@j0hanz/fetch-url-mcp 1.2.0 → 1.3.0

package/dist/http/native.js

@@ -0,0 +1,529 @@
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { isInitializeRequest } from '@modelcontextprotocol/sdk/types.js';
+import { randomUUID } from 'node:crypto';
+import { readFileSync } from 'node:fs';
+import { createServer, } from 'node:http';
+import { createServer as createHttpsServer, } from 'node:https';
+import { hostname } from 'node:os';
+import process from 'node:process';
+import { config, enableHttpMode } from '../config.js';
+import { handleDownload } from '../download.js';
+import { acceptsEventStream, acceptsJsonAndEventStream, isJsonRpcBatchRequest, isMcpRequestBody, } from '../mcp-validator.js';
+import { cancelTasksForOwner } from '../mcp.js';
+import { logError, logInfo, registerMcpSessionServer, resolveMcpSessionIdByServer, runWithRequestContext, unregisterMcpSessionServer, unregisterMcpSessionServerByServer, } from '../observability.js';
+import { applyHttpServerTuning, drainConnectionsOnShutdown, } from '../server-tuning.js';
+import { createMcpServerForHttpSession } from '../server.js';
+import { composeCloseHandlers, createSessionStore, createSlotTracker, ensureSessionCapacity, reserveSessionSlot, startSessionCleanupLoop, } from '../session.js';
+import { assertHttpModeConfiguration, authService, buildAuthFingerprint, corsPolicy, ensureMcpProtocolVersion, hostOriginPolicy, } from './auth.js';
+import { disableEventLoopMonitoring, resetEventLoopMonitoring, sendHealthRouteResponse, shouldHandleHealthRoute, } from './health.js';
+import { buildRequestContext, closeMcpServerBestEffort, closeTransportBestEffort, createRequestAbortSignal, createTransportAdapter, DEFAULT_BODY_LIMIT_BYTES, drainRequest, findDuplicateSingleValueHeader, getHeaderValue, getMcpSessionId, jsonBodyReader, registerInboundBlockList, sendError, sendJson, sendText, } from './helpers.js';
+import { createRateLimitManagerImpl, } from './rate-limit.js';
+// ---------------------------------------------------------------------------
+// MCP session gateway
+// ---------------------------------------------------------------------------
+class McpSessionGateway {
+    store;
+    createSessionServer;
+    constructor(store, createSessionServer) {
+        this.store = store;
+        this.createSessionServer = createSessionServer;
+    }
+    async handlePost(ctx) {
+        if (!ensureMcpProtocolVersion(ctx.req, ctx.res))
+            return;
+        if (!acceptsJsonAndEventStream(getHeaderValue(ctx.req, 'accept'))) {
+            sendJson(ctx.res, 400, {
+                error: 'Accept header must include application/json and text/event-stream',
+            });
+            return;
+        }
+        const { body } = ctx;
+        if (isJsonRpcBatchRequest(body)) {
+            sendError(ctx.res, -32600, 'Batch requests not supported');
+            return;
+        }
+        if (!isMcpRequestBody(body)) {
+            sendError(ctx.res, -32600, 'Invalid request body');
+            return;
+        }
+        const requestId = body.id ?? null;
+        logInfo('[MCP POST]', {
+            method: body.method,
+            id: body.id,
+            sessionId: getMcpSessionId(ctx.req),
+        });
+        const transport = await this.getOrCreateTransport(ctx, requestId);
+        if (!transport)
+            return;
+        await transport.handleRequest(ctx.req, ctx.res, body);
+    }
+    async handleGet(ctx) {
+        if (!ensureMcpProtocolVersion(ctx.req, ctx.res))
+            return;
+        const sessionId = getMcpSessionId(ctx.req);
+        if (!sessionId) {
+            sendError(ctx.res, -32600, 'Missing session ID');
+            return;
+        }
+        const session = this.store.get(sessionId);
+        if (!session) {
+            sendError(ctx.res, -32600, 'Session not found', 404);
+            return;
+        }
+        const acceptHeader = getHeaderValue(ctx.req, 'accept');
+        if (!acceptsEventStream(acceptHeader)) {
+            sendJson(ctx.res, 405, { error: 'Method Not Allowed' });
+            return;
+        }
+        this.store.touch(sessionId);
+        await session.transport.handleRequest(ctx.req, ctx.res);
+    }
+    async handleDelete(ctx) {
+        if (!ensureMcpProtocolVersion(ctx.req, ctx.res))
+            return;
+        const sessionId = getMcpSessionId(ctx.req);
+        if (!sessionId) {
+            sendError(ctx.res, -32600, 'Missing session ID');
+            return;
+        }
+        const session = this.store.get(sessionId);
+        if (session) {
+            await session.transport.close();
+            this.cleanupSessionRecord(sessionId, 'session-delete');
+        }
+        sendText(ctx.res, 200, 'Session closed');
+    }
+    async getOrCreateTransport(ctx, requestId) {
+        const sessionId = getMcpSessionId(ctx.req);
+        if (sessionId) {
+            const fingerprint = buildAuthFingerprint(ctx.auth);
+            return this.getExistingTransport(sessionId, fingerprint, ctx.res, requestId);
+        }
+        if (!isInitializeRequest(ctx.body)) {
+            sendError(ctx.res, -32600, 'Missing session ID', 400, requestId);
+            return null;
+        }
+        return this.createNewSession(ctx, requestId);
+    }
+    getExistingTransport(sessionId, authFingerprint, res, requestId) {
+        const session = this.store.get(sessionId);
+        if (!session) {
+            sendError(res, -32600, 'Session not found', 404, requestId);
+            return null;
+        }
+        if (!authFingerprint || session.authFingerprint !== authFingerprint) {
+            sendError(res, -32600, 'Session not found', 404, requestId);
+            return null;
+        }
+        this.store.touch(sessionId);
+        return session.transport;
+    }
+    async createNewSession(ctx, requestId) {
+        const authFingerprint = buildAuthFingerprint(ctx.auth);
+        if (!authFingerprint) {
+            sendError(ctx.res, -32603, 'Missing auth context', 500, requestId);
+            return null;
+        }
+        if (!this.reserveCapacity(ctx.res, requestId))
+            return null;
+        const tracker = createSlotTracker(this.store);
+        const newSessionId = randomUUID();
+        let sessionServer;
+        try {
+            sessionServer = await this.createSessionServer();
+        }
+        catch (error) {
+            tracker.releaseSlot();
+            throw error;
+        }
+        const transportImpl = new StreamableHTTPServerTransport({
+            sessionIdGenerator: () => newSessionId,
+        });
+        const initTimeout = setTimeout(() => {
+            if (!tracker.isInitialized()) {
+                tracker.releaseSlot();
+                void closeTransportBestEffort(transportImpl, 'session-init-timeout');
+                void closeMcpServerBestEffort(sessionServer, 'session-init-timeout');
+            }
+        }, config.server.sessionInitTimeoutMs);
+        initTimeout.unref();
+        transportImpl.onclose = () => {
+            clearTimeout(initTimeout);
+            if (!tracker.isInitialized())
+                tracker.releaseSlot();
+        };
+        try {
+            const transport = createTransportAdapter(transportImpl);
+            await sessionServer.connect(transport);
+        }
+        catch (err) {
+            clearTimeout(initTimeout);
+            tracker.releaseSlot();
+            void closeTransportBestEffort(transportImpl, 'session-connect-failed');
+            void closeMcpServerBestEffort(sessionServer, 'session-connect-failed');
+            throw err;
+        }
+        tracker.markInitialized();
+        tracker.releaseSlot();
+        this.store.set(newSessionId, {
+            server: sessionServer,
+            transport: transportImpl,
+            createdAt: Date.now(),
+            lastSeen: Date.now(),
+            protocolInitialized: false,
+            authFingerprint,
+        });
+        registerMcpSessionServer(newSessionId, sessionServer);
+        transportImpl.onclose = composeCloseHandlers(transportImpl.onclose, () => {
+            this.cleanupSessionRecord(newSessionId, 'session-close');
+        });
+        return transportImpl;
+    }
+    cleanupSessionRecord(sessionId, context) {
+        const session = this.store.remove(sessionId);
+        if (!session)
+            return;
+        cancelTasksForOwner(`session:${sessionId}`, 'The task was cancelled because the MCP session ended.');
+        unregisterMcpSessionServer(sessionId);
+        void closeMcpServerBestEffort(session.server, `${context}-server`);
+    }
+    reserveCapacity(res, requestId) {
+        const allowed = ensureSessionCapacity({
+            store: this.store,
+            maxSessions: config.server.maxSessions,
+            evictOldest: (store) => {
+                const evicted = store.evictOldest();
+                if (evicted) {
+                    const sessionId = resolveMcpSessionIdByServer(evicted.server);
+                    if (sessionId) {
+                        cancelTasksForOwner(`session:${sessionId}`, 'The task was cancelled because the MCP session was evicted.');
+                        unregisterMcpSessionServer(sessionId);
+                    }
+                    unregisterMcpSessionServerByServer(evicted.server);
+                    void closeTransportBestEffort(evicted.transport, 'session-eviction');
+                    void closeMcpServerBestEffort(evicted.server, 'session-eviction');
+                    return true;
+                }
+                return false;
+            },
+        });
+        if (!allowed) {
+            sendError(res, -32000, 'Server busy', 503, requestId);
+            return false;
+        }
+        if (!reserveSessionSlot(this.store, config.server.maxSessions)) {
+            sendError(res, -32000, 'Server busy', 503, requestId);
+            return false;
+        }
+        return true;
+    }
+}
+// ---------------------------------------------------------------------------
+// Download route
+// ---------------------------------------------------------------------------
+function checkDownloadRoute(path) {
+    const downloadMatch = /^\/mcp\/downloads\/([^/]+)\/([^/]+)$/.exec(path);
+    if (!downloadMatch)
+        return null;
+    const namespace = downloadMatch[1];
+    const hash = downloadMatch[2];
+    if (!namespace || !hash)
+        return null;
+    return { namespace, hash };
+}
+// ---------------------------------------------------------------------------
+// HTTP dispatcher
+// ---------------------------------------------------------------------------
+class HttpDispatcher {
+    store;
+    mcpGateway;
+    constructor(store, mcpGateway) {
+        this.store = store;
+        this.mcpGateway = mcpGateway;
+    }
+    async tryHandleHealthRoute(ctx) {
+        if (!shouldHandleHealthRoute(ctx))
+            return false;
+        const requiresAuthForVerbose = isVerboseHealthRequest(ctx) && config.security.allowRemote;
+        if (!requiresAuthForVerbose) {
+            sendHealthRouteResponse(this.store, ctx, false);
+            return true;
+        }
+        const healthAuth = await this.authenticateRequest(ctx);
+        if (!healthAuth)
+            return true;
+        sendHealthRouteResponse(this.store, ctx, true);
+        return true;
+    }
+    tryHandleDownloadRoute(ctx) {
+        if (ctx.method !== 'GET')
+            return false;
+        const download = checkDownloadRoute(ctx.url.pathname);
+        if (!download)
+            return false;
+        handleDownload(ctx.res, download.namespace, download.hash);
+        return true;
+    }
+    async dispatch(ctx) {
+        try {
+            if (await this.tryHandleHealthRoute(ctx))
+                return;
+            const auth = await this.authenticateRequest(ctx);
+            if (!auth)
+                return;
+            const authCtx = { ...ctx, auth };
+            if (this.tryHandleDownloadRoute(ctx))
+                return;
+            if (ctx.url.pathname === '/mcp') {
+                const handled = await this.handleMcpRoutes(authCtx);
+                if (handled)
+                    return;
+            }
+            sendJson(ctx.res, 404, { error: 'Not Found' });
+        }
+        catch (err) {
+            const error = err instanceof Error ? err : new Error(String(err));
+            logError('Request failed', error);
+            if (!ctx.res.writableEnded) {
+                sendJson(ctx.res, 500, { error: 'Internal Server Error' });
+            }
+        }
+    }
+    async handleMcpRoutes(ctx) {
+        switch (ctx.method) {
+            case 'POST':
+                await this.mcpGateway.handlePost(ctx);
+                return true;
+            case 'GET':
+                await this.mcpGateway.handleGet(ctx);
+                return true;
+            case 'DELETE':
+                await this.mcpGateway.handleDelete(ctx);
+                return true;
+            default:
+                return false;
+        }
+    }
+    async authenticateRequest(ctx) {
+        try {
+            return await authService.authenticate(ctx.req, ctx.signal);
+        }
+        catch (err) {
+            sendJson(ctx.res, 401, {
+                error: err instanceof Error ? err.message : 'Unauthorized',
+            });
+            return null;
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Verbose health helper (local to dispatcher)
+// ---------------------------------------------------------------------------
+function isVerboseHealthRequest(ctx) {
+    const value = ctx.url.searchParams.get('verbose');
+    if (!value)
+        return false;
+    const normalized = value.trim().toLowerCase();
+    return normalized === '1' || normalized === 'true';
+}
+// ---------------------------------------------------------------------------
+// Request pipeline
+// ---------------------------------------------------------------------------
+class HttpRequestPipeline {
+    rateLimiter;
+    dispatcher;
+    constructor(rateLimiter, dispatcher) {
+        this.rateLimiter = rateLimiter;
+        this.dispatcher = dispatcher;
+    }
+    async handle(rawReq, rawRes) {
+        const requestId = getHeaderValue(rawReq, 'x-request-id') ?? randomUUID();
+        const sessionId = getMcpSessionId(rawReq) ?? undefined;
+        const { signal, cleanup } = createRequestAbortSignal(rawReq);
+        try {
+            await runWithRequestContext({
+                requestId,
+                operationId: requestId,
+                ...(sessionId ? { sessionId } : {}),
+            }, async () => {
+                const duplicateHeader = findDuplicateSingleValueHeader(rawReq);
+                if (duplicateHeader) {
+                    sendJson(rawRes, 400, {
+                        error: `Duplicate ${duplicateHeader} header is not allowed`,
+                    });
+                    drainRequest(rawReq);
+                    return;
+                }
+                const ctx = buildRequestContext(rawReq, rawRes, signal);
+                if (!ctx) {
+                    drainRequest(rawReq);
+                    return;
+                }
+                if (!hostOriginPolicy.validate(ctx)) {
+                    drainRequest(rawReq);
+                    return;
+                }
+                if (corsPolicy.handle(ctx)) {
+                    drainRequest(rawReq);
+                    return;
+                }
+                if (!this.rateLimiter.check(ctx)) {
+                    drainRequest(rawReq);
+                    return;
+                }
+                if (ctx.method === 'POST') {
+                    try {
+                        ctx.body = await jsonBodyReader.read(ctx.req, DEFAULT_BODY_LIMIT_BYTES, ctx.signal);
+                    }
+                    catch {
+                        if (ctx.url.pathname === '/mcp') {
+                            sendError(ctx.res, -32700, 'Parse error', 400, null);
+                        }
+                        else {
+                            sendJson(ctx.res, 400, {
+                                error: 'Invalid JSON or Payload too large',
+                            });
+                        }
+                        drainRequest(rawReq);
+                        return;
+                    }
+                }
+                else {
+                    const contentLengthHeader = getHeaderValue(rawReq, 'content-length');
+                    const transferEncodingHeader = getHeaderValue(rawReq, 'transfer-encoding');
+                    const hasRequestBody = (contentLengthHeader !== null &&
+                        Number.parseInt(contentLengthHeader, 10) > 0) ||
+                        transferEncodingHeader !== null;
+                    if (hasRequestBody) {
+                        drainRequest(rawReq);
+                    }
+                    ctx.body = undefined;
+                }
+                await this.dispatcher.dispatch(ctx);
+            });
+        }
+        finally {
+            cleanup();
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Server bootstrap
+// ---------------------------------------------------------------------------
+function handlePipelineError(error, res) {
+    logError('Request pipeline failed', error instanceof Error ? error : new Error(String(error)));
+    if (res.writableEnded)
+        return;
+    if (!res.headersSent) {
+        sendJson(res, 500, { error: 'Internal Server Error' });
+        return;
+    }
+    res.end();
+}
+function createNetworkServer(listener) {
+    const { https } = config.server;
+    if (!https.enabled) {
+        return createServer(listener);
+    }
+    const { keyFile, certFile, caFile } = https;
+    if (!keyFile || !certFile) {
+        throw new Error('HTTPS enabled but SERVER_TLS_KEY_FILE / SERVER_TLS_CERT_FILE are missing');
+    }
+    const tlsOptions = {
+        key: readFileSync(keyFile),
+        cert: readFileSync(certFile),
+    };
+    if (caFile) {
+        tlsOptions.ca = readFileSync(caFile);
+    }
+    return createHttpsServer(tlsOptions, listener);
+}
+async function listen(server, host, port) {
+    await new Promise((resolve, reject) => {
+        function onError(err) {
+            server.off('error', onError);
+            reject(err);
+        }
+        server.once('error', onError);
+        server.listen(port, host, () => {
+            server.off('error', onError);
+            resolve();
+        });
+    });
+}
+function resolveListeningPort(server, fallback) {
+    const addr = server.address();
+    if (addr && typeof addr === 'object')
+        return addr.port;
+    return fallback;
+}
+function createShutdownHandler(options) {
+    const closeBatchSize = 10;
+    return async (signal) => {
+        logInfo(`Stopping HTTP server (${signal})...`);
+        options.rateLimiter.stop();
+        options.sessionCleanup.abort();
+        drainConnectionsOnShutdown(options.server);
+        disableEventLoopMonitoring();
+        const sessions = options.sessionStore.clear();
+        for (let i = 0; i < sessions.length; i += closeBatchSize) {
+            const batch = sessions.slice(i, i + closeBatchSize);
+            await Promise.all(batch.map(async (session) => {
+                const sessionId = resolveMcpSessionIdByServer(session.server);
+                if (sessionId) {
+                    cancelTasksForOwner(`session:${sessionId}`, 'The task was cancelled because the HTTP server is shutting down.');
+                    unregisterMcpSessionServer(sessionId);
+                }
+                unregisterMcpSessionServerByServer(session.server);
+                await closeTransportBestEffort(session.transport, 'shutdown-session-close');
+                await closeMcpServerBestEffort(session.server, 'shutdown-session-close');
+            }));
+        }
+        await new Promise((resolve, reject) => {
+            options.server.close((err) => {
+                if (err)
+                    reject(err);
+                else
+                    resolve();
+            });
+        });
+    };
+}
+export async function startHttpServer() {
+    assertHttpModeConfiguration();
+    enableHttpMode();
+    resetEventLoopMonitoring();
+    const rateLimiter = createRateLimitManagerImpl(config.rateLimit);
+    const sessionStore = createSessionStore(config.server.sessionTtlMs);
+    const sessionCleanup = startSessionCleanupLoop(sessionStore, config.server.sessionTtlMs);
+    const mcpGateway = new McpSessionGateway(sessionStore, createMcpServerForHttpSession);
+    const dispatcher = new HttpDispatcher(sessionStore, mcpGateway);
+    const pipeline = new HttpRequestPipeline(rateLimiter, dispatcher);
+    const server = createNetworkServer((req, res) => {
+        void pipeline.handle(req, res).catch((error) => {
+            handlePipelineError(error, res);
+        });
+    });
+    registerInboundBlockList(server);
+    applyHttpServerTuning(server);
+    await listen(server, config.server.host, config.server.port);
+    const port = resolveListeningPort(server, config.server.port);
+    const protocol = config.server.https.enabled ? 'https' : 'http';
+    logInfo(`${protocol.toUpperCase()} server listening on port ${port}`, {
+        platform: process.platform,
+        arch: process.arch,
+        hostname: hostname(),
+        nodeVersion: process.version,
+    });
+    return {
+        port,
+        host: config.server.host,
+        shutdown: createShutdownHandler({
+            server,
+            rateLimiter,
+            sessionCleanup,
+            sessionStore,
+        }),
+    };
+}
+//# sourceMappingURL=native.js.map

package/dist/http/native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.js","sourceRoot":"","sources":["../../src/http/native.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EACL,YAAY,GAGb,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,YAAY,IAAI,iBAAiB,GAElC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EACL,QAAQ,EACR,OAAO,EACP,wBAAwB,EACxB,2BAA2B,EAC3B,qBAAqB,EACrB,0BAA0B,EAC1B,kCAAkC,GACnC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAElB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,2BAA2B,EAC3B,WAAW,EACX,oBAAoB,EACpB,UAAU,EACV,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,YAAY,EACZ,8BAA8B,EAC9B,cAAc,EACd,eAAe,EACf,cAAc,EAEd,wBAAwB,EAExB,SAAS,EACT,QAAQ,EACR,QAAQ,GACT,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,0BAA0B,GAE3B,MAAM,iBAAiB,CAAC;AAEzB,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,iBAAiB;IAEF;IACA;IAFnB,YACmB,KAAmB,EACnB,mBAA6C;QAD7C,UAAK,GAAL,KAAK,CAAc;QACnB,wBAAmB,GAAnB,mBAAmB,CAA0B;IAC7D,CAAC;IAEJ,KAAK,CAAC,UAAU,CAAC,GAAyB;QACxC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QACxD,IAAI,CAAC,yBAAyB,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAClE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EACH,mEAAmE;aACtE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;QACrB,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC;QAClC,OAAO,CAAC,YAAY,EAAE;YACpB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;SACpC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAyB;QACvC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAExD,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;YACtC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5B,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAyB;QAC1C,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAExD,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACzD,CAAC;QAED,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,GAAyB,EACzB,SAAoB;QAEpB,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,WAAW,GAAG,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC,oBAAoB,CAC9B,SAAS,EACT,WAAW,EACX,GAAG,CAAC,GAAG,EACP,SAAS,CACV,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,oBAAoB,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IAEO,oBAAoB,CAC1B,SAAiB,EACjB,eAA8B,EAC9B,GAAmB,EACnB,SAAoB;QAEpB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,mBAAmB,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,eAAe,IAAI,OAAO,CAAC,eAAe,KAAK,eAAe,EAAE,CAAC;YACpE,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,mBAAmB,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5B,OAAO,OAAO,CAAC,SAAS,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,GAAyB,EACzB,SAAoB;QAEpB,MAAM,eAAe,GAAG,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,sBAAsB,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAE3D,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAClC,IAAI,aAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,6BAA6B,CAAC;YACtD,kBAAkB,EAAE,GAAG,EAAE,CAAC,YAAY;SACvC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;gBAC7B,OAAO,CAAC,WAAW,EAAE,CAAC;gBACtB,KAAK,wBAAwB,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;gBACrE,KAAK,wBAAwB,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;YACvE,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACvC,WAAW,CAAC,KAAK,EAAE,CAAC;QAEpB,aAAa,CAAC,OAAO,GAAG,GAAG,EAAE;YAC3B,YAAY,CAAC,WAAW,CAAC,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE;gBAAE,OAAO,CAAC,WAAW,EAAE,CAAC;QACtD,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;YACxD,MAAM,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,WAAW,CAAC,CAAC;YAC1B,OAAO,CAAC,WAAW,EAAE,CAAC;YACtB,KAAK,wBAAwB,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;YACvE,KAAK,wBAAwB,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;YACvE,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,OAAO,CAAC,eAAe,EAAE,CAAC;QAC1B,OAAO,CAAC,WAAW,EAAE,CAAC;QAEtB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE;YAC3B,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,aAAa;YACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,mBAAmB,EAAE,KAAK;YAC1B,eAAe;SAChB,CAAC,CAAC;QACH,wBAAwB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAEtD,aAAa,CAAC,OAAO,GAAG,oBAAoB,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE;YACvE,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,OAAO,aAAa,CAAC;IACvB,CAAC;IAEO,oBAAoB,CAAC,SAAiB,EAAE,OAAe;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,mBAAmB,CACjB,WAAW,SAAS,EAAE,EACtB,uDAAuD,CACxD,CAAC;QAEF,0BAA0B,CAAC,SAAS,CAAC,CAAC;QACtC,KAAK,wBAAwB,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,SAAS,CAAC,CAAC;IACrE,CAAC;IAEO,eAAe,CAAC,GAAmB,EAAE,SAAoB;QAC/D,MAAM,OAAO,GAAG,qBAAqB,CAAC;YACpC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW;YACtC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;gBACrB,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;gBACpC,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,SAAS,GAAG,2BAA2B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC9D,IAAI,SAAS,EAAE,CAAC;wBACd,mBAAmB,CACjB,WAAW,SAAS,EAAE,EACtB,6DAA6D,CAC9D,CAAC;wBACF,0BAA0B,CAAC,SAAS,CAAC,CAAC;oBACxC,CAAC;oBAED,kCAAkC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBACnD,KAAK,wBAAwB,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;oBACrE,KAAK,wBAAwB,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;oBAClE,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/D,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,SAAS,kBAAkB,CACzB,IAAY;IAEZ,MAAM,aAAa,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAErC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,cAAc;IAEC;IACA;IAFnB,YACmB,KAAmB,EACnB,UAA6B;QAD7B,UAAK,GAAL,KAAK,CAAc;QACnB,eAAU,GAAV,UAAU,CAAmB;IAC7C,CAAC;IAEI,KAAK,CAAC,oBAAoB,CAAC,GAAmB;QACpD,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAEhD,MAAM,sBAAsB,GAC1B,sBAAsB,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7D,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC5B,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAE7B,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,sBAAsB,CAAC,GAAmB;QAChD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAEvC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAE5B,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAmB;QAChC,IAAI,CAAC;YACH,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC;gBAAE,OAAO;YAEjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI;gBAAE,OAAO;YAElB,MAAM,OAAO,GAAyB,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;YAEvD,IAAI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;gBAAE,OAAO;YAE7C,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;gBACpD,IAAI,OAAO;oBAAE,OAAO;YACtB,CAAC;YAED,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,QAAQ,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBAC3B,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,GAAyB;QACrD,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,MAAM;gBACT,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACtC,OAAO,IAAI,CAAC;YACd,KAAK,KAAK;gBACR,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACrC,OAAO,IAAI,CAAC;YACd,KAAK,QAAQ;gBACX,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBACxC,OAAO,IAAI,CAAC;YACd;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,GAAmB;QAEnB,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE;gBACrB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc;aAC3D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,8EAA8E;AAC9E,8CAA8C;AAC9C,8EAA8E;AAE9E,SAAS,sBAAsB,CAAC,GAAmB;IACjD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM,CAAC;AACrD,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,mBAAmB;IAEJ;IACA;IAFnB,YACmB,WAAiC,EACjC,UAA0B;QAD1B,gBAAW,GAAX,WAAW,CAAsB;QACjC,eAAU,GAAV,UAAU,CAAgB;IAC1C,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,MAAuB,EAAE,MAAsB;QAC1D,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,UAAU,EAAE,CAAC;QACzE,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;QACvD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAE7D,IAAI,CAAC;YACH,MAAM,qBAAqB,CACzB;gBACE,SAAS;gBACT,WAAW,EAAE,SAAS;gBACtB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC,EACD,KAAK,IAAI,EAAE;gBACT,MAAM,eAAe,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC;gBAC/D,IAAI,eAAe,EAAE,CAAC;oBACpB,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;wBACpB,KAAK,EAAE,aAAa,eAAe,wBAAwB;qBAC5D,CAAC,CAAC;oBACH,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,OAAO;gBACT,CAAC;gBAED,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBACxD,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACpC,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,OAAO;gBACT,CAAC;gBACD,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3B,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjC,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,OAAO;gBACT,CAAC;gBAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC1B,IAAI,CAAC;wBACH,GAAG,CAAC,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAClC,GAAG,CAAC,GAAG,EACP,wBAAwB,EACxB,GAAG,CAAC,MAAM,CACX,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACP,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;4BAChC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;wBACvD,CAAC;6BAAM,CAAC;4BACN,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE;gCACrB,KAAK,EAAE,mCAAmC;6BAC3C,CAAC,CAAC;wBACL,CAAC;wBACD,YAAY,CAAC,MAAM,CAAC,CAAC;wBACrB,OAAO;oBACT,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,mBAAmB,GAAG,cAAc,CACxC,MAAM,EACN,gBAAgB,CACjB,CAAC;oBACF,MAAM,sBAAsB,GAAG,cAAc,CAC3C,MAAM,EACN,mBAAmB,CACpB,CAAC;oBACF,MAAM,cAAc,GAClB,CAAC,mBAAmB,KAAK,IAAI;wBAC3B,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;wBAC/C,sBAAsB,KAAK,IAAI,CAAC;oBAClC,IAAI,cAAc,EAAE,CAAC;wBACnB,YAAY,CAAC,MAAM,CAAC,CAAC;oBACvB,CAAC;oBACD,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;gBACvB,CAAC;gBAED,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC,CACF,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,mBAAmB,CAAC,KAAc,EAAE,GAAmB;IAC9D,QAAQ,CACN,yBAAyB,EACzB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;IAEF,IAAI,GAAG,CAAC,aAAa;QAAE,OAAO;IAE9B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAED,GAAG,CAAC,GAAG,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA6D;IAE7D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAC5C,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAuB;QACrC,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC;KAC7B,CAAC;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,UAAU,CAAC,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,MAAqB,EACrB,IAAY,EACZ,IAAY;IAEZ,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAQ,EAAE;QAChD,SAAS,OAAO,CAAC,GAAU;YACzB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAS,EAAE;YACnC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAqB,EAAE,QAAgB;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACvD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,qBAAqB,CAAC,OAK9B;IACC,MAAM,cAAc,GAAG,EAAE,CAAC;IAE1B,OAAO,KAAK,EAAE,MAAc,EAAiB,EAAE;QAC7C,OAAO,CAAC,yBAAyB,MAAM,MAAM,CAAC,CAAC;QAE/C,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC/B,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,0BAA0B,EAAE,CAAC;QAE7B,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,cAAc,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC;YACpD,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBAC1B,MAAM,SAAS,GAAG,2BAA2B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC9D,IAAI,SAAS,EAAE,CAAC;oBACd,mBAAmB,CACjB,WAAW,SAAS,EAAE,EACtB,kEAAkE,CACnE,CAAC;oBACF,0BAA0B,CAAC,SAAS,CAAC,CAAC;gBACxC,CAAC;gBAED,kCAAkC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACnD,MAAM,wBAAwB,CAC5B,OAAO,CAAC,SAAS,EACjB,wBAAwB,CACzB,CAAC;gBACF,MAAM,wBAAwB,CAC5B,OAAO,CAAC,MAAM,EACd,wBAAwB,CACzB,CAAC;YACJ,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAQ,EAAE;YAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAQ,EAAE;gBACjC,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oBAChB,OAAO,EAAE,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IAKnC,2BAA2B,EAAE,CAAC;IAC9B,cAAc,EAAE,CAAC;IAEjB,wBAAwB,EAAE,CAAC;IAE3B,MAAM,WAAW,GAAG,0BAA0B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAEjE,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,uBAAuB,CAC5C,YAAY,EACZ,MAAM,CAAC,MAAM,CAAC,YAAY,CAC3B,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,iBAAiB,CACtC,YAAY,EACZ,6BAA6B,CAC9B,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAElE,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9C,KAAK,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACtD,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE7D,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAChE,OAAO,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,6BAA6B,IAAI,EAAE,EAAE;QACpE,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,QAAQ,EAAE;QACpB,WAAW,EAAE,OAAO,CAAC,OAAO;KAC7B,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;QACxB,QAAQ,EAAE,qBAAqB,CAAC;YAC9B,MAAM;YACN,WAAW;YACX,cAAc;YACd,YAAY;SACb,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/http/rate-limit.d.ts

@@ -0,0 +1,13 @@
+import { type RequestContext } from './helpers.js';
+export interface RateLimitConfig {
+    maxRequests: number;
+    windowMs: number;
+    cleanupIntervalMs: number;
+    enabled: boolean;
+}
+export interface RateLimitManagerImpl {
+    check(ctx: RequestContext): boolean;
+    stop(): void;
+}
+export declare function createRateLimitManagerImpl(options: RateLimitConfig): RateLimitManagerImpl;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/http/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/http/rate-limit.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,cAAc,EAAY,MAAM,cAAc,CAAC;AAY7D,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;CAClB;AAMD,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC;IACpC,IAAI,IAAI,IAAI,CAAC;CACd;AAmFD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,eAAe,GACvB,oBAAoB,CAEtB"}

package/dist/http/rate-limit.js

@@ -0,0 +1,81 @@
+import { setInterval as setIntervalPromise } from 'node:timers/promises';
+import { logWarn } from '../observability.js';
+import { sendJson } from './helpers.js';
+function isAbortError(error) {
+    return error instanceof Error && error.name === 'AbortError';
+}
+// ---------------------------------------------------------------------------
+// Rate limiter
+// ---------------------------------------------------------------------------
+class RateLimiter {
+    options;
+    store = new Map();
+    cleanup = new AbortController();
+    constructor(options) {
+        this.options = options;
+        this.startCleanupLoop();
+    }
+    startCleanupLoop() {
+        const interval = setIntervalPromise(this.options.cleanupIntervalMs, Date.now, { signal: this.cleanup.signal, ref: false });
+        void (async () => {
+            try {
+                for await (const getNow of interval) {
+                    this.cleanupEntries(getNow());
+                }
+            }
+            catch (err) {
+                if (!isAbortError(err)) {
+                    logWarn('Rate limit cleanup failed', { error: err });
+                }
+            }
+        })();
+    }
+    cleanupEntries(now) {
+        const maxIdle = this.options.windowMs * 2;
+        for (const [key, entry] of this.store.entries()) {
+            if (now - entry.lastAccessed > maxIdle) {
+                this.store.delete(key);
+            }
+        }
+    }
+    check(ctx) {
+        if (!this.options.enabled || ctx.method === 'OPTIONS')
+            return true;
+        const key = ctx.ip ?? 'unknown';
+        const now = Date.now();
+        let entry = this.store.get(key);
+        if (entry) {
+            if (now > entry.resetTime) {
+                entry.count = 1;
+                entry.resetTime = now + this.options.windowMs;
+                entry.lastAccessed = now;
+            }
+            else {
+                entry.count += 1;
+                entry.lastAccessed = now;
+            }
+        }
+        else {
+            entry = {
+                count: 1,
+                resetTime: now + this.options.windowMs,
+                lastAccessed: now,
+            };
+            this.store.set(key, entry);
+        }
+        if (entry.count > this.options.maxRequests) {
+            const retryAfter = Math.max(1, Math.ceil((entry.resetTime - now) / 1000));
+            ctx.res.setHeader('Retry-After', String(retryAfter));
+            sendJson(ctx.res, 429, { error: 'Rate limit exceeded', retryAfter });
+            return false;
+        }
+        return true;
+    }
+    stop() {
+        this.cleanup.abort();
+    }
+}
+export function createRateLimitManagerImpl(options) {
+    return new RateLimiter(options);
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/http/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../src/http/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,IAAI,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEzE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAuB,QAAQ,EAAE,MAAM,cAAc,CAAC;AAmB7D,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;AAC/D,CAAC;AAOD,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,WAAW;IAIc;IAHZ,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC1C,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IAEjD,YAA6B,OAAwB;QAAxB,YAAO,GAAP,OAAO,CAAiB;QACnD,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAEO,gBAAgB;QACtB,MAAM,QAAQ,GAAG,kBAAkB,CACjC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAC9B,IAAI,CAAC,GAAG,EACR,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAC5C,CAAC;QAEF,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;oBACpC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IAEO,cAAc,CAAC,GAAW;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,IAAI,GAAG,GAAG,KAAK,CAAC,YAAY,GAAG,OAAO,EAAE,CAAC;gBACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAmB;QACvB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAEnE,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,IAAI,SAAS,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEhC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;gBAC1B,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;gBAChB,KAAK,CAAC,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC9C,KAAK,CAAC,YAAY,GAAG,GAAG,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;gBACjB,KAAK,CAAC,YAAY,GAAG,GAAG,CAAC;YAC3B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,GAAG;gBACN,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ;gBACtC,YAAY,EAAE,GAAG;aAClB,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YAC1E,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACrD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF;AAED,MAAM,UAAU,0BAA0B,CACxC,OAAwB;IAExB,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC"}

package/dist/index.d.ts

@@ -1,2 +1,3 @@
 #!/usr/bin/env node
 export {};
+//# sourceMappingURL=index.d.ts.map