nfunc-mcp 0.3.0 → 0.4.0

package/dist/utils/httpClient.d.ts

@@ -0,0 +1,84 @@
+/**
+ * HTTP counterpart to shellRunner.
+ *
+ * Every tool before this one reached the outside world by spawning a process,
+ * so `runShell` was the single choke point for timeout, error and duration
+ * handling. PSI is an HTTP API, and bending shellRunner around `curl` would
+ * trade a typed response for string parsing. This mirrors shellRunner's
+ * contract instead: never throws for a reachable-but-unhappy endpoint, always
+ * reports duration, and leaves the decision about what counts as failure to
+ * the caller.
+ *
+ * Node 18+ ships global fetch, so this adds no dependency.
+ */
+export interface HttpResult {
+    /** True only for a 2xx. A 404 is a result, not an exception. */
+    ok: boolean;
+    /** 0 when the request never got a response (timeout, DNS, connection refused). */
+    status: number;
+    body: string;
+    /** Raw response bytes. Populated only when `raw` was requested. */
+    bytes?: Uint8Array;
+    durationMs: number;
+    /** Total attempts made, including the successful one. 1 means no retries. */
+    attempts: number;
+    /** Present only when `ok` is false. Always redacted. */
+    error?: string;
+}
+export interface HttpRequestOptions {
+    timeoutMs?: number;
+    /** Extra attempts after the first. 0 disables retrying. */
+    retries?: number;
+    /** Base delay for exponential backoff; doubled each attempt. */
+    retryDelayMs?: number;
+    headers?: Record<string, string>;
+    /**
+     * Return bytes instead of decoded text. Needed for `.xml.gz` sitemaps, which
+     * are served as an opaque gzip payload rather than with Content-Encoding, so
+     * fetch does not inflate them and decoding to a string corrupts them.
+     */
+    raw?: boolean;
+    /**
+     * Absolute ceiling across every attempt, including backoff. Where `timeoutMs`
+     * bounds one request, this bounds the whole call: each attempt is shortened
+     * to whatever is left, and retrying stops when nothing is. Without it,
+     * enabling `retryOnTimeout` silently doubles the worst case, which is exactly
+     * how a chunked runner overruns its budget.
+     */
+    totalBudgetMs?: number;
+    /**
+     * Retry after a timeout. Off by default: a timeout means the request already
+     * spent its entire budget, so retrying multiplies the wall clock by the
+     * attempt count for a request that is unlikely to be faster next time. A 429
+     * or 5xx is different — those fail fast and often succeed on retry.
+     */
+    retryOnTimeout?: boolean;
+    /**
+     * Literal strings to strip from every error message before it leaves this
+     * module — API keys, tokens, anything that would otherwise reach a log, a
+     * tool response, or a conversation transcript.
+     */
+    redact?: string[];
+}
+/**
+ * A URL safe to put in an error message.
+ *
+ * The PSI request URL carries the API key in the query string, so any error
+ * that interpolates the URL leaks the key into the tool response — and from
+ * there into the conversation transcript. Redacting at the point of formatting
+ * rather than asking every call site to remember is the only version of this
+ * that stays correct.
+ */
+export declare function sanitizeUrl(url: string | URL): string;
+export declare function httpGet(url: string | URL, options?: HttpRequestOptions): Promise<HttpResult>;
+export interface HttpJsonResult<T> extends Omit<HttpResult, "body"> {
+    data: T | null;
+    /** Kept for error reporting; a caller that has `data` should not need it. */
+    body: string;
+}
+/**
+ * `httpGet` plus JSON parsing, with malformed JSON demoted to `ok: false`
+ * rather than a thrown SyntaxError. A 200 carrying truncated JSON is a failed
+ * request as far as every caller is concerned.
+ */
+export declare function httpGetJson<T>(url: string | URL, options?: HttpRequestOptions): Promise<HttpJsonResult<T>>;

package/dist/utils/httpClient.js

@@ -0,0 +1,171 @@
+/**
+ * HTTP counterpart to shellRunner.
+ *
+ * Every tool before this one reached the outside world by spawning a process,
+ * so `runShell` was the single choke point for timeout, error and duration
+ * handling. PSI is an HTTP API, and bending shellRunner around `curl` would
+ * trade a typed response for string parsing. This mirrors shellRunner's
+ * contract instead: never throws for a reachable-but-unhappy endpoint, always
+ * reports duration, and leaves the decision about what counts as failure to
+ * the caller.
+ *
+ * Node 18+ ships global fetch, so this adds no dependency.
+ */
+/**
+ * Sites behind a bot wall reject the default Node fetch agent outright, which
+ * turns a healthy site into a 403 and a sitemap into a "not found". Naming
+ * ourselves honestly and looking like a browser gets through most of them;
+ * a caller can override it via `headers`.
+ */
+const DEFAULT_USER_AGENT = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 " +
+    "(KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 nfunc-mcp/qa-audit";
+/** Query parameters whose values are stripped before a URL is quoted anywhere. */
+const SENSITIVE_PARAMS = new Set(["key", "api_key", "apikey", "token", "access_token"]);
+/**
+ * A URL safe to put in an error message.
+ *
+ * The PSI request URL carries the API key in the query string, so any error
+ * that interpolates the URL leaks the key into the tool response — and from
+ * there into the conversation transcript. Redacting at the point of formatting
+ * rather than asking every call site to remember is the only version of this
+ * that stays correct.
+ */
+export function sanitizeUrl(url) {
+    try {
+        const u = new URL(url);
+        for (const param of u.searchParams.keys()) {
+            if (SENSITIVE_PARAMS.has(param.toLowerCase())) {
+                u.searchParams.set(param, "REDACTED");
+            }
+        }
+        return u.toString();
+    }
+    catch {
+        return "[unparseable url]";
+    }
+}
+function redactAll(message, secrets) {
+    let out = message;
+    for (const secret of secrets) {
+        // A short "secret" would redact half the message; a real key is far longer.
+        if (secret && secret.length >= 8)
+            out = out.split(secret).join("REDACTED");
+    }
+    return out;
+}
+/** Retry only what a retry can plausibly fix. A 400 will be a 400 next time too. */
+function isRetryable(status) {
+    return status === 408 || status === 429 || status >= 500;
+}
+/**
+ * `Retry-After` is either a delay in seconds or an HTTP date. Google sends
+ * seconds on 429s, but the date form is legal and cheap to support.
+ */
+function retryAfterMs(header) {
+    if (!header)
+        return null;
+    const seconds = Number(header);
+    if (Number.isFinite(seconds) && seconds >= 0)
+        return seconds * 1000;
+    const date = Date.parse(header);
+    if (!Number.isNaN(date))
+        return Math.max(0, date - Date.now());
+    return null;
+}
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+export async function httpGet(url, options = {}) {
+    const { timeoutMs = 60_000, retries = 2, retryDelayMs = 2_000, headers, raw = false, totalBudgetMs, retryOnTimeout = false, redact = [], } = options;
+    const start = Date.now();
+    const safeUrl = sanitizeUrl(url);
+    let lastError = "";
+    let lastStatus = 0;
+    const deadline = totalBudgetMs === undefined ? null : start + totalBudgetMs;
+    const remainingMs = () => (deadline === null ? Infinity : deadline - Date.now());
+    for (let attempt = 1; attempt <= retries + 1; attempt++) {
+        const budgetLeft = remainingMs();
+        if (budgetLeft <= 0) {
+            lastError = lastError || `Request to ${safeUrl} ran out of time budget`;
+            break;
+        }
+        try {
+            const response = await fetch(url, {
+                headers: { "user-agent": DEFAULT_USER_AGENT, ...headers },
+                signal: AbortSignal.timeout(Math.min(timeoutMs, budgetLeft)),
+            });
+            lastStatus = response.status;
+            if (response.ok) {
+                const bytes = new Uint8Array(await response.arrayBuffer());
+                return {
+                    ok: true,
+                    status: response.status,
+                    body: raw ? "" : new TextDecoder().decode(bytes),
+                    ...(raw ? { bytes } : {}),
+                    durationMs: Date.now() - start,
+                    attempts: attempt,
+                };
+            }
+            // Read the body before deciding — a non-2xx from PSI carries a JSON
+            // error object that says far more than the status code does.
+            const body = await response.text().catch(() => "");
+            lastError = `HTTP ${response.status} from ${safeUrl}${body ? `: ${body.slice(0, 300)}` : ""}`;
+            if (!isRetryable(response.status) || attempt > retries) {
+                return {
+                    ok: false,
+                    status: response.status,
+                    body,
+                    durationMs: Date.now() - start,
+                    attempts: attempt,
+                    error: redactAll(lastError, redact),
+                };
+            }
+            const serverAsked = retryAfterMs(response.headers.get("retry-after"));
+            const backoff = Math.min(serverAsked ?? retryDelayMs * 2 ** (attempt - 1), Math.max(0, remainingMs()));
+            await sleep(backoff);
+        }
+        catch (err) {
+            // Timeouts and network failures land here. AbortSignal.timeout raises a
+            // TimeoutError, which reads as an unexplained abort unless named.
+            const e = err;
+            const timedOut = e.name === "TimeoutError" || e.name === "AbortError";
+            lastStatus = 0;
+            lastError = timedOut
+                ? `Request to ${safeUrl} timed out after ${timeoutMs} ms`
+                : `Request to ${safeUrl} failed: ${e.message ?? "unknown network error"}`;
+            if (timedOut && !retryOnTimeout)
+                break;
+            if (attempt > retries)
+                break;
+            await sleep(Math.min(retryDelayMs * 2 ** (attempt - 1), Math.max(0, remainingMs())));
+        }
+    }
+    return {
+        ok: false,
+        status: lastStatus,
+        body: "",
+        durationMs: Date.now() - start,
+        attempts: retries + 1,
+        error: redactAll(lastError, redact),
+    };
+}
+/**
+ * `httpGet` plus JSON parsing, with malformed JSON demoted to `ok: false`
+ * rather than a thrown SyntaxError. A 200 carrying truncated JSON is a failed
+ * request as far as every caller is concerned.
+ */
+export async function httpGetJson(url, options = {}) {
+    const result = await httpGet(url, options);
+    if (!result.ok)
+        return { ...result, data: null };
+    try {
+        return { ...result, data: JSON.parse(result.body) };
+    }
+    catch (err) {
+        return {
+            ...result,
+            ok: false,
+            data: null,
+            error: redactAll(`Response from ${sanitizeUrl(url)} was not valid JSON: ${err.message}`, options.redact ?? []),
+        };
+    }
+}
+//# sourceMappingURL=httpClient.js.map

package/dist/utils/httpClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpClient.js","sourceRoot":"","sources":["../../src/utils/httpClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAqDH;;;;;GAKG;AACH,MAAM,kBAAkB,GACtB,qEAAqE;IACrE,uEAAuE,CAAC;AAE1E,kFAAkF;AAClF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;AAExF;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,GAAiB;IAC3C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC9C,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,mBAAmB,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,OAAe,EAAE,OAAiB;IACnD,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,4EAA4E;QAC5E,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;YAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,MAAqB;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,OAAO,GAAG,IAAI,CAAC;IACpE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAC1C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAiB,EACjB,UAA8B,EAAE;IAEhC,MAAM,EACJ,SAAS,GAAG,MAAM,EAClB,OAAO,GAAG,CAAC,EACX,YAAY,GAAG,KAAK,EACpB,OAAO,EACP,GAAG,GAAG,KAAK,EACX,aAAa,EACb,cAAc,GAAG,KAAK,EACtB,MAAM,GAAG,EAAE,GACZ,GAAG,OAAO,CAAC;IAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,MAAM,QAAQ,GAAG,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,aAAa,CAAC;IAC5E,MAAM,WAAW,GAAG,GAAW,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAEzF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,UAAU,GAAG,WAAW,EAAE,CAAC;QACjC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YACpB,SAAS,GAAG,SAAS,IAAI,cAAc,OAAO,yBAAyB,CAAC;YACxE,MAAM;QACR,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,OAAO,EAAE,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE;gBACzD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;aAC7D,CAAC,CAAC;YACH,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;YAE7B,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC3D,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;oBAChD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC9B,QAAQ,EAAE,OAAO;iBAClB,CAAC;YACJ,CAAC;YAED,oEAAoE;YACpE,6DAA6D;YAC7D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,SAAS,GAAG,QAAQ,QAAQ,CAAC,MAAM,SAAS,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAE9F,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,OAAO,EAAE,CAAC;gBACvD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,IAAI;oBACJ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC9B,QAAQ,EAAE,OAAO;oBACjB,KAAK,EAAE,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC;iBACpC,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,YAAY,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;YACvG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,kEAAkE;YAClE,MAAM,CAAC,GAAG,GAAY,CAAC;YACvB,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;YACtE,UAAU,GAAG,CAAC,CAAC;YACf,SAAS,GAAG,QAAQ;gBAClB,CAAC,CAAC,cAAc,OAAO,oBAAoB,SAAS,KAAK;gBACzD,CAAC,CAAC,cAAc,OAAO,YAAY,CAAC,CAAC,OAAO,IAAI,uBAAuB,EAAE,CAAC;YAE5E,IAAI,QAAQ,IAAI,CAAC,cAAc;gBAAE,MAAM;YACvC,IAAI,OAAO,GAAG,OAAO;gBAAE,MAAM;YAC7B,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;QAC9B,QAAQ,EAAE,OAAO,GAAG,CAAC;QACrB,KAAK,EAAE,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC;KACpC,CAAC;AACJ,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAiB,EACjB,UAA8B,EAAE;IAEhC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAEjD,IAAI,CAAC;QACH,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAM,EAAE,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,GAAG,MAAM;YACT,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,SAAS,CACd,iBAAiB,WAAW,CAAC,GAAG,CAAC,wBAAyB,GAAa,CAAC,OAAO,EAAE,EACjF,OAAO,CAAC,MAAM,IAAI,EAAE,CACrB;SACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/utils/psiAuth.d.ts

@@ -0,0 +1,26 @@
+/**
+ * PSI API key resolution.
+ *
+ * Precedence: explicit tool input → PAGESPEED_API_KEY → keyless.
+ *
+ * The preferred setup is the `env` block in the MCP client config, because the
+ * client launches this server and we do not control its flags — `--env-file`
+ * is not available to us. An explicit input is supported for people who want
+ * to paste a key once, but it is the worst option: it lands in the
+ * conversation transcript and in any client-side logging, so it is never
+ * echoed back and every error that touches a request URL is redacted.
+ */
+export type KeySource = "input" | "env" | "none";
+export interface ResolvedKey {
+    key: string | null;
+    source: KeySource;
+}
+export declare const KEY_ENV_VAR = "PAGESPEED_API_KEY";
+/**
+ * Keyless PSI is rate-limited hard enough that a batch will 429 partway
+ * through, leaving a half-finished audit and a confusing error. Refusing up
+ * front with instructions is a better failure than discovering it at run 12.
+ */
+export declare const KEYLESS_RUN_CAP = 4;
+export declare function resolveApiKey(explicit?: string): ResolvedKey;
+export declare function keylessWarning(runs: number): string;

package/dist/utils/psiAuth.js

@@ -0,0 +1,36 @@
+/**
+ * PSI API key resolution.
+ *
+ * Precedence: explicit tool input → PAGESPEED_API_KEY → keyless.
+ *
+ * The preferred setup is the `env` block in the MCP client config, because the
+ * client launches this server and we do not control its flags — `--env-file`
+ * is not available to us. An explicit input is supported for people who want
+ * to paste a key once, but it is the worst option: it lands in the
+ * conversation transcript and in any client-side logging, so it is never
+ * echoed back and every error that touches a request URL is redacted.
+ */
+export const KEY_ENV_VAR = "PAGESPEED_API_KEY";
+/**
+ * Keyless PSI is rate-limited hard enough that a batch will 429 partway
+ * through, leaving a half-finished audit and a confusing error. Refusing up
+ * front with instructions is a better failure than discovering it at run 12.
+ */
+export const KEYLESS_RUN_CAP = 4;
+export function resolveApiKey(explicit) {
+    const trimmed = explicit?.trim();
+    if (trimmed)
+        return { key: trimmed, source: "input" };
+    const fromEnv = process.env[KEY_ENV_VAR]?.trim();
+    if (fromEnv)
+        return { key: fromEnv, source: "env" };
+    return { key: null, source: "none" };
+}
+export function keylessWarning(runs) {
+    return (`No ${KEY_ENV_VAR} set — running unauthenticated against a shared, ` +
+        `heavily rate-limited quota. This is fine for ${KEYLESS_RUN_CAP} runs or ` +
+        `fewer; ${runs} runs will almost certainly hit HTTP 429 partway through. ` +
+        `Get a key from the Google Cloud console (enable the PageSpeed Insights ` +
+        `API) and set ${KEY_ENV_VAR} in your MCP client config.`);
+}
+//# sourceMappingURL=psiAuth.js.map

package/dist/utils/psiAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"psiAuth.js","sourceRoot":"","sources":["../../src/utils/psiAuth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AASH,MAAM,CAAC,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AAEjC,MAAM,UAAU,aAAa,CAAC,QAAiB;IAC7C,MAAM,OAAO,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,OAAO;QAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAEtD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,OAAO;QAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAEpD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,CACL,MAAM,WAAW,mDAAmD;QACpE,gDAAgD,eAAe,WAAW;QAC1E,UAAU,IAAI,4DAA4D;QAC1E,yEAAyE;QACzE,gBAAgB,WAAW,6BAA6B,CACzD,CAAC;AACJ,CAAC"}

package/dist/utils/psiParser.d.ts

@@ -0,0 +1,124 @@
+/**
+ * PageSpeed Insights response parsing.
+ *
+ * One PSI call returns two unrelated datasets: `lighthouseResult` (a lab run
+ * on Google's hardware) and `loadingExperience` (CrUX field data from real
+ * Chrome users). They are measured differently, they disagree routinely, and
+ * conflating them produces confidently wrong reports — so they stay separate
+ * all the way through this module and only meet in the comparator.
+ *
+ * The lab half is the same LHR schema `parseLighthouseJSON` already handles
+ * and is delegated to it unchanged. Everything here is about the field half
+ * and about pulling numeric lab metrics that survive aggregation.
+ */
+import { type ParsedLighthouse } from "./outputParsers.js";
+export type CruxCategory = "FAST" | "AVERAGE" | "SLOW" | "NONE";
+/** The five field metrics PSI reports. `fid` is deliberately absent — see below. */
+export type WebVital = "lcp" | "inp" | "cls" | "fcp" | "ttfb";
+export type FieldSource = "url" | "origin";
+export interface CruxMetric {
+    /**
+     * 75th percentile across the collection window. Milliseconds for every
+     * metric except `cls`, which is unitless.
+     */
+    p75: number;
+    category: CruxCategory;
+    /** Share of real users in each bucket. Sums to ~1. */
+    distribution: {
+        good: number;
+        needsImprovement: number;
+        poor: number;
+    };
+    /**
+     * Whether this specific metric came from the URL or from origin-wide data.
+     * Per metric, not per response — see the note on `parseCrux`.
+     */
+    source: FieldSource;
+}
+export interface ParsedCrux {
+    /**
+     * Always 28. PSI does not return the collection window, but CrUX in PSI is
+     * defined as a trailing 28-day aggregate, so this is a documented constant
+     * rather than a parsed value. Stated explicitly because reports must not
+     * describe field data as real-time.
+     */
+    collectionPeriodDays: 28;
+    overallCategory: CruxCategory | null;
+    /** Which source the majority of metrics came from, for a one-line summary. */
+    primarySource: FieldSource;
+    metrics: Partial<Record<WebVital, CruxMetric>>;
+}
+export interface LabMetrics {
+    lcpMs: number | null;
+    fcpMs: number | null;
+    cls: number | null;
+    tbtMs: number | null;
+    speedIndexMs: number | null;
+    ttiMs: number | null;
+    ttfbMs: number | null;
+}
+export interface ParsedPsi {
+    requestedUrl: string;
+    finalUrl: string;
+    strategy: string;
+    fetchTime: string | null;
+    lighthouseVersion: string | null;
+    scores: Record<string, number>;
+    lab: LabMetrics;
+    /** Null when the URL has too little real-user traffic and origin fallback is off or empty. */
+    field: ParsedCrux | null;
+    lighthouse: ParsedLighthouse;
+    /** Lighthouse audits that failed, for the existing defect formatter. */
+    runWarnings: string[];
+}
+/** PSI returned a 200 whose Lighthouse run did not actually complete. */
+export declare class PsiRuntimeError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+interface RawCruxMetric {
+    percentile?: number;
+    category?: string;
+    distributions?: Array<{
+        min?: number;
+        max?: number;
+        proportion?: number;
+    }>;
+}
+interface RawLoadingExperience {
+    id?: string;
+    overall_category?: string;
+    metrics?: Record<string, RawCruxMetric>;
+}
+/**
+ * Merge URL-level and origin-level CrUX into one metric set.
+ *
+ * Field availability is **per metric, not per URL** — a page can have enough
+ * traffic for CrUX to report CLS but not LCP. A real response in the Five
+ * Below batch carried two of the five metrics at URL level while the origin
+ * carried all five, which is why the manual audit shows "No field data" for
+ * one metric and a category for another on the same row.
+ *
+ * So the fallback runs per metric, and each metric records where it came from.
+ * A single response-level `field_source` flag would have to either discard the
+ * URL-level metrics that do exist or silently label origin data as page data,
+ * and origin CrUX for a homepage says nothing about a checkout page.
+ */
+export declare function parseCrux(urlLevel: RawLoadingExperience | undefined, originLevel: RawLoadingExperience | undefined, originFallback: boolean): ParsedCrux | null;
+export interface ParsePsiOptions {
+    strategy: string;
+    /** Fall back to origin-wide CrUX per metric when URL-level data is absent. */
+    originFallback?: boolean;
+}
+/**
+ * Parse a full PSI v5 response.
+ *
+ * Throws `PsiRuntimeError` when Lighthouse itself failed inside a 200
+ * response. PSI does this routinely — a page that times out or refuses the
+ * fetch comes back as HTTP 200 with `lighthouseResult.runtimeError` set and
+ * every score null. Parsing it anyway records a real page as scoring zero
+ * across the board, which is worse than a failed run, because a zero looks
+ * like data. Callers should treat this as retryable.
+ */
+export declare function parsePsiResponse(rawJson: string, options: ParsePsiOptions): ParsedPsi;
+export {};

package/dist/utils/psiParser.js

@@ -0,0 +1,200 @@
+/**
+ * PageSpeed Insights response parsing.
+ *
+ * One PSI call returns two unrelated datasets: `lighthouseResult` (a lab run
+ * on Google's hardware) and `loadingExperience` (CrUX field data from real
+ * Chrome users). They are measured differently, they disagree routinely, and
+ * conflating them produces confidently wrong reports — so they stay separate
+ * all the way through this module and only meet in the comparator.
+ *
+ * The lab half is the same LHR schema `parseLighthouseJSON` already handles
+ * and is delegated to it unchanged. Everything here is about the field half
+ * and about pulling numeric lab metrics that survive aggregation.
+ */
+import { parseLighthouseJSON } from "./outputParsers.js";
+/** PSI returned a 200 whose Lighthouse run did not actually complete. */
+export class PsiRuntimeError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "PsiRuntimeError";
+    }
+}
+/**
+ * CrUX metric key → our vital name.
+ *
+ * FIRST_INPUT_DELAY_MS is intentionally not mapped. FID was retired in March
+ * 2024 and replaced by INP; it still appears in some responses, and treating
+ * it as a current metric would report a defect against a standard Google no
+ * longer measures. Read it only if a caller ever needs historical data.
+ */
+const CRUX_KEYS = {
+    LARGEST_CONTENTFUL_PAINT_MS: "lcp",
+    INTERACTION_TO_NEXT_PAINT: "inp",
+    CUMULATIVE_LAYOUT_SHIFT_SCORE: "cls",
+    FIRST_CONTENTFUL_PAINT_MS: "fcp",
+    EXPERIMENTAL_TIME_TO_FIRST_BYTE: "ttfb",
+};
+/**
+ * CLS is the one field metric PSI returns scaled by 100: a `percentile` of 55
+ * means a CLS of 0.55, and the distribution bucket boundaries (0-10, 10-25)
+ * are scaled the same way. Comparing the raw integer against the 0.25 "poor"
+ * threshold marks every site on earth as catastrophic; forgetting the scaling
+ * entirely turns a 0.55 into a 55. Verified against real responses.
+ */
+function scaleCruxValue(vital, percentile) {
+    return vital === "cls" ? percentile / 100 : percentile;
+}
+function toCategory(raw) {
+    return raw === "FAST" || raw === "AVERAGE" || raw === "SLOW" ? raw : "NONE";
+}
+function toDistribution(raw) {
+    const share = (i) => {
+        const p = raw?.[i]?.proportion;
+        return typeof p === "number" ? Number(p.toFixed(4)) : 0;
+    };
+    // PSI always emits exactly three buckets, ordered good → poor.
+    return { good: share(0), needsImprovement: share(1), poor: share(2) };
+}
+function readMetric(raw, vital, source) {
+    if (!raw || typeof raw.percentile !== "number")
+        return null;
+    return {
+        p75: scaleCruxValue(vital, raw.percentile),
+        category: toCategory(raw.category),
+        distribution: toDistribution(raw.distributions),
+        source,
+    };
+}
+/**
+ * Merge URL-level and origin-level CrUX into one metric set.
+ *
+ * Field availability is **per metric, not per URL** — a page can have enough
+ * traffic for CrUX to report CLS but not LCP. A real response in the Five
+ * Below batch carried two of the five metrics at URL level while the origin
+ * carried all five, which is why the manual audit shows "No field data" for
+ * one metric and a category for another on the same row.
+ *
+ * So the fallback runs per metric, and each metric records where it came from.
+ * A single response-level `field_source` flag would have to either discard the
+ * URL-level metrics that do exist or silently label origin data as page data,
+ * and origin CrUX for a homepage says nothing about a checkout page.
+ */
+export function parseCrux(urlLevel, originLevel, originFallback) {
+    const metrics = {};
+    let fromUrl = 0;
+    let fromOrigin = 0;
+    /**
+     * PSI performs its own origin fallback, and does it silently.
+     *
+     * When a URL has too little traffic, `loadingExperience` comes back populated
+     * with **origin-level** numbers and the only signal is its `id`, which holds
+     * the origin instead of the URL. Trusting the block's position in the
+     * response therefore labels origin data as page data: two different paginated
+     * URLs came back with byte-identical p75 values, both marked `source: "url"`.
+     *
+     * Comparing the two blocks' ids catches it without needing the requested URL.
+     */
+    const psiSubstitutedOrigin = Boolean(urlLevel?.id) && Boolean(originLevel?.id) && urlLevel?.id === originLevel?.id;
+    const urlLevelSource = psiSubstitutedOrigin ? "origin" : "url";
+    for (const [cruxKey, vital] of Object.entries(CRUX_KEYS)) {
+        const atUrl = readMetric(urlLevel?.metrics?.[cruxKey], vital, urlLevelSource);
+        if (atUrl) {
+            metrics[vital] = atUrl;
+            if (urlLevelSource === "url")
+                fromUrl++;
+            else
+                fromOrigin++;
+            continue;
+        }
+        if (!originFallback)
+            continue;
+        const atOrigin = readMetric(originLevel?.metrics?.[cruxKey], vital, "origin");
+        if (atOrigin) {
+            metrics[vital] = atOrigin;
+            fromOrigin++;
+        }
+    }
+    if (fromUrl === 0 && fromOrigin === 0)
+        return null;
+    // Only trust the URL-level verdict when the URL actually supplied data;
+    // otherwise the origin's verdict is the one describing these numbers.
+    const overallRaw = fromUrl > 0 ? urlLevel?.overall_category : originLevel?.overall_category;
+    return {
+        collectionPeriodDays: 28,
+        overallCategory: overallRaw ? toCategory(overallRaw) : null,
+        primarySource: fromUrl >= fromOrigin ? "url" : "origin",
+        metrics,
+    };
+}
+/**
+ * Lab metrics as numbers.
+ *
+ * `numericValue`, never `displayValue`. The Five Below CSV recorded TTFB as
+ * "Root document took 930 ms" — a localised string containing a non-breaking
+ * space — because it read displayValue, which made the whole column
+ * unaggregatable while `numericValue: 929` sat in the same audit object.
+ * Formatting is a report-time concern; nothing upstream of the report should
+ * hold a number as text.
+ */
+function parseLabMetrics(auditsJson) {
+    const audits = JSON.parse(auditsJson);
+    const num = (id) => {
+        const v = audits.audits?.[id]?.numericValue;
+        return typeof v === "number" ? v : null;
+    };
+    const ms = (id) => {
+        const v = num(id);
+        return v === null ? null : Math.round(v);
+    };
+    return {
+        lcpMs: ms("largest-contentful-paint"),
+        fcpMs: ms("first-contentful-paint"),
+        // CLS is unitless and small; rounding it to an integer would destroy it.
+        cls: num("cumulative-layout-shift"),
+        tbtMs: ms("total-blocking-time"),
+        speedIndexMs: ms("speed-index"),
+        ttiMs: ms("interactive"),
+        ttfbMs: ms("server-response-time"),
+    };
+}
+/**
+ * Parse a full PSI v5 response.
+ *
+ * Throws `PsiRuntimeError` when Lighthouse itself failed inside a 200
+ * response. PSI does this routinely — a page that times out or refuses the
+ * fetch comes back as HTTP 200 with `lighthouseResult.runtimeError` set and
+ * every score null. Parsing it anyway records a real page as scoring zero
+ * across the board, which is worse than a failed run, because a zero looks
+ * like data. Callers should treat this as retryable.
+ */
+export function parsePsiResponse(rawJson, options) {
+    const { strategy, originFallback = true } = options;
+    const response = JSON.parse(rawJson);
+    const lhr = response.lighthouseResult;
+    if (!lhr) {
+        throw new PsiRuntimeError("NO_LIGHTHOUSE_RESULT", "PSI response contained no lighthouseResult.");
+    }
+    if (lhr.runtimeError?.code) {
+        throw new PsiRuntimeError(lhr.runtimeError.code, lhr.runtimeError.message ?? "Lighthouse reported a runtime error.");
+    }
+    // parseLighthouseJSON takes the serialised LHR. Re-serialising the object we
+    // already hold is a little wasteful, but it keeps the Phase 2-13 parser and
+    // its priority mapping untouched, which is worth more than the milliseconds.
+    const lhrJson = JSON.stringify(lhr);
+    const lighthouse = parseLighthouseJSON(lhrJson);
+    return {
+        requestedUrl: lhr.requestedUrl ?? "",
+        finalUrl: lhr.finalDisplayedUrl ?? lhr.finalUrl ?? lhr.requestedUrl ?? "",
+        strategy,
+        fetchTime: lhr.fetchTime ?? null,
+        lighthouseVersion: lhr.lighthouseVersion ?? null,
+        scores: lighthouse.categoryScores,
+        lab: parseLabMetrics(lhrJson),
+        field: parseCrux(response.loadingExperience, response.originLoadingExperience, originFallback),
+        lighthouse,
+        runWarnings: lhr.runWarnings ?? [],
+    };
+}
+//# sourceMappingURL=psiParser.js.map

package/dist/utils/psiParser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"psiParser.js","sourceRoot":"","sources":["../../src/utils/psiParser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,mBAAmB,EAAyB,MAAM,oBAAoB,CAAC;AAgEhF,yEAAyE;AACzE,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAE7B;IADX,YACW,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AA+BD;;;;;;;GAOG;AACH,MAAM,SAAS,GAA6B;IAC1C,2BAA2B,EAAE,KAAK;IAClC,yBAAyB,EAAE,KAAK;IAChC,6BAA6B,EAAE,KAAK;IACpC,yBAAyB,EAAE,KAAK;IAChC,+BAA+B,EAAE,MAAM;CACxC,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,KAAe,EAAE,UAAkB;IACzD,OAAO,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,GAAuB;IACzC,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CACrB,GAAmC;IAEnC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE;QAClC,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;QAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,+DAA+D;IAC/D,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,UAAU,CACjB,GAA8B,EAC9B,KAAe,EACf,MAAmB;IAEnB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5D,OAAO;QACL,GAAG,EAAE,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC;QAC1C,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClC,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC;QAC/C,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,SAAS,CACvB,QAA0C,EAC1C,WAA6C,EAC7C,cAAuB;IAEvB,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB;;;;;;;;;;OAUG;IACH,MAAM,oBAAoB,GACxB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,QAAQ,EAAE,EAAE,KAAK,WAAW,EAAE,EAAE,CAAC;IACxF,MAAM,cAAc,GAAgB,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IAE5E,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QAC9E,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;YACvB,IAAI,cAAc,KAAK,KAAK;gBAAE,OAAO,EAAE,CAAC;;gBACnC,UAAU,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,cAAc;YAAE,SAAS;QAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC9E,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;YAC1B,UAAU,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,IAAI,UAAU,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnD,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,UAAU,GACd,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,WAAW,EAAE,gBAAgB,CAAC;IAE3E,OAAO;QACL,oBAAoB,EAAE,EAAE;QACxB,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;QAC3D,aAAa,EAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;QACvD,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,eAAe,CAAC,UAAkB;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAEnC,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,EAAU,EAAiB,EAAE;QACxC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC;QAC5C,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC,CAAC;IACF,MAAM,EAAE,GAAG,CAAC,EAAU,EAAiB,EAAE;QACvC,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC;QACrC,KAAK,EAAE,EAAE,CAAC,wBAAwB,CAAC;QACnC,yEAAyE;QACzE,GAAG,EAAE,GAAG,CAAC,yBAAyB,CAAC;QACnC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC;QAChC,YAAY,EAAE,EAAE,CAAC,aAAa,CAAC;QAC/B,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC;QACxB,MAAM,EAAE,EAAE,CAAC,sBAAsB,CAAC;KACnC,CAAC;AACJ,CAAC;AAQD;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,OAAwB;IAExB,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;IACvD,MAAM,GAAG,GAAG,QAAQ,CAAC,gBAAgB,CAAC;IAEtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,eAAe,CACvB,sBAAsB,EACtB,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CACvB,GAAG,CAAC,YAAY,CAAC,IAAI,EACrB,GAAG,CAAC,YAAY,CAAC,OAAO,IAAI,sCAAsC,CACnE,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAEhD,OAAO;QACL,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE;QACpC,QAAQ,EAAE,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE;QACzE,QAAQ;QACR,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;QAChC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI;QAChD,MAAM,EAAE,UAAU,CAAC,cAAc;QACjC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC;QAC7B,KAAK,EAAE,SAAS,CACd,QAAQ,CAAC,iBAAiB,EAC1B,QAAQ,CAAC,uBAAuB,EAChC,cAAc,CACf;QACD,UAAU;QACV,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;KACnC,CAAC;AACJ,CAAC"}