@novorb/mcp-core 2.1.2 → 3.0.0

package/dist/http-client.d.ts

@@ -1,69 +1,304 @@
 /**
- * @novorb/mcp-core — HTTP Client Factory
+ * @novorb/mcp-core - HTTP client
  *
- * Creates pre-configured axios instances with retry logic and logging.
+ * One hardened HTTP client for every MCP server, built on axios with one in-house retry loop:
+ * - per-request options: headers, query, timeout, signal, responseType (json/text/arraybuffer/stream),
+ *   response size cap, validateStatus, retry overrides, idempotency key
+ * - auth configured once: bearer, basic, custom header, query-param key, async token provider (a 401
+ *   triggers one forced refresh and one replay)
+ * - base URL joining that never doubles a segment; absolute URLs (next-links) are used as-is but only
+ *   toward the base URL's origin or an explicitly allowed one, so credentials never leave
+ * - TLS options through an ESM `node:https` Agent (custom CA, or rejectUnauthorized=false for a
+ *   self-signed test instance)
+ * - `mapError` hook so each service keeps its own error wording; a client-side token bucket
+ * - security: maxRedirects 0, request/response size caps (streams included), errors carry only
+ *   status/statusText/code/method/path (never the raw response, config or headers), secrets masked
+ * - logging through the mcp-core logger only: method, host, path template, status, duration, attempt;
+ *   never query values, headers, bodies or response content
  */
 import { type AxiosInstance } from 'axios';
-import { type Logger } from './logger.js';
+import { type AuthChallenge, type CredentialRecorder } from './credentials.js';
+import { type PageIterator, type PaginateOptions, type PaginationStrategy } from './pagination.js';
+import { TokenBucket, type TokenBucketOptions } from './rate-limiter.js';
+import { type Logger } from './utils/logger.js';
+export type HttpMethod = 'GET' | 'HEAD' | 'OPTIONS' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+export type HttpResponseType = 'json' | 'text' | 'arraybuffer' | 'stream';
+export type QueryScalar = string | number | boolean;
+export type QueryValue = QueryScalar | null | undefined | ReadonlyArray<QueryScalar>;
+export type QueryParams = Record<string, QueryValue>;
+/** How array query values are written: `a=1&a=2` (repeat), `a[]=1&a[]=2` (brackets), `a=1,2` (comma). */
+export type ArrayFormat = 'repeat' | 'brackets' | 'comma';
+export interface TokenProviderContext {
+    /** True after a 401: the provider must bypass its cache and fetch a fresh token. */
+    forceRefresh: boolean;
+    signal?: AbortSignal;
+}
+export type HttpAuth = {
+    type: 'bearer';
+    token: string;
+} | {
+    type: 'basic';
+    username: string;
+    password: string;
+}
+/** A custom header, e.g. `PRIVATE-TOKEN` (GitLab), `X-Api-Key` (Dependency-Track), `sso-key`. */
+ | {
+    type: 'header';
+    name: string;
+    value: string;
+}
+/** Query-parameter credentials, e.g. Trello `key` + `token`; masked in every log line and error. */
+ | {
+    type: 'query';
+    params: Record<string, string>;
+}
+/** An async provider (refreshing OAuth tokens, e.g. Microsoft Graph). */
+ | {
+    type: 'tokenProvider';
+    getToken: (context: TokenProviderContext) => Promise<string>;
+    /** Header name (default `Authorization`). */
+    headerName?: string;
+    /** Scheme prefix (default `Bearer`; empty string sends the raw token). */
+    scheme?: string;
+};
+export interface HttpRetryInfo {
+    attempt: number;
+    delayMs: number;
+    fromRetryAfter: boolean;
+    status?: number;
+    code?: string;
+    method: HttpMethod;
+    path: string;
+}
+export interface HttpRetryPolicy {
+    /** Retries after the first attempt (default 3; 0 disables). */
+    retries?: number;
+    initialDelayMs?: number;
+    maxDelayMs?: number;
+    backoffMultiplier?: number;
+    /** Cap on a server-sent Retry-After (default 30000 ms). */
+    maxRetryAfterMs?: number;
+    /** Also replay non-idempotent methods (POST/PATCH). Off by default. */
+    unsafe?: boolean;
+    /** Called before each retry wait. */
+    onRetry?: (info: HttpRetryInfo) => void;
+    /** Random source for the jitter (tests). */
+    random?: () => number;
+}
+export interface TlsOptions {
+    /** Extra trusted CA certificate(s), PEM. */
+    ca?: string | Buffer | Array<string | Buffer>;
+    /** false accepts self-signed / invalid certificates (test instances only). Default true. */
+    rejectUnauthorized?: boolean;
+}
+/** What `mapError` receives: safe facts only, never headers, config or the raw body. */
+export interface HttpErrorInfo {
+    method: HttpMethod;
+    host: string;
+    /** Route template (`templatePath`: dynamic segments are `:id`), or the request's `logPath`. */
+    path: string;
+    status?: number;
+    statusText?: string;
+    /** Network code (`ECONNRESET`, `ETIMEDOUT`, ...), or the upstream error code, or `HTTP_<status>`. */
+    code?: string;
+    /** The upstream error message (masked, max 300 chars) when the body carried one. */
+    upstreamMessage?: string;
+    /** The upstream error code (e.g. Graph `InvalidAuthenticationToken`). */
+    upstreamCode?: string;
+    /** The upstream OAuth-style `error_description` (masked, max 300 chars) when it differs from the message. */
+    upstreamDescription?: string;
+    /** The `WWW-Authenticate` `error` / `error_description` parameters (masked), when present. */
+    challenge?: AuthChallenge;
+    retryAfterMs?: number;
+}
+export interface MappedHttpError {
+    message: string;
+    code?: string;
+}
 export interface HttpClientConfig {
-    /** Base URL for all requests */
+    /** Base URL for relative paths (e.g. `https://gitlab.com/api/v4`). */
     baseURL: string;
-    /** Request timeout in milliseconds (default: 30000) */
+    /** Default request timeout in milliseconds (default 30000). */
     timeout?: number;
-    /** Default headers to include on every request */
+    /** Default headers for every request. */
     headers?: Record<string, string>;
-    /** Number of retries on retryable failures (default: 3) */
-    retries?: number;
-    /** Logger instance (default: singleton from getLogger) */
+    /** Credentials, applied to every request. */
+    auth?: HttpAuth;
+    /** Default retry policy. */
+    retry?: HttpRetryPolicy;
+    /** TLS options (an https Agent is created only when set). */
+    tls?: TlsOptions;
+    /** Token bucket shared by every request of this client. */
+    rateLimit?: TokenBucketOptions | TokenBucket;
+    /** Response size cap in bytes (default 25 MiB), streams included. */
+    maxResponseBytes?: number;
+    /** Request body size cap in bytes (default 25 MiB). */
+    maxRequestBytes?: number;
+    /** Extra origins absolute URLs may target (credentials are sent there). The base origin is implied. */
+    allowedOrigins?: string[];
+    /** Header carrying a request's idempotency key (default `Idempotency-Key`). */
+    idempotencyKeyHeader?: string;
+    /** Array query format (default `repeat`). */
+    arrayFormat?: ArrayFormat;
+    /** Maps a failure to the service's own wording and code. */
+    mapError?: (info: HttpErrorInfo) => MappedHttpError;
+    /** Logger instance (default: the mcp-core singleton). */
     logger?: Logger;
-    /** Component name for log messages (default: 'HttpClient') */
+    /** Log context (default `HttpClient`). */
     logContext?: string;
-}
-export interface PaginatedResponse<T> {
-    data: T[];
-    totalCount: number;
-}
-/**
- * MCP HTTP client wrapping axios with retry, logging, and pagination support.
- */
-export declare class McpHttpClient {
-    private client;
-    private logger;
-    private logContext;
-    constructor(config: HttpClientConfig);
-    /**
-     * Perform a GET request.
-     */
-    get<T>(path: string, params?: Record<string, unknown>): Promise<T>;
     /**
-     * Perform a GET request with pagination.
-     * Reads total count from the X-Total-Count response header.
+     * Where a request's `credential` outcome is recorded when no tool call is in progress (default the
+     * process credential registry). Inside a `registerTools` call it always goes to that call's scope.
      */
-    getPaginated<T>(path: string, params?: Record<string, unknown>): Promise<PaginatedResponse<T>>;
+    credentials?: CredentialRecorder;
     /**
-     * Perform a POST request.
+     * Route templates relative to the base URL (`/projects/:id/repository/tags/:tag`) logged with their
+     * literal words when a request path matches one; any other path logs `:id` for every segment but a
+     * leading API prefix (see `templatePath`).
      */
-    post<T>(path: string, data?: unknown, params?: Record<string, unknown>): Promise<T>;
-    /**
-     * Perform a PUT request.
-     */
-    put<T>(path: string, data?: unknown, params?: Record<string, unknown>): Promise<T>;
+    routes?: readonly string[];
+}
+export interface RequestOptions {
+    method?: HttpMethod;
+    /** Path joined once onto the base URL, or an absolute URL (next-link) used as-is. */
+    path: string;
+    query?: QueryParams;
+    body?: unknown;
+    headers?: Record<string, string>;
+    timeout?: number;
+    /** Cancellation (e.g. the MCP handler's `ctx.signal`); also stops retries. */
+    signal?: AbortSignal;
+    responseType?: HttpResponseType;
+    /** Response size cap override in bytes. */
+    maxResponseBytes?: number;
+    /** Status acceptance override (default 2xx). `() => true` returns every response. */
+    validateStatus?: (status: number) => boolean;
+    /** Retry overrides, or false to disable retries for this request. */
+    retry?: HttpRetryPolicy | false;
+    /** Sent in the idempotency header; makes a POST/PATCH replayable. */
+    idempotencyKey?: string;
+    /** Path to log instead of the derived template (e.g. `/projects/:id/branches`). */
+    logPath?: string;
     /**
-     * Perform a PATCH request.
+     * The key NAME of the credential this request authenticates with (for example a pool member picked
+     * with `ctx.credentials.pick(...)`). Its outcome is recorded automatically: 2xx ok, 401/403 invalid,
+     * an expiry signal expired, 402/429/quota degraded; anything else leaves the status alone.
      */
-    patch<T>(path: string, data?: unknown, params?: Record<string, unknown>): Promise<T>;
+    credential?: string;
+}
+/** Per-request options of the verb helpers. */
+export type RequestConfig = Omit<RequestOptions, 'method' | 'path' | 'body'>;
+export interface HttpResponse<T> {
+    status: number;
+    statusText: string;
+    /** Lower-cased header names; multi-value headers joined with `, `. */
+    headers: Record<string, string>;
+    data: T;
+}
+/** The normalized error every failure becomes. Carries no response, config or headers. */
+export declare class HttpError extends Error {
+    readonly status?: number;
+    readonly statusText?: string;
+    readonly code?: string;
+    readonly method: HttpMethod;
+    readonly path: string;
+    readonly retryAfterMs?: number;
+    /** The upstream OAuth `error_description` (masked), for the credential mapping. */
+    readonly description?: string;
+    /** The parsed `WWW-Authenticate` `error` / `error_description` (masked); never the raw header. */
+    readonly challenge?: AuthChallenge;
+    constructor(fields: {
+        message: string;
+        method: HttpMethod;
+        path: string;
+        status?: number;
+        statusText?: string;
+        code?: string;
+        retryAfterMs?: number;
+        description?: string;
+        challenge?: AuthChallenge;
+    });
+}
+/**
+ * Joins a path onto a base URL exactly once: one slash between them, nothing else touched. An absolute
+ * URL is returned unchanged (an OData next-link already holds its `/v1.0` segment).
+ */
+export declare function joinUrl(baseURL: string, path: string): string;
+/** Serialises query params (null/undefined skipped) without touching an existing query string. */
+export declare function buildQueryString(query: QueryParams | undefined, arrayFormat?: ArrayFormat): string;
+export interface TemplatePathOptions {
+    /** The client's base URL path (`/api/v4`): its API words and versions are kept, anything else masked. */
+    basePath?: string;
+    /** Route templates relative to the base path (`/projects/:id/repository/tags/:tag`); a match is logged as-is. */
+    routes?: readonly string[];
+}
+/**
+ * The route shape of a path for logs and errors, never a dynamic value. Fail closed: without a matching
+ * route template every request-path segment becomes `:id` except a leading API prefix or version
+ * (`api`, `rest`, `v4`). The configured base path keeps its API words and versions (`/api/v4`); any
+ * other base segment (a token in the base URL) is masked too. A `routes` template that matches the
+ * path segment for segment (`:name` matches any one segment) is logged instead, with its literal words;
+ * a request's own `logPath` overrides everything.
+ *
+ *   templatePath('/api/v4/projects/7/repository/tags/stable', { basePath: '/api/v4' })
+ *     -> '/api/v4/:id/:id/:id/:id/:id'
+ *   templatePath('/api/v4/projects/7/repository/tags/stable', {
+ *     basePath: '/api/v4', routes: ['/projects/:id/repository/tags/:tag'] })
+ *     -> '/api/v4/projects/:id/repository/tags/:tag'
+ */
+export declare function templatePath(pathname: string, options?: TemplatePathOptions): string;
+/**
+ * MCP HTTP client. Build one per upstream per process (not per MCP request), so the rate limiter and
+ * the connection pool are shared.
+ */
+export declare class McpHttpClient {
+    private readonly client;
+    private readonly logger;
+    private readonly logContext;
+    private readonly config;
+    private readonly baseOrigin;
+    private readonly basePath;
+    private readonly allowedOrigins;
+    private readonly bucket?;
+    private readonly staticSecrets;
+    private readonly providerTokens;
+    constructor(config: HttpClientConfig);
+    private collectSecrets;
+    /** Replaces every configured credential value in `text` with `[REDACTED]`. */
+    maskSecrets(text: string): string;
+    private authHeaders;
+    private resolve;
+    private errorInfo;
+    private toHttpError;
     /**
-     * Perform a DELETE request.
+     * Where a request's `credential` outcome goes: the current tool call's scope, else the configured
+     * recorder, else the process registry. The name must be declared there (`UnknownCredentialError`
+     * otherwise, before anything is sent: a value passed by mistake is never published).
      */
-    delete<T>(path: string, params?: Record<string, unknown>): Promise<T>;
+    private credentialRecorder;
+    private recordCredential;
+    /** Performs a request and returns status, headers and data. */
+    requestRaw<T = unknown>(req: RequestOptions): Promise<HttpResponse<T>>;
+    /** Performs a request and returns the response data. */
+    request<T = unknown>(req: RequestOptions): Promise<T>;
+    get<T = unknown>(path: string, config?: RequestConfig): Promise<T>;
+    /** HEAD request; returns the response headers (lower-cased). */
+    head(path: string, config?: RequestConfig): Promise<Record<string, string>>;
+    post<T = unknown>(path: string, body?: unknown, config?: RequestConfig): Promise<T>;
+    put<T = unknown>(path: string, body?: unknown, config?: RequestConfig): Promise<T>;
+    patch<T = unknown>(path: string, body?: unknown, config?: RequestConfig): Promise<T>;
+    delete<T = unknown>(path: string, config?: RequestConfig): Promise<T>;
     /**
-     * Get the underlying axios instance for advanced use cases.
+     * Walks an upstream API's pages with a strategy (see `pagination`). Returns an async iterator of
+     * pages plus `items()` and `collect()`; capped by `maxPages` (default 100) and `maxItems`.
      */
+    paginate<T>(request: RequestOptions, strategy: PaginationStrategy<T>, options?: PaginateOptions): PageIterator<T>;
+    /** The underlying axios instance for advanced use cases (bypasses retry, auth and logging). */
     getAxiosInstance(): AxiosInstance;
-    private normalizeError;
 }
 /**
  * Create a configured HTTP client.
  */
 export declare function createHttpClient(config: HttpClientConfig): McpHttpClient;
+export { createTokenBucket, TokenBucket, type TokenBucketOptions } from './rate-limiter.js';
 //# sourceMappingURL=http-client.d.ts.map

package/dist/http-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-client.d.ts","sourceRoot":"","sources":["../src/http-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAc,EAAmB,KAAK,aAAa,EAAE,MAAM,OAAO,CAAC;AAEnE,OAAO,EAAa,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAErD,MAAM,WAAW,gBAAgB;IAC/B,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,UAAU,CAAS;gBAEf,MAAM,EAAE,gBAAgB;IAmCpC;;OAEG;IACG,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAsBxE;;;OAGG;IACG,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAyBpG;;OAEG;IACG,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAsBzF;;OAEG;IACG,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAsBxF;;OAEG;IACG,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAsB1F;;OAEG;IACG,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAsB3E;;OAEG;IACH,gBAAgB,IAAI,aAAa;IAIjC,OAAO,CAAC,cAAc;CAgBvB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,aAAa,CAExE"}
+{"version":3,"file":"http-client.d.ts","sourceRoot":"","sources":["../src/http-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAc,EAAE,KAAK,aAAa,EAAyC,MAAM,OAAO,CAAC;AACzF,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,kBAAkB,EAMxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,eAAe,EAAE,KAAK,kBAAkB,EAAoB,MAAM,iBAAiB,CAAC;AACrH,OAAO,EAAqB,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAS5F,OAAO,EAAa,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAC1F,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,QAAQ,CAAC;AAC1E,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AACpD,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;AACrF,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACrD,yGAAyG;AACzG,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;AAE1D,MAAM,WAAW,oBAAoB;IACnC,oFAAoF;IACpF,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AACvD,iGAAiG;GAC/F;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AACjD,oGAAoG;GAClG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE;AACnD,yEAAyE;GACvE;IACE,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2DAA2D;IAC3D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qCAAqC;IACrC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,IAAI,CAAC;IACxC,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,4CAA4C;IAC5C,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;IAC9C,4FAA4F;IAC5F,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,wFAAwF;AACxF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,+FAA+F;IAC/F,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qGAAqG;IACrG,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6GAA6G;IAC7G,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,8FAA8F;IAC9F,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,6CAA6C;IAC7C,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,4BAA4B;IAC5B,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,6DAA6D;IAC7D,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,kBAAkB,GAAG,WAAW,CAAC;IAC7C,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uDAAuD;IACvD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uGAAuG;IACvG,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,6CAA6C;IAC7C,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,eAAe,CAAC;IACpD,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC;;;;OAIG;IACH,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,2CAA2C;IAC3C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qFAAqF;IACrF,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,qEAAqE;IACrE,KAAK,CAAC,EAAE,eAAe,GAAG,KAAK,CAAC;IAChC,qEAAqE;IACrE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,+CAA+C;AAC/C,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC;AAE7E,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC;CACT;AAED,0FAA0F;AAC1F,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,mFAAmF;IACnF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,kGAAkG;IAClG,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC;gBAEvB,MAAM,EAAE;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,UAAU,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,aAAa,CAAC;KAC3B;CAYF;AAgBD;;;GAGG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAK7D;AAED,kGAAkG;AAClG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,EAAE,WAAW,GAAE,WAAsB,GAAG,MAAM,CAmB5G;AAcD,MAAM,WAAW,mBAAmB;IAClC,yGAAyG;IACzG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iHAAiH;IACjH,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B;AAeD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,MAAM,CAYxF;AA6FD;;;GAGG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAc;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;gBAExC,MAAM,EAAE,gBAAgB;IA4BpC,OAAO,CAAC,cAAc;IA2BtB,8EAA8E;IAC9E,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;YAQnB,WAAW;IAgCzB,OAAO,CAAC,OAAO;IAuBf,OAAO,CAAC,SAAS;IAuCjB,OAAO,CAAC,WAAW;IAoBnB;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAM1B,OAAO,CAAC,gBAAgB;IAUxB,+DAA+D;IACzD,UAAU,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAwJ5E,wDAAwD;IAClD,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC;IAIrD,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,aAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAI5E,gEAAgE;IAC1D,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAI/E,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,GAAE,aAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAIvF,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,GAAE,aAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAItF,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,GAAE,aAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAIxF,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,aAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAI/E;;;OAGG;IACH,QAAQ,CAAC,CAAC,EACR,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAC/B,OAAO,GAAE,eAAoB,GAC5B,YAAY,CAAC,CAAC,CAAC;IAIlB,+FAA+F;IAC/F,gBAAgB,IAAI,aAAa;CAGlC;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,aAAa,CAExE;AAED,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC"}