network-ai 5.10.2 → 5.11.0

package/dist/esm/lib/mcp-tools-extended.js

@@ -0,0 +1,371 @@
+"use strict";
+/**
+ * Extended MCP Tools — Phase 6 Part 2
+ *
+ * Exposes budget, token, and audit operations as MCP-compatible tools so
+ * an external AI agent can manage Network-AI's security and resource planes
+ * without any code changes.
+ *
+ * Tool groups:
+ *   Budget  — budget_status, budget_spend, budget_reset, budget_set_ceiling, budget_get_log
+ *   Token   — token_validate, token_revoke, token_create
+ *   Audit   — audit_query, audit_tail
+ *
+ * @module mcp-tools-extended
+ * @version 1.0.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExtendedMcpTools = void 0;
+const node_fs_1 = require("node:fs");
+// ============================================================================
+// TOOL DEFINITIONS
+// ============================================================================
+const EXTENDED_TOOL_DEFINITIONS = [
+    // ---- Budget ---------------------------------------------------------------
+    {
+        name: 'budget_status',
+        description: 'Get a read-only snapshot of the global FederatedBudget: ceiling, total spent, remaining tokens, and per-agent spend breakdown. Never modifies budget state. Returns {ok:true, ceiling, spent, remaining, perAgent:{agentId:tokensSpent}}. Returns {ok:false, error:"Budget not available"} if no budget is configured. agent_id is recorded in the audit log only — it does not filter results. Call before budget_spend to check available capacity; use budget_get_log for a full timestamped transaction history.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                agent_id: { type: 'string', description: 'Calling agent identifier (for audit)' },
+            },
+            required: ['agent_id'],
+        },
+    },
+    {
+        name: 'budget_spend',
+        description: 'Deduct tokens from the global FederatedBudget on behalf of an agent. Returns {ok:true, allowed:true, spent, remaining} when approved, or {ok:true, allowed:false, deniedReason, remaining} when the ceiling would be exceeded. Returns {ok:false, error:"..."} if tokens is not a positive integer. tokens represents the estimated cost of the upcoming LLM call — pass the expected usage before invoking the model; agent_id is tracked individually in the spend log and reported by budget_status. Call budget_status first to check remaining balance; never attempt an LLM call after receiving allowed:false.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                agent_id: { type: 'string', description: 'The agent spending tokens' },
+                tokens: { type: 'string', description: 'Number of tokens to spend (positive integer)' },
+            },
+            required: ['agent_id', 'tokens'],
+        },
+    },
+    {
+        name: 'budget_reset',
+        description: 'Reset all agent spend counters to zero while preserving the ceiling. Returns {ok:true, reset:true, ceiling} on success. Returns {ok:false, error:"confirm must be \\"yes\\""} if the confirm parameter is not "yes" — this guard prevents accidental resets. Do not reset mid-task if other agents are actively spending — use only at the start of a new task cycle or after all agents have finished. Call budget_status before and after to verify the reset took effect.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                agent_id: { type: 'string', description: 'Calling agent identifier (for audit)' },
+                confirm: { type: 'string', description: 'Must be "yes" to prevent accidental resets' },
+            },
+            required: ['agent_id', 'confirm'],
+        },
+    },
+    {
+        name: 'budget_set_ceiling',
+        description: 'Dynamically change the global token ceiling for all agents. Returns {ok:true, ceiling, previous} on success. Returns {ok:false, error:"..."} if ceiling is not a positive number. Changes take effect immediately — lowering below current spend will deny all future budget_spend calls until counters are reset via budget_reset; raising allows previously blocked agents to resume. ceiling must be a positive integer (total token budget across all agents); agent_id is recorded in the audit log. Avoid lowering the ceiling while agents are actively running; call budget_status first to check the current spend level.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                agent_id: { type: 'string', description: 'Calling agent identifier (for audit)' },
+                ceiling: { type: 'string', description: 'New ceiling value (positive number)' },
+            },
+            required: ['agent_id', 'ceiling'],
+        },
+    },
+    {
+        name: 'budget_get_log',
+        description: 'Return a chronological list of all token spend transactions. Read-only — never modifies budget state. Returns {ok:true, log:[{agentId, tokens, timestamp}], count}. Returns {ok:false, error:"..."} if the budget is not available. Use limit to cap the number of entries returned (default 50); prefer budget_status for a summary view. Useful for auditing which agents consumed the most tokens in a task cycle.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                agent_id: { type: 'string', description: 'Calling agent identifier' },
+                limit: { type: 'string', description: 'Maximum number of entries to return (default: 50)' },
+            },
+            required: ['agent_id'],
+        },
+    },
+    // ---- Token ----------------------------------------------------------------
+    {
+        name: 'token_create',
+        description: 'Issue a new HMAC/Ed25519-signed security token for an agent scoped to a resource type and permission level. Each call produces a unique token with a fixed expiry managed by the token manager. Returns {ok:true, token:{tokenId, agentId, resourceType, scope, issuedAt, expiresAt, signature}}. Returns {ok:false, error:"..."} if the token manager is unavailable. resource_type is a free-form string identifying the protected resource (e.g. "FILE_SYSTEM", "BLACKBOARD", "API"); scope controls permission level (e.g. "read", "write", "admin"). Pass the full returned token object as token_json to token_validate; call token_revoke with the tokenId when access should be withdrawn.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                agent_id: { type: 'string', description: 'Agent to issue the token to' },
+                resource_type: { type: 'string', description: 'Resource type the token grants access to (e.g. "FILE_SYSTEM")' },
+                scope: { type: 'string', description: 'Permission scope (e.g. "read", "write", "admin")' },
+            },
+            required: ['agent_id', 'resource_type', 'scope'],
+        },
+    },
+    {
+        name: 'token_validate',
+        description: 'Verify a security token\'s HMAC/Ed25519 signature, confirm it has not expired, and check it has not been revoked. Read-only — never modifies token state. Returns {ok:true, valid:true, token:{...}} if the token passes all checks, or {ok:true, valid:false, reason:"..."} if it fails any check (reason indicates which check failed: "invalid_signature", "expired", or "revoked"). Returns {ok:false, error:"..."} if token_json is not valid JSON. Call before granting access to any protected resource; use token_revoke to invalidate a token that should no longer be trusted.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                token_json: {
+                    type: 'string',
+                    description: 'JSON-encoded SecureToken object (as returned by token_create)',
+                },
+            },
+            required: ['token_json'],
+        },
+    },
+    {
+        name: 'token_revoke',
+        description: 'Permanently revoke a security token by its tokenId. Returns {ok:true, revoked:true, tokenId} on success. Returns {ok:false, error:"..."} if the token manager is unavailable. Revocation is immediate and irreversible — the token will fail token_validate on all future attempts. token_id is the tokenId field from the token object returned by token_create; reason is optional but written to the audit log and aids security review. Use when an agent session ends, a permission grant expires by policy, or a token may have been compromised.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                token_id: { type: 'string', description: 'The tokenId to revoke' },
+                reason: { type: 'string', description: 'Optional reason for revocation (for audit)' },
+            },
+            required: ['token_id'],
+        },
+    },
+    // ---- Audit ----------------------------------------------------------------
+    {
+        name: 'audit_query',
+        description: 'Search the append-only audit log with optional filters. Read-only — never modifies the log. Returns {ok:true, entries:[{timestamp, agentId, eventType, outcome, details}], count}. Returns {ok:false, error:"..."} if the log file cannot be read. All filters are optional and combinable; use limit to cap results and avoid large payloads on busy systems (default 100). Use audit_tail for the most recent N entries without filtering; use this tool for compliance review, debugging, or verifying permission grant history.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                agent_id_filter: { type: 'string', description: 'Filter entries by this agent ID (optional)' },
+                event_type_filter: { type: 'string', description: 'Filter by event type (optional)' },
+                outcome_filter: { type: 'string', description: 'Filter by outcome: success, failure, denied (optional)' },
+                since_iso: { type: 'string', description: 'ISO 8601 timestamp — return entries at or after this time (optional)' },
+                limit: { type: 'string', description: 'Maximum number of entries to return (default: 100)' },
+            },
+            required: [],
+        },
+    },
+    {
+        name: 'audit_tail',
+        description: 'Return the N most recent audit log entries in ascending timestamp order (oldest-first within the tail window). Read-only — no side effects. Returns {ok:true, entries:[{timestamp, agentId, eventType, outcome, details}], count}. Returns {ok:false, error:"..."} if the log file cannot be read. n defaults to 20 and is capped at 500 — use a larger value only when debugging a busy system. Prefer audit_query for filtered searches by agent, event type, outcome, or time range; use this tool for real-time monitoring or quick post-action verification.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                n: { type: 'string', description: 'Number of recent entries to return (default: 20, max: 500)' },
+            },
+            required: [],
+        },
+    },
+];
+/**
+ * MCP tool provider for budget, token, and audit operations.
+ *
+ * All three categories are optional — only provide the services you need.
+ * Tools for missing services return a clear `{ ok: false, error }` response.
+ *
+ * @example
+ * ```typescript
+ * import { FederatedBudget, SecureTokenManager } from 'network-ai';
+ * import { ExtendedMcpTools } from 'network-ai';
+ *
+ * const tools = new ExtendedMcpTools({
+ *   budget: new FederatedBudget({ ceiling: 100_000 }),
+ *   tokenManager: new SecureTokenManager(),
+ *   auditLogPath: './data/audit_log.jsonl',
+ * });
+ *
+ * // Register with McpCombinedBridge
+ * combined.register(tools);
+ * ```
+ */
+class ExtendedMcpTools {
+    _budget;
+    _tokenManager;
+    _auditLogPath;
+    constructor(options = {}) {
+        this._budget = options.budget;
+        this._tokenManager = options.tokenManager;
+        this._auditLogPath = options.auditLogPath ?? './data/audit_log.jsonl';
+    }
+    getDefinitions() {
+        return EXTENDED_TOOL_DEFINITIONS;
+    }
+    async call(toolName, args) {
+        try {
+            switch (toolName) {
+                case 'budget_status': return this._budgetStatus();
+                case 'budget_spend': return this._budgetSpend(args);
+                case 'budget_reset': return this._budgetReset(args);
+                case 'budget_set_ceiling': return this._budgetSetCeiling(args);
+                case 'budget_get_log': return this._budgetGetLog(args);
+                case 'token_create': return this._tokenCreate(args);
+                case 'token_validate': return this._tokenValidate(args);
+                case 'token_revoke': return this._tokenRevoke(args);
+                case 'audit_query': return this._auditQuery(args);
+                case 'audit_tail': return this._auditTail(args);
+                default:
+                    return { ok: false, tool: toolName, error: `Unknown extended tool: "${toolName}"` };
+            }
+        }
+        catch (err) {
+            return { ok: false, tool: toolName, error: err instanceof Error ? err.message : String(err) };
+        }
+    }
+    // --------------------------------------------------------------------------
+    // Budget tools
+    // --------------------------------------------------------------------------
+    _budgetStatus() {
+        if (!this._budget)
+            return this._noBudget('budget_status');
+        return {
+            ok: true,
+            tool: 'budget_status',
+            data: {
+                ceiling: this._budget.getCeiling(),
+                totalSpent: this._budget.getTotalSpent(),
+                remaining: this._budget.remaining(),
+                perAgent: this._budget.getSpendLog(),
+            },
+        };
+    }
+    _budgetSpend(args) {
+        if (!this._budget)
+            return this._noBudget('budget_spend');
+        const agentId = String(args['agent_id'] ?? '');
+        const tokens = Number(args['tokens']);
+        if (!agentId)
+            return { ok: false, tool: 'budget_spend', error: 'agent_id is required' };
+        if (!Number.isFinite(tokens) || tokens <= 0)
+            return { ok: false, tool: 'budget_spend', error: 'tokens must be a positive number' };
+        const result = this._budget.spend(agentId, tokens);
+        return { ok: true, tool: 'budget_spend', data: result };
+    }
+    _budgetReset(args) {
+        if (!this._budget)
+            return this._noBudget('budget_reset');
+        if (String(args['confirm']).toLowerCase() !== 'yes') {
+            return { ok: false, tool: 'budget_reset', error: 'confirm must be "yes" to reset the budget' };
+        }
+        this._budget.reset();
+        return { ok: true, tool: 'budget_reset', data: { reset: true, remaining: this._budget.remaining() } };
+    }
+    _budgetSetCeiling(args) {
+        if (!this._budget)
+            return this._noBudget('budget_set_ceiling');
+        const ceiling = Number(args['ceiling']);
+        if (!Number.isFinite(ceiling) || ceiling <= 0) {
+            return { ok: false, tool: 'budget_set_ceiling', error: 'ceiling must be a positive number' };
+        }
+        this._budget.setCeiling(ceiling);
+        return { ok: true, tool: 'budget_set_ceiling', data: { ceiling, remaining: this._budget.remaining() } };
+    }
+    _budgetGetLog(args) {
+        if (!this._budget)
+            return this._noBudget('budget_get_log');
+        const limit = Math.min(Number(args['limit']) || 50, 1000);
+        const log = this._budget.getTransactionLog();
+        const entries = log.slice(-limit);
+        return { ok: true, tool: 'budget_get_log', data: { entries, total: log.length, shown: entries.length } };
+    }
+    _noBudget(tool) {
+        return { ok: false, tool, error: 'No FederatedBudget instance configured. Pass budget: new FederatedBudget(...) to ExtendedMcpTools.' };
+    }
+    // --------------------------------------------------------------------------
+    // Token tools
+    // --------------------------------------------------------------------------
+    _tokenCreate(args) {
+        if (!this._tokenManager)
+            return this._noTokenManager('token_create');
+        const agentId = String(args['agent_id'] ?? '');
+        const resourceType = String(args['resource_type'] ?? '');
+        const scope = String(args['scope'] ?? '');
+        if (!agentId || !resourceType || !scope) {
+            return { ok: false, tool: 'token_create', error: 'agent_id, resource_type, and scope are required' };
+        }
+        const token = this._tokenManager.generateToken(agentId, resourceType, scope);
+        return { ok: true, tool: 'token_create', data: token };
+    }
+    _tokenValidate(args) {
+        if (!this._tokenManager)
+            return this._noTokenManager('token_validate');
+        const tokenJson = String(args['token_json'] ?? '');
+        if (!tokenJson)
+            return { ok: false, tool: 'token_validate', error: 'token_json is required' };
+        try {
+            const token = JSON.parse(tokenJson);
+            const result = this._tokenManager.validateToken(token);
+            return { ok: true, tool: 'token_validate', data: result };
+        }
+        catch (e) {
+            return { ok: false, tool: 'token_validate', error: `Invalid token JSON: ${e instanceof Error ? e.message : String(e)}` };
+        }
+    }
+    _tokenRevoke(args) {
+        if (!this._tokenManager)
+            return this._noTokenManager('token_revoke');
+        const tokenId = String(args['token_id'] ?? '');
+        if (!tokenId)
+            return { ok: false, tool: 'token_revoke', error: 'token_id is required' };
+        this._tokenManager.revokeToken(tokenId);
+        return { ok: true, tool: 'token_revoke', data: { tokenId, revoked: true, reason: args['reason'] ?? 'revoked via MCP' } };
+    }
+    _noTokenManager(tool) {
+        return { ok: false, tool, error: 'No SecureTokenManager instance configured. Pass tokenManager: new SecureTokenManager() to ExtendedMcpTools.' };
+    }
+    // --------------------------------------------------------------------------
+    // Audit tools
+    // --------------------------------------------------------------------------
+    _auditQuery(args) {
+        const entries = this._readAuditLog();
+        if (!entries.ok)
+            return { ok: false, tool: 'audit_query', error: entries.error };
+        let results = entries.data;
+        const agentFilter = args['agent_id_filter'] ? String(args['agent_id_filter']) : null;
+        const eventFilter = args['event_type_filter'] ? String(args['event_type_filter']) : null;
+        const outcomeFilter = args['outcome_filter'] ? String(args['outcome_filter']) : null;
+        const sinceIso = args['since_iso'] ? String(args['since_iso']) : null;
+        const limit = Math.min(Number(args['limit']) || 100, 1000);
+        if (agentFilter)
+            results = results.filter(e => e.agentId === agentFilter);
+        if (eventFilter)
+            results = results.filter(e => e.eventType === eventFilter);
+        if (outcomeFilter)
+            results = results.filter(e => e.outcome === outcomeFilter);
+        if (sinceIso) {
+            const since = new Date(sinceIso).getTime();
+            if (!isNaN(since)) {
+                results = results.filter(e => new Date(e.timestamp).getTime() >= since);
+            }
+        }
+        const sliced = results.slice(-limit);
+        return { ok: true, tool: 'audit_query', data: { entries: sliced, total: results.length, shown: sliced.length } };
+    }
+    _auditTail(args) {
+        const n = Math.min(Math.max(Number(args['n']) || 20, 1), 500);
+        const entries = this._readAuditLog();
+        if (!entries.ok)
+            return { ok: false, tool: 'audit_tail', error: entries.error };
+        const all = entries.data;
+        const tail = all.slice(-n);
+        return { ok: true, tool: 'audit_tail', data: { entries: tail, total: all.length, shown: tail.length } };
+    }
+    _readAuditLog() {
+        try {
+            if (!(0, node_fs_1.existsSync)(this._auditLogPath)) {
+                return { ok: true, data: [] };
+            }
+            const raw = (0, node_fs_1.readFileSync)(this._auditLogPath, 'utf-8').trim();
+            if (!raw)
+                return { ok: true, data: [] };
+            const entries = raw.split('\n')
+                .filter(l => l.trim())
+                .map(l => {
+                try {
+                    return JSON.parse(l);
+                }
+                catch {
+                    return null;
+                }
+            })
+                .filter((e) => e !== null);
+            return { ok: true, data: entries };
+        }
+        catch (err) {
+            return { ok: false, error: `Failed to read audit log: ${err instanceof Error ? err.message : String(err)}` };
+        }
+    }
+}
+exports.ExtendedMcpTools = ExtendedMcpTools;
+//# sourceMappingURL=mcp-tools-extended.js.map

package/dist/esm/lib/mcp-tools-extended.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tools-extended.js","sourceRoot":"","sources":["../../../lib/mcp-tools-extended.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAEH,qCAAmD;AA2CnD,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,MAAM,yBAAyB,GAAwB;IACrD,8EAA8E;IAC9E;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,sfAAsf;QACngB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;aAClF;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,ulBAAulB;QACpmB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;gBACtE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8CAA8C,EAAE;aACxF;YACD,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;SACjC;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,8cAA8c;QAC3d,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;gBACjF,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;aACvF;YACD,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;SAClC;KACF;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,omBAAomB;QACjnB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;gBACjF,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;aAChF;YACD,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;SAClC;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,uZAAuZ;QACpa,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;gBACrE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mDAAmD,EAAE;aAC5F;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB;KACF;IACD,8EAA8E;IAC9E;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,oqBAAoqB;QACjrB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;gBACxE,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+DAA+D,EAAE;gBAC/G,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kDAAkD,EAAE;aAC3F;YACD,QAAQ,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,OAAO,CAAC;SACjD;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,0jBAA0jB;QACvkB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,+DAA+D;iBAC7E;aACF;YACD,QAAQ,EAAE,CAAC,YAAY,CAAC;SACzB;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,yhBAAyhB;QACtiB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;gBAClE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;aACtF;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB;KACF;IACD,8EAA8E;IAC9E;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,qgBAAqgB;QAClhB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;gBAC9F,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;gBACrF,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wDAAwD,EAAE;gBACzG,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sEAAsE,EAAE;gBAClH,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oDAAoD,EAAE;aAC7F;YACD,QAAQ,EAAE,EAAE;SACb;KACF;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,miBAAmiB;QAChjB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4DAA4D,EAAE;aACjG;YACD,QAAQ,EAAE,EAAE;SACb;KACF;CACF,CAAC;AAgBF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAa,gBAAgB;IACV,OAAO,CAAW;IAClB,aAAa,CAAiB;IAC9B,aAAa,CAAS;IAEvC,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,IAAI,wBAAwB,CAAC;IACxE,CAAC;IAED,cAAc;QACZ,OAAO,yBAAyB,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,IAA6B;QACxD,IAAI,CAAC;YACH,QAAQ,QAAQ,EAAE,CAAC;gBACjB,KAAK,eAAe,CAAC,CAAM,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvD,KAAK,cAAc,CAAC,CAAO,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBAC1D,KAAK,cAAc,CAAC,CAAO,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBAC1D,KAAK,oBAAoB,CAAC,CAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBAC/D,KAAK,gBAAgB,CAAC,CAAK,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC3D,KAAK,cAAc,CAAC,CAAO,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBAC1D,KAAK,gBAAgB,CAAC,CAAK,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBAC5D,KAAK,cAAc,CAAC,CAAO,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBAC1D,KAAK,aAAa,CAAC,CAAQ,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBACzD,KAAK,YAAY,CAAC,CAAS,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBACxD;oBACE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,2BAA2B,QAAQ,GAAG,EAAE,CAAC;YACxF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAChG,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,eAAe;IACf,6EAA6E;IAErE,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC1D,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE;gBACJ,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;gBAClC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE;gBACxC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;gBACnC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;aACrC;SACF,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,IAA6B;QAChD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;QACxF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;QACnI,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1D,CAAC;IAEO,YAAY,CAAC,IAA6B;QAChD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;QACjG,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC;IACxG,CAAC;IAEO,iBAAiB,CAAC,IAA6B;QACrD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC;IAC1G,CAAC;IAEO,aAAa,CAAC,IAA6B;QACjD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3G,CAAC;IAEO,SAAS,CAAC,IAAY;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,oGAAoG,EAAE,CAAC;IAC1I,CAAC;IAED,6EAA6E;IAC7E,cAAc;IACd,6EAA6E;IAErE,YAAY,CAAC,IAA6B;QAChD,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,EAAE,CAAC;YACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;QACvG,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAC7E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzD,CAAC;IAEO,cAAc,CAAC,IAA6B;QAClD,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;QAC9F,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC5D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3H,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAA6B;QAChD,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;QACxF,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,iBAAiB,EAAE,EAAE,CAAC;IAC3H,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,6GAA6G,EAAE,CAAC;IACnJ,CAAC;IAED,6EAA6E;IAC7E,cAAc;IACd,6EAA6E;IAErE,WAAW,CAAC,IAA6B;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAEjF,IAAI,OAAO,GAAG,OAAO,CAAC,IAAoB,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACzF,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,EAAE,IAAI,CAAC,CAAC;QAE3D,IAAI,WAAW;YAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC;QAC1E,IAAI,WAAW;YAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,CAAC;QAC5E,IAAI,aAAa;YAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC;QAC9E,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IACnH,CAAC;IAEO,UAAU,CAAC,IAA6B;QAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAChF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAoB,CAAC;QACzC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1G,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;gBACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YAChC,CAAC;YACD,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7D,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;iBAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACrB,GAAG,CAAC,CAAC,CAAC,EAAE;gBACP,IAAI,CAAC;oBAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAe,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,IAAI,CAAC;gBAAC,CAAC;YACpE,CAAC,CAAC;iBACD,MAAM,CAAC,CAAC,CAAC,EAAmB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAC/G,CAAC;IACH,CAAC;CACF;AAhMD,4CAgMC"}