@harrylabsj/kiwi 0.7.22 → 0.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +45 -10
- package/dist/a2a/negotiate.d.ts +6 -2
- package/dist/a2a/negotiate.js +10 -3
- package/dist/a2a/negotiate.js.map +1 -1
- package/dist/a2a/node.d.ts +4 -1
- package/dist/a2a/node.js +57 -4
- package/dist/a2a/node.js.map +1 -1
- package/dist/a2a/server/merchant-handler.d.ts +11 -3
- package/dist/a2a/server/merchant-handler.js +84 -26
- package/dist/a2a/server/merchant-handler.js.map +1 -1
- package/dist/agent/buyer/buyer-tools.js +17 -10
- package/dist/agent/buyer/buyer-tools.js.map +1 -1
- package/dist/agent/buyer/scheduler.d.ts +1 -0
- package/dist/agent/buyer/scheduler.js +5 -1
- package/dist/agent/buyer/scheduler.js.map +1 -1
- package/dist/agent/buyer/task-store.js +5 -2
- package/dist/agent/buyer/task-store.js.map +1 -1
- package/dist/agent/chat-tools.js +10 -3
- package/dist/agent/chat-tools.js.map +1 -1
- package/dist/agent/context/fencing.d.ts +27 -0
- package/dist/agent/context/fencing.js +126 -0
- package/dist/agent/context/fencing.js.map +1 -0
- package/dist/agent/context/grounding.d.ts +18 -0
- package/dist/agent/context/grounding.js +22 -0
- package/dist/agent/context/grounding.js.map +1 -0
- package/dist/agent/host/events.d.ts +31 -0
- package/dist/agent/host/events.js +62 -0
- package/dist/agent/host/events.js.map +1 -0
- package/dist/agent/host/tui-renderer.d.ts +17 -0
- package/dist/agent/host/tui-renderer.js +125 -0
- package/dist/agent/host/tui-renderer.js.map +1 -0
- package/dist/agent/host/web-renderer.d.ts +71 -0
- package/dist/agent/host/web-renderer.js +185 -0
- package/dist/agent/host/web-renderer.js.map +1 -0
- package/dist/agent/kernel-builder.d.ts +3 -1
- package/dist/agent/kernel-builder.js +4 -1
- package/dist/agent/kernel-builder.js.map +1 -1
- package/dist/agent/kernel.d.ts +20 -1
- package/dist/agent/kernel.js +255 -14
- package/dist/agent/kernel.js.map +1 -1
- package/dist/agent/memory/schema.d.ts +1 -1
- package/dist/agent/memory/schema.js +9 -1
- package/dist/agent/memory/schema.js.map +1 -1
- package/dist/agent/merchant/action-candidate.d.ts +18 -0
- package/dist/agent/merchant/action-candidate.js +51 -0
- package/dist/agent/merchant/action-candidate.js.map +1 -1
- package/dist/agent/merchant/fake-merchant-client.js +6 -1
- package/dist/agent/merchant/fake-merchant-client.js.map +1 -1
- package/dist/agent/merchant/intelligence/backend.d.ts +40 -0
- package/dist/agent/merchant/intelligence/backend.js +2 -0
- package/dist/agent/merchant/intelligence/backend.js.map +1 -0
- package/dist/agent/merchant/intelligence/default-backend.d.ts +38 -0
- package/dist/agent/merchant/intelligence/default-backend.js +477 -0
- package/dist/agent/merchant/intelligence/default-backend.js.map +1 -0
- package/dist/agent/merchant/intelligence/http-analytics-source.d.ts +55 -0
- package/dist/agent/merchant/intelligence/http-analytics-source.js +193 -0
- package/dist/agent/merchant/intelligence/http-analytics-source.js.map +1 -0
- package/dist/agent/merchant/intelligence/types.d.ts +109 -0
- package/dist/agent/merchant/intelligence/types.js +2 -0
- package/dist/agent/merchant/intelligence/types.js.map +1 -0
- package/dist/agent/merchant/merchant-client.d.ts +50 -1
- package/dist/agent/merchant/merchant-client.js +157 -8
- package/dist/agent/merchant/merchant-client.js.map +1 -1
- package/dist/agent/merchant/merchant-enrichment.d.ts +10 -0
- package/dist/agent/merchant/merchant-enrichment.js +38 -0
- package/dist/agent/merchant/merchant-enrichment.js.map +1 -0
- package/dist/agent/merchant/merchant-grounding.d.ts +5 -0
- package/dist/agent/merchant/merchant-grounding.js +76 -0
- package/dist/agent/merchant/merchant-grounding.js.map +1 -0
- package/dist/agent/merchant/merchant-presentations.d.ts +8 -0
- package/dist/agent/merchant/merchant-presentations.js +207 -0
- package/dist/agent/merchant/merchant-presentations.js.map +1 -0
- package/dist/agent/merchant/merchant-tools.d.ts +8 -0
- package/dist/agent/merchant/merchant-tools.js +291 -178
- package/dist/agent/merchant/merchant-tools.js.map +1 -1
- package/dist/agent/merchant/types.d.ts +6 -2
- package/dist/agent/merchant/types.js +45 -0
- package/dist/agent/merchant/types.js.map +1 -1
- package/dist/agent/presentation/registry.d.ts +14 -0
- package/dist/agent/presentation/registry.js +24 -0
- package/dist/agent/presentation/registry.js.map +1 -0
- package/dist/agent/presentation/runner.d.ts +11 -0
- package/dist/agent/presentation/runner.js +17 -0
- package/dist/agent/presentation/runner.js.map +1 -0
- package/dist/agent/presentation/sanitize.d.ts +16 -0
- package/dist/agent/presentation/sanitize.js +37 -0
- package/dist/agent/presentation/sanitize.js.map +1 -0
- package/dist/agent/presentation/types.d.ts +28 -0
- package/dist/agent/presentation/types.js +8 -0
- package/dist/agent/presentation/types.js.map +1 -0
- package/dist/agent/session.d.ts +1 -1
- package/dist/agent/session.js +2 -2
- package/dist/agent/session.js.map +1 -1
- package/dist/agent/skills/registry.d.ts +11 -0
- package/dist/agent/skills/registry.js +119 -0
- package/dist/agent/skills/registry.js.map +1 -0
- package/dist/agent/skills/tools.d.ts +6 -0
- package/dist/agent/skills/tools.js +36 -0
- package/dist/agent/skills/tools.js.map +1 -0
- package/dist/agent/skills/types.d.ts +9 -0
- package/dist/agent/skills/types.js +2 -0
- package/dist/agent/skills/types.js.map +1 -0
- package/dist/agent/supplier/scheduler.d.ts +2 -0
- package/dist/agent/supplier/scheduler.js +101 -22
- package/dist/agent/supplier/scheduler.js.map +1 -1
- package/dist/agent/supplier/store.d.ts +2 -0
- package/dist/agent/supplier/store.js +44 -0
- package/dist/agent/supplier/store.js.map +1 -1
- package/dist/agent/system-prompt.d.ts +5 -1
- package/dist/agent/system-prompt.js +20 -3
- package/dist/agent/system-prompt.js.map +1 -1
- package/dist/auth/merchant-authorization.d.ts +49 -0
- package/dist/auth/merchant-authorization.js +61 -0
- package/dist/auth/merchant-authorization.js.map +1 -0
- package/dist/auth/merchant-oauth.d.ts +255 -0
- package/dist/auth/merchant-oauth.js +764 -0
- package/dist/auth/merchant-oauth.js.map +1 -0
- package/dist/auth/merchant-pairing.d.ts +62 -0
- package/dist/auth/merchant-pairing.js +199 -0
- package/dist/auth/merchant-pairing.js.map +1 -0
- package/dist/auth/merchant-sessions.d.ts +71 -0
- package/dist/auth/merchant-sessions.js +168 -0
- package/dist/auth/merchant-sessions.js.map +1 -0
- package/dist/buyer-core/build-service.d.ts +5 -0
- package/dist/buyer-core/build-service.js +12 -0
- package/dist/buyer-core/build-service.js.map +1 -1
- package/dist/buyer-core/errors.d.ts +1 -1
- package/dist/buyer-core/errors.js +2 -0
- package/dist/buyer-core/errors.js.map +1 -1
- package/dist/buyer-core/merchant-index.d.ts +19 -4
- package/dist/buyer-core/merchant-index.js +137 -16
- package/dist/buyer-core/merchant-index.js.map +1 -1
- package/dist/buyer-core/negotiator.d.ts +0 -10
- package/dist/buyer-core/negotiator.js +12 -1
- package/dist/buyer-core/negotiator.js.map +1 -1
- package/dist/buyer-core/quote-fetcher.js +2 -1
- package/dist/buyer-core/quote-fetcher.js.map +1 -1
- package/dist/buyer-core/service.d.ts +104 -0
- package/dist/buyer-core/service.js +105 -1
- package/dist/buyer-core/service.js.map +1 -1
- package/dist/cli.d.ts +4 -2
- package/dist/cli.js +644 -32
- package/dist/cli.js.map +1 -1
- package/dist/config/profile.d.ts +51 -0
- package/dist/config/profile.js +185 -61
- package/dist/config/profile.js.map +1 -1
- package/dist/demo/demo-runner.js +12 -9
- package/dist/demo/demo-runner.js.map +1 -1
- package/dist/discovery/catalog-source/buyer-follows.d.ts +82 -0
- package/dist/discovery/catalog-source/buyer-follows.js +228 -0
- package/dist/discovery/catalog-source/buyer-follows.js.map +1 -0
- package/dist/discovery/catalog-source/connector-identity.d.ts +75 -0
- package/dist/discovery/catalog-source/connector-identity.js +175 -0
- package/dist/discovery/catalog-source/connector-identity.js.map +1 -0
- package/dist/discovery/catalog-source/errors.d.ts +1 -1
- package/dist/discovery/catalog-source/errors.js +2 -0
- package/dist/discovery/catalog-source/errors.js.map +1 -1
- package/dist/discovery/catalog-source/kiwi-record.d.ts +2 -0
- package/dist/discovery/catalog-source/kiwi-record.js.map +1 -1
- package/dist/discovery/catalog-source/kiwi-source.js +2 -0
- package/dist/discovery/catalog-source/kiwi-source.js.map +1 -1
- package/dist/discovery/catalog-source/merchant-publications.d.ts +65 -0
- package/dist/discovery/catalog-source/merchant-publications.js +207 -0
- package/dist/discovery/catalog-source/merchant-publications.js.map +1 -0
- package/dist/discovery/catalog-source/register.d.ts +24 -0
- package/dist/discovery/catalog-source/register.js +46 -0
- package/dist/discovery/catalog-source/register.js.map +1 -1
- package/dist/discovery/catalog-source/source.js +2 -1
- package/dist/discovery/catalog-source/source.js.map +1 -1
- package/dist/fs/atomic-write.d.ts +18 -0
- package/dist/fs/atomic-write.js +29 -0
- package/dist/fs/atomic-write.js.map +1 -0
- package/dist/handoff/authorization.js +1 -1
- package/dist/http/merchant-server.d.ts +65 -0
- package/dist/http/merchant-server.js +346 -0
- package/dist/http/merchant-server.js.map +1 -0
- package/dist/http/server.js +4 -1
- package/dist/http/server.js.map +1 -1
- package/dist/mcp/cli.d.ts +2 -0
- package/dist/mcp/cli.js +7 -6
- package/dist/mcp/cli.js.map +1 -1
- package/dist/mcp/merchant-auth.d.ts +78 -0
- package/dist/mcp/merchant-auth.js +146 -0
- package/dist/mcp/merchant-auth.js.map +1 -0
- package/dist/mcp/merchant-dirs.d.ts +26 -0
- package/dist/mcp/merchant-dirs.js +44 -0
- package/dist/mcp/merchant-dirs.js.map +1 -0
- package/dist/mcp/merchant-resources.d.ts +38 -0
- package/dist/mcp/merchant-resources.js +146 -0
- package/dist/mcp/merchant-resources.js.map +1 -0
- package/dist/mcp/merchant-server.d.ts +106 -0
- package/dist/mcp/merchant-server.js +615 -0
- package/dist/mcp/merchant-server.js.map +1 -0
- package/dist/mcp/merchant-tools.d.ts +103 -0
- package/dist/mcp/merchant-tools.js +517 -0
- package/dist/mcp/merchant-tools.js.map +1 -0
- package/dist/mcp/server.js +4 -3
- package/dist/mcp/server.js.map +1 -1
- package/dist/mcp/tools.d.ts +5 -3
- package/dist/mcp/tools.js +102 -5
- package/dist/mcp/tools.js.map +1 -1
- package/dist/mcp/types.d.ts +1 -1
- package/dist/mcp/types.js +4 -0
- package/dist/mcp/types.js.map +1 -1
- package/dist/merchant/ops.d.ts +0 -11
- package/dist/merchant/ops.js +13 -1
- package/dist/merchant/ops.js.map +1 -1
- package/dist/merchant/stats-store.d.ts +7 -0
- package/dist/merchant/stats-store.js +11 -0
- package/dist/merchant/stats-store.js.map +1 -1
- package/dist/merchant/workbench-service.d.ts +189 -0
- package/dist/merchant/workbench-service.js +417 -0
- package/dist/merchant/workbench-service.js.map +1 -0
- package/dist/merchant-admin/pending-page.d.ts +35 -0
- package/dist/merchant-admin/pending-page.js +69 -0
- package/dist/merchant-admin/pending-page.js.map +1 -0
- package/dist/merchant-core/commands.d.ts +99 -0
- package/dist/merchant-core/commands.js +179 -0
- package/dist/merchant-core/commands.js.map +1 -0
- package/dist/merchant-core/executor.d.ts +69 -0
- package/dist/merchant-core/executor.js +218 -0
- package/dist/merchant-core/executor.js.map +1 -0
- package/dist/merchant-core/negotiation-adapters.d.ts +55 -0
- package/dist/merchant-core/negotiation-adapters.js +55 -0
- package/dist/merchant-core/negotiation-adapters.js.map +1 -0
- package/dist/merchant-core/network-checks.d.ts +65 -0
- package/dist/merchant-core/network-checks.js +111 -0
- package/dist/merchant-core/network-checks.js.map +1 -0
- package/dist/merchant-core/operations.d.ts +64 -0
- package/dist/merchant-core/operations.js +136 -0
- package/dist/merchant-core/operations.js.map +1 -0
- package/dist/merchant-core/policy-runtime.d.ts +70 -0
- package/dist/merchant-core/policy-runtime.js +181 -0
- package/dist/merchant-core/policy-runtime.js.map +1 -0
- package/dist/merchant-core/product-import.d.ts +67 -0
- package/dist/merchant-core/product-import.js +160 -0
- package/dist/merchant-core/product-import.js.map +1 -0
- package/dist/merchant-core/service.d.ts +203 -0
- package/dist/merchant-core/service.js +402 -0
- package/dist/merchant-core/service.js.map +1 -0
- package/dist/merchant-gateway/catalog-publications.d.ts +71 -0
- package/dist/merchant-gateway/catalog-publications.js +175 -0
- package/dist/merchant-gateway/catalog-publications.js.map +1 -0
- package/dist/merchant-gateway/catalog-tools.d.ts +46 -0
- package/dist/merchant-gateway/catalog-tools.js +277 -0
- package/dist/merchant-gateway/catalog-tools.js.map +1 -0
- package/dist/merchant-gateway/cli.d.ts +75 -0
- package/dist/merchant-gateway/cli.js +458 -0
- package/dist/merchant-gateway/cli.js.map +1 -0
- package/dist/merchant-gateway/credential-vault.d.ts +44 -0
- package/dist/merchant-gateway/credential-vault.js +111 -0
- package/dist/merchant-gateway/credential-vault.js.map +1 -0
- package/dist/merchant-gateway/entry-server.d.ts +117 -0
- package/dist/merchant-gateway/entry-server.js +710 -0
- package/dist/merchant-gateway/entry-server.js.map +1 -0
- package/dist/merchant-gateway/instance-registration.d.ts +143 -0
- package/dist/merchant-gateway/instance-registration.js +382 -0
- package/dist/merchant-gateway/instance-registration.js.map +1 -0
- package/dist/merchant-gateway/instance-tools.d.ts +58 -0
- package/dist/merchant-gateway/instance-tools.js +184 -0
- package/dist/merchant-gateway/instance-tools.js.map +1 -0
- package/dist/merchant-gateway/mcp-proxy.d.ts +25 -0
- package/dist/merchant-gateway/mcp-proxy.js +192 -0
- package/dist/merchant-gateway/mcp-proxy.js.map +1 -0
- package/dist/merchant-gateway/pinned-fetch.d.ts +52 -0
- package/dist/merchant-gateway/pinned-fetch.js +212 -0
- package/dist/merchant-gateway/pinned-fetch.js.map +1 -0
- package/dist/merchant-gateway/tenant-registry.d.ts +82 -0
- package/dist/merchant-gateway/tenant-registry.js +190 -0
- package/dist/merchant-gateway/tenant-registry.js.map +1 -0
- package/dist/merchant-gateway/tool-bundle.d.ts +26 -0
- package/dist/merchant-gateway/tool-bundle.js +56 -0
- package/dist/merchant-gateway/tool-bundle.js.map +1 -0
- package/dist/merchant-runtime/backup.d.ts +48 -0
- package/dist/merchant-runtime/backup.js +226 -0
- package/dist/merchant-runtime/backup.js.map +1 -0
- package/dist/merchant-runtime/health.d.ts +99 -0
- package/dist/merchant-runtime/health.js +206 -0
- package/dist/merchant-runtime/health.js.map +1 -0
- package/dist/merchant-runtime/jobs.d.ts +64 -0
- package/dist/merchant-runtime/jobs.js +107 -0
- package/dist/merchant-runtime/jobs.js.map +1 -0
- package/dist/merchant-runtime/manager.d.ts +94 -0
- package/dist/merchant-runtime/manager.js +305 -0
- package/dist/merchant-runtime/manager.js.map +1 -0
- package/dist/merchant-runtime/services.d.ts +30 -0
- package/dist/merchant-runtime/services.js +51 -0
- package/dist/merchant-runtime/services.js.map +1 -0
- package/dist/negotiation/action-candidate.js +1 -1
- package/dist/net/url.d.ts +26 -0
- package/dist/net/url.js +32 -0
- package/dist/net/url.js.map +1 -0
- package/dist/operator/types.d.ts +1 -1
- package/dist/product-cli.d.ts +2 -2
- package/dist/product-cli.js +27 -6
- package/dist/product-cli.js.map +1 -1
- package/dist/product-compat.d.ts +9 -1
- package/dist/product-compat.js +12 -1
- package/dist/product-compat.js.map +1 -1
- package/dist/product-init.js +17 -5
- package/dist/product-init.js.map +1 -1
- package/dist/product-publish.js +2 -1
- package/dist/product-publish.js.map +1 -1
- package/dist/product-supplier.d.ts +73 -0
- package/dist/product-supplier.js +224 -5
- package/dist/product-supplier.js.map +1 -1
- package/dist/runtime/fake-model.d.ts +1 -1
- package/dist/trust/identity/jwk.d.ts +11 -0
- package/dist/trust/identity/jwk.js +2 -0
- package/dist/trust/identity/jwk.js.map +1 -0
- package/dist/trust/identity/jws.d.ts +2 -1
- package/dist/trust/identity/jws.js.map +1 -1
- package/dist/trust/identity/keys.d.ts +2 -1
- package/dist/trust/identity/keys.js.map +1 -1
- package/dist/trust/identity/message-signature.d.ts +1 -14
- package/dist/trust/identity/message-signature.js.map +1 -1
- package/dist/weixin/channel.d.ts +3 -0
- package/dist/weixin/channel.js +18 -2
- package/dist/weixin/channel.js.map +1 -1
- package/examples/profiles/merchant.deepseek.yaml +6 -0
- package/examples/profiles/merchant.fake.yaml +6 -0
- package/examples/profiles/merchant.local.yaml +6 -0
- package/package.json +9 -7
- package/skills/kiwi-buyer/SKILL.md +68 -0
- package/skills/merchant/catalog-operations/SKILL.md +17 -0
- package/skills/merchant/change-approval/SKILL.md +16 -0
- package/skills/merchant/human-review/SKILL.md +17 -0
- package/skills/merchant/inventory-operations/SKILL.md +17 -0
- package/skills/merchant/negotiation-review/SKILL.md +18 -0
- package/skills/merchant/performance-insights/SKILL.md +19 -0
- package/contracts/candidate-agent-dto-1.0.README.md +0 -43
- package/contracts/conformance/python-service/README.md +0 -19
|
@@ -0,0 +1,615 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Copyright 2026 harrylabsj
|
|
3
|
+
*
|
|
4
|
+
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
5
|
+
* you may not use this file except in compliance with the License.
|
|
6
|
+
* You may obtain a copy of the License at
|
|
7
|
+
*
|
|
8
|
+
* http://www.apache.org/licenses/LICENSE-2.0
|
|
9
|
+
*
|
|
10
|
+
* Unless required by applicable law or agreed to in writing, software
|
|
11
|
+
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
12
|
+
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
13
|
+
* See the License for the specific language governing permissions and
|
|
14
|
+
* limitations under the License.
|
|
15
|
+
*/
|
|
16
|
+
/**
|
|
17
|
+
* Merchant Workbench 标准远程 MCP Server(WorkBuddy Buddy 应用开发计划 阶段二)。
|
|
18
|
+
*
|
|
19
|
+
* 官方 @modelcontextprotocol/sdk 的 StreamableHTTPServerTransport(无状态模式,
|
|
20
|
+
* sessionIdGenerator: undefined——每个请求独立的 Server+Transport,天然适配
|
|
21
|
+
* 远程连接器,不维护进程内会话状态),承载在 Node http 上。
|
|
22
|
+
*
|
|
23
|
+
* 边界:
|
|
24
|
+
* - 独立端口/路径(缺省 9100 / /mcp),不复用 A2A `/` 端点;
|
|
25
|
+
* - 单商家一服务(MVP):一个实例绑定一个 MerchantWorkbenchService(其
|
|
26
|
+
* expectedMerchantId = profile.owner_id),租户校验在 Facade 内;
|
|
27
|
+
* - Bearer 认证由调用方注入校验器(merchant-auth.ts);本层只负责在配置
|
|
28
|
+
* 了校验器时强制执行(401,不回显原因细节之外的信息);
|
|
29
|
+
* - 不持有任何商业状态——状态唯一权威在 MerchantWorkbenchService 背后的
|
|
30
|
+
* Ledger/Store。
|
|
31
|
+
*/
|
|
32
|
+
import { createServer, } from "node:http";
|
|
33
|
+
import { Server } from "@modelcontextprotocol/sdk/server/index.js";
|
|
34
|
+
import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
|
|
35
|
+
import { CallToolRequestSchema, ListResourcesRequestSchema, ListToolsRequestSchema, ReadResourceRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
|
|
36
|
+
import { buildMerchantMcpTools, } from "./merchant-tools.js";
|
|
37
|
+
import { renderPendingPage } from "../merchant-admin/pending-page.js";
|
|
38
|
+
import { ADMIN_SESSION_COOKIE, readAdminCredentials, renderAdminLoginPage, verifyAdminPassword, } from "../auth/merchant-sessions.js";
|
|
39
|
+
import { contentHash } from "../agent/merchant/action-candidate.js";
|
|
40
|
+
import { issuePairedCredential, redeemPairingCode } from "../auth/merchant-pairing.js";
|
|
41
|
+
/** 从 Cookie 头取值(管理会话)。 */
|
|
42
|
+
function cookieValue(req, name) {
|
|
43
|
+
const header = req.headers.cookie;
|
|
44
|
+
if (header === undefined)
|
|
45
|
+
return undefined;
|
|
46
|
+
for (const part of header.split(";")) {
|
|
47
|
+
const eq = part.indexOf("=");
|
|
48
|
+
if (eq === -1)
|
|
49
|
+
continue;
|
|
50
|
+
if (part.slice(0, eq).trim() === name)
|
|
51
|
+
return part.slice(eq + 1).trim();
|
|
52
|
+
}
|
|
53
|
+
return undefined;
|
|
54
|
+
}
|
|
55
|
+
/** 只允许管理面内部相对路径,避免 XSS 和开放重定向。 */
|
|
56
|
+
function safeAdminNext(value) {
|
|
57
|
+
if (value === undefined ||
|
|
58
|
+
value === "" ||
|
|
59
|
+
!value.startsWith("/") ||
|
|
60
|
+
value.startsWith("//") ||
|
|
61
|
+
value.includes("\\")) {
|
|
62
|
+
return "/admin/pending";
|
|
63
|
+
}
|
|
64
|
+
return value;
|
|
65
|
+
}
|
|
66
|
+
/** 缺省监听地址(远程连接器形态;fail-closed 由 merchant-auth 守卫)。 */
|
|
67
|
+
export const DEFAULT_MERCHANT_MCP_HOST = "0.0.0.0";
|
|
68
|
+
/** 缺省端口(与 A2A 9000 分离)。 */
|
|
69
|
+
export const DEFAULT_MERCHANT_MCP_PORT = 9100;
|
|
70
|
+
/** 缺省 MCP endpoint 路径。 */
|
|
71
|
+
export const DEFAULT_MERCHANT_MCP_PATH = "/mcp";
|
|
72
|
+
/** POST body 上限(防御性;MCP 工具入参都很小)。 */
|
|
73
|
+
const MAX_BODY_BYTES = 1_048_576;
|
|
74
|
+
function writeJson(res, status, body, headers = {}) {
|
|
75
|
+
const text = JSON.stringify(body);
|
|
76
|
+
res.writeHead(status, { "content-type": "application/json", ...headers });
|
|
77
|
+
res.end(text);
|
|
78
|
+
}
|
|
79
|
+
/** RFC 6749 §5.1:token/授权/管理面响应必须 no-store(审查 P2:token 与
|
|
80
|
+
* 一次性确认凭证不得落入共享缓存)。 */
|
|
81
|
+
const NO_STORE_HEADERS = {
|
|
82
|
+
"cache-control": "no-store",
|
|
83
|
+
pragma: "no-cache",
|
|
84
|
+
};
|
|
85
|
+
/** 读 POST body(超上限直接拒绝,绝不流入解析)。 */
|
|
86
|
+
async function readBody(req) {
|
|
87
|
+
const chunks = [];
|
|
88
|
+
let size = 0;
|
|
89
|
+
for await (const chunk of req) {
|
|
90
|
+
size += chunk.length;
|
|
91
|
+
if (size > MAX_BODY_BYTES) {
|
|
92
|
+
throw new Error(`request body exceeds ${MAX_BODY_BYTES} bytes`);
|
|
93
|
+
}
|
|
94
|
+
chunks.push(chunk);
|
|
95
|
+
}
|
|
96
|
+
if (chunks.length === 0)
|
|
97
|
+
return undefined;
|
|
98
|
+
return JSON.parse(Buffer.concat(chunks).toString("utf8"));
|
|
99
|
+
}
|
|
100
|
+
/** 每个请求独立的协议 Server(无状态模式),handlers 引用共享的工具分发器。
|
|
101
|
+
* scopes 来自本次请求的授权上下文(OAuth access_token);undefined = 静态
|
|
102
|
+
* token 过渡模式(全量 scope)。tools/list 按 scope 过滤,tools/call 逐次强制。 */
|
|
103
|
+
export function createProtocolServer(serverInfo, toolsBundle, scopes, presentations) {
|
|
104
|
+
const server = new Server({ name: serverInfo.name, version: serverInfo.version }, { capabilities: { tools: {}, ...(presentations !== undefined ? { resources: {} } : {}) } });
|
|
105
|
+
server.setRequestHandler(ListToolsRequestSchema, async () => ({
|
|
106
|
+
tools: await toolsBundle.listTools(scopes),
|
|
107
|
+
}));
|
|
108
|
+
if (presentations !== undefined) {
|
|
109
|
+
server.setRequestHandler(ListResourcesRequestSchema, () => ({
|
|
110
|
+
resources: scopes === undefined || scopes.includes("merchant:read") ? presentations.list() : [],
|
|
111
|
+
}));
|
|
112
|
+
server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
|
|
113
|
+
if (scopes !== undefined && !scopes.includes("merchant:read")) {
|
|
114
|
+
throw new Error("scope 不足:resources/read 需要 merchant:read");
|
|
115
|
+
}
|
|
116
|
+
return await presentations.read(request.params.uri);
|
|
117
|
+
});
|
|
118
|
+
}
|
|
119
|
+
server.setRequestHandler(CallToolRequestSchema, async (request) => {
|
|
120
|
+
const result = await toolsBundle.call(request.params.name, (request.params.arguments ?? {}), scopes);
|
|
121
|
+
// SDK 1.30 的 CallToolResult 含 task 增强变体;本 server 只用经典
|
|
122
|
+
// content/structuredContent/isError 形状。
|
|
123
|
+
return result;
|
|
124
|
+
});
|
|
125
|
+
return server;
|
|
126
|
+
}
|
|
127
|
+
/**
|
|
128
|
+
* 启动 Merchant MCP Server(streamable HTTP,无状态)。
|
|
129
|
+
* 返回 handle 含实际 host/port(port 传 0 时取 ephemeral 端口)与优雅关闭。
|
|
130
|
+
*/
|
|
131
|
+
export async function startMerchantMcpServer(options) {
|
|
132
|
+
const host = options.host ?? DEFAULT_MERCHANT_MCP_HOST;
|
|
133
|
+
const port = options.port ?? DEFAULT_MERCHANT_MCP_PORT;
|
|
134
|
+
const mcpPath = options.path ?? DEFAULT_MERCHANT_MCP_PATH;
|
|
135
|
+
const serverInfo = options.serverInfo ?? { name: "kiwi-merchant-workbench", version: "0.0.0" };
|
|
136
|
+
const toolsBundle = buildMerchantMcpTools(options.service, {
|
|
137
|
+
...(options.maxChars !== undefined ? { maxChars: options.maxChars } : {}),
|
|
138
|
+
...(options.requestTimeoutMs !== undefined
|
|
139
|
+
? { requestTimeoutMs: options.requestTimeoutMs }
|
|
140
|
+
: {}),
|
|
141
|
+
});
|
|
142
|
+
// 活跃连接跟踪:close() 时连同 transport 一起关闭,优雅退出。
|
|
143
|
+
const transports = new Set();
|
|
144
|
+
let closing = false;
|
|
145
|
+
// 审查 P2:无认证端点限速(进程内计数,重启归零可接受——目标是抬高脚本
|
|
146
|
+
// 刷注册/在线爆破口令的成本,不做分布式级配额)。
|
|
147
|
+
const registerHits = new Map();
|
|
148
|
+
const loginFailures = new Map();
|
|
149
|
+
const REGISTER_LIMIT_PER_HOUR = 20;
|
|
150
|
+
const LOGIN_MAX_FAILURES = 10;
|
|
151
|
+
const LOGIN_BLOCK_MS = 5 * 60 * 1000;
|
|
152
|
+
const clientKey = (req) => req.socket.remoteAddress ?? "unknown";
|
|
153
|
+
const pruneRateLimits = (nowMs) => {
|
|
154
|
+
if (registerHits.size > 4096) {
|
|
155
|
+
for (const [k, v] of registerHits) {
|
|
156
|
+
if (nowMs - v.windowStart > 60 * 60 * 1000)
|
|
157
|
+
registerHits.delete(k);
|
|
158
|
+
}
|
|
159
|
+
}
|
|
160
|
+
if (loginFailures.size > 4096) {
|
|
161
|
+
for (const [k, v] of loginFailures) {
|
|
162
|
+
if (nowMs >= v.blockedUntil && v.count === 0)
|
|
163
|
+
loginFailures.delete(k);
|
|
164
|
+
}
|
|
165
|
+
}
|
|
166
|
+
};
|
|
167
|
+
/** OAuth 端点结果写出(JSON / HTML 授权页 / 302 回跳)。统一附加 no-store。 */
|
|
168
|
+
const writeOAuthResult = (res, result) => {
|
|
169
|
+
const headers = { ...NO_STORE_HEADERS, ...(result.headers ?? {}) };
|
|
170
|
+
if (result.html !== undefined) {
|
|
171
|
+
res.writeHead(result.status, {
|
|
172
|
+
"content-type": "text/html; charset=utf-8",
|
|
173
|
+
...headers,
|
|
174
|
+
});
|
|
175
|
+
res.end(result.html);
|
|
176
|
+
return;
|
|
177
|
+
}
|
|
178
|
+
if (headers.location !== undefined) {
|
|
179
|
+
res.writeHead(result.status, headers);
|
|
180
|
+
res.end();
|
|
181
|
+
return;
|
|
182
|
+
}
|
|
183
|
+
writeJson(res, result.status, result.body ?? {}, headers);
|
|
184
|
+
};
|
|
185
|
+
/** 读表单/JSON body(/oauth/token 等用 application/x-www-form-urlencoded)。 */
|
|
186
|
+
const readForm = async (req) => {
|
|
187
|
+
const chunks = [];
|
|
188
|
+
let size = 0;
|
|
189
|
+
for await (const chunk of req) {
|
|
190
|
+
size += chunk.length;
|
|
191
|
+
if (size > MAX_BODY_BYTES)
|
|
192
|
+
throw new Error(`request body exceeds ${MAX_BODY_BYTES} bytes`);
|
|
193
|
+
chunks.push(chunk);
|
|
194
|
+
}
|
|
195
|
+
const text = Buffer.concat(chunks).toString("utf8");
|
|
196
|
+
if (text.trim() === "")
|
|
197
|
+
return {};
|
|
198
|
+
if ((req.headers["content-type"] ?? "").includes("application/json")) {
|
|
199
|
+
return JSON.parse(text);
|
|
200
|
+
}
|
|
201
|
+
return Object.fromEntries(new URLSearchParams(text).entries());
|
|
202
|
+
};
|
|
203
|
+
/** OAuth 端点路由(授权流程本身不需要 Bearer;/mcp 才校验)。 */
|
|
204
|
+
const routeOAuth = async (req, res, url) => {
|
|
205
|
+
const oauth = options.oauth;
|
|
206
|
+
if (oauth === undefined)
|
|
207
|
+
return false;
|
|
208
|
+
const p = url.pathname;
|
|
209
|
+
if (req.method === "GET" && p === "/.well-known/oauth-protected-resource") {
|
|
210
|
+
writeOAuthResult(res, oauth.protectedResourceMetadata());
|
|
211
|
+
return true;
|
|
212
|
+
}
|
|
213
|
+
if (req.method === "GET" && p === "/.well-known/oauth-authorization-server") {
|
|
214
|
+
writeOAuthResult(res, oauth.authorizationServerMetadata());
|
|
215
|
+
return true;
|
|
216
|
+
}
|
|
217
|
+
if (req.method === "POST" && p === "/oauth/register") {
|
|
218
|
+
// 限速(审查 P2):注册无认证,按来源 IP 限每小时次数。
|
|
219
|
+
const nowMs = Date.now();
|
|
220
|
+
pruneRateLimits(nowMs);
|
|
221
|
+
const ip = clientKey(req);
|
|
222
|
+
const reg = registerHits.get(ip);
|
|
223
|
+
if (reg === undefined || nowMs - reg.windowStart > 60 * 60 * 1000) {
|
|
224
|
+
registerHits.set(ip, { count: 1, windowStart: nowMs });
|
|
225
|
+
}
|
|
226
|
+
else {
|
|
227
|
+
reg.count += 1;
|
|
228
|
+
if (reg.count > REGISTER_LIMIT_PER_HOUR) {
|
|
229
|
+
writeJson(res, 429, {
|
|
230
|
+
error: "slow_down",
|
|
231
|
+
error_description: "too many client registrations from this source",
|
|
232
|
+
});
|
|
233
|
+
return true;
|
|
234
|
+
}
|
|
235
|
+
}
|
|
236
|
+
// RFC 7591:畸形 body 属客户端错误 → 400 invalid_client_metadata,
|
|
237
|
+
// 不冒泡成 500(审查 P2:此前 500 且顶层 catch 静默无日志)。
|
|
238
|
+
let body;
|
|
239
|
+
try {
|
|
240
|
+
body = await readBody(req);
|
|
241
|
+
}
|
|
242
|
+
catch (err) {
|
|
243
|
+
process.stderr.write(`[merchant oauth] /oauth/register body 解析失败:${err instanceof Error ? err.message : String(err)}\n`);
|
|
244
|
+
writeJson(res, 400, {
|
|
245
|
+
error: "invalid_client_metadata",
|
|
246
|
+
error_description: "request body must be valid JSON",
|
|
247
|
+
});
|
|
248
|
+
return true;
|
|
249
|
+
}
|
|
250
|
+
writeOAuthResult(res, oauth.register(body));
|
|
251
|
+
return true;
|
|
252
|
+
}
|
|
253
|
+
if (req.method === "GET" && p === "/oauth/authorize") {
|
|
254
|
+
// BUG-01:授权页需要管理登录会话(cookie);无会话 → 303 登录页。
|
|
255
|
+
const sessionId = cookieValue(req, ADMIN_SESSION_COOKIE);
|
|
256
|
+
const session = sessionId !== undefined && options.admin !== undefined
|
|
257
|
+
? options.admin.sessions.getSession(sessionId)
|
|
258
|
+
: undefined;
|
|
259
|
+
writeOAuthResult(res, oauth.authorize(Object.fromEntries(url.searchParams.entries()), session));
|
|
260
|
+
return true;
|
|
261
|
+
}
|
|
262
|
+
if (req.method === "POST" &&
|
|
263
|
+
(p === "/oauth/authorize" || p === "/oauth/token" || p === "/oauth/revoke")) {
|
|
264
|
+
let form;
|
|
265
|
+
try {
|
|
266
|
+
form = await readForm(req);
|
|
267
|
+
}
|
|
268
|
+
catch (err) {
|
|
269
|
+
process.stderr.write(`[merchant oauth] ${p} body 解析失败:${err instanceof Error ? err.message : String(err)}\n`);
|
|
270
|
+
writeJson(res, 400, {
|
|
271
|
+
error: "invalid_request",
|
|
272
|
+
error_description: "malformed request body",
|
|
273
|
+
});
|
|
274
|
+
return true;
|
|
275
|
+
}
|
|
276
|
+
let result;
|
|
277
|
+
if (p === "/oauth/authorize") {
|
|
278
|
+
const sessionId = cookieValue(req, ADMIN_SESSION_COOKIE);
|
|
279
|
+
const session = sessionId !== undefined && options.admin !== undefined
|
|
280
|
+
? options.admin.sessions.getSession(sessionId)
|
|
281
|
+
: undefined;
|
|
282
|
+
if (session === undefined) {
|
|
283
|
+
writeOAuthResult(res, {
|
|
284
|
+
status: 401,
|
|
285
|
+
body: {
|
|
286
|
+
error: "login_required",
|
|
287
|
+
error_description: "授权提交需要有效的商家管理会话",
|
|
288
|
+
},
|
|
289
|
+
});
|
|
290
|
+
return true;
|
|
291
|
+
}
|
|
292
|
+
result = oauth.authorizeSubmit(form, session);
|
|
293
|
+
}
|
|
294
|
+
else if (p === "/oauth/token") {
|
|
295
|
+
result = oauth.token(form);
|
|
296
|
+
}
|
|
297
|
+
else {
|
|
298
|
+
result = oauth.revoke(form);
|
|
299
|
+
}
|
|
300
|
+
writeOAuthResult(res, result);
|
|
301
|
+
return true;
|
|
302
|
+
}
|
|
303
|
+
if (p.startsWith("/oauth/") || p.startsWith("/.well-known/oauth-")) {
|
|
304
|
+
writeJson(res, 404, { error: "not_found", message: `unknown OAuth endpoint ${p}` });
|
|
305
|
+
return true;
|
|
306
|
+
}
|
|
307
|
+
return false;
|
|
308
|
+
};
|
|
309
|
+
const httpServer = createServer((req, res) => {
|
|
310
|
+
void (async () => {
|
|
311
|
+
const url = new URL(req.url ?? "/", "http://localhost");
|
|
312
|
+
if (await routeOAuth(req, res, url))
|
|
313
|
+
return;
|
|
314
|
+
// 一次性配对码兑换(设计 §8.4 第二期):只能兑换一次,过期即失效;
|
|
315
|
+
// 成功才返回内部凭据(供商家连接器网关按 merchant_id 路由使用)。
|
|
316
|
+
if (options.pairing !== undefined &&
|
|
317
|
+
req.method === "POST" &&
|
|
318
|
+
url.pathname === "/pairing/redeem") {
|
|
319
|
+
const nowMs = Date.now();
|
|
320
|
+
pruneRateLimits(nowMs);
|
|
321
|
+
const ip = clientKey(req);
|
|
322
|
+
const hits = registerHits.get(`pair:${ip}`);
|
|
323
|
+
if (hits === undefined || nowMs - hits.windowStart > 60 * 60 * 1000) {
|
|
324
|
+
registerHits.set(`pair:${ip}`, { count: 1, windowStart: nowMs });
|
|
325
|
+
}
|
|
326
|
+
else {
|
|
327
|
+
hits.count += 1;
|
|
328
|
+
if (hits.count > 30) {
|
|
329
|
+
writeJson(res, 429, { error: "slow_down", message: "配对码尝试过于频繁" });
|
|
330
|
+
return;
|
|
331
|
+
}
|
|
332
|
+
}
|
|
333
|
+
let form;
|
|
334
|
+
try {
|
|
335
|
+
form = await readForm(req);
|
|
336
|
+
}
|
|
337
|
+
catch {
|
|
338
|
+
writeJson(res, 400, { error: "invalid_request", message: "请求体解析失败" });
|
|
339
|
+
return;
|
|
340
|
+
}
|
|
341
|
+
const code = String(form.code ?? "");
|
|
342
|
+
if (!redeemPairingCode(options.pairing.dir, code)) {
|
|
343
|
+
writeJson(res, 403, {
|
|
344
|
+
error: "invalid_pairing_code",
|
|
345
|
+
message: "配对码无效或已过期(请在实例上重新生成)",
|
|
346
|
+
});
|
|
347
|
+
return;
|
|
348
|
+
}
|
|
349
|
+
const identity = options.pairing.instance();
|
|
350
|
+
// 兑换即签发:新凭据覆盖旧的(单槽轮换),明文只在此响应里出现一次。
|
|
351
|
+
const issued = issuePairedCredential(options.pairing.dir);
|
|
352
|
+
process.stderr.write(`[merchant pairing] issued paired credential for owner=${identity.ownerId}` +
|
|
353
|
+
`(旧配对凭据已失效)\n`);
|
|
354
|
+
writeJson(res, 200, {
|
|
355
|
+
ok: true,
|
|
356
|
+
instance: { owner_id: identity.ownerId, principal_id: identity.principalId },
|
|
357
|
+
// 能力探测:实例自报名称/版本,供网关在绑定页展示与兼容性判断。
|
|
358
|
+
server_info: { name: serverInfo.name, version: serverInfo.version },
|
|
359
|
+
credential: issued.credential,
|
|
360
|
+
});
|
|
361
|
+
return;
|
|
362
|
+
}
|
|
363
|
+
// 配套商家管理面(BUG-01/03 修复后):登录用 cookie 会话(HttpOnly/
|
|
364
|
+
// SameSite=Lax/生产 Secure);/admin/pending 需会话;/admin/decision
|
|
365
|
+
// 需会话 + 一次性确认凭证(绑定候选摘要/主体/商家/动作,单次用途)。
|
|
366
|
+
if (options.admin !== undefined && url.pathname.startsWith("/admin/")) {
|
|
367
|
+
const admin = options.admin;
|
|
368
|
+
// 登录端点(公开;口令校验后签发会话)。失败退避(审查 P2:scrypt
|
|
369
|
+
// 单次成本不足以挡在线爆破,按来源连续失败 10 次锁 5 分钟)。
|
|
370
|
+
if (url.pathname === "/admin/login") {
|
|
371
|
+
if (req.method === "GET") {
|
|
372
|
+
res.writeHead(200, {
|
|
373
|
+
"content-type": "text/html; charset=utf-8",
|
|
374
|
+
...NO_STORE_HEADERS,
|
|
375
|
+
});
|
|
376
|
+
res.end(renderAdminLoginPage({
|
|
377
|
+
next: safeAdminNext(url.searchParams.get("next") ?? undefined),
|
|
378
|
+
}));
|
|
379
|
+
return;
|
|
380
|
+
}
|
|
381
|
+
if (req.method === "POST") {
|
|
382
|
+
const nowMs = Date.now();
|
|
383
|
+
pruneRateLimits(nowMs);
|
|
384
|
+
const ip = clientKey(req);
|
|
385
|
+
const failure = loginFailures.get(ip);
|
|
386
|
+
if (failure !== undefined && nowMs < failure.blockedUntil) {
|
|
387
|
+
res.writeHead(429, {
|
|
388
|
+
"content-type": "text/html; charset=utf-8",
|
|
389
|
+
...NO_STORE_HEADERS,
|
|
390
|
+
});
|
|
391
|
+
res.end(renderAdminLoginPage({ error: "失败次数过多,请 5 分钟后再试" }));
|
|
392
|
+
return;
|
|
393
|
+
}
|
|
394
|
+
const form = await readForm(req);
|
|
395
|
+
const creds = readAdminCredentials(admin.adminDir);
|
|
396
|
+
const password = form.password ?? "";
|
|
397
|
+
if (creds === undefined || !verifyAdminPassword(password, creds.password_hash)) {
|
|
398
|
+
const count = (failure?.count ?? 0) + 1;
|
|
399
|
+
loginFailures.set(ip, {
|
|
400
|
+
count,
|
|
401
|
+
blockedUntil: count >= LOGIN_MAX_FAILURES ? nowMs + LOGIN_BLOCK_MS : failure?.blockedUntil ?? 0,
|
|
402
|
+
});
|
|
403
|
+
res.writeHead(200, {
|
|
404
|
+
"content-type": "text/html; charset=utf-8",
|
|
405
|
+
...NO_STORE_HEADERS,
|
|
406
|
+
});
|
|
407
|
+
res.end(renderAdminLoginPage({ error: "口令错误或管理员未初始化" }));
|
|
408
|
+
return;
|
|
409
|
+
}
|
|
410
|
+
loginFailures.delete(ip);
|
|
411
|
+
const session = admin.sessions.createSession({
|
|
412
|
+
principalId: creds.principal_id,
|
|
413
|
+
merchantId: creds.merchant_id,
|
|
414
|
+
});
|
|
415
|
+
const secure = admin.secureCookies === true ? "; Secure" : "";
|
|
416
|
+
res.writeHead(303, {
|
|
417
|
+
location: safeAdminNext(form.next),
|
|
418
|
+
"set-cookie": `${ADMIN_SESSION_COOKIE}=${session.sessionId}; HttpOnly; SameSite=Lax; Path=/${secure}`,
|
|
419
|
+
});
|
|
420
|
+
res.end();
|
|
421
|
+
return;
|
|
422
|
+
}
|
|
423
|
+
}
|
|
424
|
+
// 其余 /admin/* 需要有效会话
|
|
425
|
+
const sessionId = cookieValue(req, ADMIN_SESSION_COOKIE);
|
|
426
|
+
const session = sessionId !== undefined ? admin.sessions.getSession(sessionId) : undefined;
|
|
427
|
+
if (session === undefined) {
|
|
428
|
+
res.writeHead(303, { location: "/admin/login" });
|
|
429
|
+
res.end();
|
|
430
|
+
return;
|
|
431
|
+
}
|
|
432
|
+
if (req.method === "GET" && url.pathname === "/admin/pending") {
|
|
433
|
+
const commands = admin.surface.listPending();
|
|
434
|
+
// 按候选签发一次性确认凭证(表单 CSRF + 确认绑定,单次用途)
|
|
435
|
+
const tokenFor = (candidateId, action) => {
|
|
436
|
+
const candidate = commands.find((c) => c.candidate_id === candidateId);
|
|
437
|
+
if (candidate === undefined)
|
|
438
|
+
return "";
|
|
439
|
+
return admin.store.createConfirmation({
|
|
440
|
+
candidateId,
|
|
441
|
+
candidateDigest: contentHash({
|
|
442
|
+
arguments: candidate.arguments,
|
|
443
|
+
preconditions: candidate.preconditions,
|
|
444
|
+
}),
|
|
445
|
+
principalId: session.principal_id,
|
|
446
|
+
merchantId: session.merchant_id,
|
|
447
|
+
action,
|
|
448
|
+
});
|
|
449
|
+
};
|
|
450
|
+
res.writeHead(200, {
|
|
451
|
+
"content-type": "text/html; charset=utf-8",
|
|
452
|
+
// 页面内嵌一次性确认凭证(审查 P2):绝不进缓存。
|
|
453
|
+
...NO_STORE_HEADERS,
|
|
454
|
+
});
|
|
455
|
+
res.end(renderPendingPage(admin.merchantName, commands, tokenFor));
|
|
456
|
+
return;
|
|
457
|
+
}
|
|
458
|
+
if (req.method === "POST" && url.pathname === "/admin/decision") {
|
|
459
|
+
const form = await readForm(req);
|
|
460
|
+
const commandId = form.command_id ?? "";
|
|
461
|
+
const action = form.decision === "approve"
|
|
462
|
+
? "approve"
|
|
463
|
+
: form.decision === "reject"
|
|
464
|
+
? "reject"
|
|
465
|
+
: undefined;
|
|
466
|
+
if (action === undefined) {
|
|
467
|
+
writeJson(res, 400, {
|
|
468
|
+
error: "invalid_request",
|
|
469
|
+
message: "decision 必须是 approve/reject",
|
|
470
|
+
});
|
|
471
|
+
return;
|
|
472
|
+
}
|
|
473
|
+
const candidate = admin.surface.listPending().find((c) => c.candidate_id === commandId);
|
|
474
|
+
if (candidate === undefined) {
|
|
475
|
+
writeJson(res, 400, {
|
|
476
|
+
error: "not_found",
|
|
477
|
+
message: `未知或非 pending 命令 ${commandId}`,
|
|
478
|
+
});
|
|
479
|
+
return;
|
|
480
|
+
}
|
|
481
|
+
// 一次性确认凭证由执行层(命令日志)逐项核对并核销(候选内容摘要/
|
|
482
|
+
// 主体/商家/动作/有效期/单次用途)——路由不再预消费,防双重核销。
|
|
483
|
+
try {
|
|
484
|
+
if (action === "approve") {
|
|
485
|
+
await admin.surface.executeApproved(commandId, session.principal_id, form.confirmation);
|
|
486
|
+
}
|
|
487
|
+
else {
|
|
488
|
+
await admin.surface.rejectCandidate(commandId, session.principal_id, form.confirmation);
|
|
489
|
+
}
|
|
490
|
+
}
|
|
491
|
+
catch (err) {
|
|
492
|
+
// 不回显异常消息(可能含内部细节):只按「确认凭证失效」与「其余失败」
|
|
493
|
+
// 两类给稳定结论,原文进 stderr。
|
|
494
|
+
const expired = err instanceof Error && err.message.includes("确认凭证");
|
|
495
|
+
process.stderr.write(`[merchant mcp] /admin/decision 失败:${err instanceof Error ? err.message : String(err)}\n`);
|
|
496
|
+
writeJson(res, expired ? 403 : 400, {
|
|
497
|
+
error: expired ? "invalid_confirmation" : "command_failed",
|
|
498
|
+
message: expired ? "确认凭证无效或已过期,请刷新待批准页重试" : "审批未执行(详见服务日志)",
|
|
499
|
+
});
|
|
500
|
+
return;
|
|
501
|
+
}
|
|
502
|
+
// 回跳待批准页(PRG 模式)
|
|
503
|
+
res.writeHead(303, { location: "/admin/pending" });
|
|
504
|
+
res.end();
|
|
505
|
+
return;
|
|
506
|
+
}
|
|
507
|
+
writeJson(res, 404, { error: "not_found" });
|
|
508
|
+
return;
|
|
509
|
+
}
|
|
510
|
+
if (url.pathname !== mcpPath) {
|
|
511
|
+
writeJson(res, 404, { error: "not_found", message: `unknown path ${url.pathname}` });
|
|
512
|
+
return;
|
|
513
|
+
}
|
|
514
|
+
let scopes;
|
|
515
|
+
if (options.auth !== undefined) {
|
|
516
|
+
const verdict = options.auth.verify({
|
|
517
|
+
...(typeof req.headers.authorization === "string"
|
|
518
|
+
? { authorizationHeader: req.headers.authorization }
|
|
519
|
+
: {}),
|
|
520
|
+
});
|
|
521
|
+
if (!verdict.ok) {
|
|
522
|
+
// RFC 9728:401 携带 resource_metadata 指引客户端发现授权服务器。
|
|
523
|
+
writeJson(res, 401, { error: "unauthorized", message: "认证失败:需要有效的 Bearer token" }, {
|
|
524
|
+
"www-authenticate": options.oauth !== undefined
|
|
525
|
+
? `Bearer resource_metadata="${options.oauth.resourceMetadataUrl}"`
|
|
526
|
+
: "Bearer",
|
|
527
|
+
});
|
|
528
|
+
return;
|
|
529
|
+
}
|
|
530
|
+
// OAuth 模式按 token scope 过滤;静态 token 过渡模式全量(undefined)。
|
|
531
|
+
scopes = verdict.authorization?.scopes;
|
|
532
|
+
}
|
|
533
|
+
if (req.method !== "POST" && req.method !== "GET" && req.method !== "DELETE") {
|
|
534
|
+
writeJson(res, 405, { error: "method_not_allowed" }, { allow: "POST, GET, DELETE" });
|
|
535
|
+
return;
|
|
536
|
+
}
|
|
537
|
+
let body;
|
|
538
|
+
try {
|
|
539
|
+
body = req.method === "POST" ? await readBody(req) : undefined;
|
|
540
|
+
}
|
|
541
|
+
catch (err) {
|
|
542
|
+
// 超限 413;其余(JSON 解析失败等)属客户端错误 → 400(审查 P2)。
|
|
543
|
+
const tooLarge = err instanceof Error && err.message.includes("exceeds");
|
|
544
|
+
if (!tooLarge) {
|
|
545
|
+
process.stderr.write(`[merchant mcp] /mcp body 解析失败:${err instanceof Error ? err.message : String(err)}\n`);
|
|
546
|
+
}
|
|
547
|
+
// 不回显异常消息:响应只给稳定结论,细节已在上面进 stderr。
|
|
548
|
+
writeJson(res, tooLarge ? 413 : 400, {
|
|
549
|
+
error: "invalid_request",
|
|
550
|
+
message: tooLarge ? "请求体超过大小上限" : "请求体无法解析",
|
|
551
|
+
});
|
|
552
|
+
return;
|
|
553
|
+
}
|
|
554
|
+
const protocolServer = createProtocolServer(serverInfo, toolsBundle, scopes, options.presentations);
|
|
555
|
+
const transport = new StreamableHTTPServerTransport({
|
|
556
|
+
sessionIdGenerator: undefined,
|
|
557
|
+
enableJsonResponse: true,
|
|
558
|
+
});
|
|
559
|
+
transports.add(transport);
|
|
560
|
+
res.on("close", () => {
|
|
561
|
+
transports.delete(transport);
|
|
562
|
+
void transport.close().catch(() => undefined);
|
|
563
|
+
void protocolServer.close().catch(() => undefined);
|
|
564
|
+
});
|
|
565
|
+
try {
|
|
566
|
+
await protocolServer.connect(transport);
|
|
567
|
+
await transport.handleRequest(req, res, body);
|
|
568
|
+
}
|
|
569
|
+
catch (err) {
|
|
570
|
+
// 内部异常消息(可能含栈/上游响应内容)只进 stderr,不回显给调用方。
|
|
571
|
+
process.stderr.write(`[merchant mcp] /mcp transport error:${err instanceof Error ? err.message : String(err)}\n`);
|
|
572
|
+
if (!res.headersSent) {
|
|
573
|
+
writeJson(res, 500, { error: "internal_error", message: "服务内部错误" });
|
|
574
|
+
}
|
|
575
|
+
else {
|
|
576
|
+
res.end();
|
|
577
|
+
}
|
|
578
|
+
}
|
|
579
|
+
})().catch((err) => {
|
|
580
|
+
// 审查 P2:顶层静默吞错让排障无迹——记错误摘要(不含 body 与凭据)。
|
|
581
|
+
process.stderr.write(`[merchant mcp] ${req.method} ${req.url ?? "/"} 处理异常:` +
|
|
582
|
+
`${err instanceof Error ? err.message : String(err)}\n`);
|
|
583
|
+
if (!res.headersSent)
|
|
584
|
+
writeJson(res, 500, { error: "internal_error" });
|
|
585
|
+
else
|
|
586
|
+
res.end();
|
|
587
|
+
});
|
|
588
|
+
});
|
|
589
|
+
await new Promise((resolve, reject) => {
|
|
590
|
+
httpServer.once("error", reject);
|
|
591
|
+
httpServer.listen(port, host, () => resolve());
|
|
592
|
+
});
|
|
593
|
+
const address = httpServer.address();
|
|
594
|
+
const boundPort = typeof address === "object" && address !== null ? address.port : port;
|
|
595
|
+
return {
|
|
596
|
+
host,
|
|
597
|
+
port: boundPort,
|
|
598
|
+
path: mcpPath,
|
|
599
|
+
url: `http://${host === "0.0.0.0" ? "127.0.0.1" : host}:${boundPort}${mcpPath}`,
|
|
600
|
+
close: async () => {
|
|
601
|
+
if (closing)
|
|
602
|
+
return;
|
|
603
|
+
closing = true;
|
|
604
|
+
for (const transport of transports) {
|
|
605
|
+
await transport.close().catch(() => undefined);
|
|
606
|
+
}
|
|
607
|
+
transports.clear();
|
|
608
|
+
await new Promise((resolve) => {
|
|
609
|
+
httpServer.close(() => resolve());
|
|
610
|
+
httpServer.closeAllConnections();
|
|
611
|
+
});
|
|
612
|
+
},
|
|
613
|
+
};
|
|
614
|
+
}
|
|
615
|
+
//# sourceMappingURL=merchant-server.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"merchant-server.js","sourceRoot":"","sources":["../../src/mcp/merchant-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACL,YAAY,GAIb,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,GAE1B,MAAM,oCAAoC,CAAC;AAK5C,OAAO,EACL,qBAAqB,GAGtB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAA6B,MAAM,mCAAmC,CAAC;AACjG,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,GAEpB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEvF,0BAA0B;AAC1B,SAAS,WAAW,CAAC,GAAoB,EAAE,IAAY;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kCAAkC;AAClC,SAAS,aAAa,CAAC,KAAyB;IAC9C,IACE,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,EAAE;QACZ,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACtB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EACpB,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAS,CAAC;AACnD,2BAA2B;AAC3B,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAC9C,0BAA0B;AAC1B,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEhD,qCAAqC;AACrC,MAAM,cAAc,GAAG,SAAS,CAAC;AAwDjC,SAAS,SAAS,CAChB,GAAmB,EACnB,MAAc,EACd,IAAa,EACb,UAAkC,EAAE;IAEpC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC1E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;wBACwB;AACxB,MAAM,gBAAgB,GAA2B;IAC/C,eAAe,EAAE,UAAU;IAC3B,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,mCAAmC;AACnC,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAC;QACjC,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,wBAAwB,cAAc,QAAQ,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;AACvE,CAAC;AAeD;;kEAEkE;AAClE,MAAM,UAAU,oBAAoB,CAClC,UAA6C,EAC7C,WAA2B,EAC3B,MAA4B,EAC5B,aAAqE;IAErE,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,EACtD,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC3F,CAAC;IACF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,MAAM,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC;KAC3C,CAAC,CAAC,CAAC;IACJ,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1D,SAAS,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;SAChG,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACpE,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CACnC,OAAO,CAAC,MAAM,CAAC,IAAI,EACnB,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAA4B,EAC3D,MAAM,CACP,CAAC;QACF,sDAAsD;QACtD,wCAAwC;QACxC,OAAO,MAAwB,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAiC;IAEjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,yBAAyB,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,yBAAyB,CAAC;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,yBAAyB,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC/F,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE;QACzD,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IAEH,0CAA0C;IAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC5D,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,uCAAuC;IACvC,2BAA2B;IAC3B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkD,CAAC;IAC/E,MAAM,aAAa,GAAG,IAAI,GAAG,EAAmD,CAAC;IACjF,MAAM,uBAAuB,GAAG,EAAE,CAAC;IACnC,MAAM,kBAAkB,GAAG,EAAE,CAAC;IAC9B,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACrC,MAAM,SAAS,GAAG,CAAC,GAAoB,EAAU,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IAC1F,MAAM,eAAe,GAAG,CAAC,KAAa,EAAQ,EAAE;QAC9C,IAAI,YAAY,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC;gBAClC,IAAI,KAAK,GAAG,CAAC,CAAC,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;oBAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QACD,IAAI,aAAa,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;YAC9B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,aAAa,EAAE,CAAC;gBACnC,IAAI,KAAK,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC;oBAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,4DAA4D;IAC5D,MAAM,gBAAgB,GAAG,CAAC,GAAmB,EAAE,MAAuB,EAAQ,EAAE;QAC9E,MAAM,OAAO,GAAG,EAAE,GAAG,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACnE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE;gBAC3B,cAAc,EAAE,0BAA0B;gBAC1C,GAAG,OAAO;aACX,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACtC,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEF,wEAAwE;IACxE,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAoB,EAA+C,EAAE;QAC3F,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;YAC9B,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAC;YACjC,IAAI,IAAI,GAAG,cAAc;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,cAAc,QAAQ,CAAC,CAAC;YAC3F,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,6CAA6C;IAC7C,MAAM,UAAU,GAAG,KAAK,EACtB,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACU,EAAE;QACpB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;QACvB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,KAAK,uCAAuC,EAAE,CAAC;YAC1E,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,KAAK,yCAAyC,EAAE,CAAC;YAC5E,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,2BAA2B,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,KAAK,iBAAiB,EAAE,CAAC;YACrD,iCAAiC;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,eAAe,CAAC,KAAK,CAAC,CAAC;YACvB,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,GAAG,CAAC,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;gBAClE,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;gBACf,IAAI,GAAG,CAAC,KAAK,GAAG,uBAAuB,EAAE,CAAC;oBACxC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;wBAClB,KAAK,EAAE,WAAW;wBAClB,iBAAiB,EAAE,gDAAgD;qBACpE,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,yDAAyD;YACzD,0CAA0C;YAC1C,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8CAA8C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACnG,CAAC;gBACF,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;oBAClB,KAAK,EAAE,yBAAyB;oBAChC,iBAAiB,EAAE,iCAAiC;iBACrD,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YACD,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,IAA0C,CAAC,CAAC,CAAC;YAClF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,KAAK,kBAAkB,EAAE,CAAC;YACrD,4CAA4C;YAC5C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YACzD,MAAM,OAAO,GACX,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;gBACpD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;gBAC9C,CAAC,CAAC,SAAS,CAAC;YAChB,gBAAgB,CACd,GAAG,EACH,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,CACzE,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IACE,GAAG,CAAC,MAAM,KAAK,MAAM;YACrB,CAAC,CAAC,KAAK,kBAAkB,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,eAAe,CAAC,EAC3E,CAAC;YACD,IAAI,IAAwC,CAAC;YAC7C,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,CAAC,cAAc,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACxF,CAAC;gBACF,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;oBAClB,KAAK,EAAE,iBAAiB;oBACxB,iBAAiB,EAAE,wBAAwB;iBAC5C,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,MAAuB,CAAC;YAC5B,IAAI,CAAC,KAAK,kBAAkB,EAAE,CAAC;gBAC7B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;gBACzD,MAAM,OAAO,GACX,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;oBACpD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;oBAC9C,CAAC,CAAC,SAAS,CAAC;gBAChB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,gBAAgB,CAAC,GAAG,EAAE;wBACpB,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE;4BACJ,KAAK,EAAE,gBAAgB;4BACvB,iBAAiB,EAAE,iBAAiB;yBACrC;qBACF,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAChD,CAAC;iBAAM,IAAI,CAAC,KAAK,cAAc,EAAE,CAAC;gBAChC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;YACD,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACnE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,0BAA0B,CAAC,EAAE,EAAE,CAAC,CAAC;YACpF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,UAAU,GAAe,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACxD,IAAI,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;gBAAE,OAAO;YAC5C,sCAAsC;YACtC,yCAAyC;YACzC,IACE,OAAO,CAAC,OAAO,KAAK,SAAS;gBAC7B,GAAG,CAAC,MAAM,KAAK,MAAM;gBACrB,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAClC,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzB,eAAe,CAAC,KAAK,CAAC,CAAC;gBACvB,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC1B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC5C,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;oBACpE,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnE,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;oBAChB,IAAI,IAAI,CAAC,KAAK,GAAG,EAAE,EAAE,CAAC;wBACpB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;wBAClE,OAAO;oBACT,CAAC;gBACH,CAAC;gBACD,IAAI,IAAwC,CAAC;gBAC7C,IAAI,CAAC;oBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;oBACtE,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACrC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;oBAClD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;wBAClB,KAAK,EAAE,sBAAsB;wBAC7B,OAAO,EAAE,sBAAsB;qBAChC,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC5C,oCAAoC;gBACpC,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yDAAyD,QAAQ,CAAC,OAAO,EAAE;oBACzE,cAAc,CACjB,CAAC;gBACF,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;oBAClB,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,WAAW,EAAE;oBAC5E,kCAAkC;oBAClC,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE;oBACnE,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,iDAAiD;YACjD,6DAA6D;YAC7D,uCAAuC;YACvC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC5B,uCAAuC;gBACvC,oCAAoC;gBACpC,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;oBACpC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;wBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;4BACjB,cAAc,EAAE,0BAA0B;4BAC1C,GAAG,gBAAgB;yBACpB,CAAC,CAAC;wBACH,GAAG,CAAC,GAAG,CACL,oBAAoB,CAAC;4BACnB,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;yBAC/D,CAAC,CACH,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;wBAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBACzB,eAAe,CAAC,KAAK,CAAC,CAAC;wBACvB,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;wBAC1B,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBACtC,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;4BAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gCACjB,cAAc,EAAE,0BAA0B;gCAC1C,GAAG,gBAAgB;6BACpB,CAAC,CAAC;4BACH,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;4BAC7D,OAAO;wBACT,CAAC;wBACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;wBACjC,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;wBACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;wBACrC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;4BAC/E,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;4BACxC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE;gCACpB,KAAK;gCACL,YAAY,EACV,KAAK,IAAI,kBAAkB,CAAC,CAAC,CAAC,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY,IAAI,CAAC;6BACpF,CAAC,CAAC;4BACH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gCACjB,cAAc,EAAE,0BAA0B;gCAC1C,GAAG,gBAAgB;6BACpB,CAAC,CAAC;4BACH,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;4BACzD,OAAO;wBACT,CAAC;wBACD,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;wBACzB,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;4BAC3C,WAAW,EAAE,KAAK,CAAC,YAAY;4BAC/B,UAAU,EAAE,KAAK,CAAC,WAAW;yBAC9B,CAAC,CAAC;wBACH,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;4BACjB,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;4BAClC,YAAY,EAAE,GAAG,oBAAoB,IAAI,OAAO,CAAC,SAAS,mCAAmC,MAAM,EAAE;yBACtG,CAAC,CAAC;wBACH,GAAG,CAAC,GAAG,EAAE,CAAC;wBACV,OAAO;oBACT,CAAC;gBACH,CAAC;gBACD,qBAAqB;gBACrB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3F,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;oBACjD,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;oBAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;oBAC7C,oCAAoC;oBACpC,MAAM,QAAQ,GAAG,CAAC,WAAmB,EAAE,MAA4B,EAAU,EAAE;wBAC7E,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,WAAW,CAAC,CAAC;wBACvE,IAAI,SAAS,KAAK,SAAS;4BAAE,OAAO,EAAE,CAAC;wBACvC,OAAO,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC;4BACpC,WAAW;4BACX,eAAe,EAAE,WAAW,CAAC;gCAC3B,SAAS,EAAE,SAAS,CAAC,SAAS;gCAC9B,aAAa,EAAE,SAAS,CAAC,aAAa;6BACvC,CAAC;4BACF,WAAW,EAAE,OAAO,CAAC,YAAY;4BACjC,UAAU,EAAE,OAAO,CAAC,WAAW;4BAC/B,MAAM;yBACP,CAAC,CAAC;oBACL,CAAC,CAAC;oBACF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;wBACjB,cAAc,EAAE,0BAA0B;wBAC1C,4BAA4B;wBAC5B,GAAG,gBAAgB;qBACpB,CAAC,CAAC;oBACH,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;oBACnE,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;oBAChE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;oBACxC,MAAM,MAAM,GACV,IAAI,CAAC,QAAQ,KAAK,SAAS;wBACzB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ;4BAC1B,CAAC,CAAC,QAAQ;4BACV,CAAC,CAAC,SAAS,CAAC;oBAClB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBACzB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;4BAClB,KAAK,EAAE,iBAAiB;4BACxB,OAAO,EAAE,6BAA6B;yBACvC,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBACD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;oBACxF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;wBAC5B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;4BAClB,KAAK,EAAE,WAAW;4BAClB,OAAO,EAAE,mBAAmB,SAAS,EAAE;yBACxC,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBACD,mCAAmC;oBACnC,qCAAqC;oBACrC,IAAI,CAAC;wBACH,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;4BACzB,MAAM,KAAK,CAAC,OAAO,CAAC,eAAe,CACjC,SAAS,EACT,OAAO,CAAC,YAAY,EACpB,IAAI,CAAC,YAAY,CAClB,CAAC;wBACJ,CAAC;6BAAM,CAAC;4BACN,MAAM,KAAK,CAAC,OAAO,CAAC,eAAe,CACjC,SAAS,EACT,OAAO,CAAC,YAAY,EACpB,IAAI,CAAC,YAAY,CAClB,CAAC;wBACJ,CAAC;oBACH,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,qCAAqC;wBACrC,sBAAsB;wBACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;wBACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC1F,CAAC;wBACF,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;4BAClC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,gBAAgB;4BAC1D,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,eAAe;yBAC5D,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBACD,iBAAiB;oBACjB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;oBACnD,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC5C,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC7B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YACD,IAAI,MAA4B,CAAC;YACjC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;oBAClC,GAAG,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,QAAQ;wBAC/C,CAAC,CAAC,EAAE,mBAAmB,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;wBACpD,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBAChB,kDAAkD;oBAClD,SAAS,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAC7D;wBACE,kBAAkB,EAChB,OAAO,CAAC,KAAK,KAAK,SAAS;4BACzB,CAAC,CAAC,6BAA6B,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG;4BACnE,CAAC,CAAC,QAAQ;qBACf,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,uDAAuD;gBACvD,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC;YACzC,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7E,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YACD,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,4CAA4C;gBAC5C,MAAM,QAAQ,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACzE,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACtF,CAAC;gBACJ,CAAC;gBACD,mCAAmC;gBACnC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;oBACnC,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;iBAC5C,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,cAAc,GAAG,oBAAoB,CACzC,UAAU,EACV,WAAW,EACX,MAAM,EACN,OAAO,CAAC,aAAa,CACtB,CAAC;YACF,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;gBAClD,kBAAkB,EAAE,SAAS;gBAC7B,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAC;YACH,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC7B,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC9C,KAAK,cAAc,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACxC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,wCAAwC;gBACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC5F,CAAC;gBACF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACtE,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,GAAG,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,yCAAyC;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kBAAkB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,QAAQ;gBACpD,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC1D,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;;gBAClE,GAAG,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAExF,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,OAAO;QACb,GAAG,EAAE,UAAU,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,SAAS,GAAG,OAAO,EAAE;QAC/E,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACjD,CAAC;YACD,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBAClC,UAAU,CAAC,mBAAmB,EAAE,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}
|