@opendatalabs/personal-server-ts-server 0.2.0 → 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (177) hide show
  1. package/dist/api-auth.d.ts +16 -0
  2. package/dist/api-auth.d.ts.map +1 -0
  3. package/dist/api-auth.js +97 -0
  4. package/dist/api-auth.js.map +1 -0
  5. package/dist/api.d.ts +4 -0
  6. package/dist/api.d.ts.map +1 -1
  7. package/dist/api.js +3 -0
  8. package/dist/api.js.map +1 -1
  9. package/dist/app.d.ts +46 -1
  10. package/dist/app.d.ts.map +1 -1
  11. package/dist/app.js +102 -30
  12. package/dist/app.js.map +1 -1
  13. package/dist/bootstrap.d.ts +11 -3
  14. package/dist/bootstrap.d.ts.map +1 -1
  15. package/dist/bootstrap.js +266 -33
  16. package/dist/bootstrap.js.map +1 -1
  17. package/dist/client.d.ts +17 -0
  18. package/dist/client.d.ts.map +1 -0
  19. package/dist/client.js +368 -0
  20. package/dist/client.js.map +1 -0
  21. package/dist/config/defaults.d.ts +12 -0
  22. package/dist/config/defaults.d.ts.map +1 -0
  23. package/dist/config/defaults.js +14 -0
  24. package/dist/config/defaults.js.map +1 -0
  25. package/dist/config/index.d.ts +4 -0
  26. package/dist/config/index.d.ts.map +1 -0
  27. package/dist/config/index.js +4 -0
  28. package/dist/config/index.js.map +1 -0
  29. package/dist/config/loader.d.ts +8 -0
  30. package/dist/config/loader.d.ts.map +1 -0
  31. package/dist/config/loader.js +74 -0
  32. package/dist/config/loader.js.map +1 -0
  33. package/dist/config/paths.d.ts +9 -0
  34. package/dist/config/paths.d.ts.map +1 -0
  35. package/dist/config/paths.js +22 -0
  36. package/dist/config/paths.js.map +1 -0
  37. package/dist/hono-context.d.ts +14 -0
  38. package/dist/hono-context.d.ts.map +1 -0
  39. package/dist/hono-context.js +2 -0
  40. package/dist/hono-context.js.map +1 -0
  41. package/dist/index.js +64 -12
  42. package/dist/index.js.map +1 -1
  43. package/dist/keys/server-account.d.ts +28 -0
  44. package/dist/keys/server-account.d.ts.map +1 -0
  45. package/dist/keys/server-account.js +48 -0
  46. package/dist/keys/server-account.js.map +1 -0
  47. package/dist/logger/index.d.ts +5 -0
  48. package/dist/logger/index.d.ts.map +1 -0
  49. package/dist/logger/index.js +9 -0
  50. package/dist/logger/index.js.map +1 -0
  51. package/dist/logging/access-log.d.ts +15 -0
  52. package/dist/logging/access-log.d.ts.map +1 -0
  53. package/dist/logging/access-log.js +25 -0
  54. package/dist/logging/access-log.js.map +1 -0
  55. package/dist/logging/access-reader.d.ts +19 -0
  56. package/dist/logging/access-reader.d.ts.map +1 -0
  57. package/dist/logging/access-reader.js +50 -0
  58. package/dist/logging/access-reader.js.map +1 -0
  59. package/dist/middleware/access-log.d.ts.map +1 -1
  60. package/dist/middleware/access-log.js +8 -2
  61. package/dist/middleware/access-log.js.map +1 -1
  62. package/dist/middleware/builder-check.d.ts +2 -2
  63. package/dist/middleware/builder-check.d.ts.map +1 -1
  64. package/dist/middleware/builder-check.js +7 -2
  65. package/dist/middleware/builder-check.js.map +1 -1
  66. package/dist/middleware/owner-check.js +1 -1
  67. package/dist/middleware/owner-check.js.map +1 -1
  68. package/dist/middleware/web3-auth.d.ts +12 -0
  69. package/dist/middleware/web3-auth.d.ts.map +1 -1
  70. package/dist/middleware/web3-auth.js +27 -31
  71. package/dist/middleware/web3-auth.js.map +1 -1
  72. package/dist/migrations/local-state.d.ts +21 -0
  73. package/dist/migrations/local-state.d.ts.map +1 -0
  74. package/dist/migrations/local-state.js +106 -0
  75. package/dist/migrations/local-state.js.map +1 -0
  76. package/dist/routes/access-logs.d.ts +7 -0
  77. package/dist/routes/access-logs.d.ts.map +1 -1
  78. package/dist/routes/access-logs.js +11 -17
  79. package/dist/routes/access-logs.js.map +1 -1
  80. package/dist/routes/auth-device.d.ts +49 -0
  81. package/dist/routes/auth-device.d.ts.map +1 -0
  82. package/dist/routes/auth-device.js +581 -0
  83. package/dist/routes/auth-device.js.map +1 -0
  84. package/dist/routes/data.d.ts +42 -1
  85. package/dist/routes/data.d.ts.map +1 -1
  86. package/dist/routes/data.js +36 -201
  87. package/dist/routes/data.js.map +1 -1
  88. package/dist/routes/grants.d.ts +9 -2
  89. package/dist/routes/grants.d.ts.map +1 -1
  90. package/dist/routes/grants.js +18 -196
  91. package/dist/routes/grants.js.map +1 -1
  92. package/dist/routes/health.d.ts +7 -1
  93. package/dist/routes/health.d.ts.map +1 -1
  94. package/dist/routes/health.js +39 -2
  95. package/dist/routes/health.js.map +1 -1
  96. package/dist/routes/mcp.d.ts +93 -6
  97. package/dist/routes/mcp.d.ts.map +1 -1
  98. package/dist/routes/mcp.js +526 -53
  99. package/dist/routes/mcp.js.map +1 -1
  100. package/dist/routes/oauth-token.d.ts +56 -0
  101. package/dist/routes/oauth-token.d.ts.map +1 -0
  102. package/dist/routes/oauth-token.js +49 -0
  103. package/dist/routes/oauth-token.js.map +1 -0
  104. package/dist/routes/sync.d.ts +7 -0
  105. package/dist/routes/sync.d.ts.map +1 -1
  106. package/dist/routes/sync.js +12 -39
  107. package/dist/routes/sync.js.map +1 -1
  108. package/dist/routes/ui-config.d.ts.map +1 -1
  109. package/dist/routes/ui-config.js +17 -82
  110. package/dist/routes/ui-config.js.map +1 -1
  111. package/dist/routes/ui-registration.d.ts +9 -0
  112. package/dist/routes/ui-registration.d.ts.map +1 -0
  113. package/dist/routes/ui-registration.js +217 -0
  114. package/dist/routes/ui-registration.js.map +1 -0
  115. package/dist/routes/ui.d.ts +1 -0
  116. package/dist/routes/ui.d.ts.map +1 -1
  117. package/dist/routes/ui.js +46 -4
  118. package/dist/routes/ui.js.map +1 -1
  119. package/dist/storage/hierarchy.d.ts +29 -0
  120. package/dist/storage/hierarchy.d.ts.map +1 -0
  121. package/dist/storage/hierarchy.js +241 -0
  122. package/dist/storage/hierarchy.js.map +1 -0
  123. package/dist/storage/index-manager.d.ts +53 -0
  124. package/dist/storage/index-manager.d.ts.map +1 -0
  125. package/dist/storage/index-manager.js +167 -0
  126. package/dist/storage/index-manager.js.map +1 -0
  127. package/dist/storage/index-schema.d.ts +5 -0
  128. package/dist/storage/index-schema.d.ts.map +1 -0
  129. package/dist/storage/index-schema.js +62 -0
  130. package/dist/storage/index-schema.js.map +1 -0
  131. package/dist/storage/node-data-storage.d.ts +9 -0
  132. package/dist/storage/node-data-storage.d.ts.map +1 -0
  133. package/dist/storage/node-data-storage.js +84 -0
  134. package/dist/storage/node-data-storage.js.map +1 -0
  135. package/dist/sync-cursor.d.ts +15 -0
  136. package/dist/sync-cursor.d.ts.map +1 -0
  137. package/dist/sync-cursor.js +110 -0
  138. package/dist/sync-cursor.js.map +1 -0
  139. package/dist/token-store.d.ts +22 -0
  140. package/dist/token-store.d.ts.map +1 -0
  141. package/dist/token-store.js +120 -0
  142. package/dist/token-store.js.map +1 -0
  143. package/dist/tunnel/auth.d.ts +4 -0
  144. package/dist/tunnel/auth.d.ts.map +1 -1
  145. package/dist/tunnel/auth.js +2 -1
  146. package/dist/tunnel/auth.js.map +1 -1
  147. package/dist/tunnel/config.d.ts +1 -0
  148. package/dist/tunnel/config.d.ts.map +1 -1
  149. package/dist/tunnel/config.js +1 -1
  150. package/dist/tunnel/config.js.map +1 -1
  151. package/dist/tunnel/manager.d.ts +21 -1
  152. package/dist/tunnel/manager.d.ts.map +1 -1
  153. package/dist/tunnel/manager.js +78 -23
  154. package/dist/tunnel/manager.js.map +1 -1
  155. package/dist/tunnel/verify.d.ts +1 -1
  156. package/dist/tunnel/verify.d.ts.map +1 -1
  157. package/dist/tunnel/verify.js +8 -2
  158. package/dist/tunnel/verify.js.map +1 -1
  159. package/dist/ui/browser_tls_rustls_bg.wasm +0 -0
  160. package/dist/ui/index.html +2192 -0
  161. package/dist/ui/ps-lite-debug.d.ts +93 -0
  162. package/dist/ui/ps-lite-debug.d.ts.map +1 -0
  163. package/dist/ui/ps-lite-debug.js +129415 -0
  164. package/dist/ui/ps-lite-debug.js.map +1 -0
  165. package/package.json +20 -8
  166. package/dist/middleware/grant-check.d.ts +0 -12
  167. package/dist/middleware/grant-check.d.ts.map +0 -1
  168. package/dist/middleware/grant-check.js +0 -90
  169. package/dist/middleware/grant-check.js.map +0 -1
  170. package/dist/oauth/provider.d.ts +0 -55
  171. package/dist/oauth/provider.d.ts.map +0 -1
  172. package/dist/oauth/provider.js +0 -160
  173. package/dist/oauth/provider.js.map +0 -1
  174. package/dist/oauth/routes.d.ts +0 -10
  175. package/dist/oauth/routes.d.ts.map +0 -1
  176. package/dist/oauth/routes.js +0 -206
  177. package/dist/oauth/routes.js.map +0 -1
@@ -1,64 +1,537 @@
1
+ /**
2
+ * MCP routes — both the Claude-facing `/mcp/:token` Streamable HTTP endpoint
3
+ * and the owner-only `/v1/mcp/connections` management surface.
4
+ *
5
+ * §1–§3 of `260604-PLAN-vana-mcp-personal-server.md`.
6
+ *
7
+ * Owner endpoints reuse `createServerApiAuth().authorizeOwner` so the same
8
+ * auth surface that gates `/v1/grants` gates connection management. The
9
+ * Claude-facing endpoint uses the connection token as a capability — there
10
+ * is no Web3Signed payload from Claude; the token resolves to a connection
11
+ * and we then sign reads ourselves with the per-connection grantee.
12
+ *
13
+ * NOTE on Phase-1 storage: this route accepts an `McpConnectionStore` from
14
+ * the caller. The in-memory implementation in `core/src/mcp/store.ts` is
15
+ * fine for tests and the first server-side smoke; for Web PS Lite an
16
+ * IndexedDB-backed adapter is the natural production path (Phase-2 §4
17
+ * "encrypt grantee private keys at rest" applies there).
18
+ */
1
19
  import { Hono } from "hono";
2
- import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
3
- import { createMcpServer } from "@opendatalabs/personal-server-ts-mcp";
4
- export function mcpRoute(deps) {
20
+ import { approveMcpOAuthAuthorization, approveMcpOAuthAuthorizationWithScopes, approveMcpConnection, buildMcpProtectedResourceMetadataUrl, buildMcpUrl, buildStableMcpUrl, createInMemoryMcpOAuthAuthorizationStore, createMcpConnection, createMcpOAuthAuthorization, createInMemoryMcpConnectionStore, createMcpDataReadClient, handleMcpStreamableHttpRequest, hashConnectionToken, listMcpConnectionViews, loadMcpGranteeAccount, McpConnectionNotFoundError, McpConnectionStateError, McpOAuthAuthorizationError, redeemMcpOAuthAuthorizationCode, toMcpOAuthAuthorizationView, revokeMcpConnection, toMcpConnectionView, } from "@opendatalabs/personal-server-ts-core/mcp";
21
+ import { ProtocolError } from "@opendatalabs/personal-server-ts-core/errors";
22
+ import { createServerApiAuth } from "../api-auth.js";
23
+ import { createNodeDataStorage } from "../storage/node-data-storage.js";
24
+ function resolveOrigin(origin) {
25
+ return typeof origin === "function" ? origin() : origin;
26
+ }
27
+ function jsonError(status, errorCode, message) {
28
+ return {
29
+ error: { code: status, errorCode, message },
30
+ };
31
+ }
32
+ function bearerToken(request) {
33
+ const authorization = request.headers.get("authorization");
34
+ if (!authorization?.startsWith("Bearer "))
35
+ return null;
36
+ const token = authorization.slice("Bearer ".length).trim();
37
+ return token.length > 0 ? token : null;
38
+ }
39
+ function mcpUnauthorized(origin, message = "MCP authorization required") {
40
+ return new Response(JSON.stringify(jsonError(401, "MCP_AUTH_REQUIRED", message)), {
41
+ status: 401,
42
+ headers: {
43
+ "content-type": "application/json",
44
+ "www-authenticate": `Bearer resource_metadata="${buildMcpProtectedResourceMetadataUrl(origin)}", scope="vana:read"`,
45
+ },
46
+ });
47
+ }
48
+ function authorizationServerMetadata(origin) {
49
+ return {
50
+ issuer: origin,
51
+ authorization_endpoint: `${origin}/mcp/oauth/authorize`,
52
+ token_endpoint: `${origin}/mcp/oauth/token`,
53
+ registration_endpoint: `${origin}/mcp/oauth/register`,
54
+ response_types_supported: ["code"],
55
+ grant_types_supported: ["authorization_code"],
56
+ token_endpoint_auth_methods_supported: ["none"],
57
+ code_challenge_methods_supported: ["S256"],
58
+ scopes_supported: ["vana:read"],
59
+ };
60
+ }
61
+ function protectedResourceMetadata(origin) {
62
+ return {
63
+ resource: buildStableMcpUrl(origin),
64
+ authorization_servers: [origin],
65
+ bearer_methods_supported: ["header"],
66
+ scopes_supported: ["vana:read"],
67
+ resource_name: "Vana Personal Server MCP",
68
+ };
69
+ }
70
+ function resolveApprovalUrl(deps) {
71
+ const value = deps.oauthApprovalUrl;
72
+ if (!value)
73
+ return null;
74
+ return typeof value === "function" ? value() : value;
75
+ }
76
+ function redirectWithOAuthError(redirectUri, error, description, state) {
77
+ try {
78
+ const url = new URL(redirectUri);
79
+ url.searchParams.set("error", error);
80
+ url.searchParams.set("error_description", description);
81
+ if (state)
82
+ url.searchParams.set("state", state);
83
+ return Response.redirect(url.toString(), 302);
84
+ }
85
+ catch {
86
+ return new Response(JSON.stringify({
87
+ error,
88
+ error_description: description,
89
+ ...(state ? { state } : {}),
90
+ }), {
91
+ status: 400,
92
+ headers: { "content-type": "application/json" },
93
+ });
94
+ }
95
+ }
96
+ async function parseFormBody(request) {
97
+ const text = await request.text();
98
+ return new URLSearchParams(text);
99
+ }
100
+ function buildDataApiDeps(deps) {
101
+ const dataStorage = deps.dataStorage ??
102
+ (deps.indexManager && deps.hierarchyOptions
103
+ ? createNodeDataStorage({
104
+ indexManager: deps.indexManager,
105
+ hierarchyOptions: deps.hierarchyOptions,
106
+ })
107
+ : undefined);
108
+ if (!dataStorage) {
109
+ throw new Error("mcpRoutes requires either `dataStorage` or `{ indexManager, hierarchyOptions }` to build the read path");
110
+ }
111
+ const auth = createServerApiAuth({
112
+ serverOrigin: deps.serverOrigin,
113
+ serverOwner: deps.serverOwner,
114
+ gateway: deps.gateway,
115
+ devToken: deps.devToken,
116
+ accessToken: deps.accessToken,
117
+ tokenStore: deps.tokenStore,
118
+ dataStorage,
119
+ runtimeAvailability: deps.runtimeAvailability,
120
+ });
121
+ return {
122
+ storage: dataStorage,
123
+ auth,
124
+ accessLogWriter: deps.accessLogWriter,
125
+ readFulfillmentReporter: deps.readFulfillmentReporter,
126
+ runtimeAvailability: deps.runtimeAvailability,
127
+ logger: deps.logger,
128
+ };
129
+ }
130
+ /**
131
+ * Hono sub-app for the owner-only `/v1/mcp/connections` endpoints.
132
+ * Mount under `/v1/mcp/connections` in `app.ts`.
133
+ */
134
+ export function mcpConnectionsRoutes(deps) {
5
135
  const app = new Hono();
6
- app.all("/", async (c) => {
7
- // Require bearer token when OAuth is configured
8
- if (deps.oauthProvider) {
9
- const authHeader = c.req.header("authorization");
10
- if (!authHeader || !authHeader.startsWith("Bearer ")) {
11
- let origin;
12
- if (deps.serverOrigin) {
13
- const o = typeof deps.serverOrigin === "function"
14
- ? deps.serverOrigin()
15
- : deps.serverOrigin;
16
- origin = o || new URL(c.req.url).origin;
17
- }
18
- else {
19
- origin = new URL(c.req.url).origin;
20
- }
21
- return new Response(JSON.stringify({
22
- error: "Unauthorized",
23
- error_description: "Bearer token required",
24
- }), {
25
- status: 401,
26
- headers: {
27
- "WWW-Authenticate": `Bearer resource_metadata="${origin}/.well-known/oauth-protected-resource"`,
28
- "Content-Type": "application/json",
29
- },
30
- });
136
+ const store = deps.connectionStore ?? createInMemoryMcpConnectionStore();
137
+ const ownerAuth = createServerApiAuth({
138
+ serverOrigin: deps.serverOrigin,
139
+ serverOwner: deps.serverOwner,
140
+ gateway: deps.gateway,
141
+ devToken: deps.devToken,
142
+ accessToken: deps.accessToken,
143
+ tokenStore: deps.tokenStore,
144
+ });
145
+ async function requireOwner(c) {
146
+ try {
147
+ await ownerAuth.authorizeOwner(c.req.raw);
148
+ return null;
149
+ }
150
+ catch (err) {
151
+ if (err instanceof ProtocolError) {
152
+ return c.json(err.toJSON(), err.code);
31
153
  }
32
- const token = authHeader.slice(7);
33
- const authInfo = deps.oauthProvider.verifyToken(token);
34
- if (!authInfo) {
35
- return new Response(JSON.stringify({
36
- error: "invalid_token",
37
- error_description: "Token expired or invalid",
38
- }), {
39
- status: 401,
40
- headers: {
41
- "WWW-Authenticate": 'Bearer error="invalid_token"',
42
- "Content-Type": "application/json",
43
- },
44
- });
154
+ throw err;
155
+ }
156
+ }
157
+ app.post("/", async (c) => {
158
+ const err = await requireOwner(c);
159
+ if (err)
160
+ return err;
161
+ let body = {};
162
+ try {
163
+ body = (await c.req.json());
164
+ }
165
+ catch {
166
+ body = {};
167
+ }
168
+ const created = await createMcpConnection({ displayName: body.displayName }, { store, publicOrigin: resolveOrigin(deps.serverOrigin) });
169
+ return c.json(created, 201);
170
+ });
171
+ app.get("/", async (c) => {
172
+ const err = await requireOwner(c);
173
+ if (err)
174
+ return err;
175
+ const records = await listMcpConnectionViews(store);
176
+ return c.json({ connections: records });
177
+ });
178
+ app.post("/:id/approve", async (c) => {
179
+ const err = await requireOwner(c);
180
+ if (err)
181
+ return err;
182
+ const id = c.req.param("id");
183
+ let body = {};
184
+ try {
185
+ body = (await c.req.json());
186
+ }
187
+ catch {
188
+ return c.json(jsonError(400, "INVALID_BODY", "Body must be JSON"), 400);
189
+ }
190
+ if (!Array.isArray(body.grants) || body.grants.length === 0) {
191
+ return c.json(jsonError(400, "GRANTS_REQUIRED", "Approve requires at least one grant — mint grants in the consent flow first"), 400);
192
+ }
193
+ try {
194
+ const updated = await approveMcpConnection({ connectionId: id, grants: body.grants }, { store });
195
+ return c.json(toMcpConnectionView(updated));
196
+ }
197
+ catch (caught) {
198
+ if (caught instanceof McpConnectionNotFoundError) {
199
+ return c.json(jsonError(404, "NOT_FOUND", caught.message), 404);
200
+ }
201
+ if (caught instanceof McpConnectionStateError) {
202
+ return c.json(jsonError(409, "INVALID_STATE", caught.message), 409);
203
+ }
204
+ throw caught;
205
+ }
206
+ });
207
+ app.delete("/:id", async (c) => {
208
+ const err = await requireOwner(c);
209
+ if (err)
210
+ return err;
211
+ const id = c.req.param("id");
212
+ try {
213
+ const updated = await revokeMcpConnection(id, { store });
214
+ return c.json(toMcpConnectionView(updated));
215
+ }
216
+ catch (caught) {
217
+ if (caught instanceof McpConnectionNotFoundError) {
218
+ return c.json(jsonError(404, "NOT_FOUND", caught.message), 404);
219
+ }
220
+ throw caught;
221
+ }
222
+ });
223
+ return app;
224
+ }
225
+ /**
226
+ * Top-level MCP OAuth/discovery routes.
227
+ *
228
+ * Mount at `/` so the well-known documents are served from the PS origin and
229
+ * Claude can discover auth for the stable `/mcp` resource.
230
+ */
231
+ export function mcpOAuthRoutes(deps) {
232
+ const app = new Hono();
233
+ const connectionStore = deps.connectionStore ?? createInMemoryMcpConnectionStore();
234
+ const authorizationStore = deps.oauthAuthorizationStore ?? createInMemoryMcpOAuthAuthorizationStore();
235
+ const ownerAuth = createServerApiAuth({
236
+ serverOrigin: deps.serverOrigin,
237
+ serverOwner: deps.serverOwner,
238
+ gateway: deps.gateway,
239
+ devToken: deps.devToken,
240
+ accessToken: deps.accessToken,
241
+ tokenStore: deps.tokenStore,
242
+ });
243
+ async function requireOwner(c) {
244
+ try {
245
+ await ownerAuth.authorizeOwner(c.req.raw);
246
+ return null;
247
+ }
248
+ catch (err) {
249
+ if (err instanceof ProtocolError) {
250
+ return c.json(err.toJSON(), err.code);
251
+ }
252
+ throw err;
253
+ }
254
+ }
255
+ app.get("/.well-known/oauth-protected-resource/mcp", (c) => resolveApprovalUrl(deps)
256
+ ? c.json(protectedResourceMetadata(resolveOrigin(deps.serverOrigin)))
257
+ : c.json(jsonError(404, "MCP_OAUTH_NOT_CONFIGURED", "MCP OAuth is not configured"), 404));
258
+ app.get("/.well-known/oauth-authorization-server", (c) => resolveApprovalUrl(deps)
259
+ ? c.json(authorizationServerMetadata(resolveOrigin(deps.serverOrigin)))
260
+ : c.json(jsonError(404, "MCP_OAUTH_NOT_CONFIGURED", "MCP OAuth is not configured"), 404));
261
+ app.post("/mcp/oauth/register", async (c) => {
262
+ if (!resolveApprovalUrl(deps)) {
263
+ return c.json(jsonError(404, "MCP_OAUTH_NOT_CONFIGURED", "MCP OAuth is not configured"), 404);
264
+ }
265
+ let body = {};
266
+ try {
267
+ body = (await c.req.json());
268
+ }
269
+ catch {
270
+ body = {};
271
+ }
272
+ return c.json({
273
+ client_id: `mcp-client-${crypto.randomUUID()}`,
274
+ client_name: body.client_name ?? "Claude",
275
+ redirect_uris: Array.isArray(body.redirect_uris)
276
+ ? body.redirect_uris
277
+ : [],
278
+ token_endpoint_auth_method: "none",
279
+ grant_types: ["authorization_code"],
280
+ response_types: ["code"],
281
+ }, 201);
282
+ });
283
+ app.get("/mcp/oauth/authorize", async (c) => {
284
+ if (!resolveApprovalUrl(deps)) {
285
+ return c.json(jsonError(404, "MCP_OAUTH_NOT_CONFIGURED", "MCP OAuth is not configured"), 404);
286
+ }
287
+ const origin = resolveOrigin(deps.serverOrigin);
288
+ const url = new URL(c.req.url);
289
+ const responseType = url.searchParams.get("response_type");
290
+ const clientId = url.searchParams.get("client_id") ?? "";
291
+ const redirectUri = url.searchParams.get("redirect_uri") ?? "";
292
+ const codeChallenge = url.searchParams.get("code_challenge") ?? "";
293
+ const codeChallengeMethod = url.searchParams.get("code_challenge_method") ?? "";
294
+ const state = url.searchParams.get("state");
295
+ const scope = url.searchParams.get("scope") ?? "vana:read";
296
+ if (responseType !== "code") {
297
+ return redirectWithOAuthError(redirectUri, "unsupported_response_type", "Only response_type=code is supported", state);
298
+ }
299
+ try {
300
+ const created = await createMcpOAuthAuthorization({
301
+ clientId,
302
+ redirectUri,
303
+ codeChallenge,
304
+ codeChallengeMethod,
305
+ scope,
306
+ ...(state ? { state } : {}),
307
+ }, {
308
+ connectionStore,
309
+ authorizationStore,
310
+ publicOrigin: origin,
311
+ });
312
+ const approvalUrl = resolveApprovalUrl(deps);
313
+ if (!approvalUrl) {
314
+ return c.json(jsonError(500, "MCP_APPROVAL_URL_MISSING", "MCP OAuth approval URL is not configured"), 500);
45
315
  }
46
- // Pass authInfo to the MCP transport
47
- const transport = new WebStandardStreamableHTTPServerTransport({
48
- enableJsonResponse: true,
316
+ const approve = new URL(approvalUrl);
317
+ approve.searchParams.set("mcp_authorization", created.authorizationId);
318
+ approve.searchParams.set("ps_origin", origin);
319
+ return c.redirect(approve.toString(), 302);
320
+ }
321
+ catch (err) {
322
+ const message = err instanceof Error ? err.message : String(err);
323
+ return redirectWithOAuthError(redirectUri, err instanceof McpOAuthAuthorizationError
324
+ ? err.code
325
+ : "invalid_request", message, state);
326
+ }
327
+ });
328
+ app.post("/mcp/oauth/token", async (c) => {
329
+ if (!resolveApprovalUrl(deps)) {
330
+ return c.json(jsonError(404, "MCP_OAUTH_NOT_CONFIGURED", "MCP OAuth is not configured"), 404);
331
+ }
332
+ const body = await parseFormBody(c.req.raw);
333
+ if (body.get("grant_type") !== "authorization_code") {
334
+ return c.json({
335
+ error: "unsupported_grant_type",
336
+ error_description: "Only authorization_code is supported",
337
+ }, 400);
338
+ }
339
+ try {
340
+ const token = await redeemMcpOAuthAuthorizationCode({
341
+ authorizationCode: body.get("code") ?? "",
342
+ codeVerifier: body.get("code_verifier") ?? "",
343
+ clientId: body.get("client_id") ?? "",
344
+ redirectUri: body.get("redirect_uri") ?? "",
345
+ }, { authorizationStore, connectionStore });
346
+ return c.json({
347
+ access_token: token.accessToken,
348
+ token_type: "Bearer",
349
+ ...(token.scope ? { scope: token.scope } : {}),
49
350
  });
50
- const server = createMcpServer(deps.mcpContext);
51
- await server.connect(transport);
52
- return transport.handleRequest(c.req.raw, { authInfo });
53
351
  }
54
- // No OAuth configured — open access (dev/local mode)
55
- const transport = new WebStandardStreamableHTTPServerTransport({
56
- enableJsonResponse: true,
352
+ catch (err) {
353
+ return c.json({
354
+ error: err instanceof McpOAuthAuthorizationError
355
+ ? err.code
356
+ : "invalid_grant",
357
+ error_description: err instanceof Error ? err.message : String(err),
358
+ }, 400);
359
+ }
360
+ });
361
+ app.get("/v1/mcp/oauth/authorizations/:id", async (c) => {
362
+ const err = await requireOwner(c);
363
+ if (err)
364
+ return err;
365
+ const record = await authorizationStore.getById(c.req.param("id"));
366
+ if (!record) {
367
+ return c.json(jsonError(404, "NOT_FOUND", "Authorization not found"), 404);
368
+ }
369
+ return c.json(toMcpOAuthAuthorizationView(record));
370
+ });
371
+ app.post("/v1/mcp/oauth/authorizations/:id/approve", async (c) => {
372
+ const err = await requireOwner(c);
373
+ if (err)
374
+ return err;
375
+ let body = {};
376
+ try {
377
+ body = (await c.req.json());
378
+ }
379
+ catch {
380
+ return c.json(jsonError(400, "INVALID_BODY", "Body must be JSON"), 400);
381
+ }
382
+ if (Array.isArray(body.scopes) && body.scopes.length > 0) {
383
+ if (!deps.gatewayConfig?.url) {
384
+ return c.json(jsonError(500, "SERVER_NOT_CONFIGURED", "Gateway config is not configured"), 500);
385
+ }
386
+ try {
387
+ const approved = await approveMcpOAuthAuthorizationWithScopes({
388
+ authorizationId: c.req.param("id"),
389
+ scopes: body.scopes,
390
+ ...(body.expiresAt !== undefined
391
+ ? { expiresAt: body.expiresAt }
392
+ : {}),
393
+ ...(body.nonce !== undefined ? { nonce: body.nonce } : {}),
394
+ }, {
395
+ connectionStore,
396
+ authorizationStore,
397
+ gateway: deps.gateway,
398
+ gatewayConfig: deps.gatewayConfig,
399
+ gatewayUrl: deps.gatewayConfig.url,
400
+ serverOwner: deps.serverOwner,
401
+ serverSigner: deps.serverSigner,
402
+ });
403
+ return c.json({ redirectTo: approved.redirectTo });
404
+ }
405
+ catch (err) {
406
+ if (err instanceof McpOAuthAuthorizationError) {
407
+ return c.json(jsonError(err.status, err.code, err.message), err.status);
408
+ }
409
+ throw err;
410
+ }
411
+ }
412
+ if (!Array.isArray(body.grants) || body.grants.length === 0) {
413
+ return c.json(jsonError(400, "GRANTS_REQUIRED", "Approve requires grants or scopes"), 400);
414
+ }
415
+ try {
416
+ const approved = await approveMcpOAuthAuthorization({ authorizationId: c.req.param("id"), grants: body.grants }, { connectionStore, authorizationStore });
417
+ return c.json({ redirectTo: approved.redirectTo });
418
+ }
419
+ catch (err) {
420
+ if (err instanceof McpOAuthAuthorizationError) {
421
+ return c.json(jsonError(err.status, err.code, err.message), err.status);
422
+ }
423
+ throw err;
424
+ }
425
+ });
426
+ return app;
427
+ }
428
+ /**
429
+ * Hono sub-app for the Claude-facing Streamable HTTP endpoint.
430
+ * Mount under `/mcp` in `app.ts`; stable `/mcp` accepts OAuth bearer tokens
431
+ * and legacy `/mcp/:connectionToken` still accepts token-in-path calls.
432
+ *
433
+ * NOTE: this MUST receive the SAME `connectionStore` instance you pass to
434
+ * `mcpConnectionsRoutes` — otherwise the management API creates connections
435
+ * that the Claude endpoint can never see.
436
+ */
437
+ export function mcpStreamableHttpRoutes(deps) {
438
+ const app = new Hono();
439
+ const store = deps.connectionStore ?? createInMemoryMcpConnectionStore();
440
+ if (!deps.connectionStore) {
441
+ deps.logger.warn("mcpStreamableHttpRoutes: no connectionStore passed; using a fresh in-memory store. The management routes will not see these connections unless they share the same store.");
442
+ }
443
+ async function handleToken(c, rawToken, options) {
444
+ if (!rawToken) {
445
+ if (!options.oauthChallenge) {
446
+ return c.json(jsonError(401, "INVALID_TOKEN", "Missing MCP connection token"), 401);
447
+ }
448
+ return mcpUnauthorized(resolveOrigin(deps.serverOrigin));
449
+ }
450
+ const tokenHash = await hashConnectionToken(rawToken);
451
+ const record = await store.getByTokenHash(tokenHash);
452
+ if (!record) {
453
+ if (!options.oauthChallenge) {
454
+ return c.json(jsonError(401, "INVALID_TOKEN", "Unknown or revoked MCP connection"), 401);
455
+ }
456
+ return mcpUnauthorized(resolveOrigin(deps.serverOrigin), "Unknown or revoked MCP connection");
457
+ }
458
+ let dataApiDeps;
459
+ try {
460
+ dataApiDeps = buildDataApiDeps(deps);
461
+ }
462
+ catch (caught) {
463
+ deps.logger.error({ err: caught }, "mcp route data deps failed");
464
+ return c.json(jsonError(500, "SERVER_NOT_CONFIGURED", String(caught)), 500);
465
+ }
466
+ const granteeAccount = loadMcpGranteeAccount({
467
+ address: record.granteeAddress,
468
+ publicKey: record.granteePublicKey,
469
+ encryptedPrivateKey: record.encryptedGranteePrivateKey,
57
470
  });
58
- const server = createMcpServer(deps.mcpContext);
59
- await server.connect(transport);
60
- return transport.handleRequest(c.req.raw);
471
+ const readClient = createMcpDataReadClient({
472
+ serverOrigin: resolveOrigin(deps.serverOrigin),
473
+ granteeAccount,
474
+ dataApiDeps,
475
+ });
476
+ const response = await handleMcpStreamableHttpRequest(c.req.raw, {
477
+ connection: record,
478
+ readClient,
479
+ activityRecorder: deps.activityRecorder,
480
+ });
481
+ void store
482
+ .update(record.id, {
483
+ lastUsedAt: new Date().toISOString(),
484
+ })
485
+ .catch((err) => {
486
+ console.warn("[mcp] failed to update lastUsedAt", err);
487
+ });
488
+ return response;
489
+ }
490
+ app.all("/", async (c) => handleToken(c, bearerToken(c.req.raw), {
491
+ oauthChallenge: Boolean(resolveApprovalUrl(deps)),
492
+ }));
493
+ app.all("/:connectionToken", async (c) => {
494
+ const rawToken = c.req.param("connectionToken");
495
+ return handleToken(c, rawToken, { oauthChallenge: false });
496
+ });
497
+ return app;
498
+ }
499
+ /**
500
+ * Owner-only activity feed route. Mount at `/v1/mcp/activity` in `app.ts`.
501
+ * Returns the current snapshot from the shared `McpActivityRecorder`.
502
+ */
503
+ export function mcpActivityRoutes(deps) {
504
+ const app = new Hono();
505
+ const ownerAuth = createServerApiAuth({
506
+ serverOrigin: deps.serverOrigin,
507
+ serverOwner: deps.serverOwner,
508
+ gateway: deps.gateway,
509
+ devToken: deps.devToken,
510
+ accessToken: deps.accessToken,
511
+ tokenStore: deps.tokenStore,
512
+ });
513
+ async function requireOwner(c) {
514
+ try {
515
+ await ownerAuth.authorizeOwner(c.req.raw);
516
+ return null;
517
+ }
518
+ catch (err) {
519
+ if (err instanceof ProtocolError) {
520
+ return c.json(err.toJSON(), err.code);
521
+ }
522
+ throw err;
523
+ }
524
+ }
525
+ app.get("/", async (c) => {
526
+ const err = await requireOwner(c);
527
+ if (err)
528
+ return err;
529
+ const snapshot = deps.activityRecorder
530
+ ? deps.activityRecorder.snapshot()
531
+ : { events: [], running: 0, total: 0 };
532
+ return c.json(snapshot);
61
533
  });
62
534
  return app;
63
535
  }
536
+ export { buildMcpUrl, buildStableMcpUrl };
64
537
  //# sourceMappingURL=mcp.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/routes/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,wCAAwC,EAAE,MAAM,+DAA+D,CAAC;AACzH,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAUvE,MAAM,UAAU,QAAQ,CAAC,IAAkB;IACzC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,gDAAgD;QAChD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACjD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrD,IAAI,MAAc,CAAC;gBACnB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtB,MAAM,CAAC,GACL,OAAO,IAAI,CAAC,YAAY,KAAK,UAAU;wBACrC,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE;wBACrB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;oBACxB,MAAM,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBACrC,CAAC;gBACD,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,cAAc;oBACrB,iBAAiB,EAAE,uBAAuB;iBAC3C,CAAC,EACF;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,kBAAkB,EAAE,6BAA6B,MAAM,wCAAwC;wBAC/F,cAAc,EAAE,kBAAkB;qBACnC;iBACF,CACF,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,eAAe;oBACtB,iBAAiB,EAAE,0BAA0B;iBAC9C,CAAC,EACF;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,kBAAkB,EAAE,8BAA8B;wBAClD,cAAc,EAAE,kBAAkB;qBACnC;iBACF,CACF,CAAC;YACJ,CAAC;YAED,qCAAqC;YACrC,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC;gBAC7D,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,OAAO,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,qDAAqD;QACrD,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC;YAC7D,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}
1
+ {"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/routes/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAO5B,OAAO,EACL,4BAA4B,EAC5B,sCAAsC,EACtC,oBAAoB,EACpB,oCAAoC,EACpC,WAAW,EACX,iBAAiB,EACjB,wCAAwC,EACxC,mBAAmB,EACnB,2BAA2B,EAC3B,gCAAgC,EAChC,uBAAuB,EACvB,8BAA8B,EAC9B,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACvB,0BAA0B,EAC1B,+BAA+B,EAC/B,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,GAKpB,MAAM,2CAA2C,CAAC;AAMnD,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAUrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAwCxE,SAAS,aAAa,CAAC,MAA+B;IACpD,OAAO,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,SAAiB,EAAE,OAAe;IACnE,OAAO;QACL,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3D,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CACtB,MAAc,EACd,OAAO,GAAG,4BAA4B;IAEtC,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC,EAC5D;QACE,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,kBAAkB,EAAE,6BAA6B,oCAAoC,CAAC,MAAM,CAAC,sBAAsB;SACpH;KACF,CACF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,MAAc;IACjD,OAAO;QACL,MAAM,EAAE,MAAM;QACd,sBAAsB,EAAE,GAAG,MAAM,sBAAsB;QACvD,cAAc,EAAE,GAAG,MAAM,kBAAkB;QAC3C,qBAAqB,EAAE,GAAG,MAAM,qBAAqB;QACrD,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;QAC7C,qCAAqC,EAAE,CAAC,MAAM,CAAC;QAC/C,gCAAgC,EAAE,CAAC,MAAM,CAAC;QAC1C,gBAAgB,EAAE,CAAC,WAAW,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAc;IAC/C,OAAO;QACL,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC;QACnC,qBAAqB,EAAE,CAAC,MAAM,CAAC;QAC/B,wBAAwB,EAAE,CAAC,QAAQ,CAAC;QACpC,gBAAgB,EAAE,CAAC,WAAW,CAAC;QAC/B,aAAa,EAAE,0BAA0B;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAkB;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACvD,CAAC;AAED,SAAS,sBAAsB,CAC7B,WAAmB,EACnB,KAAa,EACb,WAAmB,EACnB,KAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;QACvD,IAAI,KAAK;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;YACb,KAAK;YACL,iBAAiB,EAAE,WAAW;YAC9B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5B,CAAC,EACF;YACE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAgB;IAC3C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAkB;IAC1C,MAAM,WAAW,GACf,IAAI,CAAC,WAAW;QAChB,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,gBAAgB;YACzC,CAAC,CAAC,qBAAqB,CAAC;gBACpB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;aACxC,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,wGAAwG,CACzG,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAA8B,mBAAmB,CAAC;QAC1D,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW;QACX,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;KAC9C,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,IAAI;QACJ,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAkB;IACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,IAAI,gCAAgC,EAAE,CAAC;IAEzE,MAAM,SAAS,GAA8B,mBAAmB,CAAC;QAC/D,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IAEH,KAAK,UAAU,YAAY,CAAC,CAAU;QACpC,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,IAAiB,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,IAAI,IAAI,GAA6B,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAA6B,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CACvC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EACjC,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAC1D,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,IAAI,GAAsC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAsC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CACP,GAAG,EACH,iBAAiB,EACjB,6EAA6E,CAC9E,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACxC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EACzC,EAAE,KAAK,EAAE,CACV,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,IAAI,MAAM,YAAY,0BAA0B,EAAE,CAAC;gBACjD,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,MAAM,YAAY,uBAAuB,EAAE,CAAC;gBAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,MAAM,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,IAAI,MAAM,YAAY,0BAA0B,EAAE,CAAC;gBACjD,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,MAAM,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAkB;IAC/C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,eAAe,GACnB,IAAI,CAAC,eAAe,IAAI,gCAAgC,EAAE,CAAC;IAC7D,MAAM,kBAAkB,GACtB,IAAI,CAAC,uBAAuB,IAAI,wCAAwC,EAAE,CAAC;IAE7E,MAAM,SAAS,GAA8B,mBAAmB,CAAC;QAC/D,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IAEH,KAAK,UAAU,YAAY,CAAC,CAAU;QACpC,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,IAAiB,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,2CAA2C,EAAE,CAAC,CAAC,EAAE,EAAE,CACzD,kBAAkB,CAAC,IAAI,CAAC;QACtB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC,CAAC,IAAI,CACJ,SAAS,CACP,GAAG,EACH,0BAA0B,EAC1B,6BAA6B,CAC9B,EACD,GAAG,CACJ,CACN,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,yCAAyC,EAAE,CAAC,CAAC,EAAE,EAAE,CACvD,kBAAkB,CAAC,IAAI,CAAC;QACtB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC,CAAC,IAAI,CACJ,SAAS,CACP,GAAG,EACH,0BAA0B,EAC1B,6BAA6B,CAC9B,EACD,GAAG,CACJ,CACN,CAAC;IAEF,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CACP,GAAG,EACH,0BAA0B,EAC1B,6BAA6B,CAC9B,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,GAAuD,EAAE,CAAC;QAClE,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CACX;YACE,SAAS,EAAE,cAAc,MAAM,CAAC,UAAU,EAAE,EAAE;YAC9C,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,QAAQ;YACzC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;gBAC9C,CAAC,CAAC,IAAI,CAAC,aAAa;gBACpB,CAAC,CAAC,EAAE;YACN,0BAA0B,EAAE,MAAM;YAClC,WAAW,EAAE,CAAC,oBAAoB,CAAC;YACnC,cAAc,EAAE,CAAC,MAAM,CAAC;SACzB,EACD,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CACP,GAAG,EACH,0BAA0B,EAC1B,6BAA6B,CAC9B,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QACnE,MAAM,mBAAmB,GACvB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC;QAE3D,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,sBAAsB,CAC3B,WAAW,EACX,2BAA2B,EAC3B,sCAAsC,EACtC,KAAK,CACN,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAC/C;gBACE,QAAQ;gBACR,WAAW;gBACX,aAAa;gBACb,mBAAmB;gBACnB,KAAK;gBACL,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5B,EACD;gBACE,eAAe;gBACf,kBAAkB;gBAClB,YAAY,EAAE,MAAM;aACrB,CACF,CAAC;YACF,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CACP,GAAG,EACH,0BAA0B,EAC1B,0CAA0C,CAC3C,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;YACrC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;YACvE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC9C,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,sBAAsB,CAC3B,WAAW,EACX,GAAG,YAAY,0BAA0B;gBACvC,CAAC,CAAC,GAAG,CAAC,IAAI;gBACV,CAAC,CAAC,iBAAiB,EACrB,OAAO,EACP,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CACP,GAAG,EACH,0BAA0B,EAC1B,6BAA6B,CAC9B,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,oBAAoB,EAAE,CAAC;YACpD,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,wBAAwB;gBAC/B,iBAAiB,EAAE,sCAAsC;aAC1D,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,+BAA+B,CACjD;gBACE,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;gBACzC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE;gBAC7C,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE;gBACrC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE;aAC5C,EACD,EAAE,kBAAkB,EAAE,eAAe,EAAE,CACxC,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,YAAY,EAAE,KAAK,CAAC,WAAW;gBAC/B,UAAU,EAAE,QAAQ;gBACpB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EACH,GAAG,YAAY,0BAA0B;oBACvC,CAAC,CAAC,GAAG,CAAC,IAAI;oBACV,CAAC,CAAC,eAAe;gBACrB,iBAAiB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACpE,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,kCAAkC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,yBAAyB,CAAC,EACtD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,0CAA0C,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/D,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,IAAI,IAAI,GAKJ,EAAE,CAAC;QACP,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC;gBAC7B,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CACP,GAAG,EACH,uBAAuB,EACvB,kCAAkC,CACnC,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,sCAAsC,CAC3D;oBACE,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAClC,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS;wBAC9B,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;wBAC/B,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3D,EACD;oBACE,eAAe;oBACf,kBAAkB;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG;oBAClC,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;iBAChC,CACF,CAAC;gBACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,0BAA0B,EAAE,CAAC;oBAC9C,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,EAC5C,GAAG,CAAC,MAAyB,CAC9B,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,GAAG,EAAE,iBAAiB,EAAE,mCAAmC,CAAC,EACtE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CACjD,EAAE,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAC3D,EAAE,eAAe,EAAE,kBAAkB,EAAE,CACxC,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,0BAA0B,EAAE,CAAC;gBAC9C,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,EAC5C,GAAG,CAAC,MAAyB,CAC9B,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAkB;IACxD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,IAAI,gCAAgC,EAAE,CAAC;IACzE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2KAA2K,CAC5K,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,WAAW,CACxB,CAAU,EACV,QAAuB,EACvB,OAAoC;QAEpC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC5B,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,8BAA8B,CAAC,EAC/D,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,OAAO,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC5B,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,mCAAmC,CAAC,EACpE,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,OAAO,eAAe,CACpB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAChC,mCAAmC,CACpC,CAAC;QACJ,CAAC;QACD,IAAI,WAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CACX,SAAS,CAAC,GAAG,EAAE,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EACvD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAG,qBAAqB,CAAC;YAC3C,OAAO,EAAE,MAAM,CAAC,cAAc;YAC9B,SAAS,EAAE,MAAM,CAAC,gBAAgB;YAClC,mBAAmB,EAAE,MAAM,CAAC,0BAA0B;SACvD,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,uBAAuB,CAAC;YACzC,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC;YAC9C,cAAc;YACd,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC/D,UAAU,EAAE,MAAM;YAClB,UAAU;YACV,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC,CAAC;QACH,KAAK,KAAK;aACP,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;YACjB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,OAAO,CAAC,IAAI,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACL,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CACvB,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;QACrC,cAAc,EAAE,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;KAClD,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAChD,OAAO,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAkB;IAClD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,MAAM,SAAS,GAA8B,mBAAmB,CAAC;QAC/D,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IAEH,KAAK,UAAU,YAAY,CAAC,CAAU;QACpC,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,IAAiB,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB;YACpC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE;YAClC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC"}