@inhuman.tools/harness 0.0.0-stage → 0.2.0

package/dist/providers/mcp/mcp-connection.js

@@ -0,0 +1,174 @@
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+/**
+ * Shared MCP connection: instance state reports tools; the class (driver)
+ * state does not. Transport subclasses spawn or dial; this class owns the
+ * SDK client connect + listTools. Interned `callTool` is the send door.
+ */
+import { fail } from "@inhuman.tools/harness-diagnostics";
+import { ConnectionMiss, PEWDriver } from "@inhuman.tools/plexus-expectations/driver";
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { CallToolResultSchema } from "@modelcontextprotocol/sdk/types.js";
+import { computed, observable, when } from "mobx";
+import { mcpCallResult, withMcpStderr } from "./mcp-result.js";
+import { mcpToolAllowed, mcpToolsSettingOf } from "./tool-filter.js";
+let McpDriverConnection = (() => {
+    var _a;
+    let _classSuper = PEWDriver;
+    let _instanceExtraInitializers = [];
+    let _state_decorators;
+    let _state_initializers = [];
+    let _state_extraInitializers = [];
+    let _get_expiring_decorators;
+    let _get_needsAuth_decorators;
+    let _get_fresh_decorators;
+    return class McpDriverConnection extends _classSuper {
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+            _state_decorators = [(_a = observable).shallow.bind(_a)];
+            _get_expiring_decorators = [computed];
+            _get_needsAuth_decorators = [computed];
+            _get_fresh_decorators = [computed];
+            __esDecorate(this, null, _state_decorators, { kind: "accessor", name: "state", static: false, private: false, access: { has: obj => "state" in obj, get: obj => obj.state, set: (obj, value) => { obj.state = value; } }, metadata: _metadata }, _state_initializers, _state_extraInitializers);
+            __esDecorate(this, null, _get_expiring_decorators, { kind: "getter", name: "expiring", static: false, private: false, access: { has: obj => "expiring" in obj, get: obj => obj.expiring }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _get_needsAuth_decorators, { kind: "getter", name: "needsAuth", static: false, private: false, access: { has: obj => "needsAuth" in obj, get: obj => obj.needsAuth }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _get_fresh_decorators, { kind: "getter", name: "fresh", static: false, private: false, access: { has: obj => "fresh" in obj, get: obj => obj.fresh }, metadata: _metadata }, null, _instanceExtraInitializers);
+            if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+        }
+        #state_accessor_storage = (__runInitializers(this, _instanceExtraInitializers), __runInitializers(this, _state_initializers, {
+            tools: [],
+            auth: undefined,
+        }));
+        get state() { return this.#state_accessor_storage; }
+        set state(value) { this.#state_accessor_storage = value; }
+        client = (__runInitializers(this, _state_extraInitializers), null);
+        stderrTail() {
+            return "";
+        }
+        get expiring() {
+            return false;
+        }
+        get needsAuth() {
+            return this.state.auth === "needs-auth";
+        }
+        get fresh() {
+            return !this.needsAuth;
+        }
+        /**
+         * Wait send-ready, then `client.request` (`tools/call`). `onDispatch` fires
+         * immediately before the request so park can see `MCPToolJob.dispatched`.
+         */
+        async callTool(req) {
+            const waitSignal = req.signal;
+            const sendReady = () => (this.readyState === "ready" && this.fresh) || this.needsAuth || this.readyState === "failed";
+            try {
+                await (waitSignal === undefined ? when(sendReady) : when(sendReady, { signal: waitSignal }));
+            }
+            catch (error) {
+                if (waitSignal?.reason instanceof ConnectionMiss)
+                    throw waitSignal.reason;
+                throw error;
+            }
+            if (this.needsAuth) {
+                throw new ConnectionMiss("needs-auth", `connection ${this.connectionId} needs auth`);
+            }
+            if (this.readyState === "failed" || !this.fresh) {
+                throw new ConnectionMiss("not-ready", `connection ${this.connectionId} is not send-ready`);
+            }
+            const tool = req.serverToolName.trim();
+            if (tool === "")
+                return { ok: false, text: "mcp: serverToolName is required" };
+            if (!mcpToolAllowed(mcpToolsSettingOf(this.settings), tool)) {
+                return { ok: false, text: `unknown MCP tool "${tool}"` };
+            }
+            const client = this.client;
+            if (client === null) {
+                throw new ConnectionMiss("not-ready", `connection ${this.connectionId} has no MCP client`);
+            }
+            req.onDispatch?.();
+            try {
+                const res = await client.request({ method: "tools/call", params: { name: tool, arguments: req.args } }, CallToolResultSchema, { signal: req.signal });
+                const result = mcpCallResult(res);
+                if (result.ok)
+                    return { ok: true, value: result.value };
+                return {
+                    ok: false,
+                    text: this.decorateCallFailure(result.text ?? "mcp: tool reported failure"),
+                    ...(result.value === undefined ? {} : { value: result.value }),
+                };
+            }
+            catch (error) {
+                if (req.signal?.aborted)
+                    throw error;
+                return { ok: false, text: this.decorateCallError(error) };
+            }
+        }
+        decorateCallFailure(text) {
+            return withMcpStderr(text, this.stderrTail());
+        }
+        decorateCallError(error) {
+            return withMcpStderr(`mcp: ${error instanceof Error ? error.message : String(error)}`, this.stderrTail());
+        }
+        resolve(expectation) {
+            return this.createToolActor(expectation);
+        }
+        async connectMcpClient(transport) {
+            const client = new Client({ name: "harness-mcp", version: "0.0.0" }, { capabilities: {} });
+            await client.connect(transport);
+            this.client = client;
+            return client;
+        }
+        async requestMcpListTools(client) {
+            const result = await client.listTools();
+            const seen = new Set();
+            return (result.tools ?? []).flatMap((tool) => {
+                if (seen.has(tool.name)) {
+                    fail(`mcp ${this.connectionId}`, `server lists tool ${tool.name} twice; keeping the first`);
+                    return [];
+                }
+                seen.add(tool.name);
+                const readish = /^(read|list|search|get|find|stat|info)/i.test(tool.name);
+                return {
+                    serverToolName: tool.name,
+                    description: tool.description,
+                    parameters: tool.inputSchema ?? { type: "object", properties: {} },
+                    class: readish ? "read" : "write",
+                };
+            });
+        }
+    };
+})();
+export { McpDriverConnection };
+//# sourceMappingURL=mcp-connection.js.map

package/dist/providers/mcp/mcp-connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-connection.js","sourceRoot":"","sources":["../../../src/providers/mcp/mcp-connection.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;GAIG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAE1D,OAAO,EAAE,cAAc,EAAyB,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAC7G,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAElD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;IAE/C,mBAAmB;;sBAE/B,SAAS;;;;;;;;iBAFG,mBAEpB,SAAQ,WAAgC;;;iCACvC,CAAA,KAAA,UAAU,CAAA,CAAC,OAAO;wCAclB,QAAQ;yCAKR,QAAQ;qCAKR,QAAQ;YAxBW,oKAAkB,KAAK,6BAAL,KAAK,qFAMzC;YASF,+KAAI,QAAQ,6DAEX;YAGD,kLAAI,SAAS,6DAEZ;YAGD,sKAAI,KAAK,6DAER;;;QA3BmB,2BAHA,mDAAmB,+CAMnC;YACF,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,SAAS;SAChB,GAAC;QANkB,IAAkB,KAAK,2CAMzC;QANkB,IAAkB,KAAK,iDAMzC;QAEF,MAAM,uDAAkB,IAAI,EAAC;QAE7B,UAAU;YACR,OAAO,EAAE,CAAC;QACZ,CAAC;QAGD,IAAI,QAAQ;YACV,OAAO,KAAK,CAAC;QACf,CAAC;QAGD,IAAI,SAAS;YACX,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;QAC1C,CAAC;QAGD,IAAI,KAAK;YACP,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QACzB,CAAC;QAED;;;WAGG;QACH,KAAK,CAAC,QAAQ,CAAC,GAKd;YACC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;YAC9B,MAAM,SAAS,GAAG,GAAY,EAAE,CAC9B,CAAC,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC;YAChG,IAAI,CAAC;gBACH,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;YAC/F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,UAAU,EAAE,MAAM,YAAY,cAAc;oBAAE,MAAM,UAAU,CAAC,MAAM,CAAC;gBAC1E,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,MAAM,IAAI,cAAc,CAAC,YAAY,EAAE,cAAc,IAAI,CAAC,YAAY,aAAa,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChD,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,cAAc,IAAI,CAAC,YAAY,oBAAoB,CAAC,CAAC;YAC7F,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACvC,IAAI,IAAI,KAAK,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC;YAC/E,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAI,GAAG,EAAE,CAAC;YAC3D,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,cAAc,IAAI,CAAC,YAAY,oBAAoB,CAAC,CAAC;YAC7F,CAAC;YACD,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAY,MAAM,MAAM,CAAC,OAAO,CACvC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EACrE,oBAAoB,EACpB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CACvB,CAAC;gBACF,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,MAAM,CAAC,EAAE;oBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;gBACxD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,IAAI,4BAA4B,CAAC;oBAC3E,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;iBAC/D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO;oBAAE,MAAM,KAAK,CAAC;gBACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5D,CAAC;QACH,CAAC;QAES,mBAAmB,CAAC,IAAY;YACxC,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAChD,CAAC;QAES,iBAAiB,CAAC,KAAc;YACxC,OAAO,aAAa,CAAC,QAAQ,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5G,CAAC;QAEkB,OAAO,CAAC,WAA+B;YACxD,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;QAIS,KAAK,CAAC,gBAAgB,CAAC,SAAoB;YACnD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3F,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACrB,OAAO,MAAM,CAAC;QAChB,CAAC;QAES,KAAK,CAAC,mBAAmB,CAAC,MAAc;YAChD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,EAAE,EAAE,qBAAqB,IAAI,CAAC,IAAI,2BAA2B,CAAC,CAAC;oBAC5F,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpB,MAAM,OAAO,GAAG,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1E,OAAO;oBACL,cAAc,EAAE,IAAI,CAAC,IAAI;oBACzB,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,UAAU,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;oBAClE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;iBAClC,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;;;SA5HmB,mBAAmB"}

package/dist/providers/mcp/mcp-result.d.ts

@@ -0,0 +1,10 @@
+export type RawMcpToolResult = {
+    readonly ok: boolean;
+    readonly text?: string;
+    readonly raw?: unknown;
+    readonly value?: unknown;
+};
+export declare function mcpCallResult(res: unknown): RawMcpToolResult;
+export declare function parseMcpArgsJson(argumentsJson: string): Record<string, unknown> | null;
+export declare function withMcpStderr(text: string, tail: string): string;
+//# sourceMappingURL=mcp-result.d.ts.map

package/dist/providers/mcp/mcp-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-result.d.ts","sourceRoot":"","sources":["../../../src/providers/mcp/mcp-result.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAM5D;AAED,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAOtF;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhE"}

package/dist/providers/mcp/mcp-result.js

@@ -0,0 +1,54 @@
+/** `tools/call` payload. `Client.callTool` would drop content on outputSchema throw. */
+import { asRecord, readField } from "./json.js";
+export function mcpCallResult(res) {
+    const value = callResultValue(res);
+    if (res != null && typeof res === "object" && readField(res, "isError") === true) {
+        return { ok: false, text: diagnosticText(res, value), raw: res, value };
+    }
+    return { ok: true, raw: res, value };
+}
+export function parseMcpArgsJson(argumentsJson) {
+    try {
+        const parsed = JSON.parse(argumentsJson.trim() === "" ? "{}" : argumentsJson);
+        return asRecord(parsed);
+    }
+    catch {
+        return null;
+    }
+}
+export function withMcpStderr(text, tail) {
+    return tail && !text.includes("--- stderr ---") ? `${text}\n--- stderr ---\n${tail}` : text;
+}
+function callResultValue(res) {
+    if (res == null || typeof res !== "object")
+        return res;
+    const structured = readField(res, "structuredContent");
+    if (structured !== undefined)
+        return structured;
+    const content = readField(res, "content");
+    if (Array.isArray(content) && content.length === 1) {
+        const block = content[0];
+        if (typeof block === "object" && block !== null && readField(block, "type") === "text") {
+            return String(readField(block, "text") ?? "");
+        }
+    }
+    if (content !== undefined)
+        return content;
+    return res;
+}
+function diagnosticText(res, value) {
+    if (typeof value === "string" && value !== "")
+        return value;
+    if (res == null || typeof res !== "object")
+        return "mcp: tool reported failure";
+    const content = readField(res, "content");
+    if (Array.isArray(content)) {
+        const texts = content
+            .filter((block) => typeof block === "object" && block !== null && readField(block, "type") === "text")
+            .map((block) => (typeof block === "object" && block !== null ? String(readField(block, "text") ?? "") : ""));
+        if (texts.some((text) => text !== ""))
+            return texts.join("\n");
+    }
+    return "mcp: tool reported failure";
+}
+//# sourceMappingURL=mcp-result.js.map

package/dist/providers/mcp/mcp-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-result.js","sourceRoot":"","sources":["../../../src/providers/mcp/mcp-result.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAShD,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;QACjF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,aAAqB;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QACvF,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY;IACtD,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,qBAAqB,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9F,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACvD,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACvD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAChD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;YACvF,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC1C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,GAAY,EAAE,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,4BAA4B,CAAC;IAChF,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO;aAClB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC;aACrG,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/G,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,4BAA4B,CAAC;AACtC,CAAC"}

package/dist/providers/mcp/oauth.d.ts

@@ -0,0 +1,25 @@
+import type { ConnectionSecretsView } from "@inhuman.tools/plexus-expectations/driver";
+export type McpOAuthUi = (body: string) => Promise<Readonly<Record<string, unknown>>>;
+export type McpOAuthHost = {
+    readonly ui: McpOAuthUi;
+    /** The login request's abort: a client cancel while the browser sign-in waits. */
+    readonly signal?: AbortSignal;
+    writeSecrets(id: string, secrets: Readonly<Record<string, string>>): void;
+    readSecrets(id: string): Readonly<Record<string, string>>;
+};
+/** True when the error is HTTP 401/403 and no static bearer is configured. */
+export declare function isMcpAuthChallenge(error: unknown, secrets: ConnectionSecretsView, settings: {
+    readonly headers?: Readonly<Record<string, string>>;
+}): boolean;
+/** True when a 401/403 carries Protected Resource Metadata — OAuth, not a static token. */
+export declare function offersMcpOAuth(url: string, signal?: AbortSignal): Promise<boolean>;
+/**
+ * Authorization-code + PKCE through {@link authorizeInBrowser}.
+ * Pasted text that is not a redirect URL is a static token (OpenRouter dual path).
+ */
+export declare function collectMcpHttpOAuth(url: string, ui: McpOAuthUi, stored?: Readonly<Record<string, string>>, signal?: AbortSignal): Promise<Record<string, string>>;
+/** Refresh grant on this MCP row. Never a Grok/ChatGPT token. */
+export declare function refreshMcpHttpToken(stored: Readonly<Record<string, string>>): Promise<Record<string, string>>;
+export declare function loginMcpHttp(id: string, url: string, host: McpOAuthHost): Promise<void>;
+export declare function logoutMcpHttp(id: string, host: Pick<McpOAuthHost, "writeSecrets">): void;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/providers/mcp/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/providers/mcp/oauth.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AASvF,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAEtF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,kFAAkF;IAClF,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC;IAC1E,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC3D,CAAC;AAMF,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,qBAAqB,EAC9B,QAAQ,EAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,GAChE,OAAO,CAGT;AAED,2FAA2F;AAC3F,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAOxF;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,UAAU,EACd,MAAM,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,EAC7C,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA8FjC;AAED,iEAAiE;AACjE,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAuCnH;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7F;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,GAAG,IAAI,CAExF"}

package/dist/providers/mcp/oauth.js

@@ -0,0 +1,323 @@
+/**
+ * Spec-compliant MCP HTTP OAuth (401 → PRM → AS → PKCE).
+ * Tokens go in secrets.json. Static Authorization and OAuth are exclusive.
+ *
+ * Same sign-in as completion OIDC adopt: {@link authorizeInBrowser} parks
+ * `harness/open-url` and the daemon holds the loopback callback.
+ */
+import { createHash, randomBytes } from "node:crypto";
+import invariant from "tiny-invariant";
+import { authorizeInBrowser } from "../auth/index.js";
+import { wrapFetchFailure } from "./fetch.js";
+import { asExpiresIn, asNonEmpty, asRecord, asStringArray } from "./json.js";
+import { asAdoptString, schemeQuote } from "./quote.js";
+/** RFC 8252 portless loopback — DCR only. Authorize URL has no redirect_uri. */
+const LOOPBACK_REDIRECT = "http://127.0.0.1/callback";
+const AUTH_STATUS_RE = /401|403|unauthorized|forbidden/i;
+/** True when the error is HTTP 401/403 and no static bearer is configured. */
+export function isMcpAuthChallenge(error, secrets, settings) {
+    if (hasStaticBearer(secrets, settings))
+        return false;
+    return looksLikeAuthStatus(error);
+}
+/** True when a 401/403 carries Protected Resource Metadata — OAuth, not a static token. */
+export async function offersMcpOAuth(url, signal) {
+    try {
+        return parseResourceMetadata(await wwwAuthenticateFromMcp(url, signal)) !== "";
+    }
+    catch (error) {
+        if (isAbortError(error))
+            throw error;
+        return false;
+    }
+}
+/**
+ * Authorization-code + PKCE through {@link authorizeInBrowser}.
+ * Pasted text that is not a redirect URL is a static token (OpenRouter dual path).
+ */
+export async function collectMcpHttpOAuth(url, ui, stored = {}, signal) {
+    const resourceMetadataUrl = await resourceMetadataUrlFromMcp(url, signal);
+    const resourceMeta = asRecord(await fetchJson(resourceMetadataUrl, undefined, signal));
+    const authorizationServers = asStringArray(resourceMeta?.authorization_servers);
+    const issuer = authorizationServers[0];
+    invariant(issuer !== undefined, "mcp oauth: protected resource metadata has no authorization_servers");
+    const asMeta = asRecord(await fetchJson(authorizationServerMetadataUrl(issuer), undefined, signal));
+    const authorizationEndpoint = asNonEmpty(asMeta?.authorization_endpoint);
+    const tokenEndpoint = asNonEmpty(asMeta?.token_endpoint);
+    invariant(authorizationEndpoint !== undefined, "mcp oauth: authorization server metadata missing authorization_endpoint");
+    invariant(tokenEndpoint !== undefined, "mcp oauth: authorization server metadata missing token_endpoint");
+    const storedClientId = asNonEmpty(stored.client_id);
+    const storedClientSecret = asNonEmpty(stored.client_secret);
+    const registrationEndpoint = asNonEmpty(asMeta?.registration_endpoint);
+    let clientId = storedClientId ??
+        (registrationEndpoint === undefined ? "" : await registerPublicClient(registrationEndpoint, signal));
+    let clientSecret = storedClientSecret ?? "";
+    if (clientId === "") {
+        const registered = await resolveRegisteredClient(ui, asMeta);
+        clientId = registered.clientId;
+        clientSecret = registered.clientSecret;
+    }
+    invariant(clientId !== "", "mcp oauth: client_id is required — this authorization server has no dynamic registration");
+    const verifier = randomBytes(32).toString("base64url");
+    const challenge = createHash("sha256").update(verifier).digest("base64url");
+    const state = randomBytes(16).toString("base64url");
+    const authorize = new URL(authorizationEndpoint);
+    authorize.searchParams.set("response_type", "code");
+    authorize.searchParams.set("client_id", clientId);
+    authorize.searchParams.set("code_challenge", challenge);
+    authorize.searchParams.set("code_challenge_method", "S256");
+    authorize.searchParams.set("state", state);
+    const scopes = asStringArray(resourceMeta?.scopes_supported);
+    if (scopes.length > 0)
+        authorize.searchParams.set("scope", scopes.join(" "));
+    try {
+        authorize.searchParams.set("resource", new URL(url).toString());
+    }
+    catch {
+        /* RFC 8707 resource is optional when the MCP URL is not absolute */
+    }
+    const authorized = await authorizeInBrowser(ui, {
+        authUrl: authorize.toString(),
+        description: "Authorize MCP in the browser",
+        paste: "Or paste a token, or the address the browser ended on",
+        signal,
+    });
+    if ("pasted" in authorized)
+        return { token: authorized.pasted };
+    const { code, redirectUri } = authorized;
+    // Strict on a real callback: we always send state, so an absent param is a mismatch.
+    invariant(authorized.state === state, "mcp oauth: sign-in state mismatch");
+    const tokenBody = new URLSearchParams({
+        grant_type: "authorization_code",
+        code,
+        redirect_uri: redirectUri,
+        code_verifier: verifier,
+    });
+    tokenBody.set("client_id", clientId);
+    if (clientSecret !== "")
+        tokenBody.set("client_secret", clientSecret);
+    const tokens = asRecord(await fetchJson(tokenEndpoint, {
+        method: "POST",
+        headers: {
+            accept: "application/json",
+            "content-type": "application/x-www-form-urlencoded",
+        },
+        body: tokenBody,
+    }, signal));
+    const accessToken = asNonEmpty(tokens?.access_token);
+    if (accessToken === undefined)
+        throw new Error("mcp oauth: token exchange returned no access_token");
+    const expiresIn = asExpiresIn(tokens?.expires_in);
+    const expiresAt = expiresIn === undefined ? "" : String(Math.floor(Date.now() / 1000) + expiresIn);
+    return {
+        token: accessToken,
+        refresh_token: asNonEmpty(tokens?.refresh_token) ?? "",
+        token_type: asNonEmpty(tokens?.token_type) ?? "Bearer",
+        expires_at: expiresAt,
+        token_endpoint: tokenEndpoint,
+        client_id: clientId,
+        ...(clientSecret === "" ? {} : { client_secret: clientSecret }),
+    };
+}
+/** Refresh grant on this MCP row. Never a Grok/ChatGPT token. */
+export async function refreshMcpHttpToken(stored) {
+    const refreshToken = asNonEmpty(stored.refresh_token);
+    const tokenEndpoint = asNonEmpty(stored.token_endpoint);
+    const clientId = asNonEmpty(stored.client_id);
+    invariant(refreshToken !== undefined, "mcp oauth: no refresh_token");
+    invariant(tokenEndpoint !== undefined, "mcp oauth: no token_endpoint");
+    invariant(clientId !== undefined, "mcp oauth: no client_id");
+    const tokenBody = new URLSearchParams({
+        grant_type: "refresh_token",
+        refresh_token: refreshToken,
+        client_id: clientId,
+    });
+    const clientSecret = asNonEmpty(stored.client_secret);
+    if (clientSecret !== undefined)
+        tokenBody.set("client_secret", clientSecret);
+    const tokens = asRecord(await fetchJson(tokenEndpoint, {
+        method: "POST",
+        headers: {
+            accept: "application/json",
+            "content-type": "application/x-www-form-urlencoded",
+        },
+        body: tokenBody,
+    }));
+    const accessToken = asNonEmpty(tokens?.access_token);
+    if (accessToken === undefined)
+        throw new Error("mcp oauth: refresh returned no access_token");
+    const expiresIn = asExpiresIn(tokens?.expires_in);
+    const expiresAt = expiresIn === undefined ? (stored.expires_at ?? "") : String(Math.floor(Date.now() / 1000) + expiresIn);
+    return {
+        ...Object.fromEntries(Object.entries(stored).filter(([, value]) => value !== "")),
+        token: accessToken,
+        refresh_token: asNonEmpty(tokens?.refresh_token) ?? refreshToken,
+        token_type: asNonEmpty(tokens?.token_type) ?? stored.token_type ?? "Bearer",
+        expires_at: expiresAt,
+        token_endpoint: tokenEndpoint,
+        client_id: clientId,
+        ...(clientSecret === undefined ? {} : { client_secret: clientSecret }),
+    };
+}
+export async function loginMcpHttp(id, url, host) {
+    host.writeSecrets(id, await collectMcpHttpOAuth(url, host.ui, host.readSecrets(id), host.signal));
+}
+export function logoutMcpHttp(id, host) {
+    host.writeSecrets(id, {});
+}
+function hasStaticBearer(secrets, settings) {
+    const token = secrets.get("token");
+    const apiKey = secrets.get("apiKey");
+    const header = settings.headers?.Authorization;
+    return ((typeof token === "string" && token !== "") ||
+        (typeof apiKey === "string" && apiKey !== "") ||
+        (typeof header === "string" && header !== ""));
+}
+function looksLikeAuthStatus(error) {
+    let current = error;
+    for (let i = 0; i < 4 && current != null; i++) {
+        if (typeof current === "string")
+            return AUTH_STATUS_RE.test(current);
+        if (typeof current === "object") {
+            const rec = current;
+            if (isUnauthorizedCode(rec.status) || isUnauthorizedCode(rec.code))
+                return true;
+            if (typeof rec.message === "string" && AUTH_STATUS_RE.test(rec.message))
+                return true;
+            current = rec.cause;
+            continue;
+        }
+        return false;
+    }
+    return false;
+}
+function isUnauthorizedCode(value) {
+    return value === 401 || value === 403 || value === "401" || value === "403";
+}
+function isAbortError(error) {
+    return error instanceof Error && error.name === "AbortError";
+}
+function throwFetch(error, opts) {
+    if (isAbortError(error))
+        throw error;
+    throw wrapFetchFailure(error, { why: "mcp oauth", method: opts.method, url: opts.url });
+}
+async function resourceMetadataUrlFromMcp(url, signal) {
+    const header = await wwwAuthenticateFromMcp(url, signal);
+    const metadata = parseResourceMetadata(header);
+    if (metadata === "")
+        throw new Error("mcp oauth: WWW-Authenticate missing resource_metadata");
+    try {
+        return new URL(metadata, url).toString();
+    }
+    catch {
+        return metadata;
+    }
+}
+async function wwwAuthenticateFromMcp(url, signal) {
+    let post;
+    try {
+        post = await fetch(url, {
+            method: "POST",
+            headers: {
+                accept: "application/json, text/event-stream",
+                "content-type": "application/json",
+            },
+            body: "{}",
+            signal,
+        });
+    }
+    catch (error) {
+        throwFetch(error, { method: "POST", url });
+    }
+    await post.arrayBuffer().catch(() => undefined);
+    if (post.status === 401 || post.status === 403) {
+        return post.headers.get("www-authenticate") ?? "";
+    }
+    let get;
+    try {
+        get = await fetch(url, {
+            method: "GET",
+            headers: { accept: "application/json" },
+            signal,
+        });
+    }
+    catch (error) {
+        throwFetch(error, { method: "GET", url });
+    }
+    await get.arrayBuffer().catch(() => undefined);
+    if (get.status === 401 || get.status === 403) {
+        return get.headers.get("www-authenticate") ?? "";
+    }
+    throw new Error(`mcp oauth: expected 401 from ${url}, got ${post.status}`);
+}
+function parseResourceMetadata(header) {
+    const match = header.match(/resource_metadata=(?:"([^"]+)"|([^\s,]+))/i);
+    return (match?.[1] ?? match?.[2] ?? "").trim();
+}
+function authorizationServerMetadataUrl(issuer) {
+    const parsed = new URL(issuer);
+    const path = parsed.pathname.replace(/\/+$/, "");
+    parsed.pathname = `/.well-known/oauth-authorization-server${path}`;
+    parsed.search = "";
+    parsed.hash = "";
+    return parsed.toString();
+}
+async function resolveRegisteredClient(ui, asMeta) {
+    const docs = asNonEmpty(asMeta?.service_documentation);
+    const description = "This authorization server has no dynamic registration. Create an OAuth or GitHub App with callback http://127.0.0.1/callback, then paste the client ID.";
+    const idInput = `(harness/input :name "OAuth client ID" :description ${schemeQuote(description)})`;
+    let idAnswer = await ui(docs === undefined
+        ? idInput
+        : `(harness/open-url :url ${schemeQuote(docs)} :name "OAuth client ID" :description ${schemeQuote(description)} :input 'text)`);
+    // An empty field on the docs park opens the link (`opened`); the client ID is still owed.
+    if (idAnswer.kind === "opened")
+        idAnswer = await ui(idInput);
+    const clientId = asAdoptString(idAnswer.input);
+    invariant(clientId !== "", "mcp oauth: client_id is required — this authorization server has no dynamic registration");
+    const secretAnswer = await ui(`(harness/input :name "OAuth client secret" :description ${schemeQuote("Optional. GitHub OAuth Apps need this to exchange the code.")} :secret #t)`);
+    return { clientId, clientSecret: asAdoptString(secretAnswer.input) };
+}
+async function registerPublicClient(registrationEndpoint, signal) {
+    const rec = asRecord(await fetchJson(registrationEndpoint, {
+        method: "POST",
+        headers: {
+            accept: "application/json",
+            "content-type": "application/json",
+        },
+        body: JSON.stringify({
+            client_name: "Harness",
+            redirect_uris: [LOOPBACK_REDIRECT],
+            grant_types: ["authorization_code", "refresh_token"],
+            response_types: ["code"],
+            token_endpoint_auth_method: "none",
+        }),
+    }, signal));
+    const clientId = asNonEmpty(rec?.client_id);
+    if (clientId === undefined)
+        throw new Error("mcp oauth: dynamic client registration returned no client_id");
+    return clientId;
+}
+async function fetchJson(url, init, signal) {
+    let response;
+    try {
+        response = await fetch(url, signal == null ? init : { ...init, signal });
+    }
+    catch (error) {
+        throwFetch(error, {
+            method: typeof init?.method === "string" && init.method.trim() !== "" ? init.method : "GET",
+            url,
+        });
+    }
+    const text = await response.text().catch(() => "");
+    invariant(response.ok, `mcp oauth: ${response.status} ${url}${text === "" ? "" : `: ${text}`}`);
+    if (text === "")
+        return {};
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new Error(`mcp oauth: invalid JSON from ${url}`);
+    }
+}
+//# sourceMappingURL=oauth.js.map

package/dist/providers/mcp/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/providers/mcp/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAGtD,OAAO,SAAS,MAAM,gBAAgB,CAAC;AAEvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAYxD,gFAAgF;AAChF,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AACtD,MAAM,cAAc,GAAG,iCAAiC,CAAC;AAEzD,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAChC,KAAc,EACd,OAA8B,EAC9B,QAAiE;IAEjE,IAAI,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,MAAoB;IACpE,IAAI,CAAC;QACH,OAAO,qBAAqB,CAAC,MAAM,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,YAAY,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAW,EACX,EAAc,EACd,SAA2C,EAAE,EAC7C,MAAoB;IAEpB,MAAM,mBAAmB,GAAG,MAAM,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,SAAS,CAAC,mBAAmB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACvF,MAAM,oBAAoB,GAAG,aAAa,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACvC,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,qEAAqE,CAAC,CAAC;IACvG,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,SAAS,CAAC,8BAA8B,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACpG,MAAM,qBAAqB,GAAG,UAAU,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzD,SAAS,CACP,qBAAqB,KAAK,SAAS,EACnC,yEAAyE,CAC1E,CAAC;IACF,SAAS,CAAC,aAAa,KAAK,SAAS,EAAE,iEAAiE,CAAC,CAAC;IAC1G,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,kBAAkB,GAAG,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,oBAAoB,GAAG,UAAU,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACvE,IAAI,QAAQ,GACV,cAAc;QACd,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC;IACvG,IAAI,YAAY,GAAG,kBAAkB,IAAI,EAAE,CAAC;IAC5C,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7D,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QAC/B,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IACzC,CAAC;IACD,SAAS,CACP,QAAQ,KAAK,EAAE,EACf,0FAA0F,CAC3F,CAAC;IAEF,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACjD,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACpD,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACxD,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IAC5D,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE;QAC9C,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE;QAC7B,WAAW,EAAE,8BAA8B;QAC3C,KAAK,EAAE,uDAAuD;QAC9D,MAAM;KACP,CAAC,CAAC;IACH,IAAI,QAAQ,IAAI,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;IAChE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC;IACzC,qFAAqF;IACrF,SAAS,CAAC,UAAU,CAAC,KAAK,KAAK,KAAK,EAAE,mCAAmC,CAAC,CAAC;IAE3E,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QACpC,UAAU,EAAE,oBAAoB;QAChC,IAAI;QACJ,YAAY,EAAE,WAAW;QACzB,aAAa,EAAE,QAAQ;KACxB,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrC,IAAI,YAAY,KAAK,EAAE;QAAE,SAAS,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,QAAQ,CACrB,MAAM,SAAS,CACb,aAAa,EACb;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,SAAS;KAChB,EACD,MAAM,CACP,CACF,CAAC;IACF,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,WAAW,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACrG,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;IACnG,OAAO;QACL,KAAK,EAAE,WAAW;QAClB,aAAa,EAAE,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,EAAE;QACtD,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,QAAQ;QACtD,UAAU,EAAE,SAAS;QACrB,cAAc,EAAE,aAAa;QAC7B,SAAS,EAAE,QAAQ;QACnB,GAAG,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAwC;IAChF,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9C,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,6BAA6B,CAAC,CAAC;IACrE,SAAS,CAAC,aAAa,KAAK,SAAS,EAAE,8BAA8B,CAAC,CAAC;IACvE,SAAS,CAAC,QAAQ,KAAK,SAAS,EAAE,yBAAyB,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QACpC,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,YAAY,KAAK,SAAS;QAAE,SAAS,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,QAAQ,CACrB,MAAM,SAAS,CAAC,aAAa,EAAE;QAC7B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,SAAS;KAChB,CAAC,CACH,CAAC;IACF,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,WAAW,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC9F,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,SAAS,GACb,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;IAC1G,OAAO;QACL,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QACjF,KAAK,EAAE,WAAW;QAClB,aAAa,EAAE,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,YAAY;QAChE,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,IAAI,QAAQ;QAC3E,UAAU,EAAE,SAAS;QACrB,cAAc,EAAE,aAAa;QAC7B,SAAS,EAAE,QAAQ;QACnB,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAU,EAAE,GAAW,EAAE,IAAkB;IAC5E,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU,EAAE,IAAwC;IAChF,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,eAAe,CACtB,OAA8B,EAC9B,QAAiE;IAEjE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAC/C,OAAO,CACL,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3C,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,CAAC;QAC7C,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,GAAY,KAAK,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,OAKX,CAAC;YACF,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAChF,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrF,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC;YACpB,SAAS;QACX,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;AAC/D,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAqC;IACvE,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC;IACrC,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,GAAW,EAAE,MAAoB;IACzE,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,QAAQ,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC9F,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,GAAW,EAAE,MAAoB;IACrE,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACtB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,qCAAqC;gBAC7C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI;YACV,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7C,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACzE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,8BAA8B,CAAC,MAAc;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,CAAC,QAAQ,GAAG,0CAA0C,IAAI,EAAE,CAAC;IACnE,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,EAAc,EACd,MAAsC;IAEtC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACvD,MAAM,WAAW,GACf,yJAAyJ,CAAC;IAC5J,MAAM,OAAO,GAAG,uDAAuD,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC;IACnG,IAAI,QAAQ,GAAG,MAAM,EAAE,CACrB,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,0BAA0B,WAAW,CAAC,IAAI,CAAC,yCAAyC,WAAW,CAAC,WAAW,CAAC,gBAAgB,CACjI,CAAC;IACF,0FAA0F;IAC1F,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;QAAE,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/C,SAAS,CACP,QAAQ,KAAK,EAAE,EACf,0FAA0F,CAC3F,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,EAAE,CAC3B,2DAA2D,WAAW,CAAC,6DAA6D,CAAC,cAAc,CACpJ,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,oBAA4B,EAAE,MAAoB;IACpF,MAAM,GAAG,GAAG,QAAQ,CAClB,MAAM,SAAS,CACb,oBAAoB,EACpB;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,WAAW,EAAE,SAAS;YACtB,aAAa,EAAE,CAAC,iBAAiB,CAAC;YAClC,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YACpD,cAAc,EAAE,CAAC,MAAM,CAAC;YACxB,0BAA0B,EAAE,MAAM;SACnC,CAAC;KACH,EACD,MAAM,CACP,CACF,CAAC;IACF,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAC5G,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,IAAkB,EAAE,MAAoB;IAC5E,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,KAAK,EAAE;YAChB,MAAM,EAAE,OAAO,IAAI,EAAE,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;YAC3F,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,cAAc,QAAQ,CAAC,MAAM,IAAI,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;IAChG,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}