@emseepea/server 0.20.0 → 0.21.0

package/README.md

@@ -1016,6 +1016,52 @@ The default limits are 16 active streams, 256 events, 8 KiB per event, a
 `resourceSubscriptions`. Streams and notifications are process-local, with no
 replay or reconnect recovery. List-change subscriptions are not supported.
 
+## Trigger Work from MCP Events
+
+MCP Events are separate from the process-local resource subscriptions above.
+To offer ChatGPT's webhook event mode, pass `events` and OAuth authentication to
+`createEmseepea`. No event methods or outbound callbacks are enabled by default.
+
+An event definition has a fixed name, description, Zod object schemas for
+subscription arguments and event data, and a `matches(arguments, data)` filter.
+The catalogue is fixed for the life of the server; redeploy to change it.
+
+The `events` configuration must also provide:
+
+- `ownerKey(auth)`: a stable, account-specific identifier. Do not use the OAuth
+  client ID or an access token as the subscription owner.
+- `authorize({ ownerKey, name, arguments, phase })`: return `true` only while
+  that owner may see or receive the event. The framework calls it for listing,
+  subscribing, and again before each delivery.
+- `health()`: return `true` only while the durable subscription and delivery
+  store and required outbound delivery are operational. A failure makes event
+  methods and readiness fail closed.
+- `callbackTimeoutMs`: optional deadline for these adopter callbacks, from 1
+  to 10,000 milliseconds (5,000 by default). Timed-out operations fail closed.
+- `store`: an adopter-owned durable implementation of `McpEventStore`. Persist
+  subscriptions and queued deliveries across restarts. An in-memory map is
+  suitable only for a test, not deployment. Its operations must provide:
+  - Atomic subscription `put` and `delete`.
+  - Durable delivery `enqueue`.
+  - Atomic `claimDue` leases across instances.
+  - Idempotent `complete` and `reschedule` that apply only to the current lease.
+
+After a domain change, call `await publishMcpEvent(app, name, data)`. It checks
+the event payload, applies each subscription's filter and current access, then
+queues a stable event ID for matching subscribers. The background worker checks
+access again, signs the exact JSON bytes with Standard Webhooks, and retries
+transient failures with bounded backoff. It does not retry HTTP 410 or 413.
+
+Callbacks must use HTTPS and public addresses. For each connection, the
+framework checks DNS, pins a validated address for TLS, and refuses redirects.
+It verifies a signed challenge before storing a subscription.
+
+This opt-in supports webhook `events/list`, `events/subscribe`, and
+`events/unsubscribe` on the authenticated MCP endpoint. It does not implement
+polling, streaming, replay, or gap/terminated notifications. Local tests cover
+the protocol boundary and delivery logic; a production ChatGPT event-triggered
+journey must be verified separately before claiming that outcome.
+
 ## Tell Clients When They May Reuse Results
 
 By default, clients are told not to reuse lists, discovery details, or resource

package/dist/events-webhook.d.ts

@@ -0,0 +1,8 @@
+export interface WebhookResponse {
+    readonly status: number;
+    readonly body: Buffer;
+}
+export declare function signWebhook(secret: string, id: string, timestamp: number, body: Buffer): string;
+/** Resolve on every request and pin the validated address for the TLS connection. */
+export declare function postCheckedWebhook(url: string, body: Buffer, headers: Readonly<Record<string, string>>): Promise<WebhookResponse>;
+//# sourceMappingURL=events-webhook.d.ts.map

package/dist/events-webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events-webhook.d.ts","sourceRoot":"","sources":["../src/events-webhook.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAG/F;AAED,qFAAqF;AACrF,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GACxC,OAAO,CAAC,eAAe,CAAC,CAmE1B"}

package/dist/events-webhook.js

@@ -0,0 +1,83 @@
+import { createHmac } from "node:crypto";
+import { lookup } from "node:dns/promises";
+import { request } from "node:https";
+import { isIP } from "node:net";
+import { isAllowedAddress } from "./http.js";
+const MAX_RESPONSE_BYTES = 4096;
+const MAX_HEADER_BYTES = 8192;
+export function signWebhook(secret, id, timestamp, body) {
+    const key = Buffer.from(secret.slice("whsec_".length), "base64");
+    return `v1,${createHmac("sha256", key).update(`${id}.${timestamp}.`).update(body).digest("base64")}`;
+}
+/** Resolve on every request and pin the validated address for the TLS connection. */
+export async function postCheckedWebhook(url, body, headers) {
+    const target = new URL(url);
+    if (target.protocol !== "https:" || target.username || target.password || target.hash ||
+        isIP(target.hostname.replace(/^\[|\]$/g, "")) !== 0 ||
+        target.hostname === "localhost" || target.hostname.endsWith(".localhost") ||
+        target.hostname.endsWith(".local") ||
+        (target.port && target.port !== "443") || Buffer.byteLength(`${target.pathname}${target.search}`) > 8192) {
+        throw new Error("unsafe_callback");
+    }
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 10_000);
+    timeout.unref();
+    try {
+        const addresses = await Promise.race([
+            lookup(target.hostname, { all: true, order: "verbatim" }),
+            new Promise((_resolve, reject) => controller.signal.addEventListener("abort", () => reject(new Error("callback_timeout")), { once: true })),
+        ]);
+        if (addresses.length === 0 || addresses.some(({ address, family }) => !isAllowedAddress(address, family))) {
+            throw new Error("unsafe_callback");
+        }
+        const address = addresses[0];
+        return await new Promise((resolve, reject) => {
+            const requestOptions = {
+                agent: false,
+                autoSelectFamily: false,
+                family: address.family,
+                lookup: (_hostname, _options, callback) => callback(null, address.address, address.family),
+                servername: target.hostname,
+                method: "POST",
+                maxHeaderSize: MAX_HEADER_BYTES,
+                signal: controller.signal,
+                headers: {
+                    ...headers,
+                    "Content-Type": "application/json",
+                    "Content-Length": String(body.byteLength),
+                    Host: target.host,
+                    "Accept-Encoding": "identity",
+                },
+            };
+            const outgoing = request(target, requestOptions, (incoming) => {
+                const contentLength = incoming.headers["content-length"];
+                if (Number(contentLength) > MAX_RESPONSE_BYTES || incoming.headers["content-encoding"] ||
+                    Number(incoming.headers["content-length"]) < 0) {
+                    incoming.destroy();
+                    reject(new Error("invalid_callback_response"));
+                    return;
+                }
+                const chunks = [];
+                let bytes = 0;
+                incoming.on("data", (chunk) => {
+                    bytes += chunk.byteLength;
+                    if (bytes > MAX_RESPONSE_BYTES) {
+                        incoming.destroy();
+                        reject(new Error("invalid_callback_response"));
+                    }
+                    else
+                        chunks.push(chunk);
+                });
+                incoming.once("error", reject);
+                incoming.once("aborted", () => reject(new Error("invalid_callback_response")));
+                incoming.once("end", () => resolve({ status: incoming.statusCode ?? 0, body: Buffer.concat(chunks) }));
+            });
+            outgoing.once("error", reject);
+            outgoing.end(body);
+        });
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+//# sourceMappingURL=events-webhook.js.map

package/dist/events-webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events-webhook.js","sourceRoot":"","sources":["../src/events-webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAErC,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAO9B,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,EAAU,EAAE,SAAiB,EAAE,IAAY;IACrF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjE,OAAO,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AACvG,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,IAAY,EACZ,OAAyC;IAEzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI;QACjF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC;QACnD,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QACzE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAClC,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;QAC7G,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7D,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;YACzD,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CACtC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;SAC5G,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC1G,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;QAC9B,OAAO,MAAM,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG;gBACrB,KAAK,EAAE,KAAK;gBACZ,gBAAgB,EAAE,KAAK;gBACvB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC;gBAC1F,UAAU,EAAE,MAAM,CAAC,QAAQ;gBAC3B,MAAM,EAAE,MAAM;gBACd,aAAa,EAAE,gBAAgB;gBAC/B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE;oBACP,GAAG,OAAO;oBACV,cAAc,EAAE,kBAAkB;oBAClC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;oBACzC,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,iBAAiB,EAAE,UAAU;iBAC9B;aAC8D,CAAC;YAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC5D,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACzD,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,kBAAkB,IAAI,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC;oBAClF,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnD,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;oBAC/C,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBACpC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;oBAC1B,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;wBAC/B,QAAQ,CAAC,OAAO,EAAE,CAAC;wBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;oBACjD,CAAC;;wBAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC5B,CAAC,CAAC,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC/B,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;gBAC/E,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACzG,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/events.d.ts

@@ -0,0 +1,97 @@
+import type { AuthInfo } from "@modelcontextprotocol/server";
+import { type ZodType } from "zod";
+import { postCheckedWebhook } from "./events-webhook.js";
+export interface McpEventDefinition {
+    readonly name: string;
+    readonly description: string;
+    readonly inputSchema: ZodType;
+    readonly payloadSchema: ZodType;
+    readonly matches: (arguments_: Readonly<Record<string, unknown>>, data: Readonly<Record<string, unknown>>) => boolean;
+}
+export interface McpEventSubscription {
+    readonly id: string;
+    readonly ownerKey: string;
+    readonly name: string;
+    readonly arguments: Readonly<Record<string, unknown>>;
+    readonly url: string;
+    readonly secret: string;
+    readonly expiresAt: number;
+    readonly verifiedUntil?: number;
+    readonly previousSecret?: string;
+    readonly previousSecretUntil?: number;
+}
+export interface McpEventStore {
+    /** Implementations must persist records and make put/delete atomic across instances. */
+    get(id: string): Promise<McpEventSubscription | null>;
+    put(subscription: McpEventSubscription): Promise<void>;
+    delete(id: string): Promise<void>;
+    list(name: string): Promise<readonly McpEventSubscription[]>;
+    /** Atomic, durable queue operations. claimDue must lease jobs across instances. */
+    enqueue(delivery: McpEventDelivery): Promise<void>;
+    claimDue(limit: number, now: number, leaseMs: number): Promise<readonly McpClaimedEventDelivery[]>;
+    /** Apply only if the lease still matches; a stale worker must not resurrect a completed delivery. */
+    complete(id: string, leaseId: string): Promise<void>;
+    reschedule(delivery: McpClaimedEventDelivery): Promise<void>;
+}
+export interface McpEventDelivery {
+    readonly id: string;
+    readonly subscriptionId: string;
+    readonly eventId: string;
+    readonly body: string;
+    readonly attempts: number;
+    readonly nextAttemptAt: number;
+}
+export interface McpClaimedEventDelivery extends McpEventDelivery {
+    readonly leaseId: string;
+}
+export interface McpEventsOptions {
+    readonly definitions: readonly McpEventDefinition[];
+    /** Maximum time to wait for adopter callbacks, in milliseconds (default 5000). */
+    readonly callbackTimeoutMs?: number;
+    readonly ownerKey: (auth: AuthInfo) => string | Promise<string>;
+    readonly authorize: (request: {
+        readonly ownerKey: string;
+        readonly name: string;
+        readonly arguments: Readonly<Record<string, unknown>>;
+        readonly phase: "list" | "subscribe" | "delivery";
+    }) => boolean | Promise<boolean>;
+    readonly health: () => boolean | Promise<boolean>;
+    readonly store: McpEventStore;
+}
+export interface NormalizedEventDefinition extends McpEventDefinition {
+    readonly wire: Readonly<{
+        name: string;
+        description: string;
+        delivery: readonly ["webhook"];
+        inputSchema: Record<string, unknown>;
+        payloadSchema: Record<string, unknown>;
+    }>;
+}
+export interface McpEventRuntime {
+    readonly definitions: readonly NormalizedEventDefinition[];
+    ownerKey(auth: AuthInfo): Promise<string>;
+    list(ownerKey: string): Promise<readonly NormalizedEventDefinition["wire"][]>;
+    validateSubscription(params: unknown): {
+        readonly definition: NormalizedEventDefinition;
+        readonly arguments: Readonly<Record<string, unknown>>;
+        readonly url: string;
+        readonly secret: string;
+    };
+    subscribe(ownerKey: string, params: unknown): Promise<{
+        readonly id: string;
+        readonly refreshBefore: string;
+        readonly cursor: null;
+        readonly truncated: false;
+    }>;
+    unsubscribe(ownerKey: string, params: unknown): Promise<void>;
+    publish(name: string, data: Readonly<Record<string, unknown>>): Promise<void>;
+    drain(): Promise<void>;
+    ready(): Promise<boolean>;
+}
+export declare class McpEventInputError extends Error {
+    readonly code: number;
+    readonly reason: string;
+    constructor(code: number, reason: string);
+}
+export declare function createMcpEventRuntime(options: McpEventsOptions, webhookPost?: typeof postCheckedWebhook): McpEventRuntime;
+//# sourceMappingURL=events.d.ts.map

package/dist/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAG7D,OAAO,EAAK,KAAK,OAAO,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAe,MAAM,qBAAqB,CAAC;AAEtE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,CAAC;CACvH;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACtD,GAAG,CAAC,YAAY,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC,CAAC;IAC7D,mFAAmF;IACnF,OAAO,CAAC,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAAC;IACnG,qGAAqG;IACrG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,UAAU,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,uBAAwB,SAAQ,gBAAgB;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACpD,kFAAkF;IAClF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE;QAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACtD,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,CAAC;KACnD,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;CAC/B;AAED,MAAM,WAAW,yBAA0B,SAAQ,kBAAkB;IACnE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACxC,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC3D,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9E,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG;QACrC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;QAC/C,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACtD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;QACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;QACtB,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;KAC3B,CAAC,CAAC;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3B;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAArC,IAAI,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM;CAG3D;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,gBAAgB,EACzB,WAAW,GAAE,OAAO,kBAAuC,GAC1D,eAAe,CA2QjB"}

package/dist/events.js

@@ -0,0 +1,322 @@
+import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
+import { isIP } from "node:net";
+import { z } from "zod";
+import { postCheckedWebhook, signWebhook } from "./events-webhook.js";
+export class McpEventInputError extends Error {
+    code;
+    reason;
+    constructor(code, reason) {
+        super(code === -32015 ? "Callback endpoint rejected" : "Invalid event subscription");
+        this.code = code;
+        this.reason = reason;
+    }
+}
+export function createMcpEventRuntime(options, webhookPost = postCheckedWebhook) {
+    if (!options || typeof options !== "object" || !Array.isArray(options.definitions) ||
+        options.definitions.length === 0 || options.definitions.length > 100 ||
+        typeof options.ownerKey !== "function" ||
+        typeof options.authorize !== "function" || typeof options.health !== "function" ||
+        !options.store || typeof options.store !== "object" ||
+        ["get", "put", "delete", "list", "enqueue", "claimDue", "complete", "reschedule"].some((method) => typeof options.store[method] !== "function")) {
+        throw new TypeError("events require definitions, ownerKey, authorize, health, and a durable store");
+    }
+    const callbackTimeoutMs = options.callbackTimeoutMs ?? 5000;
+    if (!Number.isSafeInteger(callbackTimeoutMs) || callbackTimeoutMs < 1 || callbackTimeoutMs > 10_000)
+        throw new TypeError("events.callbackTimeoutMs must be between 1 and 10000");
+    const bounded = async (callback) => {
+        let timer;
+        try {
+            return await Promise.race([
+                Promise.resolve().then(callback),
+                new Promise((_resolve, reject) => {
+                    timer = setTimeout(() => reject(new Error("Event callback deadline exceeded")), callbackTimeoutMs);
+                }),
+            ]);
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    };
+    const names = new Set();
+    const definitions = Object.freeze(options.definitions.map((definition) => {
+        if (!definition || typeof definition.name !== "string" ||
+            !/^[a-z][a-z0-9]*(?:[._-][a-z0-9]+)+$/.test(definition.name) ||
+            names.has(definition.name) || typeof definition.description !== "string" ||
+            !definition.description.trim() || typeof definition.matches !== "function" ||
+            !(definition.inputSchema instanceof z.ZodType) ||
+            !(definition.payloadSchema instanceof z.ZodType)) {
+            throw new TypeError("events require unique named definitions with schemas and a matcher");
+        }
+        names.add(definition.name);
+        const inputSchema = z.toJSONSchema(definition.inputSchema);
+        const payloadSchema = z.toJSONSchema(definition.payloadSchema);
+        if (!inputSchema || typeof inputSchema !== "object" || Array.isArray(inputSchema) ||
+            inputSchema.type !== "object" || !payloadSchema || typeof payloadSchema !== "object" ||
+            Array.isArray(payloadSchema) || payloadSchema.type !== "object") {
+            throw new TypeError("event schemas must describe objects");
+        }
+        const wire = Object.freeze({
+            name: definition.name,
+            description: definition.description,
+            delivery: Object.freeze(["webhook"]),
+            inputSchema: deepFreeze(inputSchema),
+            payloadSchema: deepFreeze(payloadSchema),
+        });
+        return Object.freeze({ ...definition, wire });
+    }));
+    const subscriptionIdentity = (ownerKey, name, args, url) => `sub_${createHash("sha256").update(JSON.stringify([ownerKey, name, canonical(args), url])).digest("hex")}`;
+    const validateUnsubscribe = (params) => {
+        if (!params || typeof params !== "object" || Array.isArray(params))
+            throw new McpEventInputError(-32602, "invalid_params");
+        const request = params;
+        const definition = definitions.find((item) => item.name === request.name);
+        if (!definition || !request.arguments || typeof request.arguments !== "object" ||
+            Array.isArray(request.arguments))
+            throw new McpEventInputError(-32602, "invalid_params");
+        const parsed = definition.inputSchema.safeParse(request.arguments);
+        if (!parsed.success || !parsed.data || typeof parsed.data !== "object" || Array.isArray(parsed.data))
+            throw new McpEventInputError(-32602, "invalid_arguments");
+        const delivery = request.delivery;
+        if (!delivery || typeof delivery !== "object" || Array.isArray(delivery) ||
+            delivery.mode !== "webhook" ||
+            typeof delivery.url !== "string")
+            throw new McpEventInputError(-32602, "invalid_delivery");
+        let url;
+        const callbackUrl = delivery.url;
+        if (typeof callbackUrl !== "string")
+            throw new McpEventInputError(-32602, "invalid_delivery");
+        try {
+            url = new URL(callbackUrl);
+        }
+        catch {
+            throw new McpEventInputError(-32602, "invalid_delivery");
+        }
+        if (url.protocol !== "https:" || url.username || url.password || url.hash ||
+            url.port && url.port !== "443" || isIP(url.hostname) !== 0)
+            throw new McpEventInputError(-32602, "invalid_delivery");
+        return { definition, arguments: parsed.data, url: url.href };
+    };
+    const runtime = {
+        definitions,
+        async ownerKey(auth) {
+            const ownerKey = await bounded(() => options.ownerKey(auth));
+            if (typeof ownerKey !== "string" || !ownerKey.trim() ||
+                Buffer.byteLength(ownerKey, "utf8") > 256) {
+                throw new TypeError("events.ownerKey must return a stable nonempty key of at most 256 bytes");
+            }
+            return ownerKey;
+        },
+        async list(ownerKey) {
+            const allowed = [];
+            for (const definition of definitions) {
+                if (await bounded(() => options.authorize({ ownerKey, name: definition.name,
+                    arguments: {}, phase: "list" })) === true) {
+                    allowed.push(definition.wire);
+                }
+            }
+            return allowed;
+        },
+        validateSubscription(params) {
+            if (!params || typeof params !== "object" || Array.isArray(params)) {
+                throw new McpEventInputError(-32602, "invalid_params");
+            }
+            const request = params;
+            const definition = definitions.find((item) => item.name === request.name);
+            if (!definition || !request.arguments || typeof request.arguments !== "object" ||
+                Array.isArray(request.arguments) ||
+                request.cursor !== null && request.cursor !== undefined) {
+                throw new McpEventInputError(-32602, "invalid_params");
+            }
+            const parsed = definition.inputSchema.safeParse(request.arguments);
+            if (!parsed.success || !parsed.data || typeof parsed.data !== "object" ||
+                Array.isArray(parsed.data)) {
+                throw new McpEventInputError(-32602, "invalid_arguments");
+            }
+            const delivery = request.delivery;
+            if (!delivery || typeof delivery !== "object" || Array.isArray(delivery)) {
+                throw new McpEventInputError(-32602, "invalid_delivery");
+            }
+            const { mode, url, secret } = delivery;
+            if (mode !== "webhook" || typeof url !== "string" || typeof secret !== "string" ||
+                !/^whsec_[A-Za-z0-9+/]+={0,2}$/.test(secret)) {
+                throw new McpEventInputError(-32602, "invalid_delivery");
+            }
+            const decoded = Buffer.from(secret.slice(6), "base64");
+            if (decoded.length < 24 || decoded.length > 64 ||
+                decoded.toString("base64") !== secret.slice(6)) {
+                throw new McpEventInputError(-32602, "invalid_secret");
+            }
+            let callback;
+            try {
+                callback = new URL(url);
+            }
+            catch {
+                throw new McpEventInputError(-32015, "invalid_url");
+            }
+            if (callback.protocol !== "https:" || callback.username || callback.password ||
+                callback.hash || callback.port && callback.port !== "443" ||
+                Buffer.byteLength(callback.href, "utf8") > 8192 ||
+                !callback.hostname || isIP(callback.hostname) !== 0 ||
+                callback.hostname === "localhost" || callback.hostname.endsWith(".localhost") ||
+                callback.hostname.endsWith(".local")) {
+                throw new McpEventInputError(-32015, "invalid_url");
+            }
+            return { definition, arguments: parsed.data, url: callback.href, secret };
+        },
+        async subscribe(ownerKey, params) {
+            const valid = runtime.validateSubscription(params);
+            const request = params;
+            const ttlMs = request.ttlMs;
+            if (ttlMs !== undefined && ttlMs !== null &&
+                (!Number.isSafeInteger(ttlMs) || Number(ttlMs) <= 0))
+                throw new McpEventInputError(-32602, "invalid_ttl");
+            if (!await bounded(() => options.authorize({ ownerKey, name: valid.definition.name,
+                arguments: valid.arguments, phase: "subscribe" })))
+                throw new McpEventInputError(-32602, "capability_not_found");
+            const id = subscriptionIdentity(ownerKey, valid.definition.name, valid.arguments, valid.url);
+            const prior = await bounded(() => options.store.get(id));
+            const now = Date.now();
+            if (!prior || prior.secret !== valid.secret || !prior.verifiedUntil || prior.verifiedUntil < now) {
+                const challenge = randomBytes(32).toString("base64url");
+                const messageId = `msg_verification_${randomBytes(16).toString("hex")}`;
+                const body = Buffer.from(JSON.stringify({ type: "verification", challenge }));
+                const timestamp = Math.floor(now / 1000);
+                try {
+                    const response = await webhookPost(valid.url, body, {
+                        "webhook-id": messageId,
+                        "webhook-timestamp": String(timestamp),
+                        "webhook-signature": signWebhook(valid.secret, messageId, timestamp, body),
+                        "X-MCP-Subscription-Id": id,
+                    });
+                    if (response.status < 200 || response.status > 299) {
+                        throw new McpEventInputError(-32015, "challenge_failed");
+                    }
+                    const answer = JSON.parse(response.body.toString("utf8"));
+                    const actual = answer && typeof answer === "object" && !Array.isArray(answer)
+                        ? answer.challenge : undefined;
+                    if (typeof actual !== "string" ||
+                        !timingSafeEqual(createHash("sha256").update(actual).digest(), createHash("sha256").update(challenge).digest())) {
+                        throw new McpEventInputError(-32015, "challenge_failed");
+                    }
+                }
+                catch (error) {
+                    if (error instanceof McpEventInputError)
+                        throw error;
+                    throw new McpEventInputError(-32015, "challenge_failed");
+                }
+            }
+            const expiresAt = now + Math.min(typeof ttlMs === "number" ? ttlMs : 86_400_000, 86_400_000);
+            await bounded(() => options.store.put({
+                id, ownerKey, name: valid.definition.name, arguments: valid.arguments,
+                url: valid.url, secret: valid.secret, expiresAt, verifiedUntil: now + 600_000,
+                ...(prior && prior.secret !== valid.secret ? {
+                    previousSecret: prior.secret, previousSecretUntil: now + 300_000,
+                } : {}),
+            }));
+            return { id, refreshBefore: new Date(expiresAt).toISOString(), cursor: null, truncated: false };
+        },
+        async unsubscribe(ownerKey, params) {
+            const valid = validateUnsubscribe(params);
+            const id = subscriptionIdentity(ownerKey, valid.definition.name, valid.arguments, valid.url);
+            const prior = await bounded(() => options.store.get(id));
+            if (prior && prior.ownerKey === ownerKey)
+                await bounded(() => options.store.delete(id));
+        },
+        async publish(name, data) {
+            if (!await runtime.ready())
+                throw new Error("Events are unavailable");
+            const definition = definitions.find((item) => item.name === name);
+            if (!definition)
+                throw new TypeError("Event name is not registered");
+            const checked = definition.payloadSchema.safeParse(data);
+            if (!checked.success || !checked.data || typeof checked.data !== "object" || Array.isArray(checked.data))
+                throw new TypeError("Event data does not match payload schema");
+            const eventId = `evt_${randomUUID()}`;
+            const body = JSON.stringify({ eventId, name, timestamp: new Date().toISOString(),
+                data: checked.data, cursor: null });
+            if (Buffer.byteLength(body, "utf8") > 262_144)
+                throw new TypeError("Event exceeds 256 KiB");
+            const subscriptions = await bounded(() => options.store.list(name));
+            const now = Date.now();
+            for (const subscription of subscriptions) {
+                if (subscription.expiresAt <= now ||
+                    !definition.matches(subscription.arguments, checked.data))
+                    continue;
+                if (!await bounded(() => options.authorize({ ownerKey: subscription.ownerKey,
+                    name, arguments: subscription.arguments, phase: "delivery" })))
+                    continue;
+                await bounded(() => options.store.enqueue({
+                    id: `${subscription.id}:${eventId}`, subscriptionId: subscription.id,
+                    eventId, body, attempts: 0, nextAttemptAt: now,
+                }));
+            }
+        },
+        async drain() {
+            if (!await runtime.ready())
+                return;
+            const due = await bounded(() => options.store.claimDue(4, Date.now(), 60_000));
+            for (const delivery of due) {
+                if (!delivery.leaseId)
+                    throw new Error("Event store returned an unleased delivery");
+                const subscription = await bounded(() => options.store.get(delivery.subscriptionId));
+                if (!subscription || subscription.expiresAt <= Date.now() ||
+                    !await bounded(() => options.authorize({ ownerKey: subscription.ownerKey, name: subscription.name,
+                        arguments: subscription.arguments, phase: "delivery" }))) {
+                    await bounded(() => options.store.complete(delivery.id, delivery.leaseId));
+                    continue;
+                }
+                const body = Buffer.from(delivery.body);
+                const timestamp = Math.floor(Date.now() / 1000);
+                let status = 0;
+                try {
+                    const signature = signWebhook(subscription.secret, delivery.eventId, timestamp, body);
+                    const oldSignature = subscription.previousSecret && subscription.previousSecretUntil &&
+                        subscription.previousSecretUntil > Date.now()
+                        ? ` ${signWebhook(subscription.previousSecret, delivery.eventId, timestamp, body)}` : "";
+                    const response = await webhookPost(subscription.url, body, {
+                        "webhook-id": delivery.eventId,
+                        "webhook-timestamp": String(timestamp),
+                        "webhook-signature": `${signature}${oldSignature}`,
+                        "X-MCP-Subscription-Id": subscription.id,
+                    });
+                    status = response.status;
+                }
+                catch { /* Retry transient delivery failures below. */ }
+                if (status >= 200 && status < 300 || status === 410 || status === 413 || delivery.attempts >= 3) {
+                    await bounded(() => options.store.complete(delivery.id, delivery.leaseId));
+                }
+                else {
+                    await bounded(() => options.store.reschedule({ ...delivery, attempts: delivery.attempts + 1,
+                        nextAttemptAt: Date.now() + Math.min(60_000, 1000 * 5 ** delivery.attempts) }));
+                }
+            }
+        },
+        async ready() {
+            try {
+                return await bounded(() => options.health()) === true;
+            }
+            catch {
+                return false;
+            }
+        },
+    };
+    return Object.freeze(runtime);
+}
+function canonical(value) {
+    if (Array.isArray(value))
+        return value.map(canonical);
+    if (value && typeof value === "object")
+        return Object.fromEntries(Object.entries(value).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0)
+            .map(([key, item]) => [key, canonical(item)]));
+    return value;
+}
+function deepFreeze(value) {
+    if (value && typeof value === "object") {
+        for (const child of Object.values(value))
+            deepFreeze(child);
+        Object.freeze(value);
+    }
+    return value;
+}
+//# sourceMappingURL=events.js.map

package/dist/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,CAAC,EAAgB,MAAM,KAAK,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAiGtE,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACtB;IAAuB;IAA5C,YAAqB,IAAY,EAAW,MAAc;QACxD,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC;QADlE,SAAI,GAAJ,IAAI,CAAQ;QAAW,WAAM,GAAN,MAAM,CAAQ;IAE1D,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAyB,EACzB,cAAyC,kBAAkB;IAE3D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QAC9E,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG;QACpE,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QACtC,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;QAC/E,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;QACnD,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAChG,OAAO,OAAO,CAAC,KAAK,CAAC,MAA6B,CAAC,KAAK,UAAU,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,SAAS,CAAC,8EAA8E,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,GAAG,CAAC,IAAI,iBAAiB,GAAG,MAAM;QACjG,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,KAAK,EAAK,QAA8B,EAAc,EAAE;QACtE,IAAI,KAAgD,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;gBACxB,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAChC,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;oBACtC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;gBACrG,CAAC,CAAC;aACH,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QACvE,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ;YAClD,CAAC,qCAAqC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAC5D,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ;YACxE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,UAAU;YAC1E,CAAC,CAAC,UAAU,CAAC,WAAW,YAAY,CAAC,CAAC,OAAO,CAAC;YAC9C,CAAC,CAAC,UAAU,CAAC,aAAa,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,SAAS,CAAC,oEAAoE,CAAC,CAAC;QAC5F,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,WAAW,GAAG,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC/D,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAC7E,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ;YACpF,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;YACzB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAU,CAAC;YAC7C,WAAW,EAAE,UAAU,CAAC,WAAW,CAAC;YACpC,aAAa,EAAE,UAAU,CAAC,aAAa,CAAC;SACzC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC,CAAC;IACJ,MAAM,oBAAoB,GAAG,CAAC,QAAgB,EAAE,IAAY,EAC1D,IAAuC,EAAE,GAAW,EAAE,EAAE,CACxD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7G,MAAM,mBAAmB,GAAG,CAAC,MAAe,EAAE,EAAE;QAC9C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAChE,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAiC,CAAC;QAClD,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1E,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;YAC1E,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAClG,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACnE,QAAoC,CAAC,IAAI,KAAK,SAAS;YACxD,OAAQ,QAAoC,CAAC,GAAG,KAAK,QAAQ;YAC/D,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAC3D,IAAI,GAAQ,CAAC;QACb,MAAM,WAAW,GAAI,QAAoC,CAAC,GAAG,CAAC;QAC9D,IAAI,OAAO,WAAW,KAAK,QAAQ;YAAE,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAC9F,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QAAC,CAAC;QACnC,MAAM,CAAC;YAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAAC,CAAC;QACnE,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI;YACrE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC5D,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAC3D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,IAA+B,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1F,CAAC,CAAC;IACF,MAAM,OAAO,GAAoB;QAC/B,WAAW;QACX,KAAK,CAAC,QAAQ,CAAC,IAAc;YAC3B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;gBAChD,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;gBAC9C,MAAM,IAAI,SAAS,CAAC,wEAAwE,CAAC,CAAC;YAChG,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,QAAgB;YACzB,MAAM,OAAO,GAAG,EAAE,CAAC;YACnB,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,IAAI,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI;oBACzE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC5C,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,oBAAoB,CAAC,MAAe;YAClC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,OAAO,GAAG,MAAiC,CAAC;YAClD,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1E,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;gBAC1E,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;gBAChC,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC5D,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAClE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAClC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzE,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,QAAmC,CAAC;YAClE,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAC3E,CAAC,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;gBAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,QAAa,CAAC;YAClB,IAAI,CAAC;gBAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAChC,MAAM,CAAC;gBAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YAAC,CAAC;YAC9D,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;gBACxE,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK;gBACzD,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,IAAI;gBAC/C,CAAC,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACnD,QAAQ,CAAC,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC7E,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,IAA+B,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QACvG,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,MAAe;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,MAAiC,CAAC;YAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC5B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;gBACrC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACtD,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACtD,IAAI,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;gBAChF,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBAClD,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YAC/D,MAAM,EAAE,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7F,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,GAAG,GAAG,EAAE,CAAC;gBACjG,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACxD,MAAM,SAAS,GAAG,oBAAoB,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;gBAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;gBACzC,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;wBAClD,YAAY,EAAE,SAAS;wBACvB,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC;wBACtC,mBAAmB,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC;wBAC1E,uBAAuB,EAAE,EAAE;qBAC5B,CAAC,CAAC;oBACH,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;wBACnD,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;oBAC3D,CAAC;oBACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;oBACnE,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;wBAC3E,CAAC,CAAE,MAAkC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC9D,IAAI,OAAO,MAAM,KAAK,QAAQ;wBAC1B,CAAC,eAAe,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAC3D,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;wBACvD,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;oBAC3D,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,KAAK,YAAY,kBAAkB;wBAAE,MAAM,KAAK,CAAC;oBACrD,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAC7F,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;gBACpC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;gBACrE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,GAAG,OAAO;gBAC7E,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC3C,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,mBAAmB,EAAE,GAAG,GAAG,OAAO;iBACjE,CAAC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC,CAAC;YACJ,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAClG,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,MAAe;YACjD,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,EAAE,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7F,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACzD,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1F,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,IAAuC;YACjE,IAAI,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACtE,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAClE,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBACtG,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,OAAO,UAAU,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC9E,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,OAAO;gBAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;YAC5F,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;gBACzC,IAAI,YAAY,CAAC,SAAS,IAAI,GAAG;oBAC7B,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,IAA+B,CAAC;oBAAE,SAAS;gBACnG,IAAI,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ;oBAC1E,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;oBAAE,SAAS;gBAC3E,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;oBACxC,EAAE,EAAE,GAAG,YAAY,CAAC,EAAE,IAAI,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,CAAC,EAAE;oBACpE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,GAAG;iBAC/C,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE;gBAAE,OAAO;YACnC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/E,KAAK,MAAM,QAAQ,IAAI,GAAG,EAAE,CAAC;gBAC3B,IAAI,CAAC,QAAQ,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBACpF,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;gBACrF,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;oBACrD,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI;wBAC/F,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC3E,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;gBAChD,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,WAAW,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;oBACtF,MAAM,YAAY,GAAG,YAAY,CAAC,cAAc,IAAI,YAAY,CAAC,mBAAmB;wBAClF,YAAY,CAAC,mBAAmB,GAAG,IAAI,CAAC,GAAG,EAAE;wBAC7C,CAAC,CAAC,IAAI,WAAW,CAAC,YAAY,CAAC,cAAc,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE;wBACzD,YAAY,EAAE,QAAQ,CAAC,OAAO;wBAC9B,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC;wBACtC,mBAAmB,EAAE,GAAG,SAAS,GAAG,YAAY,EAAE;wBAClD,uBAAuB,EAAE,YAAY,CAAC,EAAE;qBACzC,CAAC,CAAC;oBACH,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;gBAC1D,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;oBAChG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,CAAC;qBAAM,CAAC;oBACN,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,GAAG,CAAC;wBACzF,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,CAAC;gBAAC,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,IAAI,CAAC;YAAC,CAAC;YAC9D,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QACzB,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,WAAW,CAC/D,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACtF,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAChD,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/external-approval.d.ts

@@ -13,8 +13,8 @@ declare const recordSchema: z.ZodObject<{
     expiresAt: z.ZodNumber;
     state: z.ZodEnum<{
         pending: "pending";
-        approved: "approved";
         cancelled: "cancelled";
+        approved: "approved";
         consumed: "consumed";
     }>;
 }, z.core.$strict>;
@@ -58,7 +58,7 @@ export declare function createExternalApprovalBroker(options: ExternalApprovalOp
         formSchema: z.core.util.JSONType;
     }>;
     decide(token: string, principalId: string, decision: "approve" | "cancel"): Promise<{
-        readonly status: "approved" | "cancelled";
+        readonly status: "cancelled" | "approved";
     }>;
     consume(value: ExternalApprovalProposal): Promise<ExternalApprovalOutcome>;
 }>;