neotoma 0.22.0 → 0.22.2

package/dist/middleware/db_abort_context.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Request-cancellation context for database reads (issue #2217).
+ *
+ * A client that gives up — an HTTP connection closed, an MCP call cancelled —
+ * does not stop the server-side work it started. On the worker-hosted local
+ * backend that work is holding a reader-pool slot, and the pool is small: two
+ * abandoned reads were enough to make a hosted instance serve nothing while
+ * `/health` stayed green, because nothing reclaimed their readers.
+ *
+ * This middleware binds an AbortSignal that fires when the response closes
+ * before it finished, and runs the rest of the request inside
+ * {@link withDbAbortSignal}. Reads issued downstream pick the signal up
+ * ambiently; when it fires, the reader executing them is terminated and the
+ * slot returns to the pool immediately rather than at the query's natural end.
+ *
+ * Deliberately reads-only. Writes are not abandoned: a caller hanging up
+ * mid-write must not leave a half-applied mutation, so `routeWrite` and
+ * everything inside a transaction ignore the signal (see
+ * `worker_file_database.ts`). Backends other than the worker-hosted one ignore
+ * the context entirely, so mounting this is a no-op for them.
+ */
+import type { RequestHandler } from "express";
+export declare function dbAbortContext(): RequestHandler;
+//# sourceMappingURL=db_abort_context.d.ts.map

package/dist/middleware/db_abort_context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db_abort_context.d.ts","sourceRoot":"","sources":["../../src/middleware/db_abort_context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAyB,cAAc,EAAY,MAAM,SAAS,CAAC;AAG/E,wBAAgB,cAAc,IAAI,cAAc,CAkB/C"}

package/dist/middleware/db_abort_context.js

@@ -0,0 +1,41 @@
+/**
+ * Request-cancellation context for database reads (issue #2217).
+ *
+ * A client that gives up — an HTTP connection closed, an MCP call cancelled —
+ * does not stop the server-side work it started. On the worker-hosted local
+ * backend that work is holding a reader-pool slot, and the pool is small: two
+ * abandoned reads were enough to make a hosted instance serve nothing while
+ * `/health` stayed green, because nothing reclaimed their readers.
+ *
+ * This middleware binds an AbortSignal that fires when the response closes
+ * before it finished, and runs the rest of the request inside
+ * {@link withDbAbortSignal}. Reads issued downstream pick the signal up
+ * ambiently; when it fires, the reader executing them is terminated and the
+ * slot returns to the pool immediately rather than at the query's natural end.
+ *
+ * Deliberately reads-only. Writes are not abandoned: a caller hanging up
+ * mid-write must not leave a half-applied mutation, so `routeWrite` and
+ * everything inside a transaction ignore the signal (see
+ * `worker_file_database.ts`). Backends other than the worker-hosted one ignore
+ * the context entirely, so mounting this is a no-op for them.
+ */
+import { withDbAbortSignal } from "../repositories/worker/worker_file_database.js";
+export function dbAbortContext() {
+    return (req, res, next) => {
+        const controller = new AbortController();
+        // `close` fires on both a completed response and an aborted one. Only the
+        // latter should cancel: aborting after a normal finish would tear down a
+        // reader that is legitimately serving the NEXT request, since the signal
+        // is consulted at dispatch time.
+        const onClose = () => {
+            if (!res.writableEnded)
+                controller.abort();
+        };
+        res.once("close", onClose);
+        res.once("finish", () => res.removeListener("close", onClose));
+        withDbAbortSignal(controller.signal, () => {
+            next();
+        });
+    };
+}
+//# sourceMappingURL=db_abort_context.js.map

package/dist/middleware/db_abort_context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db_abort_context.js","sourceRoot":"","sources":["../../src/middleware/db_abort_context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAEnF,MAAM,UAAU,cAAc;IAC5B,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC/D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QAEzC,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,iCAAiC;QACjC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,CAAC,GAAG,CAAC,aAAa;gBAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QAC7C,CAAC,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAE/D,iBAAiB,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE;YACxC,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/proxy/mcp_stdio_proxy.d.ts

@@ -49,12 +49,83 @@ export declare class SessionState {
     clearSession(): void;
 }
 /**
- * Exported for unit tests — matches `src/actions.ts` Streamable HTTP unknown-session
- * copy. Accepts 404 (current, spec-compliant status per MCP Streamable HTTP session
- * management) and 503 (prior status, retained so this proxy still recovers against
- * older/unpatched Neotoma server instances).
+ * True when a downstream response means "your MCP session is gone, re-initialize"
+ * (neotoma#2312). Exported for unit tests.
+ *
+ * Keyed on THREE things together, and each one is load-bearing:
+ *
+ * 1. **Status is 404 or 503.** 404 is the spec-compliant status per MCP Streamable
+ *    HTTP session management (neotoma#1923); 503 was the prior status and is retained
+ *    so this proxy still recovers against older/unpatched Neotoma server instances.
+ *    401 is deliberately excluded — `src/actions.ts` returns `-32001` on four separate
+ *    auth failures (invalid/expired bearer, encryption-mode token, unauthenticated POST,
+ *    invalid connection id). Those are not session loss, and replaying `initialize`
+ *    against them would spin the retry loop against a credential problem the replay
+ *    cannot fix, burning `maxAttempts` and masking the real error from the operator.
+ *
+ * 2. **The body carries JSON-RPC `error.code === -32001`.** This is what distinguishes
+ *    a session loss from a genuine routing 404 (a missing route, a misconfigured
+ *    downstream URL), which must surface as an error rather than be retried.
+ *
+ * 3. **The message says the session is unknown.** The code alone is not sufficient,
+ *    since `-32001` is reused for auth; the message keeps an unrelated future
+ *    `-32001` on 404/503 from being read as session loss.
+ *
+ * A body that is not parseable JSON-RPC (no code recoverable) still qualifies on the
+ * message alone, so a server that wraps or strips the envelope does not regress
+ * recovery that worked before this change.
  */
 export declare function isRecoverableMcpSessionLostError(status: number, bodyText: string): boolean;
+/**
+ * How an `initialize` failure is classified (neotoma#2321). Exported for tests.
+ *
+ * The distinction that matters is not "did it fail" but "did anything happen
+ * server-side, and can a replay fix it":
+ *
+ * - `retryable_transport` — the request never reached a server that answered.
+ * - `retryable_server` — a server answered and reported its own failure.
+ * - `auth_rejected` — a server answered and refused the credential.
+ * - `other_terminal` — anything else; retrying is not known to be safe or useful.
+ */
+export type InitializeFailureClass = "retryable_transport" | "retryable_server" | "auth_rejected" | "other_terminal";
+/**
+ * Classify a *handshake* failure (neotoma#2321).
+ *
+ * This is deliberately a separate predicate from {@link isRecoverableMcpSessionLostError},
+ * which answers a different question — "was an established session lost" — and
+ * must keep answering only that. On the initialize path there is no session yet,
+ * so session-loss reasoning does not apply at all.
+ *
+ * Each class is keyed on more than one signal, following the discipline
+ * neotoma#2320 established for the session-loss predicate:
+ *
+ * 1. **`auth_rejected` is keyed on HTTP 401**, not on `-32001`. `src/actions.ts`
+ *    returns `-32001` from four separate auth paths (invalid/expired bearer,
+ *    encryption-mode token, unauthenticated POST, invalid connection id) — and
+ *    every one of them returns **401**, while the session-loss path returns 404.
+ *    The status is therefore the reliable discriminator and the shared `-32001`
+ *    is not. Retrying an auth rejection would hammer a server that is correctly
+ *    refusing a credential a replay cannot change, so this exclusion is checked
+ *    FIRST and no later rule can override it.
+ *
+ * 2. **`retryable_server` requires evidence the server itself failed** — an HTTP
+ *    5xx, or a JSON-RPC `-32603`. The `-32603` arm is load-bearing beyond the
+ *    5xx one: when the crash happens after response headers are already sent,
+ *    `src/actions.ts` cannot restate the status, so the internal error rides out
+ *    through an otherwise-200 response. That is the exact shape of the
+ *    "DB request aborted by caller" handshake failure in neotoma#2316.
+ *
+ * 3. **A 4xx that is not 401 is `other_terminal`.** A 400 or a routing 404 is a
+ *    client/config error; replaying it just burns the budget and hides the cause.
+ *
+ * Note what is deliberately absent: no rule keys on `-32001` alone. Auth and
+ * session loss share that code, so it cannot by itself justify a retry.
+ */
+export declare function classifyInitializeFailure(input: {
+    status?: number;
+    bodyText?: string;
+    networkError?: boolean;
+}): InitializeFailureClass;
 export interface ProxyLoopState {
     session: SessionState;
     /** Last downstream initialize body (JSON), after clientInfo injection — replayed on session loss. */
@@ -64,6 +135,34 @@ export interface ProxyLoopState {
 export declare function createLoopState(): ProxyLoopState;
 export declare function formatDownstreamErrorMessage(status: number, detail: string): string;
 type EmitFn = (payload: unknown) => void;
+/**
+ * True when `payload` is a JSON-RPC *response* (it carries `result` or
+ * `error`). Server-initiated requests and notifications are not responses and
+ * are never correlated against the pending request's id.
+ */
+export declare function isJsonRpcResponse(payload: unknown): payload is {
+    id?: unknown;
+};
+/**
+ * Guard against neotoma#2272: a response describing a DIFFERENT caller's write.
+ *
+ * The proxy used to forward whatever envelope downstream returned, so a payload
+ * belonging to another in-flight call could be delivered as the answer to this
+ * one. That is strictly worse than a failed write: the entire discipline for an
+ * append-only store under load is "don't trust a success code, re-read the
+ * entity", and that assumes the response at least says WHICH write it
+ * describes. An agent that stores the returned `entity_id` would attach
+ * subsequent work to the wrong parent, and no idempotency key can detect it —
+ * the mismatch is downstream of the write.
+ *
+ * A response whose id does not match the request is therefore dropped and
+ * replaced with an explicit error, so the caller retries or verifies rather
+ * than silently adopting another caller's entity id. Notifications and
+ * server-initiated requests (no id, no result/error) pass through untouched.
+ *
+ * Returns the payload to emit, or null to drop it.
+ */
+export declare function correlateResponse(payload: unknown, requestId: unknown): unknown | null;
 /** Default per-request downstream timeout (ms) — below typical harness MCP timeouts so a hang retries rather than surfacing as "unavailable". */
 export declare const DEFAULT_REQUEST_TIMEOUT_MS = 15000;
 /** Default total attempts (initial + retries) to recover a lost MCP session. */
@@ -76,6 +175,23 @@ export declare function backoffMs(attempt: number): number;
  * moved on to a retry, and a late success is harmless.
  */
 export declare function withTimeout<T>(p: Promise<T>, ms: number): Promise<T>;
+/**
+ * Wall-clock ceiling for retrying a failed handshake (neotoma#2321).
+ *
+ * Attempt count alone is not a sufficient bound here. The proxy is a stdio child
+ * and emits nothing until `dispatchCore` resolves, so the client sits blocked on
+ * its own `initialize` timeout for the whole retry window — 60s by default in the
+ * MCP SDK (`DEFAULT_REQUEST_TIMEOUT_MSEC`). Four attempts that each burn the full
+ * 15s request timeout plus backoff would total ~62s and blow past that, turning a
+ * recoverable handshake into a client-side abort — the very outcome this retry
+ * exists to prevent.
+ *
+ * 45s leaves headroom under the default client budget while still spanning the
+ * fast-failure cases this fix targets (ECONNREFUSED, socket close, 5xx/-32603 all
+ * return in well under a second, so the whole window is a couple of seconds of
+ * backoff). Overridable via NEOTOMA_MCP_PROXY_HANDSHAKE_BUDGET_MS.
+ */
+export declare const DEFAULT_HANDSHAKE_RETRY_BUDGET_MS = 45000;
 /** Injected transport for {@link dispatchCore}: real impl wraps sendDownstream; tests pass a fake. */
 export interface DispatchDeps {
     send: (headers: Record<string, string>, body: string) => Promise<Response>;
@@ -83,6 +199,10 @@ export interface DispatchDeps {
     sleep: (ms: number) => Promise<void>;
     timeoutMs: number;
     maxAttempts: number;
+    /** Wall-clock ceiling for handshake retries. Tests inject a clock; production uses Date.now. */
+    now?: () => number;
+    /** Total ms the handshake retry loop may span. Defaults to DEFAULT_HANDSHAKE_RETRY_BUDGET_MS. */
+    handshakeBudgetMs?: number;
 }
 /**
  * Forward one JSON-RPC message downstream, recovering automatically from a
@@ -96,8 +216,16 @@ export interface DispatchDeps {
  * cached `initialize` is replayed downstream and the message retried, up to
  * `maxAttempts` with exponential backoff. The client's stdout only ever sees
  * the final result, so backend restarts become invisible instead of failing
- * the whole session. `initialize` itself is never retried here — the client
- * owns the handshake.
+ * the whole session.
+ *
+ * `initialize` takes a SEPARATE path (neotoma#2321). Session-loss recovery
+ * cannot help a handshake that never established — there is no session to
+ * recover and no cached handshake to replay — so a failed `initialize` used to
+ * be permanent for the life of the client, leaving every session opened during
+ * an outage dark long after the backend recovered. It is now retried, but only
+ * on a classified failure ({@link classifyInitializeFailure}): a transport
+ * failure that never reached a server, or a server that answered with its own
+ * internal failure. An `initialize` refused for authentication is never retried.
  */
 export declare function dispatchCore(deps: DispatchDeps, loopState: ProxyLoopState, config: ProxyConfig, message: Record<string, unknown>): Promise<void>;
 export declare function runProxy(config: ProxyConfig): Promise<void>;

package/dist/proxy/mcp_stdio_proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp_stdio_proxy.d.ts","sourceRoot":"","sources":["../../src/proxy/mcp_stdio_proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAIlE,eAAO,MAAM,mBAAmB,sBAAsB,CAAC;AACvD,eAAO,MAAM,sBAAsB,8BAA8B,CAAC;AAGlE,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAgED,qBAAa,YAAY;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAQ;IAEhC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;IAM7C,OAAO,CAAC,eAAe,EAAE,OAAO,GAAG,IAAI;IAKvC,6EAA6E;IAC7E,YAAY,IAAI,IAAI;CAGrB;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAM1F;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,qGAAqG;IACrG,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,oFAAoF;AACpF,wBAAgB,eAAe,IAAI,cAAc,CAEhD;AAwCD,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAInF;AAED,KAAK,MAAM,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;AAmFzC,iJAAiJ;AACjJ,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAuBtC,oEAAoE;AACpE,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEjD;AAUD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAgBpE;AAED,sGAAsG;AACtG,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,cAAc,EACzB,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAuFf;AAqBD,wBAAsB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA6BjE"}
+{"version":3,"file":"mcp_stdio_proxy.d.ts","sourceRoot":"","sources":["../../src/proxy/mcp_stdio_proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAIlE,eAAO,MAAM,mBAAmB,sBAAsB,CAAC;AACvD,eAAO,MAAM,sBAAsB,8BAA8B,CAAC;AAGlE,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAgED,qBAAa,YAAY;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAQ;IAEhC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;IAM7C,OAAO,CAAC,eAAe,EAAE,OAAO,GAAG,IAAI;IAKvC,6EAA6E;IAC7E,YAAY,IAAI,IAAI;CAGrB;AAkCD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAK1F;AAKD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,sBAAsB,GAC9B,qBAAqB,GACrB,kBAAkB,GAClB,eAAe,GACf,gBAAgB,CAAC;AAErB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,GAAG,sBAAsB,CAgBzB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,qGAAqG;IACrG,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,oFAAoF;AACpF,wBAAgB,eAAe,IAAI,cAAc,CAEhD;AAwCD,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAInF;AAED,KAAK,MAAM,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;AAqBzC;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI;IAAE,EAAE,CAAC,EAAE,OAAO,CAAA;CAAE,CAI/E;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,CAWtF;AAkLD,iJAAiJ;AACjJ,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAuBtC,oEAAoE;AACpE,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEjD;AAUD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAgBpE;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,iCAAiC,QAAS,CAAC;AAExD,sGAAsG;AACtG,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,gGAAgG;IAChG,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,iGAAiG;IACjG,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,cAAc,EACzB,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAqNf;AAqBD,wBAAsB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA6BjE"}