@novorb/mcp-core 2.1.1 → 3.0.0

package/dist/protocol-errors.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @novorb/mcp-core - Errors for primitives answered with JSON-RPC errors (resources, prompts)
+ *
+ * Tools answer failures in-band (`isError` results). `resources/read` and `prompts/get` have no such
+ * result shape, so their failures are JSON-RPC errors: a `ProtocolError` the handler throws is kept
+ * (its code), anything else becomes `-32603` with the `mapError` text. Every message is passed through
+ * `maskClientText` (secrets redacted, registered secret values masked), exactly like tool errors.
+ */
+import { ProtocolError } from '@modelcontextprotocol/server';
+import { type MappedToolError } from './tools.js';
+/** The `mapError` signature shared with `registerTools`. */
+export type MapError = (err: unknown) => MappedToolError;
+/** A thrown handler error as the JSON-RPC error a client receives (masked, never a stack). */
+export declare function toProtocolError(err: unknown, mapError?: MapError): ProtocolError;
+//# sourceMappingURL=protocol-errors.d.ts.map

package/dist/protocol-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-errors.d.ts","sourceRoot":"","sources":["../src/protocol-errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAqB,MAAM,8BAA8B,CAAC;AAChF,OAAO,EAAmB,KAAK,eAAe,EAAkB,MAAM,YAAY,CAAC;AAEnF,4DAA4D;AAC5D,MAAM,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,eAAe,CAAC;AAEzD,8FAA8F;AAC9F,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,GAAE,QAA0B,GAAG,aAAa,CAajG"}

package/dist/protocol-errors.js

@@ -0,0 +1,28 @@
+/**
+ * @novorb/mcp-core - Errors for primitives answered with JSON-RPC errors (resources, prompts)
+ *
+ * Tools answer failures in-band (`isError` results). `resources/read` and `prompts/get` have no such
+ * result shape, so their failures are JSON-RPC errors: a `ProtocolError` the handler throws is kept
+ * (its code), anything else becomes `-32603` with the `mapError` text. Every message is passed through
+ * `maskClientText` (secrets redacted, registered secret values masked), exactly like tool errors.
+ */
+import { ProtocolError, ProtocolErrorCode } from '@modelcontextprotocol/server';
+import { defaultMapError, maskClientText } from './tools.js';
+/** A thrown handler error as the JSON-RPC error a client receives (masked, never a stack). */
+export function toProtocolError(err, mapError = defaultMapError) {
+    if (ProtocolError.isInstance(err)) {
+        if (err.code === ProtocolErrorCode.UrlElicitationRequired)
+            return err;
+        return new ProtocolError(err.code, maskClientText(err.message), err.data);
+    }
+    let mapped;
+    try {
+        mapped = mapError(err);
+    }
+    catch {
+        mapped = { message: 'Internal error' };
+    }
+    const text = mapped.code ? `${mapped.code}: ${mapped.message}` : mapped.message;
+    return new ProtocolError(ProtocolErrorCode.InternalError, maskClientText(text));
+}
+//# sourceMappingURL=protocol-errors.js.map

package/dist/protocol-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-errors.js","sourceRoot":"","sources":["../src/protocol-errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EAAE,eAAe,EAAwB,cAAc,EAAE,MAAM,YAAY,CAAC;AAKnF,8FAA8F;AAC9F,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,WAAqB,eAAe;IAChF,IAAI,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAC,sBAAsB;YAAE,OAAO,GAAG,CAAC;QACtE,OAAO,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IACzC,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;IAChF,OAAO,IAAI,aAAa,CAAC,iBAAiB,CAAC,aAAa,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;AAClF,CAAC"}

package/dist/protocol-logging.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @novorb/mcp-core - Protocol logging (MCP `notifications/message`)
+ *
+ * Forwards mcp-core logger entries to the MCP client as logging notifications while a request is being
+ * handled, through the SDK's own `ctx.mcpReq.log(level, data, logger)`. The SDK decides per era:
+ *
+ * - 2025-era connections honour the client's `logging/setLevel` (stdio keeps the level for the
+ *   connection; stateless HTTP builds a fresh instance per request, so a level set in one request is
+ *   not seen by the next one and every level is sent);
+ * - 2026-07-28 requests emit only when the request carries the per-request log level
+ *   (`_meta['io.modelcontextprotocol/logLevel']`), never otherwise.
+ *
+ * Protocol logging is deprecated by the 2026-07-28 revision (SEP-2577) but remains functional for at
+ * least twelve months, and 2025 clients use it, so it stays available as an opt-in: `LOG_PROTOCOL=true`
+ * (or `createMcpServer(..., { protocolLogging: true })`) advertises the `logging` capability and
+ * installs the forwarder. Default off.
+ *
+ * What is forwarded is exactly what the log files receive (redacted, PII-masked, registered secret
+ * values masked), and the logger never carries tool inputs or outputs (`logToolCall` is shape only).
+ * The request is found through an AsyncLocalStorage scope that `registerTools` opens around every
+ * handler (or `runWithRequestContext` for hand-registered handlers).
+ */
+import type { LoggingLevel, ServerContext } from '@modelcontextprotocol/server';
+import { LogLevel } from './utils/logger.js';
+/** Run `fn` with `ctx` as the current request (what the protocol log forwarder sends through). */
+export declare function runWithRequestContext<T>(ctx: ServerContext, fn: () => T): T;
+/** The SDK handler context of the request being handled, if any. */
+export declare function currentRequestContext(): ServerContext | undefined;
+/** The MCP logging level for an mcp-core log level. */
+export declare function toMcpLoggingLevel(level: LogLevel): LoggingLevel;
+/** Whether protocol logging is on: the explicit option, else `LOG_PROTOCOL`, else false. */
+export declare function protocolLoggingEnabled(option?: boolean, env?: NodeJS.ProcessEnv): boolean;
+/** Install the forwarder (idempotent). `createMcpServer` calls this when protocol logging is on. */
+export declare function enableProtocolLogging(): void;
+/** Remove the forwarder (tests). */
+export declare function disableProtocolLogging(): void;
+//# sourceMappingURL=protocol-logging.d.ts.map

package/dist/protocol-logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-logging.d.ts","sourceRoot":"","sources":["../src/protocol-logging.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EAAiC,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI5E,kGAAkG;AAClG,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAE3E;AAED,oEAAoE;AACpE,wBAAgB,qBAAqB,IAAI,aAAa,GAAG,SAAS,CAEjE;AASD,uDAAuD;AACvD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,GAAG,YAAY,CAE/D;AASD,4FAA4F;AAC5F,wBAAgB,sBAAsB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEtG;AAaD,oGAAoG;AACpG,wBAAgB,qBAAqB,IAAI,IAAI,CAG5C;AAED,oCAAoC;AACpC,wBAAgB,sBAAsB,IAAI,IAAI,CAG7C"}

package/dist/protocol-logging.js

@@ -0,0 +1,77 @@
+/**
+ * @novorb/mcp-core - Protocol logging (MCP `notifications/message`)
+ *
+ * Forwards mcp-core logger entries to the MCP client as logging notifications while a request is being
+ * handled, through the SDK's own `ctx.mcpReq.log(level, data, logger)`. The SDK decides per era:
+ *
+ * - 2025-era connections honour the client's `logging/setLevel` (stdio keeps the level for the
+ *   connection; stateless HTTP builds a fresh instance per request, so a level set in one request is
+ *   not seen by the next one and every level is sent);
+ * - 2026-07-28 requests emit only when the request carries the per-request log level
+ *   (`_meta['io.modelcontextprotocol/logLevel']`), never otherwise.
+ *
+ * Protocol logging is deprecated by the 2026-07-28 revision (SEP-2577) but remains functional for at
+ * least twelve months, and 2025 clients use it, so it stays available as an opt-in: `LOG_PROTOCOL=true`
+ * (or `createMcpServer(..., { protocolLogging: true })`) advertises the `logging` capability and
+ * installs the forwarder. Default off.
+ *
+ * What is forwarded is exactly what the log files receive (redacted, PII-masked, registered secret
+ * values masked), and the logger never carries tool inputs or outputs (`logToolCall` is shape only).
+ * The request is found through an AsyncLocalStorage scope that `registerTools` opens around every
+ * handler (or `runWithRequestContext` for hand-registered handlers).
+ */
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { addLogListener, LogLevel } from './utils/logger.js';
+const requestScope = new AsyncLocalStorage();
+/** Run `fn` with `ctx` as the current request (what the protocol log forwarder sends through). */
+export function runWithRequestContext(ctx, fn) {
+    return requestScope.run(ctx, fn);
+}
+/** The SDK handler context of the request being handled, if any. */
+export function currentRequestContext() {
+    return requestScope.getStore();
+}
+const LEVEL_MAP = {
+    [LogLevel.DEBUG]: 'debug',
+    [LogLevel.INFO]: 'info',
+    [LogLevel.WARN]: 'warning',
+    [LogLevel.ERROR]: 'error',
+};
+/** The MCP logging level for an mcp-core log level. */
+export function toMcpLoggingLevel(level) {
+    return LEVEL_MAP[level];
+}
+function parseBool(value) {
+    const v = value?.trim().toLowerCase();
+    if (v === 'true' || v === '1' || v === 'yes' || v === 'on')
+        return true;
+    if (v === 'false' || v === '0' || v === 'no' || v === 'off')
+        return false;
+    return undefined;
+}
+/** Whether protocol logging is on: the explicit option, else `LOG_PROTOCOL`, else false. */
+export function protocolLoggingEnabled(option, env = process.env) {
+    return option ?? parseBool(env.LOG_PROTOCOL) ?? false;
+}
+let unsubscribe;
+function forward(entry) {
+    const ctx = currentRequestContext();
+    if (!ctx)
+        return;
+    const data = { message: entry.message, context: entry.context };
+    if (entry.meta !== undefined)
+        data.meta = entry.meta;
+    // The SDK applies the capability, the era and the client's level; a failed send never surfaces.
+    ctx.mcpReq.log(toMcpLoggingLevel(entry.level), data, entry.logger).catch(() => undefined);
+}
+/** Install the forwarder (idempotent). `createMcpServer` calls this when protocol logging is on. */
+export function enableProtocolLogging() {
+    // The listener set dedupes `forward`, so this stays idempotent (and survives a `resetLogger`).
+    unsubscribe = addLogListener(forward);
+}
+/** Remove the forwarder (tests). */
+export function disableProtocolLogging() {
+    unsubscribe?.();
+    unsubscribe = undefined;
+}
+//# sourceMappingURL=protocol-logging.js.map

package/dist/protocol-logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-logging.js","sourceRoot":"","sources":["../src/protocol-logging.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,cAAc,EAAiB,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE5E,MAAM,YAAY,GAAG,IAAI,iBAAiB,EAAiB,CAAC;AAE5D,kGAAkG;AAClG,MAAM,UAAU,qBAAqB,CAAI,GAAkB,EAAE,EAAW;IACtE,OAAO,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,qBAAqB;IACnC,OAAO,YAAY,CAAC,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,SAAS,GAAmC;IAChD,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;IACzB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IACvB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS;IAC1B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;CAC1B,CAAC;AAEF,uDAAuD;AACvD,MAAM,UAAU,iBAAiB,CAAC,KAAe;IAC/C,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC1E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,sBAAsB,CAAC,MAAgB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC3F,OAAO,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;AACxD,CAAC;AAED,IAAI,WAAqC,CAAC;AAE1C,SAAS,OAAO,CAAC,KAAe;IAC9B,MAAM,GAAG,GAAG,qBAAqB,EAAE,CAAC;IACpC,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,MAAM,IAAI,GAA4B,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACzF,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACrD,gGAAgG;IAChG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC5F,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,qBAAqB;IACnC,+FAA+F;IAC/F,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,sBAAsB;IACpC,WAAW,EAAE,EAAE,CAAC;IAChB,WAAW,GAAG,SAAS,CAAC;AAC1B,CAAC"}

package/dist/rate-limiter.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @novorb/mcp-core - Token bucket rate limiter
+ *
+ * A client-side limiter shared by every request of one HTTP client instance (e.g. Trello: 100 requests
+ * per 10 seconds per token = capacity 100, refillPerSecond 10). Waiters are served in FIFO order.
+ * Build the client once per process, not per MCP request, or the bucket limits nothing.
+ */
+export interface TokenBucketOptions {
+    /** Maximum burst (bucket size); must be >= 1. */
+    capacity: number;
+    /** Tokens added per second; must be > 0. */
+    refillPerSecond: number;
+    /** Clock in milliseconds (default Date.now; injectable for tests). */
+    now?: () => number;
+}
+export declare class TokenBucket {
+    private tokens;
+    private last;
+    private queue;
+    private readonly capacity;
+    private readonly ratePerMs;
+    private readonly now;
+    constructor(options: TokenBucketOptions);
+    private refill;
+    /** Tokens available right now (after refill). */
+    available(): number;
+    /**
+     * Waits for one token. Rejects with the abort reason as soon as `signal` aborts, also while still
+     * queued behind other waiters (its turn then takes no token).
+     */
+    acquire(signal?: AbortSignal): Promise<void>;
+    private take;
+}
+/** Creates a token bucket. */
+export declare function createTokenBucket(options: TokenBucketOptions): TokenBucket;
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../src/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,WAAW,kBAAkB;IACjC,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,eAAe,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,KAAK,CAAoC;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEvB,OAAO,EAAE,kBAAkB;IAUvC,OAAO,CAAC,MAAM;IAMd,iDAAiD;IACjD,SAAS,IAAI,MAAM;IAKnB;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;YAyB9B,IAAI;CAWnB;AAED,8BAA8B;AAC9B,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CAE1E"}

package/dist/rate-limiter.js

@@ -0,0 +1,79 @@
+/**
+ * @novorb/mcp-core - Token bucket rate limiter
+ *
+ * A client-side limiter shared by every request of one HTTP client instance (e.g. Trello: 100 requests
+ * per 10 seconds per token = capacity 100, refillPerSecond 10). Waiters are served in FIFO order.
+ * Build the client once per process, not per MCP request, or the bucket limits nothing.
+ */
+import { sleep, throwIfAborted } from './retry.js';
+export class TokenBucket {
+    tokens;
+    last;
+    queue = Promise.resolve();
+    capacity;
+    ratePerMs;
+    now;
+    constructor(options) {
+        if (!(options.capacity >= 1))
+            throw new RangeError('capacity must be >= 1');
+        if (!(options.refillPerSecond > 0))
+            throw new RangeError('refillPerSecond must be > 0');
+        this.capacity = options.capacity;
+        this.ratePerMs = options.refillPerSecond / 1000;
+        this.now = options.now ?? Date.now;
+        this.tokens = options.capacity;
+        this.last = this.now();
+    }
+    refill() {
+        const now = this.now();
+        this.tokens = Math.min(this.capacity, this.tokens + (now - this.last) * this.ratePerMs);
+        this.last = now;
+    }
+    /** Tokens available right now (after refill). */
+    available() {
+        this.refill();
+        return this.tokens;
+    }
+    /**
+     * Waits for one token. Rejects with the abort reason as soon as `signal` aborts, also while still
+     * queued behind other waiters (its turn then takes no token).
+     */
+    acquire(signal) {
+        const turn = this.queue.then(() => this.take(signal));
+        // Keep the chain alive when one waiter aborts so later waiters still get served.
+        this.queue = turn.catch(() => undefined);
+        if (!signal)
+            return turn;
+        return new Promise((resolve, reject) => {
+            const onAbort = () => reject(signal.reason);
+            if (signal.aborted) {
+                onAbort();
+                return;
+            }
+            signal.addEventListener('abort', onAbort, { once: true });
+            turn.then(() => {
+                signal.removeEventListener('abort', onAbort);
+                resolve();
+            }, (error) => {
+                signal.removeEventListener('abort', onAbort);
+                reject(error);
+            });
+        });
+    }
+    async take(signal) {
+        for (;;) {
+            throwIfAborted(signal);
+            this.refill();
+            if (this.tokens >= 1) {
+                this.tokens -= 1;
+                return;
+            }
+            await sleep(Math.ceil((1 - this.tokens) / this.ratePerMs), signal);
+        }
+    }
+}
+/** Creates a token bucket. */
+export function createTokenBucket(options) {
+    return new TokenBucket(options);
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../src/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAWnD,MAAM,OAAO,WAAW;IACd,MAAM,CAAS;IACf,IAAI,CAAS;IACb,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAChC,QAAQ,CAAS;IACjB,SAAS,CAAS;IAClB,GAAG,CAAe;IAEnC,YAAY,OAA2B;QACrC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,uBAAuB,CAAC,CAAC;QAC5E,IAAI,CAAC,CAAC,OAAO,CAAC,eAAe,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAC;QACxF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;QAChD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,CAAC;IAEO,MAAM;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QACxF,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,iDAAiD;IACjD,SAAS;QACP,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,MAAoB;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,iFAAiF;QACjF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC,IAAI,CACP,GAAG,EAAE;gBACH,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7C,OAAO,EAAE,CAAC;YACZ,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;gBACjB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7C,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,MAA+B;QAChD,SAAS,CAAC;YACR,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;CACF;AAED,8BAA8B;AAC9B,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC"}

package/dist/request-state.d.ts

@@ -0,0 +1,74 @@
+/**
+ * @novorb/mcp-core - Sealed requestState (multi-round-trip flows)
+ *
+ * A multi-step tool returns `inputRequired({ inputRequests?, requestState })`; the client echoes
+ * `requestState` back on the retry (2026-07-28 MRTR; the SDK's legacy shim does the same in-process for
+ * 2025-era connections). The echoed value is attacker-controlled. The SDK ships an HMAC codec
+ * (`createRequestStateCodec`: signed, NOT encrypted, the client can read the payload) and the
+ * `ServerOptions.requestState.verify` seam; mcp-core adds the authenticated-encryption variant with the
+ * SAME `RequestStateCodec` interface (`mint` / `verify`), so it drops into that seam unchanged:
+ *
+ * - AES-256-GCM with a per-key sub-key derived by HKDF-SHA256 (the operator secret is never used as
+ *   the cipher key directly); the payload is confidential and tamper-evident;
+ * - expiry (`ttlSeconds`, default 600) inside the sealed envelope;
+ * - context binding (default: the request method and the caller's `clientId`), compared in constant
+ *   time, so a state minted for one caller is refused for another;
+ * - key rotation: the current key seals, the current and every previous key open (`kid` routing);
+ * - tamper, expiry, binding and unknown-key failures throw `RequestStateError` with a reason; the SDK
+ *   answers the client the frozen `-32602 Invalid or expired requestState` and reports the reason to
+ *   the server's `onerror` (the mcp-core logger).
+ *
+ * Wire: `ms1.<kid>.<iv>.<ciphertext+tag>` (base64url parts; AAD = `ms1.<kid>`).
+ *
+ * The key comes from `MCP_REQUEST_STATE_KEY` (secret, at least 32 bytes, for example
+ * `openssl rand -base64 48`); `MCP_REQUEST_STATE_PREVIOUS_KEY` (multi: `_1`, `_2`, ...) keeps
+ * in-flight flows valid across a rotation. The SAME key must be configured on every instance that can
+ * receive a retry (stateless HTTP may route each round to a different replica). Without a key the
+ * feature refuses to start (`requestStateCodecFromEnv` throws).
+ */
+import type { RequestStateCodec, ServerContext } from '@modelcontextprotocol/server';
+import type { LoadedEnv } from './utils/envLoader.js';
+export type { RequestStateCodec } from '@modelcontextprotocol/server';
+/** Minimum key length in bytes (the SDK's HMAC codec uses the same bound). */
+export declare const MIN_REQUEST_STATE_KEY_BYTES = 32;
+/** Default lifetime of a minted state, in seconds. */
+export declare const DEFAULT_REQUEST_STATE_TTL_SECONDS = 600;
+export type RequestStateFailure = 'malformed' | 'unknown-key' | 'tampered' | 'expired' | 'bind';
+/** A refused requestState. `reason` is a fixed code; the message never carries the payload. */
+export declare class RequestStateError extends Error {
+    readonly reason: RequestStateFailure;
+    constructor(reason: RequestStateFailure);
+}
+/** Thrown when the feature is used without a valid key. */
+export declare class RequestStateKeyError extends Error {
+    constructor(message: string);
+}
+export interface SealedRequestStateOptions {
+    /** The operator secret (UTF-8 string or bytes), at least 32 bytes. */
+    key: string | Uint8Array;
+    /** Older secrets still accepted for opening (rotation). */
+    previousKeys?: ReadonlyArray<string | Uint8Array>;
+    /** Lifetime of a minted state in seconds (default 600). */
+    ttlSeconds?: number;
+    /**
+     * Context binding, evaluated at mint and verify (default: method + caller clientId). `false`
+     * disables binding (only for state that does not influence authorization or resource access).
+     */
+    bind?: ((ctx: ServerContext) => string) | false;
+    /** Clock in milliseconds (tests). */
+    now?: () => number;
+}
+/** The default binding: the request method and the authenticated caller. */
+export declare function defaultRequestStateBinding(ctx: ServerContext): string;
+/**
+ * An authenticated-encryption `RequestStateCodec` (AES-256-GCM, HKDF sub-keys, expiry, binding,
+ * rotation). Pass it as `createMcpServer(..., { requestStateCodec })`.
+ */
+export declare function createSealedRequestStateCodec<T = unknown>(options: SealedRequestStateOptions): RequestStateCodec<T>;
+/**
+ * The sealed codec from `MCP_REQUEST_STATE_KEY`, `MCP_REQUEST_STATE_PREVIOUS_KEY[_n]` and
+ * `MCP_REQUEST_STATE_TTL_SECONDS`. Throws `RequestStateKeyError` when the key is missing or too short
+ * (the feature never runs with a default or empty key). Every key is registered with the logger mask.
+ */
+export declare function requestStateCodecFromEnv<T = unknown>(env?: LoadedEnv | NodeJS.ProcessEnv, options?: Omit<SealedRequestStateOptions, 'key' | 'previousKeys' | 'ttlSeconds'>): RequestStateCodec<T>;
+//# sourceMappingURL=request-state.d.ts.map

package/dist/request-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-state.d.ts","sourceRoot":"","sources":["../src/request-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGtD,YAAY,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,8EAA8E;AAC9E,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,sDAAsD;AACtD,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAMrD,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAEhG,+FAA+F;AAC/F,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;gBACzB,MAAM,EAAE,mBAAmB;CAaxC;AAED,2DAA2D;AAC3D,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,yBAAyB;IACxC,sEAAsE;IACtE,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC;IACzB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;IAClD,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,aAAa,KAAK,MAAM,CAAC,GAAG,KAAK,CAAC;IAChD,qCAAqC;IACrC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAyBD,4EAA4E;AAC5E,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAErE;AAYD;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,yBAAyB,GAAG,iBAAiB,CAAC,CAAC,CAAC,CA0DnH;AAcD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,GAAG,OAAO,EAClD,GAAG,GAAE,SAAS,GAAG,MAAM,CAAC,UAAwB,EAChD,OAAO,GAAE,IAAI,CAAC,yBAAyB,EAAE,KAAK,GAAG,cAAc,GAAG,YAAY,CAAM,GACnF,iBAAiB,CAAC,CAAC,CAAC,CAkBtB"}

package/dist/request-state.js

@@ -0,0 +1,190 @@
+/**
+ * @novorb/mcp-core - Sealed requestState (multi-round-trip flows)
+ *
+ * A multi-step tool returns `inputRequired({ inputRequests?, requestState })`; the client echoes
+ * `requestState` back on the retry (2026-07-28 MRTR; the SDK's legacy shim does the same in-process for
+ * 2025-era connections). The echoed value is attacker-controlled. The SDK ships an HMAC codec
+ * (`createRequestStateCodec`: signed, NOT encrypted, the client can read the payload) and the
+ * `ServerOptions.requestState.verify` seam; mcp-core adds the authenticated-encryption variant with the
+ * SAME `RequestStateCodec` interface (`mint` / `verify`), so it drops into that seam unchanged:
+ *
+ * - AES-256-GCM with a per-key sub-key derived by HKDF-SHA256 (the operator secret is never used as
+ *   the cipher key directly); the payload is confidential and tamper-evident;
+ * - expiry (`ttlSeconds`, default 600) inside the sealed envelope;
+ * - context binding (default: the request method and the caller's `clientId`), compared in constant
+ *   time, so a state minted for one caller is refused for another;
+ * - key rotation: the current key seals, the current and every previous key open (`kid` routing);
+ * - tamper, expiry, binding and unknown-key failures throw `RequestStateError` with a reason; the SDK
+ *   answers the client the frozen `-32602 Invalid or expired requestState` and reports the reason to
+ *   the server's `onerror` (the mcp-core logger).
+ *
+ * Wire: `ms1.<kid>.<iv>.<ciphertext+tag>` (base64url parts; AAD = `ms1.<kid>`).
+ *
+ * The key comes from `MCP_REQUEST_STATE_KEY` (secret, at least 32 bytes, for example
+ * `openssl rand -base64 48`); `MCP_REQUEST_STATE_PREVIOUS_KEY` (multi: `_1`, `_2`, ...) keeps
+ * in-flight flows valid across a rotation. The SAME key must be configured on every instance that can
+ * receive a retry (stateless HTTP may route each round to a different replica). Without a key the
+ * feature refuses to start (`requestStateCodecFromEnv` throws).
+ */
+import { createCipheriv, createDecipheriv, createHash, hkdfSync, randomBytes, timingSafeEqual } from 'node:crypto';
+import { registerSecretValues } from './utils/logger.js';
+/** Minimum key length in bytes (the SDK's HMAC codec uses the same bound). */
+export const MIN_REQUEST_STATE_KEY_BYTES = 32;
+/** Default lifetime of a minted state, in seconds. */
+export const DEFAULT_REQUEST_STATE_TTL_SECONDS = 600;
+const VERSION = 'ms1';
+const IV_BYTES = 12;
+const TAG_BYTES = 16;
+/** A refused requestState. `reason` is a fixed code; the message never carries the payload. */
+export class RequestStateError extends Error {
+    reason;
+    constructor(reason) {
+        const text = {
+            malformed: 'requestState is malformed',
+            'unknown-key': 'requestState was sealed with a key this server does not hold (rotated out, or another deployment)',
+            tampered: 'requestState failed authentication (tampered or corrupted)',
+            expired: 'requestState has expired',
+            bind: 'requestState was issued for another caller or method',
+        };
+        super(text[reason]);
+        this.name = 'RequestStateError';
+        this.reason = reason;
+    }
+}
+/** Thrown when the feature is used without a valid key. */
+export class RequestStateKeyError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'RequestStateKeyError';
+    }
+}
+function keyBytes(key, label) {
+    const bytes = typeof key === 'string' ? Buffer.from(key, 'utf8') : Buffer.from(key);
+    if (bytes.length < MIN_REQUEST_STATE_KEY_BYTES) {
+        throw new RequestStateKeyError(`${label} must be at least ${MIN_REQUEST_STATE_KEY_BYTES} bytes (got ${bytes.length}); generate one with \`openssl rand -base64 48\``);
+    }
+    return bytes;
+}
+function derive(secret) {
+    const kid = Buffer.from(hkdfSync('sha256', secret, Buffer.alloc(0), 'mcp-core/request-state/kid', 6)).toString('base64url');
+    const key = Buffer.from(hkdfSync('sha256', secret, Buffer.alloc(0), 'mcp-core/request-state/aes-256-gcm', 32));
+    return { kid, key };
+}
+/** The default binding: the request method and the authenticated caller. */
+export function defaultRequestStateBinding(ctx) {
+    return `${ctx.mcpReq.method}\0${ctx.http?.authInfo?.clientId ?? ''}`;
+}
+function bindTag(value) {
+    return createHash('sha256').update(`mcp-core.requestState.bind:${value}`).digest('base64url');
+}
+function sameTag(a, b) {
+    const x = createHash('sha256').update(a).digest();
+    const y = createHash('sha256').update(b).digest();
+    return timingSafeEqual(x, y);
+}
+/**
+ * An authenticated-encryption `RequestStateCodec` (AES-256-GCM, HKDF sub-keys, expiry, binding,
+ * rotation). Pass it as `createMcpServer(..., { requestStateCodec })`.
+ */
+export function createSealedRequestStateCodec(options) {
+    const current = derive(keyBytes(options.key, 'MCP_REQUEST_STATE_KEY'));
+    const opening = new Map([[current.kid, current.key]]);
+    for (const [i, previous] of (options.previousKeys ?? []).entries()) {
+        const d = derive(keyBytes(previous, `MCP_REQUEST_STATE_PREVIOUS_KEY (${i + 1})`));
+        if (!opening.has(d.kid))
+            opening.set(d.kid, d.key);
+    }
+    const ttlSeconds = options.ttlSeconds ?? DEFAULT_REQUEST_STATE_TTL_SECONDS;
+    if (!Number.isInteger(ttlSeconds) || ttlSeconds <= 0)
+        throw new RangeError('ttlSeconds must be a positive integer');
+    const bind = options.bind === false ? undefined : (options.bind ?? defaultRequestStateBinding);
+    const now = options.now ?? Date.now;
+    return {
+        async mint(payload, ctx) {
+            if (bind && !ctx)
+                throw new TypeError('requestState mint needs the handler context for its binding');
+            const body = { p: payload, exp: Math.floor(now() / 1000) + ttlSeconds };
+            if (bind && ctx)
+                body.b = bindTag(bind(ctx));
+            const iv = randomBytes(IV_BYTES);
+            const header = `${VERSION}.${current.kid}`;
+            const cipher = createCipheriv('aes-256-gcm', current.key, iv);
+            cipher.setAAD(Buffer.from(header, 'utf8'));
+            const sealed = Buffer.concat([cipher.update(JSON.stringify(body), 'utf8'), cipher.final(), cipher.getAuthTag()]);
+            return `${header}.${iv.toString('base64url')}.${sealed.toString('base64url')}`;
+        },
+        async verify(state, ctx) {
+            const parts = state.split('.');
+            if (parts.length !== 4 || parts[0] !== VERSION)
+                throw new RequestStateError('malformed');
+            const [version, kid, ivText, sealedText] = parts;
+            const key = opening.get(kid);
+            if (!key)
+                throw new RequestStateError('unknown-key');
+            const iv = Buffer.from(ivText, 'base64url');
+            const sealed = Buffer.from(sealedText, 'base64url');
+            if (iv.length !== IV_BYTES || sealed.length <= TAG_BYTES)
+                throw new RequestStateError('malformed');
+            let plain;
+            try {
+                const decipher = createDecipheriv('aes-256-gcm', key, iv);
+                decipher.setAAD(Buffer.from(`${version}.${kid}`, 'utf8'));
+                decipher.setAuthTag(sealed.subarray(sealed.length - TAG_BYTES));
+                plain = Buffer.concat([
+                    decipher.update(sealed.subarray(0, sealed.length - TAG_BYTES)),
+                    decipher.final(),
+                ]).toString('utf8');
+            }
+            catch {
+                throw new RequestStateError('tampered');
+            }
+            let body;
+            try {
+                body = JSON.parse(plain);
+            }
+            catch {
+                throw new RequestStateError('malformed');
+            }
+            if (typeof body.exp !== 'number' || body.exp * 1000 <= now())
+                throw new RequestStateError('expired');
+            if (bind) {
+                if (typeof body.b !== 'string' || !sameTag(body.b, bindTag(bind(ctx))))
+                    throw new RequestStateError('bind');
+            }
+            return body.p;
+        },
+    };
+}
+function isLoadedEnv(env) {
+    return typeof env.get === 'function' && typeof env.getAll === 'function';
+}
+function previousFromProcessEnv(env) {
+    const base = 'MCP_REQUEST_STATE_PREVIOUS_KEY';
+    const keys = Object.keys(env)
+        .filter((k) => k === base || k.startsWith(`${base}_`))
+        .sort((a, b) => (a === base ? -1 : b === base ? 1 : a.localeCompare(b, 'en', { numeric: true })));
+    return keys.map((k) => env[k]).filter((v) => typeof v === 'string' && v !== '');
+}
+/**
+ * The sealed codec from `MCP_REQUEST_STATE_KEY`, `MCP_REQUEST_STATE_PREVIOUS_KEY[_n]` and
+ * `MCP_REQUEST_STATE_TTL_SECONDS`. Throws `RequestStateKeyError` when the key is missing or too short
+ * (the feature never runs with a default or empty key). Every key is registered with the logger mask.
+ */
+export function requestStateCodecFromEnv(env = process.env, options = {}) {
+    const loaded = isLoadedEnv(env);
+    const key = loaded ? env.get('MCP_REQUEST_STATE_KEY') : env.MCP_REQUEST_STATE_KEY || undefined;
+    if (key === undefined) {
+        throw new RequestStateKeyError('requestState is not available: set MCP_REQUEST_STATE_KEY (a secret of at least 32 bytes, the same on every instance)');
+    }
+    const previous = loaded ? env.getAll('MCP_REQUEST_STATE_PREVIOUS_KEY') : previousFromProcessEnv(env);
+    registerSecretValues([key, ...previous]);
+    const ttlRaw = loaded ? env.get('MCP_REQUEST_STATE_TTL_SECONDS') : env.MCP_REQUEST_STATE_TTL_SECONDS;
+    const ttl = ttlRaw === undefined || ttlRaw === '' ? undefined : Number(ttlRaw);
+    return createSealedRequestStateCodec({
+        ...options,
+        key,
+        previousKeys: previous,
+        ...(ttl !== undefined ? { ttlSeconds: ttl } : {}),
+    });
+}
+//# sourceMappingURL=request-state.js.map

package/dist/request-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-state.js","sourceRoot":"","sources":["../src/request-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnH,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAIzD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAC9C,sDAAsD;AACtD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAErD,MAAM,OAAO,GAAG,KAAK,CAAC;AACtB,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,SAAS,GAAG,EAAE,CAAC;AAIrB,+FAA+F;AAC/F,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,MAAM,CAAsB;IACrC,YAAY,MAA2B;QACrC,MAAM,IAAI,GAAwC;YAChD,SAAS,EAAE,2BAA2B;YACtC,aAAa,EACX,mGAAmG;YACrG,QAAQ,EAAE,4DAA4D;YACtE,OAAO,EAAE,0BAA0B;YACnC,IAAI,EAAE,sDAAsD;SAC7D,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,2DAA2D;AAC3D,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAuBD,SAAS,QAAQ,CAAC,GAAwB,EAAE,KAAa;IACvD,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpF,IAAI,KAAK,CAAC,MAAM,GAAG,2BAA2B,EAAE,CAAC;QAC/C,MAAM,IAAI,oBAAoB,CAC5B,GAAG,KAAK,qBAAqB,2BAA2B,eAAe,KAAK,CAAC,MAAM,kDAAkD,CACtI,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,MAAc;IAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAC5G,WAAW,CACZ,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,oCAAoC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/G,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACtB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,0BAA0B,CAAC,GAAkB;IAC3D,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,OAAO,CAAC,CAAS,EAAE,CAAS;IACnC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClD,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClD,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAAc,OAAkC;IAC3F,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAiB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACtE,KAAK,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACnE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,mCAAmC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iCAAiC,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,uCAAuC,CAAC,CAAC;IACpH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,0BAA0B,CAAC,CAAC;IAC/F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAEpC,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,OAAU,EAAE,GAAmB;YACxC,IAAI,IAAI,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,SAAS,CAAC,6DAA6D,CAAC,CAAC;YACrG,MAAM,IAAI,GAAsC,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC;YAC3G,IAAI,IAAI,IAAI,GAAG;gBAAE,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7C,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,GAAG,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YACjH,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjF,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,GAAkB;YAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO;gBAAE,MAAM,IAAI,iBAAiB,CAAC,WAAW,CAAC,CAAC;YACzF,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,KAAyC,CAAC;YACrF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAC;YACrD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACpD,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS;gBAAE,MAAM,IAAI,iBAAiB,CAAC,WAAW,CAAC,CAAC;YACnG,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC1D,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC1D,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;gBAChE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;oBACpB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;oBAC9D,QAAQ,CAAC,KAAK,EAAE;iBACjB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,IAA2C,CAAC;YAChD,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAgB,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,IAAI,GAAG,EAAE;gBAAE,MAAM,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;YACrG,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC9G,CAAC;YACD,OAAO,IAAI,CAAC,CAAM,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAkC;IACrD,OAAO,OAAQ,GAAiB,CAAC,GAAG,KAAK,UAAU,IAAI,OAAQ,GAAiB,CAAC,MAAM,KAAK,UAAU,CAAC;AACzG,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAsB;IACpD,MAAM,IAAI,GAAG,gCAAgC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;SACrD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpG,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAqC,OAAO,CAAC,GAAG,EAChD,UAAkF,EAAE;IAEpF,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,IAAI,SAAS,CAAC;IAC/F,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,oBAAoB,CAC5B,sHAAsH,CACvH,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACrG,oBAAoB,CAAC,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACrG,MAAM,GAAG,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/E,OAAO,6BAA6B,CAAI;QACtC,GAAG,OAAO;QACV,GAAG;QACH,YAAY,EAAE,QAAQ;QACtB,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC,CAAC;AACL,CAAC"}