@ninomae/mcp-app-server 0.1.0

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAe,MAAM,YAAY,CAAC;AAItG,OAAO,EAAE,cAAc,EAAsB,aAAa,EAAY,MAAM,UAAU,CAAC;AAGvF,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,uFAAuF;IACvF,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAClD,mJAAmJ;IACnJ,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACnE,mFAAmF;IACnF,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;IACxC,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9C,oGAAoG;IACpG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,2FAA2F;IAC3F,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC;IAC9D,mDAAmD;IACnD,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;IACvG,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;IACnC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACxE;AAMD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,YAAY,CA6G3E"}

package/dist/index.js

@@ -0,0 +1,134 @@
+import { AppServerError } from './types.js';
+import { createTokenStore } from './tokens.js';
+import * as oauth from './oauth.js';
+import { describeServer, isDiscoveryRequest, registryEntry, serveMcp } from './mcp.js';
+import { memoryRateLimiter } from './rate-limit.js';
+export * from './types.js';
+export * from './store.js';
+export * from './rate-limit.js';
+export * from './identity.js';
+export { classifyRedirect } from './oauth.js';
+function days(value, fallback) {
+    return Number.isFinite(value) && value > 0 && value <= 365 ? value : fallback;
+}
+export function createMcpAppServer(config) {
+    const basePath = config.basePath.replace(/\/+$/, '');
+    const paths = { mcp: basePath + '/mcp', schema: basePath + '/mcp/schema', oauth: basePath + '/oauth', consent: config.consentPath || '/oauth/authorize' };
+    const tokenPrefix = config.tokenPrefix || 'agt_';
+    // No catalogue → one implicit scope so OAuth clients still have something to request and consent to.
+    const scopes = config.scopes && Object.keys(config.scopes).length ? config.scopes : { [config.name]: { description: `Act on your behalf in ${config.name}`, required: true } };
+    const scopeNames = Object.keys(scopes);
+    const version = config.version || '1.0.0';
+    const tokens = createTokenStore(config.storage, tokenPrefix, days(config.accessTokenDays, 30), scopeNames);
+    const registrationLimit = config.registrationLimit === false ? null : config.registrationLimit || { limiter: memoryRateLimiter() };
+    const origins = (request) => (typeof config.origins === 'function' ? config.origins(request) : config.origins);
+    const runtime = (request) => ({
+        store: config.storage,
+        origins: origins(request),
+        mcpPath: paths.mcp,
+        oauthPath: paths.oauth,
+        consentPath: paths.consent,
+        scopes,
+        refreshDays: days(config.refreshTokenDays, 90),
+        tokens,
+        onEvent: config.onEvent,
+        registrationLimit,
+    });
+    const carriesToken = (request) => (request.headers.get('authorization') || '').replace(/^Bearer\s+/i, '').trim().startsWith(tokenPrefix);
+    async function authenticate(request) {
+        if (!carriesToken(request))
+            return null;
+        const token = (request.headers.get('authorization') || '').replace(/^Bearer\s+/i, '').trim();
+        return tokens.verify(token, oauth.mcpResource(runtime(request)));
+    }
+    async function handleOauth(rt, request, pathname) {
+        const method = request.method.toUpperCase();
+        try {
+            if (pathname === paths.oauth + '/register' && method === 'POST')
+                return await oauth.register(rt, request);
+            if (pathname === paths.oauth + '/authorize' && method === 'GET')
+                return await oauth.authorize(rt, request);
+            if (pathname === paths.oauth + '/client' && method === 'GET')
+                return await oauth.clientInfo(rt, request);
+            if (pathname === paths.oauth + '/token' && method === 'POST') {
+                await oauth.pruneOauth(rt);
+                return await oauth.token(rt, request);
+            }
+            if (pathname === paths.oauth + '/approve' && method === 'POST') {
+                // The consent page posts with whatever credential the host's own login uses; only the host can read it.
+                if (carriesToken(request))
+                    throw new AppServerError(403, 'Agents cannot approve grants', 'access_denied');
+                const identity = await config.identity.resolve(request);
+                return await oauth.approve(rt, request, identity.id);
+            }
+            throw new AppServerError(404, 'Unknown OAuth endpoint');
+        }
+        catch (error) {
+            if (error instanceof AppServerError)
+                return oauth.oauthErrorResponse(error);
+            throw error;
+        }
+    }
+    async function handleMcp(rt, request) {
+        const method = request.method.toUpperCase();
+        const anonymous = !request.headers.has('authorization');
+        if (anonymous && method === 'POST' && config.anonymousDiscovery !== false && (await isDiscoveryRequest(request))) {
+            return serveMcp({ name: config.name, version, tools: config.tools, request, ctx: null });
+        }
+        let grant;
+        try {
+            grant = await authenticate(request);
+        }
+        catch (error) {
+            if (error instanceof AppServerError)
+                return oauth.challengeResponse(rt, error.code, error.message, error.status);
+            throw error;
+        }
+        if (!grant)
+            return oauth.challengeResponse(rt, 'invalid_token', 'Authorize this agent with OAuth first');
+        const ctx = { ownerId: grant.ownerId, scopes: grant.scopes, grantId: grant.grantId, clientId: grant.clientId, clientName: grant.clientName, request };
+        const tools = config.tools.map((tool) => ({
+            ...tool,
+            handler: async (args, c) => {
+                const result = await tool.handler(args, c);
+                await config.onEvent?.({ type: 'tool', ownerId: c.ownerId, grantId: c.grantId, clientId: c.clientId, clientName: c.clientName, tool: tool.name, ok: !result.isError });
+                return result;
+            },
+        }));
+        return serveMcp({ name: config.name, version, tools, request, ctx });
+    }
+    return {
+        paths,
+        origins,
+        carriesToken,
+        authenticate,
+        async ensureSchema() {
+            await config.storage.ensureSchema?.();
+        },
+        describe: (request) => describeServer({ name: config.name, version, origins: origins(request), mcpPath: paths.mcp, scopes: scopeNames, tools: config.tools, contract: config.contract }),
+        serverJson: (request, namespace, description) => registryEntry({ namespace, name: config.name, version, description, origins: origins(request), mcpPath: paths.mcp }),
+        listGrants: (ownerId) => tokens.list(ownerId),
+        async revokeGrant(ownerId, grantId) {
+            if (!(await tokens.owns(ownerId, grantId)))
+                throw new AppServerError(404, 'Grant not found');
+            // Origins are irrelevant for revocation; a placeholder runtime keeps the signature simple.
+            await oauth.revokeChain(runtime(new Request('http://app.local/')), grantId);
+        },
+        async fetch(request) {
+            const pathname = new URL(request.url).pathname;
+            const method = request.method.toUpperCase();
+            const rt = runtime(request);
+            if (oauth.isWellKnownPath(rt, pathname) && method === 'GET')
+                return oauth.wellKnownResponse(rt, pathname);
+            if (pathname === paths.schema && method === 'GET') {
+                return new Response(JSON.stringify(this.describe(request)), { headers: { 'content-type': 'application/json; charset=utf-8', 'access-control-allow-origin': '*', 'cache-control': 'public, max-age=300' } });
+            }
+            if (pathname.startsWith(paths.oauth + '/'))
+                return handleOauth(rt, request, pathname);
+            if (pathname === paths.mcp)
+                return handleMcp(rt, request);
+            return null;
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAsB9C,SAAS,IAAI,CAAC,KAAyB,EAAE,QAAgB;IACvD,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,IAAK,KAAgB,IAAI,GAAG,CAAC,CAAC,CAAE,KAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,QAAQ,GAAG,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,aAAa,EAAE,KAAK,EAAE,QAAQ,GAAG,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAAC;IAC1J,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC;IACjD,qGAAqG;IACrG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,yBAAyB,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;IAC/K,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC;IAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IAC3G,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC;IACnI,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAE,EAAE,CAAC,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxH,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAsB,EAAE,CAAC,CAAC;QACzD,KAAK,EAAE,MAAM,CAAC,OAAO;QACrB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;QACzB,OAAO,EAAE,KAAK,CAAC,GAAG;QAClB,SAAS,EAAE,KAAK,CAAC,KAAK;QACtB,WAAW,EAAE,KAAK,CAAC,OAAO;QAC1B,MAAM;QACN,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAC9C,MAAM;QACN,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,iBAAiB;KAClB,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,CAAC,OAAgB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAElJ,KAAK,UAAU,YAAY,CAAC,OAAgB;QAC1C,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7F,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,EAAsB,EAAE,OAAgB,EAAE,QAAgB;QACnF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,IAAI,QAAQ,KAAK,KAAK,CAAC,KAAK,GAAG,WAAW,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC1G,IAAI,QAAQ,KAAK,KAAK,CAAC,KAAK,GAAG,YAAY,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC3G,IAAI,QAAQ,KAAK,KAAK,CAAC,KAAK,GAAG,SAAS,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,MAAM,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACzG,IAAI,QAAQ,KAAK,KAAK,CAAC,KAAK,GAAG,QAAQ,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7D,MAAM,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBAC3B,OAAO,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,QAAQ,KAAK,KAAK,CAAC,KAAK,GAAG,UAAU,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC/D,wGAAwG;gBACxG,IAAI,YAAY,CAAC,OAAO,CAAC;oBAAE,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,8BAA8B,EAAE,eAAe,CAAC,CAAC;gBAC1G,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACxD,OAAO,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc;gBAAE,OAAO,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,EAAsB,EAAE,OAAgB;QAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,SAAS,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,kBAAkB,KAAK,KAAK,IAAI,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACjH,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,KAAgC,CAAC;QACrC,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc;gBAAE,OAAO,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACjH,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,eAAe,EAAE,uCAAuC,CAAC,CAAC;QACzG,MAAM,GAAG,GAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QACnK,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,GAAG,IAAI;YACP,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,CAAc,EAAE,EAAE;gBAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC3C,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBACvK,OAAO,MAAM,CAAC;YAChB,CAAC;SACF,CAAC,CAAC,CAAC;QACJ,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,OAAO;QACL,KAAK;QACL,OAAO;QACP,YAAY;QACZ,YAAY;QACZ,KAAK,CAAC,YAAY;YAChB,MAAM,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;QACxC,CAAC;QACD,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxL,UAAU,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QACrK,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAC7C,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO;YAChC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAAE,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;YAC7F,2FAA2F;YAC3F,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,OAAO;YACjB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAC5B,IAAI,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC1G,IAAI,QAAQ,KAAK,KAAK,CAAC,MAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAClD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,6BAA6B,EAAE,GAAG,EAAE,eAAe,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC;YAC9M,CAAC;YACD,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC;gBAAE,OAAO,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YACtF,IAAI,QAAQ,KAAK,KAAK,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/mcp.d.ts

@@ -0,0 +1,64 @@
+import { z } from 'zod';
+import type { AgentTool, Origins, ToolContext } from './types.js';
+/** True when every JSON-RPC message in the body is a metadata method that reveals no user data. */
+export declare function isDiscoveryRequest(request: Request): Promise<boolean>;
+export declare function visibleTools(tools: readonly AgentTool[], scopes: readonly string[]): AgentTool[];
+/** Public, unauthenticated description of the MCP surface. Contains no user data. */
+export declare function describeServer(input: {
+    name: string;
+    version: string;
+    origins: Origins;
+    mcpPath: string;
+    scopes: string[];
+    tools: readonly AgentTool[];
+    contract?: string;
+}): {
+    contract?: string | undefined;
+    name: string;
+    version: string;
+    transport: string;
+    endpoint: string;
+    authorization: {
+        type: string;
+        resourceMetadata: string;
+        scopes: string[];
+    };
+    tools: {
+        name: string;
+        scope: string | null;
+        description: string;
+        inputSchema: z.core.ZodStandardJSONSchemaPayload<z.ZodObject<{
+            [x: string]: z.core.$ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+        }, z.core.$strip>>;
+        annotations: import("./types.js").ToolAnnotations;
+    }[];
+};
+/** Minimal `server.json` for the official MCP registry. Namespace is the host's (e.g. `io.github.<user>/<name>`). */
+export declare function registryEntry(input: {
+    namespace: string;
+    name: string;
+    version: string;
+    description: string;
+    origins: Origins;
+    mcpPath: string;
+}): {
+    name: string;
+    description: string;
+    version: string;
+    remotes: {
+        type: string;
+        url: string;
+    }[];
+};
+/**
+ * Serves one MCP request. `ctx` is null for anonymous discovery, in which case every tool is listed
+ * but the handler is never reachable because tools/call is rejected before this point.
+ */
+export declare function serveMcp(input: {
+    name: string;
+    version: string;
+    tools: readonly AgentTool[];
+    request: Request;
+    ctx: ToolContext | null;
+}): Promise<Response>;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAIlE,mGAAmG;AACnG,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,OAAO,oBASxD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,eAElF;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;EAiB3K;AAED,qHAAqH;AACrH,wBAAgB,aAAa,CAAC,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;;;;;;;;EAOhJ;AAED;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAA;CAAE,qBAoB9I"}

package/dist/mcp.js

@@ -0,0 +1,76 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js';
+import { z } from 'zod';
+const DISCOVERY_METHODS = new Set(['initialize', 'notifications/initialized', 'ping', 'tools/list']);
+/** True when every JSON-RPC message in the body is a metadata method that reveals no user data. */
+export async function isDiscoveryRequest(request) {
+    let body;
+    try {
+        body = await request.clone().json();
+    }
+    catch {
+        return false;
+    }
+    const messages = Array.isArray(body) ? body : [body];
+    return messages.length > 0 && messages.every((m) => m && typeof m === 'object' && DISCOVERY_METHODS.has(String(m.method)));
+}
+export function visibleTools(tools, scopes) {
+    return tools.filter((tool) => !tool.scope || scopes.includes(tool.scope));
+}
+/** Public, unauthenticated description of the MCP surface. Contains no user data. */
+export function describeServer(input) {
+    const publicOrigin = input.origins.publicOrigin;
+    return {
+        name: input.name,
+        version: input.version,
+        transport: 'streamable-http',
+        endpoint: publicOrigin + input.mcpPath,
+        authorization: { type: 'oauth2', resourceMetadata: publicOrigin + '/.well-known/oauth-protected-resource', scopes: input.scopes },
+        tools: input.tools.map((tool) => ({
+            name: tool.name,
+            scope: tool.scope ?? null,
+            description: tool.description,
+            inputSchema: z.toJSONSchema(z.object(tool.inputSchema), { unrepresentable: 'any' }),
+            annotations: tool.annotations,
+        })),
+        ...(input.contract ? { contract: input.contract } : {}),
+    };
+}
+/** Minimal `server.json` for the official MCP registry. Namespace is the host's (e.g. `io.github.<user>/<name>`). */
+export function registryEntry(input) {
+    return {
+        name: `${input.namespace}/${input.name}`,
+        description: input.description,
+        version: input.version,
+        remotes: [{ type: 'streamable-http', url: input.origins.publicOrigin + input.mcpPath }],
+    };
+}
+/**
+ * Serves one MCP request. `ctx` is null for anonymous discovery, in which case every tool is listed
+ * but the handler is never reachable because tools/call is rejected before this point.
+ */
+export async function serveMcp(input) {
+    const { request } = input;
+    const origin = request.headers.get('origin');
+    if (origin && origin !== new URL(request.url).origin && !/^http:\/\/(localhost|127\.0\.0\.1)(:\d+)?$/.test(origin))
+        return new Response('Origin denied', { status: 403 });
+    const server = new McpServer({ name: input.name, version: input.version });
+    const scopes = input.ctx ? input.ctx.scopes : input.tools.map((tool) => tool.scope || '').filter(Boolean);
+    for (const tool of visibleTools(input.tools, scopes)) {
+        server.registerTool(tool.name, { description: tool.description, inputSchema: tool.inputSchema, annotations: tool.annotations }, async (payload) => {
+            if (!input.ctx)
+                return { content: [{ type: 'text', text: 'Authorize this agent with OAuth first' }], isError: true };
+            const result = await tool.handler((payload ?? {}), input.ctx);
+            return { ...result };
+        });
+    }
+    const transport = new WebStandardStreamableHTTPServerTransport({ sessionIdGenerator: undefined, enableJsonResponse: true });
+    await server.connect(transport);
+    try {
+        return await transport.handleRequest(request);
+    }
+    finally {
+        await server.close();
+    }
+}
+//# sourceMappingURL=mcp.js.map

package/dist/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,wCAAwC,EAAE,MAAM,+DAA+D,CAAC;AACzH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,2BAA2B,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;AAErG,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAgB;IACvD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAE,CAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACvJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAA2B,EAAE,MAAyB;IACjF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,KAA6I;IAC1K,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,iBAAiB;QAC5B,QAAQ,EAAE,YAAY,GAAG,KAAK,CAAC,OAAO;QACtC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,GAAG,uCAAuC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;QACjI,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;YACnF,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,aAAa,CAAC,KAAmH;IAC/I,OAAO;QACL,IAAI,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE;QACxC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;KACxF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAgH;IAC7I,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,MAAM,IAAI,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,4CAA4C,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1K,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1G,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAChJ,IAAI,CAAC,KAAK,CAAC,GAAG;gBAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,uCAAuC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC9H,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,IAAI,EAAE,CAA4B,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YACzF,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5H,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/oauth.d.ts

@@ -0,0 +1,33 @@
+import type { AppServerEvent, Origins, ScopeDefinition } from './types.js';
+import { AppServerError } from './types.js';
+import type { AppServerStore } from './store.js';
+import type { RateLimitConfig } from './rate-limit.js';
+import type { TokenStore } from './tokens.js';
+export interface OauthRuntime {
+    store: AppServerStore;
+    origins: Origins;
+    mcpPath: string;
+    oauthPath: string;
+    consentPath: string;
+    scopes: Record<string, ScopeDefinition>;
+    refreshDays: number;
+    tokens: TokenStore;
+    onEvent?: (event: AppServerEvent) => Promise<void> | void;
+    /** Null disables registration rate limiting. */
+    registrationLimit: RateLimitConfig | null;
+}
+export declare const mcpResource: (rt: Pick<OauthRuntime, "origins" | "mcpPath">) => string;
+export declare const resourceMetadataUrl: (rt: Pick<OauthRuntime, "origins">) => string;
+export declare function isWellKnownPath(rt: Pick<OauthRuntime, 'mcpPath'>, pathname: string): boolean;
+export declare function wellKnownResponse(rt: OauthRuntime, pathname: string): Response;
+export declare function oauthErrorResponse(error: AppServerError): Response;
+export declare function challengeResponse(rt: Pick<OauthRuntime, 'origins'>, error: string, description: string, status?: number): Response;
+export declare function classifyRedirect(uri: string): 'loopback' | 'custom' | 'https' | null;
+export declare function register(rt: OauthRuntime, request: Request): Promise<Response>;
+export declare function authorize(rt: OauthRuntime, request: Request): Promise<Response>;
+export declare function clientInfo(rt: OauthRuntime, request: Request): Promise<Response>;
+export declare function approve(rt: OauthRuntime, request: Request, ownerId: string): Promise<Response>;
+export declare function token(rt: OauthRuntime, request: Request): Promise<Response>;
+export declare function revokeChain(rt: OauthRuntime, accessTokenId: string): Promise<void>;
+export declare function pruneOauth(rt: OauthRuntime): Promise<void>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAgB,cAAc,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAO9C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1D,gDAAgD;IAChD,iBAAiB,EAAE,eAAe,GAAG,IAAI,CAAC;CAC3C;AAED,eAAO,MAAM,WAAW,GAAI,IAAI,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,SAAS,CAAC,WAAyC,CAAC;AACnH,eAAO,MAAM,mBAAmB,GAAI,IAAI,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,WAAsE,CAAC;AAI5I,wBAAgB,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,WAMlF;AAED,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,YAgBnE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,cAAc,YAEvD;AAED,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAM,YAMpH;AASD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,IAAI,CAYpF;AA+BD,wBAAsB,QAAQ,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,qBAgChE;AAiCD,wBAAsB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,qBAcjE;AAGD,wBAAsB,UAAU,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,qBAqBlE;AAGD,wBAAsB,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAahF;AAuCD,wBAAsB,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,qBA6C7D;AAQD,wBAAsB,WAAW,CAAC,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAUxE;AAED,wBAAsB,UAAU,CAAC,EAAE,EAAE,YAAY,iBAEhD"}