@bevel-software/platform-core-backend 0.15.1 → 0.20.0

package/dist/modules/marketplace/marketplace-repo.service.js

@@ -1,10 +1,8 @@
 import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
-import { execFile, spawn } from 'node:child_process';
-import { promisify } from 'node:util';
+import { spawn } from 'node:child_process';
 import { WorkspaceMutex } from '../kb-fs/mutex.js';
-const execFileAsync = promisify(execFile);
 /**
  * ONE bare repository, ONE git namespace per caller.
  *
@@ -33,17 +31,21 @@ const execFileAsync = promisify(execFile);
 export class MarketplaceRepoService {
     repoDir;
     compiler;
+    gitRunner;
     committer;
     locks = new WorkspaceMutex();
     initialised = null;
     constructor(
     /** Absolute path of the bare repository (created on first use). */
-    repoDir, compiler, committer = {
+    repoDir, compiler, 
+    /** How git is run — see `shared/git.contract.ts`. */
+    gitRunner, committer = {
         name: 'Hexis',
         email: 'hexis@localhost',
     }) {
         this.repoDir = repoDir;
         this.compiler = compiler;
+        this.gitRunner = gitRunner;
         this.committer = committer;
     }
     /** The directory `GIT_PROJECT_ROOT` points at, and the repo's name under it. */
@@ -193,7 +195,15 @@ export class MarketplaceRepoService {
             const { stdout } = await this.git(['-C', this.repoDir, 'rev-parse', '--verify', '--quiet', this.refOf(namespace)]);
             return stdout.trim() || null;
         }
-        catch {
+        catch (err) {
+            // "No such ref" is the answer this null stands for, and `rev-parse
+            // --verify --quiet` says it with exit code 1 and nothing else. Every
+            // other failure — a deadline, a repository git cannot open, a spawn that
+            // never ran — is not an answer about the ref, and read as one it would
+            // have `ensureCompiled` start a namespace's history over on top of the
+            // one it has.
+            if (exitCodeOf(err) !== 1)
+                throw err;
             return null;
         }
     }
@@ -278,13 +288,21 @@ export class MarketplaceRepoService {
     async writeSidecar(namespace, sourceCommit) {
         await fs.writeFile(path.join(this.sidecarDir(), `${namespace}.json`), sourceCommit);
     }
+    /**
+     * Every command names the bare repository with `-C`, so the working
+     * directory only has to be somewhere that EXISTS: the process's own, as
+     * before. Not the repository — the first command ever run here is the `init`
+     * that creates it, and a spawn into a directory that is not there fails as
+     * `ENOENT` on git itself, which reads as git being missing. The plumbing
+     * that reads a scratch checkout passes its own `cwd`.
+     */
     git(args, opts = {}) {
-        return execFileAsync('git', args, { cwd: opts.cwd, env: opts.env ?? process.env, maxBuffer: 64 * 1024 * 1024 });
+        return this.gitRunner.run(opts.cwd ?? process.cwd(), args, { env: opts.env });
     }
 }
-/** The exit code an execFile failure carries, or null when the process never ran. */
+/** The exit code a git failure carries, or null when the process never ran. */
 function exitCodeOf(err) {
-    const code = err?.code;
+    const code = err?.exitCode;
     return typeof code === 'number' ? code : null;
 }
 function looksLikeObjectId(sha) {

package/dist/modules/marketplace/marketplace-repo.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"marketplace-repo.service.js","sourceRoot":"","sources":["../../../src/modules/marketplace/marketplace-repo.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAoB1C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,OAAO,sBAAsB;IAMtB;IACQ;IACA;IAPF,KAAK,GAAG,IAAI,cAAc,EAAE,CAAC;IACtC,WAAW,GAAyB,IAAI,CAAC;IAEjD;IACE,mEAAmE;IAC1D,OAAe,EACP,QAA6B,EAC7B,YAA6C;QAC5D,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,iBAAiB;KACzB;QALQ,YAAO,GAAP,OAAO,CAAQ;QACP,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,cAAS,GAAT,SAAS,CAGzB;IACA,CAAC;IAEJ,gFAAgF;IAChF,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,sEAAsE;IACtE,MAAM,CAAC,YAAY,CAAC,MAAc;QAChC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,WAAW,KAAK,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,EAAE;iBACpB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;iBACvC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACzE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5E,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;YAC1E,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC1B,8DAA8D;YAC9D,uEAAuE;YACvE,yCAAyC;YACzC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,IAAmC;QACtD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,sBAAsB,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,SAAS,EAAE,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YACjD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBACtC,oEAAoE;gBACpE,oEAAoE;gBACpE,sEAAsE;gBACtE,wEAAwE;gBACxE,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBACjC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;YAC/D,CAAC;YAED,qEAAqE;YACrE,wEAAwE;YACxE,oEAAoE;YACpE,mEAAmE;YACnE,oEAAoE;YACpE,uEAAuE;YACvE,mEAAmE;YACnE,+CAA+C;YAC/C,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YAC9E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;gBACjD,IAAI,KAAK,KAAK,OAAO;oBAAE,MAAM;gBAC7B,OAAO,GAAG,KAAK,CAAC;gBAChB,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YAC5E,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACtD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,KAAK,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QAChF,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,IAAmC;QAC/C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,SAAS,8BAA8B,CAAC,CAAC;QAChF,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC5B,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,cAAc,CAAC,GAAW;QAQ9B,cAAc,CAAC,GAAG,CAAC,CAAC;QACpB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,oCAAoC,EAAE,GAAG,CAAC,CAAC,CAAC;QAChH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChF,OAAO;YACL,GAAG,EAAE,IAAI,IAAI,GAAG;YAChB,IAAI,EAAE,IAAI,IAAI,EAAE;YAChB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;YAC/B,UAAU,EAAE,UAAU,IAAI,EAAE;YAC5B,WAAW,EAAE,WAAW,IAAI,EAAE;YAC9B,IAAI,EAAE,IAAI,IAAI,EAAE;SACjB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,GAAW;QAC3C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,qEAAqE;QACrE,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,iCAAiC;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACxC,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACxC,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,mGAAmG;IACnG,UAAU,CAAC,GAAW,EAAE,MAAc;QACpC,cAAc,CAAC,GAAG,CAAC,CAAC;QACpB,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,MAAM,GAAG,EAAE,GAAG,CAAC,EAAE;YAC/F,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,SAAiB;QAC7B,OAAO,mBAAmB,SAAS,kBAAkB,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,SAAiB;QACpC,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACnH,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,UAAU,CACtB,SAAiB,EACjB,IAA4C,EAC5C,MAAqB;QAErB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAC/E,0EAA0E;QAC1E,yEAAyE;QACzE,iBAAiB;QACjB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACtC,mEAAmE;gBACnE,gEAAgE;gBAChE,4DAA4D;gBAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,6BAA6B,CAAC,CAAC;gBAChF,CAAC;gBACD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;YACrG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACxE,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACzG,IAAI,UAAU,KAAK,OAAO;oBAAE,OAAO,MAAM,CAAC;YAC5C,CAAC;YACD,MAAM,OAAO,GAAG,4BAA4B,IAAI,CAAC,YAAY,4BAA4B,IAAI,CAAC,YAAY,IAAI,CAAC;YAC/G,MAAM,SAAS,GAAG;gBAChB,GAAG,OAAO,CAAC,GAAG;gBACd,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;gBACpC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK;gBACtC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;gBACvC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK;aAC1C,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5G,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACrE,mEAAmE;YACnE,uEAAuE;YACvE,sDAAsD;YACtD,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACjC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5G,OAAO,GAAG,CAAC;QACb,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,UAAU,CAAC,SAAiB;QACxC,MAAM,IAAI,GAAG,mBAAmB,SAAS,OAAO,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CACxF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EACtB,GAAG,EAAE,CAAC,IAAI,CACX,CAAC;QACF,IAAI,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO;QAC9C,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAEO,UAAU;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,SAAiB;QACzC,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,SAAS,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QACxG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,YAAoB;QAChE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,SAAS,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;IACtF,CAAC;IAEO,GAAG,CAAC,IAAc,EAAE,OAAkD,EAAE;QAC9E,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IAClH,CAAC;CACF;AAED,qFAAqF;AACrF,SAAS,UAAU,CAAC,GAAY;IAC9B,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAC;IACtD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,yEAAyE;IACzE,0EAA0E;IAC1E,6BAA6B;IAC7B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;AAC3E,CAAC"}
+{"version":3,"file":"marketplace-repo.service.js","sourceRoot":"","sources":["../../../src/modules/marketplace/marketplace-repo.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAsBnD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,OAAO,sBAAsB;IAMtB;IACQ;IAEA;IACA;IATF,KAAK,GAAG,IAAI,cAAc,EAAE,CAAC;IACtC,WAAW,GAAyB,IAAI,CAAC;IAEjD;IACE,mEAAmE;IAC1D,OAAe,EACP,QAA6B;IAC9C,qDAAqD;IACpC,SAAqB,EACrB,YAA6C;QAC5D,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,iBAAiB;KACzB;QAPQ,YAAO,GAAP,OAAO,CAAQ;QACP,aAAQ,GAAR,QAAQ,CAAqB;QAE7B,cAAS,GAAT,SAAS,CAAY;QACrB,cAAS,GAAT,SAAS,CAGzB;IACA,CAAC;IAEJ,gFAAgF;IAChF,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,sEAAsE;IACtE,MAAM,CAAC,YAAY,CAAC,MAAc;QAChC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,WAAW,KAAK,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,EAAE;iBACpB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;iBACvC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACzE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5E,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;YAC1E,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC1B,8DAA8D;YAC9D,uEAAuE;YACvE,yCAAyC;YACzC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,IAAmC;QACtD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,sBAAsB,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,SAAS,EAAE,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YACjD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBACtC,oEAAoE;gBACpE,oEAAoE;gBACpE,sEAAsE;gBACtE,wEAAwE;gBACxE,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBACjC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;YAC/D,CAAC;YAED,qEAAqE;YACrE,wEAAwE;YACxE,oEAAoE;YACpE,mEAAmE;YACnE,oEAAoE;YACpE,uEAAuE;YACvE,mEAAmE;YACnE,+CAA+C;YAC/C,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YAC9E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;gBACjD,IAAI,KAAK,KAAK,OAAO;oBAAE,MAAM;gBAC7B,OAAO,GAAG,KAAK,CAAC;gBAChB,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YAC5E,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACtD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,KAAK,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QAChF,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,IAAmC;QAC/C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,SAAS,8BAA8B,CAAC,CAAC;QAChF,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC5B,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,cAAc,CAAC,GAAW;QAQ9B,cAAc,CAAC,GAAG,CAAC,CAAC;QACpB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,oCAAoC,EAAE,GAAG,CAAC,CAAC,CAAC;QAChH,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChF,OAAO;YACL,GAAG,EAAE,IAAI,IAAI,GAAG;YAChB,IAAI,EAAE,IAAI,IAAI,EAAE;YAChB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;YAC/B,UAAU,EAAE,UAAU,IAAI,EAAE;YAC5B,WAAW,EAAE,WAAW,IAAI,EAAE;YAC9B,IAAI,EAAE,IAAI,IAAI,EAAE;SACjB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,GAAW;QAC3C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,qEAAqE;QACrE,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,iCAAiC;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACxC,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACxC,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,mGAAmG;IACnG,UAAU,CAAC,GAAW,EAAE,MAAc;QACpC,cAAc,CAAC,GAAG,CAAC,CAAC;QACpB,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,MAAM,GAAG,EAAE,GAAG,CAAC,EAAE;YAC/F,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,SAAiB;QAC7B,OAAO,mBAAmB,SAAS,kBAAkB,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,SAAiB;QACpC,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACnH,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,qEAAqE;YACrE,yEAAyE;YACzE,uEAAuE;YACvE,uEAAuE;YACvE,cAAc;YACd,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,MAAM,GAAG,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,UAAU,CACtB,SAAiB,EACjB,IAA4C,EAC5C,MAAqB;QAErB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAC/E,0EAA0E;QAC1E,yEAAyE;QACzE,iBAAiB;QACjB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACtC,mEAAmE;gBACnE,gEAAgE;gBAChE,4DAA4D;gBAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,6BAA6B,CAAC,CAAC;gBAChF,CAAC;gBACD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;YACrG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACxE,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACzG,IAAI,UAAU,KAAK,OAAO;oBAAE,OAAO,MAAM,CAAC;YAC5C,CAAC;YACD,MAAM,OAAO,GAAG,4BAA4B,IAAI,CAAC,YAAY,4BAA4B,IAAI,CAAC,YAAY,IAAI,CAAC;YAC/G,MAAM,SAAS,GAAG;gBAChB,GAAG,OAAO,CAAC,GAAG;gBACd,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;gBACpC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK;gBACtC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;gBACvC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK;aAC1C,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5G,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACrE,mEAAmE;YACnE,uEAAuE;YACvE,sDAAsD;YACtD,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACjC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5G,OAAO,GAAG,CAAC;QACb,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,UAAU,CAAC,SAAiB;QACxC,MAAM,IAAI,GAAG,mBAAmB,SAAS,OAAO,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CACxF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EACtB,GAAG,EAAE,CAAC,IAAI,CACX,CAAC;QACF,IAAI,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO;QAC9C,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAEO,UAAU;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,SAAiB;QACzC,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,SAAS,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QACxG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,YAAoB;QAChE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,SAAS,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;IACtF,CAAC;IAED;;;;;;;OAOG;IACK,GAAG,CAAC,IAAc,EAAE,OAAkD,EAAE;QAC9E,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC;CACF;AAED,+EAA+E;AAC/E,SAAS,UAAU,CAAC,GAAY;IAC9B,MAAM,IAAI,GAAI,GAAqC,EAAE,QAAQ,CAAC;IAC9D,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,yEAAyE;IACzE,0EAA0E;IAC1E,6BAA6B;IAC7B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;AAC3E,CAAC"}

package/dist/modules/mcp/downstream-pool.d.ts

@@ -0,0 +1,107 @@
+/**
+ * The ONE piece of state the stateless MCP endpoint keeps between requests: a
+ * pool of connections to proxied third-party MCP servers (`mcp.json` manuals),
+ * keyed by (user, server).
+ *
+ * Everything else a request needs is re-derived from its own bearer. These
+ * connections are the exception because a downstream MCP server is session-ful
+ * by nature — dialing a fresh handshake on every tool call would add a round
+ * trip per call and hammer the provider. So they are cached, and the pool is
+ * built so that losing any of it costs a reconnect, never correctness:
+ *
+ *   - created LAZILY, on the first request that needs the server;
+ *   - SINGLE-FLIGHT per key: concurrent first calls share one creation, so a
+ *     burst produces one connection instead of N with all but one orphaned;
+ *   - IDLE-EVICTED and SIZE-BOUNDED, with the retired session store's proven
+ *     defaults (4 hours idle, 5000 entries);
+ *   - every eviction CLOSES what it evicts (`dispose`) — the pool is the owner
+ *     of each connection it opened, and nothing else closes them;
+ *   - LEASED: `acquire` hands out a lease the caller releases when its
+ *     operation ends. A leased entry is in use, so it is never idle and never
+ *     the LRU victim; an entry invalidated while leased leaves the pool at once
+ *     but is closed only when its last lease is released. A call in progress
+ *     never has its connection closed underneath it.
+ *
+ * Eviction is lazy, like the store it replaces: `acquire` sweeps idle entries
+ * first and enforces the cap on insert. No background timer, so constructing a
+ * pool never leaks an interval handle (in tests or anywhere else). When every
+ * entry is leased the cap cannot evict anything, and the pool holds more than
+ * `maxEntries` until leases are released — and the release that ends an
+ * entry's last lease re-applies the cap, so the overflow ends with the leases,
+ * not with whenever the next acquire happens to run.
+ *
+ * Healing a connection whose server restarted is NOT this class's job: the
+ * pooled value carries the existing session-recovery wrapper, which
+ * re-registers on the spec's 404 in place. The pool only decides how long a
+ * value lives.
+ */
+export interface DownstreamPoolOptions<V> {
+    /** Close a value the pool is dropping. Errors are logged, never thrown. */
+    dispose: (value: V) => Promise<void>;
+    /** Drop entries unused for longer than this. Default: 4 hours. */
+    idleTtlMs?: number;
+    /** Hard cap on pooled entries; the least-recently-used is evicted first. Default: 5000. */
+    maxEntries?: number;
+    /** Override `Date.now` — injected only by tests. */
+    now?: () => number;
+}
+/** A pooled value in use. `release` ends the use; calling it again is a no-op. */
+export interface Lease<V> {
+    readonly value: V;
+    release(): void;
+}
+export declare const DEFAULT_DOWNSTREAM_IDLE_TTL_MS: number;
+export declare const DEFAULT_DOWNSTREAM_MAX_ENTRIES = 5000;
+export declare class DownstreamPool<V> {
+    private readonly entries;
+    private readonly pending;
+    private readonly dispose;
+    private readonly idleTtlMs;
+    private readonly maxEntries;
+    private readonly now;
+    constructor(opts: DownstreamPoolOptions<V>);
+    /**
+     * Lease the pooled value for `key`, creating it with `create` when absent.
+     * The caller MUST release the lease when its operation ends (try/finally).
+     * A creation that rejects is NOT cached — every waiter sees the rejection and
+     * the next `acquire` tries again (retry pacing is the caller's policy, see
+     * ManualFailureMemo).
+     */
+    acquire(key: string, create: () => Promise<V>): Promise<Lease<V>>;
+    /**
+     * Evict every entry whose key matches — the hook for "this user's
+     * credentials changed". Idle entries are closed now; leased ones leave the
+     * pool now and are closed when released. A creation in flight for a matching
+     * key is marked stale, so its result is closed and rebuilt instead of cached.
+     */
+    evictWhere(predicate: (key: string) => boolean): void;
+    /** Evict and close everything (leased entries close on release). */
+    closeAll(): void;
+    /** Pooled (resolved) entries; diagnostics and tests. Does not sweep. */
+    size(): number;
+    private awaitPending;
+    private lease;
+    private insert;
+    /**
+     * Evict idle entries, least recently used first, until at most
+     * `maxEntries - reserve` remain — or nothing idle is left, in which case
+     * the pool stays over the cap until a lease is released (which calls this
+     * again). `reserve` is the room an insert needs for the entry it is about
+     * to add.
+     */
+    private enforceCap;
+    private sweep;
+    /** Evict the least-recently-used entry not in use; false when every entry is leased. */
+    private evictLeastRecentlyUsed;
+    /** Take an entry out of the pool; close it now, or on its last release when leased. */
+    private retire;
+    /**
+     * Fire-and-forget close: a slow downstream teardown must not block the
+     * request that happened to trigger the sweep, and a failing one must not
+     * stop the rest of the sweep.
+     */
+    private disposeQuietly;
+}
+/** Separator for (user, manual, fingerprint) keys — cannot occur in any of the parts. */
+export declare const POOL_KEY_SEPARATOR = "\0";
+//# sourceMappingURL=downstream-pool.d.ts.map

package/dist/modules/mcp/downstream-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"downstream-pool.d.ts","sourceRoot":"","sources":["../../../src/modules/mcp/downstream-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAMH,MAAM,WAAW,qBAAqB,CAAC,CAAC;IACtC,2EAA2E;IAC3E,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2FAA2F;IAC3F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,kFAAkF;AAClF,MAAM,WAAW,KAAK,CAAC,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,eAAO,MAAM,8BAA8B,QAAqB,CAAC;AACjE,eAAO,MAAM,8BAA8B,OAAO,CAAC;AAkBnD,qBAAa,cAAc,CAAC,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAO1C;;;;;;OAMG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IA2BvE;;;;;OAKG;IACH,UAAU,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI;IASrD,oEAAoE;IACpE,QAAQ,IAAI,IAAI;IAIhB,wEAAwE;IACxE,IAAI,IAAI,MAAM;YAIA,YAAY;IAW1B,OAAO,CAAC,KAAK;IAwBb,OAAO,CAAC,MAAM;IAQd;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,KAAK;IAOb,wFAAwF;IACxF,OAAO,CAAC,sBAAsB;IAW9B,uFAAuF;IACvF,OAAO,CAAC,MAAM;IAMd;;;;OAIG;IACH,OAAO,CAAC,cAAc;CAOvB;AAQD,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,OAAW,CAAC"}

package/dist/modules/mcp/downstream-pool.js

@@ -0,0 +1,221 @@
+/**
+ * The ONE piece of state the stateless MCP endpoint keeps between requests: a
+ * pool of connections to proxied third-party MCP servers (`mcp.json` manuals),
+ * keyed by (user, server).
+ *
+ * Everything else a request needs is re-derived from its own bearer. These
+ * connections are the exception because a downstream MCP server is session-ful
+ * by nature — dialing a fresh handshake on every tool call would add a round
+ * trip per call and hammer the provider. So they are cached, and the pool is
+ * built so that losing any of it costs a reconnect, never correctness:
+ *
+ *   - created LAZILY, on the first request that needs the server;
+ *   - SINGLE-FLIGHT per key: concurrent first calls share one creation, so a
+ *     burst produces one connection instead of N with all but one orphaned;
+ *   - IDLE-EVICTED and SIZE-BOUNDED, with the retired session store's proven
+ *     defaults (4 hours idle, 5000 entries);
+ *   - every eviction CLOSES what it evicts (`dispose`) — the pool is the owner
+ *     of each connection it opened, and nothing else closes them;
+ *   - LEASED: `acquire` hands out a lease the caller releases when its
+ *     operation ends. A leased entry is in use, so it is never idle and never
+ *     the LRU victim; an entry invalidated while leased leaves the pool at once
+ *     but is closed only when its last lease is released. A call in progress
+ *     never has its connection closed underneath it.
+ *
+ * Eviction is lazy, like the store it replaces: `acquire` sweeps idle entries
+ * first and enforces the cap on insert. No background timer, so constructing a
+ * pool never leaks an interval handle (in tests or anywhere else). When every
+ * entry is leased the cap cannot evict anything, and the pool holds more than
+ * `maxEntries` until leases are released — and the release that ends an
+ * entry's last lease re-applies the cap, so the overflow ends with the leases,
+ * not with whenever the next acquire happens to run.
+ *
+ * Healing a connection whose server restarted is NOT this class's job: the
+ * pooled value carries the existing session-recovery wrapper, which
+ * re-registers on the spec's 404 in place. The pool only decides how long a
+ * value lives.
+ */
+import { logger } from '../../shared/logging.js';
+const log = logger('mcp');
+export const DEFAULT_DOWNSTREAM_IDLE_TTL_MS = 4 * 60 * 60 * 1000;
+export const DEFAULT_DOWNSTREAM_MAX_ENTRIES = 5000;
+export class DownstreamPool {
+    entries = new Map();
+    pending = new Map();
+    dispose;
+    idleTtlMs;
+    maxEntries;
+    now;
+    constructor(opts) {
+        this.dispose = opts.dispose;
+        this.idleTtlMs = opts.idleTtlMs ?? DEFAULT_DOWNSTREAM_IDLE_TTL_MS;
+        this.maxEntries = Math.max(1, opts.maxEntries ?? DEFAULT_DOWNSTREAM_MAX_ENTRIES);
+        this.now = opts.now ?? Date.now;
+    }
+    /**
+     * Lease the pooled value for `key`, creating it with `create` when absent.
+     * The caller MUST release the lease when its operation ends (try/finally).
+     * A creation that rejects is NOT cached — every waiter sees the rejection and
+     * the next `acquire` tries again (retry pacing is the caller's policy, see
+     * ManualFailureMemo).
+     */
+    async acquire(key, create) {
+        this.sweep();
+        const hit = this.entries.get(key);
+        if (hit)
+            return this.lease(hit);
+        const inflight = this.pending.get(key);
+        if (inflight)
+            return this.awaitPending(key, inflight, create);
+        const record = { promise: create(), stale: false };
+        this.pending.set(key, record);
+        const forget = () => {
+            if (this.pending.get(key) === record)
+                this.pending.delete(key);
+        };
+        let value;
+        try {
+            value = await record.promise;
+        }
+        finally {
+            forget();
+        }
+        if (record.stale) {
+            // Invalidated mid-creation (the user's credentials changed): the value
+            // was built from the old state. Close it and build a current one.
+            this.disposeQuietly(key, value);
+            return this.acquire(key, create);
+        }
+        return this.lease(this.insert(key, value));
+    }
+    /**
+     * Evict every entry whose key matches — the hook for "this user's
+     * credentials changed". Idle entries are closed now; leased ones leave the
+     * pool now and are closed when released. A creation in flight for a matching
+     * key is marked stale, so its result is closed and rebuilt instead of cached.
+     */
+    evictWhere(predicate) {
+        for (const [key, entry] of [...this.entries]) {
+            if (predicate(key))
+                this.retire(entry);
+        }
+        for (const [key, record] of this.pending) {
+            if (predicate(key))
+                record.stale = true;
+        }
+    }
+    /** Evict and close everything (leased entries close on release). */
+    closeAll() {
+        this.evictWhere(() => true);
+    }
+    /** Pooled (resolved) entries; diagnostics and tests. Does not sweep. */
+    size() {
+        return this.entries.size;
+    }
+    async awaitPending(key, record, create) {
+        const value = await record.promise;
+        // The creator owns closing a stale value; a joiner just asks again.
+        if (record.stale)
+            return this.acquire(key, create);
+        // The creator pooled the value before this continuation ran. If it has
+        // already left the pool again, lease whatever the pool holds now.
+        const entry = this.entries.get(key);
+        if (!entry || entry.value !== value)
+            return this.acquire(key, create);
+        return this.lease(entry);
+    }
+    lease(entry) {
+        entry.leases += 1;
+        entry.lastUsedAt = this.now();
+        let released = false;
+        return {
+            value: entry.value,
+            release: () => {
+                if (released)
+                    return;
+                released = true;
+                entry.leases -= 1;
+                // Idleness is measured from the end of the last use.
+                entry.lastUsedAt = this.now();
+                if (entry.retired && entry.leases === 0)
+                    this.disposeQuietly(entry.key, entry.value);
+                // An insert that found every entry leased could not evict and let the
+                // pool overflow the cap. The overflow has to end with the leases, not
+                // with whenever the next acquire happens to run — so the release that
+                // ends an entry's last lease re-applies the cap. The entry just
+                // released is the newest by `lastUsedAt`, so older idle entries go
+                // first.
+                if (entry.leases === 0)
+                    this.enforceCap();
+            },
+        };
+    }
+    insert(key, value) {
+        this.sweep();
+        this.enforceCap(1);
+        const entry = { key, value, lastUsedAt: this.now(), leases: 0, retired: false };
+        this.entries.set(key, entry);
+        return entry;
+    }
+    /**
+     * Evict idle entries, least recently used first, until at most
+     * `maxEntries - reserve` remain — or nothing idle is left, in which case
+     * the pool stays over the cap until a lease is released (which calls this
+     * again). `reserve` is the room an insert needs for the entry it is about
+     * to add.
+     */
+    enforceCap(reserve = 0) {
+        while (this.entries.size + reserve > this.maxEntries && this.evictLeastRecentlyUsed()) {
+            // each pass evicted one idle entry
+        }
+    }
+    sweep() {
+        const cutoff = this.now() - this.idleTtlMs;
+        for (const entry of [...this.entries.values()]) {
+            if (entry.leases === 0 && entry.lastUsedAt < cutoff)
+                this.retire(entry);
+        }
+    }
+    /** Evict the least-recently-used entry not in use; false when every entry is leased. */
+    evictLeastRecentlyUsed() {
+        let oldest;
+        for (const entry of this.entries.values()) {
+            if (entry.leases > 0)
+                continue;
+            if (!oldest || entry.lastUsedAt < oldest.lastUsedAt)
+                oldest = entry;
+        }
+        if (!oldest)
+            return false;
+        this.retire(oldest);
+        return true;
+    }
+    /** Take an entry out of the pool; close it now, or on its last release when leased. */
+    retire(entry) {
+        if (this.entries.get(entry.key) === entry)
+            this.entries.delete(entry.key);
+        entry.retired = true;
+        if (entry.leases === 0)
+            this.disposeQuietly(entry.key, entry.value);
+    }
+    /**
+     * Fire-and-forget close: a slow downstream teardown must not block the
+     * request that happened to trigger the sweep, and a failing one must not
+     * stop the rest of the sweep.
+     */
+    disposeQuietly(key, value) {
+        void Promise.resolve()
+            .then(() => this.dispose(value))
+            .catch((err) => {
+            log.warn(`closing pooled downstream connection failed (${poolKeyLabel(key)}):`, { err });
+        });
+    }
+}
+/** A log-safe rendering of a pool key: user and manual, never the template fingerprint. */
+function poolKeyLabel(key) {
+    const [userId, manual] = key.split(POOL_KEY_SEPARATOR);
+    return `user=${userId ?? '?'} manual=${manual ?? '?'}`;
+}
+/** Separator for (user, manual, fingerprint) keys — cannot occur in any of the parts. */
+export const POOL_KEY_SEPARATOR = '\u0000';
+//# sourceMappingURL=downstream-pool.js.map

package/dist/modules/mcp/downstream-pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"downstream-pool.js","sourceRoot":"","sources":["../../../src/modules/mcp/downstream-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEjD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;AAmB1B,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACjE,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;AAkBnD,MAAM,OAAO,cAAc;IACR,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IACtC,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IACxC,OAAO,CAA8B;IACrC,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,GAAG,CAAe;IAEnC,YAAY,IAA8B;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,8BAA8B,CAAC;QAClE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,IAAI,8BAA8B,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,MAAwB;QACjD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAe,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,CAAC,CAAC;QACF,IAAI,KAAQ,CAAC;QACb,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC;QACX,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,SAAmC;QAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,IAAI,SAAS,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,IAAI,SAAS,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,QAAQ;QACN,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,wEAAwE;IACxE,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,MAAkB,EAAE,MAAwB;QAClF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACnC,oEAAoE;QACpE,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnD,uEAAuE;QACvE,kEAAkE;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,KAAe;QAC3B,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QAClB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;gBAClB,qDAAqD;gBACrD,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC9B,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBACrF,sEAAsE;gBACtE,sEAAsE;gBACtE,sEAAsE;gBACtE,gEAAgE;gBAChE,mEAAmE;gBACnE,SAAS;gBACT,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5C,CAAC;SACF,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,GAAW,EAAE,KAAQ;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,KAAK,GAAa,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC1F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACK,UAAU,CAAC,OAAO,GAAG,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;YACtF,mCAAmC;QACrC,CAAC;IACH,CAAC;IAEO,KAAK;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,wFAAwF;IAChF,sBAAsB;QAC5B,IAAI,MAA4B,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS;YAC/B,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU;gBAAE,MAAM,GAAG,KAAK,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uFAAuF;IAC/E,MAAM,CAAC,KAAe;QAC5B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1E,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,GAAW,EAAE,KAAQ;QAC1C,KAAK,OAAO,CAAC,OAAO,EAAE;aACnB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;aAC/B,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,GAAG,CAAC,IAAI,CAAC,gDAAgD,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;IACP,CAAC;CACF;AAED,2FAA2F;AAC3F,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACvD,OAAO,QAAQ,MAAM,IAAI,GAAG,WAAW,MAAM,IAAI,GAAG,EAAE,CAAC;AACzD,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC"}

package/dist/modules/mcp/downstream-token-refresh.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Refresh-and-retry for proxied third-party MCP servers (`mcp.json` manuals)
+ * that reject the caller's OAuth token.
+ *
+ * The vault refreshes a token when its STORED expiry says so. A provider can
+ * disagree — a token revoked early, an expiry the provider never stated, a
+ * clock that drifted — and then the downstream answers 401 / `invalid_token`
+ * while the vault still believes the token is good. The proxy reacts to that
+ * rejection: one forced refresh for (user, manual), one retry of the call, and
+ * the caller sees only the final outcome.
+ *
+ * Two pieces live here, both pure of the proxy so they are testable alone: the
+ * rejection classifier, and the guard that allows one refresh per (user,
+ * manual) per minute so a broken grant can never loop the provider.
+ */
+/** The minimum spacing between two forced refreshes of one (user, manual). */
+export declare const DOWNSTREAM_REFRESH_WINDOW_MS = 60000;
+/**
+ * Did the downstream reject the credential itself — 401 or an `invalid_token`
+ * error — as opposed to anything else that can go wrong with a call?
+ *
+ * Two shapes reach here. A failed CALL keeps the MCP SDK's
+ * `StreamableHTTPError`, whose `code` is the HTTP status. A failed
+ * REGISTRATION is flattened to prose by `@utcp/mcp`
+ * (`Server 'srv': Streamable HTTP error: Error POSTing to endpoint: <body>`),
+ * where the status is gone and only the response body is left to read.
+ *
+ * 403 is deliberately NOT a rejection: it means the token is valid but not
+ * permitted, and a refreshed token carries the same permissions. An error that
+ * STATES its HTTP status is believed over its prose, so a 403 whose body says
+ * `invalid_token` (or any other non-401 status that mentions one) is not
+ * refreshed: the status is the server's verdict, the message only its wording.
+ */
+export declare function isDownstreamTokenRejection(err: unknown): boolean;
+/**
+ * At most one refresh per key per window, single-flight within it.
+ *
+ * The first rejection in a window runs the refresh; rejections that arrive
+ * WHILE it runs (a burst of calls failing against the same dead token) share
+ * its outcome instead of being refused, so a burst doesn't turn into one
+ * success and N-1 failures. A rejection after the refresh settled but inside
+ * the window gets `undefined` — no refresh, the call's own error stands —
+ * which is what bounds a grant the provider keeps refreshing but the
+ * downstream keeps refusing to one refresh a minute.
+ */
+export declare class DownstreamRefreshGuard<T> {
+    private readonly windowMs;
+    private readonly now;
+    private readonly attempts;
+    constructor(windowMs?: number, now?: () => number);
+    /** Run `refresh` for `key` unless the window forbids it; `undefined` when it does. */
+    run(key: string, refresh: () => Promise<T>): Promise<T> | undefined;
+    /**
+     * Forget the attempts `predicate` selects — the key, and the outcome it
+     * settled on (`undefined` while it is still running).
+     *
+     * For when something OUTSIDE this guard changed the credential the window was
+     * protecting, so the window no longer describes anything real.
+     */
+    clearWhere(predicate: (key: string, outcome: T | undefined) => boolean): void;
+    /**
+     * Forget attempts whose window is over, so the map is bounded by recent
+     * (user, manual) pairs.
+     *
+     * Age alone decides, NOT settlement: a refresh that never settles — a token
+     * request that hangs with no timeout — would otherwise pin its key forever,
+     * so no later rejection for that (user, manual) could ever refresh again and
+     * the entry could never be evicted. Once the window has passed, a new attempt
+     * is within policy whether the previous one finished or not.
+     *
+     * A clock that moved BACKWARD (an NTP step) makes every age negative; such a
+     * window is forgotten too, since otherwise it would hold for the step plus a
+     * minute rather than the minute the policy promises.
+     */
+    private prune;
+}
+//# sourceMappingURL=downstream-token-refresh.d.ts.map

package/dist/modules/mcp/downstream-token-refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"downstream-token-refresh.d.ts","sourceRoot":"","sources":["../../../src/modules/mcp/downstream-token-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,8EAA8E;AAC9E,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAEnD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAgBhE;AAoCD;;;;;;;;;;GAUG;AACH,qBAAa,sBAAsB,CAAC,CAAC;IAOjC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAPtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAGrB;gBAGe,QAAQ,GAAE,MAAqC,EAC/C,GAAG,GAAE,MAAM,MAAiB;IAG/C,sFAAsF;IACtF,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS;IAuBnE;;;;;;OAMG;IACH,UAAU,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,SAAS,KAAK,OAAO,GAAG,IAAI;IAM7E;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,KAAK;CAMd"}