@1mcp/agent 0.37.0 → 0.38.1

package/build/sdk/legacy/server/stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../../../src/sdk/legacy/server/stdio.ts"],"names":[],"mappings":"AAAA,cAAc,2CAA2C,CAAC"}

package/build/sdk/legacy/server/stdio.js

@@ -0,0 +1,2 @@
+export * from '@modelcontextprotocol/sdk/server/stdio.js';
+//# sourceMappingURL=stdio.js.map

package/build/sdk/legacy/server/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../../../src/sdk/legacy/server/stdio.ts"],"names":[],"mappings":"AAAA,cAAc,2CAA2C,CAAC"}

package/build/sdk/legacy/server/streamableHttp.d.ts

@@ -0,0 +1,2 @@
+export * from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+//# sourceMappingURL=streamableHttp.d.ts.map

package/build/sdk/legacy/server/streamableHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamableHttp.d.ts","sourceRoot":"","sources":["../../../../src/sdk/legacy/server/streamableHttp.ts"],"names":[],"mappings":"AAAA,cAAc,oDAAoD,CAAC"}

package/build/sdk/legacy/server/streamableHttp.js

@@ -0,0 +1,2 @@
+export * from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+//# sourceMappingURL=streamableHttp.js.map

package/build/sdk/legacy/server/streamableHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamableHttp.js","sourceRoot":"","sources":["../../../../src/sdk/legacy/server/streamableHttp.ts"],"names":[],"mappings":"AAAA,cAAc,oDAAoD,CAAC"}

package/build/sdk/legacy/shared/auth.d.ts

@@ -0,0 +1,2 @@
+export * from '@modelcontextprotocol/sdk/shared/auth.js';
+//# sourceMappingURL=auth.d.ts.map

package/build/sdk/legacy/shared/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../src/sdk/legacy/shared/auth.ts"],"names":[],"mappings":"AAAA,cAAc,0CAA0C,CAAC"}

package/build/sdk/legacy/shared/auth.js

@@ -0,0 +1,2 @@
+export * from '@modelcontextprotocol/sdk/shared/auth.js';
+//# sourceMappingURL=auth.js.map

package/build/sdk/legacy/shared/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../src/sdk/legacy/shared/auth.ts"],"names":[],"mappings":"AAAA,cAAc,0CAA0C,CAAC"}

package/build/sdk/legacy/shared/capabilityListCapture.d.ts

@@ -0,0 +1,4 @@
+import { type JsonValue } from '../../contracts/index.js';
+/** Keep malformed template syntax local to one catalog source capability. */
+export declare function captureCapabilityListResult(method: string, result: unknown): JsonValue;
+//# sourceMappingURL=capabilityListCapture.d.ts.map

package/build/sdk/legacy/shared/capabilityListCapture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilityListCapture.d.ts","sourceRoot":"","sources":["../../../../src/sdk/legacy/shared/capabilityListCapture.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,SAAS,EAAe,MAAM,6BAA6B,CAAC;AAE1E,6EAA6E;AAC7E,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,SAAS,CA4BtF"}

package/build/sdk/legacy/shared/capabilityListCapture.js

@@ -0,0 +1,30 @@
+import { UriTemplate } from '@modelcontextprotocol/sdk/shared/uriTemplate.js';
+import { toJsonValue } from '../../contracts/index.js';
+/** Keep malformed template syntax local to one catalog source capability. */
+export function captureCapabilityListResult(method, result) {
+    const captured = toJsonValue(result);
+    if (method !== 'resources/templates/list' ||
+        captured === null ||
+        Array.isArray(captured) ||
+        typeof captured !== 'object' ||
+        !Array.isArray(captured.resourceTemplates)) {
+        return captured;
+    }
+    captured.resourceTemplates = captured.resourceTemplates.map((template) => {
+        if (template === null ||
+            Array.isArray(template) ||
+            typeof template !== 'object' ||
+            typeof template.uriTemplate !== 'string') {
+            return template;
+        }
+        try {
+            new UriTemplate(template.uriTemplate);
+            return template;
+        }
+        catch {
+            return null;
+        }
+    });
+    return captured;
+}
+//# sourceMappingURL=capabilityListCapture.js.map

package/build/sdk/legacy/shared/capabilityListCapture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilityListCapture.js","sourceRoot":"","sources":["../../../../src/sdk/legacy/shared/capabilityListCapture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iDAAiD,CAAC;AAE9E,OAAO,EAAkB,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE1E,6EAA6E;AAC7E,MAAM,UAAU,2BAA2B,CAAC,MAAc,EAAE,MAAe;IACzE,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,IACE,MAAM,KAAK,0BAA0B;QACrC,QAAQ,KAAK,IAAI;QACjB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACvB,OAAO,QAAQ,KAAK,QAAQ;QAC5B,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAC1C,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,QAAQ,CAAC,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QACvE,IACE,QAAQ,KAAK,IAAI;YACjB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvB,OAAO,QAAQ,KAAK,QAAQ;YAC5B,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,EACxC,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,CAAC;YACH,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACtC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/build/sdk/legacy/shared/protocol.d.ts

@@ -0,0 +1,2 @@
+export * from '@modelcontextprotocol/sdk/shared/protocol.js';
+//# sourceMappingURL=protocol.d.ts.map

package/build/sdk/legacy/shared/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../../../src/sdk/legacy/shared/protocol.ts"],"names":[],"mappings":"AAAA,cAAc,8CAA8C,CAAC"}

package/build/sdk/legacy/shared/protocol.js

@@ -0,0 +1,2 @@
+export * from '@modelcontextprotocol/sdk/shared/protocol.js';
+//# sourceMappingURL=protocol.js.map

package/build/sdk/legacy/shared/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../../src/sdk/legacy/shared/protocol.ts"],"names":[],"mappings":"AAAA,cAAc,8CAA8C,CAAC"}

package/build/sdk/legacy/shared/resourceTemplateRouting.d.ts

@@ -0,0 +1,12 @@
+import type { CatalogEntry } from '../../../core/capabilities/catalogGeneration.js';
+import type { RuntimeCapabilitySnapshot } from '../../../core/capabilities/runtimeCapabilityCatalog.js';
+import type { OutboundConnection } from '../../../core/types/index.js';
+interface ResourceRoute {
+    entry: CatalogEntry;
+    connection: OutboundConnection;
+    upstreamIdentity: string;
+}
+export declare function resolveResourceRoute(snapshot: RuntimeCapabilitySnapshot, identity: string): ResourceRoute;
+export declare function projectResourceUri(snapshot: RuntimeCapabilitySnapshot, connectionKey: string, upstreamIdentity: string): string;
+export {};
+//# sourceMappingURL=resourceTemplateRouting.d.ts.map

package/build/sdk/legacy/shared/resourceTemplateRouting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceTemplateRouting.d.ts","sourceRoot":"","sources":["../../../../src/sdk/legacy/shared/resourceTemplateRouting.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oDAAoD,CAAC;AACpG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,UAAU,aAAa;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAUD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,yBAAyB,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,CA2BzG;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,yBAAyB,EACnC,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,MAAM,GACvB,MAAM,CAmBR"}

package/build/sdk/legacy/shared/resourceTemplateRouting.js

@@ -0,0 +1,66 @@
+import { UriTemplate } from '@modelcontextprotocol/sdk/shared/uriTemplate.js';
+/** Derive only the namespace owned by this exact catalog template, never by parsing a display name. */
+function catalogPrefix(entry) {
+    const upstreamTemplate = entry.route.upstreamIdentity.trim();
+    return entry.route.publicIdentity.endsWith(upstreamTemplate)
+        ? entry.route.publicIdentity.slice(0, -upstreamTemplate.length)
+        : undefined;
+}
+export function resolveResourceRoute(snapshot, identity) {
+    const exact = snapshot.resolve('resources', identity);
+    if (exact?.connection)
+        return { entry: exact.entry, connection: exact.connection, upstreamIdentity: exact.entry.route.upstreamIdentity };
+    const matches = [];
+    for (const entry of snapshot.generation.entries) {
+        if (entry.route.kind !== 'resourceTemplates')
+            continue;
+        const connection = snapshot.connections.get(entry.route.connectionKey);
+        if (!connection)
+            continue;
+        let matched = false;
+        try {
+            matched = new UriTemplate(entry.route.publicIdentity).match(identity) !== null;
+        }
+        catch {
+            continue;
+        }
+        const prefix = catalogPrefix(entry);
+        if (matched && prefix !== undefined && identity.startsWith(prefix))
+            matches.push({
+                entry,
+                connection,
+                // The full template selected the route; its owned namespace is removed without decoding URI bytes.
+                upstreamIdentity: identity.slice(prefix.length),
+            });
+    }
+    if (matches.length !== 1)
+        throw new Error(matches.length ? `Ambiguous resource: ${identity}` : `Unknown resource: ${identity}`);
+    return matches[0];
+}
+export function projectResourceUri(snapshot, connectionKey, upstreamIdentity) {
+    const matches = [];
+    for (const entry of snapshot.generation.entries) {
+        if (entry.route.connectionKey !== connectionKey)
+            continue;
+        if (entry.route.kind === 'resources' && entry.route.upstreamIdentity === upstreamIdentity)
+            return entry.route.publicIdentity;
+        if (entry.route.kind !== 'resourceTemplates')
+            continue;
+        try {
+            if (new UriTemplate(entry.route.upstreamIdentity).match(upstreamIdentity)) {
+                const prefix = catalogPrefix(entry);
+                if (prefix !== undefined)
+                    matches.push(`${prefix}${upstreamIdentity}`);
+            }
+        }
+        catch {
+            continue;
+        }
+    }
+    if (!matches.length)
+        return snapshot.projectUnlistedResource(connectionKey, upstreamIdentity);
+    if (new Set(matches).size !== 1)
+        throw new Error(`Ambiguous upstream resource: ${upstreamIdentity}`);
+    return matches[0];
+}
+//# sourceMappingURL=resourceTemplateRouting.js.map

package/build/sdk/legacy/shared/resourceTemplateRouting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceTemplateRouting.js","sourceRoot":"","sources":["../../../../src/sdk/legacy/shared/resourceTemplateRouting.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iDAAiD,CAAC;AAY9E,uGAAuG;AACvG,SAAS,aAAa,CAAC,KAAmB;IACxC,MAAM,gBAAgB,GAAG,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;IAC7D,OAAO,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC1D,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAC/D,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAmC,EAAE,QAAgB;IACxF,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACtD,IAAI,KAAK,EAAE,UAAU;QACnB,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACpH,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAChD,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB;YAAE,SAAS;QACvD,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;QACjF,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,OAAO,IAAI,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAChE,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK;gBACL,UAAU;gBACV,mGAAmG;gBACnG,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;aAChD,CAAC,CAAC;IACP,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAC,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;IACxG,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAmC,EACnC,aAAqB,EACrB,gBAAwB;IAExB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAChD,IAAI,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,aAAa;YAAE,SAAS;QAC1D,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,KAAK,CAAC,gBAAgB,KAAK,gBAAgB;YACvF,OAAO,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC;QACpC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB;YAAE,SAAS;QACvD,IAAI,CAAC;YACH,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC1E,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,MAAM,KAAK,SAAS;oBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,gBAAgB,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC,uBAAuB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC9F,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,gBAAgB,EAAE,CAAC,CAAC;IACrG,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/build/sdk/legacy/shared/transport.d.ts

@@ -0,0 +1,2 @@
+export * from '@modelcontextprotocol/sdk/shared/transport.js';
+//# sourceMappingURL=transport.d.ts.map

package/build/sdk/legacy/shared/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../../src/sdk/legacy/shared/transport.ts"],"names":[],"mappings":"AAAA,cAAc,+CAA+C,CAAC"}

package/build/sdk/legacy/shared/transport.js

@@ -0,0 +1,2 @@
+export * from '@modelcontextprotocol/sdk/shared/transport.js';
+//# sourceMappingURL=transport.js.map

package/build/sdk/legacy/shared/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../../src/sdk/legacy/shared/transport.ts"],"names":[],"mappings":"AAAA,cAAc,+CAA+C,CAAC"}

package/build/sdk/legacy/transport/http/loggingSseTransport.d.ts

@@ -0,0 +1,13 @@
+import { ServerResponse } from 'node:http';
+import { SSEServerTransport } from '../../server/sse.js';
+import { JSONRPCMessage } from '../../types.js';
+/**
+ * SSE transport wrapper that logs JSON-RPC error responses.
+ * JSON-RPC errors are sent via SSE with HTTP 200 status, so we need
+ * to intercept the send() method to log error details.
+ */
+export declare class LoggingSSEServerTransport extends SSEServerTransport {
+    constructor(endpoint: string, res: ServerResponse);
+    send(message: JSONRPCMessage): Promise<void>;
+}
+//# sourceMappingURL=loggingSseTransport.d.ts.map

package/build/sdk/legacy/transport/http/loggingSseTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loggingSseTransport.d.ts","sourceRoot":"","sources":["../../../../../src/sdk/legacy/transport/http/loggingSseTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG1D;;;;GAIG;AACH,qBAAa,yBAA0B,SAAQ,kBAAkB;gBACnD,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc;IAIlC,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;CAgC5D"}

package/build/sdk/legacy/transport/http/loggingSseTransport.js

@@ -0,0 +1,43 @@
+import { AgentConfigManager } from '../../../../core/server/agentConfig.js';
+import { SSEServerTransport } from '../../server/sse.js';
+import { logJsonRpc } from '../../../../transport/http/utils/unifiedLogger.js';
+/**
+ * SSE transport wrapper that logs JSON-RPC error responses.
+ * JSON-RPC errors are sent via SSE with HTTP 200 status, so we need
+ * to intercept the send() method to log error details.
+ */
+export class LoggingSSEServerTransport extends SSEServerTransport {
+    constructor(endpoint, res) {
+        super(endpoint, res);
+    }
+    async send(message) {
+        // Check if message is a JSON-RPC error response
+        if ('error' in message && message.error?.code !== undefined) {
+            const agentConfig = AgentConfigManager.getInstance();
+            const isErrorLoggingEnabled = agentConfig.isJsonRpcErrorLoggingEnabled();
+            if (isErrorLoggingEnabled) {
+                try {
+                    // Sanitize errorData - only include safe primitive types
+                    const rawErrorData = message.error.data;
+                    const safeErrorData = rawErrorData === null || ['string', 'number', 'boolean'].includes(typeof rawErrorData)
+                        ? rawErrorData
+                        : undefined;
+                    logJsonRpc('warn', 'JSON-RPC error response', {
+                        jsonrpcVersion: message.jsonrpc,
+                        requestId: message.id,
+                        errorCode: message.error.code,
+                        errorMessage: message.error.message,
+                        errorData: safeErrorData,
+                        sessionId: this.sessionId,
+                    });
+                }
+                catch (_logError) {
+                    // Best-effort logging only; never block the response
+                }
+            }
+        }
+        // Always send the message, even if logging fails
+        return super.send(message);
+    }
+}
+//# sourceMappingURL=loggingSseTransport.js.map

package/build/sdk/legacy/transport/http/loggingSseTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loggingSseTransport.js","sourceRoot":"","sources":["../../../../../src/sdk/legacy/transport/http/loggingSseTransport.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,OAAO,EAAE,UAAU,EAAE,MAAM,4CAA4C,CAAC;AAExE;;;;GAIG;AACH,MAAM,OAAO,yBAA0B,SAAQ,kBAAkB;IAC/D,YAAY,QAAgB,EAAE,GAAmB;QAC/C,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC;IAEQ,KAAK,CAAC,IAAI,CAAC,OAAuB;QACzC,gDAAgD;QAChD,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5D,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC;YACrD,MAAM,qBAAqB,GAAG,WAAW,CAAC,4BAA4B,EAAE,CAAC;YAEzE,IAAI,qBAAqB,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACH,yDAAyD;oBACzD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxC,MAAM,aAAa,GACjB,YAAY,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,YAAY,CAAC;wBACpF,CAAC,CAAC,YAAY;wBACd,CAAC,CAAC,SAAS,CAAC;oBAEhB,UAAU,CAAC,MAAM,EAAE,yBAAyB,EAAE;wBAC5C,cAAc,EAAE,OAAO,CAAC,OAAO;wBAC/B,SAAS,EAAE,OAAO,CAAC,EAAE;wBACrB,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI;wBAC7B,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;wBACnC,SAAS,EAAE,aAAa;wBACxB,SAAS,EAAE,IAAI,CAAC,SAAS;qBAC1B,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,SAAS,EAAE,CAAC;oBACnB,qDAAqD;gBACvD,CAAC;YACH,CAAC;QACH,CAAC;QAED,iDAAiD;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;CACF"}

package/build/sdk/legacy/transport/http/middlewares/scopeAuthMiddleware.d.ts

@@ -0,0 +1,91 @@
+import { SDKOAuthServerProvider } from '../../../../../auth/sdkOAuthServerProvider.js';
+import type { FilterSelection } from '../../../../../core/filtering/filterSelection.js';
+import { TagExpression } from '../../../../../domains/preset/parsers/tagQueryParser.js';
+import { TagQuery } from '../../../../../domains/preset/types/presetTypes.js';
+import type { AuthInfo as SDKAuthInfo } from '../../../server/auth/types.js';
+import { NextFunction, Request, Response } from 'express';
+declare global {
+    namespace Express {
+        interface Request {
+            auth?: SDKAuthInfo;
+        }
+        interface Response {
+            locals: ResponseLocals;
+        }
+    }
+}
+/**
+ * Type-safe response locals interface for scope auth middleware
+ * Extends the default Express locals interface
+ */
+export interface ResponseLocals extends Record<string, unknown> {
+    /** Tags extracted from the request (may be undefined) */
+    tags?: string[];
+    /** Tags that have been validated against scopes */
+    validatedTags?: string[];
+    /** Tag expression for advanced filtering */
+    tagExpression?: TagExpression;
+    /** Tag filter mode */
+    tagFilterMode?: 'simple-or' | 'advanced' | 'preset' | 'none';
+    /** Tag query object */
+    tagQuery?: TagQuery;
+    /** Preset name if used */
+    presetName?: string;
+    /** Canonical filter selection facts from tagsExtractor */
+    filterSelection?: FilterSelection;
+    /** Authentication context */
+    auth?: AuthInfo;
+}
+/**
+ * Authentication information structure
+ */
+export interface AuthInfo {
+    token: string;
+    clientId: string;
+    grantedScopes: string[];
+    grantedTags: string[];
+}
+/**
+ * Creates a scope validation middleware that uses the SDK's bearer auth middleware
+ *
+ * This middleware:
+ * 1. Uses SDK's requireBearerAuth to verify tokens (when auth enabled)
+ * 2. Validates that requested tags are covered by granted scopes
+ * 3. Provides authentication context to downstream handlers
+ *
+ * When scope validation is disabled, all tags are allowed.
+ * When scope validation is enabled:
+ * - If auth is also enabled, validates tokens and scopes
+ * - If auth is disabled, allows all tags (useful for development/testing)
+ */
+export declare function createScopeAuthMiddleware(oauthProvider?: SDKOAuthServerProvider): (_req: Request, res: Response, next: NextFunction) => void;
+/**
+ * Utility function to get validated tags from response locals
+ *
+ * This should be used by downstream handlers instead of directly accessing res.locals.tags
+ * to ensure they get scope-validated tags.
+ */
+export declare function getValidatedTags(res: Response): string[];
+/**
+ * Utility function to get tag expression from response locals
+ */
+export declare function getTagExpression(res: Response): TagExpression | undefined;
+/**
+ * Utility function to get tag filter mode from response locals
+ */
+export declare function getTagFilterMode(res: Response): 'simple-or' | 'advanced' | 'preset' | 'none';
+/**
+ * Utility function to get tag query from response locals
+ */
+export declare function getTagQuery(res: Response): TagQuery | undefined;
+/**
+ * Utility function to get preset name from response locals
+ */
+export declare function getPresetName(res: Response): string | undefined;
+/**
+ * Utility function to get authentication information from response locals
+ */
+export declare function getAuthInfo(res: Response): AuthInfo | undefined;
+declare const _default: (_req: Request, res: Response, next: NextFunction) => void;
+export default _default;
+//# sourceMappingURL=scopeAuthMiddleware.d.ts.map

package/build/sdk/legacy/transport/http/middlewares/scopeAuthMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopeAuthMiddleware.d.ts","sourceRoot":"","sources":["../../../../../../src/sdk/legacy/transport/http/middlewares/scopeAuthMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAE9E,OAAO,EAAE,aAAa,EAAE,MAAM,+CAA+C,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AAGpE,OAAO,KAAK,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,sCAAsC,CAAC;AAGpF,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAG1D,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,IAAI,CAAC,EAAE,WAAW,CAAC;SACpB;QAED,UAAU,QAAQ;YAChB,MAAM,EAAE,cAAc,CAAC;SACxB;KACF;CACF;AAED;;;GAGG;AACH,MAAM,WAAW,cAAe,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC7D,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,4CAA4C;IAC5C,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,sBAAsB;IACtB,aAAa,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC7D,uBAAuB;IACvB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,0BAA0B;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,6BAA6B;IAC7B,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CAAC,aAAa,CAAC,EAAE,sBAAsB,UAK9D,OAAO,OAAO,QAAQ,QAAQ,YAAY,KAAG,IAAI,CAiHlE;AA6CD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,EAAE,CAaxD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,QAAQ,GAAG,aAAa,GAAG,SAAS,CAOzE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,CAW5F;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAO/D;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,CAG/D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAoB/D;+BA1PiB,OAAO,OAAO,QAAQ,QAAQ,YAAY,KAAG,IAAI;AA6PnE,wBAA2C"}

package/build/sdk/legacy/transport/http/middlewares/scopeAuthMiddleware.js

@@ -0,0 +1,240 @@
+import { SDKOAuthServerProvider } from '../../../../../auth/sdkOAuthServerProvider.js';
+import { AgentConfigManager } from '../../../../../core/server/agentConfig.js';
+import logger from '../../../../../logger/logger.js';
+import { requireBearerAuth } from '../../../server/auth/middleware/bearerAuth.js';
+import { auditScopeOperation, hasRequiredScopes, scopesToTags } from '../../../../../utils/validation/scopeValidation.js';
+/**
+ * Creates a scope validation middleware that uses the SDK's bearer auth middleware
+ *
+ * This middleware:
+ * 1. Uses SDK's requireBearerAuth to verify tokens (when auth enabled)
+ * 2. Validates that requested tags are covered by granted scopes
+ * 3. Provides authentication context to downstream handlers
+ *
+ * When scope validation is disabled, all tags are allowed.
+ * When scope validation is enabled:
+ * - If auth is also enabled, validates tokens and scopes
+ * - If auth is disabled, allows all tags (useful for development/testing)
+ */
+export function createScopeAuthMiddleware(oauthProvider) {
+    const serverConfig = AgentConfigManager.getInstance();
+    // If scope validation is disabled, return a pass-through middleware
+    if (!serverConfig.get('features').scopeValidation) {
+        return (_req, res, next) => {
+            res.locals.validatedTags = getRequestedTagsForScope(res);
+            next();
+        };
+    }
+    // If scope validation is enabled but auth is disabled, allow all tags
+    if (!serverConfig.get('features').auth) {
+        return (_req, res, next) => {
+            res.locals.validatedTags = getRequestedTagsForScope(res);
+            next();
+        };
+    }
+    const provider = oauthProvider || new SDKOAuthServerProvider();
+    // Create the SDK's bearer auth middleware
+    const bearerAuthMiddleware = requireBearerAuth({
+        verifier: provider,
+        resourceMetadataUrl: `${AgentConfigManager.getInstance().getUrl()}/.well-known/oauth-protected-resource`,
+    });
+    // Return a combined middleware that does both auth and scope validation
+    return async (req, res, next) => {
+        try {
+            // First run the SDK's bearer auth middleware
+            await new Promise((resolve, reject) => {
+                bearerAuthMiddleware(req, res, (err) => {
+                    if (err)
+                        reject(err);
+                    else
+                        resolve();
+                });
+            });
+            // If we get here, auth succeeded and req.auth is populated
+            const authInfo = req.auth;
+            if (!authInfo) {
+                throw new Error('Authentication succeeded but req.auth is undefined');
+            }
+            // Type-safe access to authInfo properties
+            const grantedScopes = authInfo.scopes ? [...authInfo.scopes] : [];
+            const grantedTags = scopesToTags(grantedScopes);
+            const requestedTags = getRequestedTagsForScope(res);
+            const localsTagExpression = res.locals.tagExpression;
+            const tagExpression = localsTagExpression && typeof localsTagExpression === 'object' && 'type' in localsTagExpression
+                ? localsTagExpression
+                : undefined;
+            const localsTagFilterMode = res.locals.tagFilterMode;
+            const tagFilterMode = localsTagFilterMode === 'simple-or' ||
+                localsTagFilterMode === 'advanced' ||
+                localsTagFilterMode === 'preset' ||
+                localsTagFilterMode === 'none'
+                ? localsTagFilterMode
+                : 'none';
+            const expressionTags = tagFilterMode === 'advanced' && tagExpression ? extractTagsFromExpression(tagExpression) : [];
+            const allRequestedTags = Array.from(new Set([...requestedTags, ...expressionTags]));
+            // Validate that all requested tags are covered by granted scopes
+            if (allRequestedTags.length > 0 && !hasRequiredScopes(grantedScopes, allRequestedTags)) {
+                auditScopeOperation('insufficient_scopes', {
+                    clientId: authInfo.clientId,
+                    requestedScopes: allRequestedTags.map((tag) => `tag:${tag}`),
+                    grantedScopes,
+                    success: false,
+                    error: 'Insufficient scopes for requested tags',
+                });
+                res.status(403).json({
+                    error: 'insufficient_scope',
+                    error_description: `Insufficient scopes. Required: ${allRequestedTags.join(', ')}, Granted: ${grantedTags.join(', ')}`,
+                });
+                return;
+            }
+            // Provide authentication context to downstream handlers via res.locals
+            const authHeader = req.headers.authorization;
+            const token = typeof authHeader === 'string' && authHeader.startsWith('Bearer ') ? authHeader.slice(7) : '';
+            const authContext = {
+                token,
+                clientId: authInfo.clientId || '',
+                grantedScopes,
+                grantedTags,
+            };
+            res.locals.auth = authContext;
+            // Provide validated tags to downstream handlers
+            // If no specific tags requested, use all granted tags
+            res.locals.validatedTags = allRequestedTags.length > 0 ? allRequestedTags : grantedTags;
+            auditScopeOperation('scope_validation_success', {
+                clientId: authInfo.clientId,
+                requestedScopes: allRequestedTags.map((tag) => `tag:${tag}`),
+                grantedScopes,
+                success: true,
+            });
+            next();
+        }
+        catch (error) {
+            logger.error('Scope auth middleware error:', error);
+            res.status(500).json({
+                error: 'server_error',
+                error_description: 'Internal server error',
+            });
+        }
+    };
+}
+function getRequestedTagsForScope(res) {
+    const filterSelection = res.locals?.filterSelection;
+    if (filterSelection && typeof filterSelection === 'object' && 'requestedTags' in filterSelection) {
+        const requestedTags = filterSelection.requestedTags;
+        if (Array.isArray(requestedTags)) {
+            return requestedTags.filter((tag) => typeof tag === 'string');
+        }
+    }
+    const localsTags = res.locals.tags;
+    return Array.isArray(localsTags)
+        ? localsTags.filter((tag) => typeof tag === 'string')
+        : [];
+}
+/**
+ * Extract all tag names from a tag expression (for scope validation)
+ */
+function extractTagsFromExpression(expression) {
+    const tags = [];
+    function traverse(expr) {
+        switch (expr.type) {
+            case 'tag':
+                if (expr.value && !tags.includes(expr.value)) {
+                    tags.push(expr.value);
+                }
+                break;
+            case 'and':
+            case 'or':
+            case 'not':
+            case 'group':
+                if (expr.children) {
+                    expr.children.forEach(traverse);
+                }
+                break;
+        }
+    }
+    traverse(expression);
+    return tags;
+}
+/**
+ * Utility function to get validated tags from response locals
+ *
+ * This should be used by downstream handlers instead of directly accessing res.locals.tags
+ * to ensure they get scope-validated tags.
+ */
+export function getValidatedTags(res) {
+    if (!res?.locals?.validatedTags) {
+        return [];
+    }
+    // Ensure it's an array
+    const validatedTags = res.locals.validatedTags;
+    if (!Array.isArray(validatedTags)) {
+        return [];
+    }
+    // Ensure all elements are strings
+    return validatedTags.filter((tag) => typeof tag === 'string');
+}
+/**
+ * Utility function to get tag expression from response locals
+ */
+export function getTagExpression(res) {
+    const tagExpression = res.locals?.tagExpression;
+    if (!tagExpression || typeof tagExpression !== 'object') {
+        return undefined;
+    }
+    // Type guard to ensure it's a valid TagExpression
+    return 'type' in tagExpression ? tagExpression : undefined;
+}
+/**
+ * Utility function to get tag filter mode from response locals
+ */
+export function getTagFilterMode(res) {
+    const tagFilterMode = res.locals?.tagFilterMode;
+    if (tagFilterMode === 'simple-or' ||
+        tagFilterMode === 'advanced' ||
+        tagFilterMode === 'preset' ||
+        tagFilterMode === 'none') {
+        return tagFilterMode;
+    }
+    return 'none';
+}
+/**
+ * Utility function to get tag query from response locals
+ */
+export function getTagQuery(res) {
+    const tagQuery = res.locals?.tagQuery;
+    if (!tagQuery || typeof tagQuery !== 'object') {
+        return undefined;
+    }
+    // Type guard to ensure it's a valid TagQuery
+    return tagQuery;
+}
+/**
+ * Utility function to get preset name from response locals
+ */
+export function getPresetName(res) {
+    const presetName = res.locals?.presetName;
+    return typeof presetName === 'string' ? presetName : undefined;
+}
+/**
+ * Utility function to get authentication information from response locals
+ */
+export function getAuthInfo(res) {
+    const auth = res.locals?.auth;
+    if (!auth || typeof auth !== 'object') {
+        return undefined;
+    }
+    // Type guard to ensure it's a valid AuthInfo object
+    const authObj = auth;
+    if (typeof authObj.token === 'string' &&
+        typeof authObj.clientId === 'string' &&
+        Array.isArray(authObj.grantedScopes) &&
+        authObj.grantedScopes.every((scope) => typeof scope === 'string') &&
+        Array.isArray(authObj.grantedTags) &&
+        authObj.grantedTags.every((tag) => typeof tag === 'string')) {
+        return auth;
+    }
+    return undefined;
+}
+// Default export for backward compatibility (creates a new provider instance)
+export default createScopeAuthMiddleware();
+//# sourceMappingURL=scopeAuthMiddleware.js.map

package/build/sdk/legacy/transport/http/middlewares/scopeAuthMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopeAuthMiddleware.js","sourceRoot":"","sources":["../../../../../../src/sdk/legacy/transport/http/middlewares/scopeAuthMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sDAAsD,CAAC;AAEzF,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAkDhH;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CAAC,aAAsC;IAC9E,MAAM,YAAY,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC;IAEtD,oEAAoE;IACpE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,eAAe,EAAE,CAAC;QAClD,OAAO,CAAC,IAAa,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;YAChE,GAAG,CAAC,MAAM,CAAC,aAAa,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;YACzD,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,OAAO,CAAC,IAAa,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;YAChE,GAAG,CAAC,MAAM,CAAC,aAAa,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;YACzD,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,IAAI,IAAI,sBAAsB,EAAE,CAAC;IAE/D,0CAA0C;IAC1C,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;QAC7C,QAAQ,EAAE,QAAQ;QAClB,mBAAmB,EAAE,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,uCAAuC;KACzG,CAAC,CAAC;IAEH,wEAAwE;IACxE,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAiB,EAAE;QAC9E,IAAI,CAAC;YACH,6CAA6C;YAC7C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAa,EAAE,EAAE;oBAC/C,IAAI,GAAG;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;wBAChB,OAAO,EAAE,CAAC;gBACjB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,2DAA2D;YAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC;YAC1B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,0CAA0C;YAC1C,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,WAAW,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;YAEhD,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;YAEpD,MAAM,mBAAmB,GAAG,GAAG,CAAC,MAAM,CAAC,aAAwB,CAAC;YAChE,MAAM,aAAa,GACjB,mBAAmB,IAAI,OAAO,mBAAmB,KAAK,QAAQ,IAAI,MAAM,IAAI,mBAAmB;gBAC7F,CAAC,CAAE,mBAAqC;gBACxC,CAAC,CAAC,SAAS,CAAC;YAEhB,MAAM,mBAAmB,GAAG,GAAG,CAAC,MAAM,CAAC,aAAwB,CAAC;YAChE,MAAM,aAAa,GACjB,mBAAmB,KAAK,WAAW;gBACnC,mBAAmB,KAAK,UAAU;gBAClC,mBAAmB,KAAK,QAAQ;gBAChC,mBAAmB,KAAK,MAAM;gBAC5B,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,MAAM,CAAC;YAEb,MAAM,cAAc,GAClB,aAAa,KAAK,UAAU,IAAI,aAAa,CAAC,CAAC,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChG,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YAEpF,iEAAiE;YACjE,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,gBAAgB,CAAC,EAAE,CAAC;gBACvF,mBAAmB,CAAC,qBAAqB,EAAE;oBACzC,QAAQ,EAAE,QAAQ,CAAC,QAAkB;oBACrC,eAAe,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC;oBACpE,aAAa;oBACb,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,wCAAwC;iBAChD,CAAC,CAAC;gBAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,oBAAoB;oBAC3B,iBAAiB,EAAE,kCAAkC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACvH,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,uEAAuE;YACvE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;YAC7C,MAAM,KAAK,GAAG,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAE5G,MAAM,WAAW,GAAa;gBAC5B,KAAK;gBACL,QAAQ,EAAG,QAAQ,CAAC,QAAmB,IAAI,EAAE;gBAC7C,aAAa;gBACb,WAAW;aACZ,CAAC;YACF,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,WAAW,CAAC;YAE9B,gDAAgD;YAChD,sDAAsD;YACtD,GAAG,CAAC,MAAM,CAAC,aAAa,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC;YAExF,mBAAmB,CAAC,0BAA0B,EAAE;gBAC9C,QAAQ,EAAE,QAAQ,CAAC,QAAkB;gBACrC,eAAe,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC;gBACpE,aAAa;gBACb,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,IAAI,EAAE,CAAC;QACT,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,uBAAuB;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAa;IAC7C,MAAM,eAAe,GAAG,GAAG,CAAC,MAAM,EAAE,eAA0B,CAAC;IAC/D,IAAI,eAAe,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,IAAI,eAAe,EAAE,CAAC;QACjG,MAAM,aAAa,GAAI,eAA0D,CAAC,aAAa,CAAC;QAChG,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,IAAe,CAAC;IAC9C,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAC9B,CAAC,CAAE,UAAwB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;QACnF,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED;;GAEG;AACH,SAAS,yBAAyB,CAAC,UAAyB;IAC1D,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,SAAS,QAAQ,CAAC,IAAmB;QACnC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,KAAK;gBACR,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC7C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxB,CAAC;gBACD,MAAM;YACR,KAAK,KAAK,CAAC;YACX,KAAK,IAAI,CAAC;YACV,KAAK,KAAK,CAAC;YACX,KAAK,OAAO;gBACV,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAClB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAClC,CAAC;gBACD,MAAM;QACV,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAa;IAC5C,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,uBAAuB;IACvB,MAAM,aAAa,GAAY,GAAG,CAAC,MAAM,CAAC,aAAwB,CAAC;IACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,kCAAkC;IAClC,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC;AAC/E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAa;IAC5C,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,EAAE,aAAwB,CAAC;IAC3D,IAAI,CAAC,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,kDAAkD;IAClD,OAAO,MAAM,IAAI,aAAa,CAAC,CAAC,CAAE,aAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;AAChF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAa;IAC5C,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,EAAE,aAAwB,CAAC;IAC3D,IACE,aAAa,KAAK,WAAW;QAC7B,aAAa,KAAK,UAAU;QAC5B,aAAa,KAAK,QAAQ;QAC1B,aAAa,KAAK,MAAM,EACxB,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,GAAa;IACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,QAAmB,CAAC;IACjD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,6CAA6C;IAC7C,OAAO,QAAoB,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,GAAa;IACzC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,UAAqB,CAAC;IACrD,OAAO,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,GAAa;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,EAAE,IAAe,CAAC;IACzC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,oDAAoD;IACpD,MAAM,OAAO,GAAG,IAA+B,CAAC;IAChD,IACE,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;QACjC,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QACpC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACpC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAC1E,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QAClC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,EACpE,CAAC;QACD,OAAO,IAAgB,CAAC;IAC1B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,eAAe,yBAAyB,EAAE,CAAC"}