@softacus-software/elwis-mcp-core 0.1.0

package/dist/cjs/host/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/host/identity.ts"],"names":[],"mappings":""}

package/dist/cjs/host/index.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RunHostConformance = exports.FileLinkStore = exports.LinkKey = exports.AccountNotLinkedError = exports.MemoryLinkStore = exports.ElwisSessionBroker = exports.OidcVerifier = exports.VerifyOidcToken = exports.ElwisJwtVerifier = exports.ServeMcpHttp = exports.ReadLinkTicket = exports.CreateLinkTicket = void 0;
+var link_ticket_js_1 = require("./link-ticket.js");
+Object.defineProperty(exports, "CreateLinkTicket", { enumerable: true, get: function () { return link_ticket_js_1.CreateLinkTicket; } });
+Object.defineProperty(exports, "ReadLinkTicket", { enumerable: true, get: function () { return link_ticket_js_1.ReadLinkTicket; } });
+var serve_http_js_1 = require("./serve-http.js");
+Object.defineProperty(exports, "ServeMcpHttp", { enumerable: true, get: function () { return serve_http_js_1.ServeMcpHttp; } });
+var elwis_jwt_verifier_js_1 = require("./elwis-jwt-verifier.js");
+Object.defineProperty(exports, "ElwisJwtVerifier", { enumerable: true, get: function () { return elwis_jwt_verifier_js_1.ElwisJwtVerifier; } });
+var oidc_token_js_1 = require("./oidc-token.js");
+Object.defineProperty(exports, "VerifyOidcToken", { enumerable: true, get: function () { return oidc_token_js_1.VerifyOidcToken; } });
+var oidc_verifier_js_1 = require("./oidc-verifier.js");
+Object.defineProperty(exports, "OidcVerifier", { enumerable: true, get: function () { return oidc_verifier_js_1.OidcVerifier; } });
+var session_broker_js_1 = require("./session-broker.js");
+Object.defineProperty(exports, "ElwisSessionBroker", { enumerable: true, get: function () { return session_broker_js_1.ElwisSessionBroker; } });
+Object.defineProperty(exports, "MemoryLinkStore", { enumerable: true, get: function () { return session_broker_js_1.MemoryLinkStore; } });
+Object.defineProperty(exports, "AccountNotLinkedError", { enumerable: true, get: function () { return session_broker_js_1.AccountNotLinkedError; } });
+Object.defineProperty(exports, "LinkKey", { enumerable: true, get: function () { return session_broker_js_1.LinkKey; } });
+var file_link_store_js_1 = require("./file-link-store.js");
+Object.defineProperty(exports, "FileLinkStore", { enumerable: true, get: function () { return file_link_store_js_1.FileLinkStore; } });
+var host_conformance_js_1 = require("../conformance/host.conformance.js");
+Object.defineProperty(exports, "RunHostConformance", { enumerable: true, get: function () { return host_conformance_js_1.RunHostConformance; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/host/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/host/index.ts"],"names":[],"mappings":";;;AAEA,mDAAoE;AAA3D,kHAAA,gBAAgB,OAAA;AAAE,gHAAA,cAAc,OAAA;AAEzC,iDAA+C;AAAtC,6GAAA,YAAY,OAAA;AACrB,iEAA2D;AAAlD,yHAAA,gBAAgB,OAAA;AACzB,iDAAkD;AAAzC,gHAAA,eAAe,OAAA;AAExB,uDAAkD;AAAzC,gHAAA,YAAY,OAAA;AACrB,yDAA0G;AAAjG,uHAAA,kBAAkB,OAAA;AAAE,oHAAA,eAAe,OAAA;AAAE,0HAAA,qBAAqB,OAAA;AAAE,4GAAA,OAAO,OAAA;AAC5E,2DAAqD;AAA5C,mHAAA,aAAa,OAAA;AAKtB,0EAAwE;AAA/D,yHAAA,kBAAkB,OAAA"}

package/dist/cjs/host/link-ticket.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_LINK_TICKET_TTL_SECONDS = void 0;
+exports.CreateLinkTicket = CreateLinkTicket;
+exports.ReadLinkTicket = ReadLinkTicket;
+const node_crypto_1 = require("node:crypto");
+exports.DEFAULT_LINK_TICKET_TTL_SECONDS = 600;
+function Sign(body, secret) {
+    return (0, node_crypto_1.createHmac)('sha256', secret).update(body).digest('base64url');
+}
+function Matches(a, b) {
+    const left = Buffer.from(a);
+    const right = Buffer.from(b);
+    return left.length === right.length && (0, node_crypto_1.timingSafeEqual)(left, right);
+}
+function CreateLinkTicket(claims, options) {
+    const now = options.now ?? Math.floor(Date.now() / 1000);
+    const body = {
+        iss: claims.iss,
+        sub: claims.sub,
+        ...(claims.email ? { email: claims.email } : {}),
+        ...(claims.resource ? { resource: claims.resource } : {}),
+        exp: now + (options.ttlSeconds ?? exports.DEFAULT_LINK_TICKET_TTL_SECONDS),
+    };
+    const encoded = Buffer.from(JSON.stringify(body)).toString('base64url');
+    return `${encoded}.${Sign(encoded, options.secret)}`;
+}
+function ReadLinkTicket(ticket, options) {
+    const parts = ticket.split('.');
+    const [encoded, signature] = parts;
+    if (parts.length !== 2 || !encoded || !signature) {
+        throw new Error('the link ticket is malformed');
+    }
+    if (!Matches(signature, Sign(encoded, options.secret))) {
+        throw new Error('the link ticket signature does not verify');
+    }
+    let body;
+    try {
+        body = JSON.parse(Buffer.from(encoded, 'base64url').toString('utf8'));
+    }
+    catch {
+        throw new Error('the link ticket payload is not valid JSON');
+    }
+    const parsed = body;
+    if (typeof parsed.iss !== 'string' || typeof parsed.sub !== 'string' || typeof parsed.exp !== 'number') {
+        throw new Error('the link ticket payload is incomplete');
+    }
+    if (parsed.exp <= (options.now ?? Math.floor(Date.now() / 1000))) {
+        throw new Error('the link ticket has expired');
+    }
+    return {
+        iss: parsed.iss,
+        sub: parsed.sub,
+        ...(typeof parsed.email === 'string' ? { email: parsed.email } : {}),
+        ...(typeof parsed.resource === 'string' ? { resource: parsed.resource } : {}),
+        exp: parsed.exp,
+    };
+}
+//# sourceMappingURL=link-ticket.js.map

package/dist/cjs/host/link-ticket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-ticket.js","sourceRoot":"","sources":["../../../src/host/link-ticket.ts"],"names":[],"mappings":";;;AA+BA,4CAWC;AAED,wCA8BC;AA1ED,6CAA0D;AAe7C,QAAA,+BAA+B,GAAG,GAAG,CAAC;AAMnD,SAAS,IAAI,CAAC,IAAY,EAAE,MAAc;IACxC,OAAO,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,OAAO,CAAC,CAAS,EAAE,CAAS;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAA,6BAAe,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAwB,EAAE,OAA0B;IACnF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACzD,MAAM,IAAI,GAAe;QACvB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,uCAA+B,CAAC;KACnE,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,SAAgB,cAAc,CAAC,MAAc,EAAE,OAA0B;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,IAA2B,CAAC;IAC3C,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAC;AACJ,CAAC"}

package/dist/cjs/host/oidc-token.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerifyOidcToken = VerifyOidcToken;
+const node_crypto_1 = require("node:crypto");
+const DEFAULT_CLOCK_SKEW_SECONDS = 60;
+const ALGORITHMS = {
+    RS256: { importParams: { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' }, verifyParams: { name: 'RSASSA-PKCS1-v1_5' } },
+    RS384: { importParams: { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-384' }, verifyParams: { name: 'RSASSA-PKCS1-v1_5' } },
+    RS512: { importParams: { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-512' }, verifyParams: { name: 'RSASSA-PKCS1-v1_5' } },
+    ES256: { importParams: { name: 'ECDSA', namedCurve: 'P-256' }, verifyParams: { name: 'ECDSA', hash: 'SHA-256' } },
+    ES384: { importParams: { name: 'ECDSA', namedCurve: 'P-384' }, verifyParams: { name: 'ECDSA', hash: 'SHA-384' } },
+    ES512: { importParams: { name: 'ECDSA', namedCurve: 'P-521' }, verifyParams: { name: 'ECDSA', hash: 'SHA-512' } },
+};
+function DecodeSegment(segment, what) {
+    let parsed;
+    try {
+        parsed = JSON.parse(Buffer.from(segment, 'base64url').toString('utf8'));
+    }
+    catch {
+        throw new Error(`the token ${what} is not valid JSON`);
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        throw new Error(`the token ${what} is not an object`);
+    }
+    return parsed;
+}
+function Audiences(claim) {
+    if (typeof claim === 'string')
+        return [claim];
+    if (Array.isArray(claim))
+        return claim.filter((entry) => typeof entry === 'string');
+    return [];
+}
+function SameResource(a, b) {
+    return a.replace(/\/+$/, '') === b.replace(/\/+$/, '');
+}
+async function VerifyOidcToken(token, options) {
+    const parts = token.split('.');
+    const [encodedHeader, encodedPayload, encodedSignature] = parts;
+    if (parts.length !== 3 || !encodedHeader || !encodedPayload || encodedSignature === undefined) {
+        throw new Error('the bearer value is not a JWS compact serialization');
+    }
+    const header = DecodeSegment(encodedHeader, 'header');
+    const algorithm = typeof header.alg === 'string' ? ALGORITHMS[header.alg] : undefined;
+    if (!algorithm) {
+        throw new Error(`unsupported token signing algorithm: ${String(header.alg)}`);
+    }
+    const kid = typeof header.kid === 'string' ? header.kid : null;
+    const candidates = options.jwks.keys.filter(key => kid === null || key.kid === kid);
+    if (candidates.length === 0) {
+        throw new Error(`no key in the issuer key set matches kid ${kid ?? '(absent)'}`);
+    }
+    const signed = Buffer.from(`${encodedHeader}.${encodedPayload}`, 'utf8');
+    const signature = Buffer.from(encodedSignature, 'base64url');
+    let verified = false;
+    for (const jwk of candidates) {
+        let key;
+        try {
+            key = await node_crypto_1.webcrypto.subtle.importKey('jwk', jwk, algorithm.importParams, false, ['verify']);
+        }
+        catch {
+            continue;
+        }
+        if (await node_crypto_1.webcrypto.subtle.verify(algorithm.verifyParams, key, signature, signed)) {
+            verified = true;
+            break;
+        }
+    }
+    if (!verified) {
+        throw new Error('the token signature does not verify against the issuer key set');
+    }
+    const payload = DecodeSegment(encodedPayload, 'payload');
+    if (payload.iss !== options.issuer) {
+        throw new Error(`the token issuer ${String(payload.iss)} is not the configured issuer`);
+    }
+    const audiences = Audiences(payload.aud);
+    if (!audiences.some(entry => SameResource(entry, options.resource))) {
+        throw new Error(`the token audience does not include this resource (${options.resource})`);
+    }
+    const now = options.now ?? Math.floor(Date.now() / 1000);
+    const skew = options.clockSkewSeconds ?? DEFAULT_CLOCK_SKEW_SECONDS;
+    if (typeof payload.exp !== 'number') {
+        throw new Error('the token has no exp claim');
+    }
+    if (payload.exp <= now) {
+        throw new Error('the token has expired');
+    }
+    if (typeof payload.nbf === 'number' && payload.nbf - skew > now) {
+        throw new Error('the token is not valid yet');
+    }
+    if (typeof payload.sub !== 'string' || payload.sub.length === 0) {
+        throw new Error('the token has no sub claim');
+    }
+    return { ...payload, sub: payload.sub, iss: options.issuer, aud: audiences, exp: payload.exp };
+}
+//# sourceMappingURL=oidc-token.js.map

package/dist/cjs/host/oidc-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-token.js","sourceRoot":"","sources":["../../../src/host/oidc-token.ts"],"names":[],"mappings":";;AAyDA,0CAiEC;AA1HD,6CAAwC;AAuBxC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAEtC,MAAM,UAAU,GAAmE;IACjF,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE;IACpH,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE;IACpH,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE;IACpH,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;IACjH,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;IACjH,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;CAClH,CAAC;AAEF,SAAS,aAAa,CAAC,OAAe,EAAE,IAAY;IAClD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,oBAAoB,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,mBAAmB,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IACrG,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS;IACxC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,KAAa,EAAE,OAA+B;IAClF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,GAAG,KAAK,CAAC;IAChE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IACpF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,4CAA4C,GAAG,IAAI,UAAU,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,IAAI,cAAc,EAAE,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,GAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,uBAAS,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAA2B,EAAE,SAAS,CAAC,YAA6C,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzJ,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,MAAM,uBAAS,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,YAA6C,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;YACnH,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAEzD,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,sDAAsD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IACpE,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAgB,CAAC;AAC/G,CAAC"}

package/dist/cjs/host/oidc-verifier.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_KEY_CACHE_SECONDS = void 0;
+exports.OidcVerifier = OidcVerifier;
+const oidc_token_js_1 = require("./oidc-token.js");
+exports.DEFAULT_KEY_CACHE_SECONDS = 600;
+const DISCOVERY_SUFFIX = '/.well-known/openid-configuration';
+async function DefaultFetchJson(url) {
+    const res = await fetch(url);
+    if (!res.ok)
+        throw new Error(`${url} answered ${res.status}`);
+    return res.json();
+}
+function KeyIds(jwks) {
+    return new Set(jwks.keys.map(key => (typeof key.kid === 'string' ? key.kid : '')));
+}
+function TokenKeyId(token) {
+    const header = token.split('.')[0];
+    if (!header)
+        return null;
+    try {
+        const parsed = JSON.parse(Buffer.from(header, 'base64url').toString('utf8'));
+        return typeof parsed.kid === 'string' ? parsed.kid : null;
+    }
+    catch {
+        return null;
+    }
+}
+function OidcVerifier(options) {
+    const fetchJson = options.fetchJson ?? DefaultFetchJson;
+    const now = options.now ?? Date.now;
+    const cacheMs = (options.keyCacheSeconds ?? exports.DEFAULT_KEY_CACHE_SECONDS) * 1000;
+    let jwksUri = null;
+    let cached = null;
+    let cachedAt = 0;
+    async function KeySet(refresh) {
+        if (cached && !refresh && now() - cachedAt < cacheMs)
+            return cached;
+        if (jwksUri === null) {
+            const discovery = await fetchJson(`${options.issuer.replace(/\/+$/, '')}${DISCOVERY_SUFFIX}`);
+            if (typeof discovery.jwks_uri !== 'string') {
+                throw new Error(`the issuer ${options.issuer} published no jwks_uri`);
+            }
+            jwksUri = discovery.jwks_uri;
+        }
+        cached = await fetchJson(jwksUri);
+        cachedAt = now();
+        return cached;
+    }
+    return {
+        async verify(token, resource) {
+            let jwks = await KeySet(false);
+            const kid = TokenKeyId(token);
+            if (kid !== null && !KeyIds(jwks).has(kid)) {
+                jwks = await KeySet(true);
+            }
+            const claims = await (0, oidc_token_js_1.VerifyOidcToken)(token, {
+                issuer: options.issuer,
+                resource,
+                jwks,
+                clockSkewSeconds: options.clockSkewSeconds,
+            });
+            return options.broker.resolve(claims);
+        },
+    };
+}
+//# sourceMappingURL=oidc-verifier.js.map

package/dist/cjs/host/oidc-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-verifier.js","sourceRoot":"","sources":["../../../src/host/oidc-verifier.ts"],"names":[],"mappings":";;;AAwCA,oCAsCC;AA5ED,mDAAsE;AAazD,QAAA,yBAAyB,GAAG,GAAG,CAAC;AAE7C,MAAM,gBAAgB,GAAG,mCAAmC,CAAC;AAE7D,KAAK,UAAU,gBAAgB,CAAC,GAAW;IACzC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,MAAM,CAAC,IAAmB;IACjC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAsB,CAAC;QAClG,OAAO,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,YAAY,CAAC,OAA4B;IACvD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,iCAAyB,CAAC,GAAG,IAAI,CAAC;IAC9E,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,MAAM,GAAyB,IAAI,CAAC;IACxC,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,UAAU,MAAM,CAAC,OAAgB;QACpC,IAAI,MAAM,IAAI,CAAC,OAAO,IAAI,GAAG,EAAE,GAAG,QAAQ,GAAG,OAAO;YAAE,OAAO,MAAM,CAAC;QACpE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,gBAAgB,EAAE,CAA2B,CAAC;YACxH,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,cAAc,OAAO,CAAC,MAAM,wBAAwB,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC;QAC/B,CAAC;QACD,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAkB,CAAC;QACnD,QAAQ,GAAG,GAAG,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,QAAgB;YAC1C,IAAI,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3C,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAe,EAAC,KAAK,EAAE;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ;gBACR,IAAI;gBACJ,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;aAC3C,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cjs/host/serve-http.js

@@ -0,0 +1,282 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_MAX_CONCURRENT_SESSIONS = exports.DEFAULT_MAX_CONCURRENT_VERIFICATIONS = void 0;
+exports.ServeMcpHttp = ServeMcpHttp;
+const node_http_1 = require("node:http");
+const streamableHttp_js_1 = require("@modelcontextprotocol/sdk/server/streamableHttp.js");
+const link_ticket_js_1 = require("./link-ticket.js");
+exports.DEFAULT_MAX_CONCURRENT_VERIFICATIONS = 50;
+exports.DEFAULT_MAX_CONCURRENT_SESSIONS = 200;
+const METADATA_PATH = '/.well-known/oauth-protected-resource';
+function BearerToken(req) {
+    const header = req.headers.authorization;
+    if (!header)
+        return null;
+    const match = /^Bearer\s+(.+)$/i.exec(header.trim());
+    return match?.[1] ?? null;
+}
+function MetadataUrl(resource) {
+    const url = new URL(resource);
+    const isHttp = url.protocol === 'http:' || url.protocol === 'https:';
+    if (!isHttp || url.username || url.password || url.search || url.hash) {
+        throw new Error('resource must be an absolute http(s) URL without userinfo, query or fragment');
+    }
+    const suffix = url.pathname === '/' ? '' : url.pathname;
+    return `${url.origin}${METADATA_PATH}${suffix}`;
+}
+function ValidatedCap(name, value, defaultValue) {
+    if (value === undefined)
+        return defaultValue;
+    if (!Number.isInteger(value) || value < 1) {
+        throw new Error(`${name} must be a finite integer of at least 1, got: ${value}`);
+    }
+    return value;
+}
+function HeaderSafeValue(value) {
+    return value.replace(/[^\x20-\x7e]/g, '').replace(/"/g, "'");
+}
+const MAX_LINK_BODY_BYTES = 8192;
+function Html(value) {
+    return value.replace(/[&<>"]/g, c => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;' }[c]));
+}
+function LinkPage(res, status, heading, detail, form = '') {
+    res.writeHead(status, {
+        'content-type': 'text/html; charset=utf-8',
+        'cache-control': 'no-store',
+        'x-frame-options': 'DENY',
+        'content-security-policy': "frame-ancestors 'none'",
+    });
+    res.end(`<!doctype html><meta charset=utf-8><title>${Html(heading)}</title>`
+        + `<body style="font:16px/1.5 system-ui,sans-serif;max-width:34rem;margin:15vh auto;padding:0 1.5rem">`
+        + `<h1 style="font-size:1.4rem;margin:0 0 .5rem">${Html(heading)}</h1>`
+        + `<p style="color:#555;margin:0">${Html(detail)}</p>${form}`);
+}
+function ConfirmLinkPage(res, path, ticket, claims) {
+    const who = claims.email ?? claims.sub;
+    const form = `<form method="post" action="${Html(path)}" style="margin-top:1.5rem">`
+        + `<input type="hidden" name="ticket" value="${Html(ticket)}">`
+        + `<button type="submit" style="font:inherit;padding:.6rem 1.2rem;border-radius:8px;border:0;background:#1f4fd1;color:#fff;cursor:pointer">Link my ELWIS account</button>`
+        + `</form>`;
+    LinkPage(res, 200, 'Link your ELWIS account', `The assistant signed in as ${who} asks to work in ELWIS with your current ELWIS session. Continue only if ${who} is you.`, form);
+}
+async function ReadFormTicket(req) {
+    let size = 0;
+    const chunks = [];
+    for await (const chunk of req) {
+        size += chunk.length;
+        if (size > MAX_LINK_BODY_BYTES)
+            throw new Error('the link request is too large');
+        chunks.push(chunk);
+    }
+    return new URLSearchParams(Buffer.concat(chunks).toString('utf8')).get('ticket');
+}
+function LinkUrlOf(error) {
+    const candidate = error?.linkUrl;
+    return typeof candidate === 'string' && candidate.length > 0 ? candidate : null;
+}
+function Challenge(res, metadataUrl, description, linkUrl) {
+    const safeDescription = HeaderSafeValue(description);
+    const safeLink = linkUrl ? HeaderSafeValue(linkUrl) : null;
+    res.writeHead(401, {
+        'www-authenticate': `Bearer resource_metadata="${metadataUrl}", error="invalid_token", error_description="${safeDescription}"`
+            + (safeLink ? `, link_url="${safeLink}"` : ''),
+        'content-type': 'application/json',
+    });
+    res.end(JSON.stringify({ error: 'invalid_token', error_description: safeDescription, ...(safeLink ? { link_url: safeLink } : {}) }));
+}
+function ResolveEndpoints(options) {
+    if (options.endpoints?.length) {
+        if (options.resource !== undefined) {
+            throw new Error('pass either resource or endpoints, not both');
+        }
+        return options.endpoints;
+    }
+    if (options.resource === undefined) {
+        throw new Error('one of resource or endpoints is required');
+    }
+    return [{ path: options.path ?? '/mcp', resource: options.resource }];
+}
+async function ServeMcpHttp(options) {
+    const host = options.host ?? '127.0.0.1';
+    const endpoints = ResolveEndpoints(options).map(e => ({ ...e, metadataUrl: MetadataUrl(e.resource) }));
+    const byPath = new Map(endpoints.map(e => [e.path, e]));
+    const byMetadataPath = new Map(endpoints.map(e => [new URL(e.metadataUrl).pathname, e]));
+    const firstEndpoint = endpoints[0];
+    const maxConcurrentVerifications = ValidatedCap('maxConcurrentVerifications', options.maxConcurrentVerifications, exports.DEFAULT_MAX_CONCURRENT_VERIFICATIONS);
+    const maxConcurrentSessions = ValidatedCap('maxConcurrentSessions', options.maxConcurrentSessions, exports.DEFAULT_MAX_CONCURRENT_SESSIONS);
+    let inFlightVerifications = 0;
+    let liveSessions = 0;
+    const usedTickets = new Map();
+    const server = (0, node_http_1.createServer)(async (req, res) => {
+        try {
+            const requestPath = req.url?.split('?')[0] ?? '';
+            const metadataFor = requestPath === METADATA_PATH ? firstEndpoint : byMetadataPath.get(requestPath);
+            if (req.method === 'GET' && metadataFor) {
+                res.writeHead(200, { 'content-type': 'application/json' });
+                res.end(JSON.stringify({
+                    resource: metadataFor.resource,
+                    authorization_servers: options.authorizationServers,
+                    bearer_methods_supported: ['header'],
+                }));
+                return;
+            }
+            const linkPath = options.link?.path ?? '/link';
+            if (options.link && requestPath === linkPath) {
+                if (req.method !== 'GET' && req.method !== 'POST') {
+                    res.writeHead(405, { allow: 'GET, POST' });
+                    res.end();
+                    return;
+                }
+                let ticket;
+                let claims;
+                try {
+                    ticket = req.method === 'POST' ? await ReadFormTicket(req) : new URL(req.url ?? '/', 'http://host').searchParams.get('ticket');
+                    if (!ticket)
+                        throw new Error('a link ticket is required');
+                    claims = (0, link_ticket_js_1.ReadLinkTicket)(ticket, { secret: options.link.secret });
+                    if (usedTickets.has(ticket))
+                        throw new Error('this link was already used; ask the assistant for a new one');
+                }
+                catch (e) {
+                    LinkPage(res, 400, 'This link cannot be used', e instanceof Error ? e.message : 'the link ticket was rejected');
+                    return;
+                }
+                if (req.method === 'GET') {
+                    ConfirmLinkPage(res, linkPath, ticket, claims);
+                    return;
+                }
+                let outcome;
+                try {
+                    outcome = await options.link.complete(claims, { headers: req.headers });
+                }
+                catch (e) {
+                    LinkPage(res, 502, 'ELWIS could not complete the sign-in', e instanceof Error ? e.message : 'unknown failure');
+                    return;
+                }
+                if (outcome.status === 'needs-sign-in') {
+                    let target;
+                    try {
+                        target = new URL(outcome.signInUrl);
+                    }
+                    catch {
+                        LinkPage(res, 500, 'The sign-in address is not usable', 'the configured sign-in url is not an absolute url');
+                        return;
+                    }
+                    if (target.protocol !== 'http:' && target.protocol !== 'https:') {
+                        LinkPage(res, 500, 'The sign-in address is not usable', 'the configured sign-in url is not http or https');
+                        return;
+                    }
+                    res.writeHead(302, { location: target.toString(), 'cache-control': 'no-store' });
+                    res.end();
+                    return;
+                }
+                const nowSeconds = Math.floor(Date.now() / 1000);
+                for (const [used, exp] of usedTickets)
+                    if (exp <= nowSeconds)
+                        usedTickets.delete(used);
+                usedTickets.set(ticket, claims.exp);
+                LinkPage(res, 200, 'Account linked', 'You can close this tab and go back to your assistant.');
+                return;
+            }
+            const endpoint = byPath.get(requestPath);
+            if (!endpoint) {
+                res.writeHead(404, { 'content-type': 'application/json' });
+                res.end(JSON.stringify({ error: 'not_found' }));
+                return;
+            }
+            if (req.method === 'GET') {
+                res.writeHead(405, { 'content-type': 'application/json', allow: 'POST' });
+                res.end(JSON.stringify({ error: 'method_not_allowed', error_description: 'GET is not supported; this server does not send server-initiated messages' }));
+                return;
+            }
+            const token = BearerToken(req);
+            if (!token) {
+                Challenge(res, endpoint.metadataUrl, 'a bearer token is required');
+                return;
+            }
+            if (inFlightVerifications >= maxConcurrentVerifications) {
+                res.writeHead(503, { 'content-type': 'application/json', 'retry-after': '1' });
+                res.end(JSON.stringify({ error: 'too_many_requests', error_description: 'too many verifications in flight; try again shortly' }));
+                return;
+            }
+            let identity;
+            inFlightVerifications++;
+            try {
+                identity = await options.verifier.verify(token, endpoint.resource);
+            }
+            catch (e) {
+                const linkUrl = LinkUrlOf(e);
+                Challenge(res, endpoint.metadataUrl, linkUrl ? 'this account is not linked to ELWIS yet' : 'the token was rejected', linkUrl);
+                return;
+            }
+            finally {
+                inFlightVerifications--;
+            }
+            if (liveSessions >= maxConcurrentSessions) {
+                res.writeHead(503, { 'content-type': 'application/json', 'retry-after': '1' });
+                res.end(JSON.stringify({ error: 'too_many_requests', error_description: 'too many sessions in flight; try again shortly' }));
+                return;
+            }
+            liveSessions++;
+            let sessionReleased = false;
+            const releaseSession = () => {
+                if (sessionReleased)
+                    return;
+                sessionReleased = true;
+                liveSessions--;
+            };
+            try {
+                const mcp = options.factory(identity);
+                const transport = new streamableHttp_js_1.StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+                res.on('close', () => {
+                    transport.close().catch(() => { });
+                    mcp.close().catch(() => { });
+                    releaseSession();
+                });
+                await mcp.connect(transport);
+                await transport.handleRequest(req, res);
+            }
+            catch (e) {
+                releaseSession();
+                throw e;
+            }
+        }
+        catch {
+            if (!res.headersSent) {
+                res.writeHead(500, { 'content-type': 'application/json' });
+                res.end(JSON.stringify({ error: 'internal_error' }));
+            }
+            else {
+                res.end();
+            }
+        }
+    });
+    await new Promise((resolve, reject) => {
+        const onListenError = (err) => reject(err);
+        server.once('error', onListenError);
+        server.listen(options.port ?? 0, host, () => {
+            server.removeListener('error', onListenError);
+            resolve();
+        });
+    });
+    const address = server.address();
+    const port = typeof address === 'object' && address ? address.port : 0;
+    return {
+        port,
+        close: () => new Promise((resolve, reject) => {
+            server.closeAllConnections();
+            server.close(err => {
+                if (!err) {
+                    resolve();
+                    return;
+                }
+                if (err.code === 'ERR_SERVER_NOT_RUNNING') {
+                    resolve();
+                    return;
+                }
+                reject(err);
+            });
+        }),
+    };
+}
+//# sourceMappingURL=serve-http.js.map

package/dist/cjs/host/serve-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-http.js","sourceRoot":"","sources":["../../../src/host/serve-http.ts"],"names":[],"mappings":";;;AAkJA,oCA6KC;AA/TD,yCAAoF;AACpF,0FAAmG;AAEnG,qDAAyE;AAmC5D,QAAA,oCAAoC,GAAG,EAAE,CAAC;AAE1C,QAAA,+BAA+B,GAAG,GAAG,CAAC;AAOnD,MAAM,aAAa,GAAG,uCAAuC,CAAC;AAE9D,SAAS,WAAW,CAAC,GAAoB;IACvC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACrE,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IACxD,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,aAAa,GAAG,MAAM,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAyB,EAAE,YAAoB;IACjF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iDAAiD,KAAK,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAY,CAAA,CAAC,CAAC;AACjH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,OAAe,EAAE,MAAc,EAAE,IAAI,GAAG,EAAE;IAC/F,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,0BAA0B;QAC1C,eAAe,EAAE,UAAU;QAC3B,iBAAiB,EAAE,MAAM;QACzB,yBAAyB,EAAE,wBAAwB;KACpD,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,6CAA6C,IAAI,CAAC,OAAO,CAAC,UAAU;UACxE,qGAAqG;UACrG,iDAAiD,IAAI,CAAC,OAAO,CAAC,OAAO;UACrE,kCAAkC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,eAAe,CAAC,GAAmB,EAAE,IAAY,EAAE,MAAc,EAAE,MAAwB;IAClG,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC;IACvC,MAAM,IAAI,GAAG,+BAA+B,IAAI,CAAC,IAAI,CAAC,8BAA8B;UAChF,6CAA6C,IAAI,CAAC,MAAM,CAAC,IAAI;UAC7D,wKAAwK;UACxK,SAAS,CAAC;IACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,yBAAyB,EAAE,8BAA8B,GAAG,4EAA4E,GAAG,UAAU,EAAE,IAAI,CAAC,CAAC;AAClL,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAoB;IAChD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAC;QACjC,IAAI,IAAI,GAAG,mBAAmB;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACjF,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,SAAS,GAAI,KAA+B,EAAE,OAAO,CAAC;IAC5D,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAClF,CAAC;AAED,SAAS,SAAS,CAAC,GAAmB,EAAE,WAAmB,EAAE,WAAmB,EAAE,OAAuB;IACvG,MAAM,eAAe,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,kBAAkB,EAAE,6BAA6B,WAAW,gDAAgD,eAAe,GAAG;cAC1H,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,cAAc,EAAE,kBAAkB;KACnC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACvI,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAqB;IAC7C,IAAI,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,OAAO,CAAC,SAAS,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;AACxE,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,OAAqB;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACzC,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACvG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;IACpC,MAAM,0BAA0B,GAAG,YAAY,CAAC,4BAA4B,EAAE,OAAO,CAAC,0BAA0B,EAAE,4CAAoC,CAAC,CAAC;IACxJ,MAAM,qBAAqB,GAAG,YAAY,CAAC,uBAAuB,EAAE,OAAO,CAAC,qBAAqB,EAAE,uCAA+B,CAAC,CAAC;IACpI,IAAI,qBAAqB,GAAG,CAAC,CAAC;IAC9B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE9C,MAAM,MAAM,GAAG,IAAA,wBAAY,EAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,WAAW,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACpG,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,WAAW,EAAE,CAAC;gBACxC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBACrB,QAAQ,EAAE,WAAW,CAAC,QAAQ;oBAC9B,qBAAqB,EAAE,OAAO,CAAC,oBAAoB;oBACnD,wBAAwB,EAAE,CAAC,QAAQ,CAAC;iBACrC,CAAC,CAAC,CAAC;gBACJ,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,IAAI,OAAO,CAAC;YAC/C,IAAI,OAAO,CAAC,IAAI,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;oBAC3C,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,IAAI,MAAqB,CAAC;gBAC1B,IAAI,MAA0C,CAAC;gBAC/C,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,aAAa,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAC/H,IAAI,CAAC,MAAM;wBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;oBAC1D,MAAM,GAAG,IAAA,+BAAc,EAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;oBACjE,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;gBAC9G,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,0BAA0B,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC;oBAChH,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;oBACzB,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;oBAC/C,OAAO;gBACT,CAAC;gBACD,IAAI,OAAoB,CAAC;gBACzB,IAAI,CAAC;oBACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC1E,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,sCAAsC,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;oBAC/G,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;oBACvC,IAAI,MAAW,CAAC;oBAChB,IAAI,CAAC;wBACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACtC,CAAC;oBAAC,MAAM,CAAC;wBACP,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,mCAAmC,EAAE,mDAAmD,CAAC,CAAC;wBAC7G,OAAO;oBACT,CAAC;oBACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAChE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,mCAAmC,EAAE,iDAAiD,CAAC,CAAC;wBAC3G,OAAO;oBACT,CAAC;oBACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;oBACjF,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;gBACjD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,WAAW;oBAAE,IAAI,GAAG,IAAI,UAAU;wBAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACvF,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;gBACpC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,uDAAuD,CAAC,CAAC;gBAC9F,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC1E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,2EAA2E,EAAE,CAAC,CAAC,CAAC;gBACzJ,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YACD,IAAI,qBAAqB,IAAI,0BAA0B,EAAE,CAAC;gBACxD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC/E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,qDAAqD,EAAE,CAAC,CAAC,CAAC;gBAClI,OAAO;YACT,CAAC;YACD,IAAI,QAA0B,CAAC;YAC/B,qBAAqB,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC7B,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;gBAC9H,OAAO;YACT,CAAC;oBAAS,CAAC;gBACT,qBAAqB,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,YAAY,IAAI,qBAAqB,EAAE,CAAC;gBAC1C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC/E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gDAAgD,EAAE,CAAC,CAAC,CAAC;gBAC7H,OAAO;YACT,CAAC;YACD,YAAY,EAAE,CAAC;YACf,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,MAAM,cAAc,GAAG,GAAS,EAAE;gBAChC,IAAI,eAAe;oBAAE,OAAO;gBAC5B,eAAe,GAAG,IAAI,CAAC;gBACvB,YAAY,EAAE,CAAC;YACjB,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACtC,MAAM,SAAS,GAAG,IAAI,iDAA6B,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACnB,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBAClC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBAC5B,cAAc,EAAE,CAAC;gBACnB,CAAC,CAAC,CAAC;gBACH,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC7B,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,cAAc,EAAE,CAAC;gBACjB,MAAM,CAAC,CAAC;YACV,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,aAAa,GAAG,CAAC,GAAU,EAAQ,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;YAC1C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBACjB,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,IAAK,GAA6B,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;oBACrE,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;KACL,CAAC;AACJ,CAAC"}