@privos_ai/app-server 0.1.0

package/dist/relay/relay-client.js

@@ -0,0 +1,447 @@
+import WebSocket from 'ws';
+import { buildPairingMetadata, } from '../app-descriptor.js';
+import { PARSE_ERROR, errorResponse, jsonRpcError, } from '../protocol/errors.js';
+import { AppServerRuntime, DEFAULT_MAX_MESSAGE_BYTES, relayCallerAuthSurface, resolveCallerCredential, } from '../runtime.js';
+import { MessageTooLargeError, rawDataToText } from './message-adapter.js';
+const BACKOFF_MS = [1_000, 2_000, 5_000, 10_000, 30_000];
+const DEFAULT_PAIRING_TIMEOUT_MS = 30_000;
+const DEFAULT_OAUTH_TIMEOUT_MS = 15_000;
+const DEFAULT_OPEN_HANDSHAKE_TIMEOUT_MS = 15_000;
+/**
+ * Pair with Privos using a one-time pairing URL.
+ * Does not persist credentials — caller is responsible for saving them.
+ */
+export function pairOverWebSocket(pairUrl, appMeta, WebSocketImpl = WebSocket, options) {
+    const timeoutMs = options?.timeoutMs ?? DEFAULT_PAIRING_TIMEOUT_MS;
+    return new Promise((resolve, reject) => {
+        const ws = new WebSocketImpl(pairUrl);
+        let settled = false;
+        const settle = (fn) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            fn();
+        };
+        const timer = setTimeout(() => {
+            settle(() => {
+                try {
+                    ws.close();
+                }
+                catch {
+                    /* ignore */
+                }
+                reject(new Error(`Pairing timed out after ${timeoutMs}ms`));
+            });
+        }, timeoutMs);
+        ws.on('open', () => {
+            try {
+                ws.send(JSON.stringify({
+                    name: appMeta.name,
+                    description: appMeta.description || '',
+                    version: appMeta.version || '0.0.0',
+                    ...(appMeta.icon && { icon: appMeta.icon }),
+                    ...(appMeta.scopes?.length && { scopes: appMeta.scopes }),
+                }));
+            }
+            catch (err) {
+                settle(() => reject(err instanceof Error ? err : new Error(String(err))));
+            }
+        });
+        ws.on('message', (raw) => {
+            try {
+                const msg = JSON.parse(rawDataToText(raw));
+                if (msg.error) {
+                    settle(() => reject(new Error(msg.error?.message || 'Pairing failed')));
+                    return;
+                }
+                if (msg.result?.paired) {
+                    const { clientId, clientSecret, relayUrl, app, mcpAppId, appId } = msg.result;
+                    if (!clientId || !clientSecret || !relayUrl) {
+                        settle(() => reject(new Error('Pairing response missing credentials')));
+                        return;
+                    }
+                    const privosUrl = relayUrl
+                        .replace(/^ws/, 'http')
+                        .replace(/\/api\/v1\/mcp-apps\.relay.*/, '');
+                    const resolvedAppId = (typeof mcpAppId === 'string' && mcpAppId) ||
+                        (typeof appId === 'string' && appId) ||
+                        (typeof app?._id === 'string' && app._id) ||
+                        undefined;
+                    settle(() => resolve({
+                        privosUrl,
+                        clientId,
+                        clientSecret,
+                        mcpAppId: resolvedAppId,
+                    }));
+                    try {
+                        ws.close();
+                    }
+                    catch {
+                        /* ignore */
+                    }
+                }
+            }
+            catch (err) {
+                settle(() => reject(err instanceof Error ? err : new Error(String(err))));
+            }
+        });
+        ws.on('error', (err) => {
+            settle(() => reject(new Error(`Pairing failed: ${err.message}`)));
+        });
+        ws.on('close', (code, reason) => {
+            // Any close before a paired result ends the promise (including 1000).
+            settle(() => {
+                if (code === 1000) {
+                    reject(new Error('Pairing closed before credentials were received'));
+                }
+                else {
+                    reject(new Error(`Pairing closed: ${code} ${reason}`));
+                }
+            });
+        });
+    });
+}
+export async function pairFromDescriptor(pairUrl, descriptor, WebSocketImpl, options) {
+    return pairOverWebSocket(pairUrl, buildPairingMetadata(descriptor), WebSocketImpl, options);
+}
+/**
+ * Connect to PrivOS relay WebSocket with exponential backoff, token refresh,
+ * single reconnect timer, and explicit stop().
+ */
+export function connectRelay(opts) {
+    const fetchImpl = opts.fetchImpl ?? fetch;
+    const WebSocketImpl = opts.WebSocketImpl ?? WebSocket;
+    const runtime = opts.runtime ??
+        new AppServerRuntime({
+            descriptor: opts.descriptor,
+            handler: opts.handler,
+            ui: opts.ui,
+            auth: opts.auth,
+            mapAppError: opts.mapAppError,
+            limits: opts.limits,
+            logger: opts.logger,
+        });
+    const maxMessageBytes = opts.limits?.maxMessageBytes ??
+        runtime.getLimits().maxMessageBytes ??
+        DEFAULT_MAX_MESSAGE_BYTES;
+    const oauthTimeoutMs = opts.oauthTimeoutMs ?? DEFAULT_OAUTH_TIMEOUT_MS;
+    const openHandshakeTimeoutMs = opts.openHandshakeTimeoutMs ?? DEFAULT_OPEN_HANDSHAKE_TIMEOUT_MS;
+    const maxBufferedBytes = runtime.getLimits().maxBufferedBytes;
+    let stopped = false;
+    let activeWs = null;
+    let reconnectTimer = null;
+    let openHandshakeTimer = null;
+    let backoffIndex = 0;
+    let connectGeneration = 0;
+    let oauthAbort = null;
+    let connectedResolve = null;
+    let connectedReject = null;
+    let connectedOnce = false;
+    const connectedPromise = new Promise((resolve, reject) => {
+        connectedResolve = resolve;
+        connectedReject = reject;
+    });
+    // Prevent unhandledrejection when consumers never call whenConnected().
+    // Explicit await whenConnected() still receives the rejection.
+    void connectedPromise.catch(() => undefined);
+    const log = (event, fields = {}) => {
+        opts.logger?.(event, fields);
+    };
+    const clearReconnectTimer = () => {
+        if (reconnectTimer) {
+            clearTimeout(reconnectTimer);
+            reconnectTimer = null;
+        }
+    };
+    const clearOpenHandshakeTimer = () => {
+        if (openHandshakeTimer) {
+            clearTimeout(openHandshakeTimer);
+            openHandshakeTimer = null;
+        }
+    };
+    const scheduleReconnect = () => {
+        if (stopped)
+            return;
+        if (reconnectTimer)
+            return;
+        const delay = BACKOFF_MS[Math.min(backoffIndex, BACKOFF_MS.length - 1)] ?? 30_000;
+        backoffIndex = Math.min(backoffIndex + 1, BACKOFF_MS.length - 1);
+        log('relay.reconnect.scheduled', { delayMs: delay });
+        reconnectTimer = setTimeout(() => {
+            reconnectTimer = null;
+            void openConnection().catch((err) => {
+                log('relay.open_unhandled', {
+                    message: err instanceof Error ? err.message : String(err),
+                });
+            });
+        }, delay);
+    };
+    async function getAccessToken(signal) {
+        const res = await fetchImpl(`${opts.privosUrl}/oauth/token`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: `grant_type=client_credentials&client_id=${encodeURIComponent(opts.clientId)}&client_secret=${encodeURIComponent(opts.clientSecret)}`,
+            signal,
+        });
+        if (!res.ok)
+            throw new Error(`OAuth token failed: ${res.status} ${res.statusText}`);
+        const data = (await res.json());
+        if (!data.access_token)
+            throw new Error('No access_token in response');
+        return data.access_token;
+    }
+    async function openConnection() {
+        if (stopped)
+            return;
+        const generation = ++connectGeneration;
+        oauthAbort?.abort();
+        oauthAbort = new AbortController();
+        const oauthTimer = setTimeout(() => oauthAbort?.abort(), oauthTimeoutMs);
+        try {
+            const accessToken = await getAccessToken(oauthAbort.signal);
+            if (stopped || generation !== connectGeneration)
+                return;
+            const wsUrl = opts.privosUrl.replace(/^http/, 'ws') + '/api/v1/mcp-apps.relay';
+            const ws = new WebSocketImpl(wsUrl, {
+                headers: { Authorization: `Bearer ${accessToken}` },
+            });
+            if (activeWs && activeWs !== ws) {
+                try {
+                    activeWs.removeAllListeners();
+                    activeWs.close();
+                }
+                catch {
+                    /* ignore */
+                }
+            }
+            activeWs = ws;
+            clearOpenHandshakeTimer();
+            openHandshakeTimer = setTimeout(() => {
+                openHandshakeTimer = null;
+                if (stopped || generation !== connectGeneration)
+                    return;
+                if (ws.readyState === WebSocketImpl.OPEN)
+                    return;
+                log('relay.open_handshake_timeout', {
+                    generation,
+                    timeoutMs: openHandshakeTimeoutMs,
+                });
+                try {
+                    ws.close();
+                }
+                catch {
+                    /* ignore */
+                }
+                // close handler schedules reconnect when generation still current
+            }, openHandshakeTimeoutMs);
+            ws.on('open', () => {
+                clearOpenHandshakeTimer();
+                if (stopped || generation !== connectGeneration) {
+                    try {
+                        ws.close();
+                    }
+                    catch {
+                        /* ignore */
+                    }
+                    return;
+                }
+                backoffIndex = 0;
+                log('relay.connected', { generation });
+                if (!connectedOnce) {
+                    connectedOnce = true;
+                    connectedResolve?.();
+                }
+            });
+            ws.on('message', (raw) => {
+                void handleMessage(ws, generation, raw).catch((err) => {
+                    log('relay.message_unhandled', {
+                        reason: 'handler_failed',
+                        generation,
+                        ...(err instanceof Error ? { name: err.name } : {}),
+                    });
+                });
+            });
+            ws.on('ping', () => {
+                try {
+                    ws.pong();
+                }
+                catch {
+                    /* ignore */
+                }
+            });
+            ws.on('close', (code) => {
+                clearOpenHandshakeTimer();
+                log('relay.disconnected', { code, generation });
+                if (activeWs === ws)
+                    activeWs = null;
+                if (!stopped && generation === connectGeneration) {
+                    scheduleReconnect();
+                }
+            });
+            ws.on('error', (err) => {
+                log('relay.ws_error', { reason: 'ws_error', generation, name: err.name });
+            });
+        }
+        catch (err) {
+            log('relay.connect_failed', {
+                message: err instanceof Error ? err.message : String(err),
+                generation,
+            });
+            if (!stopped && generation === connectGeneration) {
+                scheduleReconnect();
+            }
+        }
+        finally {
+            clearTimeout(oauthTimer);
+        }
+    }
+    function safeSend(ws, payload, rpcFields = {}) {
+        if (ws.readyState !== WebSocketImpl.OPEN)
+            return;
+        if (typeof ws.bufferedAmount === 'number' && ws.bufferedAmount > maxBufferedBytes) {
+            log('relay.backpressure', {
+                bufferedAmount: ws.bufferedAmount,
+                maxBufferedBytes,
+            });
+            return;
+        }
+        let text;
+        try {
+            text = JSON.stringify(payload);
+        }
+        catch {
+            log('relay.serialize_error', { reason: 'json_stringify_failed' });
+            return;
+        }
+        try {
+            const payloadObject = payload && typeof payload === 'object' && !Array.isArray(payload)
+                ? payload
+                : undefined;
+            const responseId = payloadObject &&
+                Object.prototype.hasOwnProperty.call(payloadObject, 'id') &&
+                (typeof payloadObject.id === 'string' ||
+                    typeof payloadObject.id === 'number' ||
+                    payloadObject.id === null)
+                ? payloadObject.id
+                : undefined;
+            log('relay.rpc.outbound', {
+                direction: '→',
+                ...rpcFields,
+                ...(responseId !== undefined ? { requestId: responseId } : {}),
+                responseKind: payloadObject && 'error' in payloadObject ? 'error' : 'result',
+            });
+            ws.send(text, (err) => {
+                if (err) {
+                    log('relay.send_error', { reason: 'send_callback_error', name: err.name });
+                }
+            });
+        }
+        catch (err) {
+            log('relay.send_error', {
+                reason: 'send_threw',
+                ...(err instanceof Error ? { name: err.name } : {}),
+            });
+        }
+    }
+    async function handleMessage(ws, generation, raw) {
+        if (stopped || generation !== connectGeneration)
+            return;
+        let text;
+        try {
+            text = rawDataToText(raw, maxMessageBytes);
+        }
+        catch (err) {
+            log('relay.message_too_large', {
+                message: err instanceof Error ? err.message : String(err),
+                ...(err instanceof MessageTooLargeError
+                    ? { bytes: err.bytes, maxBytes: err.maxBytes }
+                    : {}),
+            });
+            try {
+                ws.close(1009, 'Message too large');
+            }
+            catch {
+                /* ignore */
+            }
+            return;
+        }
+        let parsedJson;
+        try {
+            parsedJson = JSON.parse(text);
+        }
+        catch {
+            safeSend(ws, errorResponse(null, jsonRpcError(PARSE_ERROR, 'Parse error')), {
+                generation,
+            });
+            return;
+        }
+        const msgObj = parsedJson && typeof parsedJson === 'object' && !Array.isArray(parsedJson)
+            ? parsedJson
+            : {};
+        const authSurface = relayCallerAuthSurface(msgObj);
+        const credentialResolution = await resolveCallerCredential(opts.extractCallerCredential, authSurface);
+        const requestId = Object.prototype.hasOwnProperty.call(msgObj, 'id') &&
+            (typeof msgObj.id === 'string' || typeof msgObj.id === 'number' || msgObj.id === null)
+            ? msgObj.id
+            : undefined;
+        const method = typeof msgObj.method === 'string' ? msgObj.method : undefined;
+        const params = msgObj.params && typeof msgObj.params === 'object' && !Array.isArray(msgObj.params)
+            ? msgObj.params
+            : undefined;
+        const toolName = method === 'tools/call' && typeof params?.name === 'string' ? params.name : undefined;
+        log('relay.rpc.inbound', {
+            direction: '←',
+            generation,
+            ...(requestId !== undefined ? { requestId } : { notification: true }),
+            ...(method ? { method } : {}),
+            ...(toolName ? { toolName } : {}),
+        });
+        const context = await runtime.buildContext({
+            transport: 'relay',
+            requestId,
+            sessionScope: `ws:${generation}`,
+            credentialResolution,
+        });
+        const outcome = await runtime.dispatchObject(parsedJson, context);
+        if (outcome.type === 'no_response' || outcome.type === 'protocol_warning') {
+            return;
+        }
+        safeSend(ws, outcome.response, { generation, method, toolName });
+    }
+    void openConnection().catch((err) => {
+        log('relay.open_unhandled', {
+            message: err instanceof Error ? err.message : String(err),
+        });
+    });
+    return {
+        whenConnected: () => connectedPromise,
+        async stop() {
+            stopped = true;
+            clearReconnectTimer();
+            clearOpenHandshakeTimer();
+            connectGeneration += 1;
+            oauthAbort?.abort();
+            oauthAbort = null;
+            const ws = activeWs;
+            activeWs = null;
+            if (ws) {
+                await new Promise((resolve) => {
+                    try {
+                        ws.once('close', () => resolve());
+                        ws.close();
+                        setTimeout(resolve, 0);
+                    }
+                    catch {
+                        resolve();
+                    }
+                });
+            }
+            if (!connectedOnce) {
+                connectedReject?.(new Error('Relay stopped before connecting'));
+            }
+            log('relay.stopped', {});
+        },
+    };
+}
+//# sourceMappingURL=relay-client.js.map

package/dist/relay/relay-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-client.js","sourceRoot":"","sources":["../../src/relay/relay-client.ts"],"names":[],"mappings":"AAAA,OAAO,SAA2B,MAAM,IAAI,CAAC;AAE7C,OAAO,EACN,oBAAoB,GAEpB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACN,WAAW,EACX,aAAa,EACb,YAAY,GACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACN,gBAAgB,EAChB,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,GAQvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAiB3E,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAClE,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,iCAAiC,GAAG,MAAM,CAAC;AAkCjD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAChC,OAAe,EACf,OAAoB,EACpB,gBAAkC,SAAS,EAC3C,OAAgC;IAEhC,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,0BAA0B,CAAC;IAEnE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,MAAM,GAAG,CAAC,EAAc,EAAE,EAAE;YACjC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,EAAE,EAAE,CAAC;QACN,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,MAAM,CAAC,GAAG,EAAE;gBACX,IAAI,CAAC;oBACJ,EAAE,CAAC,KAAK,EAAE,CAAC;gBACZ,CAAC;gBAAC,MAAM,CAAC;oBACR,YAAY;gBACb,CAAC;gBACD,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,SAAS,IAAI,CAAC,CAAC,CAAC;YAC7D,CAAC,CAAC,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YAClB,IAAI,CAAC;gBACJ,EAAE,CAAC,IAAI,CACN,IAAI,CAAC,SAAS,CAAC;oBACd,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;oBACtC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO;oBACnC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;oBAC3C,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;iBACzD,CAAC,CACF,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,CAAC,GAAG,EAAE,CACX,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAC3D,CAAC;YACH,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE;YACjC,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAWxC,CAAC;gBACF,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAC;oBACxE,OAAO;gBACR,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;oBACxB,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;oBAC9E,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC;wBAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC,CAAC;wBACxE,OAAO;oBACR,CAAC;oBACD,MAAM,SAAS,GAAG,QAAQ;yBACxB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;yBACtB,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;oBAC9C,MAAM,aAAa,GAClB,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC;wBAC1C,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC;wBACpC,CAAC,OAAO,GAAG,EAAE,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC;wBACzC,SAAS,CAAC;oBACX,MAAM,CAAC,GAAG,EAAE,CACX,OAAO,CAAC;wBACP,SAAS;wBACT,QAAQ;wBACR,YAAY;wBACZ,QAAQ,EAAE,aAAa;qBACvB,CAAC,CACF,CAAC;oBACF,IAAI,CAAC;wBACJ,EAAE,CAAC,KAAK,EAAE,CAAC;oBACZ,CAAC;oBAAC,MAAM,CAAC;wBACR,YAAY;oBACb,CAAC;gBACF,CAAC;YACF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,CAAC,GAAG,EAAE,CACX,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAC3D,CAAC;YACH,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC/B,sEAAsE;YACtE,MAAM,CAAC,GAAG,EAAE;gBACX,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;gBACtE,CAAC;qBAAM,CAAC;oBACP,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;gBACxD,CAAC;YACF,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,OAAe,EACf,UAAyB,EACzB,aAAgC,EAChC,OAAgC;IAEhC,OAAO,iBAAiB,CACvB,OAAO,EACP,oBAAoB,CAAC,UAAU,CAAC,EAChC,aAAa,EACb,OAAO,CACP,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAwB;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,SAAS,CAAC;IACtD,MAAM,OAAO,GACZ,IAAI,CAAC,OAAO;QACZ,IAAI,gBAAgB,CAAC;YACpB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;SACnB,CAAC,CAAC;IAEJ,MAAM,eAAe,GACpB,IAAI,CAAC,MAAM,EAAE,eAAe;QAC5B,OAAO,CAAC,SAAS,EAAE,CAAC,eAAe;QACnC,yBAAyB,CAAC;IAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC;IACvE,MAAM,sBAAsB,GAC3B,IAAI,CAAC,sBAAsB,IAAI,iCAAiC,CAAC;IAClE,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,gBAAgB,CAAC;IAE9D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAAqB,IAAI,CAAC;IACtC,IAAI,cAAc,GAAyC,IAAI,CAAC;IAChE,IAAI,kBAAkB,GAAyC,IAAI,CAAC;IACpE,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,UAAU,GAA2B,IAAI,CAAC;IAE9C,IAAI,gBAAgB,GAAwB,IAAI,CAAC;IACjD,IAAI,eAAe,GAAkC,IAAI,CAAC;IAC1D,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,MAAM,gBAAgB,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9D,gBAAgB,GAAG,OAAO,CAAC;QAC3B,eAAe,GAAG,MAAM,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,wEAAwE;IACxE,+DAA+D;IAC/D,KAAK,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE7C,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,SAAkC,EAAE,EAAE,EAAE;QACnE,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,GAAG,EAAE;QAChC,IAAI,cAAc,EAAE,CAAC;YACpB,YAAY,CAAC,cAAc,CAAC,CAAC;YAC7B,cAAc,GAAG,IAAI,CAAC;QACvB,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,uBAAuB,GAAG,GAAG,EAAE;QACpC,IAAI,kBAAkB,EAAE,CAAC;YACxB,YAAY,CAAC,kBAAkB,CAAC,CAAC;YACjC,kBAAkB,GAAG,IAAI,CAAC;QAC3B,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,GAAG,EAAE;QAC9B,IAAI,OAAO;YAAE,OAAO;QACpB,IAAI,cAAc;YAAE,OAAO;QAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;QAClF,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjE,GAAG,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,cAAc,GAAG,IAAI,CAAC;YACtB,KAAK,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACnC,GAAG,CAAC,sBAAsB,EAAE;oBAC3B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACzD,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;QACJ,CAAC,EAAE,KAAK,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,KAAK,UAAU,cAAc,CAAC,MAAmB;QAChD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,cAAc,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,2CAA2C,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;YAC3I,MAAM;SACN,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8B,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,YAAY,CAAC;IAC1B,CAAC;IAED,KAAK,UAAU,cAAc;QAC5B,IAAI,OAAO;YAAE,OAAO;QACpB,MAAM,UAAU,GAAG,EAAE,iBAAiB,CAAC;QACvC,UAAU,EAAE,KAAK,EAAE,CAAC;QACpB,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,cAAc,CAAC,CAAC;QAEzE,IAAI,CAAC;YACJ,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC5D,IAAI,OAAO,IAAI,UAAU,KAAK,iBAAiB;gBAAE,OAAO;YAExD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,wBAAwB,CAAC;YAC/E,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC,KAAK,EAAE;gBACnC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;aACnD,CAAC,CAAC;YAEH,IAAI,QAAQ,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACJ,QAAQ,CAAC,kBAAkB,EAAE,CAAC;oBAC9B,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAClB,CAAC;gBAAC,MAAM,CAAC;oBACR,YAAY;gBACb,CAAC;YACF,CAAC;YACD,QAAQ,GAAG,EAAE,CAAC;YAEd,uBAAuB,EAAE,CAAC;YAC1B,kBAAkB,GAAG,UAAU,CAAC,GAAG,EAAE;gBACpC,kBAAkB,GAAG,IAAI,CAAC;gBAC1B,IAAI,OAAO,IAAI,UAAU,KAAK,iBAAiB;oBAAE,OAAO;gBACxD,IAAI,EAAE,CAAC,UAAU,KAAK,aAAa,CAAC,IAAI;oBAAE,OAAO;gBACjD,GAAG,CAAC,8BAA8B,EAAE;oBACnC,UAAU;oBACV,SAAS,EAAE,sBAAsB;iBACjC,CAAC,CAAC;gBACH,IAAI,CAAC;oBACJ,EAAE,CAAC,KAAK,EAAE,CAAC;gBACZ,CAAC;gBAAC,MAAM,CAAC;oBACR,YAAY;gBACb,CAAC;gBACD,kEAAkE;YACnE,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAE3B,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBAClB,uBAAuB,EAAE,CAAC;gBAC1B,IAAI,OAAO,IAAI,UAAU,KAAK,iBAAiB,EAAE,CAAC;oBACjD,IAAI,CAAC;wBACJ,EAAE,CAAC,KAAK,EAAE,CAAC;oBACZ,CAAC;oBAAC,MAAM,CAAC;wBACR,YAAY;oBACb,CAAC;oBACD,OAAO;gBACR,CAAC;gBACD,YAAY,GAAG,CAAC,CAAC;gBACjB,GAAG,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;gBACvC,IAAI,CAAC,aAAa,EAAE,CAAC;oBACpB,aAAa,GAAG,IAAI,CAAC;oBACrB,gBAAgB,EAAE,EAAE,CAAC;gBACtB,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE;gBACjC,KAAK,aAAa,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACrD,GAAG,CAAC,yBAAyB,EAAE;wBAC9B,MAAM,EAAE,gBAAgB;wBACxB,UAAU;wBACV,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACnD,CAAC,CAAC;gBACJ,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBAClB,IAAI,CAAC;oBACJ,EAAE,CAAC,IAAI,EAAE,CAAC;gBACX,CAAC;gBAAC,MAAM,CAAC;oBACR,YAAY;gBACb,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACvB,uBAAuB,EAAE,CAAC;gBAC1B,GAAG,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;gBAChD,IAAI,QAAQ,KAAK,EAAE;oBAAE,QAAQ,GAAG,IAAI,CAAC;gBACrC,IAAI,CAAC,OAAO,IAAI,UAAU,KAAK,iBAAiB,EAAE,CAAC;oBAClD,iBAAiB,EAAE,CAAC;gBACrB,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACtB,GAAG,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3E,CAAC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,sBAAsB,EAAE;gBAC3B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACzD,UAAU;aACV,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,IAAI,UAAU,KAAK,iBAAiB,EAAE,CAAC;gBAClD,iBAAiB,EAAE,CAAC;YACrB,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,UAAU,CAAC,CAAC;QAC1B,CAAC;IACF,CAAC;IAED,SAAS,QAAQ,CAChB,EAAa,EACb,OAAgB,EAChB,YAAyE,EAAE;QAE3E,IAAI,EAAE,CAAC,UAAU,KAAK,aAAa,CAAC,IAAI;YAAE,OAAO;QACjD,IAAI,OAAO,EAAE,CAAC,cAAc,KAAK,QAAQ,IAAI,EAAE,CAAC,cAAc,GAAG,gBAAgB,EAAE,CAAC;YACnF,GAAG,CAAC,oBAAoB,EAAE;gBACzB,cAAc,EAAE,EAAE,CAAC,cAAc;gBACjC,gBAAgB;aAChB,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACJ,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACR,GAAG,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,aAAa,GAClB,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBAChE,CAAC,CAAE,OAAmC;gBACtC,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,UAAU,GACf,aAAa;gBACb,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC;gBACzD,CAAC,OAAO,aAAa,CAAC,EAAE,KAAK,QAAQ;oBACpC,OAAO,aAAa,CAAC,EAAE,KAAK,QAAQ;oBACpC,aAAa,CAAC,EAAE,KAAK,IAAI,CAAC;gBAC1B,CAAC,CAAE,aAAa,CAAC,EAA6B;gBAC9C,CAAC,CAAC,SAAS,CAAC;YACd,GAAG,CAAC,oBAAoB,EAAE;gBACzB,SAAS,EAAE,GAAG;gBACd,GAAG,SAAS;gBACZ,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,YAAY,EAAE,aAAa,IAAI,OAAO,IAAI,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;aAC5E,CAAC,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;gBACrB,IAAI,GAAG,EAAE,CAAC;oBACT,GAAG,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC5E,CAAC;YACF,CAAC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,kBAAkB,EAAE;gBACvB,MAAM,EAAE,YAAY;gBACpB,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,KAAK,UAAU,aAAa,CAC3B,EAAa,EACb,UAAkB,EAClB,GAAY;QAEZ,IAAI,OAAO,IAAI,UAAU,KAAK,iBAAiB;YAAE,OAAO;QAExD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACJ,IAAI,GAAG,aAAa,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,yBAAyB,EAAE;gBAC9B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACzD,GAAG,CAAC,GAAG,YAAY,oBAAoB;oBACtC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;oBAC9C,CAAC,CAAC,EAAE,CAAC;aACN,CAAC,CAAC;YACH,IAAI,CAAC;gBACJ,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACR,YAAY;YACb,CAAC;YACD,OAAO;QACR,CAAC;QAED,IAAI,UAAmB,CAAC;QACxB,IAAI,CAAC;YACJ,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACR,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,EAAE;gBAC3E,UAAU;aACV,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAED,MAAM,MAAM,GACX,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YACzE,CAAC,CAAE,UAAsC;YACzC,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,oBAAoB,GAAG,MAAM,uBAAuB,CACzD,IAAI,CAAC,uBAAuB,EAC5B,WAAW,CACX,CAAC;QAEF,MAAM,SAAS,GACd,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;YAClD,CAAC,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC;YACrF,CAAC,CAAE,MAAM,CAAC,EAA6B;YACvC,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7E,MAAM,MAAM,GACX,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YAClF,CAAC,CAAE,MAAM,CAAC,MAAkC;YAC5C,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,QAAQ,GACb,MAAM,KAAK,YAAY,IAAI,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,GAAG,CAAC,mBAAmB,EAAE;YACxB,SAAS,EAAE,GAAG;YACd,UAAU;YACV,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC;YAC1C,SAAS,EAAE,OAAO;YAClB,SAAS;YACT,YAAY,EAAE,MAAM,UAAU,EAAE;YAChC,oBAAoB;SACpB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAElE,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC3E,OAAO;QACR,CAAC;QAED,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACnC,GAAG,CAAC,sBAAsB,EAAE;YAC3B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACzD,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACN,aAAa,EAAE,GAAG,EAAE,CAAC,gBAAgB;QACrC,KAAK,CAAC,IAAI;YACT,OAAO,GAAG,IAAI,CAAC;YACf,mBAAmB,EAAE,CAAC;YACtB,uBAAuB,EAAE,CAAC;YAC1B,iBAAiB,IAAI,CAAC,CAAC;YACvB,UAAU,EAAE,KAAK,EAAE,CAAC;YACpB,UAAU,GAAG,IAAI,CAAC;YAClB,MAAM,EAAE,GAAG,QAAQ,CAAC;YACpB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,EAAE,EAAE,CAAC;gBACR,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBACnC,IAAI,CAAC;wBACJ,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;wBAClC,EAAE,CAAC,KAAK,EAAE,CAAC;wBACX,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBACxB,CAAC;oBAAC,MAAM,CAAC;wBACR,OAAO,EAAE,CAAC;oBACX,CAAC;gBACF,CAAC,CAAC,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACpB,eAAe,EAAE,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,GAAG,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC1B,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/runtime.d.ts

@@ -0,0 +1,104 @@
+import { MCP_UI_MIME, type AppDescriptor } from './app-descriptor.js';
+import { type AuthOptions, type CallerCredential } from './auth/user-token.js';
+import type { ToolCallContext } from './context/tool-call-context.js';
+import type { ApplicationMcpRequest, JsonRpcErrorObject, JsonRpcId, McpResponse, ParsedInbound } from './protocol/types.js';
+export type AppMcpHandler = (request: ApplicationMcpRequest, context: ToolCallContext) => Promise<unknown>;
+export type CallerCredentialExtractor<TIngress> = (ingress: TIngress) => CallerCredential | undefined | Promise<CallerCredential | undefined>;
+export type AppErrorMapper = (error: unknown, context: ToolCallContext) => JsonRpcErrorObject | undefined;
+export interface UiResourceProvider {
+    uri: string;
+    mimeType?: typeof MCP_UI_MIME | string;
+    renderHtml(input: {
+        params: unknown;
+        context: ToolCallContext;
+    }): string | Promise<string>;
+}
+export interface RuntimeLimits {
+    maxMessageBytes?: number;
+    requestTimeoutMs?: number;
+    maxInFlightRequests?: number;
+    maxResponseBytes?: number;
+    /** Max outbound WebSocket bufferedAmount before dropping a send (relay). */
+    maxBufferedBytes?: number;
+}
+export interface AppServerRuntimeOptions {
+    descriptor: AppDescriptor | (() => AppDescriptor | Promise<AppDescriptor>);
+    handler: AppMcpHandler;
+    ui?: UiResourceProvider;
+    auth?: AuthOptions;
+    mapAppError?: AppErrorMapper;
+    limits?: RuntimeLimits;
+    logger?: (event: string, fields: Record<string, unknown>) => void;
+}
+/** How caller credentials were resolved before JWT verify. */
+export type CallerCredentialResolution = {
+    kind: 'absent';
+} | {
+    kind: 'present';
+    credential: CallerCredential;
+} | {
+    kind: 'error';
+    message: string;
+};
+export type DispatchOutcome = {
+    type: 'response';
+    response: McpResponse;
+} | {
+    type: 'no_response';
+    reason: 'notification' | 'missing_request_id' | 'ignored_response';
+} | {
+    type: 'protocol_warning';
+    warning: string;
+    response?: McpResponse;
+};
+export declare const DEFAULT_MAX_MESSAGE_BYTES: number;
+export declare const DEFAULT_MAX_BUFFERED_BYTES: number;
+/** Distinguish number `1` from string `"1"` without separator collisions. */
+export declare function encodeInFlightId(id: JsonRpcId): string;
+export declare class AppServerRuntime {
+    /**
+     * Nested map: sessionScope → set of encodeInFlightId(id).
+     * Avoids String(id) collisions and colon-join ambiguities.
+     */
+    private readonly inFlight;
+    private readonly opts;
+    constructor(opts: AppServerRuntimeOptions);
+    getLimits(): Required<Pick<RuntimeLimits, 'maxMessageBytes' | 'requestTimeoutMs' | 'maxInFlightRequests' | 'maxResponseBytes' | 'maxBufferedBytes'>>;
+    private inFlightCount;
+    private hasInFlight;
+    private addInFlight;
+    private deleteInFlight;
+    resolveDescriptor(): Promise<AppDescriptor>;
+    buildContext(input: {
+        transport: 'direct' | 'relay';
+        requestId?: JsonRpcId;
+        /** Required for duplicate-id scope. */
+        sessionScope: string;
+        credentialResolution?: CallerCredentialResolution;
+        traceId?: string;
+        signal?: AbortSignal;
+    }): Promise<ToolCallContext>;
+    dispatchParsed(parsed: ParsedInbound, context: ToolCallContext): Promise<DispatchOutcome>;
+    dispatchObject(raw: unknown, context: ToolCallContext): Promise<DispatchOutcome>;
+    dispatchText(text: string, context: ToolCallContext): Promise<DispatchOutcome>;
+    private handleRequest;
+    private log;
+}
+/** Built-in Direct header extractor — never reads body/arguments. */
+export declare function extractDirectCallerCredential(headers: {
+    authorization?: string | string[] | undefined;
+    'x-mcp-user-id'?: string | string[] | undefined;
+    [key: string]: string | string[] | undefined;
+}): CallerCredential | undefined;
+/**
+ * Reserved Relay auth surface only — never includes `params` / `arguments`.
+ * Extractors receive this shape, not the full JSON-RPC message.
+ */
+export interface RelayCallerAuthSurface {
+    _meta?: unknown;
+    meta?: unknown;
+}
+export declare function relayCallerAuthSurface(message: Record<string, unknown>): RelayCallerAuthSurface;
+export declare function resolveCallerCredential<TIngress>(extract: CallerCredentialExtractor<TIngress> | undefined, ingress: TIngress): Promise<CallerCredentialResolution>;
+export declare function ephemeralSessionScope(prefix?: string): string;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAEA,OAAO,EAEN,WAAW,EACX,KAAK,aAAa,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,gBAAgB,EAErB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAkBtE,OAAO,KAAK,EACX,qBAAqB,EACrB,kBAAkB,EAClB,SAAS,EACT,WAAW,EACX,aAAa,EACb,MAAM,qBAAqB,CAAC;AAE7B,MAAM,MAAM,aAAa,GAAG,CAC3B,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,eAAe,KACpB,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,MAAM,MAAM,yBAAyB,CAAC,QAAQ,IAAI,CACjD,OAAO,EAAE,QAAQ,KACb,gBAAgB,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;AAE1E,MAAM,MAAM,cAAc,GAAG,CAC5B,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,eAAe,KACpB,kBAAkB,GAAG,SAAS,CAAC;AAEpC,MAAM,WAAW,kBAAkB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,OAAO,WAAW,GAAG,MAAM,CAAC;IACvC,UAAU,CAAC,KAAK,EAAE;QACjB,MAAM,EAAE,OAAO,CAAC;QAChB,OAAO,EAAE,eAAe,CAAC;KACzB,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACvC,UAAU,EAAE,aAAa,GAAG,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IAC3E,OAAO,EAAE,aAAa,CAAC;IACvB,EAAE,CAAC,EAAE,kBAAkB,CAAC;IACxB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAClE;AAED,8DAA8D;AAC9D,MAAM,MAAM,0BAA0B,GACnC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,gBAAgB,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,MAAM,eAAe,GACxB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,WAAW,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,cAAc,GAAG,oBAAoB,GAAG,kBAAkB,CAAA;CAAE,GAC3F;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,WAAW,CAAA;CAAE,CAAC;AAKzE,eAAO,MAAM,yBAAyB,QAAkB,CAAC;AACzD,eAAO,MAAM,0BAA0B,QAAkB,CAAC;AAE1D,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,SAAS,GAAG,MAAM,CAEtD;AAED,qBAAa,gBAAgB;IAC5B;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkC;IAC3D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;gBAEnC,IAAI,EAAE,uBAAuB;IAIzC,SAAS,IAAI,QAAQ,CACpB,IAAI,CACH,aAAa,EACX,iBAAiB,GACjB,kBAAkB,GAClB,qBAAqB,GACrB,kBAAkB,GAClB,kBAAkB,CACpB,CACD;IAUD,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,cAAc;IAOhB,iBAAiB,IAAI,OAAO,CAAC,aAAa,CAAC;IAK3C,YAAY,CAAC,KAAK,EAAE;QACzB,SAAS,EAAE,QAAQ,GAAG,OAAO,CAAC;QAC9B,SAAS,CAAC,EAAE,SAAS,CAAC;QACtB,uCAAuC;QACvC,YAAY,EAAE,MAAM,CAAC;QACrB,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;QAClD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,WAAW,CAAC;KACrB,GAAG,OAAO,CAAC,eAAe,CAAC;IAyDtB,cAAc,CACnB,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,eAAe,GACtB,OAAO,CAAC,eAAe,CAAC;IAqJrB,cAAc,CACnB,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,eAAe,GACtB,OAAO,CAAC,eAAe,CAAC;IAIrB,YAAY,CACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,eAAe,GACtB,OAAO,CAAC,eAAe,CAAC;YAIb,aAAa;IA2C3B,OAAO,CAAC,GAAG;CAGX;AAoCD,qEAAqE;AACrE,wBAAgB,6BAA6B,CAAC,OAAO,EAAE;IACtD,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9C,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;CAC7C,GAAG,gBAAgB,GAAG,SAAS,CAW/B;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACtC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CACf;AAED,wBAAgB,sBAAsB,CACrC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,sBAAsB,CASxB;AAED,wBAAsB,uBAAuB,CAAC,QAAQ,EACrD,OAAO,EAAE,yBAAyB,CAAC,QAAQ,CAAC,GAAG,SAAS,EACxD,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,0BAA0B,CAAC,CAerC;AAED,wBAAgB,qBAAqB,CAAC,MAAM,SAAQ,GAAG,MAAM,CAE5D"}