mcp-dataverse 0.2.0 → 0.2.1

package/README.md

@@ -63,33 +63,6 @@ Create or edit `.vscode/mcp.json` in your project (workspace scope) or the user-
 
 ---
 
-### Command line (`code --add-mcp`)
-
-> ⚠️ **PowerShell on Windows**: The single-quote JSON syntax is broken in PowerShell 5.1 (double quotes get stripped). Use one of the workarounds below.
-
-**Bash / Git Bash / macOS / Linux:**
-
-```bash
-code --add-mcp '{"name":"dataverse","type":"stdio","command":"npx","args":["-y","mcp-dataverse"],"env":{"DATAVERSE_ENV_URL":"https://yourorg.crm.dynamics.com"}}'
-```
-
-**PowerShell (Windows) — use escaped quotes:**
-
-```powershell
-code --add-mcp '{\"name\":\"dataverse\",\"type\":\"stdio\",\"command\":\"npx\",\"args\":[\"-y\",\"mcp-dataverse\"],\"env\":{\"DATAVERSE_ENV_URL\":\"https://yourorg.crm.dynamics.com\"}}'
-```
-
-**PowerShell — alternative using a variable:**
-
-```powershell
-$cfg = '{"name":"dataverse","type":"stdio","command":"npx","args":["-y","mcp-dataverse"],"env":{"DATAVERSE_ENV_URL":"https://yourorg.crm.dynamics.com"}}'
-code --add-mcp $cfg
-```
-
-Replace `https://yourorg.crm.dynamics.com` with your actual Dataverse environment URL.
-
----
-
 ## Authentication — automatic, no setup required
 
 **No PAC CLI, no Azure AD app registration, no credentials to configure.**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-dataverse",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "MCP Server for Microsoft Dataverse Web API",
   "type": "module",
   "main": "dist/server.js",
@@ -38,7 +38,8 @@
     "publish:npm": "node scripts/publish.mjs --npm",
     "publish:mcp": "node scripts/publish.mjs --mcp",
     "publish:dry": "node scripts/publish.mjs --dry",
-    "build": "tsc",
+    "clean": "node -e \"const {rmSync}=require('fs'); try{rmSync('dist',{recursive:true})}catch{}\"",
+    "build": "npm run clean && tsc",
     "dev": "tsx watch src/server.ts",
     "start": "node dist/server.js",
     "auth:setup": "node dist/setup-auth.js",

package/dist/auth/msal-auth-provider.d.ts

@@ -1,14 +0,0 @@
-import type { AuthProvider } from "./auth-provider.interface.js";
-import type { Config } from "../config/config.schema.js";
-export declare class MsalAuthProvider implements AuthProvider {
-    readonly environmentUrl: string;
-    private readonly msalApp;
-    private readonly scope;
-    private cachedToken;
-    private tokenExpiresAt;
-    constructor(config: Config);
-    getToken(): Promise<string>;
-    invalidateToken(): void;
-    isAuthenticated(): Promise<boolean>;
-}
-//# sourceMappingURL=msal-auth-provider.d.ts.map

package/dist/auth/msal-auth-provider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"msal-auth-provider.d.ts","sourceRoot":"","sources":["../../src/auth/msal-auth-provider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEzD,qBAAa,gBAAiB,YAAW,YAAY;IACnD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgC;IACxD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,cAAc,CAAqB;gBAE/B,MAAM,EAAE,MAAM;IAgCpB,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IA6BjC,eAAe,IAAI,IAAI;IAKjB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;CAQ1C"}

package/dist/auth/msal-auth-provider.js

@@ -1,64 +0,0 @@
-import { ConfidentialClientApplication } from "@azure/msal-node";
-export class MsalAuthProvider {
-    environmentUrl;
-    msalApp;
-    scope;
-    cachedToken = null;
-    tokenExpiresAt = null;
-    constructor(config) {
-        this.environmentUrl = config.environmentUrl;
-        if (!config.tenantId) {
-            throw new Error("MsalAuthProvider requires config.tenantId for client_credentials flow");
-        }
-        if (!config.clientId) {
-            throw new Error("MsalAuthProvider requires config.clientId for client_credentials flow");
-        }
-        if (!config.clientSecret) {
-            throw new Error("MsalAuthProvider requires config.clientSecret for client_credentials flow");
-        }
-        this.msalApp = new ConfidentialClientApplication({
-            auth: {
-                clientId: config.clientId,
-                clientSecret: config.clientSecret,
-                authority: `https://login.microsoftonline.com/${config.tenantId}`,
-            },
-        });
-        // Scope for Dataverse client_credentials: <environmentUrl>/.default
-        const baseUrl = config.environmentUrl.replace(/\/$/, "");
-        this.scope = `${baseUrl}/.default`;
-    }
-    async getToken() {
-        // Return cached token if still valid (60-second buffer before expiry)
-        if (this.cachedToken !== null &&
-            this.tokenExpiresAt !== null &&
-            new Date() < this.tokenExpiresAt) {
-            return this.cachedToken;
-        }
-        const result = await this.msalApp.acquireTokenByClientCredential({
-            scopes: [this.scope],
-        });
-        if (result === null || !result.accessToken) {
-            throw new Error("MSAL: acquireTokenByClientCredential returned no access token");
-        }
-        this.cachedToken = result.accessToken;
-        // Subtract 60 seconds from expiry to avoid using a token that is about to expire
-        this.tokenExpiresAt = result.expiresOn
-            ? new Date(result.expiresOn.getTime() - 60_000)
-            : new Date(Date.now() + 3_540_000); // fallback: 59 minutes
-        return this.cachedToken;
-    }
-    invalidateToken() {
-        this.cachedToken = null;
-        this.tokenExpiresAt = null;
-    }
-    async isAuthenticated() {
-        try {
-            await this.getToken();
-            return true;
-        }
-        catch {
-            return false;
-        }
-    }
-}
-//# sourceMappingURL=msal-auth-provider.js.map

package/dist/auth/msal-auth-provider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"msal-auth-provider.js","sourceRoot":"","sources":["../../src/auth/msal-auth-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAIjE,MAAM,OAAO,gBAAgB;IAClB,cAAc,CAAS;IACf,OAAO,CAAgC;IACvC,KAAK,CAAS;IACvB,WAAW,GAAkB,IAAI,CAAC;IAClC,cAAc,GAAgB,IAAI,CAAC;IAE3C,YAAY,MAAc;QACxB,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,6BAA6B,CAAC;YAC/C,IAAI,EAAE;gBACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,SAAS,EAAE,qCAAqC,MAAM,CAAC,QAAQ,EAAE;aAClE;SACF,CAAC,CAAC;QAEH,oEAAoE;QACpE,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,GAAG,GAAG,OAAO,WAAW,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,sEAAsE;QACtE,IACE,IAAI,CAAC,WAAW,KAAK,IAAI;YACzB,IAAI,CAAC,cAAc,KAAK,IAAI;YAC5B,IAAI,IAAI,EAAE,GAAG,IAAI,CAAC,cAAc,EAChC,CAAC;YACD,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC;YAC/D,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,CAAC,CAAC;QAEH,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,iFAAiF;QACjF,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,SAAS;YACpC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC;YAC/C,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,uBAAuB;QAE7D,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,eAAe;QACb,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF"}

package/dist/auth/pac-auth-provider.d.ts

@@ -1,18 +0,0 @@
-import type { AuthProvider } from "./auth-provider.interface.js";
-export declare class PacAuthProvider implements AuthProvider {
-    readonly environmentUrl: string;
-    private readonly pca;
-    private cachedToken;
-    private tokenExpiresAt;
-    private pendingAuth;
-    constructor(environmentUrl: string);
-    getToken(): Promise<string>;
-    invalidateToken(): void;
-    isAuthenticated(): Promise<boolean>;
-    setupViaDeviceCode(): Promise<void>;
-    private refreshToken;
-    private acquireSilently;
-    private runDeviceCodeFlow;
-    private cacheResult;
-}
-//# sourceMappingURL=pac-auth-provider.d.ts.map

package/dist/auth/pac-auth-provider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pac-auth-provider.d.ts","sourceRoot":"","sources":["../../src/auth/pac-auth-provider.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAsEjE,qBAAa,eAAgB,YAAW,YAAY;IAClD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAC9C,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,cAAc,CAAa;IACnC,OAAO,CAAC,WAAW,CAAgC;gBAEvC,cAAc,EAAE,MAAM;IAQ5B,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IAQjC,eAAe,IAAI,IAAI;IAEjB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IAInC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;YAE3B,YAAY;YAsBZ,eAAe;YASf,iBAAiB;IAqB/B,OAAO,CAAC,WAAW;CAIpB"}

package/dist/auth/pac-auth-provider.js

@@ -1,172 +0,0 @@
-import { PublicClientApplication, } from "@azure/msal-node";
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
-import { homedir } from "os";
-import { join } from "path";
-import { exec } from "child_process";
-import { platform } from "process";
-import { createCipheriv, createDecipheriv, createHash, randomBytes, } from "crypto";
-function openBrowser(url) {
-    const cmd = platform === "win32" ? `start "" "${url}"`
-        : platform === "darwin" ? `open "${url}"`
-            : `xdg-open "${url}"`;
-    exec(cmd, () => { });
-}
-function copyToClipboard(text) {
-    const cmd = platform === "win32" ? `echo|set /p="${text}"| clip`
-        : platform === "darwin" ? `printf '%s' '${text}' | pbcopy`
-            : `printf '%s' '${text}' | xclip -selection clipboard 2>/dev/null || printf '%s' '${text}' | xsel --clipboard 2>/dev/null`;
-    exec(cmd, () => { });
-}
-const PLATFORM_CLIENT_ID = "1950a258-227b-4e31-a9cf-717495945fc2";
-const CACHE_DIR = join(homedir(), ".mcp-dataverse");
-const TOKEN_CACHE_FILE = join(CACHE_DIR, "msal-cache.json");
-const DEVICE_CODE_TIMEOUT_MS = 5 * 60 * 1000;
-function getDerivedKey() {
-    const seed = [
-        process.env["COMPUTERNAME"] ?? process.env["HOSTNAME"] ?? "",
-        process.env["USERNAME"] ?? process.env["USER"] ?? "",
-        "mcp-dataverse-cache-v1",
-    ].join(".");
-    return createHash("sha256").update(seed).digest();
-}
-function encryptForDisk(plaintext) {
-    const key = getDerivedKey();
-    const iv = randomBytes(16);
-    const cipher = createCipheriv("aes-256-gcm", key, iv);
-    const encrypted = Buffer.concat([cipher.update(plaintext, "utf-8"), cipher.final()]);
-    return JSON.stringify({ v: 1, iv: iv.toString("hex"), tag: cipher.getAuthTag().toString("hex"), d: encrypted.toString("hex") });
-}
-function decryptFromDisk(raw) {
-    const parsed = JSON.parse(raw);
-    if (parsed["v"] !== 1)
-        throw new Error("Unknown cache format version");
-    const iv = Buffer.from(parsed["iv"], "hex");
-    const tag = Buffer.from(parsed["tag"], "hex");
-    const encrypted = Buffer.from(parsed["d"], "hex");
-    const decipher = createDecipheriv("aes-256-gcm", getDerivedKey(), iv);
-    decipher.setAuthTag(tag);
-    return decipher.update(encrypted).toString("utf-8") + decipher.final("utf-8");
-}
-function createCachePlugin() {
-    return {
-        beforeCacheAccess: async (cacheContext) => {
-            if (existsSync(TOKEN_CACHE_FILE)) {
-                try {
-                    const raw = readFileSync(TOKEN_CACHE_FILE, "utf-8");
-                    let serialized;
-                    try {
-                        serialized = decryptFromDisk(raw);
-                    }
-                    catch {
-                        serialized = raw;
-                    }
-                    cacheContext.tokenCache.deserialize(serialized);
-                }
-                catch { /* corrupt cache — re-auth automatically */ }
-            }
-        },
-        afterCacheAccess: async (cacheContext) => {
-            if (cacheContext.cacheHasChanged) {
-                mkdirSync(CACHE_DIR, { recursive: true });
-                writeFileSync(TOKEN_CACHE_FILE, encryptForDisk(cacheContext.tokenCache.serialize()), { encoding: "utf-8", mode: 0o600 });
-            }
-        },
-    };
-}
-export class PacAuthProvider {
-    environmentUrl;
-    pca;
-    cachedToken = null;
-    tokenExpiresAt = 0;
-    pendingAuth = null;
-    constructor(environmentUrl) {
-        this.environmentUrl = environmentUrl.replace(/\/$/, "");
-        this.pca = new PublicClientApplication({
-            auth: { clientId: PLATFORM_CLIENT_ID, authority: "https://login.microsoftonline.com/common" },
-            cache: { cachePlugin: createCachePlugin() },
-        });
-    }
-    async getToken() {
-        const now = Date.now();
-        if (this.cachedToken !== null && this.tokenExpiresAt > now + 60_000)
-            return this.cachedToken;
-        if (this.pendingAuth !== null)
-            return this.pendingAuth;
-        this.pendingAuth = this.refreshToken().finally(() => { this.pendingAuth = null; });
-        return this.pendingAuth;
-    }
-    invalidateToken() { this.cachedToken = null; this.tokenExpiresAt = 0; }
-    async isAuthenticated() {
-        try {
-            await this.getToken();
-            return true;
-        }
-        catch {
-            return false;
-        }
-    }
-    async setupViaDeviceCode() { await this.runDeviceCodeFlow(); }
-    async refreshToken() {
-        const accounts = await this.pca.getAllAccounts();
-        if (accounts.length === 0) {
-            process.stderr.write("\n[mcp-dataverse] First-time authentication required.\n" + `Environment: ${this.environmentUrl}\n` + "Open the URL below in your browser to sign in.\n\n");
-            try {
-                await this.runDeviceCodeFlow();
-                return await this.acquireSilently();
-            }
-            catch (err) {
-                const detail = err instanceof Error ? err.message : String(err);
-                throw new Error(`Authentication setup failed: ${detail}\n\nYou can also authenticate manually:\n  npx mcp-dataverse-auth ${this.environmentUrl}\nThen restart the MCP server in VS Code.`);
-            }
-        }
-        try {
-            return await this.acquireSilently();
-        }
-        catch {
-            process.stderr.write("\n[mcp-dataverse] Session expired — re-authenticating.\nOpen the URL below in your browser to sign in again.\n\n");
-            try {
-                await this.runDeviceCodeFlow();
-                return await this.acquireSilently();
-            }
-            catch (err) {
-                this.cachedToken = null;
-                const detail = err instanceof Error ? err.message : String(err);
-                throw new Error(`Re-authentication failed: ${detail}\n\nTo authenticate manually:\n  npx mcp-dataverse-auth ${this.environmentUrl}\nThen restart the MCP server in VS Code.`);
-            }
-        }
-    }
-    async acquireSilently() {
-        const accounts = await this.pca.getAllAccounts();
-        if (accounts.length === 0)
-            throw new Error("No account found in cache after authentication.");
-        const result = await this.pca.acquireTokenSilent({ scopes: [`${this.environmentUrl}/.default`], account: accounts[0] });
-        if (!result?.accessToken)
-            throw new Error("Token acquisition returned an empty access token.");
-        this.cacheResult(result);
-        return result.accessToken;
-    }
-    async runDeviceCodeFlow() {
-        const result = await Promise.race([
-            this.pca.acquireTokenByDeviceCode({
-                scopes: [`${this.environmentUrl}/.default`],
-                deviceCodeCallback: (response) => {
-                    process.stderr.write(`\n[mcp-dataverse] Sign in required\n` +
-                        `Code: ${response.userCode}\n` +
-                        `URL:  ${response.verificationUri}\n` +
-                        `\n→ Browser opened automatically. Paste the code and sign in.\n` +
-                        `  (code copied to clipboard)\n\n`);
-                    copyToClipboard(response.userCode);
-                    openBrowser(response.verificationUri);
-                },
-            }),
-            new Promise((_, reject) => setTimeout(() => reject(new Error("Authentication timed out after 5 minutes. Please try again.")), DEVICE_CODE_TIMEOUT_MS)),
-        ]);
-        if (result)
-            this.cacheResult(result);
-    }
-    cacheResult(result) {
-        this.cachedToken = result.accessToken;
-        this.tokenExpiresAt = result.expiresOn?.getTime() ?? Date.now() + 55 * 60 * 1000;
-    }
-}
-//# sourceMappingURL=pac-auth-provider.js.map

package/dist/auth/pac-auth-provider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pac-auth-provider.js","sourceRoot":"","sources":["../../src/auth/pac-auth-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAIxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,WAAW,GACZ,MAAM,QAAQ,CAAC;AAGhB,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,GAAG,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,GAAG,GAAG;QACpD,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG;YACzC,CAAC,CAAC,aAAa,GAAG,GAAG,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAoC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,GAAG,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,IAAI,SAAS;QAC9D,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,IAAI,YAAY;YAC1D,CAAC,CAAC,gBAAgB,IAAI,8DAA8D,IAAI,kCAAkC,CAAC;IAC7H,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAoC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,kBAAkB,GAAG,sCAAsC,CAAC;AAClE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;AACpD,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAC5D,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7C,SAAS,aAAa;IACpB,MAAM,IAAI,GAAG;QACX,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE;QAC5D,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;QACpD,wBAAwB;KACzB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrF,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAClI,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IAC1D,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACvE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAW,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAW,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAW,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;IACtE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO;QACL,iBAAiB,EAAE,KAAK,EAAE,YAA+B,EAAE,EAAE;YAC3D,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;oBACpD,IAAI,UAAkB,CAAC;oBACvB,IAAI,CAAC;wBAAC,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,UAAU,GAAG,GAAG,CAAC;oBAAC,CAAC;oBACtE,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;gBAClD,CAAC;gBAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,gBAAgB,EAAE,KAAK,EAAE,YAA+B,EAAE,EAAE;YAC1D,IAAI,YAAY,CAAC,eAAe,EAAE,CAAC;gBACjC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1C,aAAa,CAAC,gBAAgB,EAAE,cAAc,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3H,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,eAAe;IACjB,cAAc,CAAS;IACf,GAAG,CAA0B;IACtC,WAAW,GAAkB,IAAI,CAAC;IAClC,cAAc,GAAW,CAAC,CAAC;IAC3B,WAAW,GAA2B,IAAI,CAAC;IAEnD,YAAY,cAAsB;QAChC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,GAAG,IAAI,uBAAuB,CAAC;YACrC,IAAI,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,0CAA0C,EAAE;YAC7F,KAAK,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,cAAc,GAAG,GAAG,GAAG,MAAM;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QAC7F,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QACvD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,eAAe,KAAW,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC;IAE7E,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,kBAAkB,KAAoB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;IAErE,KAAK,CAAC,YAAY;QACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,GAAG,gBAAgB,IAAI,CAAC,cAAc,IAAI,GAAG,oDAAoD,CAAC,CAAC;YACjL,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAAC,OAAO,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YAAC,CAAC;YAC5E,OAAO,GAAG,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,qEAAqE,IAAI,CAAC,cAAc,2CAA2C,CAAC,CAAC;YAC7L,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAAC,CAAC;QAC5C,MAAM,CAAC;YACL,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kHAAkH,CAAC,CAAC;YACzI,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAAC,OAAO,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YAAC,CAAC;YAC5E,OAAO,GAAG,EAAE,CAAC;gBACX,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBACxB,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,2DAA2D,IAAI,CAAC,cAAc,2CAA2C,CAAC,CAAC;YAChL,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,WAAW,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;QACzH,IAAI,CAAC,MAAM,EAAE,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC/F,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC;gBAChC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,WAAW,CAAC;gBAC3C,kBAAkB,EAAE,CAAC,QAAQ,EAAE,EAAE;oBAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sCAAsC;wBACtC,SAAS,QAAQ,CAAC,QAAQ,IAAI;wBAC9B,SAAS,QAAQ,CAAC,eAAe,IAAI;wBACrC,iEAAiE;wBACjE,kCAAkC,CACnC,CAAC;oBACF,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACnC,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;gBACxC,CAAC;aACF,CAAC;YACF,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;SAC9J,CAAC,CAAC;QACH,IAAI,MAAM;YAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAEO,WAAW,CAAC,MAA4B;QAC9C,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACnF,CAAC;CACF"}