@soleri/core 2.9.0 → 2.11.0

package/dist/transport/token-auth.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Token Authentication — bearer token generation, validation, and persistence.
+ *
+ * Uses constant-time comparison (crypto.timingSafeEqual) to prevent timing attacks.
+ * Token priority: {AGENT_ID}_HTTP_TOKEN env > ~/.{agentId}/http-token file.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+/** Generate a 32-byte hex token (64 characters). */
+export declare function generateToken(): string;
+/**
+ * Load token with priority: env var > file.
+ * The env var name is derived from the agentId: MY_AGENT_HTTP_TOKEN.
+ */
+export declare function loadToken(agentId: string): string | undefined;
+/** Save token to ~/.{agentId}/http-token with 0600 permissions. */
+export declare function saveToken(agentId: string, token: string): void;
+/** Load existing token or generate and save a new one. */
+export declare function getOrGenerateToken(agentId: string): string;
+/**
+ * Constant-time bearer token validation.
+ * Returns true if the Authorization header contains a valid Bearer token.
+ */
+export declare function validateBearerToken(authHeader: string | undefined, expected: string): boolean;
+/**
+ * Validate an incoming HTTP request's bearer token.
+ * Returns true if valid, sends 401 and returns false if not.
+ */
+export declare function authenticateRequest(req: IncomingMessage, res: ServerResponse, expectedToken: string): boolean;
+//# sourceMappingURL=token-auth.d.ts.map

package/dist/transport/token-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-auth.d.ts","sourceRoot":"","sources":["../../src/transport/token-auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,oDAAoD;AACpD,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAoB7D;AAED,mEAAmE;AACnE,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAI9D;AAED,0DAA0D;AAC1D,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAc7F;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,aAAa,EAAE,MAAM,GACpB,OAAO,CAOT"}

package/dist/transport/token-auth.js

@@ -0,0 +1,84 @@
+/**
+ * Token Authentication — bearer token generation, validation, and persistence.
+ *
+ * Uses constant-time comparison (crypto.timingSafeEqual) to prevent timing attacks.
+ * Token priority: {AGENT_ID}_HTTP_TOKEN env > ~/.{agentId}/http-token file.
+ */
+import { randomBytes, timingSafeEqual } from 'node:crypto';
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+/** Generate a 32-byte hex token (64 characters). */
+export function generateToken() {
+    return randomBytes(32).toString('hex');
+}
+/**
+ * Load token with priority: env var > file.
+ * The env var name is derived from the agentId: MY_AGENT_HTTP_TOKEN.
+ */
+export function loadToken(agentId) {
+    // Environment variable takes priority
+    const envKey = `${agentId.replace(/-/g, '_').toUpperCase()}_HTTP_TOKEN`;
+    const envToken = process.env[envKey];
+    if (envToken && envToken.trim().length > 0) {
+        return envToken.trim();
+    }
+    // Fall back to file
+    const tokenFile = join(homedir(), `.${agentId}`, 'http-token');
+    try {
+        if (existsSync(tokenFile)) {
+            const fileToken = readFileSync(tokenFile, 'utf-8').trim();
+            if (fileToken.length > 0)
+                return fileToken;
+        }
+    }
+    catch {
+        // File read failed
+    }
+    return undefined;
+}
+/** Save token to ~/.{agentId}/http-token with 0600 permissions. */
+export function saveToken(agentId, token) {
+    const dir = join(homedir(), `.${agentId}`);
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(join(dir, 'http-token'), token, { mode: 0o600 });
+}
+/** Load existing token or generate and save a new one. */
+export function getOrGenerateToken(agentId) {
+    const existing = loadToken(agentId);
+    if (existing)
+        return existing;
+    const token = generateToken();
+    saveToken(agentId, token);
+    return token;
+}
+/**
+ * Constant-time bearer token validation.
+ * Returns true if the Authorization header contains a valid Bearer token.
+ */
+export function validateBearerToken(authHeader, expected) {
+    if (!authHeader || !authHeader.startsWith('Bearer '))
+        return false;
+    const provided = authHeader.slice(7);
+    const expectedBuf = Buffer.from(expected, 'utf-8');
+    const providedBuf = Buffer.from(provided, 'utf-8');
+    if (expectedBuf.length !== providedBuf.length) {
+        // Compare against self to avoid timing leak on length mismatch
+        timingSafeEqual(expectedBuf, expectedBuf);
+        return false;
+    }
+    return timingSafeEqual(providedBuf, expectedBuf);
+}
+/**
+ * Validate an incoming HTTP request's bearer token.
+ * Returns true if valid, sends 401 and returns false if not.
+ */
+export function authenticateRequest(req, res, expectedToken) {
+    const authHeader = req.headers.authorization;
+    if (validateBearerToken(authHeader, expectedToken))
+        return true;
+    res.writeHead(401, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify({ error: 'Unauthorized' }));
+    return false;
+}
+//# sourceMappingURL=token-auth.js.map

package/dist/transport/token-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-auth.js","sourceRoot":"","sources":["../../src/transport/token-auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGlC,oDAAoD;AACpD,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,sCAAsC;IACtC,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC;IACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,oBAAoB;IACpB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;QAC7C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;IACrB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,KAAa;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;IAC3C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAA8B,EAAE,QAAgB;IAClF,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnE,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QAC9C,+DAA+D;QAC/D,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAoB,EACpB,GAAmB,EACnB,aAAqB;IAErB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,IAAI,mBAAmB,CAAC,UAAU,EAAE,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/transport/types.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Transport Types — configuration for HTTP/SSE transport layer.
+ */
+/** Supported transport modes */
+export type TransportMode = 'stdio' | 'http' | 'ws' | 'lsp';
+/** HTTP transport configuration */
+export interface HttpTransportConfig {
+    /** Port to listen on (default: 3100) */
+    port: number;
+    /** Host to bind to (default: 127.0.0.1) */
+    host: string;
+    /** CORS allowed origins (empty = no CORS headers) */
+    corsOrigins: string[];
+    /** Bearer token for authentication */
+    authToken: string;
+    /** Session TTL in milliseconds (default: 3600000 = 1 hour). 0 to disable. */
+    sessionTTL?: number;
+    /** Session reaper interval in milliseconds (default: 60000 = 1 minute) */
+    reaperInterval?: number;
+    /** Rate limit: max requests per window (default: 100) */
+    rateLimit?: number;
+    /** Rate limit window in milliseconds (default: 60000 = 1 minute) */
+    rateLimitWindow?: number;
+}
+/** WebSocket transport configuration */
+export interface WsTransportConfig {
+    /** Bearer token for authentication (validated on upgrade) */
+    authToken: string;
+    /** Heartbeat interval in ms (default: 30000). 0 to disable. */
+    heartbeatInterval?: number;
+    /** Max message size in bytes (default: 1MB) */
+    maxMessageSize?: number;
+    /** Session TTL in milliseconds (default: 3600000 = 1 hour). 0 to disable. */
+    sessionTTL?: number;
+    /** Session reaper interval in milliseconds (default: 60000 = 1 minute) */
+    reaperInterval?: number;
+}
+/** LSP transport configuration */
+export interface LspTransportConfig {
+    /** Agent capabilities to expose as LSP features */
+    capabilities?: LspCapabilities;
+}
+/** Which agent features to expose via LSP */
+export interface LspCapabilities {
+    /** Expose vault search as completions (default: true) */
+    completions?: boolean;
+    /** Expose quality gate violations as diagnostics (default: true) */
+    diagnostics?: boolean;
+    /** Expose pattern documentation as hover (default: true) */
+    hover?: boolean;
+    /** Expose agent ops as code actions (default: false) */
+    codeActions?: boolean;
+}
+/** Combined transport configuration */
+export interface TransportConfig {
+    mode: TransportMode;
+    http?: HttpTransportConfig;
+    ws?: WsTransportConfig;
+    lsp?: LspTransportConfig;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/transport/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/transport/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,gCAAgC;AAChC,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,KAAK,CAAC;AAE5D,mCAAmC;AACnC,MAAM,WAAW,mBAAmB;IAClC,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wCAAwC;AACxC,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,kCAAkC;AAClC,MAAM,WAAW,kBAAkB;IACjC,mDAAmD;IACnD,YAAY,CAAC,EAAE,eAAe,CAAC;CAChC;AAED,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC9B,yDAAyD;IACzD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,oEAAoE;IACpE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wDAAwD;IACxD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,uCAAuC;AACvC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,EAAE,CAAC,EAAE,iBAAiB,CAAC;IACvB,GAAG,CAAC,EAAE,kBAAkB,CAAC;CAC1B"}

package/dist/transport/types.js

@@ -0,0 +1,5 @@
+/**
+ * Transport Types — configuration for HTTP/SSE transport layer.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/transport/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/transport/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/transport/ws-server.d.ts

@@ -0,0 +1,78 @@
+/**
+ * WebSocket MCP Server — RFC 6455 implementation using only node:http + node:crypto.
+ *
+ * Provides bidirectional JSON-RPC 2.0 communication over WebSocket.
+ * Can run standalone or share an HTTP server with HttpMcpServer via upgrade handler.
+ *
+ * Features:
+ *   - RFC 6455 handshake (Sec-WebSocket-Key / Accept)
+ *   - Text frame encode/decode (opcode 0x1) with masking support
+ *   - Ping/pong heartbeat (configurable interval, default 30s)
+ *   - Bearer token auth on upgrade request
+ *   - Session management via shared SessionManager
+ *   - Max message size enforcement (default 1MB)
+ *   - Clean close handshake (opcode 0x8)
+ */
+import { type Server } from 'node:http';
+import type { Duplex } from 'node:stream';
+import type { WsTransportConfig } from './types.js';
+import { SessionManager, type Session } from './session-manager.js';
+export interface WsConnection {
+    /** Session associated with this connection */
+    session: Session;
+    /** The underlying TCP socket */
+    socket: Duplex;
+    /** Whether the connection is alive (for heartbeat) */
+    alive: boolean;
+}
+export interface WsServerCallbacks {
+    /** Called when a new WebSocket connection is established. Must create session. */
+    onConnect: (conn: WsConnection) => Promise<void>;
+    /** Called when a text message is received. */
+    onMessage: (conn: WsConnection, data: unknown) => Promise<void>;
+    /** Called when a connection is closed. */
+    onClose: (conn: WsConnection) => void;
+    /** Optional: called on errors. */
+    onError?: (conn: WsConnection, error: Error) => void;
+}
+export interface WsServerStats {
+    connections: number;
+    uptime: number;
+}
+export declare class WsMcpServer {
+    private server;
+    private ownServer;
+    private sessions;
+    private config;
+    private callbacks;
+    private connections;
+    private heartbeatTimer;
+    private startedAt;
+    constructor(config: WsTransportConfig, callbacks: WsServerCallbacks);
+    /** Get the session manager. */
+    get sessionManager(): SessionManager;
+    /**
+     * Attach to an existing HTTP server as an upgrade handler.
+     * Call this instead of start() when sharing a server with HttpMcpServer.
+     */
+    attachTo(server: Server): void;
+    /** Start a standalone WebSocket server. */
+    start(port: number, host?: string): Promise<void>;
+    /** Stop the server and close all connections. */
+    stop(): Promise<void>;
+    /** Get server stats. */
+    getStats(): WsServerStats;
+    /** Send a text message to a specific connection. */
+    send(sessionId: string, data: unknown): boolean;
+    /** Broadcast a text message to all connections. */
+    broadcast(data: unknown): number;
+    private handleUpgrade;
+    private parseFrame;
+    private encodeFrame;
+    private sendText;
+    private sendPong;
+    private sendClose;
+    private startHeartbeat;
+    private stopHeartbeat;
+}
+//# sourceMappingURL=ws-server.d.ts.map

package/dist/transport/ws-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-server.d.ts","sourceRoot":"","sources":["../../src/transport/ws-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAgB,KAAK,MAAM,EAAwB,MAAM,WAAW,CAAC;AAC5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAE,KAAK,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAsBpE,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,kFAAkF;IAClF,SAAS,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,8CAA8C;IAC9C,SAAS,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,0CAA0C;IAC1C,OAAO,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,IAAI,CAAC;IACtC,kCAAkC;IAClC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CACtD;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,QAAQ,CAAiB;IACjC,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,SAAS,CAAoB;IACrC,OAAO,CAAC,WAAW,CAAmC;IACtD,OAAO,CAAC,cAAc,CAA6C;IACnE,OAAO,CAAC,SAAS,CAAK;gBAEV,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,iBAAiB;IASnE,+BAA+B;IAC/B,IAAI,cAAc,IAAI,cAAc,CAEnC;IAED;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAW9B,2CAA2C;IACrC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,SAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB5D,iDAAiD;IAC3C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB3B,wBAAwB;IACxB,QAAQ,IAAI,aAAa;IAOzB,oDAAoD;IACpD,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO;IAO/C,mDAAmD;IACnD,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM;IAYhC,OAAO,CAAC,aAAa;IAiHrB,OAAO,CAAC,UAAU;IAuClB,OAAO,CAAC,WAAW;IAuBnB,OAAO,CAAC,QAAQ;IAMhB,OAAO,CAAC,QAAQ;IAKhB,OAAO,CAAC,SAAS;IAWjB,OAAO,CAAC,cAAc;IA8BtB,OAAO,CAAC,aAAa;CAMtB"}

package/dist/transport/ws-server.js

@@ -0,0 +1,342 @@
+/**
+ * WebSocket MCP Server — RFC 6455 implementation using only node:http + node:crypto.
+ *
+ * Provides bidirectional JSON-RPC 2.0 communication over WebSocket.
+ * Can run standalone or share an HTTP server with HttpMcpServer via upgrade handler.
+ *
+ * Features:
+ *   - RFC 6455 handshake (Sec-WebSocket-Key / Accept)
+ *   - Text frame encode/decode (opcode 0x1) with masking support
+ *   - Ping/pong heartbeat (configurable interval, default 30s)
+ *   - Bearer token auth on upgrade request
+ *   - Session management via shared SessionManager
+ *   - Max message size enforcement (default 1MB)
+ *   - Clean close handshake (opcode 0x8)
+ */
+import { createHash } from 'node:crypto';
+import { createServer } from 'node:http';
+import { validateBearerToken } from './token-auth.js';
+import { SessionManager } from './session-manager.js';
+// =============================================================================
+// CONSTANTS
+// =============================================================================
+/** RFC 6455 magic GUID for Sec-WebSocket-Accept */
+const WS_MAGIC = '258EAFA5-E914-47DA-95CA-5AB5A4085CE3';
+const DEFAULT_HEARTBEAT_MS = 30_000;
+const DEFAULT_MAX_MESSAGE_SIZE = 1_048_576; // 1 MB
+// Frame opcodes
+const OPCODE_TEXT = 0x01;
+const OPCODE_CLOSE = 0x08;
+const OPCODE_PING = 0x09;
+const OPCODE_PONG = 0x0a;
+// =============================================================================
+// WEBSOCKET SERVER
+// =============================================================================
+export class WsMcpServer {
+    server;
+    ownServer = false; // true if we created the server ourselves
+    sessions;
+    config;
+    callbacks;
+    connections = new Map();
+    heartbeatTimer;
+    startedAt = 0;
+    constructor(config, callbacks) {
+        this.config = config;
+        this.callbacks = callbacks;
+        this.sessions = new SessionManager({
+            ttl: config.sessionTTL,
+            reaperInterval: config.reaperInterval,
+        });
+    }
+    /** Get the session manager. */
+    get sessionManager() {
+        return this.sessions;
+    }
+    /**
+     * Attach to an existing HTTP server as an upgrade handler.
+     * Call this instead of start() when sharing a server with HttpMcpServer.
+     */
+    attachTo(server) {
+        this.startedAt = Date.now();
+        this.server = server;
+        this.ownServer = false;
+        server.on('upgrade', (req, socket, head) => {
+            this.handleUpgrade(req, socket, head);
+        });
+        this.sessions.startReaper();
+        this.startHeartbeat();
+    }
+    /** Start a standalone WebSocket server. */
+    async start(port, host = '127.0.0.1') {
+        this.startedAt = Date.now();
+        this.server = createServer((_req, res) => {
+            res.writeHead(426, { 'Content-Type': 'text/plain' });
+            res.end('Upgrade Required');
+        });
+        this.ownServer = true;
+        this.server.on('upgrade', (req, socket, head) => {
+            this.handleUpgrade(req, socket, head);
+        });
+        await new Promise((resolve) => {
+            this.server.listen(port, host, () => resolve());
+        });
+        this.sessions.startReaper();
+        this.startHeartbeat();
+    }
+    /** Stop the server and close all connections. */
+    async stop() {
+        this.stopHeartbeat();
+        this.sessions.close();
+        // Close all WebSocket connections
+        for (const conn of this.connections.values()) {
+            this.sendClose(conn.socket, 1001, 'Server shutting down');
+            conn.socket.destroy();
+        }
+        this.connections.clear();
+        if (this.ownServer && this.server) {
+            await new Promise((resolve, reject) => {
+                this.server.close((err) => (err ? reject(err) : resolve()));
+            });
+            this.server = undefined;
+        }
+    }
+    /** Get server stats. */
+    getStats() {
+        return {
+            connections: this.connections.size,
+            uptime: this.startedAt > 0 ? Date.now() - this.startedAt : 0,
+        };
+    }
+    /** Send a text message to a specific connection. */
+    send(sessionId, data) {
+        const conn = this.connections.get(sessionId);
+        if (!conn)
+            return false;
+        this.sendText(conn.socket, JSON.stringify(data));
+        return true;
+    }
+    /** Broadcast a text message to all connections. */
+    broadcast(data) {
+        const text = JSON.stringify(data);
+        let count = 0;
+        for (const conn of this.connections.values()) {
+            this.sendText(conn.socket, text);
+            count++;
+        }
+        return count;
+    }
+    // ─── Upgrade Handling ──────────────────────────────────────────────
+    handleUpgrade(req, socket, _head) {
+        // Validate WebSocket upgrade headers
+        const upgradeHeader = req.headers.upgrade;
+        if (!upgradeHeader || upgradeHeader.toLowerCase() !== 'websocket') {
+            socket.destroy();
+            return;
+        }
+        const wsKey = req.headers['sec-websocket-key'];
+        if (!wsKey) {
+            socket.destroy();
+            return;
+        }
+        // Auth: extract token from query string or Authorization header
+        const url = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
+        const queryToken = url.searchParams.get('token');
+        const authHeader = req.headers.authorization;
+        const tokenValid = queryToken
+            ? queryToken === this.config.authToken
+            : validateBearerToken(authHeader, this.config.authToken);
+        if (!tokenValid) {
+            socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
+            socket.destroy();
+            return;
+        }
+        // Complete WebSocket handshake
+        const acceptKey = createHash('sha1')
+            .update(wsKey + WS_MAGIC)
+            .digest('base64');
+        const sessionId = this.sessions.generateId();
+        socket.write('HTTP/1.1 101 Switching Protocols\r\n' +
+            'Upgrade: websocket\r\n' +
+            'Connection: Upgrade\r\n' +
+            `Sec-WebSocket-Accept: ${acceptKey}\r\n` +
+            `mcp-session-id: ${sessionId}\r\n` +
+            '\r\n');
+        // Create session and connection
+        const session = this.sessions.add(sessionId, socket, null);
+        const conn = { session, socket, alive: true };
+        this.connections.set(sessionId, conn);
+        // Set up frame reader
+        const maxSize = this.config.maxMessageSize ?? DEFAULT_MAX_MESSAGE_SIZE;
+        let buffer = Buffer.alloc(0);
+        socket.on('data', (chunk) => {
+            buffer = Buffer.concat([buffer, chunk]);
+            // Process all complete frames in the buffer
+            while (buffer.length >= 2) {
+                const frame = this.parseFrame(buffer);
+                if (!frame)
+                    break; // incomplete frame
+                buffer = buffer.subarray(frame.totalLength);
+                if (frame.opcode === OPCODE_TEXT) {
+                    if (frame.payload.length > maxSize) {
+                        this.sendClose(socket, 1009, 'Message too large');
+                        socket.destroy();
+                        return;
+                    }
+                    const text = frame.payload.toString('utf-8');
+                    try {
+                        const parsed = JSON.parse(text);
+                        this.callbacks.onMessage(conn, parsed).catch((err) => {
+                            this.callbacks.onError?.(conn, err instanceof Error ? err : new Error(String(err)));
+                        });
+                    }
+                    catch {
+                        // Invalid JSON — ignore or notify
+                        this.callbacks.onError?.(conn, new Error('Invalid JSON received'));
+                    }
+                }
+                else if (frame.opcode === OPCODE_PING) {
+                    this.sendPong(socket, frame.payload);
+                }
+                else if (frame.opcode === OPCODE_PONG) {
+                    conn.alive = true;
+                }
+                else if (frame.opcode === OPCODE_CLOSE) {
+                    this.sendClose(socket, 1000, '');
+                    socket.destroy();
+                }
+            }
+        });
+        // Cleanup on disconnect — guard against double-fire from close+end+error
+        let cleaned = false;
+        const cleanup = (err) => {
+            if (cleaned)
+                return;
+            cleaned = true;
+            this.connections.delete(sessionId);
+            this.sessions.remove(sessionId);
+            if (err)
+                this.callbacks.onError?.(conn, err);
+            this.callbacks.onClose(conn);
+        };
+        socket.on('close', () => cleanup());
+        socket.on('end', () => cleanup());
+        socket.on('error', (err) => cleanup(err));
+        // Notify callback
+        this.callbacks.onConnect(conn).catch((err) => {
+            this.callbacks.onError?.(conn, err instanceof Error ? err : new Error(String(err)));
+        });
+    }
+    // ─── Frame Parsing (RFC 6455) ──────────────────────────────────────
+    parseFrame(buf) {
+        if (buf.length < 2)
+            return null;
+        const opcode = buf[0] & 0x0f;
+        const masked = (buf[1] & 0x80) !== 0;
+        let payloadLength = buf[1] & 0x7f;
+        let offset = 2;
+        if (payloadLength === 126) {
+            if (buf.length < 4)
+                return null;
+            payloadLength = buf.readUInt16BE(2);
+            offset = 4;
+        }
+        else if (payloadLength === 127) {
+            if (buf.length < 10)
+                return null;
+            // Read as 64-bit, but JS numbers are limited to 2^53
+            payloadLength = Number(buf.readBigUInt64BE(2));
+            offset = 10;
+        }
+        const maskSize = masked ? 4 : 0;
+        const totalLength = offset + maskSize + payloadLength;
+        if (buf.length < totalLength)
+            return null;
+        let payload;
+        if (masked) {
+            const mask = buf.subarray(offset, offset + 4);
+            payload = Buffer.alloc(payloadLength);
+            for (let i = 0; i < payloadLength; i++) {
+                payload[i] = buf[offset + 4 + i] ^ mask[i & 3];
+            }
+        }
+        else {
+            payload = buf.subarray(offset, offset + payloadLength);
+        }
+        return { opcode, payload, totalLength };
+    }
+    // ─── Frame Encoding ────────────────────────────────────────────────
+    encodeFrame(opcode, payload) {
+        const len = payload.length;
+        let header;
+        if (len < 126) {
+            header = Buffer.alloc(2);
+            header[0] = 0x80 | opcode; // FIN + opcode
+            header[1] = len;
+        }
+        else if (len < 65536) {
+            header = Buffer.alloc(4);
+            header[0] = 0x80 | opcode;
+            header[1] = 126;
+            header.writeUInt16BE(len, 2);
+        }
+        else {
+            header = Buffer.alloc(10);
+            header[0] = 0x80 | opcode;
+            header[1] = 127;
+            header.writeBigUInt64BE(BigInt(len), 2);
+        }
+        return Buffer.concat([header, payload]);
+    }
+    sendText(socket, text) {
+        const payload = Buffer.from(text, 'utf-8');
+        const frame = this.encodeFrame(OPCODE_TEXT, payload);
+        socket.write(frame);
+    }
+    sendPong(socket, payload) {
+        const frame = this.encodeFrame(OPCODE_PONG, payload);
+        socket.write(frame);
+    }
+    sendClose(socket, code, reason) {
+        const reasonBuf = Buffer.from(reason, 'utf-8');
+        const payload = Buffer.alloc(2 + reasonBuf.length);
+        payload.writeUInt16BE(code, 0);
+        reasonBuf.copy(payload, 2);
+        const frame = this.encodeFrame(OPCODE_CLOSE, payload);
+        socket.write(frame);
+    }
+    // ─── Heartbeat ─────────────────────────────────────────────────────
+    startHeartbeat() {
+        const interval = this.config.heartbeatInterval ?? DEFAULT_HEARTBEAT_MS;
+        if (interval <= 0)
+            return;
+        this.heartbeatTimer = setInterval(() => {
+            for (const [id, conn] of this.connections) {
+                if (!conn.alive) {
+                    // No pong received since last ping — dead connection
+                    this.sendClose(conn.socket, 1001, 'Heartbeat timeout');
+                    conn.socket.destroy();
+                    this.connections.delete(id);
+                    this.sessions.remove(id);
+                    this.callbacks.onClose(conn);
+                    continue;
+                }
+                conn.alive = false;
+                const ping = this.encodeFrame(OPCODE_PING, Buffer.alloc(0));
+                conn.socket.write(ping);
+            }
+        }, interval);
+        if (this.heartbeatTimer &&
+            typeof this.heartbeatTimer === 'object' &&
+            'unref' in this.heartbeatTimer) {
+            this.heartbeatTimer.unref();
+        }
+    }
+    stopHeartbeat() {
+        if (this.heartbeatTimer) {
+            clearInterval(this.heartbeatTimer);
+            this.heartbeatTimer = undefined;
+        }
+    }
+}
+//# sourceMappingURL=ws-server.js.map

package/dist/transport/ws-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-server.js","sourceRoot":"","sources":["../../src/transport/ws-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAqC,MAAM,WAAW,CAAC;AAG5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAgB,MAAM,sBAAsB,CAAC;AAEpE,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,mDAAmD;AACnD,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AAExD,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,wBAAwB,GAAG,SAAS,CAAC,CAAC,OAAO;AAEnD,gBAAgB;AAChB,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,WAAW,GAAG,IAAI,CAAC;AA+BzB,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,MAAM,OAAO,WAAW;IACd,MAAM,CAAqB;IAC3B,SAAS,GAAG,KAAK,CAAC,CAAC,0CAA0C;IAC7D,QAAQ,CAAiB;IACzB,MAAM,CAAoB;IAC1B,SAAS,CAAoB;IAC7B,WAAW,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,cAAc,CAA6C;IAC3D,SAAS,GAAG,CAAC,CAAC;IAEtB,YAAY,MAAyB,EAAE,SAA4B;QACjE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC;YACjC,GAAG,EAAE,MAAM,CAAC,UAAU;YACtB,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;IACL,CAAC;IAED,+BAA+B;IAC/B,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,MAAc;QACrB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YACzC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,IAAI,GAAG,WAAW;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACvC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAEtB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC9C,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEtB,kCAAkC;QAClC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,sBAAsB,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAEzB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC/D,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,QAAQ;QACN,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;YAClC,MAAM,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,IAAI,CAAC,SAAiB,EAAE,IAAa;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mDAAmD;IACnD,SAAS,CAAC,IAAa;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjC,KAAK,EAAE,CAAC;QACV,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sEAAsE;IAE9D,aAAa,CAAC,GAAoB,EAAE,MAAc,EAAE,KAAa;QACvE,qCAAqC;QACrC,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;QAC1C,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;YAClE,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,gEAAgE;QAChE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QACjF,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,MAAM,UAAU,GAAG,UAAU;YAC3B,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS;YACtC,CAAC,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE3D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAClD,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC;aACjC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC;aACxB,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEpB,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QAE7C,MAAM,CAAC,KAAK,CACV,sCAAsC;YACpC,wBAAwB;YACxB,yBAAyB;YACzB,yBAAyB,SAAS,MAAM;YACxC,mBAAmB,SAAS,MAAM;YAClC,MAAM,CACT,CAAC;QAEF,gCAAgC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC5D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtC,sBAAsB;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACvE,IAAI,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE7B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YAExC,4CAA4C;YAC5C,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACtC,IAAI,CAAC,KAAK;oBAAE,MAAM,CAAC,mBAAmB;gBAEtC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAE5C,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBACjC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;wBACnC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;wBAClD,MAAM,CAAC,OAAO,EAAE,CAAC;wBACjB,OAAO;oBACT,CAAC;oBACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBAC7C,IAAI,CAAC;wBACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBACzC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;4BACnD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;wBACtF,CAAC,CAAC,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC;wBACP,kCAAkC;wBAClC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;oBACrE,CAAC;gBACH,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBACxC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBACvC,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;gBACpB,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;oBACzC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,yEAAyE;QACzE,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE;YAC9B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,GAAG;gBAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC7C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAE1C,kBAAkB;QAClB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3C,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IAE9D,UAAU,CAAC,GAAW;QAC5B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAEhC,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAC7B,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAClC,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;YAC1B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YAChC,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,GAAG,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;YACjC,qDAAqD;YACrD,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,aAAa,CAAC;QACtD,IAAI,GAAG,CAAC,MAAM,GAAG,WAAW;YAAE,OAAO,IAAI,CAAC;QAE1C,IAAI,OAAe,CAAC;QACpB,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;YAC9C,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC1C,CAAC;IAED,sEAAsE;IAE9D,WAAW,CAAC,MAAc,EAAE,OAAe;QACjD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;QAC3B,IAAI,MAAc,CAAC;QAEnB,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;YACd,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC,eAAe;YAC1C,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QAClB,CAAC;aAAM,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;YACvB,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC;YAC1B,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YAChB,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1B,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC;YAC1B,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;YAChB,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,CAAC;IAEO,QAAQ,CAAC,MAAc,EAAE,IAAY;QAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAEO,QAAQ,CAAC,MAAc,EAAE,OAAe;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAEO,SAAS,CAAC,MAAc,EAAE,IAAY,EAAE,MAAc;QAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QACnD,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/B,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,sEAAsE;IAE9D,cAAc;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,oBAAoB,CAAC;QACvE,IAAI,QAAQ,IAAI,CAAC;YAAE,OAAO;QAE1B,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBAChB,qDAAqD;oBACrD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;oBACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACtB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACzB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC7B,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,EAAE,QAAQ,CAAC,CAAC;QAEb,IACE,IAAI,CAAC,cAAc;YACnB,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;YACvC,OAAO,IAAI,IAAI,CAAC,cAAc,EAC9B,CAAC;YACA,IAAI,CAAC,cAAiC,CAAC,KAAK,EAAE,CAAC;QAClD,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC;IACH,CAAC;CACF"}