@fastybird/smart-panel-backend 1.0.0-beta.3 → 1.1.0-alpha.0

package/dist/modules/mcp/services/mcp-server.service.js

@@ -0,0 +1,513 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpServerService = void 0;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const node_1 = require("@modelcontextprotocol/node");
+const server_1 = require("@modelcontextprotocol/server");
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const logger_1 = require("../../../common/logger");
+const token_utils_1 = require("../../auth/utils/token.utils");
+const mcp_constants_1 = require("../mcp.constants");
+const mcp_audit_service_1 = require("./mcp-audit.service");
+const mcp_oauth_resource_server_service_1 = require("./mcp-oauth-resource-server.service");
+const mcp_subscription_registry_service_1 = require("./mcp-subscription-registry.service");
+const packageJson = JSON.parse((0, fs_1.readFileSync)((0, path_1.resolve)(__dirname, '../../../../package.json'), 'utf-8'));
+const MCP_SUBSCRIPTION_CONTEXT = Symbol('mcp-subscription-context');
+let McpServerService = class McpServerService {
+    constructor(subscriptions, auditService, oauthResourceServerService, moduleRef) {
+        this.subscriptions = subscriptions;
+        this.auditService = auditService;
+        this.oauthResourceServerService = oauthResourceServerService;
+        this.moduleRef = moduleRef;
+        this.logger = (0, logger_1.createExtensionLogger)(mcp_constants_1.MCP_MODULE_NAME, 'McpServerService');
+        this.handlers = new Map();
+        this.clientPolicyRevisions = new Map();
+        this.policyRevision = 0;
+    }
+    async handle(request, reply) {
+        const requestId = this.auditService.getRequestId(request.body);
+        if (!request.mcpPolicy) {
+            this.auditService.recordPolicyDenial({ requestId }, 'request_denied');
+            throw new common_1.UnauthorizedException('MCP request policy was not resolved');
+        }
+        const token = (0, token_utils_1.extractAccessTokenFromHeader)(request);
+        if (!token) {
+            this.auditService.recordAuthenticationFailure({ requestId, clientId: request.mcpPolicy.client.id }, 'authentication_required');
+            throw new common_1.UnauthorizedException('Authentication required');
+        }
+        const policy = request.mcpPolicy;
+        if (policy.policyRevision !== this.policyRevision ||
+            policy.clientPolicyRevision !== this.getClientPolicyRevision(policy.client.id)) {
+            this.auditService.recordPolicyDenial({ requestId, clientId: policy.client.id }, 'policy_changed');
+            throw new common_1.UnauthorizedException('MCP request policy is no longer current');
+        }
+        this.auditProtocolRequest(request.body, requestId, policy.client.id);
+        const clientHandler = this.getOrCreateHandler(policy.client.id);
+        const rawRequest = request.raw;
+        const endpoint = new URL(request.url, `${request.protocol}://${request.headers.host ?? 'localhost'}`);
+        const subscriptionContext = {};
+        rawRequest.auth = {
+            token,
+            clientId: policy.client.id,
+            scopes: [...policy.effectiveCapabilities],
+            expiresAt: policy.client.token?.expiresAt
+                ? Math.floor(policy.client.token.expiresAt.getTime() / 1000)
+                : undefined,
+            resource: endpoint,
+            extra: {
+                endpoint: endpoint.href,
+                installationId: policy.installationId,
+                clientName: policy.client.name,
+                tokenId: policy.tokenId,
+            },
+            [MCP_SUBSCRIPTION_CONTEXT]: subscriptionContext,
+        };
+        reply.hijack();
+        await this.handleNodeRequest(clientHandler, rawRequest, reply.raw, request.body, subscriptionContext);
+    }
+    async handleOAuth(request, reply, authInfo) {
+        const requestId = this.auditService.getRequestId(request.body);
+        this.auditProtocolRequest(request.body, requestId, authInfo.clientId);
+        const clientHandler = this.getOrCreateHandler(`oauth:${authInfo.clientId}`);
+        const rawRequest = request.raw;
+        const subscriptionContext = {};
+        rawRequest.auth = { ...authInfo, [MCP_SUBSCRIPTION_CONTEXT]: subscriptionContext };
+        reply.hijack();
+        await this.handleNodeRequest(clientHandler, rawRequest, reply.raw, request.body, subscriptionContext);
+    }
+    notifyToolsChanged(clientId) {
+        this.notify(clientId, (handler) => handler.notify.toolsChanged());
+    }
+    notifyResourcesChanged(clientId) {
+        this.notify(clientId, (handler) => handler.notify.resourcesChanged());
+    }
+    getPolicyRevision() {
+        return this.policyRevision;
+    }
+    getClientPolicyRevision(clientId) {
+        return this.clientPolicyRevisions.get(clientId) ?? 0;
+    }
+    invalidatePolicies() {
+        this.policyRevision += 1;
+    }
+    invalidateClientPolicy(clientId) {
+        this.clientPolicyRevisions.set(clientId, this.getClientPolicyRevision(clientId) + 1);
+    }
+    async closeClient(clientId) {
+        this.invalidateClientPolicy(clientId);
+        this.subscriptions.closeClient(clientId);
+        const clientHandler = this.handlers.get(clientId);
+        if (!clientHandler) {
+            return;
+        }
+        this.handlers.delete(clientId);
+        try {
+            await clientHandler.handler.close();
+        }
+        catch (error) {
+            const err = error instanceof Error ? error : new Error(String(error));
+            this.logger.error(`Failed to close MCP handler client=${clientId}`, {
+                message: err.message,
+                stack: err.stack,
+            });
+        }
+    }
+    async closeAll() {
+        this.invalidatePolicies();
+        await this.subscriptions.closeAll();
+        const handlers = [...this.handlers.values()];
+        this.handlers.clear();
+        const results = await Promise.allSettled(handlers.map(({ handler }) => handler.close()));
+        for (const result of results) {
+            if (result.status === 'rejected') {
+                const err = result.reason instanceof Error ? result.reason : new Error(String(result.reason));
+                this.logger.error('Failed to close an MCP handler during shutdown', {
+                    message: err.message,
+                    stack: err.stack,
+                });
+            }
+        }
+    }
+    async onApplicationShutdown() {
+        await this.closeAll();
+    }
+    getOrCreateHandler(clientId) {
+        const existing = this.handlers.get(clientId);
+        if (existing) {
+            return existing;
+        }
+        const handler = (0, server_1.createMcpHandler)(({ authInfo, requestInfo }) => {
+            const server = new server_1.McpServer({
+                name: 'fastybird-smart-panel',
+                version: packageJson.version,
+            }, {
+                capabilities: {
+                    resources: { listChanged: true },
+                    tools: { listChanged: true },
+                },
+                instructions: this.buildInstructions(authInfo, requestInfo),
+            });
+            this.moduleRef?.get(mcp_constants_1.MCP_CATALOG_REGISTRAR, { strict: false })?.register(server, authInfo);
+            return server;
+        }, {
+            legacy: 'stateless',
+            maxSubscriptions: mcp_constants_1.MCP_MAX_SUBSCRIPTIONS_PER_CLIENT,
+        });
+        const fetch = handler.fetch;
+        const wrappedHandler = {
+            fetch: async (...args) => {
+                const [webRequest, requestOptions] = args;
+                if (!this.isSubscriptionListen(requestOptions?.parsedBody)) {
+                    return fetch(webRequest, requestOptions);
+                }
+                let subscription;
+                let options = requestOptions;
+                try {
+                    const opened = await this.openSubscription(clientId, this.auditService.getRequestId(requestOptions?.parsedBody), requestOptions?.authInfo, this.getWireRequestId(requestOptions?.parsedBody));
+                    subscription = opened.handle;
+                    if (opened.authInfo !== requestOptions?.authInfo) {
+                        options = {
+                            ...requestOptions,
+                            authInfo: {
+                                ...opened.authInfo,
+                                [MCP_SUBSCRIPTION_CONTEXT]: requestOptions?.authInfo?.[MCP_SUBSCRIPTION_CONTEXT],
+                            },
+                        };
+                    }
+                    const context = options?.authInfo?.[MCP_SUBSCRIPTION_CONTEXT];
+                    if (context)
+                        context.subscription = subscription;
+                }
+                catch (error) {
+                    if (error instanceof mcp_subscription_registry_service_1.McpSubscriptionUnavailableError) {
+                        return this.getSubscriptionErrorResponse(error, requestOptions?.parsedBody);
+                    }
+                    if (server_1.OAuthError.isInstance(error))
+                        return this.getSubscriptionErrorResponse(error);
+                    throw error;
+                }
+                const signal = AbortSignal.any([webRequest.signal, subscription.signal]);
+                try {
+                    const response = await fetch(new Request(webRequest, { signal }), options);
+                    return this.trackSubscriptionResponse(response, subscription, webRequest.signal);
+                }
+                catch (error) {
+                    this.closeSubscriptionBeforeTransport(subscription, 'error');
+                    throw error;
+                }
+            },
+        };
+        const clientHandler = {
+            handler,
+            nodeHandler: (0, node_1.toNodeHandler)(wrappedHandler),
+        };
+        this.handlers.set(clientId, clientHandler);
+        return clientHandler;
+    }
+    buildInstructions(authInfo, requestInfo) {
+        const installationId = this.getStringExtra(authInfo?.extra?.installationId, 'unknown');
+        const clientName = this.getStringExtra(authInfo?.extra?.clientName, authInfo?.clientId ?? 'unknown');
+        const capabilities = authInfo?.scopes.join(', ') || 'none';
+        const endpoint = requestInfo?.url ?? 'the configured MCP endpoint';
+        return `Smart Panel installation ${installationId}. Client ${clientName}. Effective capabilities: ${capabilities}. Endpoint: ${endpoint}.`;
+    }
+    getStringExtra(value, fallback) {
+        return typeof value === 'string' ? value : fallback;
+    }
+    isSubscriptionListen(body) {
+        return this.getRequestBody(body).method === 'subscriptions/listen';
+    }
+    subscriptionUnavailableResponse(error, body) {
+        const request = this.getRequestBody(body);
+        return Response.json({
+            jsonrpc: '2.0',
+            id: request.id ?? null,
+            error: { code: -32603, message: error.message },
+        }, { status: 200 });
+    }
+    getSubscriptionErrorResponse(error, body) {
+        return error instanceof mcp_subscription_registry_service_1.McpSubscriptionUnavailableError
+            ? this.subscriptionUnavailableResponse(error, body)
+            : this.oauthResourceServerService.getBearerChallenge(error);
+    }
+    getRequestBody(body) {
+        return body && typeof body === 'object' && !Array.isArray(body) ? body : {};
+    }
+    getSubscriptionRegistration(clientId, authInfo) {
+        const value = authInfo?.extra?.principal;
+        if (value === undefined)
+            return { clientId };
+        if (!this.isOAuthPrincipal(value)) {
+            throw new common_1.UnauthorizedException('MCP OAuth subscription identity is unavailable');
+        }
+        return {
+            clientId: value.clientId,
+            oauth: {
+                accessTokenId: value.accessTokenId,
+                approverAuthorityGeneration: value.approverAuthorityGeneration,
+                approverId: value.approverId,
+                grantId: value.grantId,
+                ...(value.refreshFamilyId ? { refreshFamilyId: value.refreshFamilyId } : {}),
+                authorizationDeadline: new Date(value.authorizationDeadline),
+                effectiveScopes: [...value.effectiveScopes],
+                modulePolicyGeneration: value.modulePolicyGeneration,
+                oauthEnabledGeneration: value.oauthEnabledGeneration,
+                publicIdentityGeneration: value.publicIdentityGeneration,
+                serverSecretVersion: value.serverSecretVersion,
+                clientGeneration: value.clientGeneration,
+                grantGeneration: value.grantGeneration,
+            },
+        };
+    }
+    async openSubscription(clientId, requestId, authInfo, wireRequestId = requestId) {
+        const registration = this.getSubscriptionRegistration(clientId, authInfo);
+        if (!registration.oauth) {
+            return { authInfo, handle: this.subscriptions.open(registration.clientId, requestId, wireRequestId) };
+        }
+        if (!authInfo) {
+            throw new common_1.UnauthorizedException('MCP OAuth subscription identity is unavailable');
+        }
+        let currentAuthInfo;
+        const handle = await this.subscriptions.openOAuth(requestId, async () => {
+            currentAuthInfo = await this.oauthResourceServerService.verifyMcpBearerToken(`Bearer ${authInfo.token}`);
+            const current = this.getSubscriptionRegistration(clientId, currentAuthInfo);
+            if (!current.oauth) {
+                throw new common_1.UnauthorizedException('MCP OAuth subscription identity is unavailable');
+            }
+            return { clientId: current.clientId, binding: current.oauth };
+        }, wireRequestId, true);
+        if (!currentAuthInfo) {
+            throw new common_1.UnauthorizedException('MCP OAuth subscription revalidation did not complete');
+        }
+        return { authInfo: currentAuthInfo, handle };
+    }
+    isOAuthPrincipal(value) {
+        if (typeof value !== 'object' || value === null)
+            return false;
+        const principal = value;
+        const generations = [
+            principal.modulePolicyGeneration,
+            principal.oauthEnabledGeneration,
+            principal.publicIdentityGeneration,
+            principal.serverSecretVersion,
+            principal.clientGeneration,
+            principal.grantGeneration,
+            principal.approverAuthorityGeneration,
+        ];
+        return (principal.type === mcp_constants_1.MCP_OAUTH_PRINCIPAL_TYPE &&
+            this.isNonEmptyString(principal.accessTokenId) &&
+            this.isNonEmptyString(principal.approverId) &&
+            this.isNonEmptyString(principal.clientId) &&
+            this.isNonEmptyString(principal.grantId) &&
+            (principal.refreshFamilyId === undefined || this.isNonEmptyString(principal.refreshFamilyId)) &&
+            typeof principal.authorizationDeadline === 'number' &&
+            Number.isFinite(principal.authorizationDeadline) &&
+            principal.authorizationDeadline > 0 &&
+            Array.isArray(principal.effectiveScopes) &&
+            principal.effectiveScopes.every((scope) => Object.values(mcp_constants_1.McpOAuthScope).includes(scope)) &&
+            generations.every((generation) => Number.isInteger(generation) && (generation ?? -1) >= 0));
+    }
+    isNonEmptyString(value) {
+        return typeof value === 'string' && value.length > 0;
+    }
+    trackSubscriptionResponse(response, subscription, transportSignal) {
+        if (!response.body || !response.headers.get('content-type')?.includes('text/event-stream')) {
+            this.closeSubscriptionBeforeTransport(subscription, 'completed');
+            return response;
+        }
+        const reader = response.body.getReader();
+        let streamClosed = false;
+        let cancellationSent = false;
+        let abortStream = () => undefined;
+        let abortTransport = () => undefined;
+        const removeAbortListener = () => subscription.signal.removeEventListener('abort', abortStream);
+        const removeTransportAbortListener = () => transportSignal?.removeEventListener('abort', abortTransport);
+        const stream = new ReadableStream({
+            start: (controller) => {
+                abortTransport = () => {
+                    if (streamClosed)
+                        return;
+                    streamClosed = true;
+                    removeAbortListener();
+                    removeTransportAbortListener();
+                    try {
+                        controller.close();
+                    }
+                    catch {
+                    }
+                    finally {
+                        void reader.cancel(transportSignal?.reason).catch(() => undefined);
+                        subscription.close('cancelled');
+                        subscription.completeTransport();
+                    }
+                };
+                transportSignal?.addEventListener('abort', abortTransport, { once: true });
+                if (transportSignal?.aborted)
+                    abortTransport();
+                abortStream = () => {
+                    if (streamClosed || cancellationSent)
+                        return;
+                    streamClosed = true;
+                    cancellationSent = true;
+                    removeAbortListener();
+                    removeTransportAbortListener();
+                    try {
+                        controller.enqueue(this.subscriptionCancellationEvent(subscription.wireRequestId));
+                        controller.close();
+                    }
+                    catch {
+                    }
+                    finally {
+                        void reader.cancel(subscription.signal.reason).catch(() => undefined);
+                    }
+                };
+                subscription.signal.addEventListener('abort', abortStream, { once: true });
+                if (subscription.signal.aborted)
+                    abortStream();
+            },
+            pull: async (controller) => {
+                if (streamClosed || cancellationSent)
+                    return;
+                try {
+                    const result = await reader.read();
+                    if (streamClosed || cancellationSent)
+                        return;
+                    if (result.done) {
+                        streamClosed = true;
+                        removeAbortListener();
+                        removeTransportAbortListener();
+                        subscription.close('completed');
+                        controller.close();
+                        return;
+                    }
+                    subscription.touch();
+                    controller.enqueue(result.value);
+                }
+                catch (error) {
+                    if (streamClosed)
+                        return;
+                    streamClosed = true;
+                    removeAbortListener();
+                    removeTransportAbortListener();
+                    subscription.close('error');
+                    controller.error(error);
+                }
+            },
+            cancel: async (reason) => {
+                streamClosed = true;
+                removeAbortListener();
+                removeTransportAbortListener();
+                subscription.close('cancelled');
+                try {
+                    await reader.cancel(reason);
+                }
+                finally {
+                    subscription.completeTransport();
+                }
+            },
+        });
+        return new Response(stream, {
+            status: response.status,
+            statusText: response.statusText,
+            headers: response.headers,
+        });
+    }
+    closeSubscriptionBeforeTransport(subscription, reason) {
+        subscription.close(reason);
+        subscription.completeTransport();
+    }
+    subscriptionCancellationEvent(requestId) {
+        return new TextEncoder().encode(`event: message\ndata: ${JSON.stringify({
+            jsonrpc: '2.0',
+            method: 'notifications/cancelled',
+            params: { requestId },
+        })}\n\n`);
+    }
+    getWireRequestId(body) {
+        const id = this.getRequestBody(body).id;
+        return typeof id === 'number' || typeof id === 'string' ? id : this.auditService.getRequestId(body);
+    }
+    async handleNodeRequest(clientHandler, request, response, body, context) {
+        try {
+            await clientHandler.nodeHandler(request, response, body);
+        }
+        finally {
+            if (context.subscription) {
+                await this.waitForResponseCompletion(response);
+                await new Promise((resolve) => setTimeout(resolve, 0));
+                context.subscription.completeTransport();
+            }
+        }
+    }
+    async waitForResponseCompletion(response) {
+        if (response.writableFinished || response.destroyed)
+            return;
+        await new Promise((resolve) => {
+            const complete = () => {
+                response.off('close', complete);
+                response.off('finish', complete);
+                resolve();
+            };
+            response.once('close', complete);
+            response.once('finish', complete);
+            if (response.writableFinished || response.destroyed)
+                complete();
+        });
+    }
+    auditProtocolRequest(body, requestId, clientId) {
+        const request = this.getRequestBody(body);
+        if (request.method === 'initialize') {
+            const protocolVersion = this.getProtocolVersion(request.params?.protocolVersion);
+            this.auditService.recordProtocolRequest({ requestId, clientId }, {
+                kind: 'initialization',
+                method: request.method,
+                ...(protocolVersion ? { protocolVersion } : {}),
+            });
+            return;
+        }
+        if (['resources/list', 'resources/templates/list', 'tools/list'].includes(request.method ?? '')) {
+            this.auditService.recordProtocolRequest({ requestId, clientId }, { kind: 'discovery', method: request.method ?? 'unknown' });
+        }
+    }
+    getProtocolVersion(value) {
+        return typeof value === 'string' && /^\d{4}-\d{2}-\d{2}$/.test(value) ? value : undefined;
+    }
+    notify(clientId, callback) {
+        if (clientId) {
+            const clientHandler = this.handlers.get(clientId);
+            if (clientHandler) {
+                callback(clientHandler.handler);
+                this.subscriptions.touchClient(clientId);
+            }
+            return;
+        }
+        for (const [activeClientId, clientHandler] of this.handlers.entries()) {
+            callback(clientHandler.handler);
+            this.subscriptions.touchClient(activeClientId);
+        }
+    }
+};
+exports.McpServerService = McpServerService;
+exports.McpServerService = McpServerService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(3, (0, common_1.Optional)()),
+    __metadata("design:paramtypes", [mcp_subscription_registry_service_1.McpSubscriptionRegistryService,
+        mcp_audit_service_1.McpAuditService,
+        mcp_oauth_resource_server_service_1.McpOAuthResourceServerService,
+        core_1.ModuleRef])
+], McpServerService);
+//# sourceMappingURL=mcp-server.service.js.map

package/dist/modules/mcp/services/mcp-server.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.service.js","sourceRoot":"","sources":["../../../../src/modules/mcp/services/mcp-server.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AACA,2BAAkC;AAElC,+BAA+B;AAE/B,qDAA2D;AAC3D,yDAAiH;AACjH,2CAAoG;AACpG,uCAAyC;AAEzC,mDAA+D;AAC/D,8DAA4E;AAC5E,oDAM0B;AAG1B,2DAAsD;AACtD,2FAAoF;AAEpF,2FAK6C;AAE7C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAA,cAAO,EAAC,SAAS,EAAE,0BAA0B,CAAC,EAAE,OAAO,CAAC,CAEnG,CAAC;AAEF,MAAM,wBAAwB,GAAG,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAoC7D,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAM5B,YACkB,aAA6C,EAC7C,YAA6B,EAC7B,0BAAyD,EAC9D,SAAsC;QAHjC,kBAAa,GAAb,aAAa,CAAgC;QAC7C,iBAAY,GAAZ,YAAY,CAAiB;QAC7B,+BAA0B,GAA1B,0BAA0B,CAA+B;QAC7C,cAAS,GAAT,SAAS,CAAY;QATlC,WAAM,GAAG,IAAA,8BAAqB,EAAC,+BAAe,EAAE,kBAAkB,CAAC,CAAC;QACpE,aAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;QAC5C,0BAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3D,mBAAc,GAAG,CAAC,CAAC;IAOxB,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,OAAyB,EAAE,KAAmB;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAE/D,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,EAAE,gBAAgB,CAAC,CAAC;YACtE,MAAM,IAAI,8BAAqB,CAAC,qCAAqC,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,0CAA4B,EAAC,OAAO,CAAC,CAAC;QAEpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAC5C,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,EACpD,yBAAyB,CACzB,CAAC;YACF,MAAM,IAAI,8BAAqB,CAAC,yBAAyB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;QAEjC,IACC,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc;YAC7C,MAAM,CAAC,oBAAoB,KAAK,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAC7E,CAAC;YACF,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,gBAAgB,CAAC,CAAC;YAClG,MAAM,IAAI,8BAAqB,CAAC,yCAAyC,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAErE,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAmC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QAEtG,MAAM,mBAAmB,GAAkC,EAAE,CAAC;QAC9D,UAAU,CAAC,IAAI,GAAG;YACjB,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;YAC1B,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,qBAAqB,CAAC;YACzC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS;gBACxC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;gBAC5D,CAAC,CAAC,SAAS;YACZ,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE;gBACN,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;gBAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;aACvB;YACD,CAAC,wBAAwB,CAAC,EAAE,mBAAmB;SACzB,CAAC;QAExB,KAAK,CAAC,MAAM,EAAE,CAAC;QAEf,MAAM,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IACvG,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB,EAAE,KAAmB,EAAE,QAAkB;QACnF,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtE,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,GAAmC,CAAC;QAE/D,MAAM,mBAAmB,GAAkC,EAAE,CAAC;QAC9D,UAAU,CAAC,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC,wBAAwB,CAAC,EAAE,mBAAmB,EAAwB,CAAC;QACzG,KAAK,CAAC,MAAM,EAAE,CAAC;QAEf,MAAM,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IACvG,CAAC;IAED,kBAAkB,CAAC,QAAiB;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,sBAAsB,CAAC,QAAiB;QACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,iBAAiB;QAChB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC5B,CAAC;IAED,uBAAuB,CAAC,QAAgB;QACvC,OAAO,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,kBAAkB;QACjB,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,sBAAsB,CAAC,QAAgB;QACtC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAgB;QACjC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAElD,IAAI,CAAC,aAAa,EAAE,CAAC;YACpB,OAAO;QACR,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE/B,IAAI,CAAC;YACJ,MAAM,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,QAAQ,EAAE,EAAE;gBACnE,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,KAAK,EAAE,GAAG,CAAC,KAAK;aAChB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,KAAK,CAAC,QAAQ;QACb,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAEzF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC9F,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE;oBACnE,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,KAAK,EAAE,GAAG,CAAC,KAAK;iBAChB,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IAED,KAAK,CAAC,qBAAqB;QAC1B,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACvB,CAAC;IAEO,kBAAkB,CAAC,QAAgB;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE7C,IAAI,QAAQ,EAAE,CAAC;YACd,OAAO,QAAQ,CAAC;QACjB,CAAC;QAED,MAAM,OAAO,GAAG,IAAA,yBAAgB,EAC/B,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,IAAI,kBAAS,CAC3B;gBACC,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,WAAW,CAAC,OAAO;aAC5B,EACD;gBACC,YAAY,EAAE;oBACb,SAAS,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;oBAChC,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;iBAC5B;gBACD,YAAY,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC;aAC3D,CACD,CAAC;YAEF,IAAI,CAAC,SAAS,EAAE,GAAG,CAAsB,qCAAqB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAE/G,OAAO,MAAM,CAAC;QACf,CAAC,EACD;YACC,MAAM,EAAE,WAAW;YACnB,gBAAgB,EAAE,gDAAgC;SAClD,CACD,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,MAAM,cAAc,GAAG;YACtB,KAAK,EAAE,KAAK,EAAE,GAAG,IAAyC,EAAqB,EAAE;gBAChF,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,GAAG,IAAI,CAAC;gBAE1C,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,cAAc,EAAE,UAAU,CAAC,EAAE,CAAC;oBAC5D,OAAO,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;gBAC1C,CAAC;gBAED,IAAI,YAAmC,CAAC;gBACxC,IAAI,OAAO,GAAG,cAAc,CAAC;gBAE7B,IAAI,CAAC;oBACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CACzC,QAAQ,EACR,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,cAAc,EAAE,UAAU,CAAC,EAC1D,cAAc,EAAE,QAAQ,EACxB,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,UAAU,CAAC,CACjD,CAAC;oBAEF,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;oBAC7B,IAAI,MAAM,CAAC,QAAQ,KAAK,cAAc,EAAE,QAAQ,EAAE,CAAC;wBAClD,OAAO,GAAG;4BACT,GAAG,cAAc;4BACjB,QAAQ,EAAE;gCACT,GAAG,MAAM,CAAC,QAAQ;gCAClB,CAAC,wBAAwB,CAAC,EAAG,cAAc,EAAE,QAA2C,EAAE,CACzF,wBAAwB,CACxB;6BACqB;yBACvB,CAAC;oBACH,CAAC;oBACD,MAAM,OAAO,GAAI,OAAO,EAAE,QAA2C,EAAE,CAAC,wBAAwB,CAAC,CAAC;oBAClG,IAAI,OAAO;wBAAE,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC;gBAClD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IAAI,KAAK,YAAY,mEAA+B,EAAE,CAAC;wBACtD,OAAO,IAAI,CAAC,4BAA4B,CAAC,KAAK,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;oBAC7E,CAAC;oBACD,IAAI,mBAAU,CAAC,UAAU,CAAC,KAAK,CAAC;wBAAE,OAAO,IAAI,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC;oBAElF,MAAM,KAAK,CAAC;gBACb,CAAC;gBAED,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;gBAEzE,IAAI,CAAC;oBACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;oBAE3E,OAAO,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;gBAClF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IAAI,CAAC,gCAAgC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;oBAC7D,MAAM,KAAK,CAAC;gBACb,CAAC;YACF,CAAC;SACD,CAAC;QACF,MAAM,aAAa,GAAG;YACrB,OAAO;YACP,WAAW,EAAE,IAAA,oBAAa,EAAC,cAAc,CAAC;SAC1C,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAE3C,OAAO,aAAa,CAAC;IACtB,CAAC;IAEO,iBAAiB,CAAC,QAAmB,EAAE,WAAqB;QACnE,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;QACvF,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,IAAI,SAAS,CAAC,CAAC;QACrG,MAAM,YAAY,GAAG,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;QAC3D,MAAM,QAAQ,GAAG,WAAW,EAAE,GAAG,IAAI,6BAA6B,CAAC;QAEnE,OAAO,4BAA4B,cAAc,YAAY,UAAU,6BAA6B,YAAY,eAAe,QAAQ,GAAG,CAAC;IAC5I,CAAC;IAEO,cAAc,CAAC,KAAc,EAAE,QAAgB;QACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrD,CAAC;IAEO,oBAAoB,CAAC,IAAa;QACzC,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,sBAAsB,CAAC;IACpE,CAAC;IAEO,+BAA+B,CAAC,KAAsC,EAAE,IAAa;QAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAE1C,OAAO,QAAQ,CAAC,IAAI,CACnB;YACC,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI;YACtB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;SAC/C,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CACf,CAAC;IACH,CAAC;IAEO,4BAA4B,CAAC,KAAmD,EAAE,IAAc;QACvG,OAAO,KAAK,YAAY,mEAA+B;YACtD,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,KAAK,EAAE,IAAI,CAAC;YACnD,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAEO,cAAc,CAAC,IAAa;QACnC,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;IACrG,CAAC;IAEO,2BAA2B,CAAC,QAAgB,EAAE,QAAmB;QACxE,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC;QAEzC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,8BAAqB,CAAC,gDAAgD,CAAC,CAAC;QACnF,CAAC;QAED,OAAO;YACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE;gBACN,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;gBAC9D,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,qBAAqB,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC;gBAC5D,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC;gBAC3C,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;gBACpD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;gBACpD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;gBACxD,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,eAAe,EAAE,KAAK,CAAC,eAAe;aACtC;SACD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC7B,QAAgB,EAChB,SAAiB,EACjB,QAAmB,EACnB,gBAAiC,SAAS;QAE1C,MAAM,YAAY,GAAG,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE1E,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;QACvG,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,8BAAqB,CAAC,gDAAgD,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,eAAqC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAChD,SAAS,EACT,KAAK,IAAI,EAAE;YACV,eAAe,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,oBAAoB,CAAC,UAAU,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YACzG,MAAM,OAAO,GAAG,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAE5E,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,IAAI,8BAAqB,CAAC,gDAAgD,CAAC,CAAC;YACnF,CAAC;YAED,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC/D,CAAC,EACD,aAAa,EACb,IAAI,CACJ,CAAC;QAEF,IAAI,CAAC,eAAe,EAAE,CAAC;YACtB,MAAM,IAAI,8BAAqB,CAAC,sDAAsD,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;IAC9C,CAAC;IAEO,gBAAgB,CAAC,KAAc;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAE9D,MAAM,SAAS,GAAG,KAAmC,CAAC;QACtD,MAAM,WAAW,GAAG;YACnB,SAAS,CAAC,sBAAsB;YAChC,SAAS,CAAC,sBAAsB;YAChC,SAAS,CAAC,wBAAwB;YAClC,SAAS,CAAC,mBAAmB;YAC7B,SAAS,CAAC,gBAAgB;YAC1B,SAAS,CAAC,eAAe;YACzB,SAAS,CAAC,2BAA2B;SACrC,CAAC;QAEF,OAAO,CACN,SAAS,CAAC,IAAI,KAAK,wCAAwB;YAC3C,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,aAAa,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC;YAC3C,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC;YACzC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC;YACxC,CAAC,SAAS,CAAC,eAAe,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAC7F,OAAO,SAAS,CAAC,qBAAqB,KAAK,QAAQ;YACnD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,qBAAqB,CAAC;YAChD,SAAS,CAAC,qBAAqB,GAAG,CAAC;YACnC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC;YACxC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,6BAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACxF,WAAW,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAC1F,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,KAAc;QACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACtD,CAAC;IAEO,yBAAyB,CAChC,QAAkB,EAClB,YAAmC,EACnC,eAA6B;QAE7B,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC5F,IAAI,CAAC,gCAAgC,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YACjE,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAC7B,IAAI,WAAW,GAAG,GAAS,EAAE,CAAC,SAAS,CAAC;QACxC,IAAI,cAAc,GAAG,GAAS,EAAE,CAAC,SAAS,CAAC;QAC3C,MAAM,mBAAmB,GAAG,GAAS,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACtG,MAAM,4BAA4B,GAAG,GAAS,EAAE,CAAC,eAAe,EAAE,mBAAmB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC/G,MAAM,MAAM,GAAG,IAAI,cAAc,CAAa;YAC7C,KAAK,EAAE,CAAC,UAAU,EAAE,EAAE;gBACrB,cAAc,GAAG,GAAS,EAAE;oBAC3B,IAAI,YAAY;wBAAE,OAAO;oBAEzB,YAAY,GAAG,IAAI,CAAC;oBACpB,mBAAmB,EAAE,CAAC;oBACtB,4BAA4B,EAAE,CAAC;oBAC/B,IAAI,CAAC;wBACJ,UAAU,CAAC,KAAK,EAAE,CAAC;oBACpB,CAAC;oBAAC,MAAM,CAAC;oBAET,CAAC;4BAAS,CAAC;wBACV,KAAK,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;wBACnE,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;wBAChC,YAAY,CAAC,iBAAiB,EAAE,CAAC;oBAClC,CAAC;gBACF,CAAC,CAAC;gBACF,eAAe,EAAE,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3E,IAAI,eAAe,EAAE,OAAO;oBAAE,cAAc,EAAE,CAAC;gBAE/C,WAAW,GAAG,GAAS,EAAE;oBACxB,IAAI,YAAY,IAAI,gBAAgB;wBAAE,OAAO;oBAE7C,YAAY,GAAG,IAAI,CAAC;oBACpB,gBAAgB,GAAG,IAAI,CAAC;oBACxB,mBAAmB,EAAE,CAAC;oBACtB,4BAA4B,EAAE,CAAC;oBAC/B,IAAI,CAAC;wBACJ,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC;wBACnF,UAAU,CAAC,KAAK,EAAE,CAAC;oBACpB,CAAC;oBAAC,MAAM,CAAC;oBAET,CAAC;4BAAS,CAAC;wBACV,KAAK,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACvE,CAAC;gBACF,CAAC,CAAC;gBACF,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3E,IAAI,YAAY,CAAC,MAAM,CAAC,OAAO;oBAAE,WAAW,EAAE,CAAC;YAChD,CAAC;YACD,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;gBAC1B,IAAI,YAAY,IAAI,gBAAgB;oBAAE,OAAO;gBAE7C,IAAI,CAAC;oBACJ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBACnC,IAAI,YAAY,IAAI,gBAAgB;wBAAE,OAAO;oBAE7C,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;wBACjB,YAAY,GAAG,IAAI,CAAC;wBACpB,mBAAmB,EAAE,CAAC;wBACtB,4BAA4B,EAAE,CAAC;wBAC/B,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;wBAChC,UAAU,CAAC,KAAK,EAAE,CAAC;wBACnB,OAAO;oBACR,CAAC;oBAED,YAAY,CAAC,KAAK,EAAE,CAAC;oBACrB,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAClC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IAAI,YAAY;wBAAE,OAAO;oBAEzB,YAAY,GAAG,IAAI,CAAC;oBACpB,mBAAmB,EAAE,CAAC;oBACtB,4BAA4B,EAAE,CAAC;oBAC/B,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC5B,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACzB,CAAC;YACF,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACxB,YAAY,GAAG,IAAI,CAAC;gBACpB,mBAAmB,EAAE,CAAC;gBACtB,4BAA4B,EAAE,CAAC;gBAC/B,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAChC,IAAI,CAAC;oBACJ,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC7B,CAAC;wBAAS,CAAC;oBACV,YAAY,CAAC,iBAAiB,EAAE,CAAC;gBAClC,CAAC;YACF,CAAC;SACD,CAAC,CAAC;QAEH,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;YAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;SACzB,CAAC,CAAC;IACJ,CAAC;IAEO,gCAAgC,CAAC,YAAmC,EAAE,MAA6B;QAC1G,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,YAAY,CAAC,iBAAiB,EAAE,CAAC;IAClC,CAAC;IAEO,6BAA6B,CAAC,SAA0B;QAC/D,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAC9B,yBAAyB,IAAI,CAAC,SAAS,CAAC;YACvC,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,yBAAyB;YACjC,MAAM,EAAE,EAAE,SAAS,EAAE;SACrB,CAAC,MAAM,CACR,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,IAAa;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAExC,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACrG,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC9B,aAA4B,EAC5B,OAAqC,EACrC,QAAwB,EACxB,IAAa,EACb,OAAsC;QAEtC,IAAI,CAAC;YACJ,MAAM,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1D,CAAC;gBAAS,CAAC;YACV,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;gBAC/C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC7D,OAAO,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;YAC1C,CAAC;QACF,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,QAAwB;QAC/D,IAAI,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,SAAS;YAAE,OAAO;QAE5D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,MAAM,QAAQ,GAAG,GAAS,EAAE;gBAC3B,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAChC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACjC,OAAO,EAAE,CAAC;YACX,CAAC,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAClC,IAAI,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,SAAS;gBAAE,QAAQ,EAAE,CAAC;QACjE,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAAC,IAAa,EAAE,SAAiB,EAAE,QAAgB;QAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAE1C,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACrC,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YAEjF,IAAI,CAAC,YAAY,CAAC,qBAAqB,CACtC,EAAE,SAAS,EAAE,QAAQ,EAAE,EACvB;gBACC,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/C,CACD,CAAC;YAEF,OAAO;QACR,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,0BAA0B,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;YACjG,IAAI,CAAC,YAAY,CAAC,qBAAqB,CACtC,EAAE,SAAS,EAAE,QAAQ,EAAE,EACvB,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,SAAS,EAAE,CAC1D,CAAC;QACH,CAAC;IACF,CAAC;IAEO,kBAAkB,CAAC,KAAc;QACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,CAAC;IAEO,MAAM,CAAC,QAA4B,EAAE,QAA2C;QACvF,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAElD,IAAI,aAAa,EAAE,CAAC;gBACnB,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBAChC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC1C,CAAC;YAED,OAAO;QACR,CAAC;QAED,KAAK,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACvE,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAChD,CAAC;IACF,CAAC;CACD,CAAA;AAllBY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;IAWV,WAAA,IAAA,iBAAQ,GAAE,CAAA;qCAHqB,kEAA8B;QAC/B,mCAAe;QACD,iEAA6B;QACjC,gBAAS;GAVvC,gBAAgB,CAklB5B"}

package/dist/modules/mcp/services/mcp-subscription-registry.service.d.ts

@@ -0,0 +1,76 @@
+import { OnApplicationShutdown } from '@nestjs/common';
+import { McpOAuthScope } from '../mcp.constants';
+import { McpAuditService, McpSubscriptionCloseReason } from './mcp-audit.service';
+export declare class McpSubscriptionUnavailableError extends Error {
+}
+export declare class McpSubscriptionCapacityError extends McpSubscriptionUnavailableError {
+    constructor();
+}
+export declare class McpSubscriptionClosingError extends McpSubscriptionUnavailableError {
+    constructor();
+}
+export interface McpSubscriptionHandle {
+    id: string;
+    clientId: string;
+    wireRequestId: number | string;
+    signal: AbortSignal;
+    attachTransport: () => void;
+    close: (reason?: McpSubscriptionCloseReason) => void;
+    completeTransport: () => void;
+    touch: () => void;
+}
+export interface McpOAuthSubscriptionBinding {
+    accessTokenId: string;
+    approverAuthorityGeneration: number;
+    approverId: string;
+    grantId: string;
+    refreshFamilyId?: string;
+    authorizationDeadline: Date;
+    effectiveScopes: McpOAuthScope[];
+    modulePolicyGeneration: number;
+    oauthEnabledGeneration: number;
+    publicIdentityGeneration: number;
+    serverSecretVersion: number;
+    clientGeneration: number;
+    grantGeneration: number;
+}
+export interface McpOAuthSubscriptionRegistration {
+    clientId: string;
+    binding: McpOAuthSubscriptionBinding;
+}
+export type McpOAuthGenerationAdvance = () => Promise<void>;
+export declare class McpSubscriptionRegistryService implements OnApplicationShutdown {
+    private readonly auditService;
+    private readonly subscriptions;
+    private oauthGateTail;
+    private closeAllOperations;
+    constructor(auditService: McpAuditService);
+    open(clientId: string, requestId?: string, wireRequestId?: number | string): McpSubscriptionHandle;
+    openOAuth(requestId: string, revalidate: () => Promise<McpOAuthSubscriptionRegistration>, wireRequestId?: number | string, trackTransportClosure?: boolean): Promise<McpSubscriptionHandle>;
+    private openRecord;
+    get activeCount(): number;
+    countForClient(clientId: string): number;
+    touchClient(clientId: string): void;
+    closeClient(clientId: string): void;
+    closeOAuthClient(clientId: string, advanceGeneration: McpOAuthGenerationAdvance): Promise<void>;
+    closeOAuthGrant(grantId: string, advanceGeneration: McpOAuthGenerationAdvance): Promise<void>;
+    closeOAuthApprover(approverId: string, advanceGeneration: McpOAuthGenerationAdvance): Promise<void>;
+    runOAuthMutation<T>(operation: () => Promise<T>): Promise<T>;
+    closeOAuthGrantScopeContractions(grantId: string, allowedScopes: McpOAuthScope[], advanceGeneration: McpOAuthGenerationAdvance): Promise<void>;
+    closeOAuthAccessToken(accessTokenId: string, advanceGeneration: McpOAuthGenerationAdvance): Promise<void>;
+    closeOAuthRefreshFamily(refreshFamilyId: string, advanceGeneration: McpOAuthGenerationAdvance): Promise<void>;
+    closeAllOAuth(advanceGeneration: McpOAuthGenerationAdvance): Promise<void>;
+    closeOAuthScopeContractions(allowedScopes: McpOAuthScope[], advanceGeneration: McpOAuthGenerationAdvance): Promise<void>;
+    closeAll(advanceGeneration?: McpOAuthGenerationAdvance): Promise<void>;
+    onApplicationShutdown(): Promise<void>;
+    private touch;
+    private close;
+    private attachTransport;
+    private completeTransport;
+    private createIdleTimer;
+    private createAuthorizationTimer;
+    private closeMatching;
+    private waitForTransportClosure;
+    private closeOAuthMatching;
+    private withOAuthGate;
+}