@structured-world/gitlab-mcp 6.41.4 → 6.42.0

package/dist/src/services/TokenScopeDetector.js

@@ -0,0 +1,218 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectTokenScopes = detectTokenScopes;
+exports.isToolAvailableForScopes = isToolAvailableForScopes;
+exports.getToolsForScopes = getToolsForScopes;
+exports.getToolScopeRequirements = getToolScopeRequirements;
+exports.getTokenCreationUrl = getTokenCreationUrl;
+exports.logTokenScopeInfo = logTokenScopeInfo;
+const zod_1 = require("zod");
+const logger_1 = require("../logger");
+const config_1 = require("../config");
+const fetch_1 = require("../utils/fetch");
+const GITLAB_SCOPES = [
+    "api",
+    "read_api",
+    "read_user",
+    "read_repository",
+    "write_repository",
+    "read_registry",
+    "write_registry",
+    "sudo",
+    "admin_mode",
+    "create_runner",
+    "manage_runner",
+    "ai_features",
+    "k8s_proxy",
+];
+const GitLabScopeSchema = zod_1.z.enum(GITLAB_SCOPES);
+const TokenSelfResponseSchema = zod_1.z.object({
+    id: zod_1.z.number(),
+    name: zod_1.z.string(),
+    scopes: zod_1.z
+        .array(zod_1.z.string())
+        .transform(arr => arr.filter((s) => GitLabScopeSchema.safeParse(s).success)),
+    expires_at: zod_1.z.string().nullable(),
+    active: zod_1.z.boolean(),
+    revoked: zod_1.z.boolean(),
+});
+const TOOL_SCOPE_REQUIREMENTS = {
+    browse_projects: ["api", "read_api"],
+    browse_namespaces: ["api", "read_api"],
+    browse_commits: ["api", "read_api"],
+    browse_events: ["api", "read_api", "read_user"],
+    browse_users: ["api", "read_api", "read_user"],
+    browse_todos: ["api", "read_api"],
+    manage_project: ["api"],
+    manage_namespace: ["api"],
+    manage_todos: ["api"],
+    browse_labels: ["api", "read_api"],
+    manage_label: ["api"],
+    browse_merge_requests: ["api", "read_api"],
+    browse_mr_discussions: ["api", "read_api"],
+    manage_merge_request: ["api"],
+    manage_mr_discussion: ["api"],
+    manage_draft_notes: ["api"],
+    browse_files: ["api", "read_api", "read_repository"],
+    manage_files: ["api", "write_repository"],
+    browse_milestones: ["api", "read_api"],
+    manage_milestone: ["api"],
+    browse_pipelines: ["api", "read_api"],
+    manage_pipeline: ["api"],
+    manage_pipeline_job: ["api"],
+    browse_variables: ["api", "read_api"],
+    manage_variable: ["api"],
+    browse_wiki: ["api", "read_api"],
+    manage_wiki: ["api"],
+    browse_work_items: ["api", "read_api"],
+    manage_work_item: ["api"],
+    browse_snippets: ["api", "read_api"],
+    manage_snippet: ["api"],
+    browse_webhooks: ["api", "read_api"],
+    manage_webhook: ["api"],
+    browse_integrations: ["api", "read_api"],
+    manage_integration: ["api"],
+    browse_releases: ["api", "read_api"],
+    manage_release: ["api"],
+    browse_refs: ["api", "read_api"],
+    manage_ref: ["api"],
+    browse_members: ["api", "read_api"],
+    manage_member: ["api"],
+    browse_search: ["api", "read_api"],
+    browse_iterations: ["api", "read_api"],
+};
+async function detectTokenScopes() {
+    if (!config_1.GITLAB_BASE_URL || !config_1.GITLAB_TOKEN) {
+        return null;
+    }
+    try {
+        const response = await (0, fetch_1.enhancedFetch)(`${config_1.GITLAB_BASE_URL}/api/v4/personal_access_tokens/self`, {
+            headers: {
+                "PRIVATE-TOKEN": config_1.GITLAB_TOKEN,
+                Accept: "application/json",
+            },
+            retry: false,
+        });
+        if (!response.ok) {
+            if (response.status === 404) {
+                logger_1.logger.debug("Token self-introspection endpoint not available (older GitLab version)");
+                return null;
+            }
+            if (response.status === 401) {
+                logger_1.logger.info("Token is invalid or expired");
+                return null;
+            }
+            if (response.status === 403) {
+                logger_1.logger.debug("Token self-introspection not permitted for this token type");
+                return null;
+            }
+            logger_1.logger.debug({ status: response.status }, "Unexpected response from token self-introspection");
+            return null;
+        }
+        const raw = await response.json();
+        const parsed = TokenSelfResponseSchema.safeParse(raw);
+        if (!parsed.success) {
+            logger_1.logger.debug({ error: parsed.error.message }, "Token self-introspection response validation failed");
+            return null;
+        }
+        const data = parsed.data;
+        const scopes = data.scopes;
+        const hasGraphQLAccess = scopes.some(s => s === "api" || s === "read_api");
+        const hasWriteAccess = scopes.includes("api");
+        let daysUntilExpiry = null;
+        if (data.expires_at) {
+            const [yearStr, monthStr, dayStr] = data.expires_at.split("-");
+            const year = Number(yearStr);
+            const month = Number(monthStr);
+            const day = Number(dayStr);
+            if (!Number.isNaN(year) && !Number.isNaN(month) && !Number.isNaN(day)) {
+                const expiryUtcMs = Date.UTC(year, month - 1, day);
+                const now = new Date();
+                const todayUtcMs = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate());
+                daysUntilExpiry = Math.ceil((expiryUtcMs - todayUtcMs) / (1000 * 60 * 60 * 24));
+            }
+        }
+        const tokenType = "unknown";
+        return {
+            name: data.name,
+            scopes,
+            expiresAt: data.expires_at,
+            active: data.active && !data.revoked,
+            tokenType,
+            hasGraphQLAccess,
+            hasWriteAccess,
+            daysUntilExpiry,
+        };
+    }
+    catch (error) {
+        logger_1.logger.debug({ error: error instanceof Error ? error.message : String(error) }, "Token scope detection failed (network error)");
+        return null;
+    }
+}
+function isToolAvailableForScopes(toolName, scopes) {
+    const requiredScopes = TOOL_SCOPE_REQUIREMENTS[toolName];
+    if (!requiredScopes) {
+        return true;
+    }
+    return requiredScopes.some(required => scopes.includes(required));
+}
+function getToolsForScopes(scopes) {
+    return Object.keys(TOOL_SCOPE_REQUIREMENTS).filter(toolName => isToolAvailableForScopes(toolName, scopes));
+}
+function getToolScopeRequirements() {
+    return Object.fromEntries(Object.entries(TOOL_SCOPE_REQUIREMENTS).map(([toolName, scopes]) => [toolName, [...scopes]]));
+}
+function getTokenCreationUrl(baseUrl, scopes = ["api", "read_user"]) {
+    try {
+        const url = new URL(baseUrl);
+        const basePath = url.pathname === "/" ? "" : url.pathname.replace(/\/$/, "");
+        url.pathname = `${basePath}/-/user_settings/personal_access_tokens`;
+        url.searchParams.set("name", "gitlab-mcp");
+        url.searchParams.set("scopes", scopes.join(","));
+        return url.toString();
+    }
+    catch {
+        const base = baseUrl.replace(/\/$/, "");
+        const params = new URLSearchParams({
+            name: "gitlab-mcp",
+            scopes: scopes.join(","),
+        });
+        return `${base}/-/user_settings/personal_access_tokens?${params.toString()}`;
+    }
+}
+function logTokenScopeInfo(info, totalTools) {
+    const availableTools = getToolsForScopes(info.scopes);
+    const scopeList = info.scopes.join(", ");
+    if (info.daysUntilExpiry !== null && info.daysUntilExpiry <= 7) {
+        if (info.daysUntilExpiry < 0) {
+            logger_1.logger.warn({ tokenName: info.name, expiresAt: info.expiresAt }, `Token "${info.name}" has expired! Please create a new token.`);
+        }
+        else if (info.daysUntilExpiry === 0) {
+            logger_1.logger.warn({ tokenName: info.name, expiresAt: info.expiresAt }, `Token "${info.name}" expires today!`);
+        }
+        else {
+            logger_1.logger.warn({ tokenName: info.name, daysUntilExpiry: info.daysUntilExpiry, expiresAt: info.expiresAt }, `Token "${info.name}" expires in ${info.daysUntilExpiry} day(s)`);
+        }
+    }
+    if (info.hasWriteAccess) {
+        logger_1.logger.info({
+            tokenName: info.name,
+            scopes: scopeList,
+            expiresAt: info.expiresAt ?? "never",
+        }, `Token "${info.name}" detected (scopes: ${scopeList})`);
+    }
+    else {
+        logger_1.logger.info({
+            tokenName: info.name,
+            scopes: scopeList,
+            availableTools: availableTools.length,
+            totalTools,
+        }, `Token "${info.name}" has limited scopes - ${availableTools.length} of ${totalTools} scope-gated tools available`);
+        if (!info.hasGraphQLAccess) {
+            logger_1.logger.info("GraphQL introspection skipped (requires 'api' or 'read_api' scope)");
+        }
+        const fixUrl = getTokenCreationUrl(config_1.GITLAB_BASE_URL);
+        logger_1.logger.info({ url: fixUrl }, `For full functionality, create a token with 'api' scope: ${fixUrl}`);
+    }
+}
+//# sourceMappingURL=TokenScopeDetector.js.map

package/dist/src/services/TokenScopeDetector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenScopeDetector.js","sourceRoot":"","sources":["../../../src/services/TokenScopeDetector.ts"],"names":[],"mappings":";;AAsLA,8CA0FC;AAKD,4DAUC;AAKD,8CAIC;AAOD,4DAIC;AAKD,kDAqBC;AAKD,8CAwDC;AAhYD,6BAAwB;AACxB,sCAAmC;AACnC,sCAA0D;AAC1D,0CAA+C;AAe/C,MAAM,aAAa,GAAG;IACpB,KAAK;IACL,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,gBAAgB;IAChB,MAAM;IACN,YAAY;IACZ,eAAe;IACf,eAAe;IACf,aAAa;IACb,WAAW;CACH,CAAC;AAEX,MAAM,iBAAiB,GAAG,OAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAOhD,MAAM,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,OAAC;SACN,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;SACjB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAChG,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,OAAC,CAAC,OAAO,EAAE;IACnB,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AA4BH,MAAM,uBAAuB,GAAkC;IAE7D,eAAe,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IACpC,iBAAiB,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IACtC,cAAc,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IACnC,aAAa,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,CAAC;IAC/C,YAAY,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,CAAC;IAC9C,YAAY,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IACjC,cAAc,EAAE,CAAC,KAAK,CAAC;IACvB,gBAAgB,EAAE,CAAC,KAAK,CAAC;IACzB,YAAY,EAAE,CAAC,KAAK,CAAC;IAKrB,aAAa,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IAClC,YAAY,EAAE,CAAC,KAAK,CAAC;IAGrB,qBAAqB,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IAC1C,qBAAqB,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IAC1C,oBAAoB,EAAE,CAAC,KAAK,CAAC;IAC7B,oBAAoB,EAAE,CAAC,KAAK,CAAC;IAC7B,kBAAkB,EAAE,CAAC,KAAK,CAAC;IAG3B,YAAY,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,iBAAiB,CAAC;IACpD,YAAY,EAAE,CAAC,KAAK,EAAE,kBAAkB,CAAC;IAGzC,iBAAiB,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IACtC,gBAAgB,EAAE,CAAC,KAAK,CAAC;IAGzB,gBAAgB,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IACrC,eAAe,EAAE,CAAC,KAAK,CAAC;IACxB,mBAAmB,EAAE,CAAC,KAAK,CAAC;IAG5B,gBAAgB,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IACrC,eAAe,EAAE,CAAC,KAAK,CAAC;IAGxB,WAAW,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IAChC,WAAW,EAAE,CAAC,KAAK,CAAC;IAGpB,iBAAiB,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IACtC,gBAAgB,EAAE,CAAC,KAAK,CAAC;IAGzB,eAAe,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IACpC,cAAc,EAAE,CAAC,KAAK,CAAC;IAGvB,eAAe,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IACpC,cAAc,EAAE,CAAC,KAAK,CAAC;IAGvB,mBAAmB,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IACxC,kBAAkB,EAAE,CAAC,KAAK,CAAC;IAG3B,eAAe,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IACpC,cAAc,EAAE,CAAC,KAAK,CAAC;IAGvB,WAAW,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IAChC,UAAU,EAAE,CAAC,KAAK,CAAC;IAGnB,cAAc,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IACnC,aAAa,EAAE,CAAC,KAAK,CAAC;IAGtB,aAAa,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;IAGlC,iBAAiB,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;CACvC,CAAC;AAeK,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC,wBAAe,IAAI,CAAC,qBAAY,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAA,qBAAa,EAAC,GAAG,wBAAe,qCAAqC,EAAE;YAC5F,OAAO,EAAE;gBACP,eAAe,EAAE,qBAAY;gBAC7B,MAAM,EAAE,kBAAkB;aAC3B;YACD,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAEjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,eAAM,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;gBACvF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,eAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;gBAC3C,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAE5B,eAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBAC3E,OAAO,IAAI,CAAC;YACd,CAAC;YACD,eAAM,CAAC,KAAK,CACV,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAC3B,mDAAmD,CACpD,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,eAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAC/B,qDAAqD,CACtD,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAEzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC;QAC3E,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAI9C,IAAI,eAAe,GAAkB,IAAI,CAAC;QAC1C,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAE3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;gBACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;gBACvF,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAID,MAAM,SAAS,GAAoB,SAAS,CAAC;QAE7C,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO;YACpC,SAAS;YACT,gBAAgB;YAChB,cAAc;YACd,eAAe;SAChB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAEf,eAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACjE,8CAA8C,CAC/C,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAKD,SAAgB,wBAAwB,CAAC,QAAgB,EAAE,MAAqB;IAC9E,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAGzD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAGD,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpE,CAAC;AAKD,SAAgB,iBAAiB,CAAC,MAAqB;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAC5D,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAC3C,CAAC;AACJ,CAAC;AAOD,SAAgB,wBAAwB;IACtC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAC7F,CAAC;AACJ,CAAC;AAKD,SAAgB,mBAAmB,CACjC,OAAe,EACf,SAAmB,CAAC,KAAK,EAAE,WAAW,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAE7B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7E,GAAG,CAAC,QAAQ,GAAG,GAAG,QAAQ,yCAAyC,CAAC;QACpE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QAEP,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACzB,CAAC,CAAC;QACH,OAAO,GAAG,IAAI,2CAA2C,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC/E,CAAC;AACH,CAAC;AAKD,SAAgB,iBAAiB,CAAC,IAAoB,EAAE,UAAkB;IACxE,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAGzC,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,IAAI,CAAC,eAAe,IAAI,CAAC,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;YAC7B,eAAM,CAAC,IAAI,CACT,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EACnD,UAAU,IAAI,CAAC,IAAI,2CAA2C,CAC/D,CAAC;QACJ,CAAC;aAAM,IAAI,IAAI,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;YACtC,eAAM,CAAC,IAAI,CACT,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EACnD,UAAU,IAAI,CAAC,IAAI,kBAAkB,CACtC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,eAAM,CAAC,IAAI,CACT,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAC1F,UAAU,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,eAAe,SAAS,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QAExB,eAAM,CAAC,IAAI,CACT;YACE,SAAS,EAAE,IAAI,CAAC,IAAI;YACpB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,OAAO;SACrC,EACD,UAAU,IAAI,CAAC,IAAI,uBAAuB,SAAS,GAAG,CACvD,CAAC;IACJ,CAAC;SAAM,CAAC;QAEN,eAAM,CAAC,IAAI,CACT;YACE,SAAS,EAAE,IAAI,CAAC,IAAI;YACpB,MAAM,EAAE,SAAS;YACjB,cAAc,EAAE,cAAc,CAAC,MAAM;YACrC,UAAU;SACX,EACD,UAAU,IAAI,CAAC,IAAI,0BAA0B,cAAc,CAAC,MAAM,OAAO,UAAU,8BAA8B,CAClH,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,eAAM,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,wBAAe,CAAC,CAAC;QACpD,eAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,MAAM,EAAE,EACf,4DAA4D,MAAM,EAAE,CACrE,CAAC;IACJ,CAAC;AACH,CAAC"}