@inso_web/els-mcp 0.1.0

package/dist/cache/wrapper.d.ts

@@ -0,0 +1,38 @@
+import type { Logger } from 'pino';
+import type { RedisService } from './redis.js';
+export interface CacheServiceDeps {
+    redis: RedisService;
+    log?: Logger;
+    /** Tool-class label, используется в метриках. По умолчанию — извлекается из key. */
+    toolClass?: string;
+}
+export interface CacheOptions {
+    /** Tool-class для метрик. Если не задан — берётся из CacheServiceDeps. */
+    toolClass?: string;
+    /** Bypass cache (всегда вызывать loader). */
+    bypass?: boolean;
+}
+export declare class CacheService {
+    private readonly deps;
+    constructor(deps: CacheServiceDeps);
+    /**
+     * Lookup-aside fetch.
+     *
+     * Loader НЕ вызывается, если был cache hit. Ошибки loader'а — пробрасываются
+     * (не кэшируем negative result).
+     */
+    cached<T>(key: string, ttlSec: number, loader: () => Promise<T>, opts?: CacheOptions): Promise<{
+        value: T;
+        cached: boolean;
+    }>;
+}
+/**
+ * Static convenience helper (для случаев без CacheService instance).
+ *
+ * НЕ рекомендуется в production коде — используйте `CacheService.cached()`.
+ */
+export declare function cached<T>(redis: RedisService, key: string, ttlSec: number, loader: () => Promise<T>, log?: Logger): Promise<{
+    value: T;
+    cached: boolean;
+}>;
+//# sourceMappingURL=wrapper.d.ts.map

package/dist/cache/wrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapper.d.ts","sourceRoot":"","sources":["../../src/cache/wrapper.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAuB/C,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,YAAY,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,gBAAgB;IAEnD;;;;;OAKG;IACG,MAAM,CAAC,CAAC,EACZ,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACxB,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC;QAAE,KAAK,EAAE,CAAC,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;CAkD1C;AAED;;;;GAIG;AACH,wBAAsB,MAAM,CAAC,CAAC,EAC5B,KAAK,EAAE,YAAY,EACnB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACxB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,KAAK,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAGxC"}

package/dist/cache/wrapper.js

@@ -0,0 +1,109 @@
+import { gzipSync, gunzipSync } from 'node:zlib';
+import { recordCacheHit, recordCacheMiss } from '../observability/metrics.js';
+/**
+ * Lookup-aside cache wrapper.
+ *
+ * Алгоритм:
+ *   1. GET key → если HIT, парсим JSON (с gzip-распаковкой если нужно), отдаём.
+ *   2. Если MISS — вызываем loader(), сохраняем результат с TTL через SETEX.
+ *   3. На любых ошибках Redis — graceful degradation: loader() вызывается всегда.
+ *
+ * Compression: значения > `COMPRESSION_THRESHOLD_BYTES` (10 KB) — gzip + base64.
+ * Префикс `gz:` помечает сжатые значения.
+ *
+ * Negative cache: НЕ реализован в Phase 4 (loader-исключения не кэшируются).
+ *
+ * Tenant-isolation: cache key обязан содержать appSlug/keyPrefix.
+ * Это обеспечивает `tenantKey()` в `policies.ts`.
+ */
+const COMPRESSION_THRESHOLD_BYTES = 10 * 1024;
+const COMPRESSION_PREFIX = 'gz:';
+export class CacheService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /**
+     * Lookup-aside fetch.
+     *
+     * Loader НЕ вызывается, если был cache hit. Ошибки loader'а — пробрасываются
+     * (не кэшируем negative result).
+     */
+    async cached(key, ttlSec, loader, opts = {}) {
+        const toolClass = opts.toolClass ?? this.deps.toolClass ?? inferToolClass(key);
+        if (opts.bypass || this.deps.redis.unavailable) {
+            const value = await loader();
+            recordCacheMiss(toolClass);
+            return { value, cached: false };
+        }
+        // 1. Lookup
+        let raw = null;
+        try {
+            raw = await this.deps.redis.get(key);
+        }
+        catch (err) {
+            this.deps.log?.warn?.({ err: err.message, key }, 'cache GET failed');
+        }
+        if (raw !== null) {
+            try {
+                const parsed = decodeCacheValue(raw);
+                recordCacheHit(toolClass);
+                return { value: parsed, cached: true };
+            }
+            catch (err) {
+                // Поломанная запись (битый JSON / битый gzip) — игнорируем, идём в loader.
+                this.deps.log?.warn?.({ err: err.message, key }, 'cache value decode failed, falling back to loader');
+            }
+        }
+        // 2. Miss → loader
+        recordCacheMiss(toolClass);
+        const value = await loader();
+        // 3. Store (best-effort, не блокируем при ошибке)
+        if (value !== undefined && ttlSec > 0) {
+            try {
+                const encoded = encodeCacheValue(value);
+                await this.deps.redis.setex(key, ttlSec, encoded);
+            }
+            catch (err) {
+                this.deps.log?.warn?.({ err: err.message, key }, 'cache SETEX failed (continuing)');
+            }
+        }
+        return { value, cached: false };
+    }
+}
+/**
+ * Static convenience helper (для случаев без CacheService instance).
+ *
+ * НЕ рекомендуется в production коде — используйте `CacheService.cached()`.
+ */
+export async function cached(redis, key, ttlSec, loader, log) {
+    const svc = new CacheService({ redis, ...(log !== undefined ? { log } : {}) });
+    return svc.cached(key, ttlSec, loader);
+}
+// ─── Serialization helpers ──────────────────────────────────────────────────
+function encodeCacheValue(value) {
+    const json = JSON.stringify(value);
+    if (json.length <= COMPRESSION_THRESHOLD_BYTES)
+        return json;
+    // gzip + base64 для значений > 10KB
+    const compressed = gzipSync(Buffer.from(json, 'utf-8'));
+    return COMPRESSION_PREFIX + compressed.toString('base64');
+}
+function decodeCacheValue(raw) {
+    if (raw.startsWith(COMPRESSION_PREFIX)) {
+        const buf = Buffer.from(raw.slice(COMPRESSION_PREFIX.length), 'base64');
+        const json = gunzipSync(buf).toString('utf-8');
+        return JSON.parse(json);
+    }
+    return JSON.parse(raw);
+}
+/**
+ * Извлекает tool-class из cache key `mcp:cache:{class}:{tenant}:...`.
+ * Используется как fallback для метрик, если caller не указал явно.
+ */
+function inferToolClass(key) {
+    const parts = key.split(':');
+    // mcp:cache:{class}:...
+    return parts[2] ?? 'unknown';
+}
+//# sourceMappingURL=wrapper.js.map

package/dist/cache/wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapper.js","sourceRoot":"","sources":["../../src/cache/wrapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAGjD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9E;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,2BAA2B,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9C,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAgBjC,MAAM,OAAO,YAAY;IACM;IAA7B,YAA6B,IAAsB;QAAtB,SAAI,GAAJ,IAAI,CAAkB;IAAG,CAAC;IAEvD;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,GAAW,EACX,MAAc,EACd,MAAwB,EACxB,OAAqB,EAAE;QAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;QAE/E,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC;YAC7B,eAAe,CAAC,SAAS,CAAC,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAClC,CAAC;QAED,YAAY;QACZ,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,gBAAgB,CAAI,GAAG,CAAC,CAAC;gBACxC,cAAc,CAAC,SAAS,CAAC,CAAC;gBAC1B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,2EAA2E;gBAC3E,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CACnB,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,GAAG,EAAE,EACpC,mDAAmD,CACpD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC;QAE7B,kDAAkD;QAClD,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACxC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CACnB,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,GAAG,EAAE,EACpC,iCAAiC,CAClC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAClC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,KAAmB,EACnB,GAAW,EACX,MAAc,EACd,MAAwB,EACxB,GAAY;IAEZ,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/E,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,+EAA+E;AAE/E,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,IAAI,2BAA2B;QAAE,OAAO,IAAI,CAAC;IAC5D,oCAAoC;IACpC,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,OAAO,kBAAkB,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,gBAAgB,CAAI,GAAW;IACtC,IAAI,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,wBAAwB;IACxB,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;AAC/B,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+// Phase 6: OpenTelemetry instrumentation должен импортироваться ПЕРВЫМ —
+// до любых других модулей, которые SDK инструментирует (http/undici/express/ioredis).
+import { initInstrumentation } from './instrumentation.js';
+import pino from 'pino';
+import { loadConfig } from './config.js';
+import { createMcpServer } from './server.js';
+import { connectStdio } from './transports/stdio.js';
+import { startHttpServer } from './transports/http-server.js';
+/**
+ * CLI entry point. Выбирает транспорт по `MCP_TRANSPORT`:
+ *   - `stdio` (default) — child-process для Claude Desktop / mcp-inspector.
+ *   - `http`            — Streamable HTTP + OIDC для hosted endpoint.
+ *
+ * Использование:
+ *   ELS_API_KEY=els_live_... npx els-mcp                  # stdio
+ *   MCP_TRANSPORT=http MCP_HTTP_PORT=3030 npx els-mcp     # HTTP
+ *
+ * Все логи — в stderr (stdout зарезервирован под JSON-RPC при stdio).
+ */
+async function main() {
+    // 1. OTel — early init (no-op если OTEL_EXPORTER_OTLP_ENDPOINT не задан).
+    const tracing = await initInstrumentation();
+    let config;
+    try {
+        config = loadConfig(process.env);
+    }
+    catch (err) {
+        process.stderr.write(`[els-mcp] Config error: ${err instanceof Error ? err.message : String(err)}\n`);
+        process.exit(1);
+    }
+    // Pino всегда в stderr — для stdio это обязательно, для HTTP — единый стиль.
+    const log = pino({ level: config.logLevel, name: 'els-mcp' }, pino.destination({ dest: 2, sync: false }));
+    if (tracing.enabled) {
+        log.info('OpenTelemetry tracing enabled');
+    }
+    if (config.transport === 'http') {
+        await runHttp(config, log, tracing);
+    }
+    else {
+        await runStdio(config, log, tracing);
+    }
+}
+async function runStdio(config, log, tracing) {
+    const { server, client } = createMcpServer({ config, log });
+    const shutdown = async (signal) => {
+        log.info({ signal }, 'Shutting down');
+        try {
+            await server.close();
+            await client.close();
+            await tracing.shutdown();
+        }
+        catch (err) {
+            log.error({ err }, 'Error during shutdown');
+        }
+        process.exit(0);
+    };
+    process.on('SIGINT', () => void shutdown('SIGINT'));
+    process.on('SIGTERM', () => void shutdown('SIGTERM'));
+    try {
+        await connectStdio(server);
+        log.info('MCP stdio transport ready');
+    }
+    catch (err) {
+        log.error({ err }, 'Failed to start stdio transport');
+        process.exit(1);
+    }
+}
+async function runHttp(config, log, tracing) {
+    const handle = await startHttpServer({ config, log });
+    const shutdown = async (signal) => {
+        log.info({ signal }, 'Shutting down');
+        try {
+            await handle.close();
+            await tracing.shutdown();
+        }
+        catch (err) {
+            log.error({ err }, 'Error during shutdown');
+        }
+        process.exit(0);
+    };
+    process.on('SIGINT', () => void shutdown('SIGINT'));
+    process.on('SIGTERM', () => void shutdown('SIGTERM'));
+}
+void main();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,yEAAyE;AACzE,sFAAsF;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,IAAqB,MAAM,MAAM,CAAC;AACzC,OAAO,EAAE,UAAU,EAAe,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D;;;;;;;;;;GAUG;AACH,KAAK,UAAU,IAAI;IACjB,0EAA0E;IAC1E,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAE5C,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAChF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,6EAA6E;IAC7E,MAAM,GAAG,GAAW,IAAI,CACtB,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAC3C,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAC3C,CAAC;IAEF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAChC,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAAc,EACd,GAAW,EACX,OAA0C;IAE1C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAE5D,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,uBAAuB,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,iCAAiC,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,MAAc,EACd,GAAW,EACX,OAA0C;IAE1C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAEtD,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,uBAAuB,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,IAAI,EAAE,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,105 @@
+import { z } from 'zod';
+export declare const TransportSchema: z.ZodEnum<["stdio", "http"]>;
+export type Transport = z.infer<typeof TransportSchema>;
+export declare const ConfigSchema: z.ZodObject<{
+    /**
+     * ELS API key для stdio transport / fallback. В HTTP-режиме ключ берётся
+     * из заголовка `Authorization: Bearer els_...` запроса.
+     */
+    elsApiKey: z.ZodDefault<z.ZodString>;
+    elsBaseUrl: z.ZodString;
+    logLevel: z.ZodDefault<z.ZodEnum<["trace", "debug", "info", "warn", "error", "fatal"]>>;
+    disabledTools: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /**
+     * Таймаут upstream-запроса в ELS, мс. В Phase 1 единый таймаут 30s;
+     * в Phase 5 разделим на ELS=25s и AI=60s.
+     */
+    upstreamTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    transport: z.ZodDefault<z.ZodEnum<["stdio", "http"]>>;
+    httpPort: z.ZodDefault<z.ZodNumber>;
+    oidcIssuer: z.ZodDefault<z.ZodString>;
+    oidcJwksUrl: z.ZodString;
+    oidcAudience: z.ZodDefault<z.ZodString>;
+    /**
+     * Временный workaround Phase 3: маппинг любого OIDC-юзера на один appSlug,
+     * пока не реализован полноценный resolver через LK API. TODO Phase 4.
+     */
+    oidcDemoAppSlug: z.ZodOptional<z.ZodString>;
+    publicUrl: z.ZodDefault<z.ZodString>;
+    corsOrigins: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Включена ли PII-редакция в ответах tools. */
+    redactionEnabled: z.ZodDefault<z.ZodBoolean>;
+    /** Whitelist полей для редакции (пусто → редактим все известные). */
+    redactionFields: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Postgres connection для audit/usage. Если пусто — модули в no-op. */
+    mcpDatabaseUrl: z.ZodOptional<z.ZodString>;
+    /** AppId по умолчанию (для stdio-mode, когда контекст не задан). */
+    defaultAppId: z.ZodDefault<z.ZodString>;
+    /** Tier по умолчанию (для stdio-mode / прокси-режима). */
+    defaultTier: z.ZodDefault<z.ZodEnum<["FREE", "STANDARD", "PREMIUM", "UNLIMITED"]>>;
+    /** Redis URL для cache layer. */
+    redisUrl: z.ZodDefault<z.ZodString>;
+    /** Включить cache layer. Если false — методы CachedElsClient прозрачно прокидываются в ElsClient. */
+    cacheEnabled: z.ZodDefault<z.ZodBoolean>;
+    /**
+     * Per-class TTL overrides. Ключи — имена CacheClass из `cache/policies.ts`.
+     * Значения — секунды (целые ≥ 0; 0 эффективно отключает кэш для класса).
+     * Source ENV: `MCP_CACHE_TTL_OVERRIDE_<CLASS>` (напр. `MCP_CACHE_TTL_OVERRIDE_LOG_DETAILS=7200`).
+     */
+    cacheTtlOverrides: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodNumber>>;
+    /** Включить Prometheus metrics endpoint (`/els/metrics`). */
+    metricsEnabled: z.ZodDefault<z.ZodBoolean>;
+    /** OTLP endpoint для OpenTelemetry traces. Если не задан — tracing disabled. */
+    otelExporterOtlpEndpoint: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    elsApiKey: string;
+    elsBaseUrl: string;
+    logLevel: "fatal" | "error" | "warn" | "info" | "debug" | "trace";
+    disabledTools: string[];
+    upstreamTimeoutMs: number;
+    transport: "stdio" | "http";
+    httpPort: number;
+    oidcIssuer: string;
+    oidcJwksUrl: string;
+    oidcAudience: string;
+    publicUrl: string;
+    corsOrigins: string[];
+    redactionEnabled: boolean;
+    redactionFields: string[];
+    defaultAppId: string;
+    defaultTier: "FREE" | "STANDARD" | "PREMIUM" | "UNLIMITED";
+    redisUrl: string;
+    cacheEnabled: boolean;
+    cacheTtlOverrides: Record<string, number>;
+    metricsEnabled: boolean;
+    oidcDemoAppSlug?: string | undefined;
+    mcpDatabaseUrl?: string | undefined;
+    otelExporterOtlpEndpoint?: string | undefined;
+}, {
+    elsBaseUrl: string;
+    oidcJwksUrl: string;
+    elsApiKey?: string | undefined;
+    logLevel?: "fatal" | "error" | "warn" | "info" | "debug" | "trace" | undefined;
+    disabledTools?: string[] | undefined;
+    upstreamTimeoutMs?: number | undefined;
+    transport?: "stdio" | "http" | undefined;
+    httpPort?: number | undefined;
+    oidcIssuer?: string | undefined;
+    oidcAudience?: string | undefined;
+    oidcDemoAppSlug?: string | undefined;
+    publicUrl?: string | undefined;
+    corsOrigins?: string[] | undefined;
+    redactionEnabled?: boolean | undefined;
+    redactionFields?: string[] | undefined;
+    mcpDatabaseUrl?: string | undefined;
+    defaultAppId?: string | undefined;
+    defaultTier?: "FREE" | "STANDARD" | "PREMIUM" | "UNLIMITED" | undefined;
+    redisUrl?: string | undefined;
+    cacheEnabled?: boolean | undefined;
+    cacheTtlOverrides?: Record<string, number> | undefined;
+    metricsEnabled?: boolean | undefined;
+    otelExporterOtlpEndpoint?: string | undefined;
+}>;
+export type Config = z.infer<typeof ConfigSchema>;
+export declare function loadConfig(env?: NodeJS.ProcessEnv): Config;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB,eAAO,MAAM,eAAe,8BAA4B,CAAC;AACzD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,YAAY;IACvB;;;OAGG;;;;;IAKH;;;OAGG;;;;;;;IAWH;;;OAGG;;;;IAQH,gDAAgD;;IAEhD,qEAAqE;;IAErE,wEAAwE;;IAExE,oEAAoE;;IAEpE,0DAA0D;;IAI1D,iCAAiC;;IAEjC,qGAAqG;;IAErG;;;;OAIG;;IAEH,6DAA6D;;IAE7D,gFAAgF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEhF,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAuDlD,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAqDvE"}

package/dist/config.js

@@ -0,0 +1,211 @@
+import { z } from 'zod';
+/**
+ * Парсинг и валидация переменных окружения для ELS MCP сервера.
+ *
+ * Источники: process.env. Phase 3 добавляет параметры HTTP-транспорта и OIDC.
+ */
+const DEFAULT_BASE_URL_DEV = 'http://localhost:4010';
+const DEFAULT_BASE_URL_PROD = 'https://api.insoweb.ru/els';
+const DEFAULT_OIDC_ISSUER = 'https://auth.insoweb.ru';
+const DEFAULT_PUBLIC_URL = 'https://mcp.insoweb.ru/els';
+const DEFAULT_CORS_ORIGINS = 'https://claude.ai,https://chat.openai.com';
+export const TransportSchema = z.enum(['stdio', 'http']);
+export const ConfigSchema = z.object({
+    /**
+     * ELS API key для stdio transport / fallback. В HTTP-режиме ключ берётся
+     * из заголовка `Authorization: Bearer els_...` запроса.
+     */
+    elsApiKey: z.string().default(''),
+    elsBaseUrl: z.string().url(),
+    logLevel: z.enum(['trace', 'debug', 'info', 'warn', 'error', 'fatal']).default('info'),
+    disabledTools: z.array(z.string()).default([]),
+    /**
+     * Таймаут upstream-запроса в ELS, мс. В Phase 1 единый таймаут 30s;
+     * в Phase 5 разделим на ELS=25s и AI=60s.
+     */
+    upstreamTimeoutMs: z.number().int().positive().default(30_000),
+    // ─── Phase 3: HTTP transport ───────────────────────────────────────────
+    transport: TransportSchema.default('stdio'),
+    httpPort: z.number().int().positive().default(3030),
+    // ─── Phase 3: OIDC ─────────────────────────────────────────────────────
+    oidcIssuer: z.string().url().default(DEFAULT_OIDC_ISSUER),
+    oidcJwksUrl: z.string().url(),
+    oidcAudience: z.string().default('els-mcp'),
+    /**
+     * Временный workaround Phase 3: маппинг любого OIDC-юзера на один appSlug,
+     * пока не реализован полноценный resolver через LK API. TODO Phase 4.
+     */
+    oidcDemoAppSlug: z.string().optional(),
+    // ─── Phase 3: discovery / CORS ─────────────────────────────────────────
+    publicUrl: z.string().url().default(DEFAULT_PUBLIC_URL),
+    corsOrigins: z.array(z.string()).default([]),
+    // ─── Phase 5: PII-redaction + audit + billing ──────────────────────────
+    /** Включена ли PII-редакция в ответах tools. */
+    redactionEnabled: z.boolean().default(true),
+    /** Whitelist полей для редакции (пусто → редактим все известные). */
+    redactionFields: z.array(z.string()).default([]),
+    /** Postgres connection для audit/usage. Если пусто — модули в no-op. */
+    mcpDatabaseUrl: z.string().optional(),
+    /** AppId по умолчанию (для stdio-mode, когда контекст не задан). */
+    defaultAppId: z.string().default('default'),
+    /** Tier по умолчанию (для stdio-mode / прокси-режима). */
+    defaultTier: z.enum(['FREE', 'STANDARD', 'PREMIUM', 'UNLIMITED']).default('STANDARD'),
+    // ─── Phase 4: Cache & Observability ────────────────────────────────────
+    /** Redis URL для cache layer. */
+    redisUrl: z.string().default('redis://localhost:6379'),
+    /** Включить cache layer. Если false — методы CachedElsClient прозрачно прокидываются в ElsClient. */
+    cacheEnabled: z.boolean().default(true),
+    /**
+     * Per-class TTL overrides. Ключи — имена CacheClass из `cache/policies.ts`.
+     * Значения — секунды (целые ≥ 0; 0 эффективно отключает кэш для класса).
+     * Source ENV: `MCP_CACHE_TTL_OVERRIDE_<CLASS>` (напр. `MCP_CACHE_TTL_OVERRIDE_LOG_DETAILS=7200`).
+     */
+    cacheTtlOverrides: z.record(z.string(), z.number().int().nonnegative()).default({}),
+    /** Включить Prometheus metrics endpoint (`/els/metrics`). */
+    metricsEnabled: z.boolean().default(true),
+    /** OTLP endpoint для OpenTelemetry traces. Если не задан — tracing disabled. */
+    otelExporterOtlpEndpoint: z.string().optional(),
+});
+function pickBaseUrl(envBase, nodeEnv) {
+    if (envBase && envBase.trim().length > 0)
+        return envBase.trim();
+    if (nodeEnv === 'production')
+        return DEFAULT_BASE_URL_PROD;
+    return DEFAULT_BASE_URL_DEV;
+}
+function parseCsv(csv) {
+    if (!csv)
+        return [];
+    return csv.split(',').map((s) => s.trim()).filter(Boolean);
+}
+function pickIssuer(envIssuer) {
+    if (envIssuer && envIssuer.trim().length > 0)
+        return envIssuer.trim().replace(/\/$/, '');
+    return DEFAULT_OIDC_ISSUER;
+}
+function pickJwksUrl(envJwks, issuer) {
+    if (envJwks && envJwks.trim().length > 0)
+        return envJwks.trim();
+    return `${issuer.replace(/\/$/, '')}/oidc/.well-known/jwks.json`;
+}
+function pickPublicUrl(envPublic) {
+    if (envPublic && envPublic.trim().length > 0)
+        return envPublic.trim().replace(/\/$/, '');
+    return DEFAULT_PUBLIC_URL;
+}
+/**
+ * Парсит `MCP_CACHE_TTL_OVERRIDE_<CLASS>` ENV переменные.
+ * Пример: `MCP_CACHE_TTL_OVERRIDE_LOG_DETAILS=7200` → { log_details: 7200 }.
+ */
+function parseCacheTtlOverrides(env) {
+    const prefix = 'MCP_CACHE_TTL_OVERRIDE_';
+    const result = {};
+    for (const [k, v] of Object.entries(env)) {
+        if (!k.startsWith(prefix) || v === undefined)
+            continue;
+        const cls = k.slice(prefix.length).toLowerCase();
+        const n = Number(v);
+        if (Number.isFinite(n) && n >= 0) {
+            result[cls] = Math.trunc(n);
+        }
+    }
+    return result;
+}
+function pickCorsOrigins(env, nodeEnv) {
+    const base = parseCsv(env ?? DEFAULT_CORS_ORIGINS);
+    if (nodeEnv !== 'production') {
+        // localhost для dev (любые порты) — exact match в middleware, regex там же.
+        base.push('http://localhost', 'http://127.0.0.1');
+    }
+    return Array.from(new Set(base));
+}
+export function loadConfig(env = process.env) {
+    const issuer = pickIssuer(env.MCP_OIDC_ISSUER);
+    const jwksUrl = pickJwksUrl(env.MCP_OIDC_JWKS_URL, issuer);
+    const raw = {
+        elsApiKey: env.ELS_API_KEY ?? '',
+        elsBaseUrl: pickBaseUrl(env.ELS_BASE_URL, env.NODE_ENV),
+        logLevel: (env.MCP_LOG_LEVEL ?? 'info').toLowerCase(),
+        disabledTools: parseCsv(env.MCP_DISABLE_TOOLS),
+        upstreamTimeoutMs: env.MCP_UPSTREAM_TIMEOUT_MS
+            ? Number(env.MCP_UPSTREAM_TIMEOUT_MS)
+            : 30_000,
+        transport: (env.MCP_TRANSPORT ?? 'stdio').toLowerCase(),
+        httpPort: env.MCP_HTTP_PORT ? Number(env.MCP_HTTP_PORT) : 3030,
+        oidcIssuer: issuer,
+        oidcJwksUrl: jwksUrl,
+        oidcAudience: env.MCP_OIDC_AUDIENCE ?? 'els-mcp',
+        oidcDemoAppSlug: env.MCP_OIDC_DEMO_APP_SLUG?.trim() || undefined,
+        publicUrl: pickPublicUrl(env.MCP_PUBLIC_URL),
+        corsOrigins: pickCorsOrigins(env.MCP_CORS_ORIGINS, env.NODE_ENV),
+        redactionEnabled: env.MCP_REDACTION_ENABLED
+            ? env.MCP_REDACTION_ENABLED.toLowerCase() !== 'false'
+            : true,
+        redactionFields: parseCsv(env.MCP_REDACTION_FIELDS),
+        mcpDatabaseUrl: env.MCP_DATABASE_URL?.trim() || undefined,
+        defaultAppId: env.MCP_DEFAULT_APP_ID?.trim() || 'default',
+        defaultTier: (env.MCP_DEFAULT_TIER ?? 'STANDARD').toUpperCase(),
+        redisUrl: env.MCP_REDIS_URL?.trim() || 'redis://localhost:6379',
+        cacheEnabled: env.MCP_CACHE_ENABLED ? env.MCP_CACHE_ENABLED.toLowerCase() !== 'false' : true,
+        cacheTtlOverrides: parseCacheTtlOverrides(env),
+        metricsEnabled: env.MCP_METRICS_ENABLED
+            ? env.MCP_METRICS_ENABLED.toLowerCase() !== 'false'
+            : true,
+        otelExporterOtlpEndpoint: env.OTEL_EXPORTER_OTLP_ENDPOINT?.trim() || undefined,
+    };
+    const parsed = ConfigSchema.parse(raw);
+    // stdio-режим без ELS_API_KEY — фатальная ошибка (HTTP-режим допускает
+    // отсутствие глобального ключа: ключи приходят в запросах).
+    if (parsed.transport === 'stdio' && parsed.elsApiKey.length === 0) {
+        throw new Error('ELS_API_KEY is required for stdio transport');
+    }
+    // Phase 6: production-strict ENV validation.
+    validateProductionEnv(parsed, env);
+    return parsed;
+}
+/**
+ * Phase 6 ENV-validation:
+ *   - В `NODE_ENV=production` fail-fast если критичные env vars не заданы.
+ *   - В dev — только warnings в stderr.
+ *
+ * Критерии:
+ *   - HTTP transport требует `MCP_OIDC_ISSUER` (явно задан, не default).
+ *   - HTTP transport требует `MCP_PUBLIC_URL` (явно задан).
+ *   - Если cacheEnabled=true → MCP_REDIS_URL должен быть задан (не default localhost).
+ */
+function validateProductionEnv(cfg, env) {
+    const isProd = env.NODE_ENV === 'production';
+    const isTest = env.NODE_ENV === 'test' || env.VITEST === 'true';
+    const warnings = [];
+    const errors = [];
+    if (cfg.transport === 'http') {
+        if (!env.MCP_OIDC_ISSUER || env.MCP_OIDC_ISSUER.trim().length === 0) {
+            (isProd ? errors : warnings).push('MCP_OIDC_ISSUER not set (using default — INVALID for production)');
+        }
+        if (!env.MCP_PUBLIC_URL || env.MCP_PUBLIC_URL.trim().length === 0) {
+            (isProd ? errors : warnings).push('MCP_PUBLIC_URL not set (HTTP transport requires explicit public URL in production)');
+        }
+    }
+    // Cache: если cacheEnabled явно (env=true), то MCP_REDIS_URL должен быть задан.
+    const cacheExplicitlyEnabled = env.MCP_CACHE_ENABLED && env.MCP_CACHE_ENABLED.toLowerCase() === 'true';
+    if (cacheExplicitlyEnabled) {
+        if (!env.MCP_REDIS_URL || env.MCP_REDIS_URL.trim().length === 0) {
+            errors.push('MCP_CACHE_ENABLED=true requires MCP_REDIS_URL (no URL → cannot cache)');
+        }
+    }
+    else if (isProd && cfg.cacheEnabled) {
+        // В prod cacheEnabled=true (default), но redisUrl=default localhost — warning.
+        if (!env.MCP_REDIS_URL || env.MCP_REDIS_URL.trim().length === 0) {
+            warnings.push('MCP_REDIS_URL not set in production (cache will run in degraded mode against localhost)');
+        }
+    }
+    if (warnings.length > 0 && !isTest) {
+        for (const w of warnings) {
+            process.stderr.write(`[els-mcp] WARN: ${w}\n`);
+        }
+    }
+    if (errors.length > 0) {
+        throw new Error(`Production config validation failed:\n  - ${errors.join('\n  - ')}`);
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AAEH,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AACrD,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAE3D,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;AACtD,MAAM,kBAAkB,GAAG,4BAA4B,CAAC;AACxD,MAAM,oBAAoB,GAAG,2CAA2C,CAAC;AAEzE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAGzD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC;;;OAGG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACtF,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C;;;OAGG;IACH,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAE9D,0EAA0E;IAC1E,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAEnD,0EAA0E;IAC1E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IAC3C;;;OAGG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEtC,0EAA0E;IAC1E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACvD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAE5C,0EAA0E;IAC1E,gDAAgD;IAChD,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3C,qEAAqE;IACrE,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,wEAAwE;IACxE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,oEAAoE;IACpE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IAC3C,0DAA0D;IAC1D,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAErF,0EAA0E;IAC1E,iCAAiC;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACtD,qGAAqG;IACrG,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACvC;;;;OAIG;IACH,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnF,6DAA6D;IAC7D,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzC,gFAAgF;IAChF,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAIH,SAAS,WAAW,CAAC,OAA2B,EAAE,OAA2B;IAC3E,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IAChE,IAAI,OAAO,KAAK,YAAY;QAAE,OAAO,qBAAqB,CAAC;IAC3D,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,GAAuB;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,UAAU,CAAC,SAA6B;IAC/C,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzF,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,OAA2B,EAAE,MAAc;IAC9D,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IAChE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,6BAA6B,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,SAA6B;IAClD,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzF,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,GAAsB;IACpD,MAAM,MAAM,GAAG,yBAAyB,CAAC;IACzC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QACvD,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,GAAuB,EAAE,OAA2B;IAC3E,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IACnD,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,4EAA4E;QAC5E,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAE3D,MAAM,GAAG,GAAG;QACV,SAAS,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;QAChC,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC;QACvD,QAAQ,EAAE,CAAC,GAAG,CAAC,aAAa,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE;QACrD,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC9C,iBAAiB,EAAE,GAAG,CAAC,uBAAuB;YAC5C,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC;YACrC,CAAC,CAAC,MAAM;QAEV,SAAS,EAAE,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE;QACvD,QAAQ,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI;QAE9D,UAAU,EAAE,MAAM;QAClB,WAAW,EAAE,OAAO;QACpB,YAAY,EAAE,GAAG,CAAC,iBAAiB,IAAI,SAAS;QAChD,eAAe,EAAE,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,SAAS;QAEhE,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC;QAC5C,WAAW,EAAE,eAAe,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,QAAQ,CAAC;QAEhE,gBAAgB,EAAE,GAAG,CAAC,qBAAqB;YACzC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,WAAW,EAAE,KAAK,OAAO;YACrD,CAAC,CAAC,IAAI;QACR,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACnD,cAAc,EAAE,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,SAAS;QACzD,YAAY,EAAE,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,SAAS;QACzD,WAAW,EAAE,CAAC,GAAG,CAAC,gBAAgB,IAAI,UAAU,CAAC,CAAC,WAAW,EAAE;QAE/D,QAAQ,EAAE,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,wBAAwB;QAC/D,YAAY,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI;QAC5F,iBAAiB,EAAE,sBAAsB,CAAC,GAAG,CAAC;QAC9C,cAAc,EAAE,GAAG,CAAC,mBAAmB;YACrC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,WAAW,EAAE,KAAK,OAAO;YACnD,CAAC,CAAC,IAAI;QACR,wBAAwB,EAAE,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,IAAI,SAAS;KAC/E,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEvC,uEAAuE;IACvE,4DAA4D;IAC5D,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,6CAA6C;IAC7C,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,qBAAqB,CAAC,GAAW,EAAE,GAAsB;IAChE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;IAChE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC/B,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC/B,oFAAoF,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,MAAM,sBAAsB,GAC1B,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;IAC1E,IAAI,sBAAsB,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CACT,uEAAuE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;QACtC,+EAA+E;QAC/E,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChE,QAAQ,CAAC,IAAI,CACX,yFAAyF,CAC1F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,6CAA6C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CACrE,CAAC;IACJ,CAAC;AACH,CAAC"}