@ni-c/mcp-hub 0.9.2 → 0.11.0

package/dist/proxy.js

@@ -1,25 +1,64 @@
-import { Server } from '@modelcontextprotocol/sdk/server/index.js';
-import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
-import { CallToolRequestSchema, CallToolResultSchema, CompleteRequestSchema, CompleteResultSchema, GetPromptRequestSchema, GetPromptResultSchema, ListPromptsRequestSchema, ListPromptsResultSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ListToolsRequestSchema, ListToolsResultSchema, ReadResourceRequestSchema, ReadResourceResultSchema } from '@modelcontextprotocol/sdk/types.js';
+import { CompleteResultSchema, GetPromptResultSchema, ListPromptsResultSchema, ListResourcesResultSchema, ListResourceTemplatesResultSchema, ListToolsResultSchema, ReadResourceResultSchema } from '@modelcontextprotocol/core';
+import { NodeStreamableHTTPServerTransport, toNodeHandler, toWebRequest } from '@modelcontextprotocol/node';
+import { Server, ProtocolError, ProtocolErrorCode, createMcpHandler, isInputRequiredResult, isLegacyRequest } from '@modelcontextprotocol/server';
 import { ABSOLUTE_CALL_OPTIONS, assertForwardedResultSize } from './mcp-limits.js';
+import { filterTools, loggableToolName, toolAllowed } from './tool-filter.js';
+import { forwardToolCall } from './forward.js';
+import { KEEPALIVE_MS, MAX_STREAM_MS, MAX_SUBSCRIPTIONS, MAX_SUBSCRIPTION_URIS, SubscriptionRegistry, isListenRequest, parseListenFilter, subscriptionsAllowed } from './subscriptions.js';
+/**
+ * The revision each era puts on the wire.
+ *
+ * Only ever read to *tell* somebody which one they are on; nothing branches on
+ * the string. `Era` stays the type everything else is written against, because
+ * a revision date is a fact about the wire and an era is a fact about
+ * behaviour, and the code cares about the second one.
+ */
+export const REVISION = { modern: '2026-07-28', legacy: '2025-11-25' };
 /**
  * The child's capabilities minus what this proxy does not actually serve.
  *
- * resources.subscribe is dropped: there is no Subscribe handler below, so a
- * client that believed the advertisement got -32601 at call time. Announcing
- * only what we answer is the difference between a missing feature and a lie.
+ * The rule is one sentence: announce only what we answer. Three claims are
+ * decided here, and each used to be decided the other way.
+ *
+ * `listChanged` and `resources.subscribe` now survive — but only on the era
+ * that carries them. A 2026-07-28 client opens a `subscriptions/listen` stream
+ * and the hub delivers on it; a 2025 client would need `resources/subscribe`
+ * and an unsolicited server-to-client channel, and gets neither, so it is told
+ * neither. The 2025 side is the behaviour that shipped before, now stated
+ * rather than assumed.
+ *
+ * `logging` goes on both eras. `logging/setLevel` has no handler and never
+ * had one, so a client that believed the advertisement got a -32601 at call
+ * time — the exact shape of the bug `resources.subscribe` used to have. On
+ * 2026-07-28 the level is per-request `_meta` and there is no RPC to implement;
+ * carrying `notifications/message` is a separate piece of work, and until it
+ * exists the honest answer is silence.
  *
- * listChanged deliberately stays. Forwarding server-initiated messages needs
- * per-client session state, which the stateless transport exists to avoid, so
- * the notification never arrives — but a client waiting for one that never
- * comes is no worse off than a client that was never told. It is listed under
- * the known gaps in the documentation instead.
+ * A server whose operator set `subscriptions: "off"` is treated exactly like a
+ * 2025 connection here. Withdrawing the delivery without withdrawing the claim
+ * would just recreate the lie one config key lower down.
  */
-function advertisedCapabilities(capabilities) {
-    const caps = { ...(capabilities ?? {}) };
+function advertisedCapabilities(capabilities, era, allowed) {
+    const caps = { ...capabilities };
+    delete caps.logging;
+    const pushes = era === 'modern' && allowed;
+    // `listChanged: false` and an absent key mean the same thing to a client, and
+    // the absent one is what the specification shows, so drop rather than negate.
+    if (caps.tools) {
+        const { listChanged, ...rest } = caps.tools;
+        caps.tools = pushes && listChanged ? { ...rest, listChanged } : rest;
+    }
+    if (caps.prompts) {
+        const { listChanged, ...rest } = caps.prompts;
+        caps.prompts = pushes && listChanged ? { ...rest, listChanged } : rest;
+    }
     if (caps.resources) {
-        const { subscribe: _subscribe, ...resources } = caps.resources;
-        caps.resources = resources;
+        const { listChanged, subscribe, ...rest } = caps.resources;
+        caps.resources = {
+            ...rest,
+            ...(pushes && listChanged ? { listChanged } : {}),
+            ...(pushes && subscribe ? { subscribe } : {})
+        };
     }
     return caps;
 }
@@ -29,23 +68,35 @@ function advertisedCapabilities(capabilities) {
  * transport means no server-side session state at all — claude.ai reconnects
  * every few minutes without ever closing sessions, so anything stateful leaks.
  */
-function buildProxyServer(managed) {
-    const server = new Server({ name: managed.serverInfo?.name ?? managed.name, version: managed.serverInfo?.version ?? '0.0.0' }, { capabilities: advertisedCapabilities(managed.capabilities) });
-    const forwardLive = (request, resultSchema) => {
+function buildProxyServer(managed, secret, era) {
+    const server = new Server({ name: managed.serverInfo?.name ?? managed.name, version: managed.serverInfo?.version ?? '0.0.0' }, { capabilities: advertisedCapabilities(managed.capabilities, era, subscriptionsAllowed(managed.config)) });
+    /**
+     * Forwards one request and hands back exactly what the schema describes.
+     *
+     * Generic over the schema rather than typed against a union of all of them:
+     * v2's request handlers are typed per method, so a `Promise<unknown>` here
+     * fails to assign at all eight call sites below. Inferring the result type
+     * from the schema is also the honest description — this returns the child's
+     * answer, parsed by the schema the caller chose.
+     */
+    const forwardLive = (request, resultSchema, options = {}) => {
         const client = managed.client;
         if (!client)
             throw new Error(`Server "${managed.name}" is not running`);
         return client
-            .request(request, resultSchema, ABSOLUTE_CALL_OPTIONS)
+            .request(request, resultSchema, {
+            ...ABSOLUTE_CALL_OPTIONS,
+            ...options
+        })
             .then(assertForwardedResultSize);
     };
     // Real usage: wakes a sleeping on-demand server (blocking until it is up)
     // and resets its idle window. Everything else is answered without a child.
-    const use = async (request, resultSchema) => {
+    const use = async (request, resultSchema, options = {}) => {
         if (managed.state !== 'up' || !managed.client)
             await managed.wake();
         managed.markUsed();
-        return forwardLive(request, resultSchema);
+        return forwardLive(request, resultSchema, options);
     };
     const caps = managed.capabilities ?? {};
     if (caps.tools) {
@@ -53,27 +104,87 @@ function buildProxyServer(managed) {
         // all hub paths configured enumerates them on connect, so answering from
         // the cached snapshot (instead of waking) is what keeps a fleet of
         // sleeping servers asleep. Neither branch counts as usage.
-        server.setRequestHandler(ListToolsRequestSchema, req => managed.state === 'up' && managed.client ? forwardLive(req, ListToolsResultSchema) : Promise.resolve({ tools: managed.tools }));
-        server.setRequestHandler(CallToolRequestSchema, req => use(req, CallToolResultSchema));
+        server.setRequestHandler('tools/list', async (req) => {
+            // managed.tools is filtered on the way in, but the live branch forwards
+            // the upstream's own answer and never consults it — so it has to filter
+            // too. Missing this is the obvious bug here: the filter would appear to
+            // work on a sleeping server and vanish the moment it woke.
+            if (managed.state !== 'up' || !managed.client)
+                return { tools: managed.tools };
+            const live = (await forwardLive(req, ListToolsResultSchema));
+            return { ...live, tools: filterTools(managed.config, live.tools) };
+        });
+        server.setRequestHandler('tools/call', async (req, ctx) => {
+            // Hiding is not a boundary on this path: the hub forwards by name, so a
+            // client holding a stale schema would still reach it. Refused before the
+            // forward, which is what wakes a sleeping server — so a forbidden name
+            // cannot start one. The message is the neutral one a server gives for a
+            // tool it does not have; announcing what was hidden would be a
+            // disclosure in itself.
+            if (!toolAllowed(managed.config, req.params.name)) {
+                const logged = loggableToolName(req.params.name);
+                console.warn(`[${managed.name}] refused tools/call "${logged}": not permitted by allowTools/denyTools`);
+                throw new ProtocolError(ProtocolErrorCode.MethodNotFound, `Unknown tool: ${req.params.name}`);
+            }
+            // The caller's params go on unchanged: a gateway that rewrote them would
+            // be inventing a contract the child never agreed to.
+            const result = await forwardToolCall({ managed, tool: req.params.name, params: req.params, ctx, secret, via: 'server' });
+            // A question for the person is not a tool result and has no schema to be
+            // projected against.
+            if (isInputRequiredResult(result))
+                return result;
+            /**
+             * The projection `McpServer` does for its own tools, which a hand-written
+             * handler has to do for itself.
+             *
+             * It matters for one case, and only because this is a gateway: a child
+             * whose `outputSchema` describes a non-object — an array, a number — is
+             * advertised to a 2025-era client with that schema rewritten to
+             * `{result: …}`, because that revision has nowhere else to put it. The
+             * hub was already doing that half, for free, in `encodeResult`. Without
+             * this line the *value* went out unwrapped, so the client validated an
+             * array against a schema saying "object with a result key" and rejected
+             * data that was never wrong.
+             *
+             * The advertised schema is the child's own, before the rewrite: the
+             * codec decides from its root shape whether the wrap applies at all.
+             */
+            const advertised = managed.tools.find(t => t.name === req.params.name)?.outputSchema;
+            return server.projectCallToolResult(result, advertised);
+        });
     }
     if (caps.resources) {
-        server.setRequestHandler(ListResourcesRequestSchema, req => use(req, ListResourcesResultSchema));
-        server.setRequestHandler(ListResourceTemplatesRequestSchema, req => use(req, ListResourceTemplatesResultSchema));
-        server.setRequestHandler(ReadResourceRequestSchema, req => use(req, ReadResourceResultSchema));
+        server.setRequestHandler('resources/list', req => use(req, ListResourcesResultSchema));
+        server.setRequestHandler('resources/templates/list', req => use(req, ListResourceTemplatesResultSchema));
+        server.setRequestHandler('resources/read', req => use(req, ReadResourceResultSchema));
     }
     if (caps.prompts) {
-        server.setRequestHandler(ListPromptsRequestSchema, req => use(req, ListPromptsResultSchema));
-        server.setRequestHandler(GetPromptRequestSchema, req => use(req, GetPromptResultSchema));
+        server.setRequestHandler('prompts/list', req => use(req, ListPromptsResultSchema));
+        server.setRequestHandler('prompts/get', req => use(req, GetPromptResultSchema));
     }
     if (caps.completions) {
-        server.setRequestHandler(CompleteRequestSchema, req => use(req, CompleteResultSchema));
+        server.setRequestHandler('completion/complete', req => use(req, CompleteResultSchema));
     }
     return server;
 }
-/** Handle one Streamable-HTTP request against an MCP Server built on the fly. */
-export async function handleMcpRequest(buildServer, req, res) {
+/**
+ * The 2025-era path, unchanged: one `Server` and one stateless transport per
+ * HTTP request, both closed when the response closes.
+ *
+ * Kept as its own function rather than folded into the modern handler's
+ * `legacy: 'stateless'` fallback, because the two are not the same on the wire.
+ * That fallback answers GET and DELETE with `405`; this transport answers a GET
+ * with an open `text/event-stream` and a DELETE with `200`. claude.ai opens such
+ * a stream on every reconnect — which is why `ClientRequestGate` counts GETs
+ * separately in the first place — so switching it to `405` would be a visible
+ * change to the one client the stateless design was built around. The stream
+ * carries nothing today, but "carries nothing" and "is refused" are different
+ * answers, and this is not the change in which to find out how clients tell them
+ * apart.
+ */
+async function handleLegacyRequest(buildServer, req, res) {
     const server = buildServer();
-    const transport = new StreamableHTTPServerTransport({
+    const transport = new NodeStreamableHTTPServerTransport({
         sessionIdGenerator: undefined,
         enableJsonResponse: true
     });
@@ -84,8 +195,120 @@ export async function handleMcpRequest(buildServer, req, res) {
     await server.connect(transport);
     await transport.handleRequest(req, res, req.body);
 }
+export function createRoute(buildServer, options) {
+    const allowSubscriptions = options.allowSubscriptions ?? (() => true);
+    const handler = createMcpHandler(() => buildServer('modern'), {
+        // Strict: the legacy era is served below, by the transport that has always
+        // served it. A second, differently-behaving legacy path underneath this one
+        // would be unreachable and misleading.
+        legacy: 'reject',
+        // Set rather than inherited. These bound what one route may hold open on
+        // the hub's behalf, and a limit nobody wrote down is a limit nobody can
+        // raise when a deployment needs it.
+        maxSubscriptions: MAX_SUBSCRIPTIONS,
+        keepAliveMs: KEEPALIVE_MS,
+        onerror: error => console.error(`mcp-hub: modern-era request failed on ${options.label}: ${error.message}`)
+    });
+    const registry = new SubscriptionRegistry(handler.notify, { onDemandChange: options.onDemandChange });
+    return {
+        handler,
+        registry,
+        allowSubscriptions,
+        buildLegacyServer: () => buildServer('legacy'),
+        close: async () => {
+            registry.close();
+            await handler.close();
+        }
+    };
+}
+/**
+ * Take a lease for a `subscriptions/listen` stream, or answer it outright.
+ *
+ * The filter has to be read here rather than left to the SDK: the event bus is
+ * publish-only and never reports which URIs a stream asked for, so this is the
+ * hub's only chance to learn what to hold upstream. The SDK still parses the
+ * request properly a moment later and owns every error answer — the one refusal
+ * made here is the URI cap, which is the hub's limit and nobody else's.
+ *
+ * Returns false when the request has already been answered.
+ */
+function beginListen(route, req, res) {
+    const filter = parseListenFilter(req.body);
+    if (filter.resourceSubscriptions.length > MAX_SUBSCRIPTION_URIS) {
+        res.status(400).json({
+            jsonrpc: '2.0',
+            error: { code: -32602, message: `A subscription may name at most ${MAX_SUBSCRIPTION_URIS} resource URIs` },
+            id: null
+        });
+        return false;
+    }
+    // Node's server-wide requestTimeout (310s by default) would otherwise cut
+    // every listen stream a few minutes in, which looks exactly like a flaky
+    // upstream and is not. A listening stream is idle by design; its lifetime is
+    // bounded by MAX_STREAM_MS below instead.
+    req.setTimeout(0);
+    const reaper = MAX_STREAM_MS > 0
+        ? setTimeout(() => {
+            // Ends the stream without the specification's graceful completion
+            // result — the SDK owns the stream and offers no hook for one. The
+            // client sees the same unexpected disconnect an HTTP timeout would
+            // produce, which the specification names as a way a subscription
+            // ends, and re-listens.
+            res.end();
+        }, MAX_STREAM_MS)
+        : undefined;
+    reaper?.unref();
+    // A server whose operator switched subscriptions off advertises nothing and
+    // is asked for nothing, so the stream stays open and silent rather than
+    // taking a lease that would make the hub subscribe upstream on its behalf.
+    const lease = route.allowSubscriptions() ? route.registry.acquire(filter) : undefined;
+    let done = false;
+    const release = () => {
+        if (done)
+            return;
+        done = true;
+        clearTimeout(reaper);
+        lease?.release();
+    };
+    res.once('close', release);
+    res.once('finish', release);
+    return true;
+}
+/**
+ * Handle one MCP request in whichever protocol era it arrives in.
+ *
+ * `isLegacyRequest` decides, and its contract is one-way: everything it calls
+ * false — including a malformed envelope or a header/body mismatch — belongs to
+ * the modern handler, which owns those error answers. Only what it calls true
+ * may reach the legacy path.
+ */
+export async function handleMcpRequest(route, req, res) {
+    const probe = await toWebRequest(req, req.body);
+    if (await isLegacyRequest(probe)) {
+        await handleLegacyRequest(route.buildLegacyServer, req, res);
+        return;
+    }
+    if (isListenRequest(req.body) && !beginListen(route, req, res))
+        return;
+    await toNodeHandler(route.handler)(req, res, req.body);
+}
+/**
+ * The route behind each server path, created on first use and closed with the
+ * server. Held here rather than constructed per request because the handler
+ * inside owns open subscription streams.
+ */
+function routeFor(managed, secret) {
+    if (!managed.channel) {
+        managed.channel = createRoute(era => buildProxyServer(managed, secret, era), {
+            label: `/${managed.name}`,
+            onDemandChange: () => managed.reconcileSubscriptions(),
+            allowSubscriptions: () => subscriptionsAllowed(managed.config)
+        });
+    }
+    return managed.channel;
+}
 /** Express handler for /<name> and /<name>/mcp. */
-export function serverRequestHandler(managed) {
+export function serverRequestHandler(managed, secret) {
     return async (req, res) => {
         if (managed.state !== 'up' || !managed.client) {
             if (!managed.onDemand) {
@@ -108,7 +331,12 @@ export function serverRequestHandler(managed) {
             // With a snapshot the proxy server is built from cached identity and
             // capabilities; its handlers wake the child only for real usage.
         }
-        await handleMcpRequest(() => buildProxyServer(managed), req, res);
+        // Deliberately not `use()`: opening a listen stream is not usage. A client
+        // that subscribes to a sleeping child gets an honest acknowledgment built
+        // from the cached capabilities — they survive the nap — and delivery
+        // resumes when something actually wakes it. Waking on subscribe would undo
+        // on-demand for every server anyone ever watched.
+        await handleMcpRequest(routeFor(managed, secret), req, res);
     };
 }
 //# sourceMappingURL=proxy.js.map

package/dist/proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,0BAA0B,EAC1B,yBAAyB,EACzB,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACzB,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAEnF;;;;;;;;;;;;GAYG;AACH,SAAS,sBAAsB,CAAC,YAA4C;IAC1E,MAAM,IAAI,GAAuB,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;IAC7D,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,OAAsB;IAC9C,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,IAAI,OAAO,EAAE,EACnG,EAAE,YAAY,EAAE,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAC/D,CAAC;IACF,MAAM,WAAW,GAAG,CAAiD,OAAU,EAAE,YAA4E,EAAE,EAAE;QAC/J,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,OAAO,CAAC,IAAI,kBAAkB,CAAC,CAAC;QACxE,OAAO,MAAM;aACV,OAAO,CAAC,OAAyE,EAAE,YAAY,EAAE,qBAAqB,CAAC;aACvH,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACrC,CAAC,CAAC;IACF,0EAA0E;IAC1E,2EAA2E;IAC3E,MAAM,GAAG,GAAG,KAAK,EAAkD,OAAU,EAAE,YAA4E,EAAE,EAAE;QAC7J,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACpE,OAAO,CAAC,QAAQ,EAAE,CAAC;QACnB,OAAO,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,2DAA2D;QAC3D,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,GAAG,CAAC,EAAE,CACrD,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAC/H,CAAC;QACF,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACjG,MAAM,CAAC,iBAAiB,CAAC,kCAAkC,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC,CAAC;QACjH,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAC7F,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAAyB,EAAE,GAAY,EAAE,GAAa;IAC3F,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;QAClD,kBAAkB,EAAE,SAAS;QAC7B,kBAAkB,EAAE,IAAI;KACzB,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,oBAAoB,CAAC,OAAsB;IACzD,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;QAC1D,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,GAAG;qBACA,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,OAAO,CAAC,IAAI,QAAQ,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxH,OAAO;YACT,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACzB,mEAAmE;gBACnE,oEAAoE;gBACpE,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBACvB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAG,KAAe,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC/G,OAAO;gBACT,CAAC;YACH,CAAC;YACD,qEAAqE;YACrE,iEAAiE;QACnE,CAAC;QACD,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,iCAAiC,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACjO,OAAO,EAAE,iCAAiC,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC5G,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAGlJ,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EACL,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACrB,MAAM,oBAAoB,CAAC;AAW5B;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAwB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAU5F;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAS,sBAAsB,CAAC,YAA4C,EAAE,GAAQ,EAAE,OAAgB;IACtG,MAAM,IAAI,GAAuB,EAAE,GAAG,YAAY,EAAE,CAAC;IACrD,OAAO,IAAI,CAAC,OAAO,CAAC;IACpB,MAAM,MAAM,GAAG,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC;IAC3C,8EAA8E;IAC9E,8EAA8E;IAC9E,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC3D,IAAI,CAAC,SAAS,GAAG;YACf,GAAG,IAAI;YACP,GAAG,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,OAAsB,EAAE,MAAc,EAAE,GAAQ;IACxE,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,IAAI,OAAO,EAAE,EACnG,EAAE,YAAY,EAAE,sBAAsB,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,EAAE,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAC1G,CAAC;IACF;;;;;;;;OAQG;IACH,MAAM,WAAW,GAAG,CAClB,OAA6C,EAC7C,YAAe,EACf,OAAO,GAAmB,EAAE,EACc,EAAE;QAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,OAAO,CAAC,IAAI,kBAAkB,CAAC,CAAC;QACxE,OAAO,MAAM;aACV,OAAO,CAAC,OAAyE,EAAE,YAAY,EAAE;YAChG,GAAG,qBAAqB;YACxB,GAAG,OAAO;SACX,CAAC;aACD,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACrC,CAAC,CAAC;IACF,0EAA0E;IAC1E,2EAA2E;IAC3E,MAAM,GAAG,GAAG,KAAK,EACf,OAA6C,EAC7C,YAAe,EACf,OAAO,GAAmB,EAAE,EACc,EAAE;QAC5C,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACpE,OAAO,CAAC,QAAQ,EAAE,CAAC;QACnB,OAAO,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,2DAA2D;QAC3D,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;YACjD,wEAAwE;YACxE,wEAAwE;YACxE,wEAAwE;YACxE,2DAA2D;YAC3D,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAC/E,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAoB,CAAC;YAChF,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACxD,wEAAwE;YACxE,yEAAyE;YACzE,uEAAuE;YACvE,wEAAwE;YACxE,+DAA+D;YAC/D,wBAAwB;YACxB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,yBAAyB,MAAM,0CAA0C,CAAC,CAAC;gBACxG,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,cAAc,EAAE,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAChG,CAAC;YACD,yEAAyE;YACzE,qDAAqD;YACrD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzH,yEAAyE;YACzE,qBAAqB;YACrB,IAAI,qBAAqB,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;YACjD;;;;;;;;;;;;;;;eAeG;YACH,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;YACrF,OAAO,MAAM,CAAC,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACvF,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC,CAAC;QACzG,MAAM,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,CAAC,iBAAiB,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,iBAAiB,CAAC,aAAa,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,mBAAmB,CAAC,WAAyB,EAAE,GAAY,EAAE,GAAa;IACvF,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,IAAI,iCAAiC,CAAC;QACtD,kBAAkB,EAAE,SAAS;QAC7B,kBAAkB,EAAE,IAAI;KACzB,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC;AAiCD,MAAM,UAAU,WAAW,CAAC,WAAiC,EAAE,OAAqB;IAClF,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE;QAC5D,2EAA2E;QAC3E,4EAA4E;QAC5E,uCAAuC;QACvC,MAAM,EAAE,QAAQ;QAChB,yEAAyE;QACzE,wEAAwE;QACxE,oCAAoC;QACpC,gBAAgB,EAAE,iBAAiB;QACnC,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,yCAAyC,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;KAC5G,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACtG,OAAO;QACL,OAAO;QACP,QAAQ;QACR,kBAAkB;QAClB,iBAAiB,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC;QAC9C,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,WAAW,CAAC,KAAe,EAAE,GAAY,EAAE,GAAa;IAC/D,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,qBAAqB,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mCAAmC,qBAAqB,gBAAgB,EAAE;YAC1G,EAAE,EAAE,IAAI;SACT,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,6EAA6E;IAC7E,0CAA0C;IAC1C,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClB,MAAM,MAAM,GACV,aAAa,GAAG,CAAC;QACf,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;YACd,kEAAkE;YAClE,mEAAmE;YACnE,mEAAmE;YACnE,iEAAiE;YACjE,wBAAwB;YACxB,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,EAAE,aAAa,CAAC;QACnB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,4EAA4E;IAC5E,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,IAAI;YAAE,OAAO;QACjB,IAAI,GAAG,IAAI,CAAC;QACZ,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,KAAK,EAAE,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3B,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAe,EAAE,GAAY,EAAE,GAAa;IACjF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,MAAM,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IACD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;QAAE,OAAO;IACvE,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,OAAsB,EAAE,MAAc;IACtD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE;YAC3E,KAAK,EAAE,IAAI,OAAO,CAAC,IAAI,EAAE;YACzB,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,EAAE;YACtD,kBAAkB,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC,OAAmB,CAAC;AACrC,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,oBAAoB,CAAC,OAAsB,EAAE,MAAc;IACzE,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;QAC1D,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,GAAG;qBACA,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,OAAO,CAAC,IAAI,QAAQ,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxH,OAAO;YACT,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACzB,mEAAmE;gBACnE,oEAAoE;gBACpE,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBACvB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAG,KAAe,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC/G,OAAO;gBACT,CAAC;YACH,CAAC;YACD,qEAAqE;YACrE,iEAAiE;QACnE,CAAC;QACD,2EAA2E;QAC3E,0EAA0E;QAC1E,qEAAqE;QACrE,2EAA2E;QAC3E,kDAAkD;QAClD,MAAM,gBAAgB,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC;AACJ,CAAC"}

package/dist/stdio.js

@@ -1,12 +1,16 @@
 #!/usr/bin/env node
 import fs from 'node:fs';
 import path from 'node:path';
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { randomBytes } from 'node:crypto';
+import { serveStdio } from '@modelcontextprotocol/server/stdio';
 import { loadConfig, parseConfig, ConfigWatcher, warnMutableDockerImages } from './config.js';
-import { Supervisor } from './supervisor.js';
+import { Supervisor, UpstreamAuthRegistry } from './supervisor.js';
+import { AuthStore } from './auth/store.js';
 import { ToolCache } from './tool-cache.js';
 import { buildHubServer } from './hub.js';
 import { isMainModule } from './main-module.js';
+import { SubscriptionRegistry } from './subscriptions.js';
+import { IDLE_TIMEOUT_MS } from './timings.js';
 /**
  * Everything the hub writes with console.log/info would land in the middle of
  * the JSON-RPC stream and desynchronise the client, so both are moved to
@@ -51,6 +55,29 @@ function loadOrEmpty(configPath) {
  * Codex, …). Everything HTTP-only — OAuth, tokens, rate limiting, /health —
  * has no counterpart here; the trust boundary is the local user account.
  */
+/**
+ * Outbound OAuth only works here when a state directory was given: there is
+ * nowhere else to read a token from, and no HTTP listener for a browser to
+ * come back to. Without one, such a server simply cannot connect, so say why
+ * once rather than leaving an unexplained failure in the log.
+ */
+function buildUpstreamAuth(config, dataPath) {
+    const oauthServers = [...config].filter(([, server]) => server.kind === 'remote' && server.oauth !== undefined);
+    if (oauthServers.length === 0)
+        return undefined;
+    if (!dataPath) {
+        console.warn(`mcp-hub: ${oauthServers.map(([name]) => name).join(', ')} need an upstream OAuth token, but this mode has no state directory. ` +
+            'Set DATA_PATH to the hub\'s /data to reuse a token authorized there.');
+        return undefined;
+    }
+    const store = new AuthStore(dataPath);
+    const externalUrl = store.getExternalUrl();
+    if (!externalUrl) {
+        console.warn(`mcp-hub: ${dataPath} holds no upstream credentials yet; authorize them against the HTTP hub first`);
+        return undefined;
+    }
+    return new UpstreamAuthRegistry(store, externalUrl);
+}
 export function createStdioHub(options) {
     const config = loadOrEmpty(options.configPath);
     warnMutableDockerImages(config);
@@ -62,14 +89,17 @@ export function createStdioHub(options) {
     // exactly the cost this feature exists to avoid. The snapshot lives next to
     // the config rather than in a DATA_PATH — there is no state directory in
     // this mode, and no other state to put in one.
+    // IDLE_TIMEOUT_MS is the sub-minute sibling of the documented knob; see timings.ts.
+    const idleTimeoutMs = IDLE_TIMEOUT_MS || idleTimeoutMinutes * 60_000;
     const cache = new ToolCache(options.toolCachePath ?? path.join(path.dirname(options.configPath), '.mcp-hub', 'tool-cache.json'));
-    if (idleTimeoutMinutes > 0) {
+    if (idleTimeoutMs > 0) {
         cache.load();
         if (!cache.probeWritable()) {
             console.warn(`mcp-hub: tool cache ${cache.filePath} is not writable — on-demand servers warm-start at every launch instead of sleeping through it`);
         }
     }
-    const supervisor = new Supervisor(config, { idleTimeoutMinutes, cache });
+    const upstreamAuth = buildUpstreamAuth(config, options.dataPath);
+    const supervisor = new Supervisor(config, { idleTimeoutMinutes, idleTimeoutMs, cache, upstreamAuth });
     supervisor.start(); // children come up (or hydrate into `sleeping`) in the background
     void supervisor
         .reapOrphans()
@@ -89,16 +119,76 @@ export function createStdioHub(options) {
     else {
         console.warn(`mcp-hub: ${path.dirname(options.configPath)} does not exist — config hot reload is off`);
     }
-    return { server: buildHubServer(supervisor), supervisor, watcher };
+    // The seal on a half-finished tool call, which in this mode only ever has to
+    // survive between two legs of the same connection. There is no /data here and
+    // nothing to persist: the process IS the session, so a key drawn once at
+    // start is not a shortcut but the right lifetime. When the process ends there
+    // is no question left to resume.
+    const requestStateSecret = randomBytes(32).toString('base64url');
+    // A factory rather than an instance: the entry point below decides the era
+    // from the opening exchange and pins one instance to the connection, and it
+    // can only do that if it owns the construction.
+    return { build: (era) => buildHubServer(supervisor, requestStateSecret, era), supervisor, watcher };
 }
 export async function runStdio(options) {
     redirectStdoutLogging();
-    const { server, supervisor, watcher } = createStdioHub(options);
-    await server.connect(new StdioServerTransport());
+    const { build, supervisor, watcher } = createStdioHub(options);
+    // serveStdio rather than server.connect(new StdioServerTransport()): the
+    // protocol era is decided by the opening exchange, and only this entry point
+    // owns that decision. With a hand-wired transport the connection is 2025 for
+    // its whole life, and a child's `input_required` would be answered by the
+    // SDK's legacy shim instead of reaching the person at the keyboard.
+    //
+    // That matters most here of all the hub's doors. Over HTTP the hub is
+    // stateless and shared, so a 2025 client has nowhere to receive a question;
+    // a workstation hub is spawned per client session and belongs to exactly one
+    // person, which is precisely the case where asking them is worth something.
+    //
+    // legacy: 'serve' is the default and is documented as serving a 2025 opening
+    // "exactly as a hand-wired stdio server serves it today" — so nothing changes
+    // for a client that speaks the old era. What is new is only that a modern
+    // opening is now accepted instead of being answered in the old one.
+    // The aggregate's tool list moves whenever a child's does, and over stdio the
+    // hub cannot see the client's listen filter: `serveStdio` owns the request and
+    // offers no hook for one. So it holds a standing lease instead — one client,
+    // one connection, one thing worth watching.
+    //
+    // That is not a way of pushing at someone who did not ask.
+    // `sendToolListChanged()` reaches only the subscriptions actually open, so a
+    // client that never sent `subscriptions/listen` receives nothing; the lease
+    // only decides whether the hub bothers to watch the children upstream.
+    let registry;
+    const handle = serveStdio(ctx => {
+        // The era the opening exchange settled on. serveStdio hands it over for
+        // exactly this: an instance may differ by the era it will serve.
+        const hub = build(ctx.era);
+        registry?.close();
+        registry = new SubscriptionRegistry({
+            toolsChanged: () => hub.sendToolListChanged(),
+            // /hub aggregates tools and nothing else, so the other three describe
+            // nothing a client of this endpoint could read.
+            promptsChanged: () => { },
+            resourcesChanged: () => { },
+            resourceUpdated: () => { }
+        }, { onDemandChange: () => supervisor.reconcileAll() });
+        registry.acquire({
+            toolsListChanged: true,
+            promptsListChanged: false,
+            resourcesListChanged: false,
+            resourceSubscriptions: []
+        });
+        supervisor.hubSubscriptions = registry;
+        return hub;
+    }, {
+        legacy: 'serve',
+        onerror: error => console.error(`mcp-hub: stdio connection error: ${error.message}`)
+    });
     console.error(`mcp-hub: serving the hub aggregate over stdio (config ${options.configPath})`);
     const shutdown = async (signal) => {
         console.error(`mcp-hub: received ${signal}, shutting down`);
         watcher.stop();
+        registry?.close();
+        await handle.close();
         await supervisor.stop();
         process.exit(0);
     };

package/dist/stdio.js.map

@@ -1 +1 @@
-{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,uBAAuB,EAAkB,MAAM,aAAa,CAAC;AAC9G,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAWhD;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC;IACvB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IACxB,OAAO,GAAG,EAAE;QACV,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;QAC3B,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,UAAkB;IACrC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,yBAAyB,UAAU,6BAA6B,CAAC,CAAC;QAC/E,OAAO,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAAwB;IACrD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC9I,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,yEAAyE;IACzE,+CAA+C;IAC/C,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACjI,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,uBAAuB,KAAK,CAAC,QAAQ,gGAAgG,CAAC,CAAC;QACtJ,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,kEAAkE;IACtF,KAAK,UAAU;SACZ,WAAW,EAAE;SACb,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,+CAAgD,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAE5G,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QAClC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,mCAAmC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,aAAa,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,aAAa,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;QACnK,KAAK,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,2CAA4C,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnH,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,4CAA4C,CAAC,CAAC;IACzG,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB;IACrD,qBAAqB,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,yDAAyD,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC;IAE9F,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,OAAO,CAAC,KAAK,CAAC,qBAAqB,MAAM,iBAAiB,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,oEAAoE;IACpE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,QAAQ,CAAC;QACb,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/D,kBAAkB,EAAE,IAAI;QACxB,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS;KACxD,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,uBAAuB,EAAkB,MAAM,aAAa,CAAC;AAC9G,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAoB/C;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC;IACvB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IACxB,OAAO,GAAG,EAAE;QACV,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;QAC3B,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,UAAkB;IACrC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,yBAAyB,UAAU,6BAA6B,CAAC,CAAC;QAC/E,OAAO,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,MAAiB,EAAE,QAA4B;IACxE,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAChH,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CACV,YAAY,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uEAAuE;YAC9H,sEAAsE,CACzE,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;IAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,YAAY,QAAQ,+EAA+E,CAAC,CAAC;QAClH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAwB;IACrD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC9I,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,yEAAyE;IACzE,+CAA+C;IAC/C,oFAAoF;IACpF,MAAM,aAAa,GAAG,eAAe,IAAI,kBAAkB,GAAG,MAAM,CAAC;IACrE,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACjI,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,uBAAuB,KAAK,CAAC,QAAQ,gGAAgG,CAAC,CAAC;QACtJ,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,kBAAkB,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IACtG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,kEAAkE;IACtF,KAAK,UAAU;SACZ,WAAW,EAAE;SACb,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,+CAAgD,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAE5G,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QAClC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,mCAAmC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,aAAa,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,aAAa,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;QACnK,KAAK,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,2CAA4C,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnH,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,4CAA4C,CAAC,CAAC;IACzG,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,yEAAyE;IACzE,8EAA8E;IAC9E,iCAAiC;IACjC,MAAM,kBAAkB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEjE,2EAA2E;IAC3E,4EAA4E;IAC5E,gDAAgD;IAChD,OAAO,EAAE,KAAK,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,kBAAkB,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAC3G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB;IACrD,qBAAqB,EAAE,CAAC;IACxB,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAE/D,yEAAyE;IACzE,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,oEAAoE;IACpE,EAAE;IACF,sEAAsE;IACtE,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,oEAAoE;IACpE,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,4CAA4C;IAC5C,EAAE;IACF,2DAA2D;IAC3D,6EAA6E;IAC7E,4EAA4E;IAC5E,uEAAuE;IACvE,IAAI,QAA0C,CAAC;IAC/C,MAAM,MAAM,GAAG,UAAU,CACvB,GAAG,CAAC,EAAE;QACJ,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,QAAQ,EAAE,KAAK,EAAE,CAAC;QAClB,QAAQ,GAAG,IAAI,oBAAoB,CACjC;YACE,YAAY,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,mBAAmB,EAAE;YAC7C,sEAAsE;YACtE,gDAAgD;YAChD,cAAc,EAAE,GAAG,EAAE,GAAE,CAAC;YACxB,gBAAgB,EAAE,GAAG,EAAE,GAAE,CAAC;YAC1B,eAAe,EAAE,GAAG,EAAE,GAAE,CAAC;SAC1B,EACD,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CACpD,CAAC;QACF,QAAQ,CAAC,OAAO,CAAC;YACf,gBAAgB,EAAE,IAAI;YACtB,kBAAkB,EAAE,KAAK;YACzB,oBAAoB,EAAE,KAAK;YAC3B,qBAAqB,EAAE,EAAE;SAC1B,CAAC,CAAC;QACH,UAAU,CAAC,gBAAgB,GAAG,QAAQ,CAAC;QACvC,OAAO,GAAG,CAAC;IACb,CAAC,EACD;QACE,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,oCAAoC,KAAK,CAAC,OAAO,EAAE,CAAC;KACrF,CACF,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,yDAAyD,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC;IAE9F,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,OAAO,CAAC,KAAK,CAAC,qBAAqB,MAAM,iBAAiB,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,QAAQ,EAAE,KAAK,EAAE,CAAC;QAClB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,oEAAoE;IACpE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,QAAQ,CAAC;QACb,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/D,kBAAkB,EAAE,IAAI;QACxB,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS;KACxD,CAAC,CAAC;AACL,CAAC"}