@dominusnode/mcp-server 1.0.0

package/dist/src/proxy-fetch.js

@@ -0,0 +1,549 @@
+import * as http from "node:http";
+import * as tls from "node:tls";
+const CRLF_PATTERN = /[\r\n]/;
+function validateHeaders(headers) {
+    for (const [key, value] of Object.entries(headers)) {
+        if (CRLF_PATTERN.test(key) || CRLF_PATTERN.test(value)) {
+            throw new Error(`Header "${key}" contains invalid characters (CR/LF injection attempt)`);
+        }
+        // Block null bytes
+        if (key.includes("\0") || value.includes("\0")) {
+            throw new Error(`Header "${key}" contains null bytes`);
+        }
+    }
+}
+const BINARY_CONTENT_TYPES = [
+    "image/", "audio/", "video/", "application/octet-stream",
+    "application/zip", "application/gzip", "application/pdf",
+    "application/x-tar", "application/x-rar",
+];
+function isBinaryContentType(contentType) {
+    const lower = contentType.toLowerCase();
+    return BINARY_CONTENT_TYPES.some((t) => lower.includes(t));
+}
+function buildProxyUsername(opts) {
+    const parts = [];
+    if (opts.poolType && opts.poolType !== "auto") {
+        parts.push(opts.poolType);
+    }
+    if (opts.country) {
+        parts.push(`country-${encodeURIComponent(opts.country.toUpperCase())}`);
+    }
+    if (opts.state) {
+        parts.push(`state-${encodeURIComponent(opts.state)}`);
+    }
+    if (opts.city) {
+        parts.push(`city-${encodeURIComponent(opts.city)}`);
+    }
+    return parts.length > 0 ? parts.join("-") : "auto";
+}
+function buildProxyAuth(apiKey, opts) {
+    const username = buildProxyUsername(opts);
+    return "Basic " + Buffer.from(`${username}:${apiKey}`).toString("base64");
+}
+const BLOCKED_HOSTNAMES = new Set([
+    "localhost",
+    "localhost.localdomain",
+    "ip6-localhost",
+    "ip6-loopback",
+    "[::1]",
+    "[::ffff:127.0.0.1]",
+    "0.0.0.0",
+    "[::]",
+]);
+// Normalize non-standard IP representations (octal, hex, decimal)
+// to standard dotted-decimal to prevent SSRF bypasses like 0x7f000001, 2130706433, 0177.0.0.1
+function normalizeIpv4(hostname) {
+    // Single decimal integer (e.g., 2130706433 = 127.0.0.1)
+    if (/^\d+$/.test(hostname)) {
+        const n = parseInt(hostname, 10);
+        if (n >= 0 && n <= 0xffffffff) {
+            return `${(n >>> 24) & 0xff}.${(n >>> 16) & 0xff}.${(n >>> 8) & 0xff}.${n & 0xff}`;
+        }
+    }
+    // Hex notation (e.g., 0x7f000001)
+    if (/^0x[0-9a-fA-F]+$/i.test(hostname)) {
+        const n = parseInt(hostname, 16);
+        if (n >= 0 && n <= 0xffffffff) {
+            return `${(n >>> 24) & 0xff}.${(n >>> 16) & 0xff}.${(n >>> 8) & 0xff}.${n & 0xff}`;
+        }
+    }
+    // Octal or mixed-radix octets (e.g., 0177.0.0.1, 0x7f.0.0.1)
+    const parts = hostname.split(".");
+    if (parts.length === 4) {
+        const octets = [];
+        for (const part of parts) {
+            let val;
+            if (/^0x[0-9a-fA-F]+$/i.test(part)) {
+                val = parseInt(part, 16);
+            }
+            else if (/^0\d+$/.test(part)) {
+                val = parseInt(part, 8);
+            }
+            else if (/^\d+$/.test(part)) {
+                val = parseInt(part, 10);
+            }
+            else {
+                return null; // Not an IP
+            }
+            if (isNaN(val) || val < 0 || val > 255)
+                return null;
+            octets.push(val);
+        }
+        return octets.join(".");
+    }
+    return null;
+}
+function isPrivateIp(hostname) {
+    // Strip brackets from IPv6
+    let ip = hostname.replace(/^\[|\]$/g, "");
+    // Strip IPv6 zone ID (e.g., %25eth0, %eth0) before any analysis
+    const zoneIdx = ip.indexOf("%");
+    if (zoneIdx !== -1) {
+        ip = ip.substring(0, zoneIdx);
+    }
+    // Normalize non-standard IP formats before checking
+    const normalized = normalizeIpv4(ip);
+    const checkIp = normalized ?? ip;
+    // IPv4 private ranges
+    const ipv4Match = checkIp.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+    if (ipv4Match) {
+        const [, a, b] = ipv4Match.map(Number);
+        if (a === 0)
+            return true; // 0.0.0.0/8
+        if (a === 10)
+            return true; // 10.0.0.0/8
+        if (a === 127)
+            return true; // 127.0.0.0/8
+        if (a === 169 && b === 254)
+            return true; // 169.254.0.0/16 link-local
+        if (a === 172 && b >= 16 && b <= 31)
+            return true; // 172.16.0.0/12
+        if (a === 192 && b === 168)
+            return true; // 192.168.0.0/16
+        if (a === 100 && b >= 64 && b <= 127)
+            return true; // 100.64.0.0/10 CGNAT
+        if (a >= 224)
+            return true; // multicast + reserved
+        return false;
+    }
+    // IPv6 private ranges
+    const ipLower = ip.toLowerCase();
+    if (ipLower === "::1")
+        return true; // loopback
+    if (ipLower === "::")
+        return true; // unspecified
+    if (ipLower.startsWith("fc") || ipLower.startsWith("fd"))
+        return true; // fc00::/7 ULA
+    if (ipLower.startsWith("fe80"))
+        return true; // fe80::/10 link-local
+    if (ipLower.startsWith("::ffff:")) {
+        // IPv4-mapped IPv6 — check the embedded IPv4
+        const embedded = ipLower.slice(7);
+        // May be dotted-decimal (::ffff:127.0.0.1) or hex (::ffff:7f00:1)
+        if (embedded.includes(".")) {
+            return isPrivateIp(embedded);
+        }
+        // Hex form: convert ::ffff:XXYY:ZZWW to X.Y.Z.W
+        const hexParts = embedded.split(":");
+        if (hexParts.length === 2) {
+            const hi = parseInt(hexParts[0], 16);
+            const lo = parseInt(hexParts[1], 16);
+            if (!isNaN(hi) && !isNaN(lo)) {
+                const reconstructed = `${(hi >> 8) & 0xff}.${hi & 0xff}.${(lo >> 8) & 0xff}.${lo & 0xff}`;
+                return isPrivateIp(reconstructed);
+            }
+        }
+        return isPrivateIp(embedded);
+    }
+    // IPv4-compatible IPv6 (::x.x.x.x) — deprecated but still parsed
+    if (ipLower.startsWith("::") && !ipLower.startsWith("::ffff:")) {
+        const rest = ipLower.slice(2);
+        if (rest && rest.includes("."))
+            return isPrivateIp(rest);
+        const hexParts = rest.split(":");
+        if (hexParts.length === 2 && hexParts[0] && hexParts[1]) {
+            const hi = parseInt(hexParts[0], 16);
+            const lo = parseInt(hexParts[1], 16);
+            if (!isNaN(hi) && !isNaN(lo)) {
+                const reconstructed = `${(hi >> 8) & 0xff}.${hi & 0xff}.${(lo >> 8) & 0xff}.${lo & 0xff}`;
+                return isPrivateIp(reconstructed);
+            }
+        }
+    }
+    // Teredo (2001:0000::/32) — block unconditionally
+    if (ipLower.startsWith("2001:0000:") || ipLower.startsWith("2001:0:"))
+        return true;
+    // 6to4 (2002::/16) — block unconditionally
+    if (ipLower.startsWith("2002:"))
+        return true;
+    // IPv6 multicast (ff00::/8)
+    if (ipLower.startsWith("ff"))
+        return true;
+    return false;
+}
+export function validateUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new Error(`Invalid URL: ${url}`);
+    }
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+        throw new Error(`Only http: and https: protocols are supported, got ${parsed.protocol}`);
+    }
+    const hostname = parsed.hostname.toLowerCase();
+    // Block known local hostnames
+    if (BLOCKED_HOSTNAMES.has(hostname)) {
+        throw new Error("Requests to localhost/loopback addresses are blocked");
+    }
+    // Block private/reserved IP addresses
+    if (isPrivateIp(hostname)) {
+        throw new Error("Requests to private/internal IP addresses are blocked");
+    }
+    // Block .localhost TLD (RFC 6761) — "foo.localhost" resolves to loopback
+    if (hostname.endsWith(".localhost")) {
+        throw new Error("Requests to localhost/loopback addresses are blocked");
+    }
+    // Block hostnames ending in .local, .internal, .arpa
+    if (hostname.endsWith(".local") || hostname.endsWith(".internal") || hostname.endsWith(".arpa")) {
+        throw new Error("Requests to internal network hostnames are blocked");
+    }
+    // DNS rebinding note — proxyFetch always routes through the upstream proxy
+    // (config.proxyHost), which does its own DNS resolution. The proxy-gateway has
+    // double-resolve DNS rebinding protection. A DNS rebinding attack would need to
+    // target the upstream proxy's resolver, which is not attacker-controlled.
+    // The isPrivateIp() check above handles the static case; dynamic DNS rebinding
+    // is mitigated by the upstream proxy's own protections.
+    return parsed;
+}
+export async function proxyFetch(config, opts) {
+    if (!config.apiKey) {
+        throw new Error("Proxy fetch requires an API key. Use dominusnode_setup to create an account first.");
+    }
+    const apiKey = config.apiKey;
+    const parsed = validateUrl(opts.url);
+    const timeoutMs = Math.min(opts.timeoutMs ?? config.fetchTimeoutMs, 120_000);
+    const maxBytes = config.fetchMaxResponseBytes;
+    const method = (opts.method ?? "GET").toUpperCase();
+    // Enforce read-only methods at function level (defense-in-depth)
+    const ALLOWED_PROXY_METHODS = new Set(["GET", "HEAD"]);
+    if (!ALLOWED_PROXY_METHODS.has(method)) {
+        throw new Error(`Only GET and HEAD methods are allowed for proxy fetch, got ${method}`);
+    }
+    // Drop body on GET/HEAD — these methods should never carry a request body
+    if (method === "GET" || method === "HEAD") {
+        opts.body = undefined;
+    }
+    // Validate user-supplied headers to prevent CRLF injection
+    if (opts.headers) {
+        validateHeaders(opts.headers);
+    }
+    if (parsed.protocol === "https:") {
+        return httpsProxyFetch(apiKey, config, opts, parsed, method, timeoutMs, maxBytes);
+    }
+    return httpProxyFetch(apiKey, config, opts, parsed, method, timeoutMs, maxBytes);
+}
+function httpProxyFetch(apiKey, config, opts, parsed, method, timeoutMs, maxBytes) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            req.destroy();
+            reject(new Error(`Proxy request timed out after ${timeoutMs}ms`));
+        }, timeoutMs);
+        // Block smuggling-prone headers on HTTP path (matches HTTPS path blocklist)
+        // Add user-agent to blocked set (matches HTTPS path PROTECTED_HEADERS)
+        const BLOCKED_HTTP_HEADERS = new Set(["host", "connection", "content-length", "transfer-encoding", "proxy-authorization", "user-agent", "authorization"]);
+        const safeHttpHeaders = {};
+        if (opts.headers) {
+            for (const [key, value] of Object.entries(opts.headers)) {
+                if (!BLOCKED_HTTP_HEADERS.has(key.toLowerCase())) {
+                    safeHttpHeaders[key] = value;
+                }
+            }
+        }
+        const req = http.request({
+            hostname: config.proxyHost,
+            port: config.httpProxyPort,
+            method,
+            path: opts.url,
+            headers: {
+                ...safeHttpHeaders,
+                "Proxy-Authorization": buildProxyAuth(apiKey, opts),
+                Host: parsed.host,
+            },
+        }, (res) => {
+            collectResponse(res, maxBytes, timer).then(({ body, truncated, byteCount }) => {
+                const contentType = res.headers["content-type"] ?? "";
+                // Redact security-sensitive response headers
+                const REDACTED_RESP = new Set([
+                    "set-cookie", "www-authenticate", "proxy-authenticate",
+                    "authorization", "proxy-authorization",
+                ]);
+                const responseHeaders = {};
+                for (const [key, value] of Object.entries(res.headers)) {
+                    if (value && !REDACTED_RESP.has(key))
+                        responseHeaders[key] = Array.isArray(value) ? value.join(", ") : value;
+                }
+                let responseBody;
+                if (isBinaryContentType(contentType)) {
+                    responseBody = `[Binary content: ${contentType}, ${byteCount} bytes]`;
+                }
+                else {
+                    responseBody = body;
+                }
+                resolve({
+                    status: res.statusCode ?? 0,
+                    statusText: res.statusMessage ?? "",
+                    headers: responseHeaders,
+                    body: responseBody,
+                    bodyTruncated: truncated,
+                    byteCount,
+                });
+            }, (err) => {
+                clearTimeout(timer);
+                reject(err);
+            });
+        });
+        req.on("error", (err) => {
+            clearTimeout(timer);
+            reject(new Error(`Proxy connection error: ${err.message}`));
+        });
+        if (opts.body) {
+            req.write(opts.body);
+        }
+        req.end();
+    });
+}
+function httpsProxyFetch(apiKey, config, opts, parsed, method, timeoutMs, maxBytes) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            socket?.destroy();
+            reject(new Error(`Proxy request timed out after ${timeoutMs}ms`));
+        }, timeoutMs);
+        let socket;
+        // Step 1: CONNECT tunnel
+        const connectHost = parsed.hostname.includes(":") ? `[${parsed.hostname}]` : parsed.hostname;
+        const connectReq = http.request({
+            hostname: config.proxyHost,
+            port: config.httpProxyPort,
+            method: "CONNECT",
+            path: `${connectHost}:${parsed.port || 443}`,
+            headers: {
+                "Proxy-Authorization": buildProxyAuth(apiKey, opts),
+                Host: `${connectHost}:${parsed.port || 443}`,
+            },
+        });
+        connectReq.on("connect", (_res, tunnelSocket) => {
+            if (_res.statusCode !== 200) {
+                clearTimeout(timer);
+                tunnelSocket.destroy();
+                reject(new Error(`CONNECT tunnel failed with status ${_res.statusCode}`));
+                return;
+            }
+            socket = tunnelSocket;
+            // Step 2: TLS upgrade
+            const tlsSocket = tls.connect({
+                host: parsed.hostname,
+                port: parseInt(parsed.port || "443", 10),
+                socket: tunnelSocket,
+                servername: parsed.hostname,
+                minVersion: "TLSv1.2",
+            }, () => {
+                // Step 3: Send HTTP request through TLS tunnel
+                const requestPath = parsed.pathname + parsed.search;
+                // Validate request path for CRLF injection before writing raw HTTP request line
+                if (/[\r\n]/.test(requestPath)) {
+                    clearTimeout(timer);
+                    tlsSocket.destroy();
+                    reject(new Error("Request path contains invalid characters"));
+                    return;
+                }
+                // Set base headers first, then user headers, but block security-sensitive overrides
+                const BLOCKED_HEADERS = new Set(["host", "connection", "content-length", "transfer-encoding", "proxy-authorization", "authorization"]);
+                const safeUserHeaders = {};
+                if (opts.headers) {
+                    for (const [key, value] of Object.entries(opts.headers)) {
+                        if (!BLOCKED_HEADERS.has(key.toLowerCase())) {
+                            safeUserHeaders[key] = value;
+                        }
+                    }
+                }
+                // Merge user headers WITHOUT allowing override of security-critical base headers
+                const PROTECTED_HEADERS = new Set(["host", "user-agent", "connection", "content-length"]);
+                const reqHeaders = {
+                    Host: parsed.host,
+                    "User-Agent": "dominusnode-mcp-server/1.0.0",
+                    Accept: "*/*",
+                    Connection: "close",
+                };
+                for (const [key, value] of Object.entries(safeUserHeaders)) {
+                    if (!PROTECTED_HEADERS.has(key.toLowerCase())) {
+                        reqHeaders[key] = value;
+                    }
+                }
+                let reqLine = `${method} ${requestPath} HTTP/1.1\r\n`;
+                for (const [key, value] of Object.entries(reqHeaders)) {
+                    reqLine += `${key}: ${value}\r\n`;
+                }
+                if (opts.body) {
+                    reqLine += `Content-Length: ${Buffer.byteLength(opts.body)}\r\n`;
+                }
+                reqLine += "\r\n";
+                tlsSocket.write(reqLine);
+                if (opts.body) {
+                    tlsSocket.write(opts.body);
+                }
+                // Step 4: Parse HTTP response
+                parseHttpResponse(tlsSocket, maxBytes, timer).then(resolve, (err) => {
+                    clearTimeout(timer);
+                    reject(err);
+                });
+            });
+            tlsSocket.on("error", (err) => {
+                clearTimeout(timer);
+                reject(new Error(`TLS error: ${err.message}`));
+            });
+        });
+        connectReq.on("error", (err) => {
+            clearTimeout(timer);
+            reject(new Error(`CONNECT request error: ${err.message}`));
+        });
+        connectReq.end();
+    });
+}
+function collectResponse(res, maxBytes, timer) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let byteCount = 0;
+        let truncated = false;
+        res.on("data", (chunk) => {
+            byteCount += chunk.length;
+            if (!truncated) {
+                if (byteCount <= maxBytes) {
+                    chunks.push(chunk);
+                }
+                else {
+                    const excess = byteCount - maxBytes;
+                    chunks.push(chunk.subarray(0, chunk.length - excess));
+                    truncated = true;
+                    res.destroy(); // Stop data flow to save bandwidth
+                }
+            }
+        });
+        let resolved = false;
+        function finalize() {
+            if (resolved)
+                return;
+            resolved = true;
+            clearTimeout(timer);
+            resolve({
+                body: Buffer.concat(chunks).toString("utf-8"),
+                truncated,
+                byteCount,
+            });
+        }
+        res.on("end", finalize);
+        res.on("close", finalize);
+        res.on("error", (err) => {
+            if (resolved)
+                return; // Destroyed by us for truncation
+            clearTimeout(timer);
+            reject(err);
+        });
+    });
+}
+function parseHttpResponse(socket, maxBytes, timer) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let byteCount = 0;
+        // Hard cap: headers buffer (16KB) + body maxBytes. Destroy socket on overflow to stop bandwidth burn.
+        const hardCap = maxBytes + 16384;
+        let truncated = false;
+        socket.on("data", (chunk) => {
+            byteCount += chunk.length;
+            if (byteCount <= hardCap) {
+                chunks.push(chunk);
+            }
+            else if (!truncated) {
+                // Keep what we have, destroy socket to stop data flow
+                const excess = byteCount - hardCap;
+                if (chunk.length > excess) {
+                    chunks.push(chunk.subarray(0, chunk.length - excess));
+                }
+                truncated = true;
+                socket.destroy();
+            }
+        });
+        let resolved = false;
+        function finalize() {
+            if (resolved)
+                return;
+            resolved = true;
+            clearTimeout(timer);
+            try {
+                const raw = Buffer.concat(chunks).toString("utf-8");
+                const headerEnd = raw.indexOf("\r\n\r\n");
+                if (headerEnd === -1) {
+                    reject(new Error("Malformed HTTP response — no header terminator"));
+                    return;
+                }
+                const headerSection = raw.substring(0, headerEnd);
+                const bodySection = raw.substring(headerEnd + 4);
+                const statusLine = headerSection.split("\r\n")[0];
+                const statusMatch = statusLine.match(/^HTTP\/\d\.\d\s+(\d+)\s*(.*)/);
+                const status = statusMatch ? parseInt(statusMatch[1], 10) : 0;
+                const statusText = statusMatch?.[2] ?? "";
+                // Redact security-sensitive response headers before returning to MCP client
+                const REDACTED_RESPONSE_HEADERS = new Set([
+                    "set-cookie", "www-authenticate", "proxy-authenticate",
+                    "authorization", "proxy-authorization",
+                ]);
+                const headers = {};
+                const headerLines = headerSection.split("\r\n").slice(1);
+                for (const line of headerLines) {
+                    const colonIdx = line.indexOf(":");
+                    if (colonIdx > 0) {
+                        const key = line.substring(0, colonIdx).trim().toLowerCase();
+                        if (REDACTED_RESPONSE_HEADERS.has(key))
+                            continue;
+                        headers[key] = line.substring(colonIdx + 1).trim();
+                    }
+                }
+                const contentType = headers["content-type"] ?? "";
+                const bodyBytes = Buffer.byteLength(bodySection, "utf-8");
+                const wasBodyTruncated = truncated || bodyBytes > maxBytes;
+                let body;
+                if (isBinaryContentType(contentType)) {
+                    body = `[Binary content: ${contentType}, ${byteCount} bytes]`;
+                }
+                else if (wasBodyTruncated) {
+                    body = bodySection.substring(0, maxBytes);
+                }
+                else {
+                    body = bodySection;
+                }
+                resolve({
+                    status,
+                    statusText,
+                    headers,
+                    body,
+                    bodyTruncated: wasBodyTruncated,
+                    byteCount: bodyBytes,
+                });
+            }
+            catch (err) {
+                reject(new Error(`Failed to parse response: ${err instanceof Error ? err.message : String(err)}`));
+            }
+        }
+        socket.on("end", finalize);
+        socket.on("close", finalize);
+        socket.on("error", (err) => {
+            if (resolved)
+                return; // Socket was destroyed by us for truncation
+            clearTimeout(timer);
+            reject(new Error(`Socket error: ${err.message}`));
+        });
+    });
+}
+//# sourceMappingURL=proxy-fetch.js.map

package/dist/src/proxy-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-fetch.js","sourceRoot":"","sources":["../../src/proxy-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAwBhC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAE9B,SAAS,eAAe,CAAC,OAA+B;IACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,WAAW,GAAG,yDAAyD,CAAC,CAAC;QAC3F,CAAC;QACD,mBAAmB;QACnB,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,WAAW,GAAG,uBAAuB,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,oBAAoB,GAAG;IAC3B,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,0BAA0B;IACxD,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB;IACxD,mBAAmB,EAAE,mBAAmB;CACzC,CAAC;AAEF,SAAS,mBAAmB,CAAC,WAAmB;IAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IACxC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAuB;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,WAAW,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,SAAS,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,QAAQ,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,IAAuB;IAC7D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,WAAW;IACX,uBAAuB;IACvB,eAAe;IACf,cAAc;IACd,OAAO;IACP,oBAAoB;IACpB,SAAS;IACT,MAAM;CACP,CAAC,CAAC;AAEH,kEAAkE;AAClE,8FAA8F;AAC9F,SAAS,aAAa,CAAC,QAAgB;IACrC,wDAAwD;IACxD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;YAC9B,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;IACD,kCAAkC;IAClC,IAAI,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;YAC9B,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;IACD,6DAA6D;IAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,GAAW,CAAC;YAChB,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3B,CAAC;iBAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1B,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,CAAC,YAAY;YAC3B,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG;gBAAE,OAAO,IAAI,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,2BAA2B;IAC3B,IAAI,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAE1C,gEAAgE;IAChE,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACnB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,oDAAoD;IACpD,MAAM,UAAU,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,UAAU,IAAI,EAAE,CAAC;IAEjC,sBAAsB;IACtB,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAChF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,CAAuB,YAAY;QAC5D,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC,CAAsB,aAAa;QAC7D,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAqB,cAAc;QAC9D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAQ,4BAA4B;QAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC,gBAAgB;QAClE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAQ,iBAAiB;QACjE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,sBAAsB;QACzE,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,CAAsB,uBAAuB;QACvE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sBAAsB;IACtB,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC,CAAe,WAAW;IAC7D,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAgB,cAAc;IAChE,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,eAAe;IACtF,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,CAAM,uBAAuB;IACzE,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,6CAA6C;QAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,kEAAkE;QAClE,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QACD,gDAAgD;QAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrC,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC7B,MAAM,aAAa,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;gBAC1F,OAAO,WAAW,CAAC,aAAa,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,iEAAiE;IACjE,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrC,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC7B,MAAM,aAAa,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;gBAC1F,OAAO,WAAW,CAAC,aAAa,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnF,2CAA2C;IAC3C,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7C,4BAA4B;IAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,sDAAsD,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAE/C,8BAA8B;IAC9B,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,sCAAsC;IACtC,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,yEAAyE;IACzE,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,qDAAqD;IACrD,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,2EAA2E;IAC3E,+EAA+E;IAC/E,gFAAgF;IAChF,0EAA0E;IAC1E,+EAA+E;IAC/E,wDAAwD;IAExD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAiB,EACjB,IAAuB;IAEvB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,qBAAqB,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAEpD,iEAAiE;IACjE,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,8DAA8D,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,0EAA0E;IAC1E,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;IACxB,CAAC;IAED,2DAA2D;IAC3D,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,cAAc,CACrB,MAAc,EACd,MAAiB,EACjB,IAAuB,EACvB,MAAW,EACX,MAAc,EACd,SAAiB,EACjB,QAAgB;IAEhB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,SAAS,IAAI,CAAC,CAAC,CAAC;QACpE,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,4EAA4E;QAC5E,uEAAuE;QACvE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;QAC1J,MAAM,eAAe,GAA2B,EAAE,CAAC;QACnD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACjD,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CACtB;YACE,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,IAAI,EAAE,MAAM,CAAC,aAAa;YAC1B,MAAM;YACN,IAAI,EAAE,IAAI,CAAC,GAAG;YACd,OAAO,EAAE;gBACP,GAAG,eAAe;gBAClB,qBAAqB,EAAE,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC;gBACnD,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB;SACF,EACD,CAAC,GAAG,EAAE,EAAE;YACN,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,CACxC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;gBACjC,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;gBACtD,6CAA6C;gBAC7C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;oBAC5B,YAAY,EAAE,kBAAkB,EAAE,oBAAoB;oBACtD,eAAe,EAAE,qBAAqB;iBACvC,CAAC,CAAC;gBACH,MAAM,eAAe,GAA2B,EAAE,CAAC;gBACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBACvD,IAAI,KAAK,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAC/G,CAAC;gBAED,IAAI,YAAoB,CAAC;gBACzB,IAAI,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;oBACrC,YAAY,GAAG,oBAAoB,WAAW,KAAK,SAAS,SAAS,CAAC;gBACxE,CAAC;qBAAM,CAAC;oBACN,YAAY,GAAG,IAAI,CAAC;gBACtB,CAAC;gBAED,OAAO,CAAC;oBACN,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;oBAC3B,UAAU,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;oBACnC,OAAO,EAAE,eAAe;oBACxB,IAAI,EAAE,YAAY;oBAClB,aAAa,EAAE,SAAS;oBACxB,SAAS;iBACV,CAAC,CAAC;YACL,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;gBACN,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CACF,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,MAAc,EACd,MAAiB,EACjB,IAAuB,EACvB,MAAW,EACX,MAAc,EACd,SAAiB,EACjB,QAAgB;IAEhB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,OAAO,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,SAAS,IAAI,CAAC,CAAC,CAAC;QACpE,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,IAAI,MAA8B,CAAC;QAEnC,yBAAyB;QACzB,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC7F,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC;YAC9B,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,IAAI,EAAE,MAAM,CAAC,aAAa;YAC1B,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,GAAG,WAAW,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,EAAE;YAC5C,OAAO,EAAE;gBACP,qBAAqB,EAAE,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC;gBACnD,IAAI,EAAE,GAAG,WAAW,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,EAAE;aAC7C;SACF,CAAC,CAAC;QAEH,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE;YAC9C,IAAI,IAAI,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAC5B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,YAAY,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC1E,OAAO;YACT,CAAC;YAED,MAAM,GAAG,YAAY,CAAC;YAEtB,sBAAsB;YACtB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAC3B;gBACE,IAAI,EAAE,MAAM,CAAC,QAAQ;gBACrB,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBACxC,MAAM,EAAE,YAAY;gBACpB,UAAU,EAAE,MAAM,CAAC,QAAQ;gBAC3B,UAAU,EAAE,SAAS;aACtB,EACD,GAAG,EAAE;gBACH,+CAA+C;gBAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;gBACpD,gFAAgF;gBAChF,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC/B,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,SAAS,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;oBAC9D,OAAO;gBACT,CAAC;gBACD,oFAAoF;gBACpF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,eAAe,CAAC,CAAC,CAAC;gBACvI,MAAM,eAAe,GAA2B,EAAE,CAAC;gBACnD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACjB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;wBACxD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;4BAC5C,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;wBAC/B,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,iFAAiF;gBACjF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC;gBAC1F,MAAM,UAAU,GAA2B;oBACzC,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,YAAY,EAAE,8BAA8B;oBAC5C,MAAM,EAAE,KAAK;oBACb,UAAU,EAAE,OAAO;iBACpB,CAAC;gBACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;oBAC3D,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;wBAC9C,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;oBAC1B,CAAC;gBACH,CAAC;gBAED,IAAI,OAAO,GAAG,GAAG,MAAM,IAAI,WAAW,eAAe,CAAC;gBACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBACtD,OAAO,IAAI,GAAG,GAAG,KAAK,KAAK,MAAM,CAAC;gBACpC,CAAC;gBACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,OAAO,IAAI,mBAAmB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBACnE,CAAC;gBACD,OAAO,IAAI,MAAM,CAAC;gBAElB,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACzB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;gBAED,8BAA8B;gBAC9B,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBAClE,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC,CAAC,CAAC;YACL,CAAC,CACF,CAAC;YAEF,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC5B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,GAAyB,EACzB,QAAgB,EAChB,KAAoC;IAEpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;YAC1B,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;oBACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;oBACtD,SAAS,GAAG,IAAI,CAAC;oBACjB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,mCAAmC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,SAAS,QAAQ;YACf,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC;gBACN,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC7C,SAAS;gBACT,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAED,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE1B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,IAAI,QAAQ;gBAAE,OAAO,CAAC,iCAAiC;YACvD,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAqB,EACrB,QAAgB,EAChB,KAAoC;IAEpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,sGAAsG;QACtG,MAAM,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC;QACjC,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;YAC1B,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;iBAAM,IAAI,CAAC,SAAS,EAAE,CAAC;gBACtB,sDAAsD;gBACtD,MAAM,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;gBACnC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;gBACxD,CAAC;gBACD,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,SAAS,QAAQ;YACf,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACpD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC1C,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;oBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC,CAAC;oBACpE,OAAO;gBACT,CAAC;gBAED,MAAM,aAAa,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBAClD,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;gBAEjD,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClD,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBACrE,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9D,MAAM,UAAU,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAE1C,4EAA4E;gBAC5E,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;oBACxC,YAAY,EAAE,kBAAkB,EAAE,oBAAoB;oBACtD,eAAe,EAAE,qBAAqB;iBACvC,CAAC,CAAC;gBACH,MAAM,OAAO,GAA2B,EAAE,CAAC;gBAC3C,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACzD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACnC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;wBACjB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;wBAC7D,IAAI,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC;4BAAE,SAAS;wBACjD,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBACrD,CAAC;gBACH,CAAC;gBAED,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;gBAClD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBAC1D,MAAM,gBAAgB,GAAG,SAAS,IAAI,SAAS,GAAG,QAAQ,CAAC;gBAC3D,IAAI,IAAY,CAAC;gBAEjB,IAAI,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;oBACrC,IAAI,GAAG,oBAAoB,WAAW,KAAK,SAAS,SAAS,CAAC;gBAChE,CAAC;qBAAM,IAAI,gBAAgB,EAAE,CAAC;oBAC5B,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAC5C,CAAC;qBAAM,CAAC;oBACN,IAAI,GAAG,WAAW,CAAC;gBACrB,CAAC;gBAED,OAAO,CAAC;oBACN,MAAM;oBACN,UAAU;oBACV,OAAO;oBACP,IAAI;oBACJ,aAAa,EAAE,gBAAgB;oBAC/B,SAAS,EAAE,SAAS;iBACrB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACrG,CAAC;QACH,CAAC;QAED,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE7B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,IAAI,QAAQ;gBAAE,OAAO,CAAC,4CAA4C;YAClE,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/token-manager.d.ts

@@ -0,0 +1,18 @@
+export declare class TokenManager {
+    private accessToken;
+    private refreshTokenValue;
+    private refreshPromise;
+    private apiUrl;
+    private apiKey;
+    constructor(apiUrl: string);
+    initialize(apiKey: string): Promise<void>;
+    isExpired(token: string): boolean;
+    getValidToken(): Promise<string>;
+    private lastRefreshAttempt;
+    private static readonly MIN_REFRESH_INTERVAL_MS;
+    forceRefresh(): Promise<string>;
+    /** Store tokens from external auth flow (e.g., registration, wallet auth in bootstrap mode) */
+    setTokens(accessToken: string, refreshToken: string): void;
+    clear(): void;
+}
+//# sourceMappingURL=token-manager.d.ts.map

package/dist/src/token-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-manager.d.ts","sourceRoot":"","sources":["../../src/token-manager.ts"],"names":[],"mappings":"AAKA,qBAAa,YAAY;IACvB,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,cAAc,CAAgC;IACtD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAuB;gBAEzB,MAAM,EAAE,MAAM;IAIpB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoC/C,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAqB3B,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IAQtC,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAS;IAElD,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAuErC,+FAA+F;IAC/F,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAe1D,KAAK,IAAI,IAAI;CAUd"}