@assetlab/mcp-server 1.0.2 → 1.1.0

package/README.md

@@ -26,14 +26,14 @@ Connect [Claude](https://claude.ai) to your [AssetLab](https://assetlab.ca) acco
       "args": ["-y", "@assetlab/mcp-server"],
       "env": {
         "ASSETLAB_API_KEY": "al_live_...",
-        "ASSETLAB_API_URL": "https://mxxqgiqimawzeoajiklw.supabase.co/functions/v1/api-gateway"
+        "ASSETLAB_API_URL": "your-api-url"
       }
     }
   }
 }
 ```
 
-> **Tip:** The easiest way to get the correct config is to click **Copy Claude Config** directly on your API key in AssetLab Settings — it pre-fills your key and API URL automatically.
+> **Tip:** The easiest way to get this config is to click **Copy Claude Config** directly on your API key in **AssetLab Settings → API Keys** — it pre-fills your key and API URL automatically.
 
 3. Restart Claude Desktop. You should see the AssetLab tools available.
 
@@ -42,7 +42,7 @@ Connect [Claude](https://claude.ai) to your [AssetLab](https://assetlab.ca) acco
 ```bash
 claude mcp add assetlab npx @assetlab/mcp-server \
   -e ASSETLAB_API_KEY=al_live_... \
-  -e ASSETLAB_API_URL=https://mxxqgiqimawzeoajiklw.supabase.co/functions/v1/api-gateway
+  -e ASSETLAB_API_URL=your-api-url
 ```
 
 ## Example prompts

package/dist/client.d.ts

@@ -30,6 +30,15 @@ export declare class AssetLabClient {
     constructor(config: AssetLabConfig);
     get<T = Record<string, unknown>>(path: string, params?: Record<string, string | number | undefined>): Promise<T>;
     list<T = Record<string, unknown>>(resource: string, params?: Record<string, string | number | undefined>): Promise<PaginatedResponse<T>>;
+    /**
+     * Fetch all pages of a paginated resource automatically.
+     * Uses per_page=1000 to minimize round-trips, then follows
+     * pagination until all rows are collected.
+     */
+    listAll<T = Record<string, unknown>>(resource: string, params?: Record<string, string | number | undefined>): Promise<{
+        data: T[];
+        total: number;
+    }>;
     getOne<T = Record<string, unknown>>(resource: string, id: string): Promise<SingleResponse<T>>;
 }
 export declare function loadConfig(): AssetLabConfig;

package/dist/client.js

@@ -66,6 +66,24 @@ export class AssetLabClient {
     async list(resource, params) {
         return this.get(`/${resource}`, params);
     }
+    /**
+     * Fetch all pages of a paginated resource automatically.
+     * Uses per_page=1000 to minimize round-trips, then follows
+     * pagination until all rows are collected.
+     */
+    async listAll(resource, params) {
+        const allData = [];
+        let page = 1;
+        const perPage = 1000;
+        while (true) {
+            const result = await this.list(resource, { ...params, page, per_page: perPage });
+            allData.push(...result.data);
+            if (page >= result.pagination.total_pages)
+                break;
+            page++;
+        }
+        return { data: allData, total: allData.length };
+    }
     async getOne(resource, id) {
         return this.get(`/${resource}/${id}`);
     }

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAqBH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,MAAM,CAAQ;IACd,YAAY,MAAc,EAAE,OAAe;QACzC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IACjB,OAAO,CAAQ;IACf,MAAM,CAAQ;IAEtB,YAAY,MAAsB;QAChC,+DAA+D;QAC/D,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,GAAG,IAAI,KAAK,CAAA;QACd,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAA;QAClB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,CACP,IAAY,EACZ,MAAoD;QAEpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAA;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACtC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACxC,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;YAC5E,MAAM,OAAO,GAAI,IAA2B,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAA;YAE1E,gCAAgC;YAChC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;gBACnB,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,qDAAqD,CAAC,CAAA;gBAC3F,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;wBAC1D,CAAC,CAAC,OAAO;wBACT,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAC3B,CAAC,CAAC,0EAA0E;4BAC5E,CAAC,CAAC,OAAO,CAAC,CAAA;gBAChB,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAA;gBACzF,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;gBAC7C;oBACE,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACtD,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,QAAgB,EAChB,MAAoD;QAEpD,OAAO,IAAI,CAAC,GAAG,CAAuB,IAAI,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,MAAM,CACV,QAAgB,EAChB,EAAU;QAEV,OAAO,IAAI,CAAC,GAAG,CAAoB,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1D,CAAC;CACF;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,qDAAqD;YACrD,oDAAoD,CACrD,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,qDAAqD;YACrD,iEAAiE,CAClE,CAAA;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAC3B,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAqBH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,MAAM,CAAQ;IACd,YAAY,MAAc,EAAE,OAAe;QACzC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IACjB,OAAO,CAAQ;IACf,MAAM,CAAQ;IAEtB,YAAY,MAAsB;QAChC,+DAA+D;QAC/D,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,GAAG,IAAI,KAAK,CAAA;QACd,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAA;QAClB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,CACP,IAAY,EACZ,MAAoD;QAEpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAA;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACtC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACxC,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;YAC5E,MAAM,OAAO,GAAI,IAA2B,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAA;YAE1E,gCAAgC;YAChC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;gBACnB,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,qDAAqD,CAAC,CAAA;gBAC3F,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;wBAC1D,CAAC,CAAC,OAAO;wBACT,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAC3B,CAAC,CAAC,0EAA0E;4BAC5E,CAAC,CAAC,OAAO,CAAC,CAAA;gBAChB,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAA;gBACzF,KAAK,GAAG;oBACN,MAAM,IAAI,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;gBAC7C;oBACE,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACtD,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,QAAgB,EAChB,MAAoD;QAEpD,OAAO,IAAI,CAAC,GAAG,CAAuB,IAAI,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;IAC/D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CACX,QAAgB,EAChB,MAAoD;QAEpD,MAAM,OAAO,GAAQ,EAAE,CAAA;QACvB,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,MAAM,OAAO,GAAG,IAAI,CAAA;QAEpB,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAI,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;YACnF,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;YAE5B,IAAI,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW;gBAAE,MAAK;YAChD,IAAI,EAAE,CAAA;QACR,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,QAAgB,EAChB,EAAU;QAEV,OAAO,IAAI,CAAC,GAAG,CAAoB,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1D,CAAC;CACF;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,qDAAqD;YACrD,oDAAoD,CACrD,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,qDAAqD;YACrD,iEAAiE,CAClE,CAAA;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAC3B,CAAC"}

package/dist/oauth.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Minimal OAuth 2.0 Authorization Server for Claude.ai MCP integration.
+ *
+ * Implements just enough of OAuth 2.0 + PKCE to satisfy Claude.ai's connector flow:
+ *   1. Dynamic client registration (RFC 7591)
+ *   2. Authorization endpoint (shows "paste your API key" page)
+ *   3. Token endpoint (exchanges auth code for access token)
+ *
+ * The user's AssetLab API key becomes the OAuth access_token, so the existing
+ * MCP handler works unchanged (it reads Bearer token from Authorization header).
+ *
+ * Authorization codes are encrypted with AES-GCM using OAUTH_SECRET — fully
+ * stateless, no KV or Durable Objects needed.
+ */
+export declare function protectedResourceMetadata(origin: string): Response;
+export declare function authServerMetadata(origin: string): Response;
+export declare function handleRegister(request: Request): Promise<Response>;
+export declare function handleAuthorizeGet(request: Request): Response;
+export declare function handleAuthorizePost(request: Request, secret: string): Promise<Response>;
+export declare function handleToken(request: Request, secret: string): Promise<Response>;

package/dist/oauth.js

@@ -0,0 +1,331 @@
+/**
+ * Minimal OAuth 2.0 Authorization Server for Claude.ai MCP integration.
+ *
+ * Implements just enough of OAuth 2.0 + PKCE to satisfy Claude.ai's connector flow:
+ *   1. Dynamic client registration (RFC 7591)
+ *   2. Authorization endpoint (shows "paste your API key" page)
+ *   3. Token endpoint (exchanges auth code for access token)
+ *
+ * The user's AssetLab API key becomes the OAuth access_token, so the existing
+ * MCP handler works unchanged (it reads Bearer token from Authorization header).
+ *
+ * Authorization codes are encrypted with AES-GCM using OAUTH_SECRET — fully
+ * stateless, no KV or Durable Objects needed.
+ */
+// ── Helpers ──────────────────────────────────────────────────────────────────
+function base64url(buf) {
+    const bytes = buf instanceof Uint8Array ? buf : new Uint8Array(buf);
+    let binary = '';
+    for (const b of bytes)
+        binary += String.fromCharCode(b);
+    return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+function fromBase64url(s) {
+    const padded = s.replace(/-/g, '+').replace(/_/g, '/') + '=='.slice(0, (4 - (s.length % 4)) % 4);
+    const binary = atob(padded);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++)
+        bytes[i] = binary.charCodeAt(i);
+    return bytes;
+}
+async function deriveKey(secret) {
+    const raw = new TextEncoder().encode(secret);
+    const hash = await crypto.subtle.digest('SHA-256', raw);
+    return crypto.subtle.importKey('raw', hash, 'AES-GCM', false, ['encrypt', 'decrypt']);
+}
+async function encrypt(payload, secret) {
+    const key = await deriveKey(secret);
+    const iv = crypto.getRandomValues(new Uint8Array(12));
+    const ciphertext = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, key, new TextEncoder().encode(payload));
+    const combined = new Uint8Array(iv.length + new Uint8Array(ciphertext).length);
+    combined.set(iv);
+    combined.set(new Uint8Array(ciphertext), iv.length);
+    return base64url(combined);
+}
+async function decrypt(code, secret) {
+    const data = fromBase64url(code);
+    const iv = data.slice(0, 12);
+    const ciphertext = data.slice(12);
+    const key = await deriveKey(secret);
+    const decrypted = await crypto.subtle.decrypt({ name: 'AES-GCM', iv }, key, ciphertext);
+    return new TextDecoder().decode(decrypted);
+}
+// ── CORS ─────────────────────────────────────────────────────────────────────
+const CORS = {
+    'Access-Control-Allow-Origin': '*',
+    'Access-Control-Allow-Methods': 'GET, POST, DELETE, OPTIONS',
+    'Access-Control-Allow-Headers': 'Authorization, Content-Type, MCP-Protocol-Version, Accept',
+};
+function json(body, status = 200, extra = {}) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'Content-Type': 'application/json', ...CORS, ...extra },
+    });
+}
+// ── Discovery endpoints ─────────────────────────────────────────────────────
+export function protectedResourceMetadata(origin) {
+    const resource = origin.endsWith('/') ? origin : `${origin}/`;
+    return json({
+        resource,
+        authorization_servers: [origin],
+    });
+}
+export function authServerMetadata(origin) {
+    return json({
+        issuer: origin,
+        authorization_endpoint: `${origin}/authorize`,
+        token_endpoint: `${origin}/token`,
+        registration_endpoint: `${origin}/register`,
+        response_types_supported: ['code'],
+        grant_types_supported: ['authorization_code'],
+        scopes_supported: ['claudeai', 'mcp'],
+        code_challenge_methods_supported: ['S256'],
+        token_endpoint_auth_methods_supported: ['none'],
+    });
+}
+// ── Dynamic client registration (RFC 7591) ──────────────────────────────────
+export async function handleRegister(request) {
+    const body = await request.json();
+    const clientId = crypto.randomUUID();
+    return json({
+        client_id: clientId,
+        client_name: body.client_name ?? 'Claude.ai',
+        redirect_uris: body.redirect_uris ?? [],
+        grant_types: body.grant_types ?? ['authorization_code'],
+        response_types: body.response_types ?? ['code'],
+        token_endpoint_auth_method: 'none',
+    }, 201);
+}
+// ── Authorization endpoint ──────────────────────────────────────────────────
+export function handleAuthorizeGet(request) {
+    const url = new URL(request.url);
+    const state = url.searchParams.get('state') ?? '';
+    const redirectUri = url.searchParams.get('redirect_uri') ?? '';
+    const codeChallenge = url.searchParams.get('code_challenge') ?? '';
+    const clientId = url.searchParams.get('client_id') ?? '';
+    const scope = url.searchParams.get('scope') ?? '';
+    const html = `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8"/>
+  <meta name="viewport" content="width=device-width, initial-scale=1"/>
+  <title>Connect to AssetLab</title>
+  <link rel="preconnect" href="https://fonts.googleapis.com"/>
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin/>
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600&family=Lexend:wght@400;500;600&display=swap" rel="stylesheet"/>
+  <style>
+    *{margin:0;padding:0;box-sizing:border-box}
+    body{font-family:'Inter',system-ui,sans-serif;background:rgb(3,6,22);color:#fff;
+         min-height:100vh;display:flex;flex-direction:column;align-items:center;
+         justify-content:center;padding:1rem;position:relative;overflow:hidden}
+    /* base grid - white, faded on edges */
+    .grid-base{position:fixed;inset:0;pointer-events:none;z-index:0;opacity:.04;
+      background-image:linear-gradient(rgba(255,255,255,.4) 1px,transparent 1px),
+                        linear-gradient(90deg,rgba(255,255,255,.4) 1px,transparent 1px);
+      background-size:60px 60px;
+      -webkit-mask-image:radial-gradient(ellipse 60% 60% at 50% 50%,black 0%,transparent 100%);
+      mask-image:radial-gradient(ellipse 60% 60% at 50% 50%,black 0%,transparent 100%)}
+    /* mouse hover glow on grid */
+    .grid-glow{position:fixed;inset:0;pointer-events:none;z-index:0;
+      background-image:linear-gradient(rgba(106,208,157,.3) 1px,transparent 1px),
+                        linear-gradient(90deg,rgba(106,208,157,.3) 1px,transparent 1px);
+      background-size:60px 60px;transition:opacity .3s;
+      -webkit-mask-image:radial-gradient(circle 120px at 0px 0px,black 0%,transparent 100%);
+      mask-image:radial-gradient(circle 120px at 0px 0px,black 0%,transparent 100%)}
+    .logo{display:flex;align-items:center;gap:.625rem;margin-bottom:2rem;position:relative;z-index:1}
+    .logo svg{width:48px;height:48px}
+    .logo-text{font-family:'Lexend',sans-serif;font-size:1.5rem;font-weight:500;letter-spacing:-.025em}
+    .logo-text .lab{color:#45c28b}
+    .card{background:transparent;backdrop-filter:blur(4px);border-radius:1rem;
+          border:1px solid rgba(255,255,255,.2);max-width:420px;width:100%;
+          padding:2rem;position:relative;z-index:1}
+    h1{font-family:'Lexend',sans-serif;font-size:1.25rem;font-weight:500;margin-bottom:.25rem;
+       letter-spacing:-.025em}
+    .sub{color:#d1d5db;font-size:.875rem;margin-bottom:1.5rem}
+    label{display:flex;align-items:center;gap:.5rem;color:#e5e7eb;font-weight:500;
+          font-size:.875rem;margin-bottom:.375rem}
+    label svg{width:16px;height:16px;color:#9ca3af;flex-shrink:0}
+    input[type="password"]{width:100%;padding:.625rem .75rem;background:transparent;
+          border:1px solid rgba(255,255,255,.2);border-radius:.5rem;font-size:.875rem;
+          font-family:'JetBrains Mono',monospace;color:#fff;outline:none;transition:border-color .15s,box-shadow .15s}
+    input[type="password"]::placeholder{color:#6b7280}
+    input[type="password"]:focus{border-color:rgb(106,208,157);
+          box-shadow:0 0 0 3px rgba(106,208,157,.15)}
+    .help{color:#6b7280;font-size:.75rem;margin-top:.375rem}
+    button{width:100%;margin-top:1.25rem;padding:.625rem;
+           background:rgb(106,208,157);color:rgb(3,6,22);border:none;border-radius:.5rem;
+           font-family:'Inter',sans-serif;font-size:.875rem;font-weight:600;cursor:pointer;
+           transition:background .15s}
+    button:hover{background:rgb(86,188,137)}
+    button:disabled{background:#4b5563;color:#9ca3af;cursor:not-allowed}
+    .footer{text-align:center;margin-top:1rem;font-size:.75rem;color:#6b7280}
+    /* subtle glow behind card */
+    .glow{position:fixed;width:400px;height:400px;border-radius:50%;
+          background:radial-gradient(circle,rgba(106,208,157,.08),transparent 70%);
+          top:50%;left:50%;transform:translate(-50%,-50%);pointer-events:none;z-index:0}
+  </style>
+</head>
+<body>
+  <div class="grid-base"></div>
+  <div class="grid-glow" id="gridGlow"></div>
+  <div class="glow"></div>
+  <div class="logo">
+    <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 292.3 292.3">
+      <g transform="translate(95.414,86.487)">
+        <circle fill="#45c28b" cx="-74.77" cy="-51.34" r="20"/>
+        <circle fill="#45c28b" cx="-74.53" cy="1.19" r="20"/>
+        <circle fill="#45c28b" cx="-22.24" cy="-28.91" r="20"/>
+        <circle fill="#fbd04e" cx="-74.67" cy="56.37" r="20"/>
+        <circle fill="#fbd04e" cx="-74.58" cy="120.34" r="20"/>
+        <circle fill="#fbd04e" cx="-74.49" cy="172.05" r="20"/>
+        <circle fill="#fbd04e" cx="-23.77" cy="26.56" r="20"/>
+        <circle fill="#fbd04e" cx="22.72" cy="-7.36" r="15"/>
+        <circle fill="#fbd04e" cx="-21.38" cy="89.52" r="17"/>
+        <circle fill="#fbd04e" cx="30.77" cy="51.30" r="20"/>
+        <circle fill="#fbd04e" cx="-21.89" cy="159.66" r="17"/>
+        <circle fill="#fbd04e" cx="22.92" cy="173.41" r="15"/>
+        <circle fill="#fbd04e" cx="35.15" cy="119.00" r="20"/>
+        <circle fill="#fbd04e" cx="79.51" cy="79.64" r="15"/>
+        <circle fill="#f78265" cx="72.59" cy="161.68" r="20"/>
+        <circle fill="#f78265" cx="110.66" cy="131.00" r="12"/>
+        <circle fill="#f78265" cx="121.37" cy="86.82" r="12"/>
+        <circle fill="#f78265" cx="155.50" cy="110.89" r="15"/>
+        <circle fill="#f78265" cx="136.27" cy="172.43" r="15"/>
+        <circle fill="#f78265" cx="182.53" cy="154.52" r="15"/>
+      </g>
+    </svg>
+    <span class="logo-text">Asset<span class="lab">Lab</span></span>
+  </div>
+  <div class="card">
+    <h1>Connect to AssetLab</h1>
+    <p class="sub">Claude.ai wants to access your AssetLab workspace via MCP.</p>
+    <form method="POST" action="/authorize" id="form">
+      <input type="hidden" name="state" value="${escapeHtml(state)}"/>
+      <input type="hidden" name="redirect_uri" value="${escapeHtml(redirectUri)}"/>
+      <input type="hidden" name="code_challenge" value="${escapeHtml(codeChallenge)}"/>
+      <input type="hidden" name="client_id" value="${escapeHtml(clientId)}"/>
+      <input type="hidden" name="scope" value="${escapeHtml(scope)}"/>
+      <label for="api_key">
+        <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="m21 2-2 2m-7.61 7.61a5.5 5.5 0 1 1-7.778 7.778 5.5 5.5 0 0 1 7.777-7.777zm0 0L15.5 7.5m0 0 3 3L22 7l-3-3m-3.5 3.5L19 4"/></svg>
+        API Key
+      </label>
+      <input type="password" id="api_key" name="api_key" placeholder="al_live_..." required
+             pattern="al_(live|test)_.+" title="Must start with al_live_ or al_test_"/>
+      <p class="help">Find this in AssetLab → Settings → API Keys</p>
+      <button type="submit" id="btn">Authorize</button>
+    </form>
+    <p class="footer">Your key is sent directly to AssetLab and never stored by this server.</p>
+  </div>
+  <script>
+    document.getElementById('form').addEventListener('submit',()=>{
+      document.getElementById('btn').disabled=true;
+      document.getElementById('btn').textContent='Connecting…';
+    });
+    (function(){
+      var g=document.getElementById('gridGlow');
+      document.addEventListener('mousemove',function(e){
+        var m='radial-gradient(circle 120px at '+e.clientX+'px '+e.clientY+'px,black 0%,transparent 100%)';
+        g.style.webkitMaskImage=m;g.style.maskImage=m;
+      });
+    })();
+  </script>
+</body>
+</html>`;
+    return new Response(html, {
+        status: 200,
+        headers: { 'Content-Type': 'text/html; charset=utf-8', ...CORS },
+    });
+}
+export async function handleAuthorizePost(request, secret) {
+    const form = await request.formData();
+    const apiKey = form.get('api_key')?.trim();
+    const state = form.get('state');
+    const redirectUri = form.get('redirect_uri');
+    const codeChallenge = form.get('code_challenge');
+    const scope = form.get('scope') ?? '';
+    console.log('[authorize POST]', JSON.stringify({ hasApiKey: !!apiKey, state, redirectUri, codeChallenge, scope }));
+    if (!apiKey || !redirectUri) {
+        return json({ error: 'missing_parameters' }, 400);
+    }
+    const payload = {
+        apiKey,
+        codeChallenge,
+        redirectUri,
+        scope,
+        exp: Date.now() + 600_000, // 10 minutes
+    };
+    const code = await encrypt(JSON.stringify(payload), secret);
+    const target = new URL(redirectUri);
+    target.searchParams.set('code', code);
+    if (state)
+        target.searchParams.set('state', state);
+    console.log('[authorize POST] redirecting to', target.toString().slice(0, 100));
+    return Response.redirect(target.toString(), 302);
+}
+// ── Token endpoint ──────────────────────────────────────────────────────────
+export async function handleToken(request, secret) {
+    let params;
+    const ct = request.headers.get('Content-Type') ?? '';
+    if (ct.includes('application/json')) {
+        const body = await request.json();
+        params = new URLSearchParams(body);
+    }
+    else {
+        params = new URLSearchParams(await request.text());
+    }
+    const code = params.get('code');
+    const codeVerifier = params.get('code_verifier');
+    const redirectUri = params.get('redirect_uri');
+    const grantType = params.get('grant_type');
+    console.log('[token]', JSON.stringify({
+        grantType, hasCode: !!code, hasVerifier: !!codeVerifier, redirectUri,
+        contentType: ct,
+    }));
+    if (!code)
+        return json({ error: 'invalid_request', error_description: 'Missing code' }, 400);
+    let payload;
+    try {
+        payload = JSON.parse(await decrypt(code, secret));
+    }
+    catch (err) {
+        console.log('[token] decrypt failed:', err instanceof Error ? err.message : err);
+        return json({ error: 'invalid_grant', error_description: 'Invalid or expired code' }, 400);
+    }
+    console.log('[token] decrypted payload:', JSON.stringify({
+        hasApiKey: !!payload.apiKey,
+        codeChallenge: payload.codeChallenge,
+        redirectUri: payload.redirectUri,
+        exp: payload.exp,
+        now: Date.now(),
+    }));
+    if (Date.now() > payload.exp) {
+        console.log('[token] code expired');
+        return json({ error: 'invalid_grant', error_description: 'Code expired' }, 400);
+    }
+    if (redirectUri && payload.redirectUri !== redirectUri) {
+        console.log('[token] redirect URI mismatch:', payload.redirectUri, '!=', redirectUri);
+        return json({ error: 'invalid_grant', error_description: 'Redirect URI mismatch' }, 400);
+    }
+    // Verify PKCE
+    if (payload.codeChallenge && codeVerifier) {
+        const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(codeVerifier));
+        const expected = base64url(digest);
+        console.log('[token] PKCE check:', expected, '===', payload.codeChallenge, '→', expected === payload.codeChallenge);
+        if (expected !== payload.codeChallenge) {
+            return json({ error: 'invalid_grant', error_description: 'PKCE verification failed' }, 400);
+        }
+    }
+    console.log('[token] success, returning access_token');
+    // The API key IS the access token — the MCP handler already reads it from Bearer header
+    return json({
+        access_token: payload.apiKey,
+        token_type: 'Bearer',
+        expires_in: 3600,
+        scope: payload.scope || 'mcp',
+    });
+}
+// ── Utility ─────────────────────────────────────────────────────────────────
+function escapeHtml(s) {
+    return s.replace(/&/g, '&amp;').replace(/"/g, '&quot;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+}
+//# sourceMappingURL=oauth.js.map

package/dist/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,gFAAgF;AAEhF,SAAS,SAAS,CAAC,GAA6B;IAC9C,MAAM,KAAK,GAAG,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;IACnE,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACvD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAChF,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAChG,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;IAC3B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IACvE,OAAO,KAAK,CAAA;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAAc;IACrC,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IACvD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;AACvF,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAAe,EAAE,MAAc;IACpD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAA;IACnC,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IACrD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC5C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EACvB,GAAG,EACH,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAClC,CAAA;IACD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAA;IAC9E,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAChB,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAA;IACnD,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAA;AAC5B,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,MAAc;IACjD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IAChC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACjC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAA;IACnC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,CAAA;IACvF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;AAC5C,CAAC;AAYD,gFAAgF;AAEhF,MAAM,IAAI,GAA2B;IACnC,6BAA6B,EAAE,GAAG;IAClC,8BAA8B,EAAE,4BAA4B;IAC5D,8BAA8B,EAAE,2DAA2D;CAC5F,CAAA;AAED,SAAS,IAAI,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG,EAAE,QAAgC,EAAE;IAC3E,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE;KACnE,CAAC,CAAA;AACJ,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAA;IAC7D,OAAO,IAAI,CAAC;QACV,QAAQ;QACR,qBAAqB,EAAE,CAAC,MAAM,CAAC;KAChC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,IAAI,CAAC;QACV,MAAM,EAAE,MAAM;QACd,sBAAsB,EAAE,GAAG,MAAM,YAAY;QAC7C,cAAc,EAAE,GAAG,MAAM,QAAQ;QACjC,qBAAqB,EAAE,GAAG,MAAM,WAAW;QAC3C,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;QAC7C,gBAAgB,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC;QACrC,gCAAgC,EAAE,CAAC,MAAM,CAAC;QAC1C,qCAAqC,EAAE,CAAC,MAAM,CAAC;KAChD,CAAC,CAAA;AACJ,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAgB;IACnD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAA6B,CAAA;IAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;IACpC,OAAO,IAAI,CAAC;QACV,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,WAAW;QAC5C,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE;QACvC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC,oBAAoB,CAAC;QACvD,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC;QAC/C,0BAA0B,EAAE,MAAM;KACnC,EAAE,GAAG,CAAC,CAAA;AACT,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;IACjD,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;IAC9D,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAA;IAClE,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAA;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;IAEjD,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iDAgGkC,UAAU,CAAC,KAAK,CAAC;wDACV,UAAU,CAAC,WAAW,CAAC;0DACrB,UAAU,CAAC,aAAa,CAAC;qDAC9B,UAAU,CAAC,QAAQ,CAAC;iDACxB,UAAU,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;QA0B1D,CAAA;IAEN,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,GAAG,IAAI,EAAE;KACjE,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAgB,EAAE,MAAc;IACxE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAA;IACrC,MAAM,MAAM,GAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAY,EAAE,IAAI,EAAE,CAAA;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAW,CAAA;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,CAAW,CAAA;IACtD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAW,CAAA;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAW,IAAI,EAAE,CAAA;IAE/C,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;IAElH,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAA;IACnD,CAAC;IAED,MAAM,OAAO,GAAgB;QAC3B,MAAM;QACN,aAAa;QACb,WAAW;QACX,KAAK;QACL,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,aAAa;KACzC,CAAA;IAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;IAE3D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAA;IACnC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACrC,IAAI,KAAK;QAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAElD,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;IAC/E,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAA;AAClD,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAgB,EAAE,MAAc;IAChE,IAAI,MAAuB,CAAA;IAE3B,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;IACpD,IAAI,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAA4B,CAAA;QAC3D,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAA;IACpC,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IACpD,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IAChD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IAE1C,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC;QACpC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,YAAY,EAAE,WAAW;QACpE,WAAW,EAAE,EAAE;KAChB,CAAC,CAAC,CAAA;IAEH,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;IAE5F,IAAI,OAAoB,CAAA;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAChF,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAA;IAC5F,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,CAAC,SAAS,CAAC;QACvD,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM;QAC3B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;KAChB,CAAC,CAAC,CAAA;IAEH,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;QACnC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;IACjF,CAAC;IAED,IAAI,WAAW,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,WAAW,CAAC,CAAA;QACrF,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAA;IAC1F,CAAC;IAED,cAAc;IACd,IAAI,OAAO,CAAC,aAAa,IAAI,YAAY,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAA;QAC5F,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;QAClC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;QACnH,IAAI,QAAQ,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAA;QAC7F,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAA;IAEtD,wFAAwF;IACxF,OAAO,IAAI,CAAC;QACV,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;KAC9B,CAAC,CAAA;AACJ,CAAC;AAED,+EAA+E;AAE/E,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AACrG,CAAC"}