@felan-ai/felan 0.7.0 → 0.9.0

package/dist/mcp/oauth-host.js

@@ -0,0 +1,510 @@
+import { randomBytes } from 'node:crypto';
+import { auth, } from '@modelcontextprotocol/client';
+import { reserveOAuthCallback, } from './callback-server.js';
+import { KeyringMcpOAuthSecretStore, McpOAuthCredentialRepository, } from './oauth-store.js';
+const DEFAULT_REDIRECT_URI = 'http://127.0.0.1:3118/callback';
+const DEFAULT_CLIENT_NAME = 'Felan';
+const DEFAULT_CLIENT_URI = 'https://github.com/felan-ai/felan';
+const DEFAULT_OAUTH_REQUEST_TIMEOUT_MS = 30_000;
+export function createLocalMcpOAuthHost(namespace, configs, dependencies = {}) {
+    const repository = new McpOAuthCredentialRepository(namespace, dependencies.secretStore ?? new KeyringMcpOAuthSecretStore());
+    return {
+        async createSession(context) {
+            return new LocalMcpOAuthSession(context, configs, repository, dependencies);
+        },
+    };
+}
+class LocalMcpOAuthSession {
+    #context;
+    #configs;
+    #repository;
+    #dependencies;
+    #controller = new AbortController();
+    #providers = new Map();
+    #authentications = new Map();
+    #closed = false;
+    constructor(context, configs, repository, dependencies) {
+        this.#context = context;
+        this.#configs = configs;
+        this.#repository = repository;
+        this.#dependencies = dependencies;
+    }
+    async providerFor(server, signal) {
+        this.#assertOpen();
+        combineSignals(this.#context.signal, this.#controller.signal, signal).throwIfAborted();
+        let provider = this.#providers.get(server.name);
+        if (!provider) {
+            provider = new LocalOAuthProvider(server, this.#configs[server.name] ?? {}, this.#repository, combineSignals(this.#context.signal, this.#controller.signal), this.#dependencies.fetchFn);
+            this.#providers.set(server.name, provider);
+        }
+        else if (provider.server.url !== server.url) {
+            throw new Error(`MCP server URL changed during the OAuth session: ${server.name}`);
+        }
+        return provider;
+    }
+    async authenticate(server, context) {
+        this.#assertOpen();
+        if (!context.extensionContext.hasUI || context.extensionContext.mode !== 'tui') {
+            return {
+                status: 'unavailable',
+                message: `OAuth authentication for ${server.name} requires the local Felan TUI. Authenticate from a root TUI session and retry.`,
+            };
+        }
+        const existing = this.#authentications.get(server.name);
+        if (existing)
+            return existing.promise;
+        const controller = new AbortController();
+        const operation = this.#authenticateInteractive(server, {
+            ...context,
+            signal: combineSignals(context.signal, controller.signal),
+        }).finally(() => {
+            if (this.#authentications.get(server.name)?.promise === operation) {
+                this.#authentications.delete(server.name);
+            }
+        });
+        this.#authentications.set(server.name, { controller, promise: operation });
+        return operation;
+    }
+    async logout(server, signal) {
+        this.#assertOpen();
+        const combined = combineSignals(this.#context.signal, this.#controller.signal, signal);
+        const active = this.#authentications.get(server.name);
+        if (active) {
+            active.controller.abort(new Error(`OAuth authentication for ${server.name} was cancelled by logout`));
+            await active.promise.catch(() => { });
+        }
+        combined.throwIfAborted();
+        await this.#repository.remove(server, combined);
+        this.#providers.get(server.name)?.clearTransientFlow();
+    }
+    async close() {
+        if (this.#closed)
+            return;
+        this.#closed = true;
+        this.#controller.abort(new Error('Local MCP OAuth session closed'));
+        await Promise.allSettled([...this.#authentications.values()].map(({ promise }) => promise));
+        for (const provider of this.#providers.values())
+            provider.deactivate();
+        this.#providers.clear();
+    }
+    async #authenticateInteractive(server, context) {
+        const signal = combineSignals(this.#context.signal, this.#controller.signal, context.signal);
+        const provider = await this.providerFor(server, signal);
+        provider.beginFlow(signal);
+        let callback;
+        try {
+            callback = await (this.#dependencies.reserveCallback ?? reserveOAuthCallback)(provider.redirectUrl.toString(), provider.currentState, signal, this.#dependencies.callbackTimeoutMs);
+            const runOAuth = this.#dependencies.runOAuth ?? auth;
+            const initial = await runOAuth(provider, provider.authOptions());
+            signal.throwIfAborted();
+            if (initial === 'AUTHORIZED')
+                return { status: 'authenticated' };
+            const authorizationUrl = provider.authorizationUrl;
+            if (!authorizationUrl)
+                throw new Error('OAuth provider did not supply an authorization URL');
+            context.extensionContext.ui.notify?.(`Opening OAuth authorization for ${server.name} in your browser`, 'info');
+            await (this.#dependencies.openUrl ?? openInBrowser)(authorizationUrl);
+            const result = await callback.wait();
+            signal.throwIfAborted();
+            const completed = await runOAuth(provider, provider.authOptions({
+                authorizationCode: result.code,
+                ...(result.iss === undefined ? {} : { iss: result.iss }),
+            }));
+            if (completed !== 'AUTHORIZED')
+                throw new Error('OAuth token exchange did not complete');
+            return { status: 'authenticated' };
+        }
+        catch (error) {
+            if (signal.aborted) {
+                return { status: 'cancelled', message: `OAuth authentication for ${server.name} was cancelled.` };
+            }
+            if (error instanceof Error && /denied|cancelled/iu.test(error.message)) {
+                return { status: 'cancelled', message: `OAuth authentication for ${server.name} was cancelled.` };
+            }
+            throw error;
+        }
+        finally {
+            callback?.release();
+            provider.clearTransientFlow();
+        }
+    }
+    #assertOpen() {
+        if (this.#closed)
+            throw new Error('Local MCP OAuth session is closed');
+    }
+}
+export class LocalOAuthProvider {
+    server;
+    #config;
+    #repository;
+    #signal;
+    #redirectUrl;
+    #oauthProfile;
+    #fetchFn;
+    #active = true;
+    #state = generateState();
+    #codeVerifier;
+    #authorizationUrl;
+    #discoveryState;
+    #flowSignal;
+    #activeClientId;
+    constructor(server, config, repository, signal, fetchFn = fetch) {
+        this.server = server;
+        this.#config = config;
+        this.#repository = repository;
+        this.#signal = signal;
+        this.#redirectUrl = validateRedirectUrl(config.redirectUri ?? DEFAULT_REDIRECT_URI);
+        this.#oauthProfile = oauthProfile(config, this.#redirectUrl);
+        this.#fetchFn = fetchFn;
+    }
+    get redirectUrl() {
+        return new URL(this.#redirectUrl);
+    }
+    get clientMetadata() {
+        return {
+            redirect_uris: [this.#redirectUrl.toString()],
+            client_name: this.#config.clientName ?? DEFAULT_CLIENT_NAME,
+            client_uri: this.#config.clientUri ?? DEFAULT_CLIENT_URI,
+            grant_types: ['authorization_code', 'refresh_token'],
+            response_types: ['code'],
+            token_endpoint_auth_method: this.#hasClientSecret ? 'client_secret_post' : 'none',
+            ...(this.#config.scope === undefined ? {} : { scope: this.#config.scope }),
+        };
+    }
+    get currentState() {
+        return this.#state;
+    }
+    get authorizationUrl() {
+        return this.#authorizationUrl;
+    }
+    state() {
+        this.#assertActive();
+        return this.#state;
+    }
+    async clientInformation(context) {
+        this.#assertActive();
+        if (this.#config.clientId) {
+            const information = {
+                client_id: this.#config.clientId,
+                ...(this.#clientSecret === undefined ? {} : { client_secret: this.#clientSecret }),
+                ...(context?.issuer === undefined ? {} : { issuer: context.issuer }),
+            };
+            await this.#repository.update(this.server, (current) => ({
+                version: 1,
+                serverUrl: this.server.url,
+                oauthProfile: this.#oauthProfile,
+                clientInformation: {
+                    client_id: information.client_id,
+                    ...(information.issuer === undefined ? {} : { issuer: information.issuer }),
+                },
+                ...(canReuseConfiguredTokens(current, information.client_id, context?.issuer, this.#oauthProfile)
+                    ? { tokens: current.tokens }
+                    : {}),
+            }), this.#signal);
+            this.#activeClientId = information.client_id;
+            return information;
+        }
+        const stored = await this.#repository.read(this.server, this.#signal);
+        if (stored?.oauthProfile !== this.#oauthProfile) {
+            this.#activeClientId = undefined;
+            return undefined;
+        }
+        assertIssuer(stored?.clientInformation?.issuer, context?.issuer, this.server.name);
+        if (stored?.clientInformation && !hasCurrentRedirectUri(stored.clientInformation, this.#redirectUrl)) {
+            await this.#repository.remove(this.server, this.#signal);
+            this.#activeClientId = undefined;
+            return undefined;
+        }
+        this.#activeClientId = stored?.clientInformation?.client_id;
+        return stored?.clientInformation;
+    }
+    async saveClientInformation(information, context) {
+        this.#assertActive();
+        assertIssuer(information.issuer, context?.issuer, this.server.name);
+        const storedInformation = this.#config.clientId
+            ? {
+                client_id: this.#config.clientId,
+                ...(information.issuer === undefined ? {} : { issuer: information.issuer }),
+            }
+            : 'redirect_uris' in information && Array.isArray(information.redirect_uris)
+                ? information
+                : { ...information, redirect_uris: [this.#redirectUrl.toString()] };
+        if (!this.#config.clientId && !hasCurrentRedirectUri(storedInformation, this.#redirectUrl)) {
+            throw new Error(`OAuth dynamic client registration returned a mismatched redirect URI for ${this.server.name}`);
+        }
+        await this.#repository.update(this.server, (current) => ({
+            version: 1,
+            serverUrl: this.server.url,
+            oauthProfile: this.#oauthProfile,
+            ...(canReuseClientTokens(current, storedInformation, this.#oauthProfile)
+                ? { tokens: current.tokens }
+                : {}),
+            clientInformation: storedInformation,
+        }), this.#signal);
+        this.#activeClientId = storedInformation.client_id;
+    }
+    async tokens(context) {
+        this.#assertActive();
+        const stored = await this.#repository.read(this.server, this.#signal);
+        if (stored?.oauthProfile !== this.#oauthProfile) {
+            this.#activeClientId = undefined;
+            return undefined;
+        }
+        assertIssuer(stored?.tokens?.issuer, context?.issuer, this.server.name);
+        assertIssuer(stored?.clientInformation?.issuer, context?.issuer, this.server.name);
+        if (!stored?.tokens)
+            return undefined;
+        if (this.#config.clientId) {
+            if (stored.clientInformation?.client_id !== this.#config.clientId)
+                return undefined;
+            this.#activeClientId = this.#config.clientId;
+            return stored.tokens;
+        }
+        if (!stored.clientInformation || !hasCurrentRedirectUri(stored.clientInformation, this.#redirectUrl)) {
+            return undefined;
+        }
+        this.#activeClientId = stored.clientInformation.client_id;
+        return stored.tokens;
+    }
+    async saveTokens(tokens, context) {
+        this.#assertActive();
+        assertIssuer(tokens.issuer, context?.issuer, this.server.name);
+        await this.#repository.update(this.server, (current) => {
+            const expectedClientId = this.#config.clientId ?? this.#activeClientId;
+            if (expectedClientId === undefined
+                || current?.oauthProfile !== this.#oauthProfile
+                || current.clientInformation?.client_id !== expectedClientId) {
+                throw new Error(`OAuth client configuration changed concurrently for ${this.server.name}; retry authentication`);
+            }
+            return {
+                version: 1,
+                serverUrl: this.server.url,
+                oauthProfile: this.#oauthProfile,
+                ...(this.#config.clientId
+                    ? {
+                        clientInformation: {
+                            client_id: this.#config.clientId,
+                            ...(tokens.issuer === undefined ? {} : { issuer: tokens.issuer }),
+                        },
+                    }
+                    : { clientInformation: current.clientInformation }),
+                tokens,
+            };
+        }, this.#signal);
+    }
+    redirectToAuthorization(url) {
+        this.#assertActive();
+        const authorizationUrl = validateAuthorizationUrl(url);
+        for (const [key, value] of Object.entries(this.#config.authorizationParams ?? {})) {
+            if (authorizationUrl.searchParams.has(key)) {
+                throw new Error(`OAuth authorization parameter ${key} is already set by the authorization server`);
+            }
+            authorizationUrl.searchParams.set(key, value);
+        }
+        this.#authorizationUrl = authorizationUrl.toString();
+    }
+    saveCodeVerifier(codeVerifier) {
+        this.#assertActive();
+        this.#codeVerifier = codeVerifier;
+    }
+    codeVerifier() {
+        this.#assertActive();
+        if (!this.#codeVerifier)
+            throw new Error('OAuth PKCE code verifier is unavailable');
+        return this.#codeVerifier;
+    }
+    saveDiscoveryState(state) {
+        this.#assertActive();
+        this.#discoveryState = structuredClone(state);
+    }
+    discoveryState() {
+        this.#assertActive();
+        return this.#discoveryState === undefined
+            ? undefined
+            : structuredClone(this.#discoveryState);
+    }
+    async invalidateCredentials(scope) {
+        this.#assertActive();
+        if (scope === 'verifier') {
+            this.#codeVerifier = undefined;
+            return;
+        }
+        if (scope === 'discovery') {
+            this.#discoveryState = undefined;
+            return;
+        }
+        if (scope === 'all') {
+            await this.#repository.remove(this.server, this.#signal);
+            this.#activeClientId = undefined;
+            this.clearTransientFlow();
+            return;
+        }
+        if (scope === 'client')
+            this.#activeClientId = undefined;
+        await this.#repository.update(this.server, (current) => withoutCredential(current, scope), this.#signal);
+    }
+    beginFlow(signal) {
+        this.#assertActive();
+        this.#flowSignal = signal;
+        this.#state = generateState();
+        this.#codeVerifier = undefined;
+        this.#authorizationUrl = undefined;
+        this.#discoveryState = undefined;
+    }
+    clearTransientFlow() {
+        this.#flowSignal = undefined;
+        this.#codeVerifier = undefined;
+        this.#authorizationUrl = undefined;
+        this.#discoveryState = undefined;
+    }
+    deactivate() {
+        this.#active = false;
+        this.clearTransientFlow();
+    }
+    authOptions(extra = {}) {
+        return {
+            serverUrl: this.server.url,
+            ...(this.#config.scope === undefined ? {} : { scope: this.#config.scope }),
+            fetchFn: this.#boundedFetch(),
+            ...extra,
+        };
+    }
+    get #hasClientSecret() {
+        return this.#config.clientSecret !== undefined || this.#config.clientSecretEnv !== undefined;
+    }
+    get #clientSecret() {
+        if (this.#config.clientSecret !== undefined)
+            return this.#config.clientSecret;
+        if (this.#config.clientSecretEnv === undefined)
+            return undefined;
+        const value = process.env[this.#config.clientSecretEnv];
+        if (!value)
+            throw new Error(`OAuth client secret environment variable is unavailable for ${this.server.name}`);
+        return value;
+    }
+    #assertActive() {
+        if (!this.#active)
+            throw new Error('OAuth provider is no longer active');
+        this.#signal.throwIfAborted();
+    }
+    #boundedFetch() {
+        return (input, init) => {
+            const timeout = AbortSignal.timeout(this.server.requestTimeoutMs ?? DEFAULT_OAUTH_REQUEST_TIMEOUT_MS);
+            const initSignal = init?.signal ?? undefined;
+            const signal = combineSignals(this.#signal, ...(this.#flowSignal === undefined ? [] : [this.#flowSignal]), ...(initSignal === undefined ? [] : [initSignal]), timeout);
+            return this.#fetchFn(input, { ...init, signal });
+        };
+    }
+}
+function withoutCredential(current, scope) {
+    if (!current)
+        return undefined;
+    if (scope === 'client' && current.tokens) {
+        return {
+            version: 1,
+            serverUrl: current.serverUrl,
+            oauthProfile: current.oauthProfile,
+            tokens: current.tokens,
+        };
+    }
+    if (scope === 'tokens' && current.clientInformation) {
+        return {
+            version: 1,
+            serverUrl: current.serverUrl,
+            oauthProfile: current.oauthProfile,
+            clientInformation: current.clientInformation,
+        };
+    }
+    return undefined;
+}
+function canReuseConfiguredTokens(current, clientId, issuer, oauthProfileValue) {
+    if (!current?.tokens
+        || current.clientInformation?.client_id !== clientId
+        || current.oauthProfile !== oauthProfileValue)
+        return false;
+    if (issuer === undefined)
+        return true;
+    const boundIssuers = [current.clientInformation.issuer, current.tokens.issuer]
+        .filter((value) => value !== undefined);
+    return boundIssuers.every((value) => issuersMatch(value, issuer));
+}
+function canReuseClientTokens(current, information, oauthProfileValue) {
+    if (!current?.tokens
+        || current.clientInformation?.client_id !== information.client_id
+        || current.oauthProfile !== oauthProfileValue)
+        return false;
+    const requestedIssuer = information.issuer;
+    if (requestedIssuer === undefined)
+        return true;
+    return [current.clientInformation.issuer, current.tokens.issuer]
+        .filter((value) => value !== undefined)
+        .every((value) => issuersMatch(value, requestedIssuer));
+}
+function hasCurrentRedirectUri(information, redirectUrl) {
+    return 'redirect_uris' in information
+        && Array.isArray(information.redirect_uris)
+        && information.redirect_uris.includes(redirectUrl.toString());
+}
+function assertIssuer(stored, requested, serverName) {
+    if (stored === undefined || requested === undefined || issuersMatch(stored, requested))
+        return;
+    throw new Error(`OAuth authorization server changed for ${serverName}; log out before authenticating again`);
+}
+function issuersMatch(first, second) {
+    return first === second;
+}
+function oauthProfile(config, redirectUrl) {
+    return JSON.stringify({
+        redirectUri: redirectUrl.toString(),
+        ...(config.scope === undefined ? {} : { scope: config.scope }),
+        clientName: config.clientName ?? DEFAULT_CLIENT_NAME,
+        clientUri: config.clientUri ?? DEFAULT_CLIENT_URI,
+        ...(config.authorizationParams === undefined
+            ? {}
+            : {
+                authorizationParams: Object.entries(config.authorizationParams)
+                    .sort(([left], [right]) => left.localeCompare(right)),
+            }),
+    });
+}
+function validateRedirectUrl(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch (error) {
+        throw new Error('OAuth redirectUri must be an absolute URL', { cause: error });
+    }
+    const hostname = url.hostname.toLowerCase();
+    if (url.protocol !== 'http:'
+        || !['localhost', '127.0.0.1', '[::1]', '::1'].includes(hostname)
+        || !url.port
+        || url.username
+        || url.password
+        || url.search
+        || url.hash) {
+        throw new Error('OAuth redirectUri must be an HTTP loopback URL with an explicit port and no credentials, query, or fragment');
+    }
+    return url;
+}
+function validateAuthorizationUrl(value) {
+    const url = new URL(value);
+    const loopback = ['localhost', '127.0.0.1', '[::1]', '::1'].includes(url.hostname.toLowerCase());
+    if (url.protocol !== 'https:' && !(url.protocol === 'http:' && loopback)) {
+        throw new Error('OAuth authorization URL must use HTTPS');
+    }
+    if (url.username || url.password)
+        throw new Error('OAuth authorization URL must not contain credentials');
+    return url;
+}
+function generateState() {
+    return randomBytes(32).toString('base64url');
+}
+function combineSignals(...signals) {
+    return signals.length === 1 ? signals[0] : AbortSignal.any(signals);
+}
+async function openInBrowser(url) {
+    const { default: open } = await import('open');
+    await open(url);
+}
+//# sourceMappingURL=oauth-host.js.map

package/dist/mcp/oauth-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-host.js","sourceRoot":"","sources":["../../src/mcp/oauth-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,IAAI,GAUL,MAAM,8BAA8B,CAAC;AAStC,OAAO,EACL,oBAAoB,GAErB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAG7B,MAAM,kBAAkB,CAAC;AAE1B,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AAC9D,MAAM,mBAAmB,GAAG,OAAO,CAAC;AACpC,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAC/D,MAAM,gCAAgC,GAAG,MAAM,CAAC;AAqBhD,MAAM,UAAU,uBAAuB,CACrC,SAAiB,EACjB,OAAsD,EACtD,eAA0C,EAAE;IAE5C,MAAM,UAAU,GAAG,IAAI,4BAA4B,CACjD,SAAS,EACT,YAAY,CAAC,WAAW,IAAI,IAAI,0BAA0B,EAAE,CAC7D,CAAC;IACF,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,OAAO;YACzB,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAC9E,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,oBAAoB;IACf,QAAQ,CAAyB;IACjC,QAAQ,CAAgD;IACxD,WAAW,CAA+B;IAC1C,aAAa,CAA4B;IACzC,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,UAAU,GAAG,IAAI,GAAG,EAA8B,CAAC;IACnD,gBAAgB,GAAG,IAAI,GAAG,EAAgC,CAAC;IACpE,OAAO,GAAG,KAAK,CAAC;IAEhB,YACE,OAA+B,EAC/B,OAAsD,EACtD,UAAwC,EACxC,YAAuC;QAEvC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAyB,EAAE,MAAmB;QAC9D,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,cAAc,EAAE,CAAC;QACvF,IAAI,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,kBAAkB,CAC/B,MAAM,EACN,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAChC,IAAI,CAAC,WAAW,EAChB,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAC7D,IAAI,CAAC,aAAa,CAAC,OAAO,CAC3B,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,MAAyB,EACzB,OAAsC;QAEtC,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC/E,OAAO;gBACL,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,4BAA4B,MAAM,CAAC,IAAI,gFAAgF;aACjI,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC,OAAO,CAAC;QAEtC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE;YACtD,GAAG,OAAO;YACV,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC;SAC1D,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACd,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;gBAClE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAyB,EAAE,MAAmB;QACzD,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,IAAI,0BAA0B,CAAC,CAAC,CAAC;YACtG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC1B,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;QACpE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5F,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;QACvE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,MAAyB,EACzB,OAAsC;QAEtC,MAAM,MAAM,GAAG,cAAc,CAC3B,IAAI,CAAC,QAAQ,CAAC,MAAM,EACpB,IAAI,CAAC,WAAW,CAAC,MAAM,EACvB,OAAO,CAAC,MAAM,CACf,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAuB,CAAC;QAC9E,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,QAA8C,CAAC;QACnD,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,IAAI,oBAAoB,CAAC,CAC3E,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,EAC/B,QAAQ,CAAC,YAAY,EACrB,MAAM,EACN,IAAI,CAAC,aAAa,CAAC,iBAAiB,CACrC,CAAC;YACF,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,IAAI,IAAI,CAAC;YACrD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YACjE,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,OAAO,KAAK,YAAY;gBAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YAEjE,MAAM,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC;YACnD,IAAI,CAAC,gBAAgB;gBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YAC7F,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,mCAAmC,MAAM,CAAC,IAAI,kBAAkB,EAAE,MAAM,CAAC,CAAC;YAC/G,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,aAAa,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC;gBAC9D,iBAAiB,EAAE,MAAM,CAAC,IAAI;gBAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;aACzD,CAAC,CAAC,CAAC;YACJ,IAAI,SAAS,KAAK,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACzF,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,4BAA4B,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;YACpG,CAAC;YACD,IAAI,KAAK,YAAY,KAAK,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,4BAA4B,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;YACpG,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,QAAQ,EAAE,OAAO,EAAE,CAAC;YACpB,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAED,WAAW;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzE,CAAC;CACF;AAED,MAAM,OAAO,kBAAkB;IACpB,MAAM,CAAoB;IAC1B,OAAO,CAAsB;IAC7B,WAAW,CAA+B;IAC1C,OAAO,CAAc;IACrB,YAAY,CAAM;IAClB,aAAa,CAAS;IACtB,QAAQ,CAAY;IAC7B,OAAO,GAAG,IAAI,CAAC;IACf,MAAM,GAAG,aAAa,EAAE,CAAC;IACzB,aAAa,CAAqB;IAClC,iBAAiB,CAAqB;IACtC,eAAe,CAAkC;IACjD,WAAW,CAA0B;IACrC,eAAe,CAAqB;IAEpC,YACE,MAAyB,EACzB,MAA2B,EAC3B,UAAwC,EACxC,MAAmB,EACnB,UAAqB,KAAK;QAE1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;QACpF,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,cAAc;QAChB,OAAO;YACL,aAAa,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC7C,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,mBAAmB;YAC3D,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB;YACxD,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YACpD,cAAc,EAAE,CAAC,MAAM,CAAC;YACxB,0BAA0B,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM;YACjF,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;SAC3E,CAAC;IACJ,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,OAAuC;QAEvC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,WAAW,GAAiC;gBAChD,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAChC,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;gBAClF,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;aACrE,CAAC;YACF,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACvD,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;gBAC1B,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,iBAAiB,EAAE;oBACjB,SAAS,EAAE,WAAW,CAAC,SAAS;oBAChC,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC;iBAC5E;gBACD,GAAG,CAAC,wBAAwB,CAC1B,OAAO,EACP,WAAW,CAAC,SAAS,EACrB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,aAAa,CACnB;oBACC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAQ,CAAC,MAAM,EAAE;oBAC7B,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAClB,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,SAAS,CAAC;YAC7C,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,MAAM,EAAE,YAAY,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YAChD,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,YAAY,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnF,IAAI,MAAM,EAAE,iBAAiB,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACrG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACzD,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,MAAM,EAAE,iBAAiB,EAAE,SAAS,CAAC;QAC5D,OAAO,MAAM,EAAE,iBAAiB,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,WAAyC,EACzC,OAAuC;QAEvC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,YAAY,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,iBAAiB,GAAiC,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC3E,CAAC,CAAC;gBACA,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAChC,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC;aAC5E;YACD,CAAC,CAAC,eAAe,IAAI,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC;gBAC1E,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,aAAa,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,qBAAqB,CAAC,iBAAiB,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,4EAA4E,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACvD,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;YAC1B,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,GAAG,CAAC,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,EAAE,IAAI,CAAC,aAAa,CAAC;gBACtE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAQ,CAAC,MAAM,EAAE;gBAC7B,CAAC,CAAC,EAAE,CAAC;YACP,iBAAiB,EAAE,iBAAiB;SACrC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC,eAAe,GAAG,iBAAiB,CAAC,SAAS,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAuC;QAClD,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,MAAM,EAAE,YAAY,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YAChD,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxE,YAAY,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnF,IAAI,CAAC,MAAM,EAAE,MAAM;YAAE,OAAO,SAAS,CAAC;QACtC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC1B,IAAI,MAAM,CAAC,iBAAiB,EAAE,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YACpF,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC7C,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACrG,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC1D,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAyB,EAAE,OAAuC;QACjF,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE;YACrD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,eAAe,CAAC;YACvE,IACE,gBAAgB,KAAK,SAAS;mBAC3B,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC,aAAa;mBAC5C,OAAO,CAAC,iBAAiB,EAAE,SAAS,KAAK,gBAAgB,EAC5D,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,IAAI,CAAC,MAAM,CAAC,IAAI,wBAAwB,CAAC,CAAC;YACnH,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;gBAC1B,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ;oBACvB,CAAC,CAAC;wBACA,iBAAiB,EAAE;4BACjB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;4BAChC,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;yBAClE;qBACF;oBACD,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAQ,CAAC,iBAAiB,EAAE,CAAC;gBACtD,MAAM;aACP,CAAC;QACJ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,uBAAuB,CAAC,GAAQ;QAC9B,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC,EAAE,CAAC;YAClF,IAAI,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,6CAA6C,CAAC,CAAC;YACrG,CAAC;YACD,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,iBAAiB,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC;IACvD,CAAC;IAED,gBAAgB,CAAC,YAAoB;QACnC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;IACpC,CAAC;IAED,YAAY;QACV,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,kBAAkB,CAAC,KAA0B;QAC3C,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,eAAe,KAAK,SAAS;YACvC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,KAA6D;QACvF,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACjC,OAAO;QACT,CAAC;QACD,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACzD,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACjC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,IAAI,KAAK,KAAK,QAAQ;YAAE,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;QACzD,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3G,CAAC;IAED,SAAS,CAAC,MAAoB;QAC5B,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAC/B,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;IACnC,CAAC;IAED,kBAAkB;QAChB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAC/B,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;IACnC,CAAC;IAED,UAAU;QACR,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAED,WAAW,CAAC,QAA8B,EAAE;QAC1C,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;YAC1B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC1E,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE;YAC7B,GAAG,KAAK;SACT,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC;IAC/F,CAAC;IAED,IAAI,aAAa;QACf,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QAC9E,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACjE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/G,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;IAChC,CAAC;IAED,aAAa;QACX,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CACjC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,gCAAgC,CACjE,CAAC;YACF,MAAM,UAAU,GAAG,IAAI,EAAE,MAAM,IAAI,SAAS,CAAC;YAC7C,MAAM,MAAM,GAAG,cAAc,CAC3B,IAAI,CAAC,OAAO,EACZ,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAC7D,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EACjD,OAAO,CACR,CAAC;YACF,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC;IACJ,CAAC;CACF;AAED,SAAS,iBAAiB,CACxB,OAA8C,EAC9C,KAA0B;IAE1B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACpD,OAAO;YACL,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;SAC7C,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,wBAAwB,CAC/B,OAA8C,EAC9C,QAAgB,EAChB,MAA0B,EAC1B,iBAAyB;IAEzB,IACE,CAAC,OAAO,EAAE,MAAM;WACb,OAAO,CAAC,iBAAiB,EAAE,SAAS,KAAK,QAAQ;WACjD,OAAO,CAAC,YAAY,KAAK,iBAAiB;QAC7C,OAAO,KAAK,CAAC;IACf,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;SAC3E,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC3D,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAA8C,EAC9C,WAAyC,EACzC,iBAAyB;IAEzB,IACE,CAAC,OAAO,EAAE,MAAM;WACb,OAAO,CAAC,iBAAiB,EAAE,SAAS,KAAK,WAAW,CAAC,SAAS;WAC9D,OAAO,CAAC,YAAY,KAAK,iBAAiB;QAC7C,OAAO,KAAK,CAAC;IACf,MAAM,eAAe,GAAG,WAAW,CAAC,MAAM,CAAC;IAC3C,IAAI,eAAe,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;SAC7D,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SACvD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,qBAAqB,CAC5B,WAAyC,EACzC,WAAgB;IAEhB,OAAO,eAAe,IAAI,WAAW;WAChC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC;WACxC,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CACnB,MAA0B,EAC1B,SAA6B,EAC7B,UAAkB;IAElB,IAAI,MAAM,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC;QAAE,OAAO;IAC/F,MAAM,IAAI,KAAK,CAAC,0CAA0C,UAAU,uCAAuC,CAAC,CAAC;AAC/G,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,MAAc;IACjD,OAAO,KAAK,KAAK,MAAM,CAAC;AAC1B,CAAC;AAED,SAAS,YAAY,CAAC,MAA2B,EAAE,WAAgB;IACjE,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;QACnC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9D,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,mBAAmB;QACpD,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,kBAAkB;QACjD,GAAG,CAAC,MAAM,CAAC,mBAAmB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACA,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;qBAC5D,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACxD,CAAC;KACL,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC5C,IACE,GAAG,CAAC,QAAQ,KAAK,OAAO;WACrB,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;WAC9D,CAAC,GAAG,CAAC,IAAI;WACT,GAAG,CAAC,QAAQ;WACZ,GAAG,CAAC,QAAQ;WACZ,GAAG,CAAC,MAAM;WACV,GAAG,CAAC,IAAI,EACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6GAA6G,CAAC,CAAC;IACjI,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAU;IAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACjG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1G,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,GAAG,OAAsB;IAC/C,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAW;IACtC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;AAClB,CAAC"}

package/dist/mcp/oauth-store.d.ts

@@ -0,0 +1,27 @@
+import type { StoredOAuthClientInformation, StoredOAuthTokens } from '@modelcontextprotocol/client';
+import type { ResolvedMcpServer } from '@felan-ai/ext-mcp';
+export interface StoredMcpOAuthCredentials {
+    readonly version: 1;
+    readonly serverUrl: string;
+    readonly oauthProfile: string;
+    readonly clientInformation?: StoredOAuthClientInformation;
+    readonly tokens?: StoredOAuthTokens;
+}
+export interface McpOAuthSecretStore {
+    read(account: string, signal?: AbortSignal): Promise<string | null | undefined>;
+    write(account: string, value: string, signal?: AbortSignal): Promise<void>;
+    remove(account: string, signal?: AbortSignal): Promise<void>;
+}
+export declare class KeyringMcpOAuthSecretStore implements McpOAuthSecretStore {
+    read(account: string, signal?: AbortSignal): Promise<string | undefined>;
+    write(account: string, value: string, signal?: AbortSignal): Promise<void>;
+    remove(account: string, signal?: AbortSignal): Promise<void>;
+}
+export declare class McpOAuthCredentialRepository {
+    #private;
+    constructor(namespace: string, store?: McpOAuthSecretStore);
+    read(server: ResolvedMcpServer, signal?: AbortSignal): Promise<StoredMcpOAuthCredentials | undefined>;
+    update(server: ResolvedMcpServer, update: (current: StoredMcpOAuthCredentials | undefined) => StoredMcpOAuthCredentials | undefined | Promise<StoredMcpOAuthCredentials | undefined>, signal?: AbortSignal): Promise<void>;
+    remove(server: ResolvedMcpServer, signal?: AbortSignal): Promise<void>;
+}
+//# sourceMappingURL=oauth-store.d.ts.map

package/dist/mcp/oauth-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-store.d.ts","sourceRoot":"","sources":["../../src/mcp/oauth-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,4BAA4B,EAC5B,iBAAiB,EAClB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAK3D,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,4BAA4B,CAAC;IAC1D,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAChF,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9D;AAED,qBAAa,0BAA2B,YAAW,mBAAmB;IAC9D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IASxE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAS1E,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAQnE;AAED,qBAAa,4BAA4B;;gBAI3B,SAAS,EAAE,MAAM,EAAE,KAAK,GAAE,mBAAsD;IAKtF,IAAI,CACR,MAAM,EAAE,iBAAiB,EACzB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC;IAS3C,MAAM,CACV,MAAM,EAAE,iBAAiB,EACzB,MAAM,EAAE,CACN,OAAO,EAAE,yBAAyB,GAAG,SAAS,KAC3C,yBAAyB,GAAG,SAAS,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,EAC3F,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC;IAiBV,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CA8B7E"}