toolhome 0.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +295 -0
- package/README.zh.md +281 -0
- package/dist/server/app.d.ts +16 -0
- package/dist/server/app.d.ts.map +1 -0
- package/dist/server/app.js +166 -0
- package/dist/server/app.js.map +1 -0
- package/dist/server/cli/main.d.ts +3 -0
- package/dist/server/cli/main.d.ts.map +1 -0
- package/dist/server/cli/main.js +587 -0
- package/dist/server/cli/main.js.map +1 -0
- package/dist/server/cli-plane/allow-list.d.ts +18 -0
- package/dist/server/cli-plane/allow-list.d.ts.map +1 -0
- package/dist/server/cli-plane/allow-list.js +28 -0
- package/dist/server/cli-plane/allow-list.js.map +1 -0
- package/dist/server/cli-plane/cli-service.d.ts +41 -0
- package/dist/server/cli-plane/cli-service.d.ts.map +1 -0
- package/dist/server/cli-plane/cli-service.js +282 -0
- package/dist/server/cli-plane/cli-service.js.map +1 -0
- package/dist/server/cli-plane/frames.d.ts +26 -0
- package/dist/server/cli-plane/frames.d.ts.map +1 -0
- package/dist/server/cli-plane/frames.js +12 -0
- package/dist/server/cli-plane/frames.js.map +1 -0
- package/dist/server/cli-plane/models.d.ts +174 -0
- package/dist/server/cli-plane/models.d.ts.map +1 -0
- package/dist/server/cli-plane/models.js +169 -0
- package/dist/server/cli-plane/models.js.map +1 -0
- package/dist/server/cli-plane/routes.d.ts +32 -0
- package/dist/server/cli-plane/routes.d.ts.map +1 -0
- package/dist/server/cli-plane/routes.js +94 -0
- package/dist/server/cli-plane/routes.js.map +1 -0
- package/dist/server/cli-plane/runner.d.ts +41 -0
- package/dist/server/cli-plane/runner.d.ts.map +1 -0
- package/dist/server/cli-plane/runner.js +163 -0
- package/dist/server/cli-plane/runner.js.map +1 -0
- package/dist/server/cli-plane/status.d.ts +12 -0
- package/dist/server/cli-plane/status.d.ts.map +1 -0
- package/dist/server/cli-plane/status.js +24 -0
- package/dist/server/cli-plane/status.js.map +1 -0
- package/dist/server/config/harness-import.d.ts +44 -0
- package/dist/server/config/harness-import.d.ts.map +1 -0
- package/dist/server/config/harness-import.js +166 -0
- package/dist/server/config/harness-import.js.map +1 -0
- package/dist/server/config.d.ts +20 -0
- package/dist/server/config.d.ts.map +1 -0
- package/dist/server/config.js +80 -0
- package/dist/server/config.js.map +1 -0
- package/dist/server/control/client.d.ts +24 -0
- package/dist/server/control/client.d.ts.map +1 -0
- package/dist/server/control/client.js +115 -0
- package/dist/server/control/client.js.map +1 -0
- package/dist/server/control/control-api.d.ts +39 -0
- package/dist/server/control/control-api.d.ts.map +1 -0
- package/dist/server/control/control-api.js +291 -0
- package/dist/server/control/control-api.js.map +1 -0
- package/dist/server/control/control-service.d.ts +713 -0
- package/dist/server/control/control-service.d.ts.map +1 -0
- package/dist/server/control/control-service.js +693 -0
- package/dist/server/control/control-service.js.map +1 -0
- package/dist/server/control/openapi.d.ts +2 -0
- package/dist/server/control/openapi.d.ts.map +1 -0
- package/dist/server/control/openapi.js +370 -0
- package/dist/server/control/openapi.js.map +1 -0
- package/dist/server/data-plane/data-plane.d.ts +20 -0
- package/dist/server/data-plane/data-plane.d.ts.map +1 -0
- package/dist/server/data-plane/data-plane.js +335 -0
- package/dist/server/data-plane/data-plane.js.map +1 -0
- package/dist/server/data-plane/gateway-server.d.ts +13 -0
- package/dist/server/data-plane/gateway-server.d.ts.map +1 -0
- package/dist/server/data-plane/gateway-server.js +796 -0
- package/dist/server/data-plane/gateway-server.js.map +1 -0
- package/dist/server/data-plane/legacy-session.d.ts +18 -0
- package/dist/server/data-plane/legacy-session.d.ts.map +1 -0
- package/dist/server/data-plane/legacy-session.js +137 -0
- package/dist/server/data-plane/legacy-session.js.map +1 -0
- package/dist/server/data-plane/projection.d.ts +18 -0
- package/dist/server/data-plane/projection.d.ts.map +1 -0
- package/dist/server/data-plane/projection.js +44 -0
- package/dist/server/data-plane/projection.js.map +1 -0
- package/dist/server/data-plane/registry.d.ts +31 -0
- package/dist/server/data-plane/registry.d.ts.map +1 -0
- package/dist/server/data-plane/registry.js +129 -0
- package/dist/server/data-plane/registry.js.map +1 -0
- package/dist/server/data-plane/task-extension.d.ts +7 -0
- package/dist/server/data-plane/task-extension.d.ts.map +1 -0
- package/dist/server/data-plane/task-extension.js +33 -0
- package/dist/server/data-plane/task-extension.js.map +1 -0
- package/dist/server/data-plane/virtualization.d.ts +35 -0
- package/dist/server/data-plane/virtualization.d.ts.map +1 -0
- package/dist/server/data-plane/virtualization.js +228 -0
- package/dist/server/data-plane/virtualization.js.map +1 -0
- package/dist/server/domain/errors.d.ts +9 -0
- package/dist/server/domain/errors.d.ts.map +1 -0
- package/dist/server/domain/errors.js +19 -0
- package/dist/server/domain/errors.js.map +1 -0
- package/dist/server/domain/models.d.ts +720 -0
- package/dist/server/domain/models.d.ts.map +1 -0
- package/dist/server/domain/models.js +327 -0
- package/dist/server/domain/models.js.map +1 -0
- package/dist/server/main.d.ts +2 -0
- package/dist/server/main.d.ts.map +1 -0
- package/dist/server/main.js +37 -0
- package/dist/server/main.js.map +1 -0
- package/dist/server/manage/management-mcp.d.ts +27 -0
- package/dist/server/manage/management-mcp.d.ts.map +1 -0
- package/dist/server/manage/management-mcp.js +431 -0
- package/dist/server/manage/management-mcp.js.map +1 -0
- package/dist/server/market/catalog.d.ts +111 -0
- package/dist/server/market/catalog.d.ts.map +1 -0
- package/dist/server/market/catalog.js +784 -0
- package/dist/server/market/catalog.js.map +1 -0
- package/dist/server/market/installers.d.ts +64 -0
- package/dist/server/market/installers.d.ts.map +1 -0
- package/dist/server/market/installers.js +181 -0
- package/dist/server/market/installers.js.map +1 -0
- package/dist/server/market/market-service.d.ts +146 -0
- package/dist/server/market/market-service.d.ts.map +1 -0
- package/dist/server/market/market-service.js +930 -0
- package/dist/server/market/market-service.js.map +1 -0
- package/dist/server/observability/call-recorder.d.ts +22 -0
- package/dist/server/observability/call-recorder.d.ts.map +1 -0
- package/dist/server/observability/call-recorder.js +99 -0
- package/dist/server/observability/call-recorder.js.map +1 -0
- package/dist/server/observability/logger.d.ts +16 -0
- package/dist/server/observability/logger.d.ts.map +1 -0
- package/dist/server/observability/logger.js +25 -0
- package/dist/server/observability/logger.js.map +1 -0
- package/dist/server/security/api-keys.d.ts +15 -0
- package/dist/server/security/api-keys.d.ts.map +1 -0
- package/dist/server/security/api-keys.js +35 -0
- package/dist/server/security/api-keys.js.map +1 -0
- package/dist/server/security/auth-service.d.ts +26 -0
- package/dist/server/security/auth-service.d.ts.map +1 -0
- package/dist/server/security/auth-service.js +76 -0
- package/dist/server/security/auth-service.js.map +1 -0
- package/dist/server/security/control-session.d.ts +9 -0
- package/dist/server/security/control-session.d.ts.map +1 -0
- package/dist/server/security/control-session.js +51 -0
- package/dist/server/security/control-session.js.map +1 -0
- package/dist/server/security/credential-materializer.d.ts +20 -0
- package/dist/server/security/credential-materializer.d.ts.map +1 -0
- package/dist/server/security/credential-materializer.js +82 -0
- package/dist/server/security/credential-materializer.js.map +1 -0
- package/dist/server/security/cursor-codec.d.ts +13 -0
- package/dist/server/security/cursor-codec.d.ts.map +1 -0
- package/dist/server/security/cursor-codec.js +43 -0
- package/dist/server/security/cursor-codec.js.map +1 -0
- package/dist/server/security/oauth-routes.d.ts +21 -0
- package/dist/server/security/oauth-routes.d.ts.map +1 -0
- package/dist/server/security/oauth-routes.js +100 -0
- package/dist/server/security/oauth-routes.js.map +1 -0
- package/dist/server/security/oauth-server.d.ts +16 -0
- package/dist/server/security/oauth-server.d.ts.map +1 -0
- package/dist/server/security/oauth-server.js +544 -0
- package/dist/server/security/oauth-server.js.map +1 -0
- package/dist/server/security/secret-box.d.ts +7 -0
- package/dist/server/security/secret-box.d.ts.map +1 -0
- package/dist/server/security/secret-box.js +27 -0
- package/dist/server/security/secret-box.js.map +1 -0
- package/dist/server/security/secure-action.d.ts +21 -0
- package/dist/server/security/secure-action.d.ts.map +1 -0
- package/dist/server/security/secure-action.js +69 -0
- package/dist/server/security/secure-action.js.map +1 -0
- package/dist/server/storage/sqlite-store.d.ts +70 -0
- package/dist/server/storage/sqlite-store.d.ts.map +1 -0
- package/dist/server/storage/sqlite-store.js +1522 -0
- package/dist/server/storage/sqlite-store.js.map +1 -0
- package/dist/server/storage/store.d.ts +82 -0
- package/dist/server/storage/store.d.ts.map +1 -0
- package/dist/server/storage/store.js +2 -0
- package/dist/server/storage/store.js.map +1 -0
- package/dist/server/upstream/adapter.d.ts +52 -0
- package/dist/server/upstream/adapter.d.ts.map +1 -0
- package/dist/server/upstream/adapter.js +807 -0
- package/dist/server/upstream/adapter.js.map +1 -0
- package/dist/server/upstream/credential-resolver.d.ts +14 -0
- package/dist/server/upstream/credential-resolver.d.ts.map +1 -0
- package/dist/server/upstream/credential-resolver.js +56 -0
- package/dist/server/upstream/credential-resolver.js.map +1 -0
- package/dist/server/upstream/extension-transport.d.ts +17 -0
- package/dist/server/upstream/extension-transport.d.ts.map +1 -0
- package/dist/server/upstream/extension-transport.js +207 -0
- package/dist/server/upstream/extension-transport.js.map +1 -0
- package/dist/server/upstream/manager.d.ts +23 -0
- package/dist/server/upstream/manager.d.ts.map +1 -0
- package/dist/server/upstream/manager.js +324 -0
- package/dist/server/upstream/manager.js.map +1 -0
- package/dist/server/upstream/oauth-provider.d.ts +38 -0
- package/dist/server/upstream/oauth-provider.d.ts.map +1 -0
- package/dist/server/upstream/oauth-provider.js +225 -0
- package/dist/server/upstream/oauth-provider.js.map +1 -0
- package/dist/server/upstream/oauth-refresh.d.ts +65 -0
- package/dist/server/upstream/oauth-refresh.d.ts.map +1 -0
- package/dist/server/upstream/oauth-refresh.js +240 -0
- package/dist/server/upstream/oauth-refresh.js.map +1 -0
- package/dist/server/upstream/oauth-routes.d.ts +17 -0
- package/dist/server/upstream/oauth-routes.d.ts.map +1 -0
- package/dist/server/upstream/oauth-routes.js +87 -0
- package/dist/server/upstream/oauth-routes.js.map +1 -0
- package/dist/server/upstream/oauth-service.d.ts +143 -0
- package/dist/server/upstream/oauth-service.d.ts.map +1 -0
- package/dist/server/upstream/oauth-service.js +217 -0
- package/dist/server/upstream/oauth-service.js.map +1 -0
- package/dist/server/upstream/stable-json.d.ts +3 -0
- package/dist/server/upstream/stable-json.d.ts.map +1 -0
- package/dist/server/upstream/stable-json.js +17 -0
- package/dist/server/upstream/stable-json.js.map +1 -0
- package/package.json +69 -0
- package/skills/toolhome/SKILL.md +238 -0
- package/skills/toolhome/references/cli-reference.md +242 -0
- package/skills/toolhome/references/deployment.md +113 -0
- package/skills/toolhome/references/market-guide.md +128 -0
- package/skills/toolhome/references/oauth-guide.md +96 -0
- package/skills/toolhome/references/troubleshooting.md +133 -0
|
@@ -0,0 +1,587 @@
|
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
import { spawn } from 'node:child_process';
|
|
3
|
+
import { Command } from 'commander';
|
|
4
|
+
import { chmodSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
|
|
5
|
+
import { homedir } from 'node:os';
|
|
6
|
+
import { dirname, resolve } from 'node:path';
|
|
7
|
+
import { fileURLToPath } from 'node:url';
|
|
8
|
+
import { z } from 'zod';
|
|
9
|
+
import { ControlClient } from '../control/client.js';
|
|
10
|
+
function packageVersion() {
|
|
11
|
+
let directory = dirname(fileURLToPath(import.meta.url));
|
|
12
|
+
for (;;) {
|
|
13
|
+
try {
|
|
14
|
+
return JSON.parse(readFileSync(resolve(directory, 'package.json'), 'utf8')).version;
|
|
15
|
+
}
|
|
16
|
+
catch {
|
|
17
|
+
const parent = dirname(directory);
|
|
18
|
+
if (parent === directory)
|
|
19
|
+
return '0.0.0';
|
|
20
|
+
directory = parent;
|
|
21
|
+
}
|
|
22
|
+
}
|
|
23
|
+
}
|
|
24
|
+
const localConfigSchema = z.object({
|
|
25
|
+
url: z.url().superRefine((value, context) => {
|
|
26
|
+
const url = new URL(value);
|
|
27
|
+
if ((url.protocol !== 'http:' && url.protocol !== 'https:') ||
|
|
28
|
+
url.pathname !== '/' ||
|
|
29
|
+
url.search !== '' ||
|
|
30
|
+
url.hash !== '' ||
|
|
31
|
+
url.username !== '' ||
|
|
32
|
+
url.password !== '') {
|
|
33
|
+
context.addIssue({
|
|
34
|
+
code: 'custom',
|
|
35
|
+
message: 'ToolHome URL must be an HTTP(S) origin',
|
|
36
|
+
});
|
|
37
|
+
}
|
|
38
|
+
}),
|
|
39
|
+
controlKey: z.string().min(1),
|
|
40
|
+
});
|
|
41
|
+
const program = new Command()
|
|
42
|
+
.name('toolhome')
|
|
43
|
+
.description('Complete CLI for the ToolHome Control API')
|
|
44
|
+
.version(packageVersion())
|
|
45
|
+
.option('--url <url>', 'ToolHome base URL')
|
|
46
|
+
.option('--key <key>', 'Control API key')
|
|
47
|
+
.option('--output <format>', 'human or json', parseOutput, 'human');
|
|
48
|
+
const server = program.command('server').description('Manage MCP servers');
|
|
49
|
+
server.command('list').action(run((client) => client.request('GET', '/api/v1/servers')));
|
|
50
|
+
server
|
|
51
|
+
.command('get <id>')
|
|
52
|
+
.action(run((client, id) => client.request('GET', `/api/v1/servers/${id}`)));
|
|
53
|
+
server
|
|
54
|
+
.command('add <file>')
|
|
55
|
+
.description('Create from a JSON file or - for stdin')
|
|
56
|
+
.action(run((client, file) => client.request('POST', '/api/v1/servers', readJson(file))));
|
|
57
|
+
server
|
|
58
|
+
.command('update <id> <file>')
|
|
59
|
+
.action(run((client, id, file) => client.request('PATCH', `/api/v1/servers/${id}`, readJson(file))));
|
|
60
|
+
server
|
|
61
|
+
.command('delete <id>')
|
|
62
|
+
.action(run((client, id) => client.request('DELETE', `/api/v1/servers/${id}`)));
|
|
63
|
+
for (const action of ['test', 'enable', 'disable', 'refresh', 'restart']) {
|
|
64
|
+
server
|
|
65
|
+
.command(`${action} <id>`)
|
|
66
|
+
.action(run((client, id) => client.request('POST', `/api/v1/servers/${id}/${action}`)));
|
|
67
|
+
}
|
|
68
|
+
for (const view of ['capabilities', 'status', 'logs', 'endpoint']) {
|
|
69
|
+
server
|
|
70
|
+
.command(`${view} <id>`)
|
|
71
|
+
.action(run((client, id) => client.request('GET', `/api/v1/servers/${id}/${view}`)));
|
|
72
|
+
}
|
|
73
|
+
const cli = program.command('cli').description('Manage and run CLIs hosted on the ToolHome server');
|
|
74
|
+
cli
|
|
75
|
+
.command('list')
|
|
76
|
+
.description('List registered hosted CLIs')
|
|
77
|
+
.action(run((client) => client.request('GET', '/api/v1/clis')));
|
|
78
|
+
cli
|
|
79
|
+
.command('get <id>')
|
|
80
|
+
.description('Show a hosted CLI record')
|
|
81
|
+
.action(run((client, id) => client.request('GET', `/api/v1/clis/${id}`)));
|
|
82
|
+
cli
|
|
83
|
+
.command('add <file>')
|
|
84
|
+
.description('Register a hosted CLI from a JSON file or - for stdin')
|
|
85
|
+
.action(run((client, file) => client.request('POST', '/api/v1/clis', readJson(file))));
|
|
86
|
+
cli
|
|
87
|
+
.command('update <id> <file>')
|
|
88
|
+
.description('Update a hosted CLI from a JSON file or - for stdin')
|
|
89
|
+
.action(run((client, id, file) => client.request('PATCH', `/api/v1/clis/${id}`, readJson(file))));
|
|
90
|
+
cli
|
|
91
|
+
.command('delete <id>')
|
|
92
|
+
.description('Delete a hosted CLI record')
|
|
93
|
+
.action(run((client, id) => client.request('DELETE', `/api/v1/clis/${id}`)));
|
|
94
|
+
cli
|
|
95
|
+
.command('enable <id>')
|
|
96
|
+
.description('Enable a hosted CLI')
|
|
97
|
+
.action(run((client, id) => client.request('PATCH', `/api/v1/clis/${id}`, { enabled: true })));
|
|
98
|
+
cli
|
|
99
|
+
.command('disable <id>')
|
|
100
|
+
.description('Disable a hosted CLI')
|
|
101
|
+
.action(run((client, id) => client.request('PATCH', `/api/v1/clis/${id}`, { enabled: false })));
|
|
102
|
+
cli
|
|
103
|
+
.command('status <slug>')
|
|
104
|
+
.description('Probe a hosted CLI (installed/version/loggedIn)')
|
|
105
|
+
.action(run((client, slug) => client.request('GET', `/cli/${slug}/status`)));
|
|
106
|
+
cli
|
|
107
|
+
.command('exec <slug> [args...]')
|
|
108
|
+
.description('Run a hosted CLI; args are passed verbatim as argv (never through a shell)')
|
|
109
|
+
.option('--stdin <text>', 'feed text to the remote process stdin')
|
|
110
|
+
.option('--stdin-file <path>', 'feed a file (or - for this terminal) to remote stdin')
|
|
111
|
+
.option('--timeout <ms>', 'kill the remote process after this many milliseconds', parsePositiveInt)
|
|
112
|
+
.option('--max-output-bytes <bytes>', 'cap output for this invocation', parsePositiveInt)
|
|
113
|
+
.action(run(async (client, slug, args, options) => {
|
|
114
|
+
if (args.length === 0)
|
|
115
|
+
throw new Error('At least one argv token is required');
|
|
116
|
+
if (options.stdin !== undefined && options.stdinFile !== undefined) {
|
|
117
|
+
throw new Error('--stdin and --stdin-file are mutually exclusive');
|
|
118
|
+
}
|
|
119
|
+
let stdin;
|
|
120
|
+
if (options.stdin !== undefined) {
|
|
121
|
+
stdin = options.stdin;
|
|
122
|
+
}
|
|
123
|
+
else if (options.stdinFile === '-') {
|
|
124
|
+
stdin = readFileSync(0, 'utf8');
|
|
125
|
+
}
|
|
126
|
+
else if (options.stdinFile !== undefined) {
|
|
127
|
+
stdin = readFileSync(resolve(options.stdinFile), 'utf8');
|
|
128
|
+
}
|
|
129
|
+
const output = program.opts().output;
|
|
130
|
+
const abort = new AbortController();
|
|
131
|
+
const onSignal = () => abort.abort();
|
|
132
|
+
process.once('SIGINT', onSignal);
|
|
133
|
+
process.once('SIGTERM', onSignal);
|
|
134
|
+
let outcome;
|
|
135
|
+
try {
|
|
136
|
+
outcome = await client.execStream(slug, {
|
|
137
|
+
argv: args,
|
|
138
|
+
stdin,
|
|
139
|
+
...(options.timeout === undefined ? {} : { timeoutMs: options.timeout }),
|
|
140
|
+
...(options.maxOutputBytes === undefined
|
|
141
|
+
? {}
|
|
142
|
+
: { maxOutputBytes: options.maxOutputBytes }),
|
|
143
|
+
}, (frame) => {
|
|
144
|
+
if (output === 'json') {
|
|
145
|
+
print(frame, 'json');
|
|
146
|
+
}
|
|
147
|
+
else if (frame.type === 'stdout') {
|
|
148
|
+
process.stdout.write(frame.data);
|
|
149
|
+
}
|
|
150
|
+
else if (frame.type === 'stderr') {
|
|
151
|
+
process.stderr.write(frame.data);
|
|
152
|
+
}
|
|
153
|
+
}, abort.signal);
|
|
154
|
+
}
|
|
155
|
+
finally {
|
|
156
|
+
process.removeListener('SIGINT', onSignal);
|
|
157
|
+
process.removeListener('SIGTERM', onSignal);
|
|
158
|
+
}
|
|
159
|
+
if (output === 'json') {
|
|
160
|
+
print(outcome, 'json');
|
|
161
|
+
}
|
|
162
|
+
else {
|
|
163
|
+
if (outcome.result === 'timeout') {
|
|
164
|
+
process.stderr.write(`\ntimed out after ${outcome.durationMs}ms\n`);
|
|
165
|
+
}
|
|
166
|
+
if (outcome.truncated) {
|
|
167
|
+
process.stderr.write('\noutput truncated by the configured limit\n');
|
|
168
|
+
}
|
|
169
|
+
}
|
|
170
|
+
process.exitCode = outcome.result === 'ok' ? 0 : 1;
|
|
171
|
+
}));
|
|
172
|
+
const credential = program
|
|
173
|
+
.command('credential')
|
|
174
|
+
.description('Manage encrypted upstream credentials');
|
|
175
|
+
credential.command('list').action(run((client) => client.request('GET', '/api/v1/credentials')));
|
|
176
|
+
credential
|
|
177
|
+
.command('get <id>')
|
|
178
|
+
.action(run((client, id) => client.request('GET', `/api/v1/credentials/${id}`)));
|
|
179
|
+
credential
|
|
180
|
+
.command('add <file>')
|
|
181
|
+
.action(run((client, file) => client.request('POST', '/api/v1/credentials', readJson(file))));
|
|
182
|
+
credential
|
|
183
|
+
.command('update <id> <file>')
|
|
184
|
+
.action(run((client, id, file) => client.request('PATCH', `/api/v1/credentials/${id}`, readJson(file))));
|
|
185
|
+
credential
|
|
186
|
+
.command('delete <id>')
|
|
187
|
+
.action(run((client, id) => client.request('DELETE', `/api/v1/credentials/${id}`)));
|
|
188
|
+
for (const action of ['test', 'revoke']) {
|
|
189
|
+
credential
|
|
190
|
+
.command(`${action} <id>`)
|
|
191
|
+
.action(run((client, id) => client.request('POST', `/api/v1/credentials/${id}/${action}`)));
|
|
192
|
+
}
|
|
193
|
+
credential
|
|
194
|
+
.command('authorize <name>')
|
|
195
|
+
.description('Authorize an OAuth credential by name, open the browser, and wait for the result')
|
|
196
|
+
.option('--server <name>', 'associated remote MCP server (slug or name)')
|
|
197
|
+
.option('--force', 'force a new authorization grant')
|
|
198
|
+
.option('--no-open', 'do not open the browser automatically')
|
|
199
|
+
.option('--no-wait', 'print the authorization URL and exit without waiting')
|
|
200
|
+
.option('--timeout <seconds>', 'how long to wait for authorization', parsePositiveInt, 600)
|
|
201
|
+
.action(run(async (client, name, options) => {
|
|
202
|
+
const credentials = (await client.request('GET', '/api/v1/credentials'));
|
|
203
|
+
const credential = resolveCredential(credentials, name);
|
|
204
|
+
const servers = (await client.request('GET', '/api/v1/servers'));
|
|
205
|
+
const bound = servers.filter((server) => server.credentialId === credential.id);
|
|
206
|
+
let serverId;
|
|
207
|
+
if (options.server) {
|
|
208
|
+
const server = resolveServer(servers, options.server);
|
|
209
|
+
if (server.credentialId !== credential.id) {
|
|
210
|
+
throw new Error(`Server "${options.server}" is not attached to credential "${name}"`);
|
|
211
|
+
}
|
|
212
|
+
serverId = server.id;
|
|
213
|
+
}
|
|
214
|
+
else if (bound.length === 1 && bound[0] !== undefined) {
|
|
215
|
+
serverId = bound[0].id;
|
|
216
|
+
}
|
|
217
|
+
else if (bound.length === 0) {
|
|
218
|
+
throw new Error(`Credential "${name}" is not attached to any server; pass --server`);
|
|
219
|
+
}
|
|
220
|
+
else {
|
|
221
|
+
throw new Error(`Credential "${name}" is attached to ${bound.length} servers; pass --server to disambiguate`);
|
|
222
|
+
}
|
|
223
|
+
const result = (await client.request('POST', `/api/v1/credentials/${credential.id}/authorize`, {
|
|
224
|
+
serverId,
|
|
225
|
+
force: options.force ?? false,
|
|
226
|
+
}));
|
|
227
|
+
if (program.opts().output === 'json') {
|
|
228
|
+
print(result, program.opts().output);
|
|
229
|
+
}
|
|
230
|
+
if (result.status === 'authorized') {
|
|
231
|
+
process.stdout.write(`✓ "${credential.name}" is already authorized.\n`);
|
|
232
|
+
return;
|
|
233
|
+
}
|
|
234
|
+
const authorizationUrl = result.authorizationUrl;
|
|
235
|
+
if (!authorizationUrl) {
|
|
236
|
+
throw new Error(`Authorization did not return a URL (status "${result.status}")`);
|
|
237
|
+
}
|
|
238
|
+
if (options.open) {
|
|
239
|
+
process.stdout.write(`Opening browser for "${credential.name}"...\n`);
|
|
240
|
+
openUrl(authorizationUrl);
|
|
241
|
+
process.stdout.write(`If the browser did not open, visit:\n ${authorizationUrl}\n`);
|
|
242
|
+
}
|
|
243
|
+
else {
|
|
244
|
+
process.stdout.write(`Visit this URL to authorize "${credential.name}":\n ${authorizationUrl}\n`);
|
|
245
|
+
}
|
|
246
|
+
if (!options.wait)
|
|
247
|
+
return;
|
|
248
|
+
const timeoutSeconds = options.timeout ?? 600;
|
|
249
|
+
process.stdout.write(`Waiting for authorization to complete (up to ${timeoutSeconds}s). Press Ctrl+C to cancel...\n`);
|
|
250
|
+
const deadline = Date.now() + timeoutSeconds * 1_000;
|
|
251
|
+
for (;;) {
|
|
252
|
+
await sleep(2_000);
|
|
253
|
+
if (Date.now() > deadline) {
|
|
254
|
+
process.stdout.write(`✗ Timed out after ${timeoutSeconds}s with no authorization.\n` +
|
|
255
|
+
`If you haven't finished yet, open the URL above or re-run this command.\n`);
|
|
256
|
+
process.exitCode = 1;
|
|
257
|
+
return;
|
|
258
|
+
}
|
|
259
|
+
const current = (await client.request('GET', `/api/v1/credentials/${credential.id}`));
|
|
260
|
+
if (current.status !== 'pending') {
|
|
261
|
+
if (current.status === 'ready') {
|
|
262
|
+
process.stdout.write(`✓ "${credential.name}" authorized successfully.\n`);
|
|
263
|
+
}
|
|
264
|
+
else {
|
|
265
|
+
process.stdout.write(`✗ Authorization ended with status "${current.status}".\n`);
|
|
266
|
+
process.exitCode = 1;
|
|
267
|
+
}
|
|
268
|
+
return;
|
|
269
|
+
}
|
|
270
|
+
}
|
|
271
|
+
}));
|
|
272
|
+
mountKeyCommands(program, 'control-key', 'control-keys');
|
|
273
|
+
mountKeyCommands(program, 'access-key', 'access-keys');
|
|
274
|
+
program
|
|
275
|
+
.command('capability <server-id>')
|
|
276
|
+
.description('Show a server capability snapshot')
|
|
277
|
+
.action(run((client, id) => client.request('GET', `/api/v1/servers/${id}/capabilities`)));
|
|
278
|
+
const config = program.command('config').description('Import and export configuration');
|
|
279
|
+
config
|
|
280
|
+
.command('export [file]')
|
|
281
|
+
.option('--include-secrets', 'include plaintext credential secrets for a restorable backup')
|
|
282
|
+
.action(run(async (client, file, command) => {
|
|
283
|
+
const includeSecrets = command.opts().includeSecrets ?? false;
|
|
284
|
+
if (includeSecrets && !file) {
|
|
285
|
+
throw new Error('--include-secrets requires a destination file');
|
|
286
|
+
}
|
|
287
|
+
const value = await client.request('GET', `/api/v1/config/export?includeSecrets=${includeSecrets ? 'true' : 'false'}`);
|
|
288
|
+
if (file) {
|
|
289
|
+
const destination = resolve(file);
|
|
290
|
+
writeFileSync(destination, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600 });
|
|
291
|
+
chmodSync(destination, 0o600);
|
|
292
|
+
return { written: destination, secretsIncluded: includeSecrets };
|
|
293
|
+
}
|
|
294
|
+
return value;
|
|
295
|
+
}));
|
|
296
|
+
config
|
|
297
|
+
.command('import <file>')
|
|
298
|
+
.action(run((client, file) => client.request('POST', '/api/v1/config/import', readJson(file))));
|
|
299
|
+
config
|
|
300
|
+
.command('import-harness <file>')
|
|
301
|
+
.description('Import a harness mcpServers config (Claude Desktop / Cursor JSON); secrets become encrypted credentials')
|
|
302
|
+
.option('--preview', 'show what would be imported without writing anything')
|
|
303
|
+
.option('--upsert', 'update existing servers (transport/env) instead of reporting conflicts')
|
|
304
|
+
.action(run((client, file, command) => {
|
|
305
|
+
const options = command.opts();
|
|
306
|
+
return client.request('POST', '/api/v1/config/import-harness', {
|
|
307
|
+
config: readJson(file),
|
|
308
|
+
preview: options.preview ?? false,
|
|
309
|
+
...(options.upsert ? { mode: 'upsert' } : {}),
|
|
310
|
+
});
|
|
311
|
+
}));
|
|
312
|
+
const endpoint = program.command('endpoint').description('Print standard MCP endpoints');
|
|
313
|
+
endpoint
|
|
314
|
+
.command('aggregate')
|
|
315
|
+
.action(run((client) => client.request('GET', '/api/v1/endpoints/aggregate')));
|
|
316
|
+
endpoint
|
|
317
|
+
.command('server <id>')
|
|
318
|
+
.action(run((client, id) => client.request('GET', `/api/v1/servers/${id}/endpoint`)));
|
|
319
|
+
const market = program
|
|
320
|
+
.command('market')
|
|
321
|
+
.description('Browse and install MCP servers and hosted CLIs from the catalog');
|
|
322
|
+
market
|
|
323
|
+
.command('list')
|
|
324
|
+
.description('List catalog entries with install status')
|
|
325
|
+
.action(run((client) => client.request('GET', '/api/v1/market')));
|
|
326
|
+
market
|
|
327
|
+
.command('install <id>')
|
|
328
|
+
.description('Install a catalog entry (fill required values with --set KEY=value)')
|
|
329
|
+
.option('--set <value>', 'set a value as KEY=value (repeatable)', collectValues, {})
|
|
330
|
+
.action(run(async (client, id, options) => {
|
|
331
|
+
const started = (await client.request('POST', `/api/v1/market/${id}/install`, {
|
|
332
|
+
values: options.set,
|
|
333
|
+
}));
|
|
334
|
+
if (started.status === 'awaiting_secret' && started.actionUrl) {
|
|
335
|
+
process.stdout.write(`This entry needs a secret. Open this one-time URL in your browser to continue:\n${started.actionUrl}\n`);
|
|
336
|
+
}
|
|
337
|
+
for (;;) {
|
|
338
|
+
const job = (await client.request('GET', `/api/v1/market/install/${started.jobId}`));
|
|
339
|
+
if (job.status !== 'installing') {
|
|
340
|
+
if (job.status === 'failed')
|
|
341
|
+
throw new Error(job.error ?? 'Install failed');
|
|
342
|
+
if (job.status === 'awaiting_secret') {
|
|
343
|
+
process.stdout.write('\rwaiting for secret in browser… ');
|
|
344
|
+
}
|
|
345
|
+
else {
|
|
346
|
+
return job.result;
|
|
347
|
+
}
|
|
348
|
+
}
|
|
349
|
+
process.stdout.write(`\rinstalling: ${job.step}… `);
|
|
350
|
+
await sleep(1500);
|
|
351
|
+
}
|
|
352
|
+
}));
|
|
353
|
+
market
|
|
354
|
+
.command('uninstall <id>')
|
|
355
|
+
.description('Remove an installed catalog entry (MCP server or hosted CLI, and credential)')
|
|
356
|
+
.action(run((client, id) => client.request('POST', `/api/v1/market/${id}/uninstall`)));
|
|
357
|
+
market
|
|
358
|
+
.command('updates')
|
|
359
|
+
.description('Compare installed versions against catalog pins and upstream')
|
|
360
|
+
.action(run((client) => client.request('GET', '/api/v1/market/updates')));
|
|
361
|
+
market
|
|
362
|
+
.command('update <id>')
|
|
363
|
+
.description('Update an installed entry to the catalog pin (keeps credential, restarts server)')
|
|
364
|
+
.action(run(async (client, id) => {
|
|
365
|
+
const started = (await client.request('POST', `/api/v1/market/${id}/update`));
|
|
366
|
+
if (started.status === 'up_to_date' || started.jobId === null)
|
|
367
|
+
return started;
|
|
368
|
+
for (;;) {
|
|
369
|
+
const job = (await client.request('GET', `/api/v1/market/install/${started.jobId}`));
|
|
370
|
+
if (job.status !== 'updating') {
|
|
371
|
+
if (job.status === 'failed')
|
|
372
|
+
throw new Error(job.error ?? 'Update failed');
|
|
373
|
+
return job.result ?? job;
|
|
374
|
+
}
|
|
375
|
+
process.stdout.write(`\rupdating: ${job.step}… `);
|
|
376
|
+
await sleep(1500);
|
|
377
|
+
}
|
|
378
|
+
}));
|
|
379
|
+
program.command('status').action(run((client) => client.request('GET', '/api/v1/overview')));
|
|
380
|
+
program.command('doctor').action(run((client) => client.request('GET', '/api/v1/diagnostics')));
|
|
381
|
+
program
|
|
382
|
+
.command('events')
|
|
383
|
+
.option('--limit <count>', 'maximum records', '100')
|
|
384
|
+
.action(run((client, command) => client.request('GET', `/api/v1/events?limit=${encodeURIComponent(command.opts().limit)}`)));
|
|
385
|
+
const calls = program.command('calls').description('Inspect tool call records (metadata only)');
|
|
386
|
+
calls
|
|
387
|
+
.command('list')
|
|
388
|
+
.description('List recent tool calls')
|
|
389
|
+
.option('--limit <count>', 'maximum records', '50')
|
|
390
|
+
.option('--server <id>', 'filter by server id')
|
|
391
|
+
.option('--tool <name>', 'filter by upstream tool name')
|
|
392
|
+
.option('--endpoint <type>', 'filter by endpoint (aggregate|individual)')
|
|
393
|
+
.option('--status <status>', 'filter by status')
|
|
394
|
+
.action(run((client, command) => {
|
|
395
|
+
const query = new URLSearchParams();
|
|
396
|
+
const options = command.opts();
|
|
397
|
+
query.set('limit', String(options.limit));
|
|
398
|
+
if (options.server)
|
|
399
|
+
query.set('server_id', options.server);
|
|
400
|
+
if (options.tool)
|
|
401
|
+
query.set('tool', options.tool);
|
|
402
|
+
if (options.endpoint)
|
|
403
|
+
query.set('endpoint_type', options.endpoint);
|
|
404
|
+
if (options.status)
|
|
405
|
+
query.set('status', options.status);
|
|
406
|
+
return client.request('GET', `/api/v1/calls?${query}`);
|
|
407
|
+
}));
|
|
408
|
+
calls
|
|
409
|
+
.command('stats')
|
|
410
|
+
.description('Show aggregate tool call statistics')
|
|
411
|
+
.option('--server <id>', 'filter by server id')
|
|
412
|
+
.option('--tool <name>', 'filter by upstream tool name')
|
|
413
|
+
.option('--from <iso>', 'start time (ISO-8601)')
|
|
414
|
+
.option('--to <iso>', 'end time (ISO-8601)')
|
|
415
|
+
.action(run((client, command) => {
|
|
416
|
+
const query = new URLSearchParams();
|
|
417
|
+
const options = command.opts();
|
|
418
|
+
if (options.server)
|
|
419
|
+
query.set('server_id', options.server);
|
|
420
|
+
if (options.tool)
|
|
421
|
+
query.set('tool', options.tool);
|
|
422
|
+
if (options.from)
|
|
423
|
+
query.set('from', options.from);
|
|
424
|
+
if (options.to)
|
|
425
|
+
query.set('to', options.to);
|
|
426
|
+
return client.request('GET', `/api/v1/calls/stats?${query}`);
|
|
427
|
+
}));
|
|
428
|
+
program
|
|
429
|
+
.command('api <method> <path>')
|
|
430
|
+
.description('Call any Control API operation')
|
|
431
|
+
.option('--body <file>', 'JSON body file or - for stdin')
|
|
432
|
+
.action(run((client, method, path, command) => client.request(method.toUpperCase(), path, command.opts().body ? readJson(command.opts().body) : undefined)));
|
|
433
|
+
const auth = program.command('auth').description('Manage local CLI connection settings');
|
|
434
|
+
auth
|
|
435
|
+
.command('login')
|
|
436
|
+
.requiredOption('--url <url>')
|
|
437
|
+
.requiredOption('--control-key <key>')
|
|
438
|
+
.action((options) => {
|
|
439
|
+
const value = localConfigSchema.parse({ url: options.url, controlKey: options.controlKey });
|
|
440
|
+
const path = configPath();
|
|
441
|
+
mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
|
|
442
|
+
writeFileSync(path, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600 });
|
|
443
|
+
chmodSync(path, 0o600);
|
|
444
|
+
process.stdout.write(`Saved ${path}\n`);
|
|
445
|
+
});
|
|
446
|
+
auth.command('logout').action(() => {
|
|
447
|
+
const path = configPath();
|
|
448
|
+
mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
|
|
449
|
+
writeFileSync(path, '{}\n', { mode: 0o600 });
|
|
450
|
+
chmodSync(path, 0o600);
|
|
451
|
+
process.stdout.write(`Cleared ${path}\n`);
|
|
452
|
+
});
|
|
453
|
+
await program.parseAsync(process.argv);
|
|
454
|
+
function mountKeyCommands(root, name, path) {
|
|
455
|
+
const command = root.command(name);
|
|
456
|
+
command.command('list').action(run((client) => client.request('GET', `/api/v1/${path}`)));
|
|
457
|
+
command
|
|
458
|
+
.command('create <name>')
|
|
459
|
+
.action(run((client, keyName) => client.request('POST', `/api/v1/${path}`, { name: keyName })));
|
|
460
|
+
command
|
|
461
|
+
.command('revoke <id>')
|
|
462
|
+
.action(run((client, id) => client.request('DELETE', `/api/v1/${path}/${id}`)));
|
|
463
|
+
}
|
|
464
|
+
function run(action) {
|
|
465
|
+
return async (...args) => {
|
|
466
|
+
try {
|
|
467
|
+
const options = program.opts();
|
|
468
|
+
const connection = resolveConnection(options);
|
|
469
|
+
const value = await action(new ControlClient(new URL(connection.url), connection.controlKey), ...args);
|
|
470
|
+
if (value !== undefined)
|
|
471
|
+
print(value, options.output);
|
|
472
|
+
}
|
|
473
|
+
catch (error) {
|
|
474
|
+
process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
|
|
475
|
+
process.exitCode = 1;
|
|
476
|
+
}
|
|
477
|
+
};
|
|
478
|
+
}
|
|
479
|
+
function resolveConnection(options) {
|
|
480
|
+
const stored = loadLocalConfig();
|
|
481
|
+
return localConfigSchema.parse({
|
|
482
|
+
url: options.url ?? process.env.TOOLHOME_URL ?? stored?.url,
|
|
483
|
+
controlKey: options.key ?? process.env.TOOLHOME_CONTROL_KEY ?? stored?.controlKey,
|
|
484
|
+
});
|
|
485
|
+
}
|
|
486
|
+
function loadLocalConfig() {
|
|
487
|
+
try {
|
|
488
|
+
return localConfigSchema.parse(JSON.parse(readFileSync(configPath(), 'utf8')));
|
|
489
|
+
}
|
|
490
|
+
catch {
|
|
491
|
+
// 0.4.0 moved the default location from ~/.config/mcp-home to ~/.config/toolhome;
|
|
492
|
+
// read a pre-existing legacy config so saved logins survive the rename.
|
|
493
|
+
if (process.env.TOOLHOME_CONFIG)
|
|
494
|
+
return null;
|
|
495
|
+
try {
|
|
496
|
+
return localConfigSchema.parse(JSON.parse(readFileSync(resolve(homedir(), '.config', 'mcp-home', 'config.json'), 'utf8')));
|
|
497
|
+
}
|
|
498
|
+
catch {
|
|
499
|
+
return null;
|
|
500
|
+
}
|
|
501
|
+
}
|
|
502
|
+
}
|
|
503
|
+
function configPath() {
|
|
504
|
+
return process.env.TOOLHOME_CONFIG ?? resolve(homedir(), '.config', 'toolhome', 'config.json');
|
|
505
|
+
}
|
|
506
|
+
function readJson(path) {
|
|
507
|
+
const text = path === '-' ? readFileSync(0, 'utf8') : readFileSync(resolve(path), 'utf8');
|
|
508
|
+
return JSON.parse(text);
|
|
509
|
+
}
|
|
510
|
+
function print(value, output) {
|
|
511
|
+
process.stdout.write(`${JSON.stringify(value, null, output === 'json' ? 0 : 2)}\n`);
|
|
512
|
+
}
|
|
513
|
+
function parseOutput(value) {
|
|
514
|
+
return z.enum(['human', 'json']).parse(value);
|
|
515
|
+
}
|
|
516
|
+
function resolveCredential(credentials, value) {
|
|
517
|
+
const byId = credentials.find((credential) => credential.id === value);
|
|
518
|
+
if (byId)
|
|
519
|
+
return byId;
|
|
520
|
+
const exact = credentials.filter((credential) => credential.name === value);
|
|
521
|
+
if (exact.length === 1 && exact[0] !== undefined)
|
|
522
|
+
return exact[0];
|
|
523
|
+
const loose = credentials.filter((credential) => credential.name.toLowerCase() === value.toLowerCase());
|
|
524
|
+
if (loose.length === 1 && loose[0] !== undefined)
|
|
525
|
+
return loose[0];
|
|
526
|
+
if (exact.length > 1) {
|
|
527
|
+
throw new Error(`Multiple credentials named "${value}"; use a unique name or the credential id`);
|
|
528
|
+
}
|
|
529
|
+
const names = credentials.map((credential) => credential.name).join(', ');
|
|
530
|
+
throw new Error(`Credential "${value}" not found. Available credentials: ${names || '(none)'}`);
|
|
531
|
+
}
|
|
532
|
+
function resolveServer(servers, value) {
|
|
533
|
+
const bySlug = servers.find((server) => server.slug === value);
|
|
534
|
+
if (bySlug)
|
|
535
|
+
return bySlug;
|
|
536
|
+
const byId = servers.find((server) => server.id === value);
|
|
537
|
+
if (byId)
|
|
538
|
+
return byId;
|
|
539
|
+
const byName = servers.filter((server) => server.name === value);
|
|
540
|
+
if (byName.length === 1 && byName[0] !== undefined)
|
|
541
|
+
return byName[0];
|
|
542
|
+
if (byName.length > 1) {
|
|
543
|
+
throw new Error(`Multiple servers named "${value}"; use a unique slug or the server id`);
|
|
544
|
+
}
|
|
545
|
+
const names = servers.map((server) => `${server.slug} (${server.name})`).join(', ');
|
|
546
|
+
throw new Error(`Server "${value}" not found. Available servers: ${names || '(none)'}`);
|
|
547
|
+
}
|
|
548
|
+
function openUrl(url) {
|
|
549
|
+
const { platform } = process;
|
|
550
|
+
let command;
|
|
551
|
+
let args;
|
|
552
|
+
if (platform === 'darwin') {
|
|
553
|
+
command = 'open';
|
|
554
|
+
args = [url];
|
|
555
|
+
}
|
|
556
|
+
else if (platform === 'win32') {
|
|
557
|
+
command = 'cmd';
|
|
558
|
+
args = ['/c', 'start', '', url];
|
|
559
|
+
}
|
|
560
|
+
else {
|
|
561
|
+
command = 'xdg-open';
|
|
562
|
+
args = [url];
|
|
563
|
+
}
|
|
564
|
+
const child = spawn(command, args, { stdio: 'ignore', detached: true });
|
|
565
|
+
child.on('error', () => {
|
|
566
|
+
process.stdout.write(`Could not open the browser automatically. Visit:\n ${url}\n`);
|
|
567
|
+
});
|
|
568
|
+
child.unref();
|
|
569
|
+
}
|
|
570
|
+
function sleep(ms) {
|
|
571
|
+
return new Promise((resolve) => setTimeout(resolve, ms));
|
|
572
|
+
}
|
|
573
|
+
function parsePositiveInt(value) {
|
|
574
|
+
const parsed = typeof value === 'number' ? value : Number.parseInt(value, 10);
|
|
575
|
+
if (!Number.isInteger(parsed) || parsed < 1) {
|
|
576
|
+
throw new Error(`Expected a positive integer, got "${value}"`);
|
|
577
|
+
}
|
|
578
|
+
return parsed;
|
|
579
|
+
}
|
|
580
|
+
function collectValues(value, previous) {
|
|
581
|
+
const index = value.indexOf('=');
|
|
582
|
+
if (index <= 0) {
|
|
583
|
+
throw new Error(`Expected KEY=value, got "${value}"`);
|
|
584
|
+
}
|
|
585
|
+
return { ...previous, [value.slice(0, index)]: value.slice(index + 1) };
|
|
586
|
+
}
|
|
587
|
+
//# sourceMappingURL=main.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../src/cli/main.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,SAAS,cAAc;IACrB,IAAI,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,SAAS,CAAC;QACR,IAAI,CAAC;YACH,OACE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CACpE,CAAC,OAAO,CAAC;QACZ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAClC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC;YACzC,SAAS,GAAG,MAAM,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IACE,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;YACvD,GAAG,CAAC,QAAQ,KAAK,GAAG;YACpB,GAAG,CAAC,MAAM,KAAK,EAAE;YACjB,GAAG,CAAC,IAAI,KAAK,EAAE;YACf,GAAG,CAAC,QAAQ,KAAK,EAAE;YACnB,GAAG,CAAC,QAAQ,KAAK,EAAE,EACnB,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IACF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC,CAAC;AAQH,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;KAC1B,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,2CAA2C,CAAC;KACxD,OAAO,CAAC,cAAc,EAAE,CAAC;KACzB,MAAM,CAAC,aAAa,EAAE,mBAAmB,CAAC;KAC1C,MAAM,CAAC,aAAa,EAAE,iBAAiB,CAAC;KACxC,MAAM,CAAC,mBAAmB,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AAEtE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;AAC3E,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;AACzF,MAAM;KACH,OAAO,CAAC,UAAU,CAAC;KACnB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACvF,MAAM;KACH,OAAO,CAAC,YAAY,CAAC;KACrB,WAAW,CAAC,wCAAwC,CAAC;KACrD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpG,MAAM;KACH,OAAO,CAAC,oBAAoB,CAAC;KAC7B,MAAM,CACL,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,IAAY,EAAE,EAAE,CACvC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CACjE,CACF,CAAC;AACJ,MAAM;KACH,OAAO,CAAC,aAAa,CAAC;KACtB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1F,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;IACzE,MAAM;SACH,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC;SACzB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AACpG,CAAC;AACD,KAAK,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;IAClE,MAAM;SACH,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC;SACvB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,mDAAmD,CAAC,CAAC;AACpG,GAAG;KACA,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,6BAA6B,CAAC;KAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;AAClE,GAAG;KACA,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,0BAA0B,CAAC;KACvC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACpF,GAAG;KACA,OAAO,CAAC,YAAY,CAAC;KACrB,WAAW,CAAC,uDAAuD,CAAC;KACpE,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACjG,GAAG;KACA,OAAO,CAAC,oBAAoB,CAAC;KAC7B,WAAW,CAAC,qDAAqD,CAAC;KAClE,MAAM,CACL,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,IAAY,EAAE,EAAE,CACvC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC9D,CACF,CAAC;AACJ,GAAG;KACA,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,4BAA4B,CAAC;KACzC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACvF,GAAG;KACA,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,qBAAqB,CAAC;KAClC,MAAM,CACL,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAC9F,CAAC;AACJ,GAAG;KACA,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,sBAAsB,CAAC;KACnC,MAAM,CACL,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAC/F,CAAC;AACJ,GAAG;KACA,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,iDAAiD,CAAC;KAC9D,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC;AACvF,GAAG;KACA,OAAO,CAAC,uBAAuB,CAAC;KAChC,WAAW,CAAC,4EAA4E,CAAC;KACzF,MAAM,CAAC,gBAAgB,EAAE,uCAAuC,CAAC;KACjE,MAAM,CAAC,qBAAqB,EAAE,sDAAsD,CAAC;KACrF,MAAM,CACL,gBAAgB,EAChB,sDAAsD,EACtD,gBAAgB,CACjB;KACA,MAAM,CAAC,4BAA4B,EAAE,gCAAgC,EAAE,gBAAgB,CAAC;KACxF,MAAM,CACL,GAAG,CACD,KAAK,EACH,MAAM,EACN,IAAY,EACZ,IAAc,EACd,OAKC,EACD,EAAE;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,KAAgC,CAAC;IACrC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IACxB,CAAC;SAAM,IAAI,OAAO,CAAC,SAAS,KAAK,GAAG,EAAE,CAAC;QACrC,KAAK,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;SAAM,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC3C,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAiB,CAAC,MAAM,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,GAAS,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClC,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAC/B,IAAI,EACJ;YACE,IAAI,EAAE,IAAI;YACV,KAAK;YACL,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;YACxE,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;SAChD,EACD,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvB,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,EACD,KAAK,CAAC,MAAM,CACb,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,OAAO,CAAC,UAAU,MAAM,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC,CACF,CACF,CAAC;AAEJ,MAAM,UAAU,GAAG,OAAO;KACvB,OAAO,CAAC,YAAY,CAAC;KACrB,WAAW,CAAC,uCAAuC,CAAC,CAAC;AACxD,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;AACjG,UAAU;KACP,OAAO,CAAC,UAAU,CAAC;KACnB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3F,UAAU;KACP,OAAO,CAAC,YAAY,CAAC;KACrB,MAAM,CACL,GAAG,CAAC,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,qBAAqB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAC7F,CAAC;AACJ,UAAU;KACP,OAAO,CAAC,oBAAoB,CAAC;KAC7B,MAAM,CACL,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,IAAY,EAAE,EAAE,CACvC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CACrE,CACF,CAAC;AACJ,UAAU;KACP,OAAO,CAAC,aAAa,CAAC;KACtB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9F,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;IACxC,UAAU;SACP,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC;SACzB,MAAM,CACL,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,uBAAuB,EAAE,IAAI,MAAM,EAAE,CAAC,CAAC,CAC3F,CAAC;AACN,CAAC;AACD,UAAU;KACP,OAAO,CAAC,kBAAkB,CAAC;KAC3B,WAAW,CAAC,kFAAkF,CAAC;KAC/F,MAAM,CAAC,iBAAiB,EAAE,6CAA6C,CAAC;KACxE,MAAM,CAAC,SAAS,EAAE,iCAAiC,CAAC;KACpD,MAAM,CAAC,WAAW,EAAE,uCAAuC,CAAC;KAC5D,MAAM,CAAC,WAAW,EAAE,sDAAsD,CAAC;KAC3E,MAAM,CAAC,qBAAqB,EAAE,oCAAoC,EAAE,gBAAgB,EAAE,GAAG,CAAC;KAC1F,MAAM,CACL,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAY,EAAE,OAAyB,EAAE,EAAE;IAC5D,MAAM,WAAW,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CACvC,KAAK,EACL,qBAAqB,CACtB,CAAwB,CAAC;IAC1B,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAoB,CAAC;IACpF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,KAAK,UAAU,CAAC,EAAE,CAAC,CAAC;IAChF,IAAI,QAA4B,CAAC;IACjC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,YAAY,KAAK,UAAU,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,WAAW,OAAO,CAAC,MAAM,oCAAoC,IAAI,GAAG,CAAC,CAAC;QACxF,CAAC;QACD,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC;IACvB,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACxD,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzB,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,gDAAgD,CAAC,CAAC;IACvF,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,oBAAoB,KAAK,CAAC,MAAM,yCAAyC,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAClC,MAAM,EACN,uBAAuB,UAAU,CAAC,EAAE,YAAY,EAChD;QACE,QAAQ;QACR,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;KAC9B,CACF,CAAkD,CAAC;IAEpD,IAAI,OAAO,CAAC,IAAI,EAAiB,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACpD,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAiB,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,IAAI,4BAA4B,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IACjD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,UAAU,CAAC,IAAI,QAAQ,CAAC,CAAC;QACtE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,gBAAgB,IAAI,CAAC,CAAC;IACvF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gCAAgC,UAAU,CAAC,IAAI,SAAS,gBAAgB,IAAI,CAC7E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,OAAO;IAE1B,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gDAAgD,cAAc,iCAAiC,CAChG,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,KAAK,CAAC;IACrD,SAAS,CAAC;QACR,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qBAAqB,cAAc,4BAA4B;gBAC7D,2EAA2E,CAC9E,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CACnC,KAAK,EACL,uBAAuB,UAAU,CAAC,EAAE,EAAE,CACvC,CAAsB,CAAC;QACxB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,IAAI,8BAA8B,CAAC,CAAC;YAC5E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,OAAO,CAAC,MAAM,MAAM,CAAC,CAAC;gBACjF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;YACD,OAAO;QACT,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CACH,CAAC;AAEJ,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;AACzD,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AAEvD,OAAO;KACJ,OAAO,CAAC,wBAAwB,CAAC;KACjC,WAAW,CAAC,mCAAmC,CAAC;KAChD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;AAEpG,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,iCAAiC,CAAC,CAAC;AACxF,MAAM;KACH,OAAO,CAAC,eAAe,CAAC;KACxB,MAAM,CAAC,mBAAmB,EAAE,8DAA8D,CAAC;KAC3F,MAAM,CACL,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAwB,EAAE,OAAgB,EAAE,EAAE;IAC/D,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAgC,CAAC,cAAc,IAAI,KAAK,CAAC;IAC5F,IAAI,cAAc,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAChC,KAAK,EACL,wCAAwC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAC5E,CAAC;IACF,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAClC,aAAa,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CACH,CAAC;AACJ,MAAM;KACH,OAAO,CAAC,eAAe,CAAC;KACxB,MAAM,CACL,GAAG,CAAC,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,uBAAuB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAC/F,CAAC;AACJ,MAAM;KACH,OAAO,CAAC,uBAAuB,CAAC;KAChC,WAAW,CACV,yGAAyG,CAC1G;KACA,MAAM,CAAC,WAAW,EAAE,sDAAsD,CAAC;KAC3E,MAAM,CAAC,UAAU,EAAE,wEAAwE,CAAC;KAC5F,MAAM,CACL,GAAG,CAAC,CAAC,MAAM,EAAE,IAAY,EAAE,OAAgB,EAAE,EAAE;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAA2C,CAAC;IACxE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,+BAA+B,EAAE;QAC7D,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;QACjC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,8BAA8B,CAAC,CAAC;AACzF,QAAQ;KACL,OAAO,CAAC,WAAW,CAAC;KACpB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC,CAAC,CAAC;AACjF,QAAQ;KACL,OAAO,CAAC,aAAa,CAAC;KACtB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;AAEhG,MAAM,MAAM,GAAG,OAAO;KACnB,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,iEAAiE,CAAC,CAAC;AAClF,MAAM;KACH,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,0CAA0C,CAAC;KACvD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;AACpE,MAAM;KACH,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,qEAAqE,CAAC;KAClF,MAAM,CAAC,eAAe,EAAE,uCAAuC,EAAE,aAAa,EAAE,EAAE,CAAC;KACnF,MAAM,CACL,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAU,EAAE,OAAwC,EAAE,EAAE;IACzE,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE;QAC5E,MAAM,EAAE,OAAO,CAAC,GAAG;KACpB,CAAC,CAA0D,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,iBAAiB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mFAAmF,OAAO,CAAC,SAAS,IAAI,CACzG,CAAC;IACJ,CAAC;IACD,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,0BAA0B,OAAO,CAAC,KAAK,EAAE,CAAC,CAKlF,CAAC;QACF,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAChC,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,gBAAgB,CAAC,CAAC;YAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;gBACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,CAAC,MAAM,CAAC;YACpB,CAAC;QACH,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;AACH,CAAC,CAAC,CACH,CAAC;AACJ,MAAM;KACH,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,8EAA8E,CAAC;KAC3F,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;AACjG,MAAM;KACH,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,8DAA8D,CAAC;KAC3E,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC;AAC5E,MAAM;KACH,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,kFAAkF,CAAC;KAC/F,MAAM,CACL,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAU,EAAE,EAAE;IAC/B,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE,SAAS,CAAC,CAG3E,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAC9E,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,0BAA0B,OAAO,CAAC,KAAK,EAAE,CAAC,CAKlF,CAAC;QACF,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC;YAC3E,OAAO,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;QAC3B,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;AACH,CAAC,CAAC,CACH,CAAC;AAEJ,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;AAC7F,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;AAChG,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,KAAK,CAAC;KACnD,MAAM,CACL,GAAG,CAAC,CAAC,MAAM,EAAE,OAAgB,EAAE,EAAE,CAC/B,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,wBAAwB,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAC1F,CACF,CAAC;AAEJ,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,2CAA2C,CAAC,CAAC;AAChG,KAAK;KACF,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,wBAAwB,CAAC;KACrC,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,IAAI,CAAC;KAClD,MAAM,CAAC,eAAe,EAAE,qBAAqB,CAAC;KAC9C,MAAM,CAAC,eAAe,EAAE,8BAA8B,CAAC;KACvD,MAAM,CAAC,mBAAmB,EAAE,2CAA2C,CAAC;KACxE,MAAM,CAAC,mBAAmB,EAAE,kBAAkB,CAAC;KAC/C,MAAM,CACL,GAAG,CAAC,CAAC,MAAM,EAAE,OAAgB,EAAE,EAAE;IAC/B,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM;QAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,IAAI;QAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,QAAQ;QAAE,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnE,IAAI,OAAO,CAAC,MAAM;QAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,KAAK,EAAE,CAAC,CAAC;AACzD,CAAC,CAAC,CACH,CAAC;AACJ,KAAK;KACF,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,qCAAqC,CAAC;KAClD,MAAM,CAAC,eAAe,EAAE,qBAAqB,CAAC;KAC9C,MAAM,CAAC,eAAe,EAAE,8BAA8B,CAAC;KACvD,MAAM,CAAC,cAAc,EAAE,uBAAuB,CAAC;KAC/C,MAAM,CAAC,YAAY,EAAE,qBAAqB,CAAC;KAC3C,MAAM,CACL,GAAG,CAAC,CAAC,MAAM,EAAE,OAAgB,EAAE,EAAE;IAC/B,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM;QAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,IAAI;QAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,IAAI;QAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,uBAAuB,KAAK,EAAE,CAAC,CAAC;AAC/D,CAAC,CAAC,CACH,CAAC;AAEJ,OAAO;KACJ,OAAO,CAAC,qBAAqB,CAAC;KAC9B,WAAW,CAAC,gCAAgC,CAAC;KAC7C,MAAM,CAAC,eAAe,EAAE,+BAA+B,CAAC;KACxD,MAAM,CACL,GAAG,CAAC,CAAC,MAAM,EAAE,MAAc,EAAE,IAAY,EAAE,OAAgB,EAAE,EAAE,CAC7D,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,WAAW,EAAE,EACpB,IAAI,EACJ,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAChE,CACF,CACF,CAAC;AAEJ,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,sCAAsC,CAAC,CAAC;AACzF,IAAI;KACD,OAAO,CAAC,OAAO,CAAC;KAChB,cAAc,CAAC,aAAa,CAAC;KAC7B,cAAc,CAAC,qBAAqB,CAAC;KACrC,MAAM,CAAC,CAAC,OAA4C,EAAE,EAAE;IACvD,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC;AACL,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;IACjC,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAEvC,SAAS,gBAAgB,CAAC,IAAa,EAAE,IAAY,EAAE,IAAY;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1F,OAAO;SACJ,OAAO,CAAC,eAAe,CAAC;SACxB,MAAM,CACL,GAAG,CAAC,CAAC,MAAM,EAAE,OAAe,EAAE,EAAE,CAC9B,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAC7D,CACF,CAAC;IACJ,OAAO;SACJ,OAAO,CAAC,aAAa,CAAC;SACtB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,GAAG,CACV,MAA6E;IAE7E,OAAO,KAAK,EAAE,GAAG,IAAW,EAAiB,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAiB,CAAC;YAC9C,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,MAAM,CACxB,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,EACjE,GAAG,IAAI,CACR,CAAC;YACF,IAAI,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAsB;IAC/C,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,OAAO,iBAAiB,CAAC,KAAK,CAAC;QAC7B,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,EAAE,GAAG;QAC3D,UAAU,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,EAAE,UAAU;KAClF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe;IACtB,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,kFAAkF;QAClF,wEAAwE;QACxE,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,CAAC;YACH,OAAO,iBAAiB,CAAC,KAAK,CAC5B,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAC3F,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,IAAI,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,MAAwB;IACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAwBD,SAAS,iBAAiB,CAAC,WAAgC,EAAE,KAAa;IACxE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;IACvE,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAC9B,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CACtE,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,2CAA2C,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,uCAAuC,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,aAAa,CAAC,OAAwB,EAAE,KAAa;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IAC/D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;IAC3D,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,uCAAuC,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,mCAAmC,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC7B,IAAI,OAAe,CAAC;IACpB,IAAI,IAAc,CAAC;IACnB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,GAAG,MAAM,CAAC;QACjB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,GAAG,KAAK,CAAC;QAChB,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,UAAU,CAAC;QACrB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,GAAG,IAAI,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAsB;IAC9C,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,QAAgC;IACpE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,GAAG,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;AAC1E,CAAC"}
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
import type { CliAllowList } from './models.js';
|
|
2
|
+
export type AllowVerdict = {
|
|
3
|
+
verdict: 'allow';
|
|
4
|
+
} | {
|
|
5
|
+
verdict: 'deny';
|
|
6
|
+
reason: string;
|
|
7
|
+
};
|
|
8
|
+
/**
|
|
9
|
+
* Evaluate a CLI allow-list against an argv array before spawn.
|
|
10
|
+
*
|
|
11
|
+
* Rules are token patterns matched as a prefix of argv; `*` matches a single
|
|
12
|
+
* argv token. A deny rule match always rejects. When the allow list is
|
|
13
|
+
* non-empty, at least one allow rule must match. An empty allow list means the
|
|
14
|
+
* entry is explicitly trusted (same trust decision the Market makes for
|
|
15
|
+
* home-stdio entries).
|
|
16
|
+
*/
|
|
17
|
+
export declare function evaluateAllowList(argv: string[], rules: CliAllowList): AllowVerdict;
|
|
18
|
+
//# sourceMappingURL=allow-list.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"allow-list.d.ts","sourceRoot":"","sources":["../../../src/cli-plane/allow-list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAgB,MAAM,aAAa,CAAC;AAE9D,MAAM,MAAM,YAAY,GAAG;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtF;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,GAAG,YAAY,CAYnF"}
|