY,UAAU;QAC7B,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC;IACJ,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,kBAAkB;QAC3B,cAAc,EAAE,KAAK;KACtB,CAAC;AACJ,CAAC;AACD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAc,EACd,KAAa,EACb,OAAsB,EACtB,MAAoB;IAEpB,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YACrD,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EACF,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;YACvE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO;SAC9D,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QACrC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,MAAM;YACR,IAAI,CAAC;gBACH,OAAO,IAAI,EAAE,CAAC;oBACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC5C,IAAI,IAAI;wBAAE,MAAM;oBAChB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;oBACzB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;wBACpB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;wBACtB,MAAM,IAAI,UAAU,CAClB,oBAAoB,EACpB,mDAAmD,EACnD,OAAO,CAAC,MAAM,KAAK,KAAK,CACzB,CAAC;oBACJ,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,MAAM,GACV,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;gBAC7B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;gBAC3D,CAAC,CAAC,yBAAyB,CAAC;YAChC,MAAM,IAAI,UAAU,CAClB,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EACnO,GAAG,MAAM,UAAU,GAAG,CAAC,MAAM,GAAG,EAChC,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAC7C,GAAG,CAAC,MAAM,CACX,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU;YAAE,MAAM,KAAK,CAAC;QAC7C,MAAM,IAAI,UAAU,CAClB,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,OAAO,CAAC,OAAO;gBACf,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,kBAAkB,EACxB,mEAAmE,EACnE,OAAO,CAAC,MAAM,KAAK,KAAK,CACzB,CAAC;IACJ,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAsB,EACtB,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,EACrD,MAAoB,EACpB,OAA2B,EAC3B,SAAkB;IAElB,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,kEAAkE,CAAC,CAAC;IACzI,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QACH,WAAW,GAAG,CAAC;aACZ,MAAM,CAAC;YACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;SACzC,CAAC;aACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAClB,qBAAqB,EACrB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CACtB,oBAAoB,WAAW,CAAC,IAAI,EAAE,EACtC,OAAO,EACP,SAAS,EACT,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,EAC5B,MAAM,CACP,CAAC;AACJ,CAAC;AACD,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAA0B,EAAE,SAAiB,EAAE,OAAsB,EAAE,MAAoB;IAC1I,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC5H,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,6CAA6C,CAAC,CAAC;YAC/H,IAAI,GAAG,IAAI,CAAC;YACZ,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACxE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3P,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,cAAc,EAAE,0CAA0C,EAAE,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpN,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,sCAAsC,EAAE,QAAQ,CAAC,CAAC;YACpG,IAAI,IAAI,GAAG,CAAC,CAAC;YAAC,MAAM,MAAM,GAAiB,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,OAAO,IAAI,EAAE,CAAC;oBAAC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAAC,IAAI,KAAK,CAAC,IAAI;wBAAE,MAAM;oBAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;oBAAC,IAAI,IAAI,GAAG,kBAAkB,EAAE,CAAC;wBAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;wBAAC,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,wCAAwC,EAAE,QAAQ,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;YAChS,CAAC;oBAAS,CAAC;gBAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAAC,CAAC;YACnC,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,UAAU;gBAAE,MAAM,KAAK,CAAC;YAC7C,MAAM,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,EAAE,iCAAiC,EAAE,IAAI,IAAI,QAAQ,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAa;IAC5C,OAAO,YAAY,CAAC,KAAK,CACvB,IAAI;QACF,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CACxD,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAU,EACV,WAAmB,EACnB,EAA0C;IAE1C,MAAM,OAAO,GAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;QACrE,OAAO,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,OAAO,KAAK;IAIL;IACD;IAJF,MAAM,GAAG,CAAC,CAAC;IACX,OAAO,GAAsB,EAAE,CAAC;IACxC,YACW,MAAmB,EACpB,KAMa;QAPZ,WAAM,GAAN,MAAM,CAAa;QACpB,UAAK,GAAL,KAAK,CAMQ;IACpB,CAAC;IACJ,MAAM,CAAC,OAA0B;QAC/B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;IACrK,CAAC;IACD,KAAK,CAAC,OAAO,CACX,SAAiB,EACjB,MAA+B,EAC/B,IAAY,EACZ,IAAc,EACd,MAAoB,EACpB,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EACjC,OAA2B;QAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACrE,IAAI,CAAC,OAAO;YACV,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,oBAAoB,SAAS,EAAE,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,oCAAoC,CAAC,CAAC;QAC9F,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW;YACxC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;gBACnF,MAAM,MAAM,GAAG,GAAG,EAAE;oBAClB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBAC5C,IAAI,KAAK,KAAK,CAAC,CAAC;wBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;oBAChD,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC7C,MAAM,CAAC,IAAI,UAAU,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC,CAAC;gBAC3E,CAAC,CAAC;gBACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3B,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1D,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,EAAE,CAAC;YAChC,CAAC,CAAC,CAAC;;YACA,IAAI,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;YAC7B,IAAI,MAAM,EAAE,OAAO;gBACjB,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;YACzE,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;gBAClC,IAAI,CAAC,IAAI,CAAC,KAAK;oBACb,MAAM,IAAI,UAAU,CAClB,qBAAqB,EACrB,mCAAmC,CACpC,CAAC;gBACJ,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO;gBAC/B,OAAO,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACtF,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;gBACjC,OAAO,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,qEAAqE,CAAC,CAAC;QAClH,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,IAAI;gBAAE,IAAI,EAAE,CAAC;;gBACZ,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;CACF"}

package/dist/mcp/http.d.ts

@@ -1,42 +0,0 @@
-import { z } from "zod";
-import type { FleetRelay } from "./relay.js";
-import { FtownOAuthProvider } from "./oauth.js";
-import { SecurityEventStore } from './security-events.js';
-export declare const gatewayConfigSchema: z.ZodObject<{
-    publicUrl: z.ZodString;
-    loginUrl: z.ZodString;
-    allowedOrigins: z.ZodDefault<z.ZodArray<z.ZodString>>;
-    fleet: z.ZodObject<{
-        concurrency: z.ZodDefault<z.ZodNumber>;
-        timeoutMs: z.ZodDefault<z.ZodNumber>;
-        machines: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
-            transport: z.ZodLiteral<"relay">;
-            userId: z.ZodString;
-            id: z.ZodString;
-            label: z.ZodOptional<z.ZodString>;
-        }, z.core.$strict>, z.ZodObject<{
-            transport: z.ZodLiteral<"local">;
-            bridgeFile: z.ZodOptional<z.ZodString>;
-            id: z.ZodString;
-            label: z.ZodOptional<z.ZodString>;
-        }, z.core.$strict>, z.ZodObject<{
-            transport: z.ZodLiteral<"ssh">;
-            host: z.ZodString;
-            executable: z.ZodDefault<z.ZodString>;
-            id: z.ZodString;
-            label: z.ZodOptional<z.ZodString>;
-        }, z.core.$strict>, z.ZodObject<{
-            transport: z.ZodLiteral<"http">;
-            url: z.ZodString;
-            tokenEnv: z.ZodString;
-            id: z.ZodString;
-            label: z.ZodOptional<z.ZodString>;
-        }, z.core.$strict>], "transport">>;
-    }, z.core.$strict>;
-    access: z.ZodArray<z.ZodObject<{
-        subject: z.ZodString;
-        machines: z.ZodArray<z.ZodString>;
-    }, z.core.$strict>>;
-}, z.core.$strict>;
-export type GatewayConfig = z.infer<typeof gatewayConfigSchema>;
-export declare function createGateway(config: GatewayConfig, provider: FtownOAuthProvider, relay?: FleetRelay, audit?: Pick<SecurityEventStore, 'admit' | 'finish'>): import("express-serve-static-core").Express;