@mastra/koa 0.0.0-alternative-angelfish-f7665c-20260119184917 → 0.0.0-auth-and-authz-20260130180831

package/dist/index.js

@@ -1,4 +1,5 @@
 import { Busboy } from '@fastify/busboy';
+import { hasPermission } from '@mastra/core/ee';
 import { formatZodError } from '@mastra/server/handlers/error';
 import { MastraServer as MastraServer$1, redactStreamChunk, normalizeQueryParams } from '@mastra/server/server-adapter';
 import { isDevPlaygroundRequest, isProtectedPath, canAccessPublicly, checkRules, defaultAuthConfig } from '@mastra/server/auth';
@@ -221,7 +222,7 @@ var authenticationMiddleware = async (ctx, next) => {
   const path = String(ctx.path || "/");
   const method = String(ctx.method || "GET");
   const getHeader = (name) => ctx.headers[name.toLowerCase()];
-  if (isDevPlaygroundRequest(path, method, getHeader, authConfig)) {
+  if (isDevPlaygroundRequest(path, method, getHeader, authConfig, customRouteAuthConfig)) {
     return next();
   }
   if (!isProtectedPath(path, method, authConfig, customRouteAuthConfig)) {
@@ -254,6 +255,17 @@ var authenticationMiddleware = async (ctx, next) => {
       return;
     }
     ctx.state.requestContext.set("user", user);
+    try {
+      const serverConfig = mastra.getServer();
+      const rbacProvider = serverConfig?.rbac;
+      if (rbacProvider) {
+        const permissions = await rbacProvider.getPermissions(user);
+        ctx.state.requestContext.set("userPermissions", permissions);
+        const roles = await rbacProvider.getRoles(user);
+        ctx.state.requestContext.set("userRoles", roles);
+      }
+    } catch {
+    }
     return next();
   } catch (err) {
     console.error(err);
@@ -272,7 +284,7 @@ var authorizationMiddleware = async (ctx, next) => {
   const path = String(ctx.path || "/");
   const method = String(ctx.method || "GET");
   const getHeader = (name) => ctx.headers[name.toLowerCase()];
-  if (isDevPlaygroundRequest(path, method, getHeader, authConfig)) {
+  if (isDevPlaygroundRequest(path, method, getHeader, authConfig, customRouteAuthConfig)) {
     return next();
   }
   if (!isProtectedPath(path, method, authConfig, customRouteAuthConfig)) {
@@ -345,6 +357,25 @@ var authorizationMiddleware = async (ctx, next) => {
 };
 
 // src/index.ts
+function toWebRequest(ctx) {
+  const protocol = ctx.protocol || "http";
+  const host = ctx.host || "localhost";
+  const url = `${protocol}://${host}${ctx.url}`;
+  const headers = new Headers();
+  for (const [key, value] of Object.entries(ctx.headers)) {
+    if (value) {
+      if (Array.isArray(value)) {
+        value.forEach((v) => headers.append(key, v));
+      } else {
+        headers.set(key, value);
+      }
+    }
+  }
+  return new globalThis.Request(url, {
+    method: ctx.method,
+    headers
+  });
+}
 var MastraServer = class extends MastraServer$1 {
   createContextMiddleware() {
     return async (ctx, next) => {
@@ -433,6 +464,7 @@ var MastraServer = class extends MastraServer$1 {
     const urlParams = ctx.params || {};
     const queryParams = normalizeQueryParams(ctx.query || {});
     let body;
+    let bodyParseError;
     if (route.method === "POST" || route.method === "PUT" || route.method === "PATCH") {
       const contentType = ctx.headers["content-type"] || "";
       if (contentType.includes("multipart/form-data")) {
@@ -444,12 +476,15 @@ var MastraServer = class extends MastraServer$1 {
           if (error instanceof Error && error.message.toLowerCase().includes("size")) {
             throw error;
           }
+          bodyParseError = {
+            message: error instanceof Error ? error.message : "Failed to parse multipart form data"
+          };
         }
       } else {
         body = ctx.request.body;
       }
     }
-    return { urlParams, queryParams, body };
+    return { urlParams, queryParams, body, bodyParseError };
   }
   /**
    * Parse multipart/form-data using @fastify/busboy.
@@ -499,9 +534,11 @@ var MastraServer = class extends MastraServer$1 {
       ctx.req.pipe(busboy);
     });
   }
-  async sendResponse(route, ctx, result) {
+  async sendResponse(route, ctx, result, prefix) {
+    const resolvedPrefix = prefix ?? this.prefix ?? "";
     if (route.responseType === "json") {
-      ctx.body = result;
+      ctx.type = "application/json";
+      ctx.body = result === null || result === void 0 ? JSON.stringify(null) : result;
     } else if (route.responseType === "stream") {
       await this.stream(route, ctx, result);
     } else if (route.responseType === "datastream-response") {
@@ -528,17 +565,19 @@ var MastraServer = class extends MastraServer$1 {
       }
     } else if (route.responseType === "mcp-http") {
       ctx.respond = false;
-      const { server, httpPath } = result;
+      const { server, httpPath, mcpOptions: routeMcpOptions } = result;
       try {
         const rawReq = ctx.req;
         if (ctx.request.body !== void 0) {
           rawReq.body = ctx.request.body;
         }
+        const options = { ...this.mcpOptions, ...routeMcpOptions };
         await server.startHTTP({
           url: new URL(ctx.url, `http://${ctx.headers.host}`),
-          httpPath,
+          httpPath: `${resolvedPrefix}${httpPath}`,
           req: rawReq,
-          res: ctx.res
+          res: ctx.res,
+          options: Object.keys(options).length > 0 ? options : void 0
         });
       } catch {
         if (!ctx.res.headersSent) {
@@ -562,8 +601,8 @@ var MastraServer = class extends MastraServer$1 {
         }
         await server.startSSE({
           url: new URL(ctx.url, `http://${ctx.headers.host}`),
-          ssePath,
-          messagePath,
+          ssePath: `${resolvedPrefix}${ssePath}`,
+          messagePath: `${resolvedPrefix}${messagePath}`,
           req: rawReq,
           res: ctx.res
         });
@@ -577,7 +616,8 @@ var MastraServer = class extends MastraServer$1 {
       ctx.status = 500;
     }
   }
-  async registerRoute(app, route, { prefix }) {
+  async registerRoute(app, route, { prefix: prefixParam } = {}) {
+    const prefix = prefixParam ?? this.prefix ?? "";
     const fullPath = `${prefix}${route.path}`;
     const koaPath = fullPath;
     const handler = async (ctx, next) => {
@@ -596,7 +636,28 @@ var MastraServer = class extends MastraServer$1 {
       paramNames.forEach((name, index) => {
         ctx.params[name] = match[index + 1];
       });
+      const authError = await this.checkRouteAuth(route, {
+        path: String(ctx.path || "/"),
+        method: String(ctx.method || "GET"),
+        getHeader: (name) => ctx.headers[name.toLowerCase()],
+        getQuery: (name) => ctx.query[name],
+        requestContext: ctx.state.requestContext,
+        request: toWebRequest(ctx)
+      });
+      if (authError) {
+        ctx.status = authError.status;
+        ctx.body = { error: authError.error };
+        return;
+      }
       const params = await this.getParams(route, ctx);
+      if (params.bodyParseError) {
+        ctx.status = 400;
+        ctx.body = {
+          error: "Invalid request body",
+          issues: [{ field: "body", message: params.bodyParseError.message }]
+        };
+        return;
+      }
       if (params.queryParams) {
         try {
           params.queryParams = await this.parseQueryParams(route, params.queryParams);
@@ -641,11 +702,24 @@ var MastraServer = class extends MastraServer$1 {
         mastra: this.mastra,
         tools: ctx.state.tools,
         taskStore: ctx.state.taskStore,
-        abortSignal: ctx.state.abortSignal
+        abortSignal: ctx.state.abortSignal,
+        routePrefix: prefix
       };
+      const authConfig = this.mastra.getServer()?.auth;
+      if (route.requiresPermission && authConfig) {
+        const userPermissions = ctx.state.requestContext.get("userPermissions");
+        if (!userPermissions || !hasPermission(userPermissions, route.requiresPermission)) {
+          ctx.status = 403;
+          ctx.body = {
+            error: "Forbidden",
+            message: `Missing required permission: ${route.requiresPermission}`
+          };
+          return;
+        }
+      }
       try {
         const result = await route.handler(handlerParams);
-        await this.sendResponse(route, ctx, result);
+        await this.sendResponse(route, ctx, result, prefix);
       } catch (error) {
         console.error("Error calling handler", error);
         let status = 500;

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/util.js","../../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/ZodError.js","../src/auth-middleware.ts","../src/index.ts"],"names":["util","objectUtil","MastraServerBase"],"mappings":";;;;;;;;AAAO,IAAI,IAAA;AAAA,CACV,SAAUA,KAAAA,EAAM;AACb,EAAAA,KAAAA,CAAK,WAAA,GAAc,CAAC,CAAA,KAAM;AAAA,EAAE,CAAA;AAC5B,EAAA,SAAS,SAAS,IAAA,EAAM;AAAA,EAAE;AAC1B,EAAAA,MAAK,QAAA,GAAW,QAAA;AAChB,EAAA,SAAS,YAAY,EAAA,EAAI;AACrB,IAAA,MAAM,IAAI,KAAA,EAAM;AAAA,EACpB;AACA,EAAAA,MAAK,WAAA,GAAc,WAAA;AACnB,EAAAA,KAAAA,CAAK,WAAA,GAAc,CAAC,KAAA,KAAU;AAC1B,IAAA,MAAM,MAAM,EAAC;AACb,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACtB,MAAA,GAAA,CAAI,IAAI,CAAA,GAAI,IAAA;AAAA,IAChB;AACA,IAAA,OAAO,GAAA;AAAA,EACX,CAAA;AACA,EAAAA,KAAAA,CAAK,kBAAA,GAAqB,CAAC,GAAA,KAAQ;AAC/B,IAAA,MAAM,SAAA,GAAYA,KAAAA,CAAK,UAAA,CAAW,GAAG,EAAE,MAAA,CAAO,CAAC,CAAA,KAAM,OAAO,GAAA,CAAI,GAAA,CAAI,CAAC,CAAC,MAAM,QAAQ,CAAA;AACpF,IAAA,MAAM,WAAW,EAAC;AAClB,IAAA,KAAA,MAAW,KAAK,SAAA,EAAW;AACvB,MAAA,QAAA,CAAS,CAAC,CAAA,GAAI,GAAA,CAAI,CAAC,CAAA;AAAA,IACvB;AACA,IAAA,OAAOA,KAAAA,CAAK,aAAa,QAAQ,CAAA;AAAA,EACrC,CAAA;AACA,EAAAA,KAAAA,CAAK,YAAA,GAAe,CAAC,GAAA,KAAQ;AACzB,IAAA,OAAOA,MAAK,UAAA,CAAW,GAAG,CAAA,CAAE,GAAA,CAAI,SAAU,CAAA,EAAG;AACzC,MAAA,OAAO,IAAI,CAAC,CAAA;AAAA,IAChB,CAAC,CAAA;AAAA,EACL,CAAA;AACA,EAAAA,KAAAA,CAAK,UAAA,GAAa,OAAO,MAAA,CAAO,IAAA,KAAS,UAAA,GACnC,CAAC,GAAA,KAAQ,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,GACxB,CAAC,MAAA,KAAW;AACV,IAAA,MAAM,OAAO,EAAC;AACd,IAAA,KAAA,MAAW,OAAO,MAAA,EAAQ;AACtB,MAAA,IAAI,OAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,MAAA,EAAQ,GAAG,CAAA,EAAG;AACnD,QAAA,IAAA,CAAK,KAAK,GAAG,CAAA;AAAA,MACjB;AAAA,IACJ;AACA,IAAA,OAAO,IAAA;AAAA,EACX,CAAA;AACJ,EAAAA,KAAAA,CAAK,IAAA,GAAO,CAAC,GAAA,EAAK,OAAA,KAAY;AAC1B,IAAA,KAAA,MAAW,QAAQ,GAAA,EAAK;AACpB,MAAA,IAAI,QAAQ,IAAI,CAAA;AACZ,QAAA,OAAO,IAAA;AAAA,IACf;AACA,IAAA,OAAO,MAAA;AAAA,EACX,CAAA;AACA,EAAAA,KAAAA,CAAK,SAAA,GAAY,OAAO,MAAA,CAAO,SAAA,KAAc,aACvC,CAAC,GAAA,KAAQ,MAAA,CAAO,SAAA,CAAU,GAAG,CAAA,GAC7B,CAAC,GAAA,KAAQ,OAAO,GAAA,KAAQ,QAAA,IAAY,MAAA,CAAO,QAAA,CAAS,GAAG,CAAA,IAAK,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,KAAM,GAAA;AACtF,EAAA,SAAS,UAAA,CAAW,KAAA,EAAO,SAAA,GAAY,KAAA,EAAO;AAC1C,IAAA,OAAO,KAAA,CAAM,GAAA,CAAI,CAAC,GAAA,KAAS,OAAO,GAAA,KAAQ,QAAA,GAAW,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,CAAA,GAAM,GAAI,CAAA,CAAE,KAAK,SAAS,CAAA;AAAA,EAC1F;AACA,EAAAA,MAAK,UAAA,GAAa,UAAA;AAClB,EAAAA,KAAAA,CAAK,qBAAA,GAAwB,CAAC,CAAA,EAAG,KAAA,KAAU;AACvC,IAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC3B,MAAA,OAAO,MAAM,QAAA,EAAS;AAAA,IAC1B;AACA,IAAA,OAAO,KAAA;AAAA,EACX,CAAA;AACJ,CAAA,EAAG,IAAA,KAAS,IAAA,GAAO,EAAC,CAAE,CAAA;AACf,IAAI,UAAA;AAAA,CACV,SAAUC,WAAAA,EAAY;AACnB,EAAAA,WAAAA,CAAW,WAAA,GAAc,CAAC,KAAA,EAAO,MAAA,KAAW;AACxC,IAAA,OAAO;AAAA,MACH,GAAG,KAAA;AAAA,MACH,GAAG;AAAA;AAAA,KACP;AAAA,EACJ,CAAA;AACJ,CAAA,EAAG,UAAA,KAAe,UAAA,GAAa,EAAC,CAAE,CAAA;AACL,KAAK,WAAA,CAAY;AAAA,EAC1C,QAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,KAAA;AAAA,EACA;AACJ,CAAC;;;AC1F2B,KAAK,WAAA,CAAY;AAAA,EACzC,cAAA;AAAA,EACA,iBAAA;AAAA,EACA,QAAA;AAAA,EACA,eAAA;AAAA,EACA,6BAAA;AAAA,EACA,oBAAA;AAAA,EACA,mBAAA;AAAA,EACA,mBAAA;AAAA,EACA,qBAAA;AAAA,EACA,cAAA;AAAA,EACA,gBAAA;AAAA,EACA,WAAA;AAAA,EACA,SAAA;AAAA,EACA,4BAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACJ,CAAC;AAKM,IAAM,QAAA,GAAN,MAAM,SAAA,SAAiB,KAAA,CAAM;AAAA,EAChC,IAAI,MAAA,GAAS;AACT,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EAChB;AAAA,EACA,YAAY,MAAA,EAAQ;AAChB,IAAA,KAAA,EAAM;AACN,IAAA,IAAA,CAAK,SAAS,EAAC;AACf,IAAA,IAAA,CAAK,QAAA,GAAW,CAAC,GAAA,KAAQ;AACrB,MAAA,IAAA,CAAK,MAAA,GAAS,CAAC,GAAG,IAAA,CAAK,QAAQ,GAAG,CAAA;AAAA,IACtC,CAAA;AACA,IAAA,IAAA,CAAK,SAAA,GAAY,CAAC,IAAA,GAAO,EAAC,KAAM;AAC5B,MAAA,IAAA,CAAK,SAAS,CAAC,GAAG,IAAA,CAAK,MAAA,EAAQ,GAAG,IAAI,CAAA;AAAA,IAC1C,CAAA;AACA,IAAA,MAAM,cAAc,GAAA,CAAA,MAAA,CAAW,SAAA;AAC/B,IAAA,IAAI,OAAO,cAAA,EAAgB;AAEvB,MAAA,MAAA,CAAO,cAAA,CAAe,MAAM,WAAW,CAAA;AAAA,IAC3C,CAAA,MACK;AACD,MAAA,IAAA,CAAK,SAAA,GAAY,WAAA;AAAA,IACrB;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAClB;AAAA,EACA,OAAO,OAAA,EAAS;AACZ,IAAA,MAAM,MAAA,GAAS,OAAA,IACX,SAAU,KAAA,EAAO;AACb,MAAA,OAAO,KAAA,CAAM,OAAA;AAAA,IACjB,CAAA;AACJ,IAAA,MAAM,WAAA,GAAc,EAAE,OAAA,EAAS,EAAC,EAAE;AAClC,IAAA,MAAM,YAAA,GAAe,CAAC,KAAA,KAAU;AAC5B,MAAA,KAAA,MAAW,KAAA,IAAS,MAAM,MAAA,EAAQ;AAC9B,QAAA,IAAI,KAAA,CAAM,SAAS,eAAA,EAAiB;AAChC,UAAA,KAAA,CAAM,WAAA,CAAY,IAAI,YAAY,CAAA;AAAA,QACtC,CAAA,MAAA,IACS,KAAA,CAAM,IAAA,KAAS,qBAAA,EAAuB;AAC3C,UAAA,YAAA,CAAa,MAAM,eAAe,CAAA;AAAA,QACtC,CAAA,MAAA,IACS,KAAA,CAAM,IAAA,KAAS,mBAAA,EAAqB;AACzC,UAAA,YAAA,CAAa,MAAM,cAAc,CAAA;AAAA,QACrC,CAAA,MAAA,IACS,KAAA,CAAM,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG;AAC9B,UAAA,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,QAC1C,CAAA,MACK;AACD,UAAA,IAAI,IAAA,GAAO,WAAA;AACX,UAAA,IAAI,CAAA,GAAI,CAAA;AACR,UAAA,OAAO,CAAA,GAAI,KAAA,CAAM,IAAA,CAAK,MAAA,EAAQ;AAC1B,YAAA,MAAM,EAAA,GAAK,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA;AACvB,YAAA,MAAM,QAAA,GAAW,CAAA,KAAM,KAAA,CAAM,IAAA,CAAK,MAAA,GAAS,CAAA;AAC3C,YAAA,IAAI,CAAC,QAAA,EAAU;AACX,cAAA,IAAA,CAAK,EAAE,IAAI,IAAA,CAAK,EAAE,KAAK,EAAE,OAAA,EAAS,EAAC,EAAE;AAAA,YAQzC,CAAA,MACK;AACD,cAAA,IAAA,CAAK,EAAE,IAAI,IAAA,CAAK,EAAE,KAAK,EAAE,OAAA,EAAS,EAAC,EAAE;AACrC,cAAA,IAAA,CAAK,EAAE,CAAA,CAAE,OAAA,CAAQ,IAAA,CAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,YACvC;AACA,YAAA,IAAA,GAAO,KAAK,EAAE,CAAA;AACd,YAAA,CAAA,EAAA;AAAA,UACJ;AAAA,QACJ;AAAA,MACJ;AAAA,IACJ,CAAA;AACA,IAAA,YAAA,CAAa,IAAI,CAAA;AACjB,IAAA,OAAO,WAAA;AAAA,EACX;AAAA,EACA,OAAO,OAAO,KAAA,EAAO;AACjB,IAAA,IAAI,EAAE,iBAAiB,SAAA,CAAA,EAAW;AAC9B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,KAAK,CAAA,CAAE,CAAA;AAAA,IAC9C;AAAA,EACJ;AAAA,EACA,QAAA,GAAW;AACP,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EAChB;AAAA,EACA,IAAI,OAAA,GAAU;AACV,IAAA,OAAO,KAAK,SAAA,CAAU,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,uBAAuB,CAAC,CAAA;AAAA,EACpE;AAAA,EACA,IAAI,OAAA,GAAU;AACV,IAAA,OAAO,IAAA,CAAK,OAAO,MAAA,KAAW,CAAA;AAAA,EAClC;AAAA,EACA,OAAA,CAAQ,MAAA,GAAS,CAAC,KAAA,KAAU,MAAM,OAAA,EAAS;AACvC,IAAA,MAAM,cAAc,EAAC;AACrB,IAAA,MAAM,aAAa,EAAC;AACpB,IAAA,KAAA,MAAW,GAAA,IAAO,KAAK,MAAA,EAAQ;AAC3B,MAAA,IAAI,GAAA,CAAI,IAAA,CAAK,MAAA,GAAS,CAAA,EAAG;AACrB,QAAA,MAAM,OAAA,GAAU,GAAA,CAAI,IAAA,CAAK,CAAC,CAAA;AAC1B,QAAA,WAAA,CAAY,OAAO,CAAA,GAAI,WAAA,CAAY,OAAO,KAAK,EAAC;AAChD,QAAA,WAAA,CAAY,OAAO,CAAA,CAAE,IAAA,CAAK,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,MACzC,CAAA,MACK;AACD,QAAA,UAAA,CAAW,IAAA,CAAK,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,MAC/B;AAAA,IACJ;AACA,IAAA,OAAO,EAAE,YAAY,WAAA,EAAY;AAAA,EACrC;AAAA,EACA,IAAI,UAAA,GAAa;AACb,IAAA,OAAO,KAAK,OAAA,EAAQ;AAAA,EACxB;AACJ,CAAA;AACA,QAAA,CAAS,MAAA,GAAS,CAAC,MAAA,KAAW;AAC1B,EAAA,MAAM,KAAA,GAAQ,IAAI,QAAA,CAAS,MAAM,CAAA;AACjC,EAAA,OAAO,KAAA;AACX,CAAA;AC3HO,IAAM,wBAAA,GAAuC,OAAO,GAAA,EAAc,IAAA,KAAe;AACtF,EAAA,MAAM,MAAA,GAAS,IAAI,KAAA,CAAM,MAAA;AACzB,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,SAAA,EAAU,EAAG,IAAA;AACvC,EAAA,MAAM,qBAAA,GAAwB,IAAI,KAAA,CAAM,qBAAA;AAExC,EAAA,IAAI,CAAC,UAAA,EAAY;AAEf,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAEA,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,GAAA,CAAI,IAAA,IAAQ,GAAG,CAAA;AACnC,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,GAAA,CAAI,MAAA,IAAU,KAAK,CAAA;AACzC,EAAA,MAAM,YAAY,CAAC,IAAA,KAAiB,IAAI,OAAA,CAAQ,IAAA,CAAK,aAAa,CAAA;AAElE,EAAA,IAAI,sBAAA,CAAuB,IAAA,EAAM,MAAA,EAAQ,SAAA,EAAW,UAAU,CAAA,EAAG;AAE/D,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAEA,EAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,EAAM,MAAA,EAAQ,UAAA,EAAY,qBAAqB,CAAA,EAAG;AACrE,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAGA,EAAA,IAAI,iBAAA,CAAkB,IAAA,EAAM,MAAA,EAAQ,UAAU,CAAA,EAAG;AAC/C,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAGA,EAAA,MAAM,UAAA,GAAa,IAAI,OAAA,CAAQ,aAAA;AAC/B,EAAA,IAAI,QAAuB,UAAA,GAAa,UAAA,CAAW,OAAA,CAAQ,SAAA,EAAW,EAAE,CAAA,GAAI,IAAA;AAE5E,EAAA,MAAM,QAAQ,GAAA,CAAI,KAAA;AAClB,EAAA,IAAI,CAAC,KAAA,IAAS,KAAA,CAAM,MAAA,EAAQ;AAC1B,IAAA,KAAA,GAAQ,MAAM,MAAA,IAAU,IAAA;AAAA,EAC1B;AAGA,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,IAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,yBAAA,EAA0B;AAC9C,IAAA;AAAA,EACF;AAEA,EAAA,IAAI;AAEF,IAAA,IAAI,IAAA;AAGJ,IAAA,IAAI,OAAO,UAAA,CAAW,iBAAA,KAAsB,UAAA,EAAY;AAGtD,MAAA,IAAA,GAAO,MAAM,UAAA,CAAW,iBAAA,CAAkB,KAAA,EAAO,IAAI,OAAc,CAAA;AAAA,IACrE,CAAA,MAAO;AACL,MAAA,MAAM,IAAI,MAAM,yCAAyC,CAAA;AAAA,IAC3D;AAEA,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,MAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,0BAAA,EAA2B;AAC/C,MAAA;AAAA,IACF;AAGA,IAAA,GAAA,CAAI,KAAA,CAAM,cAAA,CAAe,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAEzC,IAAA,OAAO,IAAA,EAAK;AAAA,EACd,SAAS,GAAA,EAAK;AACZ,IAAA,OAAA,CAAQ,MAAM,GAAG,CAAA;AACjB,IAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,IAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,0BAAA,EAA2B;AAC/C,IAAA;AAAA,EACF;AACF,CAAA;AAEO,IAAM,uBAAA,GAAsC,OAAO,GAAA,EAAc,IAAA,KAAe;AACrF,EAAA,MAAM,MAAA,GAAS,IAAI,KAAA,CAAM,MAAA;AACzB,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,SAAA,EAAU,EAAG,IAAA;AACvC,EAAA,MAAM,qBAAA,GAAwB,IAAI,KAAA,CAAM,qBAAA;AAExC,EAAA,IAAI,CAAC,UAAA,EAAY;AAEf,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAEA,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,GAAA,CAAI,IAAA,IAAQ,GAAG,CAAA;AACnC,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,GAAA,CAAI,MAAA,IAAU,KAAK,CAAA;AACzC,EAAA,MAAM,YAAY,CAAC,IAAA,KAAiB,IAAI,OAAA,CAAQ,IAAA,CAAK,aAAa,CAAA;AAElE,EAAA,IAAI,sBAAA,CAAuB,IAAA,EAAM,MAAA,EAAQ,SAAA,EAAW,UAAU,CAAA,EAAG;AAE/D,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAEA,EAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,EAAM,MAAA,EAAQ,UAAA,EAAY,qBAAqB,CAAA,EAAG;AACrE,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAGA,EAAA,IAAI,iBAAA,CAAkB,IAAA,EAAM,MAAA,EAAQ,UAAU,CAAA,EAAG;AAC/C,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAEA,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,KAAA,CAAM,cAAA,CAAe,IAAI,MAAM,CAAA;AAEhD,EAAA,IAAI,eAAA,IAAmB,UAAA,IAAc,OAAO,UAAA,CAAW,kBAAkB,UAAA,EAAY;AACnF,IAAA,IAAI;AACF,MAAA,MAAM,eAAe,MAAM,UAAA,CAAW,aAAA,CAAc,IAAA,EAAM,IAAI,OAAc,CAAA;AAE5E,MAAA,IAAI,YAAA,EAAc;AAChB,QAAA,OAAO,IAAA,EAAK;AAAA,MACd;AAEA,MAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,MAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,eAAA,EAAgB;AACpC,MAAA;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,MAAM,GAAG,CAAA;AACjB,MAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,MAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,qBAAA,EAAsB;AAC1C,MAAA;AAAA,IACF;AAAA,EACF;AAGA,EAAA,IAAI,WAAA,IAAe,UAAA,IAAc,OAAO,UAAA,CAAW,cAAc,UAAA,EAAY;AAC3E,IAAA,IAAI;AAGF,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,GAAA,EAAK,CAAC,GAAA,KAAgB;AACpB,UAAA,IAAI,GAAA,KAAQ,QAAA,EAAU,OAAO,GAAA,CAAI,KAAA,CAAM,MAAA;AACvC,UAAA,IAAI,GAAA,KAAQ,gBAAA,EAAkB,OAAO,GAAA,CAAI,KAAA,CAAM,cAAA;AAC/C,UAAA,IAAI,GAAA,KAAQ,OAAA,EAAS,OAAO,GAAA,CAAI,KAAA,CAAM,KAAA;AACtC,UAAA,IAAI,GAAA,KAAQ,WAAA,EAAa,OAAO,GAAA,CAAI,KAAA,CAAM,SAAA;AAC1C,UAAA,IAAI,GAAA,KAAQ,uBAAA,EAAyB,OAAO,GAAA,CAAI,KAAA,CAAM,qBAAA;AACtD,UAAA,OAAO,MAAA;AAAA,QACT,CAAA;AAAA,QACA,KAAK,GAAA,CAAI;AAAA,OACX;AAEA,MAAA,MAAM,eAAe,MAAM,UAAA,CAAW,UAAU,IAAA,EAAM,MAAA,EAAQ,MAAM,OAAO,CAAA;AAE3E,MAAA,IAAI,YAAA,EAAc;AAChB,QAAA,OAAO,IAAA,EAAK;AAAA,MACd;AAEA,MAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,MAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,eAAA,EAAgB;AACpC,MAAA;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,MAAM,GAAG,CAAA;AACjB,MAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,MAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,qBAAA,EAAsB;AAC1C,MAAA;AAAA,IACF;AAAA,EACF;AAGA,EAAA,IAAI,WAAW,UAAA,IAAc,UAAA,CAAW,SAAS,UAAA,CAAW,KAAA,CAAM,SAAS,CAAA,EAAG;AAC5E,IAAA,MAAM,eAAe,MAAM,UAAA,CAAW,WAAW,KAAA,EAAO,IAAA,EAAM,QAAQ,IAAI,CAAA;AAE1E,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,OAAO,IAAA,EAAK;AAAA,IACd;AAEA,IAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,IAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,eAAA,EAAgB;AACpC,IAAA;AAAA,EACF;AAGA,EAAA,IAAI,iBAAA,CAAkB,KAAA,IAAS,iBAAA,CAAkB,KAAA,CAAM,SAAS,CAAA,EAAG;AACjE,IAAA,MAAM,eAAe,MAAM,UAAA,CAAW,kBAAkB,KAAA,EAAO,IAAA,EAAM,QAAQ,IAAI,CAAA;AAEjF,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,OAAO,IAAA,EAAK;AAAA,IACd;AAAA,EACF;AAEA,EAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,EAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,eAAA,EAAgB;AACtC,CAAA;;;AChKO,IAAM,YAAA,GAAN,cAA2BC,cAAA,CAAwC;AAAA,EACxE,uBAAA,GAAsC;AACpC,IAAA,OAAO,OAAO,KAAc,IAAA,KAAe;AAEzC,MAAA,IAAI,kBAAA;AACJ,MAAA,IAAI,oBAAA;AAGJ,MAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,IAAU,GAAA,CAAI,WAAW,KAAA,EAAO;AACjD,QAAA,MAAM,WAAA,GAAc,GAAA,CAAI,OAAA,CAAQ,cAAc,CAAA;AAC9C,QAAA,IAAI,aAAa,QAAA,CAAS,kBAAkB,CAAA,IAAK,GAAA,CAAI,QAAQ,IAAA,EAAM;AACjE,UAAA,MAAM,IAAA,GAAO,IAAI,OAAA,CAAQ,IAAA;AACzB,UAAA,IAAI,KAAK,cAAA,EAAgB;AACvB,YAAA,kBAAA,GAAqB,IAAA,CAAK,cAAA;AAAA,UAC5B;AAAA,QACF;AAAA,MACF;AAGA,MAAA,IAAI,GAAA,CAAI,WAAW,KAAA,EAAO;AACxB,QAAA,IAAI;AACF,UAAA,MAAM,QAAQ,GAAA,CAAI,KAAA;AAClB,UAAA,MAAM,wBAAwB,KAAA,CAAM,cAAA;AACpC,UAAA,IAAI,OAAO,0BAA0B,QAAA,EAAU;AAE7C,YAAA,IAAI;AACF,cAAA,oBAAA,GAAuB,IAAA,CAAK,MAAM,qBAAqB,CAAA;AAAA,YACzD,CAAA,CAAA,MAAQ;AAEN,cAAA,IAAI;AACF,gBAAA,MAAM,OAAO,MAAA,CAAO,IAAA,CAAK,uBAAuB,QAAQ,CAAA,CAAE,SAAS,OAAO,CAAA;AAC1E,gBAAA,oBAAA,GAAuB,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,cACxC,CAAA,CAAA,MAAQ;AAAA,cAER;AAAA,YACF;AAAA,UACF;AAAA,QACF,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF;AAEA,MAAA,MAAM,iBAAiB,IAAA,CAAK,mBAAA,CAAoB,EAAE,oBAAA,EAAsB,oBAAoB,CAAA;AAG5F,MAAA,GAAA,CAAI,MAAM,cAAA,GAAiB,cAAA;AAC3B,MAAA,GAAA,CAAI,KAAA,CAAM,SAAS,IAAA,CAAK,MAAA;AACxB,MAAA,GAAA,CAAI,KAAA,CAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,IAAS,EAAC;AACjC,MAAA,IAAI,KAAK,SAAA,EAAW;AAClB,QAAA,GAAA,CAAI,KAAA,CAAM,YAAY,IAAA,CAAK,SAAA;AAAA,MAC7B;AACA,MAAA,GAAA,CAAI,KAAA,CAAM,wBAAwB,IAAA,CAAK,qBAAA;AAGvC,MAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,MAAA,GAAA,CAAI,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,MAAM;AAExB,QAAA,IAAI,CAAC,GAAA,CAAI,GAAA,CAAI,aAAA,EAAe;AAC1B,UAAA,UAAA,CAAW,KAAA,EAAM;AAAA,QACnB;AAAA,MACF,CAAC,CAAA;AACD,MAAA,GAAA,CAAI,KAAA,CAAM,cAAc,UAAA,CAAW,MAAA;AAEnC,MAAA,MAAM,IAAA,EAAK;AAAA,IACb,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,MAAA,CAAO,KAAA,EAAoB,GAAA,EAAc,MAAA,EAAuD;AAEpG,IAAA,GAAA,CAAI,OAAA,GAAU,KAAA;AAGd,IAAA,GAAA,CAAI,GAAA,CAAI,UAAU,GAAA,EAAK;AAAA,MACrB,cAAA,EAAgB,YAAA;AAAA,MAChB,mBAAA,EAAqB;AAAA,KACtB,CAAA;AAED,IAAA,MAAM,YAAA,GAAe,MAAM,YAAA,IAAgB,QAAA;AAE3C,IAAA,MAAM,cAAA,GAAiB,MAAA,YAAkB,cAAA,GAAiB,MAAA,GAAS,MAAA,CAAO,UAAA;AAC1E,IAAA,MAAM,MAAA,GAAS,eAAe,SAAA,EAAU;AAExC,IAAA,GAAA,CAAI,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,MAAM;AACxB,MAAA,KAAK,MAAA,CAAO,OAAO,iBAAiB,CAAA;AAAA,IACtC,CAAC,CAAA;AAED,IAAA,IAAI;AACF,MAAA,OAAO,IAAA,EAAM;AACX,QAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,QAAA,IAAI,IAAA,EAAM;AAEV,QAAA,IAAI,KAAA,EAAO;AAET,UAAA,MAAM,YAAA,GAAe,IAAA,CAAK,aAAA,EAAe,MAAA,IAAU,IAAA;AACnD,UAAA,MAAM,WAAA,GAAc,YAAA,GAAe,iBAAA,CAAkB,KAAK,CAAA,GAAI,KAAA;AAC9D,UAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,YAAA,GAAA,CAAI,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,WAAW,CAAC;;AAAA,CAAM,CAAA;AAAA,UAC1D,CAAA,MAAO;AACL,YAAA,GAAA,CAAI,IAAI,KAAA,CAAM,IAAA,CAAK,SAAA,CAAU,WAAW,IAAI,GAAM,CAAA;AAAA,UACpD;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,MAAM,KAAK,CAAA;AAAA,IACrB,CAAA,SAAE;AACA,MAAA,GAAA,CAAI,IAAI,GAAA,EAAI;AAAA,IACd;AAAA,EACF;AAAA,EAEA,MAAM,SAAA,CAAU,KAAA,EAAoB,GAAA,EAA4C;AAC9E,IAAA,MAAM,SAAA,GAAa,GAAA,CAAI,MAAA,IAAU,EAAC;AAElC,IAAA,MAAM,WAAA,GAAc,oBAAA,CAAsB,GAAA,CAAI,KAAA,IAAS,EAA8B,CAAA;AACrF,IAAA,IAAI,IAAA;AAEJ,IAAA,IAAI,KAAA,CAAM,WAAW,MAAA,IAAU,KAAA,CAAM,WAAW,KAAA,IAAS,KAAA,CAAM,WAAW,OAAA,EAAS;AACjF,MAAA,MAAM,WAAA,GAAc,GAAA,CAAI,OAAA,CAAQ,cAAc,CAAA,IAAK,EAAA;AAEnD,MAAA,IAAI,WAAA,CAAY,QAAA,CAAS,qBAAqB,CAAA,EAAG;AAC/C,QAAA,IAAI;AACF,UAAA,MAAM,WAAA,GAAc,KAAA,CAAM,WAAA,IAAe,IAAA,CAAK,gBAAA,EAAkB,OAAA;AAChE,UAAA,IAAA,GAAO,MAAM,IAAA,CAAK,sBAAA,CAAuB,GAAA,EAAK,WAAW,CAAA;AAAA,QAC3D,SAAS,KAAA,EAAO;AACd,UAAA,OAAA,CAAQ,KAAA,CAAM,wCAAwC,KAAK,CAAA;AAE3D,UAAA,IAAI,KAAA,YAAiB,SAAS,KAAA,CAAM,OAAA,CAAQ,aAAY,CAAE,QAAA,CAAS,MAAM,CAAA,EAAG;AAC1E,YAAA,MAAM,KAAA;AAAA,UACR;AAAA,QACF;AAAA,MACF,CAAA,MAAO;AACL,QAAA,IAAA,GAAO,IAAI,OAAA,CAAQ,IAAA;AAAA,MACrB;AAAA,IACF;AAEA,IAAA,OAAO,EAAE,SAAA,EAAW,WAAA,EAAa,IAAA,EAAK;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,sBAAA,CAAuB,KAAc,WAAA,EAAwD;AACnG,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,SAAkC,EAAC;AAEzC,MAAA,MAAM,MAAA,GAAS,IAAI,MAAA,CAAO;AAAA,QACxB,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,GAAA,CAAI,OAAA,CAAQ,cAAc;AAAA,SAC5C;AAAA,QACA,MAAA,EAAQ,WAAA,GAAc,EAAE,QAAA,EAAU,aAAY,GAAI;AAAA,OACnD,CAAA;AAED,MAAA,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,SAAA,EAAmB,IAAA,KAAgC;AACpE,QAAA,MAAM,SAAmB,EAAC;AAC1B,QAAA,IAAI,aAAA,GAAgB,KAAA;AAEpB,QAAA,IAAA,CAAK,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACjC,UAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,QACnB,CAAC,CAAA;AAED,QAAA,IAAA,CAAK,EAAA,CAAG,SAAS,MAAM;AACrB,UAAA,aAAA,GAAgB,IAAA;AAChB,UAAA,MAAA,CAAO,IAAI,MAAM,CAAA,wBAAA,EAA2B,WAAA,GAAc,UAAU,WAAW,CAAA,OAAA,CAAA,GAAY,EAAE,CAAA,CAAE,CAAC,CAAA;AAAA,QAClG,CAAC,CAAA;AAED,QAAA,IAAA,CAAK,EAAA,CAAG,OAAO,MAAM;AACnB,UAAA,IAAI,CAAC,aAAA,EAAe;AAClB,YAAA,MAAA,CAAO,SAAS,CAAA,GAAI,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA;AAAA,UAC1C;AAAA,QACF,CAAC,CAAA;AAAA,MACH,CAAC,CAAA;AAED,MAAA,MAAA,CAAO,EAAA,CAAG,OAAA,EAAS,CAAC,SAAA,EAAmB,KAAA,KAAkB;AAEvD,QAAA,IAAI;AACF,UAAA,MAAA,CAAO,SAAS,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAAA,QACtC,CAAA,CAAA,MAAQ;AACN,UAAA,MAAA,CAAO,SAAS,CAAA,GAAI,KAAA;AAAA,QACtB;AAAA,MACF,CAAC,CAAA;AAED,MAAA,MAAA,CAAO,EAAA,CAAG,UAAU,MAAM;AACxB,QAAA,OAAA,CAAQ,MAAM,CAAA;AAAA,MAChB,CAAC,CAAA;AAED,MAAA,MAAA,CAAO,EAAA,CAAG,OAAA,EAAS,CAAC,KAAA,KAAiB;AACnC,QAAA,MAAA,CAAO,KAAK,CAAA;AAAA,MACd,CAAC,CAAA;AAGD,MAAA,GAAA,CAAI,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACrB,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,YAAA,CAAa,KAAA,EAAoB,GAAA,EAAc,MAAA,EAAgC;AACnF,IAAA,IAAI,KAAA,CAAM,iBAAiB,MAAA,EAAQ;AACjC,MAAA,GAAA,CAAI,IAAA,GAAO,MAAA;AAAA,IACb,CAAA,MAAA,IAAW,KAAA,CAAM,YAAA,KAAiB,QAAA,EAAU;AAC1C,MAAA,MAAM,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,GAAA,EAAK,MAAwC,CAAA;AAAA,IACxE,CAAA,MAAA,IAAW,KAAA,CAAM,YAAA,KAAiB,qBAAA,EAAuB;AAGvD,MAAA,GAAA,CAAI,OAAA,GAAU,KAAA;AAEd,MAAA,MAAM,aAAA,GAAgB,MAAA;AACtB,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,aAAA,CAAc,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AAC5C,QAAA,OAAA,CAAQ,GAAG,CAAA,GAAI,KAAA;AAAA,MACjB,CAAC,CAAA;AACD,MAAA,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,aAAA,CAAc,MAAA,EAAQ,OAAO,CAAA;AAE/C,MAAA,IAAI,cAAc,IAAA,EAAM;AACtB,QAAA,MAAM,MAAA,GAAS,aAAA,CAAc,IAAA,CAAK,SAAA,EAAU;AAC5C,QAAA,IAAI;AACF,UAAA,OAAO,IAAA,EAAM;AACX,YAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,YAAA,IAAI,IAAA,EAAM;AACV,YAAA,GAAA,CAAI,GAAA,CAAI,MAAM,KAAK,CAAA;AAAA,UACrB;AAAA,QACF,CAAA,SAAE;AACA,UAAA,GAAA,CAAI,IAAI,GAAA,EAAI;AAAA,QACd;AAAA,MACF,CAAA,MAAO;AACL,QAAA,GAAA,CAAI,IAAI,GAAA,EAAI;AAAA,MACd;AAAA,IACF,CAAA,MAAA,IAAW,KAAA,CAAM,YAAA,KAAiB,UAAA,EAAY;AAG5C,MAAA,GAAA,CAAI,OAAA,GAAU,KAAA;AAEd,MAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAS,GAAI,MAAA;AAE7B,MAAA,IAAI;AAEF,QAAA,MAAM,SAAS,GAAA,CAAI,GAAA;AACnB,QAAA,IAAI,GAAA,CAAI,OAAA,CAAQ,IAAA,KAAS,MAAA,EAAW;AAClC,UAAA,MAAA,CAAO,IAAA,GAAO,IAAI,OAAA,CAAQ,IAAA;AAAA,QAC5B;AAEA,QAAA,MAAM,OAAO,SAAA,CAAU;AAAA,UACrB,GAAA,EAAK,IAAI,GAAA,CAAI,GAAA,CAAI,KAAK,CAAA,OAAA,EAAU,GAAA,CAAI,OAAA,CAAQ,IAAI,CAAA,CAAE,CAAA;AAAA,UAClD,QAAA;AAAA,UACA,GAAA,EAAK,MAAA;AAAA,UACL,KAAK,GAAA,CAAI;AAAA,SACV,CAAA;AAAA,MAEH,CAAA,CAAA,MAAQ;AACN,QAAA,IAAI,CAAC,GAAA,CAAI,GAAA,CAAI,WAAA,EAAa;AACxB,UAAA,GAAA,CAAI,IAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AAC7D,UAAA,GAAA,CAAI,GAAA,CAAI,GAAA;AAAA,YACN,KAAK,SAAA,CAAU;AAAA,cACb,OAAA,EAAS,KAAA;AAAA,cACT,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,uBAAA,EAAwB;AAAA,cACxD,EAAA,EAAI;AAAA,aACL;AAAA,WACH;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAA,MAAA,IAAW,KAAA,CAAM,YAAA,KAAiB,SAAA,EAAW;AAG3C,MAAA,GAAA,CAAI,OAAA,GAAU,KAAA;AAEd,MAAA,MAAM,EAAE,MAAA,EAAQ,OAAA,EAAS,WAAA,EAAY,GAAI,MAAA;AAEzC,MAAA,IAAI;AAEF,QAAA,MAAM,SAAS,GAAA,CAAI,GAAA;AACnB,QAAA,IAAI,GAAA,CAAI,OAAA,CAAQ,IAAA,KAAS,MAAA,EAAW;AAClC,UAAA,MAAA,CAAO,IAAA,GAAO,IAAI,OAAA,CAAQ,IAAA;AAAA,QAC5B;AAEA,QAAA,MAAM,OAAO,QAAA,CAAS;AAAA,UACpB,GAAA,EAAK,IAAI,GAAA,CAAI,GAAA,CAAI,KAAK,CAAA,OAAA,EAAU,GAAA,CAAI,OAAA,CAAQ,IAAI,CAAA,CAAE,CAAA;AAAA,UAClD,OAAA;AAAA,UACA,WAAA;AAAA,UACA,GAAA,EAAK,MAAA;AAAA,UACL,KAAK,GAAA,CAAI;AAAA,SACV,CAAA;AAAA,MAEH,CAAA,CAAA,MAAQ;AACN,QAAA,IAAI,CAAC,GAAA,CAAI,GAAA,CAAI,WAAA,EAAa;AACxB,UAAA,GAAA,CAAI,IAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AAC7D,UAAA,GAAA,CAAI,GAAA,CAAI,IAAI,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,gCAAA,EAAkC,CAAC,CAAA;AAAA,QACzE;AAAA,MACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AAAA,IACf;AAAA,EACF;AAAA,EAEA,MAAM,aAAA,CAAc,GAAA,EAAU,KAAA,EAAoB,EAAE,QAAO,EAAuC;AAChG,IAAA,MAAM,QAAA,GAAW,CAAA,EAAG,MAAM,CAAA,EAAG,MAAM,IAAI,CAAA,CAAA;AAGvC,IAAA,MAAM,OAAA,GAAU,QAAA;AAGhB,IAAA,MAAM,OAAA,GAAU,OAAO,GAAA,EAAc,IAAA,KAAe;AAElD,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,WAAA,CAAY,OAAO,CAAA;AAC1C,MAAA,MAAM,KAAA,GAAQ,SAAA,CAAU,IAAA,CAAK,GAAA,CAAI,IAAI,CAAA;AAErC,MAAA,IAAI,CAAC,KAAA,EAAO;AACV,QAAA,MAAM,IAAA,EAAK;AACX,QAAA;AAAA,MACF;AAGA,MAAA,IAAI,KAAA,CAAM,MAAA,CAAO,WAAA,EAAY,KAAM,KAAA,IAAS,GAAA,CAAI,MAAA,CAAO,WAAA,EAAY,KAAM,KAAA,CAAM,MAAA,CAAO,WAAA,EAAY,EAAG;AACnG,QAAA,MAAM,IAAA,EAAK;AACX,QAAA;AAAA,MACF;AAGA,MAAA,MAAM,UAAA,GAAa,IAAA,CAAK,iBAAA,CAAkB,OAAO,CAAA;AACjD,MAAA,GAAA,CAAI,SAAS,EAAC;AACd,MAAA,UAAA,CAAW,OAAA,CAAQ,CAAC,IAAA,EAAM,KAAA,KAAU;AAClC,QAAA,GAAA,CAAI,MAAA,CAAO,IAAI,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAC,CAAA;AAAA,MACpC,CAAC,CAAA;AAED,MAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,SAAA,CAAU,OAAO,GAAG,CAAA;AAE9C,MAAA,IAAI,OAAO,WAAA,EAAa;AACtB,QAAA,IAAI;AACF,UAAA,MAAA,CAAO,cAAc,MAAM,IAAA,CAAK,gBAAA,CAAiB,KAAA,EAAO,OAAO,WAAW,CAAA;AAAA,QAC5E,SAAS,KAAA,EAAO;AACd,UAAA,OAAA,CAAQ,KAAA,CAAM,8BAA8B,KAAK,CAAA;AAEjD,UAAA,IAAI,iBAAiB,QAAA,EAAU;AAC7B,YAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,YAAA,GAAA,CAAI,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,kBAAkB,CAAA;AACnD,YAAA;AAAA,UACF;AACA,UAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,UAAA,GAAA,CAAI,IAAA,GAAO;AAAA,YACT,KAAA,EAAO,0BAAA;AAAA,YACP,MAAA,EAAQ,CAAC,EAAE,KAAA,EAAO,SAAA,EAAW,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,eAAA,EAAiB;AAAA,WAClG;AACA,UAAA;AAAA,QACF;AAAA,MACF;AAEA,MAAA,IAAI,OAAO,IAAA,EAAM;AACf,QAAA,IAAI;AACF,UAAA,MAAA,CAAO,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,KAAA,EAAO,OAAO,IAAI,CAAA;AAAA,QACvD,SAAS,KAAA,EAAO;AACd,UAAA,OAAA,CAAQ,KAAA,CAAM,uBAAuB,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAE3F,UAAA,IAAI,iBAAiB,QAAA,EAAU;AAC7B,YAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,YAAA,GAAA,CAAI,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,cAAc,CAAA;AAC/C,YAAA;AAAA,UACF;AACA,UAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,UAAA,GAAA,CAAI,IAAA,GAAO;AAAA,YACT,KAAA,EAAO,sBAAA;AAAA,YACP,MAAA,EAAQ,CAAC,EAAE,KAAA,EAAO,SAAA,EAAW,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,eAAA,EAAiB;AAAA,WAClG;AACA,UAAA;AAAA,QACF;AAAA,MACF;AAEA,MAAA,MAAM,aAAA,GAAgB;AAAA,QACpB,GAAG,MAAA,CAAO,SAAA;AAAA,QACV,GAAG,MAAA,CAAO,WAAA;AAAA,QACV,GAAI,OAAO,MAAA,CAAO,SAAS,QAAA,GAAW,MAAA,CAAO,OAAO,EAAC;AAAA,QACrD,cAAA,EAAgB,IAAI,KAAA,CAAM,cAAA;AAAA,QAC1B,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,KAAA,EAAO,IAAI,KAAA,CAAM,KAAA;AAAA,QACjB,SAAA,EAAW,IAAI,KAAA,CAAM,SAAA;AAAA,QACrB,WAAA,EAAa,IAAI,KAAA,CAAM;AAAA,OACzB;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,OAAA,CAAQ,aAAa,CAAA;AAChD,QAAA,MAAM,IAAA,CAAK,YAAA,CAAa,KAAA,EAAO,GAAA,EAAK,MAAM,CAAA;AAAA,MAC5C,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,KAAA,CAAM,yBAAyB,KAAK,CAAA;AAE5C,QAAA,IAAI,MAAA,GAAS,GAAA;AACb,QAAA,IAAI,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AAEtC,UAAA,IAAI,YAAY,KAAA,EAAO;AACrB,YAAA,MAAA,GAAU,KAAA,CAAc,MAAA;AAAA,UAC1B,CAAA,MAAA,IAGE,SAAA,IAAa,KAAA,IACb,KAAA,CAAM,OAAA,IACN,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,IACzB,QAAA,IAAY,KAAA,CAAM,OAAA,EAClB;AACA,YAAA,MAAA,GAAU,MAAM,OAAA,CAAgB,MAAA;AAAA,UAClC;AAAA,QACF;AACA,QAAA,GAAA,CAAI,MAAA,GAAS,MAAA;AACb,QAAA,GAAA,CAAI,OAAO,EAAE,KAAA,EAAO,iBAAiB,KAAA,GAAQ,KAAA,CAAM,UAAU,eAAA,EAAgB;AAAA,MAC/E;AAAA,IACF,CAAA;AAGA,IAAA,GAAA,CAAI,IAAI,OAAO,CAAA;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,IAAA,EAAsB;AAExC,IAAA,MAAM,iBAAA,GAAoB,WAAA;AAC1B,IAAA,MAAM,oBAAA,GAAuB,IAAA,CAAK,OAAA,CAAQ,SAAA,EAAW,iBAAiB,CAAA;AAGtE,IAAA,MAAM,WAAA,GAAc,oBAAA,CAAqB,OAAA,CAAQ,qBAAA,EAAuB,MAAM,CAAA;AAG9E,IAAA,MAAM,SAAA,GAAY,WAAA,CAAY,OAAA,CAAQ,IAAI,MAAA,CAAO,iBAAA,EAAmB,GAAG,CAAA,EAAG,SAAS,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,KAAK,CAAA;AAEzG,IAAA,OAAO,IAAI,MAAA,CAAO,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,IAAA,EAAwB;AAChD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,SAAS,KAAK,EAAC;AAC1C,IAAA,OAAO,QAAQ,GAAA,CAAI,CAAA,CAAA,KAAK,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA;AAAA,EACpC;AAAA,EAEA,yBAAA,GAAkC;AAChC,IAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,IAAA,CAAK,uBAAA,EAAyB,CAAA;AAAA,EAC7C;AAAA,EAEA,sBAAA,GAA+B;AAC7B,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,MAAA,CAAO,SAAA,EAAU,EAAG,IAAA;AAC5C,IAAA,IAAI,CAAC,UAAA,EAAY;AAEf,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,wBAAwB,CAAA;AACrC,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,uBAAuB,CAAA;AAAA,EACtC;AACF","file":"index.js","sourcesContent":["export var util;\n(function (util) {\n    util.assertEqual = (_) => { };\n    function assertIs(_arg) { }\n    util.assertIs = assertIs;\n    function assertNever(_x) {\n        throw new Error();\n    }\n    util.assertNever = assertNever;\n    util.arrayToEnum = (items) => {\n        const obj = {};\n        for (const item of items) {\n            obj[item] = item;\n        }\n        return obj;\n    };\n    util.getValidEnumValues = (obj) => {\n        const validKeys = util.objectKeys(obj).filter((k) => typeof obj[obj[k]] !== \"number\");\n        const filtered = {};\n        for (const k of validKeys) {\n            filtered[k] = obj[k];\n        }\n        return util.objectValues(filtered);\n    };\n    util.objectValues = (obj) => {\n        return util.objectKeys(obj).map(function (e) {\n            return obj[e];\n        });\n    };\n    util.objectKeys = typeof Object.keys === \"function\" // eslint-disable-line ban/ban\n        ? (obj) => Object.keys(obj) // eslint-disable-line ban/ban\n        : (object) => {\n            const keys = [];\n            for (const key in object) {\n                if (Object.prototype.hasOwnProperty.call(object, key)) {\n                    keys.push(key);\n                }\n            }\n            return keys;\n        };\n    util.find = (arr, checker) => {\n        for (const item of arr) {\n            if (checker(item))\n                return item;\n        }\n        return undefined;\n    };\n    util.isInteger = typeof Number.isInteger === \"function\"\n        ? (val) => Number.isInteger(val) // eslint-disable-line ban/ban\n        : (val) => typeof val === \"number\" && Number.isFinite(val) && Math.floor(val) === val;\n    function joinValues(array, separator = \" | \") {\n        return array.map((val) => (typeof val === \"string\" ? `'${val}'` : val)).join(separator);\n    }\n    util.joinValues = joinValues;\n    util.jsonStringifyReplacer = (_, value) => {\n        if (typeof value === \"bigint\") {\n            return value.toString();\n        }\n        return value;\n    };\n})(util || (util = {}));\nexport var objectUtil;\n(function (objectUtil) {\n    objectUtil.mergeShapes = (first, second) => {\n        return {\n            ...first,\n            ...second, // second overwrites first\n        };\n    };\n})(objectUtil || (objectUtil = {}));\nexport const ZodParsedType = util.arrayToEnum([\n    \"string\",\n    \"nan\",\n    \"number\",\n    \"integer\",\n    \"float\",\n    \"boolean\",\n    \"date\",\n    \"bigint\",\n    \"symbol\",\n    \"function\",\n    \"undefined\",\n    \"null\",\n    \"array\",\n    \"object\",\n    \"unknown\",\n    \"promise\",\n    \"void\",\n    \"never\",\n    \"map\",\n    \"set\",\n]);\nexport const getParsedType = (data) => {\n    const t = typeof data;\n    switch (t) {\n        case \"undefined\":\n            return ZodParsedType.undefined;\n        case \"string\":\n            return ZodParsedType.string;\n        case \"number\":\n            return Number.isNaN(data) ? ZodParsedType.nan : ZodParsedType.number;\n        case \"boolean\":\n            return ZodParsedType.boolean;\n        case \"function\":\n            return ZodParsedType.function;\n        case \"bigint\":\n            return ZodParsedType.bigint;\n        case \"symbol\":\n            return ZodParsedType.symbol;\n        case \"object\":\n            if (Array.isArray(data)) {\n                return ZodParsedType.array;\n            }\n            if (data === null) {\n                return ZodParsedType.null;\n            }\n            if (data.then && typeof data.then === \"function\" && data.catch && typeof data.catch === \"function\") {\n                return ZodParsedType.promise;\n            }\n            if (typeof Map !== \"undefined\" && data instanceof Map) {\n                return ZodParsedType.map;\n            }\n            if (typeof Set !== \"undefined\" && data instanceof Set) {\n                return ZodParsedType.set;\n            }\n            if (typeof Date !== \"undefined\" && data instanceof Date) {\n                return ZodParsedType.date;\n            }\n            return ZodParsedType.object;\n        default:\n            return ZodParsedType.unknown;\n    }\n};\n","import { util } from \"./helpers/util.js\";\nexport const ZodIssueCode = util.arrayToEnum([\n    \"invalid_type\",\n    \"invalid_literal\",\n    \"custom\",\n    \"invalid_union\",\n    \"invalid_union_discriminator\",\n    \"invalid_enum_value\",\n    \"unrecognized_keys\",\n    \"invalid_arguments\",\n    \"invalid_return_type\",\n    \"invalid_date\",\n    \"invalid_string\",\n    \"too_small\",\n    \"too_big\",\n    \"invalid_intersection_types\",\n    \"not_multiple_of\",\n    \"not_finite\",\n]);\nexport const quotelessJson = (obj) => {\n    const json = JSON.stringify(obj, null, 2);\n    return json.replace(/\"([^\"]+)\":/g, \"$1:\");\n};\nexport class ZodError extends Error {\n    get errors() {\n        return this.issues;\n    }\n    constructor(issues) {\n        super();\n        this.issues = [];\n        this.addIssue = (sub) => {\n            this.issues = [...this.issues, sub];\n        };\n        this.addIssues = (subs = []) => {\n            this.issues = [...this.issues, ...subs];\n        };\n        const actualProto = new.target.prototype;\n        if (Object.setPrototypeOf) {\n            // eslint-disable-next-line ban/ban\n            Object.setPrototypeOf(this, actualProto);\n        }\n        else {\n            this.__proto__ = actualProto;\n        }\n        this.name = \"ZodError\";\n        this.issues = issues;\n    }\n    format(_mapper) {\n        const mapper = _mapper ||\n            function (issue) {\n                return issue.message;\n            };\n        const fieldErrors = { _errors: [] };\n        const processError = (error) => {\n            for (const issue of error.issues) {\n                if (issue.code === \"invalid_union\") {\n                    issue.unionErrors.map(processError);\n                }\n                else if (issue.code === \"invalid_return_type\") {\n                    processError(issue.returnTypeError);\n                }\n                else if (issue.code === \"invalid_arguments\") {\n                    processError(issue.argumentsError);\n                }\n                else if (issue.path.length === 0) {\n                    fieldErrors._errors.push(mapper(issue));\n                }\n                else {\n                    let curr = fieldErrors;\n                    let i = 0;\n                    while (i < issue.path.length) {\n                        const el = issue.path[i];\n                        const terminal = i === issue.path.length - 1;\n                        if (!terminal) {\n                            curr[el] = curr[el] || { _errors: [] };\n                            // if (typeof el === \"string\") {\n                            //   curr[el] = curr[el] || { _errors: [] };\n                            // } else if (typeof el === \"number\") {\n                            //   const errorArray: any = [];\n                            //   errorArray._errors = [];\n                            //   curr[el] = curr[el] || errorArray;\n                            // }\n                        }\n                        else {\n                            curr[el] = curr[el] || { _errors: [] };\n                            curr[el]._errors.push(mapper(issue));\n                        }\n                        curr = curr[el];\n                        i++;\n                    }\n                }\n            }\n        };\n        processError(this);\n        return fieldErrors;\n    }\n    static assert(value) {\n        if (!(value instanceof ZodError)) {\n            throw new Error(`Not a ZodError: ${value}`);\n        }\n    }\n    toString() {\n        return this.message;\n    }\n    get message() {\n        return JSON.stringify(this.issues, util.jsonStringifyReplacer, 2);\n    }\n    get isEmpty() {\n        return this.issues.length === 0;\n    }\n    flatten(mapper = (issue) => issue.message) {\n        const fieldErrors = {};\n        const formErrors = [];\n        for (const sub of this.issues) {\n            if (sub.path.length > 0) {\n                const firstEl = sub.path[0];\n                fieldErrors[firstEl] = fieldErrors[firstEl] || [];\n                fieldErrors[firstEl].push(mapper(sub));\n            }\n            else {\n                formErrors.push(mapper(sub));\n            }\n        }\n        return { formErrors, fieldErrors };\n    }\n    get formErrors() {\n        return this.flatten();\n    }\n}\nZodError.create = (issues) => {\n    const error = new ZodError(issues);\n    return error;\n};\n","import {\n  canAccessPublicly,\n  checkRules,\n  defaultAuthConfig,\n  isDevPlaygroundRequest,\n  isProtectedPath,\n} from '@mastra/server/auth';\nimport type { Context, Middleware, Next } from 'koa';\n\nexport const authenticationMiddleware: Middleware = async (ctx: Context, next: Next) => {\n  const mastra = ctx.state.mastra;\n  const authConfig = mastra.getServer()?.auth;\n  const customRouteAuthConfig = ctx.state.customRouteAuthConfig;\n\n  if (!authConfig) {\n    // No auth config, skip authentication\n    return next();\n  }\n\n  const path = String(ctx.path || '/');\n  const method = String(ctx.method || 'GET');\n  const getHeader = (name: string) => ctx.headers[name.toLowerCase()] as string | undefined;\n\n  if (isDevPlaygroundRequest(path, method, getHeader, authConfig)) {\n    // Skip authentication for dev playground requests\n    return next();\n  }\n\n  if (!isProtectedPath(path, method, authConfig, customRouteAuthConfig)) {\n    return next();\n  }\n\n  // Skip authentication for public routes\n  if (canAccessPublicly(path, method, authConfig)) {\n    return next();\n  }\n\n  // Get token from header or query\n  const authHeader = ctx.headers.authorization;\n  let token: string | null = authHeader ? authHeader.replace('Bearer ', '') : null;\n\n  const query = ctx.query as Record<string, string>;\n  if (!token && query.apiKey) {\n    token = query.apiKey || null;\n  }\n\n  // Handle missing token\n  if (!token) {\n    ctx.status = 401;\n    ctx.body = { error: 'Authentication required' };\n    return;\n  }\n\n  try {\n    // Verify token and get user data\n    let user: unknown;\n\n    // Client provided verify function\n    if (typeof authConfig.authenticateToken === 'function') {\n      // Note: The auth config function signature accepts HonoRequest, but in practice\n      // it should work with any request object that has the necessary properties\n      user = await authConfig.authenticateToken(token, ctx.request as any);\n    } else {\n      throw new Error('No token verification method configured');\n    }\n\n    if (!user) {\n      ctx.status = 401;\n      ctx.body = { error: 'Invalid or expired token' };\n      return;\n    }\n\n    // Store user in context\n    ctx.state.requestContext.set('user', user);\n\n    return next();\n  } catch (err) {\n    console.error(err);\n    ctx.status = 401;\n    ctx.body = { error: 'Invalid or expired token' };\n    return;\n  }\n};\n\nexport const authorizationMiddleware: Middleware = async (ctx: Context, next: Next) => {\n  const mastra = ctx.state.mastra;\n  const authConfig = mastra.getServer()?.auth;\n  const customRouteAuthConfig = ctx.state.customRouteAuthConfig;\n\n  if (!authConfig) {\n    // No auth config, skip authorization\n    return next();\n  }\n\n  const path = String(ctx.path || '/');\n  const method = String(ctx.method || 'GET');\n  const getHeader = (name: string) => ctx.headers[name.toLowerCase()] as string | undefined;\n\n  if (isDevPlaygroundRequest(path, method, getHeader, authConfig)) {\n    // Skip authorization for dev playground requests\n    return next();\n  }\n\n  if (!isProtectedPath(path, method, authConfig, customRouteAuthConfig)) {\n    return next();\n  }\n\n  // Skip for public routes\n  if (canAccessPublicly(path, method, authConfig)) {\n    return next();\n  }\n\n  const user = ctx.state.requestContext.get('user');\n\n  if ('authorizeUser' in authConfig && typeof authConfig.authorizeUser === 'function') {\n    try {\n      const isAuthorized = await authConfig.authorizeUser(user, ctx.request as any);\n\n      if (isAuthorized) {\n        return next();\n      }\n\n      ctx.status = 403;\n      ctx.body = { error: 'Access denied' };\n      return;\n    } catch (err) {\n      console.error(err);\n      ctx.status = 500;\n      ctx.body = { error: 'Authorization error' };\n      return;\n    }\n  }\n\n  // Client-provided authorization function\n  if ('authorize' in authConfig && typeof authConfig.authorize === 'function') {\n    try {\n      // Note: The authorize function signature expects ContextWithMastra as 4th param\n      // For Koa, we pass a compatible object with similar structure\n      const context = {\n        get: (key: string) => {\n          if (key === 'mastra') return ctx.state.mastra;\n          if (key === 'requestContext') return ctx.state.requestContext;\n          if (key === 'tools') return ctx.state.tools;\n          if (key === 'taskStore') return ctx.state.taskStore;\n          if (key === 'customRouteAuthConfig') return ctx.state.customRouteAuthConfig;\n          return undefined;\n        },\n        req: ctx.request as any,\n      } as any;\n\n      const isAuthorized = await authConfig.authorize(path, method, user, context);\n\n      if (isAuthorized) {\n        return next();\n      }\n\n      ctx.status = 403;\n      ctx.body = { error: 'Access denied' };\n      return;\n    } catch (err) {\n      console.error(err);\n      ctx.status = 500;\n      ctx.body = { error: 'Authorization error' };\n      return;\n    }\n  }\n\n  // Custom rule-based authorization\n  if ('rules' in authConfig && authConfig.rules && authConfig.rules.length > 0) {\n    const isAuthorized = await checkRules(authConfig.rules, path, method, user);\n\n    if (isAuthorized) {\n      return next();\n    }\n\n    ctx.status = 403;\n    ctx.body = { error: 'Access denied' };\n    return;\n  }\n\n  // Default rule-based authorization\n  if (defaultAuthConfig.rules && defaultAuthConfig.rules.length > 0) {\n    const isAuthorized = await checkRules(defaultAuthConfig.rules, path, method, user);\n\n    if (isAuthorized) {\n      return next();\n    }\n  }\n\n  ctx.status = 403;\n  ctx.body = { error: 'Access denied' };\n};\n","import { Busboy } from '@fastify/busboy';\nimport type { ToolsInput } from '@mastra/core/agent';\nimport type { Mastra } from '@mastra/core/mastra';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { InMemoryTaskStore } from '@mastra/server/a2a/store';\nimport { formatZodError } from '@mastra/server/handlers/error';\nimport type { MCPHttpTransportResult, MCPSseTransportResult } from '@mastra/server/handlers/mcp';\nimport type { ParsedRequestParams, ServerRoute } from '@mastra/server/server-adapter';\nimport {\n  MastraServer as MastraServerBase,\n  normalizeQueryParams,\n  redactStreamChunk,\n} from '@mastra/server/server-adapter';\nimport type Koa from 'koa';\nimport type { Context, Middleware, Next } from 'koa';\nimport { ZodError } from 'zod';\n\nimport { authenticationMiddleware, authorizationMiddleware } from './auth-middleware';\n\n// Extend Koa types to include Mastra context\ndeclare module 'koa' {\n  interface DefaultState {\n    mastra: Mastra;\n    requestContext: RequestContext;\n    tools: ToolsInput;\n    abortSignal: AbortSignal;\n    taskStore: InMemoryTaskStore;\n    customRouteAuthConfig?: Map<string, boolean>;\n  }\n}\n\nexport class MastraServer extends MastraServerBase<Koa, Context, Context> {\n  createContextMiddleware(): Middleware {\n    return async (ctx: Context, next: Next) => {\n      // Parse request context from request body and add to context\n      let bodyRequestContext: Record<string, any> | undefined;\n      let paramsRequestContext: Record<string, any> | undefined;\n\n      // Parse request context from request body (POST/PUT)\n      if (ctx.method === 'POST' || ctx.method === 'PUT') {\n        const contentType = ctx.headers['content-type'];\n        if (contentType?.includes('application/json') && ctx.request.body) {\n          const body = ctx.request.body as { requestContext?: Record<string, any> };\n          if (body.requestContext) {\n            bodyRequestContext = body.requestContext;\n          }\n        }\n      }\n\n      // Parse request context from query params (GET)\n      if (ctx.method === 'GET') {\n        try {\n          const query = ctx.query;\n          const encodedRequestContext = query.requestContext;\n          if (typeof encodedRequestContext === 'string') {\n            // Try JSON first\n            try {\n              paramsRequestContext = JSON.parse(encodedRequestContext);\n            } catch {\n              // Fallback to base64(JSON)\n              try {\n                const json = Buffer.from(encodedRequestContext, 'base64').toString('utf-8');\n                paramsRequestContext = JSON.parse(json);\n              } catch {\n                // ignore if still invalid\n              }\n            }\n          }\n        } catch {\n          // ignore query parsing errors\n        }\n      }\n\n      const requestContext = this.mergeRequestContext({ paramsRequestContext, bodyRequestContext });\n\n      // Set context in state object\n      ctx.state.requestContext = requestContext;\n      ctx.state.mastra = this.mastra;\n      ctx.state.tools = this.tools || {};\n      if (this.taskStore) {\n        ctx.state.taskStore = this.taskStore;\n      }\n      ctx.state.customRouteAuthConfig = this.customRouteAuthConfig;\n\n      // Create abort controller for request cancellation\n      const controller = new AbortController();\n      ctx.req.on('close', () => {\n        // Only abort if the response wasn't successfully completed\n        if (!ctx.res.writableEnded) {\n          controller.abort();\n        }\n      });\n      ctx.state.abortSignal = controller.signal;\n\n      await next();\n    };\n  }\n\n  async stream(route: ServerRoute, ctx: Context, result: { fullStream: ReadableStream }): Promise<void> {\n    // Tell Koa we're handling the response ourselves\n    ctx.respond = false;\n\n    // Set status and headers via ctx.res directly since we're bypassing Koa's response\n    ctx.res.writeHead(200, {\n      'Content-Type': 'text/plain',\n      'Transfer-Encoding': 'chunked',\n    });\n\n    const streamFormat = route.streamFormat || 'stream';\n\n    const readableStream = result instanceof ReadableStream ? result : result.fullStream;\n    const reader = readableStream.getReader();\n\n    ctx.res.on('close', () => {\n      void reader.cancel('request aborted');\n    });\n\n    try {\n      while (true) {\n        const { done, value } = await reader.read();\n        if (done) break;\n\n        if (value) {\n          // Optionally redact sensitive data (system prompts, tool definitions, API keys) before sending to the client\n          const shouldRedact = this.streamOptions?.redact ?? true;\n          const outputValue = shouldRedact ? redactStreamChunk(value) : value;\n          if (streamFormat === 'sse') {\n            ctx.res.write(`data: ${JSON.stringify(outputValue)}\\n\\n`);\n          } else {\n            ctx.res.write(JSON.stringify(outputValue) + '\\x1E');\n          }\n        }\n      }\n    } catch (error) {\n      console.error(error);\n    } finally {\n      ctx.res.end();\n    }\n  }\n\n  async getParams(route: ServerRoute, ctx: Context): Promise<ParsedRequestParams> {\n    const urlParams = (ctx.params || {}) as Record<string, string>;\n    // Koa's ctx.query is ParsedUrlQuery which is Record<string, string | string[]>\n    const queryParams = normalizeQueryParams((ctx.query || {}) as Record<string, unknown>);\n    let body: unknown;\n\n    if (route.method === 'POST' || route.method === 'PUT' || route.method === 'PATCH') {\n      const contentType = ctx.headers['content-type'] || '';\n\n      if (contentType.includes('multipart/form-data')) {\n        try {\n          const maxFileSize = route.maxBodySize ?? this.bodyLimitOptions?.maxSize;\n          body = await this.parseMultipartFormData(ctx, maxFileSize);\n        } catch (error) {\n          console.error('Failed to parse multipart form data:', error);\n          // Re-throw size limit errors, let others fall through to validation\n          if (error instanceof Error && error.message.toLowerCase().includes('size')) {\n            throw error;\n          }\n        }\n      } else {\n        body = ctx.request.body;\n      }\n    }\n\n    return { urlParams, queryParams, body };\n  }\n\n  /**\n   * Parse multipart/form-data using @fastify/busboy.\n   * Converts file uploads to Buffers and parses JSON field values.\n   *\n   * @param ctx - The Koa context object\n   * @param maxFileSize - Optional maximum file size in bytes\n   */\n  private parseMultipartFormData(ctx: Context, maxFileSize?: number): Promise<Record<string, unknown>> {\n    return new Promise((resolve, reject) => {\n      const result: Record<string, unknown> = {};\n\n      const busboy = new Busboy({\n        headers: {\n          'content-type': ctx.headers['content-type'] as string,\n        },\n        limits: maxFileSize ? { fileSize: maxFileSize } : undefined,\n      });\n\n      busboy.on('file', (fieldname: string, file: NodeJS.ReadableStream) => {\n        const chunks: Buffer[] = [];\n        let limitExceeded = false;\n\n        file.on('data', (chunk: Buffer) => {\n          chunks.push(chunk);\n        });\n\n        file.on('limit', () => {\n          limitExceeded = true;\n          reject(new Error(`File size limit exceeded${maxFileSize ? ` (max: ${maxFileSize} bytes)` : ''}`));\n        });\n\n        file.on('end', () => {\n          if (!limitExceeded) {\n            result[fieldname] = Buffer.concat(chunks);\n          }\n        });\n      });\n\n      busboy.on('field', (fieldname: string, value: string) => {\n        // Try to parse JSON strings (like 'options')\n        try {\n          result[fieldname] = JSON.parse(value);\n        } catch {\n          result[fieldname] = value;\n        }\n      });\n\n      busboy.on('finish', () => {\n        resolve(result);\n      });\n\n      busboy.on('error', (error: Error) => {\n        reject(error);\n      });\n\n      // Pipe the raw request to busboy\n      ctx.req.pipe(busboy);\n    });\n  }\n\n  async sendResponse(route: ServerRoute, ctx: Context, result: unknown): Promise<void> {\n    if (route.responseType === 'json') {\n      ctx.body = result;\n    } else if (route.responseType === 'stream') {\n      await this.stream(route, ctx, result as { fullStream: ReadableStream });\n    } else if (route.responseType === 'datastream-response') {\n      // Handle AI SDK Response objects - pipe Response.body to Koa response\n      // Tell Koa we're handling the response ourselves\n      ctx.respond = false;\n\n      const fetchResponse = result as globalThis.Response;\n      const headers: Record<string, string> = {};\n      fetchResponse.headers.forEach((value, key) => {\n        headers[key] = value;\n      });\n      ctx.res.writeHead(fetchResponse.status, headers);\n\n      if (fetchResponse.body) {\n        const reader = fetchResponse.body.getReader();\n        try {\n          while (true) {\n            const { done, value } = await reader.read();\n            if (done) break;\n            ctx.res.write(value);\n          }\n        } finally {\n          ctx.res.end();\n        }\n      } else {\n        ctx.res.end();\n      }\n    } else if (route.responseType === 'mcp-http') {\n      // MCP Streamable HTTP transport\n      // Tell Koa we're handling the response ourselves\n      ctx.respond = false;\n\n      const { server, httpPath } = result as MCPHttpTransportResult;\n\n      try {\n        // Attach parsed body to raw request so MCP server's readJsonBody can use it\n        const rawReq = ctx.req as typeof ctx.req & { body?: unknown };\n        if (ctx.request.body !== undefined) {\n          rawReq.body = ctx.request.body;\n        }\n\n        await server.startHTTP({\n          url: new URL(ctx.url, `http://${ctx.headers.host}`),\n          httpPath,\n          req: rawReq,\n          res: ctx.res,\n        });\n        // Response handled by startHTTP\n      } catch {\n        if (!ctx.res.headersSent) {\n          ctx.res.writeHead(500, { 'Content-Type': 'application/json' });\n          ctx.res.end(\n            JSON.stringify({\n              jsonrpc: '2.0',\n              error: { code: -32603, message: 'Internal server error' },\n              id: null,\n            }),\n          );\n        }\n      }\n    } else if (route.responseType === 'mcp-sse') {\n      // MCP SSE transport\n      // Tell Koa we're handling the response ourselves\n      ctx.respond = false;\n\n      const { server, ssePath, messagePath } = result as MCPSseTransportResult;\n\n      try {\n        // Attach parsed body to raw request so MCP server's readJsonBody can use it\n        const rawReq = ctx.req as typeof ctx.req & { body?: unknown };\n        if (ctx.request.body !== undefined) {\n          rawReq.body = ctx.request.body;\n        }\n\n        await server.startSSE({\n          url: new URL(ctx.url, `http://${ctx.headers.host}`),\n          ssePath,\n          messagePath,\n          req: rawReq,\n          res: ctx.res,\n        });\n        // Response handled by startSSE\n      } catch {\n        if (!ctx.res.headersSent) {\n          ctx.res.writeHead(500, { 'Content-Type': 'application/json' });\n          ctx.res.end(JSON.stringify({ error: 'Error handling MCP SSE request' }));\n        }\n      }\n    } else {\n      ctx.status = 500;\n    }\n  }\n\n  async registerRoute(app: Koa, route: ServerRoute, { prefix }: { prefix?: string }): Promise<void> {\n    const fullPath = `${prefix}${route.path}`;\n\n    // Convert Express-style :param to Koa-style :param (they're the same)\n    const koaPath = fullPath;\n\n    // Define the route handler\n    const handler = async (ctx: Context, next: Next) => {\n      // Check if this route matches the request\n      const pathRegex = this.pathToRegex(koaPath);\n      const match = pathRegex.exec(ctx.path);\n\n      if (!match) {\n        await next();\n        return;\n      }\n\n      // Check HTTP method\n      if (route.method.toUpperCase() !== 'ALL' && ctx.method.toUpperCase() !== route.method.toUpperCase()) {\n        await next();\n        return;\n      }\n\n      // Extract URL params from regex match\n      const paramNames = this.extractParamNames(koaPath);\n      ctx.params = {};\n      paramNames.forEach((name, index) => {\n        ctx.params[name] = match[index + 1];\n      });\n\n      const params = await this.getParams(route, ctx);\n\n      if (params.queryParams) {\n        try {\n          params.queryParams = await this.parseQueryParams(route, params.queryParams);\n        } catch (error) {\n          console.error('Error parsing query params', error);\n          // Zod validation errors should return 400 Bad Request with structured issues\n          if (error instanceof ZodError) {\n            ctx.status = 400;\n            ctx.body = formatZodError(error, 'query parameters');\n            return;\n          }\n          ctx.status = 400;\n          ctx.body = {\n            error: 'Invalid query parameters',\n            issues: [{ field: 'unknown', message: error instanceof Error ? error.message : 'Unknown error' }],\n          };\n          return;\n        }\n      }\n\n      if (params.body) {\n        try {\n          params.body = await this.parseBody(route, params.body);\n        } catch (error) {\n          console.error('Error parsing body:', error instanceof Error ? error.message : String(error));\n          // Zod validation errors should return 400 Bad Request with structured issues\n          if (error instanceof ZodError) {\n            ctx.status = 400;\n            ctx.body = formatZodError(error, 'request body');\n            return;\n          }\n          ctx.status = 400;\n          ctx.body = {\n            error: 'Invalid request body',\n            issues: [{ field: 'unknown', message: error instanceof Error ? error.message : 'Unknown error' }],\n          };\n          return;\n        }\n      }\n\n      const handlerParams = {\n        ...params.urlParams,\n        ...params.queryParams,\n        ...(typeof params.body === 'object' ? params.body : {}),\n        requestContext: ctx.state.requestContext,\n        mastra: this.mastra,\n        tools: ctx.state.tools,\n        taskStore: ctx.state.taskStore,\n        abortSignal: ctx.state.abortSignal,\n      };\n\n      try {\n        const result = await route.handler(handlerParams);\n        await this.sendResponse(route, ctx, result);\n      } catch (error) {\n        console.error('Error calling handler', error);\n        // Check if it's an HTTPException or MastraError with a status code\n        let status = 500;\n        if (error && typeof error === 'object') {\n          // Check for direct status property (HTTPException)\n          if ('status' in error) {\n            status = (error as any).status;\n          }\n          // Check for MastraError with status in details\n          else if (\n            'details' in error &&\n            error.details &&\n            typeof error.details === 'object' &&\n            'status' in error.details\n          ) {\n            status = (error.details as any).status;\n          }\n        }\n        ctx.status = status;\n        ctx.body = { error: error instanceof Error ? error.message : 'Unknown error' };\n      }\n    };\n\n    // Register the middleware\n    app.use(handler);\n  }\n\n  /**\n   * Convert Express-style path to regex for matching\n   */\n  private pathToRegex(path: string): RegExp {\n    // First replace :param with a placeholder that won't be affected by escaping\n    const PARAM_PLACEHOLDER = '\\x00PARAM\\x00';\n    const pathWithPlaceholders = path.replace(/:[^/]+/g, PARAM_PLACEHOLDER);\n\n    // Escape all regex meta-characters so the path is treated literally\n    const escapedPath = pathWithPlaceholders.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&');\n\n    // Replace placeholders with capture groups and escape forward slashes\n    const regexPath = escapedPath.replace(new RegExp(PARAM_PLACEHOLDER, 'g'), '([^/]+)').replace(/\\//g, '\\\\/');\n\n    return new RegExp(`^${regexPath}$`);\n  }\n\n  /**\n   * Extract parameter names from path\n   */\n  private extractParamNames(path: string): string[] {\n    const matches = path.match(/:[^/]+/g) || [];\n    return matches.map(m => m.slice(1)); // Remove the leading ':'\n  }\n\n  registerContextMiddleware(): void {\n    this.app.use(this.createContextMiddleware());\n  }\n\n  registerAuthMiddleware(): void {\n    const authConfig = this.mastra.getServer()?.auth;\n    if (!authConfig) {\n      // No auth config, skip registration\n      return;\n    }\n\n    this.app.use(authenticationMiddleware);\n    this.app.use(authorizationMiddleware);\n  }\n}\n"]}
+{"version":3,"sources":["../../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/util.js","../../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/ZodError.js","../src/auth-middleware.ts","../src/index.ts"],"names":["util","objectUtil","MastraServerBase"],"mappings":";;;;;;;;;AAAO,IAAI,IAAA;AAAA,CACV,SAAUA,KAAAA,EAAM;AACb,EAAAA,KAAAA,CAAK,WAAA,GAAc,CAAC,CAAA,KAAM;AAAA,EAAE,CAAA;AAC5B,EAAA,SAAS,SAAS,IAAA,EAAM;AAAA,EAAE;AAC1B,EAAAA,MAAK,QAAA,GAAW,QAAA;AAChB,EAAA,SAAS,YAAY,EAAA,EAAI;AACrB,IAAA,MAAM,IAAI,KAAA,EAAM;AAAA,EACpB;AACA,EAAAA,MAAK,WAAA,GAAc,WAAA;AACnB,EAAAA,KAAAA,CAAK,WAAA,GAAc,CAAC,KAAA,KAAU;AAC1B,IAAA,MAAM,MAAM,EAAC;AACb,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACtB,MAAA,GAAA,CAAI,IAAI,CAAA,GAAI,IAAA;AAAA,IAChB;AACA,IAAA,OAAO,GAAA;AAAA,EACX,CAAA;AACA,EAAAA,KAAAA,CAAK,kBAAA,GAAqB,CAAC,GAAA,KAAQ;AAC/B,IAAA,MAAM,SAAA,GAAYA,KAAAA,CAAK,UAAA,CAAW,GAAG,EAAE,MAAA,CAAO,CAAC,CAAA,KAAM,OAAO,GAAA,CAAI,GAAA,CAAI,CAAC,CAAC,MAAM,QAAQ,CAAA;AACpF,IAAA,MAAM,WAAW,EAAC;AAClB,IAAA,KAAA,MAAW,KAAK,SAAA,EAAW;AACvB,MAAA,QAAA,CAAS,CAAC,CAAA,GAAI,GAAA,CAAI,CAAC,CAAA;AAAA,IACvB;AACA,IAAA,OAAOA,KAAAA,CAAK,aAAa,QAAQ,CAAA;AAAA,EACrC,CAAA;AACA,EAAAA,KAAAA,CAAK,YAAA,GAAe,CAAC,GAAA,KAAQ;AACzB,IAAA,OAAOA,MAAK,UAAA,CAAW,GAAG,CAAA,CAAE,GAAA,CAAI,SAAU,CAAA,EAAG;AACzC,MAAA,OAAO,IAAI,CAAC,CAAA;AAAA,IAChB,CAAC,CAAA;AAAA,EACL,CAAA;AACA,EAAAA,KAAAA,CAAK,UAAA,GAAa,OAAO,MAAA,CAAO,IAAA,KAAS,UAAA,GACnC,CAAC,GAAA,KAAQ,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,GACxB,CAAC,MAAA,KAAW;AACV,IAAA,MAAM,OAAO,EAAC;AACd,IAAA,KAAA,MAAW,OAAO,MAAA,EAAQ;AACtB,MAAA,IAAI,OAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,MAAA,EAAQ,GAAG,CAAA,EAAG;AACnD,QAAA,IAAA,CAAK,KAAK,GAAG,CAAA;AAAA,MACjB;AAAA,IACJ;AACA,IAAA,OAAO,IAAA;AAAA,EACX,CAAA;AACJ,EAAAA,KAAAA,CAAK,IAAA,GAAO,CAAC,GAAA,EAAK,OAAA,KAAY;AAC1B,IAAA,KAAA,MAAW,QAAQ,GAAA,EAAK;AACpB,MAAA,IAAI,QAAQ,IAAI,CAAA;AACZ,QAAA,OAAO,IAAA;AAAA,IACf;AACA,IAAA,OAAO,MAAA;AAAA,EACX,CAAA;AACA,EAAAA,KAAAA,CAAK,SAAA,GAAY,OAAO,MAAA,CAAO,SAAA,KAAc,aACvC,CAAC,GAAA,KAAQ,MAAA,CAAO,SAAA,CAAU,GAAG,CAAA,GAC7B,CAAC,GAAA,KAAQ,OAAO,GAAA,KAAQ,QAAA,IAAY,MAAA,CAAO,QAAA,CAAS,GAAG,CAAA,IAAK,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,KAAM,GAAA;AACtF,EAAA,SAAS,UAAA,CAAW,KAAA,EAAO,SAAA,GAAY,KAAA,EAAO;AAC1C,IAAA,OAAO,KAAA,CAAM,GAAA,CAAI,CAAC,GAAA,KAAS,OAAO,GAAA,KAAQ,QAAA,GAAW,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,CAAA,GAAM,GAAI,CAAA,CAAE,KAAK,SAAS,CAAA;AAAA,EAC1F;AACA,EAAAA,MAAK,UAAA,GAAa,UAAA;AAClB,EAAAA,KAAAA,CAAK,qBAAA,GAAwB,CAAC,CAAA,EAAG,KAAA,KAAU;AACvC,IAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC3B,MAAA,OAAO,MAAM,QAAA,EAAS;AAAA,IAC1B;AACA,IAAA,OAAO,KAAA;AAAA,EACX,CAAA;AACJ,CAAA,EAAG,IAAA,KAAS,IAAA,GAAO,EAAC,CAAE,CAAA;AACf,IAAI,UAAA;AAAA,CACV,SAAUC,WAAAA,EAAY;AACnB,EAAAA,WAAAA,CAAW,WAAA,GAAc,CAAC,KAAA,EAAO,MAAA,KAAW;AACxC,IAAA,OAAO;AAAA,MACH,GAAG,KAAA;AAAA,MACH,GAAG;AAAA;AAAA,KACP;AAAA,EACJ,CAAA;AACJ,CAAA,EAAG,UAAA,KAAe,UAAA,GAAa,EAAC,CAAE,CAAA;AACL,KAAK,WAAA,CAAY;AAAA,EAC1C,QAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,KAAA;AAAA,EACA;AACJ,CAAC;;;AC1F2B,KAAK,WAAA,CAAY;AAAA,EACzC,cAAA;AAAA,EACA,iBAAA;AAAA,EACA,QAAA;AAAA,EACA,eAAA;AAAA,EACA,6BAAA;AAAA,EACA,oBAAA;AAAA,EACA,mBAAA;AAAA,EACA,mBAAA;AAAA,EACA,qBAAA;AAAA,EACA,cAAA;AAAA,EACA,gBAAA;AAAA,EACA,WAAA;AAAA,EACA,SAAA;AAAA,EACA,4BAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACJ,CAAC;AAKM,IAAM,QAAA,GAAN,MAAM,SAAA,SAAiB,KAAA,CAAM;AAAA,EAChC,IAAI,MAAA,GAAS;AACT,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EAChB;AAAA,EACA,YAAY,MAAA,EAAQ;AAChB,IAAA,KAAA,EAAM;AACN,IAAA,IAAA,CAAK,SAAS,EAAC;AACf,IAAA,IAAA,CAAK,QAAA,GAAW,CAAC,GAAA,KAAQ;AACrB,MAAA,IAAA,CAAK,MAAA,GAAS,CAAC,GAAG,IAAA,CAAK,QAAQ,GAAG,CAAA;AAAA,IACtC,CAAA;AACA,IAAA,IAAA,CAAK,SAAA,GAAY,CAAC,IAAA,GAAO,EAAC,KAAM;AAC5B,MAAA,IAAA,CAAK,SAAS,CAAC,GAAG,IAAA,CAAK,MAAA,EAAQ,GAAG,IAAI,CAAA;AAAA,IAC1C,CAAA;AACA,IAAA,MAAM,cAAc,GAAA,CAAA,MAAA,CAAW,SAAA;AAC/B,IAAA,IAAI,OAAO,cAAA,EAAgB;AAEvB,MAAA,MAAA,CAAO,cAAA,CAAe,MAAM,WAAW,CAAA;AAAA,IAC3C,CAAA,MACK;AACD,MAAA,IAAA,CAAK,SAAA,GAAY,WAAA;AAAA,IACrB;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAClB;AAAA,EACA,OAAO,OAAA,EAAS;AACZ,IAAA,MAAM,MAAA,GAAS,OAAA,IACX,SAAU,KAAA,EAAO;AACb,MAAA,OAAO,KAAA,CAAM,OAAA;AAAA,IACjB,CAAA;AACJ,IAAA,MAAM,WAAA,GAAc,EAAE,OAAA,EAAS,EAAC,EAAE;AAClC,IAAA,MAAM,YAAA,GAAe,CAAC,KAAA,KAAU;AAC5B,MAAA,KAAA,MAAW,KAAA,IAAS,MAAM,MAAA,EAAQ;AAC9B,QAAA,IAAI,KAAA,CAAM,SAAS,eAAA,EAAiB;AAChC,UAAA,KAAA,CAAM,WAAA,CAAY,IAAI,YAAY,CAAA;AAAA,QACtC,CAAA,MAAA,IACS,KAAA,CAAM,IAAA,KAAS,qBAAA,EAAuB;AAC3C,UAAA,YAAA,CAAa,MAAM,eAAe,CAAA;AAAA,QACtC,CAAA,MAAA,IACS,KAAA,CAAM,IAAA,KAAS,mBAAA,EAAqB;AACzC,UAAA,YAAA,CAAa,MAAM,cAAc,CAAA;AAAA,QACrC,CAAA,MAAA,IACS,KAAA,CAAM,IAAA,CAAK,MAAA,KAAW,CAAA,EAAG;AAC9B,UAAA,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,QAC1C,CAAA,MACK;AACD,UAAA,IAAI,IAAA,GAAO,WAAA;AACX,UAAA,IAAI,CAAA,GAAI,CAAA;AACR,UAAA,OAAO,CAAA,GAAI,KAAA,CAAM,IAAA,CAAK,MAAA,EAAQ;AAC1B,YAAA,MAAM,EAAA,GAAK,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA;AACvB,YAAA,MAAM,QAAA,GAAW,CAAA,KAAM,KAAA,CAAM,IAAA,CAAK,MAAA,GAAS,CAAA;AAC3C,YAAA,IAAI,CAAC,QAAA,EAAU;AACX,cAAA,IAAA,CAAK,EAAE,IAAI,IAAA,CAAK,EAAE,KAAK,EAAE,OAAA,EAAS,EAAC,EAAE;AAAA,YAQzC,CAAA,MACK;AACD,cAAA,IAAA,CAAK,EAAE,IAAI,IAAA,CAAK,EAAE,KAAK,EAAE,OAAA,EAAS,EAAC,EAAE;AACrC,cAAA,IAAA,CAAK,EAAE,CAAA,CAAE,OAAA,CAAQ,IAAA,CAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,YACvC;AACA,YAAA,IAAA,GAAO,KAAK,EAAE,CAAA;AACd,YAAA,CAAA,EAAA;AAAA,UACJ;AAAA,QACJ;AAAA,MACJ;AAAA,IACJ,CAAA;AACA,IAAA,YAAA,CAAa,IAAI,CAAA;AACjB,IAAA,OAAO,WAAA;AAAA,EACX;AAAA,EACA,OAAO,OAAO,KAAA,EAAO;AACjB,IAAA,IAAI,EAAE,iBAAiB,SAAA,CAAA,EAAW;AAC9B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,KAAK,CAAA,CAAE,CAAA;AAAA,IAC9C;AAAA,EACJ;AAAA,EACA,QAAA,GAAW;AACP,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EAChB;AAAA,EACA,IAAI,OAAA,GAAU;AACV,IAAA,OAAO,KAAK,SAAA,CAAU,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,uBAAuB,CAAC,CAAA;AAAA,EACpE;AAAA,EACA,IAAI,OAAA,GAAU;AACV,IAAA,OAAO,IAAA,CAAK,OAAO,MAAA,KAAW,CAAA;AAAA,EAClC;AAAA,EACA,OAAA,CAAQ,MAAA,GAAS,CAAC,KAAA,KAAU,MAAM,OAAA,EAAS;AACvC,IAAA,MAAM,cAAc,EAAC;AACrB,IAAA,MAAM,aAAa,EAAC;AACpB,IAAA,KAAA,MAAW,GAAA,IAAO,KAAK,MAAA,EAAQ;AAC3B,MAAA,IAAI,GAAA,CAAI,IAAA,CAAK,MAAA,GAAS,CAAA,EAAG;AACrB,QAAA,MAAM,OAAA,GAAU,GAAA,CAAI,IAAA,CAAK,CAAC,CAAA;AAC1B,QAAA,WAAA,CAAY,OAAO,CAAA,GAAI,WAAA,CAAY,OAAO,KAAK,EAAC;AAChD,QAAA,WAAA,CAAY,OAAO,CAAA,CAAE,IAAA,CAAK,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,MACzC,CAAA,MACK;AACD,QAAA,UAAA,CAAW,IAAA,CAAK,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,MAC/B;AAAA,IACJ;AACA,IAAA,OAAO,EAAE,YAAY,WAAA,EAAY;AAAA,EACrC;AAAA,EACA,IAAI,UAAA,GAAa;AACb,IAAA,OAAO,KAAK,OAAA,EAAQ;AAAA,EACxB;AACJ,CAAA;AACA,QAAA,CAAS,MAAA,GAAS,CAAC,MAAA,KAAW;AAC1B,EAAA,MAAM,KAAA,GAAQ,IAAI,QAAA,CAAS,MAAM,CAAA;AACjC,EAAA,OAAO,KAAA;AACX,CAAA;AC1HO,IAAM,wBAAA,GAAuC,OAAO,GAAA,EAAc,IAAA,KAAe;AACtF,EAAA,MAAM,MAAA,GAAS,IAAI,KAAA,CAAM,MAAA;AACzB,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,SAAA,EAAU,EAAG,IAAA;AACvC,EAAA,MAAM,qBAAA,GAAwB,IAAI,KAAA,CAAM,qBAAA;AAExC,EAAA,IAAI,CAAC,UAAA,EAAY;AAEf,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAEA,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,GAAA,CAAI,IAAA,IAAQ,GAAG,CAAA;AACnC,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,GAAA,CAAI,MAAA,IAAU,KAAK,CAAA;AACzC,EAAA,MAAM,YAAY,CAAC,IAAA,KAAiB,IAAI,OAAA,CAAQ,IAAA,CAAK,aAAa,CAAA;AAElE,EAAA,IAAI,uBAAuB,IAAA,EAAM,MAAA,EAAQ,SAAA,EAAW,UAAA,EAAY,qBAAqB,CAAA,EAAG;AAEtF,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAEA,EAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,EAAM,MAAA,EAAQ,UAAA,EAAY,qBAAqB,CAAA,EAAG;AACrE,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAGA,EAAA,IAAI,iBAAA,CAAkB,IAAA,EAAM,MAAA,EAAQ,UAAU,CAAA,EAAG;AAC/C,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAGA,EAAA,MAAM,UAAA,GAAa,IAAI,OAAA,CAAQ,aAAA;AAC/B,EAAA,IAAI,QAAuB,UAAA,GAAa,UAAA,CAAW,OAAA,CAAQ,SAAA,EAAW,EAAE,CAAA,GAAI,IAAA;AAE5E,EAAA,MAAM,QAAQ,GAAA,CAAI,KAAA;AAClB,EAAA,IAAI,CAAC,KAAA,IAAS,KAAA,CAAM,MAAA,EAAQ;AAC1B,IAAA,KAAA,GAAQ,MAAM,MAAA,IAAU,IAAA;AAAA,EAC1B;AAGA,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,IAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,yBAAA,EAA0B;AAC9C,IAAA;AAAA,EACF;AAEA,EAAA,IAAI;AAEF,IAAA,IAAI,IAAA;AAGJ,IAAA,IAAI,OAAO,UAAA,CAAW,iBAAA,KAAsB,UAAA,EAAY;AAGtD,MAAA,IAAA,GAAO,MAAM,UAAA,CAAW,iBAAA,CAAkB,KAAA,EAAO,IAAI,OAAc,CAAA;AAAA,IACrE,CAAA,MAAO;AACL,MAAA,MAAM,IAAI,MAAM,yCAAyC,CAAA;AAAA,IAC3D;AAEA,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,MAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,0BAAA,EAA2B;AAC/C,MAAA;AAAA,IACF;AAGA,IAAA,GAAA,CAAI,KAAA,CAAM,cAAA,CAAe,GAAA,CAAI,MAAA,EAAQ,IAAI,CAAA;AAGzC,IAAA,IAAI;AACF,MAAA,MAAM,YAAA,GAAe,OAAO,SAAA,EAAU;AACtC,MAAA,MAAM,eAAe,YAAA,EAAc,IAAA;AAEnC,MAAA,IAAI,YAAA,EAAc;AAEhB,QAAA,MAAM,WAAA,GAAc,MAAM,YAAA,CAAa,cAAA,CAAe,IAAc,CAAA;AACpE,QAAA,GAAA,CAAI,KAAA,CAAM,cAAA,CAAe,GAAA,CAAI,iBAAA,EAAmB,WAAW,CAAA;AAG3D,QAAA,MAAM,KAAA,GAAQ,MAAM,YAAA,CAAa,QAAA,CAAS,IAAc,CAAA;AACxD,QAAA,GAAA,CAAI,KAAA,CAAM,cAAA,CAAe,GAAA,CAAI,WAAA,EAAa,KAAK,CAAA;AAAA,MACjD;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAEA,IAAA,OAAO,IAAA,EAAK;AAAA,EACd,SAAS,GAAA,EAAK;AACZ,IAAA,OAAA,CAAQ,MAAM,GAAG,CAAA;AACjB,IAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,IAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,0BAAA,EAA2B;AAC/C,IAAA;AAAA,EACF;AACF,CAAA;AAEO,IAAM,uBAAA,GAAsC,OAAO,GAAA,EAAc,IAAA,KAAe;AACrF,EAAA,MAAM,MAAA,GAAS,IAAI,KAAA,CAAM,MAAA;AACzB,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,SAAA,EAAU,EAAG,IAAA;AACvC,EAAA,MAAM,qBAAA,GAAwB,IAAI,KAAA,CAAM,qBAAA;AAExC,EAAA,IAAI,CAAC,UAAA,EAAY;AAEf,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAEA,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,GAAA,CAAI,IAAA,IAAQ,GAAG,CAAA;AACnC,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,GAAA,CAAI,MAAA,IAAU,KAAK,CAAA;AACzC,EAAA,MAAM,YAAY,CAAC,IAAA,KAAiB,IAAI,OAAA,CAAQ,IAAA,CAAK,aAAa,CAAA;AAElE,EAAA,IAAI,uBAAuB,IAAA,EAAM,MAAA,EAAQ,SAAA,EAAW,UAAA,EAAY,qBAAqB,CAAA,EAAG;AAEtF,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAEA,EAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,EAAM,MAAA,EAAQ,UAAA,EAAY,qBAAqB,CAAA,EAAG;AACrE,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAGA,EAAA,IAAI,iBAAA,CAAkB,IAAA,EAAM,MAAA,EAAQ,UAAU,CAAA,EAAG;AAC/C,IAAA,OAAO,IAAA,EAAK;AAAA,EACd;AAEA,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,KAAA,CAAM,cAAA,CAAe,IAAI,MAAM,CAAA;AAEhD,EAAA,IAAI,eAAA,IAAmB,UAAA,IAAc,OAAO,UAAA,CAAW,kBAAkB,UAAA,EAAY;AACnF,IAAA,IAAI;AACF,MAAA,MAAM,eAAe,MAAM,UAAA,CAAW,aAAA,CAAc,IAAA,EAAM,IAAI,OAAc,CAAA;AAE5E,MAAA,IAAI,YAAA,EAAc;AAChB,QAAA,OAAO,IAAA,EAAK;AAAA,MACd;AAEA,MAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,MAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,eAAA,EAAgB;AACpC,MAAA;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,MAAM,GAAG,CAAA;AACjB,MAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,MAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,qBAAA,EAAsB;AAC1C,MAAA;AAAA,IACF;AAAA,EACF;AAGA,EAAA,IAAI,WAAA,IAAe,UAAA,IAAc,OAAO,UAAA,CAAW,cAAc,UAAA,EAAY;AAC3E,IAAA,IAAI;AAGF,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,GAAA,EAAK,CAAC,GAAA,KAAgB;AACpB,UAAA,IAAI,GAAA,KAAQ,QAAA,EAAU,OAAO,GAAA,CAAI,KAAA,CAAM,MAAA;AACvC,UAAA,IAAI,GAAA,KAAQ,gBAAA,EAAkB,OAAO,GAAA,CAAI,KAAA,CAAM,cAAA;AAC/C,UAAA,IAAI,GAAA,KAAQ,OAAA,EAAS,OAAO,GAAA,CAAI,KAAA,CAAM,KAAA;AACtC,UAAA,IAAI,GAAA,KAAQ,WAAA,EAAa,OAAO,GAAA,CAAI,KAAA,CAAM,SAAA;AAC1C,UAAA,IAAI,GAAA,KAAQ,uBAAA,EAAyB,OAAO,GAAA,CAAI,KAAA,CAAM,qBAAA;AACtD,UAAA,OAAO,MAAA;AAAA,QACT,CAAA;AAAA,QACA,KAAK,GAAA,CAAI;AAAA,OACX;AAEA,MAAA,MAAM,eAAe,MAAM,UAAA,CAAW,UAAU,IAAA,EAAM,MAAA,EAAQ,MAAM,OAAO,CAAA;AAE3E,MAAA,IAAI,YAAA,EAAc;AAChB,QAAA,OAAO,IAAA,EAAK;AAAA,MACd;AAEA,MAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,MAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,eAAA,EAAgB;AACpC,MAAA;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,MAAM,GAAG,CAAA;AACjB,MAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,MAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,qBAAA,EAAsB;AAC1C,MAAA;AAAA,IACF;AAAA,EACF;AAGA,EAAA,IAAI,WAAW,UAAA,IAAc,UAAA,CAAW,SAAS,UAAA,CAAW,KAAA,CAAM,SAAS,CAAA,EAAG;AAC5E,IAAA,MAAM,eAAe,MAAM,UAAA,CAAW,WAAW,KAAA,EAAO,IAAA,EAAM,QAAQ,IAAI,CAAA;AAE1E,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,OAAO,IAAA,EAAK;AAAA,IACd;AAEA,IAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,IAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,eAAA,EAAgB;AACpC,IAAA;AAAA,EACF;AAGA,EAAA,IAAI,iBAAA,CAAkB,KAAA,IAAS,iBAAA,CAAkB,KAAA,CAAM,SAAS,CAAA,EAAG;AACjE,IAAA,MAAM,eAAe,MAAM,UAAA,CAAW,kBAAkB,KAAA,EAAO,IAAA,EAAM,QAAQ,IAAI,CAAA;AAEjF,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,OAAO,IAAA,EAAK;AAAA,IACd;AAAA,EACF;AAEA,EAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,EAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,eAAA,EAAgB;AACtC,CAAA;;;AC3LA,SAAS,aAAa,GAAA,EAAkC;AACtD,EAAA,MAAM,QAAA,GAAW,IAAI,QAAA,IAAY,MAAA;AACjC,EAAA,MAAM,IAAA,GAAO,IAAI,IAAA,IAAQ,WAAA;AACzB,EAAA,MAAM,MAAM,CAAA,EAAG,QAAQ,MAAM,IAAI,CAAA,EAAG,IAAI,GAAG,CAAA,CAAA;AAE3C,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,EAAA,KAAA,MAAW,CAAC,KAAK,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,EAAG;AACtD,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,QAAA,KAAA,CAAM,QAAQ,CAAA,CAAA,KAAK,OAAA,CAAQ,MAAA,CAAO,GAAA,EAAK,CAAC,CAAC,CAAA;AAAA,MAC3C,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,IAAI,UAAA,CAAW,OAAA,CAAQ,GAAA,EAAK;AAAA,IACjC,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ;AAAA,GACD,CAAA;AACH;AAiBO,IAAM,YAAA,GAAN,cAA2BC,cAAA,CAAwC;AAAA,EACxE,uBAAA,GAAsC;AACpC,IAAA,OAAO,OAAO,KAAc,IAAA,KAAe;AAEzC,MAAA,IAAI,kBAAA;AACJ,MAAA,IAAI,oBAAA;AAGJ,MAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,IAAU,GAAA,CAAI,WAAW,KAAA,EAAO;AACjD,QAAA,MAAM,WAAA,GAAc,GAAA,CAAI,OAAA,CAAQ,cAAc,CAAA;AAC9C,QAAA,IAAI,aAAa,QAAA,CAAS,kBAAkB,CAAA,IAAK,GAAA,CAAI,QAAQ,IAAA,EAAM;AACjE,UAAA,MAAM,IAAA,GAAO,IAAI,OAAA,CAAQ,IAAA;AACzB,UAAA,IAAI,KAAK,cAAA,EAAgB;AACvB,YAAA,kBAAA,GAAqB,IAAA,CAAK,cAAA;AAAA,UAC5B;AAAA,QACF;AAAA,MACF;AAGA,MAAA,IAAI,GAAA,CAAI,WAAW,KAAA,EAAO;AACxB,QAAA,IAAI;AACF,UAAA,MAAM,QAAQ,GAAA,CAAI,KAAA;AAClB,UAAA,MAAM,wBAAwB,KAAA,CAAM,cAAA;AACpC,UAAA,IAAI,OAAO,0BAA0B,QAAA,EAAU;AAE7C,YAAA,IAAI;AACF,cAAA,oBAAA,GAAuB,IAAA,CAAK,MAAM,qBAAqB,CAAA;AAAA,YACzD,CAAA,CAAA,MAAQ;AAEN,cAAA,IAAI;AACF,gBAAA,MAAM,OAAO,MAAA,CAAO,IAAA,CAAK,uBAAuB,QAAQ,CAAA,CAAE,SAAS,OAAO,CAAA;AAC1E,gBAAA,oBAAA,GAAuB,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,cACxC,CAAA,CAAA,MAAQ;AAAA,cAER;AAAA,YACF;AAAA,UACF;AAAA,QACF,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF;AAEA,MAAA,MAAM,iBAAiB,IAAA,CAAK,mBAAA,CAAoB,EAAE,oBAAA,EAAsB,oBAAoB,CAAA;AAG5F,MAAA,GAAA,CAAI,MAAM,cAAA,GAAiB,cAAA;AAC3B,MAAA,GAAA,CAAI,KAAA,CAAM,SAAS,IAAA,CAAK,MAAA;AACxB,MAAA,GAAA,CAAI,KAAA,CAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,IAAS,EAAC;AACjC,MAAA,IAAI,KAAK,SAAA,EAAW;AAClB,QAAA,GAAA,CAAI,KAAA,CAAM,YAAY,IAAA,CAAK,SAAA;AAAA,MAC7B;AACA,MAAA,GAAA,CAAI,KAAA,CAAM,wBAAwB,IAAA,CAAK,qBAAA;AAGvC,MAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,MAAA,GAAA,CAAI,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,MAAM;AAExB,QAAA,IAAI,CAAC,GAAA,CAAI,GAAA,CAAI,aAAA,EAAe;AAC1B,UAAA,UAAA,CAAW,KAAA,EAAM;AAAA,QACnB;AAAA,MACF,CAAC,CAAA;AACD,MAAA,GAAA,CAAI,KAAA,CAAM,cAAc,UAAA,CAAW,MAAA;AAEnC,MAAA,MAAM,IAAA,EAAK;AAAA,IACb,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,MAAA,CAAO,KAAA,EAAoB,GAAA,EAAc,MAAA,EAAuD;AAEpG,IAAA,GAAA,CAAI,OAAA,GAAU,KAAA;AAGd,IAAA,GAAA,CAAI,GAAA,CAAI,UAAU,GAAA,EAAK;AAAA,MACrB,cAAA,EAAgB,YAAA;AAAA,MAChB,mBAAA,EAAqB;AAAA,KACtB,CAAA;AAED,IAAA,MAAM,YAAA,GAAe,MAAM,YAAA,IAAgB,QAAA;AAE3C,IAAA,MAAM,cAAA,GAAiB,MAAA,YAAkB,cAAA,GAAiB,MAAA,GAAS,MAAA,CAAO,UAAA;AAC1E,IAAA,MAAM,MAAA,GAAS,eAAe,SAAA,EAAU;AAExC,IAAA,GAAA,CAAI,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,MAAM;AACxB,MAAA,KAAK,MAAA,CAAO,OAAO,iBAAiB,CAAA;AAAA,IACtC,CAAC,CAAA;AAED,IAAA,IAAI;AACF,MAAA,OAAO,IAAA,EAAM;AACX,QAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,QAAA,IAAI,IAAA,EAAM;AAEV,QAAA,IAAI,KAAA,EAAO;AAET,UAAA,MAAM,YAAA,GAAe,IAAA,CAAK,aAAA,EAAe,MAAA,IAAU,IAAA;AACnD,UAAA,MAAM,WAAA,GAAc,YAAA,GAAe,iBAAA,CAAkB,KAAK,CAAA,GAAI,KAAA;AAC9D,UAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,YAAA,GAAA,CAAI,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,WAAW,CAAC;;AAAA,CAAM,CAAA;AAAA,UAC1D,CAAA,MAAO;AACL,YAAA,GAAA,CAAI,IAAI,KAAA,CAAM,IAAA,CAAK,SAAA,CAAU,WAAW,IAAI,GAAM,CAAA;AAAA,UACpD;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,MAAM,KAAK,CAAA;AAAA,IACrB,CAAA,SAAE;AACA,MAAA,GAAA,CAAI,IAAI,GAAA,EAAI;AAAA,IACd;AAAA,EACF;AAAA,EAEA,MAAM,SAAA,CAAU,KAAA,EAAoB,GAAA,EAA4C;AAC9E,IAAA,MAAM,SAAA,GAAa,GAAA,CAAI,MAAA,IAAU,EAAC;AAElC,IAAA,MAAM,WAAA,GAAc,oBAAA,CAAsB,GAAA,CAAI,KAAA,IAAS,EAA8B,CAAA;AACrF,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI,cAAA;AAEJ,IAAA,IAAI,KAAA,CAAM,WAAW,MAAA,IAAU,KAAA,CAAM,WAAW,KAAA,IAAS,KAAA,CAAM,WAAW,OAAA,EAAS;AACjF,MAAA,MAAM,WAAA,GAAc,GAAA,CAAI,OAAA,CAAQ,cAAc,CAAA,IAAK,EAAA;AAEnD,MAAA,IAAI,WAAA,CAAY,QAAA,CAAS,qBAAqB,CAAA,EAAG;AAC/C,QAAA,IAAI;AACF,UAAA,MAAM,WAAA,GAAc,KAAA,CAAM,WAAA,IAAe,IAAA,CAAK,gBAAA,EAAkB,OAAA;AAChE,UAAA,IAAA,GAAO,MAAM,IAAA,CAAK,sBAAA,CAAuB,GAAA,EAAK,WAAW,CAAA;AAAA,QAC3D,SAAS,KAAA,EAAO;AACd,UAAA,OAAA,CAAQ,KAAA,CAAM,wCAAwC,KAAK,CAAA;AAE3D,UAAA,IAAI,KAAA,YAAiB,SAAS,KAAA,CAAM,OAAA,CAAQ,aAAY,CAAE,QAAA,CAAS,MAAM,CAAA,EAAG;AAC1E,YAAA,MAAM,KAAA;AAAA,UACR;AACA,UAAA,cAAA,GAAiB;AAAA,YACf,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU;AAAA,WACpD;AAAA,QACF;AAAA,MACF,CAAA,MAAO;AACL,QAAA,IAAA,GAAO,IAAI,OAAA,CAAQ,IAAA;AAAA,MACrB;AAAA,IACF;AAEA,IAAA,OAAO,EAAE,SAAA,EAAW,WAAA,EAAa,IAAA,EAAM,cAAA,EAAe;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,sBAAA,CAAuB,KAAc,WAAA,EAAwD;AACnG,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,SAAkC,EAAC;AAEzC,MAAA,MAAM,MAAA,GAAS,IAAI,MAAA,CAAO;AAAA,QACxB,OAAA,EAAS;AAAA,UACP,cAAA,EAAgB,GAAA,CAAI,OAAA,CAAQ,cAAc;AAAA,SAC5C;AAAA,QACA,MAAA,EAAQ,WAAA,GAAc,EAAE,QAAA,EAAU,aAAY,GAAI;AAAA,OACnD,CAAA;AAED,MAAA,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,SAAA,EAAmB,IAAA,KAAgC;AACpE,QAAA,MAAM,SAAmB,EAAC;AAC1B,QAAA,IAAI,aAAA,GAAgB,KAAA;AAEpB,QAAA,IAAA,CAAK,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACjC,UAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,QACnB,CAAC,CAAA;AAED,QAAA,IAAA,CAAK,EAAA,CAAG,SAAS,MAAM;AACrB,UAAA,aAAA,GAAgB,IAAA;AAChB,UAAA,MAAA,CAAO,IAAI,MAAM,CAAA,wBAAA,EAA2B,WAAA,GAAc,UAAU,WAAW,CAAA,OAAA,CAAA,GAAY,EAAE,CAAA,CAAE,CAAC,CAAA;AAAA,QAClG,CAAC,CAAA;AAED,QAAA,IAAA,CAAK,EAAA,CAAG,OAAO,MAAM;AACnB,UAAA,IAAI,CAAC,aAAA,EAAe;AAClB,YAAA,MAAA,CAAO,SAAS,CAAA,GAAI,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA;AAAA,UAC1C;AAAA,QACF,CAAC,CAAA;AAAA,MACH,CAAC,CAAA;AAED,MAAA,MAAA,CAAO,EAAA,CAAG,OAAA,EAAS,CAAC,SAAA,EAAmB,KAAA,KAAkB;AAEvD,QAAA,IAAI;AACF,UAAA,MAAA,CAAO,SAAS,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAAA,QACtC,CAAA,CAAA,MAAQ;AACN,UAAA,MAAA,CAAO,SAAS,CAAA,GAAI,KAAA;AAAA,QACtB;AAAA,MACF,CAAC,CAAA;AAED,MAAA,MAAA,CAAO,EAAA,CAAG,UAAU,MAAM;AACxB,QAAA,OAAA,CAAQ,MAAM,CAAA;AAAA,MAChB,CAAC,CAAA;AAED,MAAA,MAAA,CAAO,EAAA,CAAG,OAAA,EAAS,CAAC,KAAA,KAAiB;AACnC,QAAA,MAAA,CAAO,KAAK,CAAA;AAAA,MACd,CAAC,CAAA;AAGD,MAAA,GAAA,CAAI,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACrB,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,YAAA,CAAa,KAAA,EAAoB,GAAA,EAAc,QAAiB,MAAA,EAAgC;AACpG,IAAA,MAAM,cAAA,GAAiB,MAAA,IAAU,IAAA,CAAK,MAAA,IAAU,EAAA;AAEhD,IAAA,IAAI,KAAA,CAAM,iBAAiB,MAAA,EAAQ;AAGjC,MAAA,GAAA,CAAI,IAAA,GAAO,kBAAA;AACX,MAAA,GAAA,CAAI,IAAA,GAAO,WAAW,IAAA,IAAQ,MAAA,KAAW,SAAY,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,MAAA;AAAA,IAC9E,CAAA,MAAA,IAAW,KAAA,CAAM,YAAA,KAAiB,QAAA,EAAU;AAC1C,MAAA,MAAM,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,GAAA,EAAK,MAAwC,CAAA;AAAA,IACxE,CAAA,MAAA,IAAW,KAAA,CAAM,YAAA,KAAiB,qBAAA,EAAuB;AAGvD,MAAA,GAAA,CAAI,OAAA,GAAU,KAAA;AAEd,MAAA,MAAM,aAAA,GAAgB,MAAA;AACtB,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,aAAA,CAAc,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AAC5C,QAAA,OAAA,CAAQ,GAAG,CAAA,GAAI,KAAA;AAAA,MACjB,CAAC,CAAA;AACD,MAAA,GAAA,CAAI,GAAA,CAAI,SAAA,CAAU,aAAA,CAAc,MAAA,EAAQ,OAAO,CAAA;AAE/C,MAAA,IAAI,cAAc,IAAA,EAAM;AACtB,QAAA,MAAM,MAAA,GAAS,aAAA,CAAc,IAAA,CAAK,SAAA,EAAU;AAC5C,QAAA,IAAI;AACF,UAAA,OAAO,IAAA,EAAM;AACX,YAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,YAAA,IAAI,IAAA,EAAM;AACV,YAAA,GAAA,CAAI,GAAA,CAAI,MAAM,KAAK,CAAA;AAAA,UACrB;AAAA,QACF,CAAA,SAAE;AACA,UAAA,GAAA,CAAI,IAAI,GAAA,EAAI;AAAA,QACd;AAAA,MACF,CAAA,MAAO;AACL,QAAA,GAAA,CAAI,IAAI,GAAA,EAAI;AAAA,MACd;AAAA,IACF,CAAA,MAAA,IAAW,KAAA,CAAM,YAAA,KAAiB,UAAA,EAAY;AAG5C,MAAA,GAAA,CAAI,OAAA,GAAU,KAAA;AAEd,MAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAU,UAAA,EAAY,iBAAgB,GAAI,MAAA;AAE1D,MAAA,IAAI;AAEF,QAAA,MAAM,SAAS,GAAA,CAAI,GAAA;AACnB,QAAA,IAAI,GAAA,CAAI,OAAA,CAAQ,IAAA,KAAS,MAAA,EAAW;AAClC,UAAA,MAAA,CAAO,IAAA,GAAO,IAAI,OAAA,CAAQ,IAAA;AAAA,QAC5B;AAGA,QAAA,MAAM,UAAU,EAAE,GAAG,IAAA,CAAK,UAAA,EAAY,GAAG,eAAA,EAAgB;AAEzD,QAAA,MAAM,OAAO,SAAA,CAAU;AAAA,UACrB,GAAA,EAAK,IAAI,GAAA,CAAI,GAAA,CAAI,KAAK,CAAA,OAAA,EAAU,GAAA,CAAI,OAAA,CAAQ,IAAI,CAAA,CAAE,CAAA;AAAA,UAClD,QAAA,EAAU,CAAA,EAAG,cAAc,CAAA,EAAG,QAAQ,CAAA,CAAA;AAAA,UACtC,GAAA,EAAK,MAAA;AAAA,UACL,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,SAAS,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,MAAA,GAAS,IAAI,OAAA,GAAU;AAAA,SACtD,CAAA;AAAA,MAEH,CAAA,CAAA,MAAQ;AACN,QAAA,IAAI,CAAC,GAAA,CAAI,GAAA,CAAI,WAAA,EAAa;AACxB,UAAA,GAAA,CAAI,IAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AAC7D,UAAA,GAAA,CAAI,GAAA,CAAI,GAAA;AAAA,YACN,KAAK,SAAA,CAAU;AAAA,cACb,OAAA,EAAS,KAAA;AAAA,cACT,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAS,uBAAA,EAAwB;AAAA,cACxD,EAAA,EAAI;AAAA,aACL;AAAA,WACH;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAA,MAAA,IAAW,KAAA,CAAM,YAAA,KAAiB,SAAA,EAAW;AAG3C,MAAA,GAAA,CAAI,OAAA,GAAU,KAAA;AAEd,MAAA,MAAM,EAAE,MAAA,EAAQ,OAAA,EAAS,WAAA,EAAY,GAAI,MAAA;AAEzC,MAAA,IAAI;AAEF,QAAA,MAAM,SAAS,GAAA,CAAI,GAAA;AACnB,QAAA,IAAI,GAAA,CAAI,OAAA,CAAQ,IAAA,KAAS,MAAA,EAAW;AAClC,UAAA,MAAA,CAAO,IAAA,GAAO,IAAI,OAAA,CAAQ,IAAA;AAAA,QAC5B;AAEA,QAAA,MAAM,OAAO,QAAA,CAAS;AAAA,UACpB,GAAA,EAAK,IAAI,GAAA,CAAI,GAAA,CAAI,KAAK,CAAA,OAAA,EAAU,GAAA,CAAI,OAAA,CAAQ,IAAI,CAAA,CAAE,CAAA;AAAA,UAClD,OAAA,EAAS,CAAA,EAAG,cAAc,CAAA,EAAG,OAAO,CAAA,CAAA;AAAA,UACpC,WAAA,EAAa,CAAA,EAAG,cAAc,CAAA,EAAG,WAAW,CAAA,CAAA;AAAA,UAC5C,GAAA,EAAK,MAAA;AAAA,UACL,KAAK,GAAA,CAAI;AAAA,SACV,CAAA;AAAA,MAEH,CAAA,CAAA,MAAQ;AACN,QAAA,IAAI,CAAC,GAAA,CAAI,GAAA,CAAI,WAAA,EAAa;AACxB,UAAA,GAAA,CAAI,IAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,oBAAoB,CAAA;AAC7D,UAAA,GAAA,CAAI,GAAA,CAAI,IAAI,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,gCAAA,EAAkC,CAAC,CAAA;AAAA,QACzE;AAAA,MACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AAAA,IACf;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,GAAA,EAAU,KAAA,EAAoB,EAAE,MAAA,EAAQ,WAAA,EAAY,GAAyB,EAAC,EAAkB;AAElH,IAAA,MAAM,MAAA,GAAS,WAAA,IAAe,IAAA,CAAK,MAAA,IAAU,EAAA;AAE7C,IAAA,MAAM,QAAA,GAAW,CAAA,EAAG,MAAM,CAAA,EAAG,MAAM,IAAI,CAAA,CAAA;AAGvC,IAAA,MAAM,OAAA,GAAU,QAAA;AAGhB,IAAA,MAAM,OAAA,GAAU,OAAO,GAAA,EAAc,IAAA,KAAe;AAElD,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,WAAA,CAAY,OAAO,CAAA;AAC1C,MAAA,MAAM,KAAA,GAAQ,SAAA,CAAU,IAAA,CAAK,GAAA,CAAI,IAAI,CAAA;AAErC,MAAA,IAAI,CAAC,KAAA,EAAO;AACV,QAAA,MAAM,IAAA,EAAK;AACX,QAAA;AAAA,MACF;AAGA,MAAA,IAAI,KAAA,CAAM,MAAA,CAAO,WAAA,EAAY,KAAM,KAAA,IAAS,GAAA,CAAI,MAAA,CAAO,WAAA,EAAY,KAAM,KAAA,CAAM,MAAA,CAAO,WAAA,EAAY,EAAG;AACnG,QAAA,MAAM,IAAA,EAAK;AACX,QAAA;AAAA,MACF;AAGA,MAAA,MAAM,UAAA,GAAa,IAAA,CAAK,iBAAA,CAAkB,OAAO,CAAA;AACjD,MAAA,GAAA,CAAI,SAAS,EAAC;AACd,MAAA,UAAA,CAAW,OAAA,CAAQ,CAAC,IAAA,EAAM,KAAA,KAAU;AAClC,QAAA,GAAA,CAAI,MAAA,CAAO,IAAI,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAC,CAAA;AAAA,MACpC,CAAC,CAAA;AAGD,MAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,cAAA,CAAe,KAAA,EAAO;AAAA,QACjD,IAAA,EAAM,MAAA,CAAO,GAAA,CAAI,IAAA,IAAQ,GAAG,CAAA;AAAA,QAC5B,MAAA,EAAQ,MAAA,CAAO,GAAA,CAAI,MAAA,IAAU,KAAK,CAAA;AAAA,QAClC,WAAW,CAAA,IAAA,KAAQ,GAAA,CAAI,OAAA,CAAQ,IAAA,CAAK,aAAa,CAAA;AAAA,QACjD,QAAA,EAAU,CAAA,IAAA,KAAS,GAAA,CAAI,KAAA,CAAiC,IAAI,CAAA;AAAA,QAC5D,cAAA,EAAgB,IAAI,KAAA,CAAM,cAAA;AAAA,QAC1B,OAAA,EAAS,aAAa,GAAG;AAAA,OAC1B,CAAA;AAED,MAAA,IAAI,SAAA,EAAW;AACb,QAAA,GAAA,CAAI,SAAS,SAAA,CAAU,MAAA;AACvB,QAAA,GAAA,CAAI,IAAA,GAAO,EAAE,KAAA,EAAO,SAAA,CAAU,KAAA,EAAM;AACpC,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,SAAA,CAAU,OAAO,GAAG,CAAA;AAG9C,MAAA,IAAI,OAAO,cAAA,EAAgB;AACzB,QAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,QAAA,GAAA,CAAI,IAAA,GAAO;AAAA,UACT,KAAA,EAAO,sBAAA;AAAA,UACP,MAAA,EAAQ,CAAC,EAAE,KAAA,EAAO,QAAQ,OAAA,EAAS,MAAA,CAAO,cAAA,CAAe,OAAA,EAAS;AAAA,SACpE;AACA,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,OAAO,WAAA,EAAa;AACtB,QAAA,IAAI;AACF,UAAA,MAAA,CAAO,cAAc,MAAM,IAAA,CAAK,gBAAA,CAAiB,KAAA,EAAO,OAAO,WAAW,CAAA;AAAA,QAC5E,SAAS,KAAA,EAAO;AACd,UAAA,OAAA,CAAQ,KAAA,CAAM,8BAA8B,KAAK,CAAA;AAEjD,UAAA,IAAI,iBAAiB,QAAA,EAAU;AAC7B,YAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,YAAA,GAAA,CAAI,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,kBAAkB,CAAA;AACnD,YAAA;AAAA,UACF;AACA,UAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,UAAA,GAAA,CAAI,IAAA,GAAO;AAAA,YACT,KAAA,EAAO,0BAAA;AAAA,YACP,MAAA,EAAQ,CAAC,EAAE,KAAA,EAAO,SAAA,EAAW,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,eAAA,EAAiB;AAAA,WAClG;AACA,UAAA;AAAA,QACF;AAAA,MACF;AAEA,MAAA,IAAI,OAAO,IAAA,EAAM;AACf,QAAA,IAAI;AACF,UAAA,MAAA,CAAO,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,KAAA,EAAO,OAAO,IAAI,CAAA;AAAA,QACvD,SAAS,KAAA,EAAO;AACd,UAAA,OAAA,CAAQ,KAAA,CAAM,uBAAuB,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAE3F,UAAA,IAAI,iBAAiB,QAAA,EAAU;AAC7B,YAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,YAAA,GAAA,CAAI,IAAA,GAAO,cAAA,CAAe,KAAA,EAAO,cAAc,CAAA;AAC/C,YAAA;AAAA,UACF;AACA,UAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,UAAA,GAAA,CAAI,IAAA,GAAO;AAAA,YACT,KAAA,EAAO,sBAAA;AAAA,YACP,MAAA,EAAQ,CAAC,EAAE,KAAA,EAAO,SAAA,EAAW,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,eAAA,EAAiB;AAAA,WAClG;AACA,UAAA;AAAA,QACF;AAAA,MACF;AAEA,MAAA,MAAM,aAAA,GAAgB;AAAA,QACpB,GAAG,MAAA,CAAO,SAAA;AAAA,QACV,GAAG,MAAA,CAAO,WAAA;AAAA,QACV,GAAI,OAAO,MAAA,CAAO,SAAS,QAAA,GAAW,MAAA,CAAO,OAAO,EAAC;AAAA,QACrD,cAAA,EAAgB,IAAI,KAAA,CAAM,cAAA;AAAA,QAC1B,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,KAAA,EAAO,IAAI,KAAA,CAAM,KAAA;AAAA,QACjB,SAAA,EAAW,IAAI,KAAA,CAAM,SAAA;AAAA,QACrB,WAAA,EAAa,IAAI,KAAA,CAAM,WAAA;AAAA,QACvB,WAAA,EAAa;AAAA,OACf;AAIA,MAAA,MAAM,UAAA,GAAa,IAAA,CAAK,MAAA,CAAO,SAAA,EAAU,EAAG,IAAA;AAC5C,MAAA,IAAI,KAAA,CAAM,sBAAsB,UAAA,EAAY;AAC1C,QAAA,MAAM,eAAA,GAAkB,GAAA,CAAI,KAAA,CAAM,cAAA,CAAe,IAAI,iBAAiB,CAAA;AAEtE,QAAA,IAAI,CAAC,eAAA,IAAmB,CAAC,cAAc,eAAA,EAAiB,KAAA,CAAM,kBAAkB,CAAA,EAAG;AACjF,UAAA,GAAA,CAAI,MAAA,GAAS,GAAA;AACb,UAAA,GAAA,CAAI,IAAA,GAAO;AAAA,YACT,KAAA,EAAO,WAAA;AAAA,YACP,OAAA,EAAS,CAAA,6BAAA,EAAgC,KAAA,CAAM,kBAAkB,CAAA;AAAA,WACnE;AACA,UAAA;AAAA,QACF;AAAA,MACF;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,OAAA,CAAQ,aAAa,CAAA;AAChD,QAAA,MAAM,IAAA,CAAK,YAAA,CAAa,KAAA,EAAO,GAAA,EAAK,QAAQ,MAAM,CAAA;AAAA,MACpD,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,KAAA,CAAM,yBAAyB,KAAK,CAAA;AAE5C,QAAA,IAAI,MAAA,GAAS,GAAA;AACb,QAAA,IAAI,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AAEtC,UAAA,IAAI,YAAY,KAAA,EAAO;AACrB,YAAA,MAAA,GAAU,KAAA,CAAc,MAAA;AAAA,UAC1B,CAAA,MAAA,IAGE,SAAA,IAAa,KAAA,IACb,KAAA,CAAM,OAAA,IACN,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,IACzB,QAAA,IAAY,KAAA,CAAM,OAAA,EAClB;AACA,YAAA,MAAA,GAAU,MAAM,OAAA,CAAgB,MAAA;AAAA,UAClC;AAAA,QACF;AACA,QAAA,GAAA,CAAI,MAAA,GAAS,MAAA;AACb,QAAA,GAAA,CAAI,OAAO,EAAE,KAAA,EAAO,iBAAiB,KAAA,GAAQ,KAAA,CAAM,UAAU,eAAA,EAAgB;AAAA,MAC/E;AAAA,IACF,CAAA;AAGA,IAAA,GAAA,CAAI,IAAI,OAAO,CAAA;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,IAAA,EAAsB;AAExC,IAAA,MAAM,iBAAA,GAAoB,WAAA;AAC1B,IAAA,MAAM,oBAAA,GAAuB,IAAA,CAAK,OAAA,CAAQ,SAAA,EAAW,iBAAiB,CAAA;AAGtE,IAAA,MAAM,WAAA,GAAc,oBAAA,CAAqB,OAAA,CAAQ,qBAAA,EAAuB,MAAM,CAAA;AAG9E,IAAA,MAAM,SAAA,GAAY,WAAA,CAAY,OAAA,CAAQ,IAAI,MAAA,CAAO,iBAAA,EAAmB,GAAG,CAAA,EAAG,SAAS,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,KAAK,CAAA;AAEzG,IAAA,OAAO,IAAI,MAAA,CAAO,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,IAAA,EAAwB;AAChD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,SAAS,KAAK,EAAC;AAC1C,IAAA,OAAO,QAAQ,GAAA,CAAI,CAAA,CAAA,KAAK,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA;AAAA,EACpC;AAAA,EAEA,yBAAA,GAAkC;AAChC,IAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,IAAA,CAAK,uBAAA,EAAyB,CAAA;AAAA,EAC7C;AAAA,EAEA,sBAAA,GAA+B;AAC7B,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,MAAA,CAAO,SAAA,EAAU,EAAG,IAAA;AAC5C,IAAA,IAAI,CAAC,UAAA,EAAY;AAEf,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,wBAAwB,CAAA;AACrC,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,uBAAuB,CAAA;AAAA,EACtC;AACF","file":"index.js","sourcesContent":["export var util;\n(function (util) {\n    util.assertEqual = (_) => { };\n    function assertIs(_arg) { }\n    util.assertIs = assertIs;\n    function assertNever(_x) {\n        throw new Error();\n    }\n    util.assertNever = assertNever;\n    util.arrayToEnum = (items) => {\n        const obj = {};\n        for (const item of items) {\n            obj[item] = item;\n        }\n        return obj;\n    };\n    util.getValidEnumValues = (obj) => {\n        const validKeys = util.objectKeys(obj).filter((k) => typeof obj[obj[k]] !== \"number\");\n        const filtered = {};\n        for (const k of validKeys) {\n            filtered[k] = obj[k];\n        }\n        return util.objectValues(filtered);\n    };\n    util.objectValues = (obj) => {\n        return util.objectKeys(obj).map(function (e) {\n            return obj[e];\n        });\n    };\n    util.objectKeys = typeof Object.keys === \"function\" // eslint-disable-line ban/ban\n        ? (obj) => Object.keys(obj) // eslint-disable-line ban/ban\n        : (object) => {\n            const keys = [];\n            for (const key in object) {\n                if (Object.prototype.hasOwnProperty.call(object, key)) {\n                    keys.push(key);\n                }\n            }\n            return keys;\n        };\n    util.find = (arr, checker) => {\n        for (const item of arr) {\n            if (checker(item))\n                return item;\n        }\n        return undefined;\n    };\n    util.isInteger = typeof Number.isInteger === \"function\"\n        ? (val) => Number.isInteger(val) // eslint-disable-line ban/ban\n        : (val) => typeof val === \"number\" && Number.isFinite(val) && Math.floor(val) === val;\n    function joinValues(array, separator = \" | \") {\n        return array.map((val) => (typeof val === \"string\" ? `'${val}'` : val)).join(separator);\n    }\n    util.joinValues = joinValues;\n    util.jsonStringifyReplacer = (_, value) => {\n        if (typeof value === \"bigint\") {\n            return value.toString();\n        }\n        return value;\n    };\n})(util || (util = {}));\nexport var objectUtil;\n(function (objectUtil) {\n    objectUtil.mergeShapes = (first, second) => {\n        return {\n            ...first,\n            ...second, // second overwrites first\n        };\n    };\n})(objectUtil || (objectUtil = {}));\nexport const ZodParsedType = util.arrayToEnum([\n    \"string\",\n    \"nan\",\n    \"number\",\n    \"integer\",\n    \"float\",\n    \"boolean\",\n    \"date\",\n    \"bigint\",\n    \"symbol\",\n    \"function\",\n    \"undefined\",\n    \"null\",\n    \"array\",\n    \"object\",\n    \"unknown\",\n    \"promise\",\n    \"void\",\n    \"never\",\n    \"map\",\n    \"set\",\n]);\nexport const getParsedType = (data) => {\n    const t = typeof data;\n    switch (t) {\n        case \"undefined\":\n            return ZodParsedType.undefined;\n        case \"string\":\n            return ZodParsedType.string;\n        case \"number\":\n            return Number.isNaN(data) ? ZodParsedType.nan : ZodParsedType.number;\n        case \"boolean\":\n            return ZodParsedType.boolean;\n        case \"function\":\n            return ZodParsedType.function;\n        case \"bigint\":\n            return ZodParsedType.bigint;\n        case \"symbol\":\n            return ZodParsedType.symbol;\n        case \"object\":\n            if (Array.isArray(data)) {\n                return ZodParsedType.array;\n            }\n            if (data === null) {\n                return ZodParsedType.null;\n            }\n            if (data.then && typeof data.then === \"function\" && data.catch && typeof data.catch === \"function\") {\n                return ZodParsedType.promise;\n            }\n            if (typeof Map !== \"undefined\" && data instanceof Map) {\n                return ZodParsedType.map;\n            }\n            if (typeof Set !== \"undefined\" && data instanceof Set) {\n                return ZodParsedType.set;\n            }\n            if (typeof Date !== \"undefined\" && data instanceof Date) {\n                return ZodParsedType.date;\n            }\n            return ZodParsedType.object;\n        default:\n            return ZodParsedType.unknown;\n    }\n};\n","import { util } from \"./helpers/util.js\";\nexport const ZodIssueCode = util.arrayToEnum([\n    \"invalid_type\",\n    \"invalid_literal\",\n    \"custom\",\n    \"invalid_union\",\n    \"invalid_union_discriminator\",\n    \"invalid_enum_value\",\n    \"unrecognized_keys\",\n    \"invalid_arguments\",\n    \"invalid_return_type\",\n    \"invalid_date\",\n    \"invalid_string\",\n    \"too_small\",\n    \"too_big\",\n    \"invalid_intersection_types\",\n    \"not_multiple_of\",\n    \"not_finite\",\n]);\nexport const quotelessJson = (obj) => {\n    const json = JSON.stringify(obj, null, 2);\n    return json.replace(/\"([^\"]+)\":/g, \"$1:\");\n};\nexport class ZodError extends Error {\n    get errors() {\n        return this.issues;\n    }\n    constructor(issues) {\n        super();\n        this.issues = [];\n        this.addIssue = (sub) => {\n            this.issues = [...this.issues, sub];\n        };\n        this.addIssues = (subs = []) => {\n            this.issues = [...this.issues, ...subs];\n        };\n        const actualProto = new.target.prototype;\n        if (Object.setPrototypeOf) {\n            // eslint-disable-next-line ban/ban\n            Object.setPrototypeOf(this, actualProto);\n        }\n        else {\n            this.__proto__ = actualProto;\n        }\n        this.name = \"ZodError\";\n        this.issues = issues;\n    }\n    format(_mapper) {\n        const mapper = _mapper ||\n            function (issue) {\n                return issue.message;\n            };\n        const fieldErrors = { _errors: [] };\n        const processError = (error) => {\n            for (const issue of error.issues) {\n                if (issue.code === \"invalid_union\") {\n                    issue.unionErrors.map(processError);\n                }\n                else if (issue.code === \"invalid_return_type\") {\n                    processError(issue.returnTypeError);\n                }\n                else if (issue.code === \"invalid_arguments\") {\n                    processError(issue.argumentsError);\n                }\n                else if (issue.path.length === 0) {\n                    fieldErrors._errors.push(mapper(issue));\n                }\n                else {\n                    let curr = fieldErrors;\n                    let i = 0;\n                    while (i < issue.path.length) {\n                        const el = issue.path[i];\n                        const terminal = i === issue.path.length - 1;\n                        if (!terminal) {\n                            curr[el] = curr[el] || { _errors: [] };\n                            // if (typeof el === \"string\") {\n                            //   curr[el] = curr[el] || { _errors: [] };\n                            // } else if (typeof el === \"number\") {\n                            //   const errorArray: any = [];\n                            //   errorArray._errors = [];\n                            //   curr[el] = curr[el] || errorArray;\n                            // }\n                        }\n                        else {\n                            curr[el] = curr[el] || { _errors: [] };\n                            curr[el]._errors.push(mapper(issue));\n                        }\n                        curr = curr[el];\n                        i++;\n                    }\n                }\n            }\n        };\n        processError(this);\n        return fieldErrors;\n    }\n    static assert(value) {\n        if (!(value instanceof ZodError)) {\n            throw new Error(`Not a ZodError: ${value}`);\n        }\n    }\n    toString() {\n        return this.message;\n    }\n    get message() {\n        return JSON.stringify(this.issues, util.jsonStringifyReplacer, 2);\n    }\n    get isEmpty() {\n        return this.issues.length === 0;\n    }\n    flatten(mapper = (issue) => issue.message) {\n        const fieldErrors = {};\n        const formErrors = [];\n        for (const sub of this.issues) {\n            if (sub.path.length > 0) {\n                const firstEl = sub.path[0];\n                fieldErrors[firstEl] = fieldErrors[firstEl] || [];\n                fieldErrors[firstEl].push(mapper(sub));\n            }\n            else {\n                formErrors.push(mapper(sub));\n            }\n        }\n        return { formErrors, fieldErrors };\n    }\n    get formErrors() {\n        return this.flatten();\n    }\n}\nZodError.create = (issues) => {\n    const error = new ZodError(issues);\n    return error;\n};\n","import type { IRBACProvider, EEUser } from '@mastra/core/ee';\nimport {\n  canAccessPublicly,\n  checkRules,\n  defaultAuthConfig,\n  isDevPlaygroundRequest,\n  isProtectedPath,\n} from '@mastra/server/auth';\nimport type { Context, Middleware, Next } from 'koa';\n\nexport const authenticationMiddleware: Middleware = async (ctx: Context, next: Next) => {\n  const mastra = ctx.state.mastra;\n  const authConfig = mastra.getServer()?.auth;\n  const customRouteAuthConfig = ctx.state.customRouteAuthConfig;\n\n  if (!authConfig) {\n    // No auth config, skip authentication\n    return next();\n  }\n\n  const path = String(ctx.path || '/');\n  const method = String(ctx.method || 'GET');\n  const getHeader = (name: string) => ctx.headers[name.toLowerCase()] as string | undefined;\n\n  if (isDevPlaygroundRequest(path, method, getHeader, authConfig, customRouteAuthConfig)) {\n    // Skip authentication for dev playground requests\n    return next();\n  }\n\n  if (!isProtectedPath(path, method, authConfig, customRouteAuthConfig)) {\n    return next();\n  }\n\n  // Skip authentication for public routes\n  if (canAccessPublicly(path, method, authConfig)) {\n    return next();\n  }\n\n  // Get token from header or query\n  const authHeader = ctx.headers.authorization;\n  let token: string | null = authHeader ? authHeader.replace('Bearer ', '') : null;\n\n  const query = ctx.query as Record<string, string>;\n  if (!token && query.apiKey) {\n    token = query.apiKey || null;\n  }\n\n  // Handle missing token\n  if (!token) {\n    ctx.status = 401;\n    ctx.body = { error: 'Authentication required' };\n    return;\n  }\n\n  try {\n    // Verify token and get user data\n    let user: unknown;\n\n    // Client provided verify function\n    if (typeof authConfig.authenticateToken === 'function') {\n      // Note: The auth config function signature accepts HonoRequest, but in practice\n      // it should work with any request object that has the necessary properties\n      user = await authConfig.authenticateToken(token, ctx.request as any);\n    } else {\n      throw new Error('No token verification method configured');\n    }\n\n    if (!user) {\n      ctx.status = 401;\n      ctx.body = { error: 'Invalid or expired token' };\n      return;\n    }\n\n    // Store user in context\n    ctx.state.requestContext.set('user', user);\n\n    // Resolve and store user permissions using RBAC provider (EE feature)\n    try {\n      const serverConfig = mastra.getServer();\n      const rbacProvider = serverConfig?.rbac as IRBACProvider<EEUser> | undefined;\n\n      if (rbacProvider) {\n        // Use the RBAC provider to resolve permissions\n        const permissions = await rbacProvider.getPermissions(user as EEUser);\n        ctx.state.requestContext.set('userPermissions', permissions);\n\n        // Also store roles for UI display\n        const roles = await rbacProvider.getRoles(user as EEUser);\n        ctx.state.requestContext.set('userRoles', roles);\n      }\n    } catch {\n      // RBAC not available or failed, continue without permissions\n    }\n\n    return next();\n  } catch (err) {\n    console.error(err);\n    ctx.status = 401;\n    ctx.body = { error: 'Invalid or expired token' };\n    return;\n  }\n};\n\nexport const authorizationMiddleware: Middleware = async (ctx: Context, next: Next) => {\n  const mastra = ctx.state.mastra;\n  const authConfig = mastra.getServer()?.auth;\n  const customRouteAuthConfig = ctx.state.customRouteAuthConfig;\n\n  if (!authConfig) {\n    // No auth config, skip authorization\n    return next();\n  }\n\n  const path = String(ctx.path || '/');\n  const method = String(ctx.method || 'GET');\n  const getHeader = (name: string) => ctx.headers[name.toLowerCase()] as string | undefined;\n\n  if (isDevPlaygroundRequest(path, method, getHeader, authConfig, customRouteAuthConfig)) {\n    // Skip authorization for dev playground requests\n    return next();\n  }\n\n  if (!isProtectedPath(path, method, authConfig, customRouteAuthConfig)) {\n    return next();\n  }\n\n  // Skip for public routes\n  if (canAccessPublicly(path, method, authConfig)) {\n    return next();\n  }\n\n  const user = ctx.state.requestContext.get('user');\n\n  if ('authorizeUser' in authConfig && typeof authConfig.authorizeUser === 'function') {\n    try {\n      const isAuthorized = await authConfig.authorizeUser(user, ctx.request as any);\n\n      if (isAuthorized) {\n        return next();\n      }\n\n      ctx.status = 403;\n      ctx.body = { error: 'Access denied' };\n      return;\n    } catch (err) {\n      console.error(err);\n      ctx.status = 500;\n      ctx.body = { error: 'Authorization error' };\n      return;\n    }\n  }\n\n  // Client-provided authorization function\n  if ('authorize' in authConfig && typeof authConfig.authorize === 'function') {\n    try {\n      // Note: The authorize function signature expects ContextWithMastra as 4th param\n      // For Koa, we pass a compatible object with similar structure\n      const context = {\n        get: (key: string) => {\n          if (key === 'mastra') return ctx.state.mastra;\n          if (key === 'requestContext') return ctx.state.requestContext;\n          if (key === 'tools') return ctx.state.tools;\n          if (key === 'taskStore') return ctx.state.taskStore;\n          if (key === 'customRouteAuthConfig') return ctx.state.customRouteAuthConfig;\n          return undefined;\n        },\n        req: ctx.request as any,\n      } as any;\n\n      const isAuthorized = await authConfig.authorize(path, method, user, context);\n\n      if (isAuthorized) {\n        return next();\n      }\n\n      ctx.status = 403;\n      ctx.body = { error: 'Access denied' };\n      return;\n    } catch (err) {\n      console.error(err);\n      ctx.status = 500;\n      ctx.body = { error: 'Authorization error' };\n      return;\n    }\n  }\n\n  // Custom rule-based authorization\n  if ('rules' in authConfig && authConfig.rules && authConfig.rules.length > 0) {\n    const isAuthorized = await checkRules(authConfig.rules, path, method, user);\n\n    if (isAuthorized) {\n      return next();\n    }\n\n    ctx.status = 403;\n    ctx.body = { error: 'Access denied' };\n    return;\n  }\n\n  // Default rule-based authorization\n  if (defaultAuthConfig.rules && defaultAuthConfig.rules.length > 0) {\n    const isAuthorized = await checkRules(defaultAuthConfig.rules, path, method, user);\n\n    if (isAuthorized) {\n      return next();\n    }\n  }\n\n  ctx.status = 403;\n  ctx.body = { error: 'Access denied' };\n};\n","import { Busboy } from '@fastify/busboy';\nimport type { ToolsInput } from '@mastra/core/agent';\nimport { hasPermission } from '@mastra/core/ee';\nimport type { Mastra } from '@mastra/core/mastra';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport type { InMemoryTaskStore } from '@mastra/server/a2a/store';\nimport { formatZodError } from '@mastra/server/handlers/error';\nimport type { MCPHttpTransportResult, MCPSseTransportResult } from '@mastra/server/handlers/mcp';\nimport type { ParsedRequestParams, ServerRoute } from '@mastra/server/server-adapter';\nimport {\n  MastraServer as MastraServerBase,\n  normalizeQueryParams,\n  redactStreamChunk,\n} from '@mastra/server/server-adapter';\nimport type Koa from 'koa';\nimport type { Context, Middleware, Next } from 'koa';\nimport { ZodError } from 'zod';\n\nimport { authenticationMiddleware, authorizationMiddleware } from './auth-middleware';\n\n/**\n * Convert Koa context to Web API Request for cookie-based auth providers.\n */\nfunction toWebRequest(ctx: Context): globalThis.Request {\n  const protocol = ctx.protocol || 'http';\n  const host = ctx.host || 'localhost';\n  const url = `${protocol}://${host}${ctx.url}`;\n\n  const headers = new Headers();\n  for (const [key, value] of Object.entries(ctx.headers)) {\n    if (value) {\n      if (Array.isArray(value)) {\n        value.forEach(v => headers.append(key, v));\n      } else {\n        headers.set(key, value);\n      }\n    }\n  }\n\n  return new globalThis.Request(url, {\n    method: ctx.method,\n    headers,\n  });\n}\n\n// Extend Koa types to include Mastra context\ndeclare module 'koa' {\n  interface DefaultState {\n    mastra: Mastra;\n    requestContext: RequestContext;\n    tools: ToolsInput;\n    abortSignal: AbortSignal;\n    taskStore: InMemoryTaskStore;\n    customRouteAuthConfig?: Map<string, boolean>;\n  }\n  interface Request {\n    body?: unknown;\n  }\n}\n\nexport class MastraServer extends MastraServerBase<Koa, Context, Context> {\n  createContextMiddleware(): Middleware {\n    return async (ctx: Context, next: Next) => {\n      // Parse request context from request body and add to context\n      let bodyRequestContext: Record<string, any> | undefined;\n      let paramsRequestContext: Record<string, any> | undefined;\n\n      // Parse request context from request body (POST/PUT)\n      if (ctx.method === 'POST' || ctx.method === 'PUT') {\n        const contentType = ctx.headers['content-type'];\n        if (contentType?.includes('application/json') && ctx.request.body) {\n          const body = ctx.request.body as { requestContext?: Record<string, any> };\n          if (body.requestContext) {\n            bodyRequestContext = body.requestContext;\n          }\n        }\n      }\n\n      // Parse request context from query params (GET)\n      if (ctx.method === 'GET') {\n        try {\n          const query = ctx.query;\n          const encodedRequestContext = query.requestContext;\n          if (typeof encodedRequestContext === 'string') {\n            // Try JSON first\n            try {\n              paramsRequestContext = JSON.parse(encodedRequestContext);\n            } catch {\n              // Fallback to base64(JSON)\n              try {\n                const json = Buffer.from(encodedRequestContext, 'base64').toString('utf-8');\n                paramsRequestContext = JSON.parse(json);\n              } catch {\n                // ignore if still invalid\n              }\n            }\n          }\n        } catch {\n          // ignore query parsing errors\n        }\n      }\n\n      const requestContext = this.mergeRequestContext({ paramsRequestContext, bodyRequestContext });\n\n      // Set context in state object\n      ctx.state.requestContext = requestContext;\n      ctx.state.mastra = this.mastra;\n      ctx.state.tools = this.tools || {};\n      if (this.taskStore) {\n        ctx.state.taskStore = this.taskStore;\n      }\n      ctx.state.customRouteAuthConfig = this.customRouteAuthConfig;\n\n      // Create abort controller for request cancellation\n      const controller = new AbortController();\n      ctx.req.on('close', () => {\n        // Only abort if the response wasn't successfully completed\n        if (!ctx.res.writableEnded) {\n          controller.abort();\n        }\n      });\n      ctx.state.abortSignal = controller.signal;\n\n      await next();\n    };\n  }\n\n  async stream(route: ServerRoute, ctx: Context, result: { fullStream: ReadableStream }): Promise<void> {\n    // Tell Koa we're handling the response ourselves\n    ctx.respond = false;\n\n    // Set status and headers via ctx.res directly since we're bypassing Koa's response\n    ctx.res.writeHead(200, {\n      'Content-Type': 'text/plain',\n      'Transfer-Encoding': 'chunked',\n    });\n\n    const streamFormat = route.streamFormat || 'stream';\n\n    const readableStream = result instanceof ReadableStream ? result : result.fullStream;\n    const reader = readableStream.getReader();\n\n    ctx.res.on('close', () => {\n      void reader.cancel('request aborted');\n    });\n\n    try {\n      while (true) {\n        const { done, value } = await reader.read();\n        if (done) break;\n\n        if (value) {\n          // Optionally redact sensitive data (system prompts, tool definitions, API keys) before sending to the client\n          const shouldRedact = this.streamOptions?.redact ?? true;\n          const outputValue = shouldRedact ? redactStreamChunk(value) : value;\n          if (streamFormat === 'sse') {\n            ctx.res.write(`data: ${JSON.stringify(outputValue)}\\n\\n`);\n          } else {\n            ctx.res.write(JSON.stringify(outputValue) + '\\x1E');\n          }\n        }\n      }\n    } catch (error) {\n      console.error(error);\n    } finally {\n      ctx.res.end();\n    }\n  }\n\n  async getParams(route: ServerRoute, ctx: Context): Promise<ParsedRequestParams> {\n    const urlParams = (ctx.params || {}) as Record<string, string>;\n    // Koa's ctx.query is ParsedUrlQuery which is Record<string, string | string[]>\n    const queryParams = normalizeQueryParams((ctx.query || {}) as Record<string, unknown>);\n    let body: unknown;\n    let bodyParseError: { message: string } | undefined;\n\n    if (route.method === 'POST' || route.method === 'PUT' || route.method === 'PATCH') {\n      const contentType = ctx.headers['content-type'] || '';\n\n      if (contentType.includes('multipart/form-data')) {\n        try {\n          const maxFileSize = route.maxBodySize ?? this.bodyLimitOptions?.maxSize;\n          body = await this.parseMultipartFormData(ctx, maxFileSize);\n        } catch (error) {\n          console.error('Failed to parse multipart form data:', error);\n          // Re-throw size limit errors, let others fall through to validation\n          if (error instanceof Error && error.message.toLowerCase().includes('size')) {\n            throw error;\n          }\n          bodyParseError = {\n            message: error instanceof Error ? error.message : 'Failed to parse multipart form data',\n          };\n        }\n      } else {\n        body = ctx.request.body;\n      }\n    }\n\n    return { urlParams, queryParams, body, bodyParseError };\n  }\n\n  /**\n   * Parse multipart/form-data using @fastify/busboy.\n   * Converts file uploads to Buffers and parses JSON field values.\n   *\n   * @param ctx - The Koa context object\n   * @param maxFileSize - Optional maximum file size in bytes\n   */\n  private parseMultipartFormData(ctx: Context, maxFileSize?: number): Promise<Record<string, unknown>> {\n    return new Promise((resolve, reject) => {\n      const result: Record<string, unknown> = {};\n\n      const busboy = new Busboy({\n        headers: {\n          'content-type': ctx.headers['content-type'] as string,\n        },\n        limits: maxFileSize ? { fileSize: maxFileSize } : undefined,\n      });\n\n      busboy.on('file', (fieldname: string, file: NodeJS.ReadableStream) => {\n        const chunks: Buffer[] = [];\n        let limitExceeded = false;\n\n        file.on('data', (chunk: Buffer) => {\n          chunks.push(chunk);\n        });\n\n        file.on('limit', () => {\n          limitExceeded = true;\n          reject(new Error(`File size limit exceeded${maxFileSize ? ` (max: ${maxFileSize} bytes)` : ''}`));\n        });\n\n        file.on('end', () => {\n          if (!limitExceeded) {\n            result[fieldname] = Buffer.concat(chunks);\n          }\n        });\n      });\n\n      busboy.on('field', (fieldname: string, value: string) => {\n        // Try to parse JSON strings (like 'options')\n        try {\n          result[fieldname] = JSON.parse(value);\n        } catch {\n          result[fieldname] = value;\n        }\n      });\n\n      busboy.on('finish', () => {\n        resolve(result);\n      });\n\n      busboy.on('error', (error: Error) => {\n        reject(error);\n      });\n\n      // Pipe the raw request to busboy\n      ctx.req.pipe(busboy);\n    });\n  }\n\n  async sendResponse(route: ServerRoute, ctx: Context, result: unknown, prefix?: string): Promise<void> {\n    const resolvedPrefix = prefix ?? this.prefix ?? '';\n\n    if (route.responseType === 'json') {\n      // Explicitly set content-type and handle null/undefined to ensure proper JSON response\n      // Koa sets 204 No Content when body is null, but we want to return JSON null\n      ctx.type = 'application/json';\n      ctx.body = result === null || result === undefined ? JSON.stringify(null) : result;\n    } else if (route.responseType === 'stream') {\n      await this.stream(route, ctx, result as { fullStream: ReadableStream });\n    } else if (route.responseType === 'datastream-response') {\n      // Handle AI SDK Response objects - pipe Response.body to Koa response\n      // Tell Koa we're handling the response ourselves\n      ctx.respond = false;\n\n      const fetchResponse = result as globalThis.Response;\n      const headers: Record<string, string> = {};\n      fetchResponse.headers.forEach((value, key) => {\n        headers[key] = value;\n      });\n      ctx.res.writeHead(fetchResponse.status, headers);\n\n      if (fetchResponse.body) {\n        const reader = fetchResponse.body.getReader();\n        try {\n          while (true) {\n            const { done, value } = await reader.read();\n            if (done) break;\n            ctx.res.write(value);\n          }\n        } finally {\n          ctx.res.end();\n        }\n      } else {\n        ctx.res.end();\n      }\n    } else if (route.responseType === 'mcp-http') {\n      // MCP Streamable HTTP transport\n      // Tell Koa we're handling the response ourselves\n      ctx.respond = false;\n\n      const { server, httpPath, mcpOptions: routeMcpOptions } = result as MCPHttpTransportResult;\n\n      try {\n        // Attach parsed body to raw request so MCP server's readJsonBody can use it\n        const rawReq = ctx.req as typeof ctx.req & { body?: unknown };\n        if (ctx.request.body !== undefined) {\n          rawReq.body = ctx.request.body;\n        }\n\n        // Merge class-level mcpOptions with route-specific options (route takes precedence)\n        const options = { ...this.mcpOptions, ...routeMcpOptions };\n\n        await server.startHTTP({\n          url: new URL(ctx.url, `http://${ctx.headers.host}`),\n          httpPath: `${resolvedPrefix}${httpPath}`,\n          req: rawReq,\n          res: ctx.res,\n          options: Object.keys(options).length > 0 ? options : undefined,\n        });\n        // Response handled by startHTTP\n      } catch {\n        if (!ctx.res.headersSent) {\n          ctx.res.writeHead(500, { 'Content-Type': 'application/json' });\n          ctx.res.end(\n            JSON.stringify({\n              jsonrpc: '2.0',\n              error: { code: -32603, message: 'Internal server error' },\n              id: null,\n            }),\n          );\n        }\n      }\n    } else if (route.responseType === 'mcp-sse') {\n      // MCP SSE transport\n      // Tell Koa we're handling the response ourselves\n      ctx.respond = false;\n\n      const { server, ssePath, messagePath } = result as MCPSseTransportResult;\n\n      try {\n        // Attach parsed body to raw request so MCP server's readJsonBody can use it\n        const rawReq = ctx.req as typeof ctx.req & { body?: unknown };\n        if (ctx.request.body !== undefined) {\n          rawReq.body = ctx.request.body;\n        }\n\n        await server.startSSE({\n          url: new URL(ctx.url, `http://${ctx.headers.host}`),\n          ssePath: `${resolvedPrefix}${ssePath}`,\n          messagePath: `${resolvedPrefix}${messagePath}`,\n          req: rawReq,\n          res: ctx.res,\n        });\n        // Response handled by startSSE\n      } catch {\n        if (!ctx.res.headersSent) {\n          ctx.res.writeHead(500, { 'Content-Type': 'application/json' });\n          ctx.res.end(JSON.stringify({ error: 'Error handling MCP SSE request' }));\n        }\n      }\n    } else {\n      ctx.status = 500;\n    }\n  }\n\n  async registerRoute(app: Koa, route: ServerRoute, { prefix: prefixParam }: { prefix?: string } = {}): Promise<void> {\n    // Default prefix to this.prefix if not provided, or empty string\n    const prefix = prefixParam ?? this.prefix ?? '';\n\n    const fullPath = `${prefix}${route.path}`;\n\n    // Convert Express-style :param to Koa-style :param (they're the same)\n    const koaPath = fullPath;\n\n    // Define the route handler\n    const handler = async (ctx: Context, next: Next) => {\n      // Check if this route matches the request\n      const pathRegex = this.pathToRegex(koaPath);\n      const match = pathRegex.exec(ctx.path);\n\n      if (!match) {\n        await next();\n        return;\n      }\n\n      // Check HTTP method\n      if (route.method.toUpperCase() !== 'ALL' && ctx.method.toUpperCase() !== route.method.toUpperCase()) {\n        await next();\n        return;\n      }\n\n      // Extract URL params from regex match\n      const paramNames = this.extractParamNames(koaPath);\n      ctx.params = {};\n      paramNames.forEach((name, index) => {\n        ctx.params[name] = match[index + 1];\n      });\n\n      // Check route-level authentication/authorization\n      const authError = await this.checkRouteAuth(route, {\n        path: String(ctx.path || '/'),\n        method: String(ctx.method || 'GET'),\n        getHeader: name => ctx.headers[name.toLowerCase()] as string | undefined,\n        getQuery: name => (ctx.query as Record<string, string>)[name],\n        requestContext: ctx.state.requestContext,\n        request: toWebRequest(ctx),\n      });\n\n      if (authError) {\n        ctx.status = authError.status;\n        ctx.body = { error: authError.error };\n        return;\n      }\n\n      const params = await this.getParams(route, ctx);\n\n      // Return 400 Bad Request if body parsing failed (e.g., malformed multipart data)\n      if (params.bodyParseError) {\n        ctx.status = 400;\n        ctx.body = {\n          error: 'Invalid request body',\n          issues: [{ field: 'body', message: params.bodyParseError.message }],\n        };\n        return;\n      }\n\n      if (params.queryParams) {\n        try {\n          params.queryParams = await this.parseQueryParams(route, params.queryParams);\n        } catch (error) {\n          console.error('Error parsing query params', error);\n          // Zod validation errors should return 400 Bad Request with structured issues\n          if (error instanceof ZodError) {\n            ctx.status = 400;\n            ctx.body = formatZodError(error, 'query parameters');\n            return;\n          }\n          ctx.status = 400;\n          ctx.body = {\n            error: 'Invalid query parameters',\n            issues: [{ field: 'unknown', message: error instanceof Error ? error.message : 'Unknown error' }],\n          };\n          return;\n        }\n      }\n\n      if (params.body) {\n        try {\n          params.body = await this.parseBody(route, params.body);\n        } catch (error) {\n          console.error('Error parsing body:', error instanceof Error ? error.message : String(error));\n          // Zod validation errors should return 400 Bad Request with structured issues\n          if (error instanceof ZodError) {\n            ctx.status = 400;\n            ctx.body = formatZodError(error, 'request body');\n            return;\n          }\n          ctx.status = 400;\n          ctx.body = {\n            error: 'Invalid request body',\n            issues: [{ field: 'unknown', message: error instanceof Error ? error.message : 'Unknown error' }],\n          };\n          return;\n        }\n      }\n\n      const handlerParams = {\n        ...params.urlParams,\n        ...params.queryParams,\n        ...(typeof params.body === 'object' ? params.body : {}),\n        requestContext: ctx.state.requestContext,\n        mastra: this.mastra,\n        tools: ctx.state.tools,\n        taskStore: ctx.state.taskStore,\n        abortSignal: ctx.state.abortSignal,\n        routePrefix: prefix,\n      };\n\n      // Check route permission requirement (EE feature)\n      // Only enforce permissions when auth is configured\n      const authConfig = this.mastra.getServer()?.auth;\n      if (route.requiresPermission && authConfig) {\n        const userPermissions = ctx.state.requestContext.get('userPermissions') as string[] | undefined;\n\n        if (!userPermissions || !hasPermission(userPermissions, route.requiresPermission)) {\n          ctx.status = 403;\n          ctx.body = {\n            error: 'Forbidden',\n            message: `Missing required permission: ${route.requiresPermission}`,\n          };\n          return;\n        }\n      }\n\n      try {\n        const result = await route.handler(handlerParams);\n        await this.sendResponse(route, ctx, result, prefix);\n      } catch (error) {\n        console.error('Error calling handler', error);\n        // Check if it's an HTTPException or MastraError with a status code\n        let status = 500;\n        if (error && typeof error === 'object') {\n          // Check for direct status property (HTTPException)\n          if ('status' in error) {\n            status = (error as any).status;\n          }\n          // Check for MastraError with status in details\n          else if (\n            'details' in error &&\n            error.details &&\n            typeof error.details === 'object' &&\n            'status' in error.details\n          ) {\n            status = (error.details as any).status;\n          }\n        }\n        ctx.status = status;\n        ctx.body = { error: error instanceof Error ? error.message : 'Unknown error' };\n      }\n    };\n\n    // Register the middleware\n    app.use(handler);\n  }\n\n  /**\n   * Convert Express-style path to regex for matching\n   */\n  private pathToRegex(path: string): RegExp {\n    // First replace :param with a placeholder that won't be affected by escaping\n    const PARAM_PLACEHOLDER = '\\x00PARAM\\x00';\n    const pathWithPlaceholders = path.replace(/:[^/]+/g, PARAM_PLACEHOLDER);\n\n    // Escape all regex meta-characters so the path is treated literally\n    const escapedPath = pathWithPlaceholders.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&');\n\n    // Replace placeholders with capture groups and escape forward slashes\n    const regexPath = escapedPath.replace(new RegExp(PARAM_PLACEHOLDER, 'g'), '([^/]+)').replace(/\\//g, '\\\\/');\n\n    return new RegExp(`^${regexPath}$`);\n  }\n\n  /**\n   * Extract parameter names from path\n   */\n  private extractParamNames(path: string): string[] {\n    const matches = path.match(/:[^/]+/g) || [];\n    return matches.map(m => m.slice(1)); // Remove the leading ':'\n  }\n\n  registerContextMiddleware(): void {\n    this.app.use(this.createContextMiddleware());\n  }\n\n  registerAuthMiddleware(): void {\n    const authConfig = this.mastra.getServer()?.auth;\n    if (!authConfig) {\n      // No auth config, skip registration\n      return;\n    }\n\n    this.app.use(authenticationMiddleware);\n    this.app.use(authorizationMiddleware);\n  }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mastra/koa",
-  "version": "0.0.0-alternative-angelfish-f7665c-20260119184917",
+  "version": "0.0.0-auth-and-authz-20260130180831",
   "description": "Mastra Koa adapter for the server",
   "type": "module",
   "main": "dist/index.js",
@@ -21,12 +21,12 @@
   "license": "Apache-2.0",
   "dependencies": {
     "@fastify/busboy": "^3.2.0",
-    "@mastra/server": "0.0.0-alternative-angelfish-f7665c-20260119184917"
+    "@mastra/server": "0.0.0-auth-and-authz-20260130180831"
   },
   "devDependencies": {
-    "@types/node": "^20.19.0",
+    "@types/node": "^20.19.30",
     "eslint": "^9.37.0",
-    "tsup": "^8.5.0",
+    "tsup": "^8.5.1",
     "typescript": "^5.8.3",
     "vitest": "^3.2.4",
     "koa": "^3.1.1",
@@ -35,19 +35,19 @@
     "@types/koa-bodyparser": "^4.3.13",
     "@ai-sdk/openai": "^2.0.62",
     "zod": "^3.25.0",
-    "@internal/lint": "0.0.0-alternative-angelfish-f7665c-20260119184917",
-    "@internal/server-adapter-test-utils": "0.0.1",
-    "@internal/storage-test-utils": "0.0.49",
-    "@mastra/core": "0.0.0-alternative-angelfish-f7665c-20260119184917",
-    "@mastra/evals": "0.0.0-alternative-angelfish-f7665c-20260119184917",
-    "@mastra/libsql": "0.0.0-alternative-angelfish-f7665c-20260119184917",
-    "@mastra/observability": "0.0.0-alternative-angelfish-f7665c-20260119184917",
-    "@mastra/memory": "0.0.0-alternative-angelfish-f7665c-20260119184917",
-    "@internal/types-builder": "0.0.0-alternative-angelfish-f7665c-20260119184917"
+    "@internal/server-adapter-test-utils": "0.0.3",
+    "@internal/lint": "0.0.0-auth-and-authz-20260130180831",
+    "@internal/storage-test-utils": "0.0.52",
+    "@mastra/evals": "0.0.0-auth-and-authz-20260130180831",
+    "@mastra/libsql": "0.0.0-auth-and-authz-20260130180831",
+    "@mastra/memory": "0.0.0-auth-and-authz-20260130180831",
+    "@internal/types-builder": "0.0.0-auth-and-authz-20260130180831",
+    "@mastra/observability": "0.0.0-auth-and-authz-20260130180831",
+    "@mastra/core": "0.0.0-auth-and-authz-20260130180831"
   },
   "peerDependencies": {
     "koa": "^3.0.0",
-    "@mastra/core": "0.0.0-alternative-angelfish-f7665c-20260119184917"
+    "@mastra/core": "0.0.0-auth-and-authz-20260130180831"
   },
   "engines": {
     "node": ">=22.13.0"