@opendatalabs/personal-server-ts-server 0.2.0-canary.6e65a3c → 1.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/api-auth.d.ts +16 -0
- package/dist/api-auth.d.ts.map +1 -0
- package/dist/api-auth.js +97 -0
- package/dist/api-auth.js.map +1 -0
- package/dist/api.d.ts +4 -0
- package/dist/api.d.ts.map +1 -1
- package/dist/api.js +3 -0
- package/dist/api.js.map +1 -1
- package/dist/app.d.ts +46 -1
- package/dist/app.d.ts.map +1 -1
- package/dist/app.js +102 -30
- package/dist/app.js.map +1 -1
- package/dist/bootstrap.d.ts +11 -3
- package/dist/bootstrap.d.ts.map +1 -1
- package/dist/bootstrap.js +266 -33
- package/dist/bootstrap.js.map +1 -1
- package/dist/client.d.ts +17 -0
- package/dist/client.d.ts.map +1 -0
- package/dist/client.js +368 -0
- package/dist/client.js.map +1 -0
- package/dist/config/defaults.d.ts +12 -0
- package/dist/config/defaults.d.ts.map +1 -0
- package/dist/config/defaults.js +14 -0
- package/dist/config/defaults.js.map +1 -0
- package/dist/config/index.d.ts +4 -0
- package/dist/config/index.d.ts.map +1 -0
- package/dist/config/index.js +4 -0
- package/dist/config/index.js.map +1 -0
- package/dist/config/loader.d.ts +8 -0
- package/dist/config/loader.d.ts.map +1 -0
- package/dist/config/loader.js +74 -0
- package/dist/config/loader.js.map +1 -0
- package/dist/config/paths.d.ts +9 -0
- package/dist/config/paths.d.ts.map +1 -0
- package/dist/config/paths.js +22 -0
- package/dist/config/paths.js.map +1 -0
- package/dist/hono-context.d.ts +14 -0
- package/dist/hono-context.d.ts.map +1 -0
- package/dist/hono-context.js +2 -0
- package/dist/hono-context.js.map +1 -0
- package/dist/index.js +64 -12
- package/dist/index.js.map +1 -1
- package/dist/keys/server-account.d.ts +28 -0
- package/dist/keys/server-account.d.ts.map +1 -0
- package/dist/keys/server-account.js +48 -0
- package/dist/keys/server-account.js.map +1 -0
- package/dist/logger/index.d.ts +5 -0
- package/dist/logger/index.d.ts.map +1 -0
- package/dist/logger/index.js +9 -0
- package/dist/logger/index.js.map +1 -0
- package/dist/logging/access-log.d.ts +15 -0
- package/dist/logging/access-log.d.ts.map +1 -0
- package/dist/logging/access-log.js +25 -0
- package/dist/logging/access-log.js.map +1 -0
- package/dist/logging/access-reader.d.ts +19 -0
- package/dist/logging/access-reader.d.ts.map +1 -0
- package/dist/logging/access-reader.js +50 -0
- package/dist/logging/access-reader.js.map +1 -0
- package/dist/middleware/access-log.d.ts.map +1 -1
- package/dist/middleware/access-log.js +8 -2
- package/dist/middleware/access-log.js.map +1 -1
- package/dist/middleware/builder-check.d.ts +2 -2
- package/dist/middleware/builder-check.d.ts.map +1 -1
- package/dist/middleware/builder-check.js +7 -2
- package/dist/middleware/builder-check.js.map +1 -1
- package/dist/middleware/owner-check.js +1 -1
- package/dist/middleware/owner-check.js.map +1 -1
- package/dist/middleware/web3-auth.d.ts +12 -0
- package/dist/middleware/web3-auth.d.ts.map +1 -1
- package/dist/middleware/web3-auth.js +27 -31
- package/dist/middleware/web3-auth.js.map +1 -1
- package/dist/migrations/local-state.d.ts +21 -0
- package/dist/migrations/local-state.d.ts.map +1 -0
- package/dist/migrations/local-state.js +106 -0
- package/dist/migrations/local-state.js.map +1 -0
- package/dist/routes/access-logs.d.ts +7 -0
- package/dist/routes/access-logs.d.ts.map +1 -1
- package/dist/routes/access-logs.js +11 -17
- package/dist/routes/access-logs.js.map +1 -1
- package/dist/routes/auth-device.d.ts +49 -0
- package/dist/routes/auth-device.d.ts.map +1 -0
- package/dist/routes/auth-device.js +581 -0
- package/dist/routes/auth-device.js.map +1 -0
- package/dist/routes/data.d.ts +42 -1
- package/dist/routes/data.d.ts.map +1 -1
- package/dist/routes/data.js +36 -201
- package/dist/routes/data.js.map +1 -1
- package/dist/routes/grants.d.ts +9 -2
- package/dist/routes/grants.d.ts.map +1 -1
- package/dist/routes/grants.js +18 -196
- package/dist/routes/grants.js.map +1 -1
- package/dist/routes/health.d.ts +7 -1
- package/dist/routes/health.d.ts.map +1 -1
- package/dist/routes/health.js +39 -2
- package/dist/routes/health.js.map +1 -1
- package/dist/routes/mcp.d.ts +93 -6
- package/dist/routes/mcp.d.ts.map +1 -1
- package/dist/routes/mcp.js +526 -53
- package/dist/routes/mcp.js.map +1 -1
- package/dist/routes/oauth-token.d.ts +56 -0
- package/dist/routes/oauth-token.d.ts.map +1 -0
- package/dist/routes/oauth-token.js +49 -0
- package/dist/routes/oauth-token.js.map +1 -0
- package/dist/routes/sync.d.ts +7 -0
- package/dist/routes/sync.d.ts.map +1 -1
- package/dist/routes/sync.js +12 -39
- package/dist/routes/sync.js.map +1 -1
- package/dist/routes/ui-config.d.ts.map +1 -1
- package/dist/routes/ui-config.js +17 -82
- package/dist/routes/ui-config.js.map +1 -1
- package/dist/routes/ui-registration.d.ts +9 -0
- package/dist/routes/ui-registration.d.ts.map +1 -0
- package/dist/routes/ui-registration.js +217 -0
- package/dist/routes/ui-registration.js.map +1 -0
- package/dist/routes/ui.d.ts +1 -0
- package/dist/routes/ui.d.ts.map +1 -1
- package/dist/routes/ui.js +46 -4
- package/dist/routes/ui.js.map +1 -1
- package/dist/storage/hierarchy.d.ts +29 -0
- package/dist/storage/hierarchy.d.ts.map +1 -0
- package/dist/storage/hierarchy.js +241 -0
- package/dist/storage/hierarchy.js.map +1 -0
- package/dist/storage/index-manager.d.ts +53 -0
- package/dist/storage/index-manager.d.ts.map +1 -0
- package/dist/storage/index-manager.js +167 -0
- package/dist/storage/index-manager.js.map +1 -0
- package/dist/storage/index-schema.d.ts +5 -0
- package/dist/storage/index-schema.d.ts.map +1 -0
- package/dist/storage/index-schema.js +62 -0
- package/dist/storage/index-schema.js.map +1 -0
- package/dist/storage/node-data-storage.d.ts +9 -0
- package/dist/storage/node-data-storage.d.ts.map +1 -0
- package/dist/storage/node-data-storage.js +84 -0
- package/dist/storage/node-data-storage.js.map +1 -0
- package/dist/sync-cursor.d.ts +15 -0
- package/dist/sync-cursor.d.ts.map +1 -0
- package/dist/sync-cursor.js +110 -0
- package/dist/sync-cursor.js.map +1 -0
- package/dist/token-store.d.ts +22 -0
- package/dist/token-store.d.ts.map +1 -0
- package/dist/token-store.js +120 -0
- package/dist/token-store.js.map +1 -0
- package/dist/tunnel/auth.d.ts +4 -0
- package/dist/tunnel/auth.d.ts.map +1 -1
- package/dist/tunnel/auth.js +2 -1
- package/dist/tunnel/auth.js.map +1 -1
- package/dist/tunnel/config.d.ts +1 -0
- package/dist/tunnel/config.d.ts.map +1 -1
- package/dist/tunnel/config.js +1 -1
- package/dist/tunnel/config.js.map +1 -1
- package/dist/tunnel/manager.d.ts +21 -1
- package/dist/tunnel/manager.d.ts.map +1 -1
- package/dist/tunnel/manager.js +78 -23
- package/dist/tunnel/manager.js.map +1 -1
- package/dist/tunnel/verify.d.ts +1 -1
- package/dist/tunnel/verify.d.ts.map +1 -1
- package/dist/tunnel/verify.js +8 -2
- package/dist/tunnel/verify.js.map +1 -1
- package/dist/ui/browser_tls_rustls_bg.wasm +0 -0
- package/dist/ui/index.html +2192 -0
- package/dist/ui/ps-lite-debug.d.ts +93 -0
- package/dist/ui/ps-lite-debug.d.ts.map +1 -0
- package/dist/ui/ps-lite-debug.js +129415 -0
- package/dist/ui/ps-lite-debug.js.map +1 -0
- package/package.json +20 -8
- package/dist/middleware/grant-check.d.ts +0 -12
- package/dist/middleware/grant-check.d.ts.map +0 -1
- package/dist/middleware/grant-check.js +0 -90
- package/dist/middleware/grant-check.js.map +0 -1
- package/dist/oauth/provider.d.ts +0 -55
- package/dist/oauth/provider.d.ts.map +0 -1
- package/dist/oauth/provider.js +0 -160
- package/dist/oauth/provider.js.map +0 -1
- package/dist/oauth/routes.d.ts +0 -10
- package/dist/oauth/routes.d.ts.map +0 -1
- package/dist/oauth/routes.js +0 -206
- package/dist/oauth/routes.js.map +0 -1
package/dist/routes/mcp.js
CHANGED
|
@@ -1,64 +1,537 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* MCP routes — both the Claude-facing `/mcp/:token` Streamable HTTP endpoint
|
|
3
|
+
* and the owner-only `/v1/mcp/connections` management surface.
|
|
4
|
+
*
|
|
5
|
+
* §1–§3 of `260604-PLAN-vana-mcp-personal-server.md`.
|
|
6
|
+
*
|
|
7
|
+
* Owner endpoints reuse `createServerApiAuth().authorizeOwner` so the same
|
|
8
|
+
* auth surface that gates `/v1/grants` gates connection management. The
|
|
9
|
+
* Claude-facing endpoint uses the connection token as a capability — there
|
|
10
|
+
* is no Web3Signed payload from Claude; the token resolves to a connection
|
|
11
|
+
* and we then sign reads ourselves with the per-connection grantee.
|
|
12
|
+
*
|
|
13
|
+
* NOTE on Phase-1 storage: this route accepts an `McpConnectionStore` from
|
|
14
|
+
* the caller. The in-memory implementation in `core/src/mcp/store.ts` is
|
|
15
|
+
* fine for tests and the first server-side smoke; for Web PS Lite an
|
|
16
|
+
* IndexedDB-backed adapter is the natural production path (Phase-2 §4
|
|
17
|
+
* "encrypt grantee private keys at rest" applies there).
|
|
18
|
+
*/
|
|
1
19
|
import { Hono } from "hono";
|
|
2
|
-
import {
|
|
3
|
-
import {
|
|
4
|
-
|
|
20
|
+
import { approveMcpOAuthAuthorization, approveMcpOAuthAuthorizationWithScopes, approveMcpConnection, buildMcpProtectedResourceMetadataUrl, buildMcpUrl, buildStableMcpUrl, createInMemoryMcpOAuthAuthorizationStore, createMcpConnection, createMcpOAuthAuthorization, createInMemoryMcpConnectionStore, createMcpDataReadClient, handleMcpStreamableHttpRequest, hashConnectionToken, listMcpConnectionViews, loadMcpGranteeAccount, McpConnectionNotFoundError, McpConnectionStateError, McpOAuthAuthorizationError, redeemMcpOAuthAuthorizationCode, toMcpOAuthAuthorizationView, revokeMcpConnection, toMcpConnectionView, } from "@opendatalabs/personal-server-ts-core/mcp";
|
|
21
|
+
import { ProtocolError } from "@opendatalabs/personal-server-ts-core/errors";
|
|
22
|
+
import { createServerApiAuth } from "../api-auth.js";
|
|
23
|
+
import { createNodeDataStorage } from "../storage/node-data-storage.js";
|
|
24
|
+
function resolveOrigin(origin) {
|
|
25
|
+
return typeof origin === "function" ? origin() : origin;
|
|
26
|
+
}
|
|
27
|
+
function jsonError(status, errorCode, message) {
|
|
28
|
+
return {
|
|
29
|
+
error: { code: status, errorCode, message },
|
|
30
|
+
};
|
|
31
|
+
}
|
|
32
|
+
function bearerToken(request) {
|
|
33
|
+
const authorization = request.headers.get("authorization");
|
|
34
|
+
if (!authorization?.startsWith("Bearer "))
|
|
35
|
+
return null;
|
|
36
|
+
const token = authorization.slice("Bearer ".length).trim();
|
|
37
|
+
return token.length > 0 ? token : null;
|
|
38
|
+
}
|
|
39
|
+
function mcpUnauthorized(origin, message = "MCP authorization required") {
|
|
40
|
+
return new Response(JSON.stringify(jsonError(401, "MCP_AUTH_REQUIRED", message)), {
|
|
41
|
+
status: 401,
|
|
42
|
+
headers: {
|
|
43
|
+
"content-type": "application/json",
|
|
44
|
+
"www-authenticate": `Bearer resource_metadata="${buildMcpProtectedResourceMetadataUrl(origin)}", scope="vana:read"`,
|
|
45
|
+
},
|
|
46
|
+
});
|
|
47
|
+
}
|
|
48
|
+
function authorizationServerMetadata(origin) {
|
|
49
|
+
return {
|
|
50
|
+
issuer: origin,
|
|
51
|
+
authorization_endpoint: `${origin}/mcp/oauth/authorize`,
|
|
52
|
+
token_endpoint: `${origin}/mcp/oauth/token`,
|
|
53
|
+
registration_endpoint: `${origin}/mcp/oauth/register`,
|
|
54
|
+
response_types_supported: ["code"],
|
|
55
|
+
grant_types_supported: ["authorization_code"],
|
|
56
|
+
token_endpoint_auth_methods_supported: ["none"],
|
|
57
|
+
code_challenge_methods_supported: ["S256"],
|
|
58
|
+
scopes_supported: ["vana:read"],
|
|
59
|
+
};
|
|
60
|
+
}
|
|
61
|
+
function protectedResourceMetadata(origin) {
|
|
62
|
+
return {
|
|
63
|
+
resource: buildStableMcpUrl(origin),
|
|
64
|
+
authorization_servers: [origin],
|
|
65
|
+
bearer_methods_supported: ["header"],
|
|
66
|
+
scopes_supported: ["vana:read"],
|
|
67
|
+
resource_name: "Vana Personal Server MCP",
|
|
68
|
+
};
|
|
69
|
+
}
|
|
70
|
+
function resolveApprovalUrl(deps) {
|
|
71
|
+
const value = deps.oauthApprovalUrl;
|
|
72
|
+
if (!value)
|
|
73
|
+
return null;
|
|
74
|
+
return typeof value === "function" ? value() : value;
|
|
75
|
+
}
|
|
76
|
+
function redirectWithOAuthError(redirectUri, error, description, state) {
|
|
77
|
+
try {
|
|
78
|
+
const url = new URL(redirectUri);
|
|
79
|
+
url.searchParams.set("error", error);
|
|
80
|
+
url.searchParams.set("error_description", description);
|
|
81
|
+
if (state)
|
|
82
|
+
url.searchParams.set("state", state);
|
|
83
|
+
return Response.redirect(url.toString(), 302);
|
|
84
|
+
}
|
|
85
|
+
catch {
|
|
86
|
+
return new Response(JSON.stringify({
|
|
87
|
+
error,
|
|
88
|
+
error_description: description,
|
|
89
|
+
...(state ? { state } : {}),
|
|
90
|
+
}), {
|
|
91
|
+
status: 400,
|
|
92
|
+
headers: { "content-type": "application/json" },
|
|
93
|
+
});
|
|
94
|
+
}
|
|
95
|
+
}
|
|
96
|
+
async function parseFormBody(request) {
|
|
97
|
+
const text = await request.text();
|
|
98
|
+
return new URLSearchParams(text);
|
|
99
|
+
}
|
|
100
|
+
function buildDataApiDeps(deps) {
|
|
101
|
+
const dataStorage = deps.dataStorage ??
|
|
102
|
+
(deps.indexManager && deps.hierarchyOptions
|
|
103
|
+
? createNodeDataStorage({
|
|
104
|
+
indexManager: deps.indexManager,
|
|
105
|
+
hierarchyOptions: deps.hierarchyOptions,
|
|
106
|
+
})
|
|
107
|
+
: undefined);
|
|
108
|
+
if (!dataStorage) {
|
|
109
|
+
throw new Error("mcpRoutes requires either `dataStorage` or `{ indexManager, hierarchyOptions }` to build the read path");
|
|
110
|
+
}
|
|
111
|
+
const auth = createServerApiAuth({
|
|
112
|
+
serverOrigin: deps.serverOrigin,
|
|
113
|
+
serverOwner: deps.serverOwner,
|
|
114
|
+
gateway: deps.gateway,
|
|
115
|
+
devToken: deps.devToken,
|
|
116
|
+
accessToken: deps.accessToken,
|
|
117
|
+
tokenStore: deps.tokenStore,
|
|
118
|
+
dataStorage,
|
|
119
|
+
runtimeAvailability: deps.runtimeAvailability,
|
|
120
|
+
});
|
|
121
|
+
return {
|
|
122
|
+
storage: dataStorage,
|
|
123
|
+
auth,
|
|
124
|
+
accessLogWriter: deps.accessLogWriter,
|
|
125
|
+
readFulfillmentReporter: deps.readFulfillmentReporter,
|
|
126
|
+
runtimeAvailability: deps.runtimeAvailability,
|
|
127
|
+
logger: deps.logger,
|
|
128
|
+
};
|
|
129
|
+
}
|
|
130
|
+
/**
|
|
131
|
+
* Hono sub-app for the owner-only `/v1/mcp/connections` endpoints.
|
|
132
|
+
* Mount under `/v1/mcp/connections` in `app.ts`.
|
|
133
|
+
*/
|
|
134
|
+
export function mcpConnectionsRoutes(deps) {
|
|
5
135
|
const app = new Hono();
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
error_description: "Bearer token required",
|
|
24
|
-
}), {
|
|
25
|
-
status: 401,
|
|
26
|
-
headers: {
|
|
27
|
-
"WWW-Authenticate": `Bearer resource_metadata="${origin}/.well-known/oauth-protected-resource"`,
|
|
28
|
-
"Content-Type": "application/json",
|
|
29
|
-
},
|
|
30
|
-
});
|
|
136
|
+
const store = deps.connectionStore ?? createInMemoryMcpConnectionStore();
|
|
137
|
+
const ownerAuth = createServerApiAuth({
|
|
138
|
+
serverOrigin: deps.serverOrigin,
|
|
139
|
+
serverOwner: deps.serverOwner,
|
|
140
|
+
gateway: deps.gateway,
|
|
141
|
+
devToken: deps.devToken,
|
|
142
|
+
accessToken: deps.accessToken,
|
|
143
|
+
tokenStore: deps.tokenStore,
|
|
144
|
+
});
|
|
145
|
+
async function requireOwner(c) {
|
|
146
|
+
try {
|
|
147
|
+
await ownerAuth.authorizeOwner(c.req.raw);
|
|
148
|
+
return null;
|
|
149
|
+
}
|
|
150
|
+
catch (err) {
|
|
151
|
+
if (err instanceof ProtocolError) {
|
|
152
|
+
return c.json(err.toJSON(), err.code);
|
|
31
153
|
}
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
154
|
+
throw err;
|
|
155
|
+
}
|
|
156
|
+
}
|
|
157
|
+
app.post("/", async (c) => {
|
|
158
|
+
const err = await requireOwner(c);
|
|
159
|
+
if (err)
|
|
160
|
+
return err;
|
|
161
|
+
let body = {};
|
|
162
|
+
try {
|
|
163
|
+
body = (await c.req.json());
|
|
164
|
+
}
|
|
165
|
+
catch {
|
|
166
|
+
body = {};
|
|
167
|
+
}
|
|
168
|
+
const created = await createMcpConnection({ displayName: body.displayName }, { store, publicOrigin: resolveOrigin(deps.serverOrigin) });
|
|
169
|
+
return c.json(created, 201);
|
|
170
|
+
});
|
|
171
|
+
app.get("/", async (c) => {
|
|
172
|
+
const err = await requireOwner(c);
|
|
173
|
+
if (err)
|
|
174
|
+
return err;
|
|
175
|
+
const records = await listMcpConnectionViews(store);
|
|
176
|
+
return c.json({ connections: records });
|
|
177
|
+
});
|
|
178
|
+
app.post("/:id/approve", async (c) => {
|
|
179
|
+
const err = await requireOwner(c);
|
|
180
|
+
if (err)
|
|
181
|
+
return err;
|
|
182
|
+
const id = c.req.param("id");
|
|
183
|
+
let body = {};
|
|
184
|
+
try {
|
|
185
|
+
body = (await c.req.json());
|
|
186
|
+
}
|
|
187
|
+
catch {
|
|
188
|
+
return c.json(jsonError(400, "INVALID_BODY", "Body must be JSON"), 400);
|
|
189
|
+
}
|
|
190
|
+
if (!Array.isArray(body.grants) || body.grants.length === 0) {
|
|
191
|
+
return c.json(jsonError(400, "GRANTS_REQUIRED", "Approve requires at least one grant — mint grants in the consent flow first"), 400);
|
|
192
|
+
}
|
|
193
|
+
try {
|
|
194
|
+
const updated = await approveMcpConnection({ connectionId: id, grants: body.grants }, { store });
|
|
195
|
+
return c.json(toMcpConnectionView(updated));
|
|
196
|
+
}
|
|
197
|
+
catch (caught) {
|
|
198
|
+
if (caught instanceof McpConnectionNotFoundError) {
|
|
199
|
+
return c.json(jsonError(404, "NOT_FOUND", caught.message), 404);
|
|
200
|
+
}
|
|
201
|
+
if (caught instanceof McpConnectionStateError) {
|
|
202
|
+
return c.json(jsonError(409, "INVALID_STATE", caught.message), 409);
|
|
203
|
+
}
|
|
204
|
+
throw caught;
|
|
205
|
+
}
|
|
206
|
+
});
|
|
207
|
+
app.delete("/:id", async (c) => {
|
|
208
|
+
const err = await requireOwner(c);
|
|
209
|
+
if (err)
|
|
210
|
+
return err;
|
|
211
|
+
const id = c.req.param("id");
|
|
212
|
+
try {
|
|
213
|
+
const updated = await revokeMcpConnection(id, { store });
|
|
214
|
+
return c.json(toMcpConnectionView(updated));
|
|
215
|
+
}
|
|
216
|
+
catch (caught) {
|
|
217
|
+
if (caught instanceof McpConnectionNotFoundError) {
|
|
218
|
+
return c.json(jsonError(404, "NOT_FOUND", caught.message), 404);
|
|
219
|
+
}
|
|
220
|
+
throw caught;
|
|
221
|
+
}
|
|
222
|
+
});
|
|
223
|
+
return app;
|
|
224
|
+
}
|
|
225
|
+
/**
|
|
226
|
+
* Top-level MCP OAuth/discovery routes.
|
|
227
|
+
*
|
|
228
|
+
* Mount at `/` so the well-known documents are served from the PS origin and
|
|
229
|
+
* Claude can discover auth for the stable `/mcp` resource.
|
|
230
|
+
*/
|
|
231
|
+
export function mcpOAuthRoutes(deps) {
|
|
232
|
+
const app = new Hono();
|
|
233
|
+
const connectionStore = deps.connectionStore ?? createInMemoryMcpConnectionStore();
|
|
234
|
+
const authorizationStore = deps.oauthAuthorizationStore ?? createInMemoryMcpOAuthAuthorizationStore();
|
|
235
|
+
const ownerAuth = createServerApiAuth({
|
|
236
|
+
serverOrigin: deps.serverOrigin,
|
|
237
|
+
serverOwner: deps.serverOwner,
|
|
238
|
+
gateway: deps.gateway,
|
|
239
|
+
devToken: deps.devToken,
|
|
240
|
+
accessToken: deps.accessToken,
|
|
241
|
+
tokenStore: deps.tokenStore,
|
|
242
|
+
});
|
|
243
|
+
async function requireOwner(c) {
|
|
244
|
+
try {
|
|
245
|
+
await ownerAuth.authorizeOwner(c.req.raw);
|
|
246
|
+
return null;
|
|
247
|
+
}
|
|
248
|
+
catch (err) {
|
|
249
|
+
if (err instanceof ProtocolError) {
|
|
250
|
+
return c.json(err.toJSON(), err.code);
|
|
251
|
+
}
|
|
252
|
+
throw err;
|
|
253
|
+
}
|
|
254
|
+
}
|
|
255
|
+
app.get("/.well-known/oauth-protected-resource/mcp", (c) => resolveApprovalUrl(deps)
|
|
256
|
+
? c.json(protectedResourceMetadata(resolveOrigin(deps.serverOrigin)))
|
|
257
|
+
: c.json(jsonError(404, "MCP_OAUTH_NOT_CONFIGURED", "MCP OAuth is not configured"), 404));
|
|
258
|
+
app.get("/.well-known/oauth-authorization-server", (c) => resolveApprovalUrl(deps)
|
|
259
|
+
? c.json(authorizationServerMetadata(resolveOrigin(deps.serverOrigin)))
|
|
260
|
+
: c.json(jsonError(404, "MCP_OAUTH_NOT_CONFIGURED", "MCP OAuth is not configured"), 404));
|
|
261
|
+
app.post("/mcp/oauth/register", async (c) => {
|
|
262
|
+
if (!resolveApprovalUrl(deps)) {
|
|
263
|
+
return c.json(jsonError(404, "MCP_OAUTH_NOT_CONFIGURED", "MCP OAuth is not configured"), 404);
|
|
264
|
+
}
|
|
265
|
+
let body = {};
|
|
266
|
+
try {
|
|
267
|
+
body = (await c.req.json());
|
|
268
|
+
}
|
|
269
|
+
catch {
|
|
270
|
+
body = {};
|
|
271
|
+
}
|
|
272
|
+
return c.json({
|
|
273
|
+
client_id: `mcp-client-${crypto.randomUUID()}`,
|
|
274
|
+
client_name: body.client_name ?? "Claude",
|
|
275
|
+
redirect_uris: Array.isArray(body.redirect_uris)
|
|
276
|
+
? body.redirect_uris
|
|
277
|
+
: [],
|
|
278
|
+
token_endpoint_auth_method: "none",
|
|
279
|
+
grant_types: ["authorization_code"],
|
|
280
|
+
response_types: ["code"],
|
|
281
|
+
}, 201);
|
|
282
|
+
});
|
|
283
|
+
app.get("/mcp/oauth/authorize", async (c) => {
|
|
284
|
+
if (!resolveApprovalUrl(deps)) {
|
|
285
|
+
return c.json(jsonError(404, "MCP_OAUTH_NOT_CONFIGURED", "MCP OAuth is not configured"), 404);
|
|
286
|
+
}
|
|
287
|
+
const origin = resolveOrigin(deps.serverOrigin);
|
|
288
|
+
const url = new URL(c.req.url);
|
|
289
|
+
const responseType = url.searchParams.get("response_type");
|
|
290
|
+
const clientId = url.searchParams.get("client_id") ?? "";
|
|
291
|
+
const redirectUri = url.searchParams.get("redirect_uri") ?? "";
|
|
292
|
+
const codeChallenge = url.searchParams.get("code_challenge") ?? "";
|
|
293
|
+
const codeChallengeMethod = url.searchParams.get("code_challenge_method") ?? "";
|
|
294
|
+
const state = url.searchParams.get("state");
|
|
295
|
+
const scope = url.searchParams.get("scope") ?? "vana:read";
|
|
296
|
+
if (responseType !== "code") {
|
|
297
|
+
return redirectWithOAuthError(redirectUri, "unsupported_response_type", "Only response_type=code is supported", state);
|
|
298
|
+
}
|
|
299
|
+
try {
|
|
300
|
+
const created = await createMcpOAuthAuthorization({
|
|
301
|
+
clientId,
|
|
302
|
+
redirectUri,
|
|
303
|
+
codeChallenge,
|
|
304
|
+
codeChallengeMethod,
|
|
305
|
+
scope,
|
|
306
|
+
...(state ? { state } : {}),
|
|
307
|
+
}, {
|
|
308
|
+
connectionStore,
|
|
309
|
+
authorizationStore,
|
|
310
|
+
publicOrigin: origin,
|
|
311
|
+
});
|
|
312
|
+
const approvalUrl = resolveApprovalUrl(deps);
|
|
313
|
+
if (!approvalUrl) {
|
|
314
|
+
return c.json(jsonError(500, "MCP_APPROVAL_URL_MISSING", "MCP OAuth approval URL is not configured"), 500);
|
|
45
315
|
}
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
316
|
+
const approve = new URL(approvalUrl);
|
|
317
|
+
approve.searchParams.set("mcp_authorization", created.authorizationId);
|
|
318
|
+
approve.searchParams.set("ps_origin", origin);
|
|
319
|
+
return c.redirect(approve.toString(), 302);
|
|
320
|
+
}
|
|
321
|
+
catch (err) {
|
|
322
|
+
const message = err instanceof Error ? err.message : String(err);
|
|
323
|
+
return redirectWithOAuthError(redirectUri, err instanceof McpOAuthAuthorizationError
|
|
324
|
+
? err.code
|
|
325
|
+
: "invalid_request", message, state);
|
|
326
|
+
}
|
|
327
|
+
});
|
|
328
|
+
app.post("/mcp/oauth/token", async (c) => {
|
|
329
|
+
if (!resolveApprovalUrl(deps)) {
|
|
330
|
+
return c.json(jsonError(404, "MCP_OAUTH_NOT_CONFIGURED", "MCP OAuth is not configured"), 404);
|
|
331
|
+
}
|
|
332
|
+
const body = await parseFormBody(c.req.raw);
|
|
333
|
+
if (body.get("grant_type") !== "authorization_code") {
|
|
334
|
+
return c.json({
|
|
335
|
+
error: "unsupported_grant_type",
|
|
336
|
+
error_description: "Only authorization_code is supported",
|
|
337
|
+
}, 400);
|
|
338
|
+
}
|
|
339
|
+
try {
|
|
340
|
+
const token = await redeemMcpOAuthAuthorizationCode({
|
|
341
|
+
authorizationCode: body.get("code") ?? "",
|
|
342
|
+
codeVerifier: body.get("code_verifier") ?? "",
|
|
343
|
+
clientId: body.get("client_id") ?? "",
|
|
344
|
+
redirectUri: body.get("redirect_uri") ?? "",
|
|
345
|
+
}, { authorizationStore, connectionStore });
|
|
346
|
+
return c.json({
|
|
347
|
+
access_token: token.accessToken,
|
|
348
|
+
token_type: "Bearer",
|
|
349
|
+
...(token.scope ? { scope: token.scope } : {}),
|
|
49
350
|
});
|
|
50
|
-
const server = createMcpServer(deps.mcpContext);
|
|
51
|
-
await server.connect(transport);
|
|
52
|
-
return transport.handleRequest(c.req.raw, { authInfo });
|
|
53
351
|
}
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
352
|
+
catch (err) {
|
|
353
|
+
return c.json({
|
|
354
|
+
error: err instanceof McpOAuthAuthorizationError
|
|
355
|
+
? err.code
|
|
356
|
+
: "invalid_grant",
|
|
357
|
+
error_description: err instanceof Error ? err.message : String(err),
|
|
358
|
+
}, 400);
|
|
359
|
+
}
|
|
360
|
+
});
|
|
361
|
+
app.get("/v1/mcp/oauth/authorizations/:id", async (c) => {
|
|
362
|
+
const err = await requireOwner(c);
|
|
363
|
+
if (err)
|
|
364
|
+
return err;
|
|
365
|
+
const record = await authorizationStore.getById(c.req.param("id"));
|
|
366
|
+
if (!record) {
|
|
367
|
+
return c.json(jsonError(404, "NOT_FOUND", "Authorization not found"), 404);
|
|
368
|
+
}
|
|
369
|
+
return c.json(toMcpOAuthAuthorizationView(record));
|
|
370
|
+
});
|
|
371
|
+
app.post("/v1/mcp/oauth/authorizations/:id/approve", async (c) => {
|
|
372
|
+
const err = await requireOwner(c);
|
|
373
|
+
if (err)
|
|
374
|
+
return err;
|
|
375
|
+
let body = {};
|
|
376
|
+
try {
|
|
377
|
+
body = (await c.req.json());
|
|
378
|
+
}
|
|
379
|
+
catch {
|
|
380
|
+
return c.json(jsonError(400, "INVALID_BODY", "Body must be JSON"), 400);
|
|
381
|
+
}
|
|
382
|
+
if (Array.isArray(body.scopes) && body.scopes.length > 0) {
|
|
383
|
+
if (!deps.gatewayConfig?.url) {
|
|
384
|
+
return c.json(jsonError(500, "SERVER_NOT_CONFIGURED", "Gateway config is not configured"), 500);
|
|
385
|
+
}
|
|
386
|
+
try {
|
|
387
|
+
const approved = await approveMcpOAuthAuthorizationWithScopes({
|
|
388
|
+
authorizationId: c.req.param("id"),
|
|
389
|
+
scopes: body.scopes,
|
|
390
|
+
...(body.expiresAt !== undefined
|
|
391
|
+
? { expiresAt: body.expiresAt }
|
|
392
|
+
: {}),
|
|
393
|
+
...(body.nonce !== undefined ? { nonce: body.nonce } : {}),
|
|
394
|
+
}, {
|
|
395
|
+
connectionStore,
|
|
396
|
+
authorizationStore,
|
|
397
|
+
gateway: deps.gateway,
|
|
398
|
+
gatewayConfig: deps.gatewayConfig,
|
|
399
|
+
gatewayUrl: deps.gatewayConfig.url,
|
|
400
|
+
serverOwner: deps.serverOwner,
|
|
401
|
+
serverSigner: deps.serverSigner,
|
|
402
|
+
});
|
|
403
|
+
return c.json({ redirectTo: approved.redirectTo });
|
|
404
|
+
}
|
|
405
|
+
catch (err) {
|
|
406
|
+
if (err instanceof McpOAuthAuthorizationError) {
|
|
407
|
+
return c.json(jsonError(err.status, err.code, err.message), err.status);
|
|
408
|
+
}
|
|
409
|
+
throw err;
|
|
410
|
+
}
|
|
411
|
+
}
|
|
412
|
+
if (!Array.isArray(body.grants) || body.grants.length === 0) {
|
|
413
|
+
return c.json(jsonError(400, "GRANTS_REQUIRED", "Approve requires grants or scopes"), 400);
|
|
414
|
+
}
|
|
415
|
+
try {
|
|
416
|
+
const approved = await approveMcpOAuthAuthorization({ authorizationId: c.req.param("id"), grants: body.grants }, { connectionStore, authorizationStore });
|
|
417
|
+
return c.json({ redirectTo: approved.redirectTo });
|
|
418
|
+
}
|
|
419
|
+
catch (err) {
|
|
420
|
+
if (err instanceof McpOAuthAuthorizationError) {
|
|
421
|
+
return c.json(jsonError(err.status, err.code, err.message), err.status);
|
|
422
|
+
}
|
|
423
|
+
throw err;
|
|
424
|
+
}
|
|
425
|
+
});
|
|
426
|
+
return app;
|
|
427
|
+
}
|
|
428
|
+
/**
|
|
429
|
+
* Hono sub-app for the Claude-facing Streamable HTTP endpoint.
|
|
430
|
+
* Mount under `/mcp` in `app.ts`; stable `/mcp` accepts OAuth bearer tokens
|
|
431
|
+
* and legacy `/mcp/:connectionToken` still accepts token-in-path calls.
|
|
432
|
+
*
|
|
433
|
+
* NOTE: this MUST receive the SAME `connectionStore` instance you pass to
|
|
434
|
+
* `mcpConnectionsRoutes` — otherwise the management API creates connections
|
|
435
|
+
* that the Claude endpoint can never see.
|
|
436
|
+
*/
|
|
437
|
+
export function mcpStreamableHttpRoutes(deps) {
|
|
438
|
+
const app = new Hono();
|
|
439
|
+
const store = deps.connectionStore ?? createInMemoryMcpConnectionStore();
|
|
440
|
+
if (!deps.connectionStore) {
|
|
441
|
+
deps.logger.warn("mcpStreamableHttpRoutes: no connectionStore passed; using a fresh in-memory store. The management routes will not see these connections unless they share the same store.");
|
|
442
|
+
}
|
|
443
|
+
async function handleToken(c, rawToken, options) {
|
|
444
|
+
if (!rawToken) {
|
|
445
|
+
if (!options.oauthChallenge) {
|
|
446
|
+
return c.json(jsonError(401, "INVALID_TOKEN", "Missing MCP connection token"), 401);
|
|
447
|
+
}
|
|
448
|
+
return mcpUnauthorized(resolveOrigin(deps.serverOrigin));
|
|
449
|
+
}
|
|
450
|
+
const tokenHash = await hashConnectionToken(rawToken);
|
|
451
|
+
const record = await store.getByTokenHash(tokenHash);
|
|
452
|
+
if (!record) {
|
|
453
|
+
if (!options.oauthChallenge) {
|
|
454
|
+
return c.json(jsonError(401, "INVALID_TOKEN", "Unknown or revoked MCP connection"), 401);
|
|
455
|
+
}
|
|
456
|
+
return mcpUnauthorized(resolveOrigin(deps.serverOrigin), "Unknown or revoked MCP connection");
|
|
457
|
+
}
|
|
458
|
+
let dataApiDeps;
|
|
459
|
+
try {
|
|
460
|
+
dataApiDeps = buildDataApiDeps(deps);
|
|
461
|
+
}
|
|
462
|
+
catch (caught) {
|
|
463
|
+
deps.logger.error({ err: caught }, "mcp route data deps failed");
|
|
464
|
+
return c.json(jsonError(500, "SERVER_NOT_CONFIGURED", String(caught)), 500);
|
|
465
|
+
}
|
|
466
|
+
const granteeAccount = loadMcpGranteeAccount({
|
|
467
|
+
address: record.granteeAddress,
|
|
468
|
+
publicKey: record.granteePublicKey,
|
|
469
|
+
encryptedPrivateKey: record.encryptedGranteePrivateKey,
|
|
57
470
|
});
|
|
58
|
-
const
|
|
59
|
-
|
|
60
|
-
|
|
471
|
+
const readClient = createMcpDataReadClient({
|
|
472
|
+
serverOrigin: resolveOrigin(deps.serverOrigin),
|
|
473
|
+
granteeAccount,
|
|
474
|
+
dataApiDeps,
|
|
475
|
+
});
|
|
476
|
+
const response = await handleMcpStreamableHttpRequest(c.req.raw, {
|
|
477
|
+
connection: record,
|
|
478
|
+
readClient,
|
|
479
|
+
activityRecorder: deps.activityRecorder,
|
|
480
|
+
});
|
|
481
|
+
void store
|
|
482
|
+
.update(record.id, {
|
|
483
|
+
lastUsedAt: new Date().toISOString(),
|
|
484
|
+
})
|
|
485
|
+
.catch((err) => {
|
|
486
|
+
console.warn("[mcp] failed to update lastUsedAt", err);
|
|
487
|
+
});
|
|
488
|
+
return response;
|
|
489
|
+
}
|
|
490
|
+
app.all("/", async (c) => handleToken(c, bearerToken(c.req.raw), {
|
|
491
|
+
oauthChallenge: Boolean(resolveApprovalUrl(deps)),
|
|
492
|
+
}));
|
|
493
|
+
app.all("/:connectionToken", async (c) => {
|
|
494
|
+
const rawToken = c.req.param("connectionToken");
|
|
495
|
+
return handleToken(c, rawToken, { oauthChallenge: false });
|
|
496
|
+
});
|
|
497
|
+
return app;
|
|
498
|
+
}
|
|
499
|
+
/**
|
|
500
|
+
* Owner-only activity feed route. Mount at `/v1/mcp/activity` in `app.ts`.
|
|
501
|
+
* Returns the current snapshot from the shared `McpActivityRecorder`.
|
|
502
|
+
*/
|
|
503
|
+
export function mcpActivityRoutes(deps) {
|
|
504
|
+
const app = new Hono();
|
|
505
|
+
const ownerAuth = createServerApiAuth({
|
|
506
|
+
serverOrigin: deps.serverOrigin,
|
|
507
|
+
serverOwner: deps.serverOwner,
|
|
508
|
+
gateway: deps.gateway,
|
|
509
|
+
devToken: deps.devToken,
|
|
510
|
+
accessToken: deps.accessToken,
|
|
511
|
+
tokenStore: deps.tokenStore,
|
|
512
|
+
});
|
|
513
|
+
async function requireOwner(c) {
|
|
514
|
+
try {
|
|
515
|
+
await ownerAuth.authorizeOwner(c.req.raw);
|
|
516
|
+
return null;
|
|
517
|
+
}
|
|
518
|
+
catch (err) {
|
|
519
|
+
if (err instanceof ProtocolError) {
|
|
520
|
+
return c.json(err.toJSON(), err.code);
|
|
521
|
+
}
|
|
522
|
+
throw err;
|
|
523
|
+
}
|
|
524
|
+
}
|
|
525
|
+
app.get("/", async (c) => {
|
|
526
|
+
const err = await requireOwner(c);
|
|
527
|
+
if (err)
|
|
528
|
+
return err;
|
|
529
|
+
const snapshot = deps.activityRecorder
|
|
530
|
+
? deps.activityRecorder.snapshot()
|
|
531
|
+
: { events: [], running: 0, total: 0 };
|
|
532
|
+
return c.json(snapshot);
|
|
61
533
|
});
|
|
62
534
|
return app;
|
|
63
535
|
}
|
|
536
|
+
export { buildMcpUrl, buildStableMcpUrl };
|
|
64
537
|
//# sourceMappingURL=mcp.js.map
|
package/dist/routes/mcp.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/routes/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,wCAAwC,EAAE,MAAM,+DAA+D,CAAC;AACzH,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAUvE,MAAM,UAAU,QAAQ,CAAC,IAAkB;IACzC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,gDAAgD;QAChD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACjD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrD,IAAI,MAAc,CAAC;gBACnB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtB,MAAM,CAAC,GACL,OAAO,IAAI,CAAC,YAAY,KAAK,UAAU;wBACrC,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE;wBACrB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;oBACxB,MAAM,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACrC,CAAC;gBACD,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,cAAc;oBACrB,iBAAiB,EAAE,uBAAuB;iBAC3C,CAAC,EACF;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,kBAAkB,EAAE,6BAA6B,MAAM,wCAAwC;wBAC/F,cAAc,EAAE,kBAAkB;qBACnC;iBACF,CACF,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,eAAe;oBACtB,iBAAiB,EAAE,0BAA0B;iBAC9C,CAAC,EACF;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,kBAAkB,EAAE,8BAA8B;wBAClD,cAAc,EAAE,kBAAkB;qBACnC;iBACF,CACF,CAAC;YACJ,CAAC;YAED,qCAAqC;YACrC,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC;gBAC7D,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,OAAO,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,qDAAqD;QACrD,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC;YAC7D,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}
|
|
1
|
+
{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/routes/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAO5B,OAAO,EACL,4BAA4B,EAC5B,sCAAsC,EACtC,oBAAoB,EACpB,oCAAoC,EACpC,WAAW,EACX,iBAAiB,EACjB,wCAAwC,EACxC,mBAAmB,EACnB,2BAA2B,EAC3B,gCAAgC,EAChC,uBAAuB,EACvB,8BAA8B,EAC9B,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACvB,0BAA0B,EAC1B,+BAA+B,EAC/B,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,GAKpB,MAAM,2CAA2C,CAAC;AAMnD,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAUrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAwCxE,SAAS,aAAa,CAAC,MAA+B;IACpD,OAAO,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,SAAiB,EAAE,OAAe;IACnE,OAAO;QACL,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3D,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CACtB,MAAc,EACd,OAAO,GAAG,4BAA4B;IAEtC,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC,EAC5D;QACE,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,kBAAkB,EAAE,6BAA6B,oCAAoC,CAAC,MAAM,CAAC,sBAAsB;SACpH;KACF,CACF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,MAAc;IACjD,OAAO;QACL,MAAM,EAAE,MAAM;QACd,sBAAsB,EAAE,GAAG,MAAM,sBAAsB;QACvD,cAAc,EAAE,GAAG,MAAM,kBAAkB;QAC3C,qBAAqB,EAAE,GAAG,MAAM,qBAAqB;QACrD,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;QAC7C,qCAAqC,EAAE,CAAC,MAAM,CAAC;QAC/C,gCAAgC,EAAE,CAAC,MAAM,CAAC;QAC1C,gBAAgB,EAAE,CAAC,WAAW,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAc;IAC/C,OAAO;QACL,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC;QACnC,qBAAqB,EAAE,CAAC,MAAM,CAAC;QAC/B,wBAAwB,EAAE,CAAC,QAAQ,CAAC;QACpC,gBAAgB,EAAE,CAAC,WAAW,CAAC;QAC/B,aAAa,EAAE,0BAA0B;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAkB;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACvD,CAAC;AAED,SAAS,sBAAsB,CAC7B,WAAmB,EACnB,KAAa,EACb,WAAmB,EACnB,KAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;QACvD,IAAI,KAAK;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;YACb,KAAK;YACL,iBAAiB,EAAE,WAAW;YAC9B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5B,CAAC,EACF;YACE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAgB;IAC3C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAkB;IAC1C,MAAM,WAAW,GACf,IAAI,CAAC,WAAW;QAChB,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,gBAAgB;YACzC,CAAC,CAAC,qBAAqB,CAAC;gBACpB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;aACxC,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,wGAAwG,CACzG,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAA8B,mBAAmB,CAAC;QAC1D,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW;QACX,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;KAC9C,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,IAAI;QACJ,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAkB;IACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,IAAI,gCAAgC,EAAE,CAAC;IAEzE,MAAM,SAAS,GAA8B,mBAAmB,CAAC;QAC/D,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IAEH,KAAK,UAAU,YAAY,CAAC,CAAU;QACpC,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,IAAiB,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,IAAI,IAAI,GAA6B,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAA6B,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CACvC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EACjC,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAC1D,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,IAAI,GAAsC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAsC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CACP,GAAG,EACH,iBAAiB,EACjB,6EAA6E,CAC9E,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACxC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EACzC,EAAE,KAAK,EAAE,CACV,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,IAAI,MAAM,YAAY,0BAA0B,EAAE,CAAC;gBACjD,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,MAAM,YAAY,uBAAuB,EAAE,CAAC;gBAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,MAAM,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,IAAI,MAAM,YAAY,0BAA0B,EAAE,CAAC;gBACjD,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,MAAM,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAkB;IAC/C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,eAAe,GACnB,IAAI,CAAC,eAAe,IAAI,gCAAgC,EAAE,CAAC;IAC7D,MAAM,kBAAkB,GACtB,IAAI,CAAC,uBAAuB,IAAI,wCAAwC,EAAE,CAAC;IAE7E,MAAM,SAAS,GAA8B,mBAAmB,CAAC;QAC/D,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IAEH,KAAK,UAAU,YAAY,CAAC,CAAU;QACpC,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,IAAiB,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,2CAA2C,EAAE,CAAC,CAAC,EAAE,EAAE,CACzD,kBAAkB,CAAC,IAAI,CAAC;QACtB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC,CAAC,IAAI,CACJ,SAAS,CACP,GAAG,EACH,0BAA0B,EAC1B,6BAA6B,CAC9B,EACD,GAAG,CACJ,CACN,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,yCAAyC,EAAE,CAAC,CAAC,EAAE,EAAE,CACvD,kBAAkB,CAAC,IAAI,CAAC;QACtB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC,CAAC,IAAI,CACJ,SAAS,CACP,GAAG,EACH,0BAA0B,EAC1B,6BAA6B,CAC9B,EACD,GAAG,CACJ,CACN,CAAC;IAEF,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CACP,GAAG,EACH,0BAA0B,EAC1B,6BAA6B,CAC9B,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,GAAuD,EAAE,CAAC;QAClE,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CACX;YACE,SAAS,EAAE,cAAc,MAAM,CAAC,UAAU,EAAE,EAAE;YAC9C,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,QAAQ;YACzC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;gBAC9C,CAAC,CAAC,IAAI,CAAC,aAAa;gBACpB,CAAC,CAAC,EAAE;YACN,0BAA0B,EAAE,MAAM;YAClC,WAAW,EAAE,CAAC,oBAAoB,CAAC;YACnC,cAAc,EAAE,CAAC,MAAM,CAAC;SACzB,EACD,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CACP,GAAG,EACH,0BAA0B,EAC1B,6BAA6B,CAC9B,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QACnE,MAAM,mBAAmB,GACvB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC;QAE3D,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,sBAAsB,CAC3B,WAAW,EACX,2BAA2B,EAC3B,sCAAsC,EACtC,KAAK,CACN,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAC/C;gBACE,QAAQ;gBACR,WAAW;gBACX,aAAa;gBACb,mBAAmB;gBACnB,KAAK;gBACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5B,EACD;gBACE,eAAe;gBACf,kBAAkB;gBAClB,YAAY,EAAE,MAAM;aACrB,CACF,CAAC;YACF,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CACP,GAAG,EACH,0BAA0B,EAC1B,0CAA0C,CAC3C,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;YACrC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;YACvE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC9C,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,sBAAsB,CAC3B,WAAW,EACX,GAAG,YAAY,0BAA0B;gBACvC,CAAC,CAAC,GAAG,CAAC,IAAI;gBACV,CAAC,CAAC,iBAAiB,EACrB,OAAO,EACP,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CACP,GAAG,EACH,0BAA0B,EAC1B,6BAA6B,CAC9B,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,oBAAoB,EAAE,CAAC;YACpD,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,wBAAwB;gBAC/B,iBAAiB,EAAE,sCAAsC;aAC1D,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,+BAA+B,CACjD;gBACE,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;gBACzC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE;gBAC7C,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE;gBACrC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE;aAC5C,EACD,EAAE,kBAAkB,EAAE,eAAe,EAAE,CACxC,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,YAAY,EAAE,KAAK,CAAC,WAAW;gBAC/B,UAAU,EAAE,QAAQ;gBACpB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EACH,GAAG,YAAY,0BAA0B;oBACvC,CAAC,CAAC,GAAG,CAAC,IAAI;oBACV,CAAC,CAAC,eAAe;gBACrB,iBAAiB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACpE,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,kCAAkC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,yBAAyB,CAAC,EACtD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,0CAA0C,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/D,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,IAAI,IAAI,GAKJ,EAAE,CAAC;QACP,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC;gBAC7B,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CACP,GAAG,EACH,uBAAuB,EACvB,kCAAkC,CACnC,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,sCAAsC,CAC3D;oBACE,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAClC,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS;wBAC9B,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;wBAC/B,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3D,EACD;oBACE,eAAe;oBACf,kBAAkB;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG;oBAClC,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;iBAChC,CACF,CAAC;gBACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,0BAA0B,EAAE,CAAC;oBAC9C,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,EAC5C,GAAG,CAAC,MAAyB,CAC9B,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,GAAG,EAAE,iBAAiB,EAAE,mCAAmC,CAAC,EACtE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CACjD,EAAE,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAC3D,EAAE,eAAe,EAAE,kBAAkB,EAAE,CACxC,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,0BAA0B,EAAE,CAAC;gBAC9C,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,EAC5C,GAAG,CAAC,MAAyB,CAC9B,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAkB;IACxD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,IAAI,gCAAgC,EAAE,CAAC;IACzE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2KAA2K,CAC5K,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,WAAW,CACxB,CAAU,EACV,QAAuB,EACvB,OAAoC;QAEpC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC5B,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,8BAA8B,CAAC,EAC/D,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,OAAO,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC5B,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,mCAAmC,CAAC,EACpE,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,OAAO,eAAe,CACpB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAChC,mCAAmC,CACpC,CAAC;QACJ,CAAC;QACD,IAAI,WAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,GAAG,EAAE,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EACvD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAG,qBAAqB,CAAC;YAC3C,OAAO,EAAE,MAAM,CAAC,cAAc;YAC9B,SAAS,EAAE,MAAM,CAAC,gBAAgB;YAClC,mBAAmB,EAAE,MAAM,CAAC,0BAA0B;SACvD,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,uBAAuB,CAAC;YACzC,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC;YAC9C,cAAc;YACd,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC/D,UAAU,EAAE,MAAM;YAClB,UAAU;YACV,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC,CAAC;QACH,KAAK,KAAK;aACP,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;YACjB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,OAAO,CAAC,IAAI,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACL,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CACvB,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;QACrC,cAAc,EAAE,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;KAClD,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAChD,OAAO,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAkB;IAClD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,MAAM,SAAS,GAA8B,mBAAmB,CAAC;QAC/D,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IAEH,KAAK,UAAU,YAAY,CAAC,CAAU;QACpC,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,IAAiB,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB;YACpC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE;YAClC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC"}
|