@monoes/mcp 1.0.0

package/dist/transport/websocket.js

@@ -0,0 +1,408 @@
+/**
+ * @monoes/mcp - WebSocket Transport
+ *
+ * Standalone WebSocket transport with heartbeat
+ */
+import { EventEmitter } from 'events';
+import { WebSocketServer, WebSocket } from 'ws';
+import { createServer } from 'http';
+import { timingSafeEqual } from 'crypto';
+export class WebSocketTransport extends EventEmitter {
+    logger;
+    config;
+    type = 'websocket';
+    requestHandler;
+    notificationHandler;
+    server;
+    wss;
+    clients = new Map();
+    heartbeatTimer;
+    running = false;
+    connectionCounter = 0;
+    messagesReceived = 0;
+    messagesSent = 0;
+    errors = 0;
+    totalConnections = 0;
+    constructor(logger, config) {
+        super();
+        this.logger = logger;
+        this.config = config;
+    }
+    async start() {
+        if (this.running) {
+            throw new Error('WebSocket transport already running');
+        }
+        const bindHost = this.resolveBindHost();
+        this.logger.info('Starting WebSocket transport', {
+            host: bindHost,
+            port: this.config.port,
+            path: this.config.path || '/ws',
+        });
+        this.server = createServer((req, res) => {
+            res.writeHead(426, { 'Content-Type': 'text/plain' });
+            res.end('Upgrade Required - WebSocket connection expected');
+        });
+        this.wss = new WebSocketServer({
+            server: this.server,
+            path: this.config.path || '/ws',
+            maxPayload: this.config.maxMessageSize || 10 * 1024 * 1024,
+            perMessageDeflate: true,
+        });
+        this.setupWebSocketHandlers();
+        this.startHeartbeat();
+        await new Promise((resolve, reject) => {
+            this.server.listen(this.config.port, bindHost, () => {
+                resolve();
+            });
+            this.server.on('error', reject);
+        });
+        this.running = true;
+        this.logger.info('WebSocket transport started', {
+            url: `ws://${bindHost}:${this.config.port}${this.config.path || '/ws'}`,
+        });
+    }
+    /**
+     * SECURITY: Refuse to bind unauthenticated servers to a non-loopback
+     * interface. Without `auth` configured, every connecting client is marked
+     * `isAuthenticated: true` (see setupWebSocketHandlers) — that is only
+     * acceptable on loopback. Mirrors http.ts's resolveBindHost().
+     */
+    resolveBindHost() {
+        const configuredHost = this.config.host;
+        if (this.config.auth) {
+            return configuredHost;
+        }
+        const isLoopback = configuredHost === 'localhost' ||
+            configuredHost === '127.0.0.1' ||
+            configuredHost === '::1' ||
+            configuredHost === '::ffff:127.0.0.1';
+        if (isLoopback) {
+            return configuredHost;
+        }
+        if (process.env.MONOMIND_MCP_ALLOW_REMOTE === '1') {
+            this.logger.warn(`SECURITY WARNING: WebSocket transport is binding to non-loopback host "${configuredHost}" ` +
+                'with NO authentication configured. MONOMIND_MCP_ALLOW_REMOTE=1 opt-in detected — ' +
+                'every client will be treated as authenticated. This exposes every registered tool ' +
+                'to anyone who can reach this host/port.');
+            return configuredHost;
+        }
+        this.logger.warn(`SECURITY: refusing to bind WebSocket transport to non-loopback host "${configuredHost}" with ` +
+            'no "auth" configured. Falling back to 127.0.0.1. Set MONOMIND_MCP_ALLOW_REMOTE=1 to ' +
+            'override (unsafe) or configure "auth" with tokens.');
+        return '127.0.0.1';
+    }
+    async stop() {
+        if (!this.running) {
+            return;
+        }
+        this.logger.info('Stopping WebSocket transport');
+        this.running = false;
+        this.stopHeartbeat();
+        for (const client of this.clients.values()) {
+            try {
+                client.ws.close(1000, 'Server shutting down');
+            }
+            catch {
+                // Ignore errors
+            }
+        }
+        this.clients.clear();
+        if (this.wss) {
+            this.wss.close();
+            this.wss = undefined;
+        }
+        if (this.server) {
+            await new Promise((resolve) => {
+                this.server.close(() => resolve());
+            });
+            this.server = undefined;
+        }
+        this.logger.info('WebSocket transport stopped');
+    }
+    onRequest(handler) {
+        this.requestHandler = handler;
+    }
+    onNotification(handler) {
+        this.notificationHandler = handler;
+    }
+    async getHealthStatus() {
+        return {
+            healthy: this.running,
+            metrics: {
+                messagesReceived: this.messagesReceived,
+                messagesSent: this.messagesSent,
+                errors: this.errors,
+                activeConnections: this.clients.size,
+                totalConnections: this.totalConnections,
+            },
+        };
+    }
+    async sendNotification(notification) {
+        const message = this.serializeMessage(notification);
+        for (const client of this.clients.values()) {
+            try {
+                if (client.ws.readyState === WebSocket.OPEN) {
+                    client.ws.send(message);
+                    this.messagesSent++;
+                }
+            }
+            catch (error) {
+                this.logger.error('Failed to send notification', { clientId: client.id, error });
+                this.errors++;
+            }
+        }
+    }
+    async sendToClient(clientId, notification) {
+        const client = this.clients.get(clientId);
+        if (!client || client.ws.readyState !== WebSocket.OPEN) {
+            return false;
+        }
+        try {
+            client.ws.send(this.serializeMessage(notification));
+            this.messagesSent++;
+            return true;
+        }
+        catch (error) {
+            this.logger.error('Failed to send to client', { clientId, error });
+            this.errors++;
+            return false;
+        }
+    }
+    getClients() {
+        return Array.from(this.clients.keys());
+    }
+    getClientInfo(clientId) {
+        return this.clients.get(clientId);
+    }
+    disconnectClient(clientId, reason = 'Disconnected by server') {
+        const client = this.clients.get(clientId);
+        if (!client) {
+            return false;
+        }
+        try {
+            client.ws.close(1000, reason);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    setupWebSocketHandlers() {
+        if (!this.wss)
+            return;
+        this.wss.on('connection', (ws) => {
+            if (this.config.maxConnections && this.clients.size >= this.config.maxConnections) {
+                this.logger.warn('Max connections reached, rejecting client');
+                ws.close(1013, 'Server at capacity');
+                return;
+            }
+            const clientId = `client-${++this.connectionCounter}`;
+            const client = {
+                id: clientId,
+                ws,
+                createdAt: new Date(),
+                lastActivity: new Date(),
+                messageCount: 0,
+                isAlive: true,
+                isAuthenticated: !this.config.auth?.enabled,
+            };
+            this.clients.set(clientId, client);
+            this.totalConnections++;
+            this.logger.info('Client connected', {
+                id: clientId,
+                total: this.clients.size,
+            });
+            ws.on('message', async (data) => {
+                await this.handleMessage(client, data);
+            });
+            ws.on('pong', () => {
+                client.isAlive = true;
+            });
+            ws.on('close', (code, reason) => {
+                this.clients.delete(clientId);
+                this.logger.info('Client disconnected', {
+                    id: clientId,
+                    code,
+                    reason: reason.toString(),
+                    total: this.clients.size,
+                });
+                this.emit('client:disconnected', clientId);
+            });
+            ws.on('error', (error) => {
+                this.logger.error('Client error', { id: clientId, error });
+                this.errors++;
+                this.clients.delete(clientId);
+            });
+            this.emit('client:connected', clientId);
+        });
+    }
+    async handleMessage(client, data) {
+        client.lastActivity = new Date();
+        client.messageCount++;
+        this.messagesReceived++;
+        try {
+            const message = this.parseMessage(data);
+            if (!client.isAuthenticated && this.config.auth?.enabled) {
+                if (message.method === 'authenticate') {
+                    // SECURITY: this is the ONLY path that may set isAuthenticated.
+                    // The previous version accepted this branch and fell through to
+                    // dispatch the 'authenticate' message itself to the request
+                    // handler without ever validating the token or flipping the flag —
+                    // a permanent lockout for legit clients plus an auth-check bypass
+                    // for the message that was supposed to perform the check.
+                    this.handleAuthenticate(client, message);
+                    return;
+                }
+                client.ws.send(this.serializeMessage({
+                    jsonrpc: '2.0',
+                    id: message.id || null,
+                    error: { code: -32001, message: 'Authentication required' },
+                }));
+                return;
+            }
+            if (message.jsonrpc !== '2.0') {
+                client.ws.send(this.serializeMessage({
+                    jsonrpc: '2.0',
+                    id: message.id || null,
+                    error: { code: -32600, message: 'Invalid JSON-RPC version' },
+                }));
+                return;
+            }
+            if (message.id === undefined) {
+                if (this.notificationHandler) {
+                    await this.notificationHandler(message);
+                }
+            }
+            else {
+                if (!this.requestHandler) {
+                    client.ws.send(this.serializeMessage({
+                        jsonrpc: '2.0',
+                        id: message.id,
+                        error: { code: -32603, message: 'No request handler' },
+                    }));
+                    return;
+                }
+                const startTime = performance.now();
+                const response = await this.requestHandler(message);
+                const duration = performance.now() - startTime;
+                this.logger.debug('Request processed', {
+                    clientId: client.id,
+                    method: message.method,
+                    duration: `${duration.toFixed(2)}ms`,
+                });
+                client.ws.send(this.serializeMessage(response));
+                this.messagesSent++;
+            }
+        }
+        catch (error) {
+            this.errors++;
+            this.logger.error('Message handling error', { clientId: client.id, error });
+            try {
+                client.ws.send(this.serializeMessage({
+                    jsonrpc: '2.0',
+                    id: null,
+                    error: { code: -32700, message: 'Parse error' },
+                }));
+            }
+            catch {
+                // Ignore send errors
+            }
+        }
+    }
+    /**
+     * SECURITY: Real `authenticate` handler. Validates the client-supplied
+     * credential against `config.auth.tokens` with a timing-safe comparison
+     * and only sets `client.isAuthenticated = true` on success. The
+     * `authenticate` message itself is never forwarded to `requestHandler` —
+     * a response is sent directly here regardless of outcome.
+     */
+    handleAuthenticate(client, message) {
+        const supplied = message?.params?.token;
+        const configured = this.config.auth?.tokens;
+        const success = this.checkCredential(supplied, configured);
+        if (success) {
+            client.isAuthenticated = true;
+            this.logger.info('WebSocket client authenticated', { clientId: client.id });
+            client.ws.send(this.serializeMessage({
+                jsonrpc: '2.0',
+                id: message?.id ?? null,
+                result: { authenticated: true },
+            }));
+        }
+        else {
+            this.logger.warn('WebSocket authenticate failed', { clientId: client.id });
+            client.ws.send(this.serializeMessage({
+                jsonrpc: '2.0',
+                id: message?.id ?? null,
+                error: { code: -32001, message: 'Authentication failed' },
+            }));
+        }
+    }
+    checkCredential(supplied, configured) {
+        if (typeof supplied !== 'string' || !configured || configured.length === 0) {
+            return false;
+        }
+        for (const entry of configured) {
+            if (this.timingSafeCompare(supplied, entry)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    /**
+     * SECURITY: Timing-safe comparison to prevent timing attacks. Mismatched
+     * lengths still run a constant-time compare (against itself) before
+     * returning false, so length differences aren't observable via timing.
+     */
+    timingSafeCompare(a, b) {
+        const bufA = Buffer.from(a, 'utf-8');
+        const bufB = Buffer.from(b, 'utf-8');
+        if (bufA.length !== bufB.length) {
+            timingSafeEqual(bufA, bufA);
+            return false;
+        }
+        return timingSafeEqual(bufA, bufB);
+    }
+    parseMessage(data) {
+        if (this.config.enableBinaryMode && Buffer.isBuffer(data)) {
+            return JSON.parse(data.toString());
+        }
+        return JSON.parse(data.toString());
+    }
+    serializeMessage(message) {
+        if (this.config.enableBinaryMode) {
+            return JSON.stringify(message);
+        }
+        return JSON.stringify(message);
+    }
+    startHeartbeat() {
+        const interval = this.config.heartbeatInterval || 30000;
+        this.heartbeatTimer = setInterval(() => {
+            for (const client of this.clients.values()) {
+                if (!client.isAlive) {
+                    this.logger.warn('Client heartbeat timeout', { id: client.id });
+                    client.ws.terminate();
+                    this.clients.delete(client.id);
+                    continue;
+                }
+                client.isAlive = false;
+                try {
+                    client.ws.ping();
+                }
+                catch {
+                    // Ignore ping errors
+                }
+            }
+        }, interval);
+    }
+    stopHeartbeat() {
+        if (this.heartbeatTimer) {
+            clearInterval(this.heartbeatTimer);
+            this.heartbeatTimer = undefined;
+        }
+    }
+}
+export function createWebSocketTransport(logger, config) {
+    return new WebSocketTransport(logger, config);
+}
+//# sourceMappingURL=websocket.js.map

package/dist/transport/websocket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket.js","sourceRoot":"","sources":["../../src/transport/websocket.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAW,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,YAAY,EAAU,MAAM,MAAM,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAoCzC,MAAM,OAAO,kBAAmB,SAAQ,YAAY;IAkB/B,MAAM;IACN,MAAM;IAlBT,IAAI,GAAkB,WAAW,CAAC;IAE1C,cAAc,CAAkB;IAChC,mBAAmB,CAAuB;IAC1C,MAAM,CAAU;IAChB,GAAG,CAAmB;IACtB,OAAO,GAAkC,IAAI,GAAG,EAAE,CAAC;IACnD,cAAc,CAAkB;IAChC,OAAO,GAAG,KAAK,CAAC;IAChB,iBAAiB,GAAG,CAAC,CAAC;IAEtB,gBAAgB,GAAG,CAAC,CAAC;IACrB,YAAY,GAAG,CAAC,CAAC;IACjB,MAAM,GAAG,CAAC,CAAC;IACX,gBAAgB,GAAG,CAAC,CAAC;IAE7B,YACmB,MAAe,EACf,MAAgC;QAEjD,KAAK,EAAE,CAAC;sBAHS,MAAM;sBACN,MAAM;IAGzB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAExC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;YAC/C,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK;SAChC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACtC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,GAAG,IAAI,eAAe,CAAC;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK;YAC/B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI;YAC1D,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC9B,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;gBACnD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;YAC9C,GAAG,EAAE,QAAQ,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,EAAE;SACxE,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,eAAe;QACrB,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAExC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACrB,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,MAAM,UAAU,GACd,cAAc,KAAK,WAAW;YAC9B,cAAc,KAAK,WAAW;YAC9B,cAAc,KAAK,KAAK;YACxB,cAAc,KAAK,kBAAkB,CAAC;QAExC,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG,EAAE,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,0EAA0E,cAAc,IAAI;gBAC1F,mFAAmF;gBACnF,oFAAoF;gBACpF,yCAAyC,CAC5C,CAAC;YACF,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,wEAAwE,cAAc,SAAS;YAC7F,sFAAsF;YACtF,oDAAoD,CACvD,CAAC;QACF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QAErB,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB;YAClB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAErB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;QACvB,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAClD,CAAC;IAED,SAAS,CAAC,OAAuB;QAC/B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,cAAc,CAAC,OAA4B;QACzC,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE;gBACP,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;gBACpC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;aACxC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,YAA6B;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAEpD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,IAAI,MAAM,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;oBAC5C,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACxB,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjF,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,YAA6B;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,UAAU;QACR,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,aAAa,CAAC,QAAgB;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,gBAAgB,CAAC,QAAgB,EAAE,MAAM,GAAG,wBAAwB;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,sBAAsB;QAC5B,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,OAAO;QAEtB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE;YAC/B,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAClF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;gBAC9D,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtD,MAAM,MAAM,GAAqB;gBAC/B,EAAE,EAAE,QAAQ;gBACZ,EAAE;gBACF,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,YAAY,EAAE,IAAI,IAAI,EAAE;gBACxB,YAAY,EAAE,CAAC;gBACf,OAAO,EAAE,IAAI;gBACb,eAAe,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO;aAC5C,CAAC;YAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAExB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;gBACnC,EAAE,EAAE,QAAQ;gBACZ,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;aACzB,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC9B,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBACjB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YACxB,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE;oBACtC,EAAE,EAAE,QAAQ;oBACZ,IAAI;oBACJ,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;oBACzB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;iBACzB,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,MAAwB,EAAE,IAAa;QACjE,MAAM,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC;QACjC,MAAM,CAAC,YAAY,EAAE,CAAC;QACtB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAExC,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;gBACzD,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;oBACtC,gEAAgE;oBAChE,gEAAgE;oBAChE,4DAA4D;oBAC5D,mEAAmE;oBACnE,kEAAkE;oBAClE,0DAA0D;oBAC1D,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBACzC,OAAO;gBACT,CAAC;gBAED,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;oBACnC,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI;oBACtB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,yBAAyB,EAAE;iBAC7C,CAAC,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBAC9B,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;oBACnC,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI;oBACtB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE;iBAC9C,CAAC,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YAED,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC7B,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAA0B,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;oBACzB,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;wBACnC,OAAO,EAAE,KAAK;wBACd,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE;qBACxC,CAAC,CAAC,CAAC;oBACnB,OAAO;gBACT,CAAC;gBAED,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;gBACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAqB,CAAC,CAAC;gBAClE,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAE/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;oBACrC,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,QAAQ,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;iBACrC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAChD,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAE5E,IAAI,CAAC;gBACH,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;oBACnC,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE;iBACjC,CAAC,CAAC,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,kBAAkB,CAAC,MAAwB,EAAE,OAAY;QAC/D,MAAM,QAAQ,GAAY,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;QAE5C,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE3D,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5E,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBACnC,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,IAAI;gBACvB,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;aACjB,CAAC,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3E,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBACnC,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,IAAI;gBACvB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,uBAAuB,EAAE;aAC3C,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,QAAiB,EAAE,UAAgC;QACzE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACK,iBAAiB,CAAC,CAAS,EAAE,CAAS;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAErC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAEO,YAAY,CAAC,IAAa;QAChC,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrC,CAAC;IAEO,gBAAgB,CAAC,OAAsC;QAC7D,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAEO,cAAc;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC;QAExD,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;oBAChE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;oBACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC/B,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBACnB,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAqB;gBACvB,CAAC;YACH,CAAC;QACH,CAAC,EAAE,QAAQ,CAAC,CAAC;IACf,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAe,EACf,MAAgC;IAEhC,OAAO,IAAI,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC"}