@thenavidm/threads-mcp-cli 1.1.0

package/dist/api/errors.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Typed errors for every way a Threads API call can fail.
+ *
+ * Meta returns a consistent envelope, and the interesting part is not the HTTP
+ * status:
+ *
+ *   {"error":{"message":"...","type":"OAuthException","code":190,
+ *             "error_subcode":463,"fbtrace_id":"..."}}
+ *
+ * `code` and `error_subcode` are the fields that actually distinguish "your
+ * token expired" (190/463) from "you never had this permission" (190/458) from
+ * "you are posting too fast" (4 or 32), and all three arrive as HTTP 400. Throw
+ * that away and hand a model a bare string, and a model that could have
+ * refreshed a token or waited out a quota instead just gives up.
+ *
+ * Every error here keeps the code, the subcode and the endpoint, and carries a
+ * message naming the actual fix, including which OAuth scope was missing when
+ * that is what happened.
+ */
+export declare class ThreadsError extends Error {
+    readonly status: number;
+    readonly endpoint: string;
+    /** Meta's numeric error code. 0 when absent. */
+    readonly code: number;
+    readonly subcode: number;
+    /** Meta's error type, e.g. "OAuthException". */
+    readonly type: string;
+    readonly detail: string;
+    /** Meta's trace id. The only useful thing to quote in a bug report. */
+    readonly traceId: string;
+    constructor(message: string, status: number, endpoint: string, parts?: Partial<{
+        code: number;
+        subcode: number;
+        type: string;
+        detail: string;
+        traceId: string;
+    }>);
+    toJSON(): Record<string, unknown>;
+}
+/** The token is expired, revoked, or was never valid. A refresh may fix it. */
+export declare class AuthenticationError extends ThreadsError {
+}
+/** Authenticated, but the app lacks the scope, or App Review has not granted it. */
+export declare class PermissionError extends ThreadsError {
+}
+/** Bad arguments: a container that will not build, an unreachable media URL. */
+export declare class ValidationError extends ThreadsError {
+}
+/** The post, container or profile does not exist, or is not visible to you. */
+export declare class NotFoundError extends ThreadsError {
+}
+/** A published or reply quota is exhausted for the rolling 24-hour window. */
+export declare class RateLimitError extends ThreadsError {
+}
+/** 5xx. Upstream, usually transient, worth retrying. */
+export declare class ServerError extends ThreadsError {
+}
+/** Nothing arrived before our own deadline. */
+export declare class TimeoutError extends ThreadsError {
+}
+/** A media container failed to process, expired, or never finished. */
+export declare class ContainerError extends ThreadsError {
+}
+/** Writes are disabled, or a destructive tool was called without `confirm`. */
+export declare class WriteBlockedError extends ThreadsError {
+    constructor(message: string);
+}
+/** A post is longer than Threads will accept. Raised before anything is sent. */
+export declare class TextTooLongError extends ThreadsError {
+    constructor(message: string);
+}
+export type MetaErrorBody = {
+    code: number;
+    subcode: number;
+    type: string;
+    message: string;
+    traceId: string;
+};
+/**
+ * Pull Meta's error envelope out of a response body.
+ *
+ * Falls back to raw text capped at 500 characters, so an HTML error page from
+ * a load balancer in front of the Graph API does not become the whole message.
+ */
+export declare function parseErrorBody(body: string): MetaErrorBody;
+/** True when this failure means a token refresh is worth attempting. */
+export declare function isRefreshable(code: number, subcode: number): boolean;
+/** True when the token is dead and only a fresh authorisation will help. */
+export declare function isUnrecoverableToken(code: number, subcode: number): boolean;
+export declare function scopeFor(endpoint: string): string | undefined;
+/** Map a status plus Meta's error code onto the right class. */
+export declare function errorFor(status: number, endpoint: string, body: string): ThreadsError;

package/dist/api/errors.js

@@ -0,0 +1,195 @@
+/**
+ * Typed errors for every way a Threads API call can fail.
+ *
+ * Meta returns a consistent envelope, and the interesting part is not the HTTP
+ * status:
+ *
+ *   {"error":{"message":"...","type":"OAuthException","code":190,
+ *             "error_subcode":463,"fbtrace_id":"..."}}
+ *
+ * `code` and `error_subcode` are the fields that actually distinguish "your
+ * token expired" (190/463) from "you never had this permission" (190/458) from
+ * "you are posting too fast" (4 or 32), and all three arrive as HTTP 400. Throw
+ * that away and hand a model a bare string, and a model that could have
+ * refreshed a token or waited out a quota instead just gives up.
+ *
+ * Every error here keeps the code, the subcode and the endpoint, and carries a
+ * message naming the actual fix, including which OAuth scope was missing when
+ * that is what happened.
+ */
+export class ThreadsError extends Error {
+    status;
+    endpoint;
+    /** Meta's numeric error code. 0 when absent. */
+    code;
+    subcode;
+    /** Meta's error type, e.g. "OAuthException". */
+    type;
+    detail;
+    /** Meta's trace id. The only useful thing to quote in a bug report. */
+    traceId;
+    constructor(message, status, endpoint, parts = {}) {
+        super(message);
+        this.name = new.target.name;
+        this.status = status;
+        this.endpoint = endpoint;
+        this.code = parts.code ?? 0;
+        this.subcode = parts.subcode ?? 0;
+        this.type = parts.type ?? "";
+        this.detail = parts.detail ?? "";
+        this.traceId = parts.traceId ?? "";
+    }
+    toJSON() {
+        return {
+            error: this.message,
+            type: this.name,
+            status: this.status,
+            endpoint: this.endpoint,
+            ...(this.code ? { code: this.code } : {}),
+            ...(this.subcode ? { subcode: this.subcode } : {}),
+            ...(this.type ? { meta_type: this.type } : {}),
+            ...(this.detail ? { detail: this.detail } : {}),
+            ...(this.traceId ? { trace_id: this.traceId } : {}),
+        };
+    }
+}
+/** The token is expired, revoked, or was never valid. A refresh may fix it. */
+export class AuthenticationError extends ThreadsError {
+}
+/** Authenticated, but the app lacks the scope, or App Review has not granted it. */
+export class PermissionError extends ThreadsError {
+}
+/** Bad arguments: a container that will not build, an unreachable media URL. */
+export class ValidationError extends ThreadsError {
+}
+/** The post, container or profile does not exist, or is not visible to you. */
+export class NotFoundError extends ThreadsError {
+}
+/** A published or reply quota is exhausted for the rolling 24-hour window. */
+export class RateLimitError extends ThreadsError {
+}
+/** 5xx. Upstream, usually transient, worth retrying. */
+export class ServerError extends ThreadsError {
+}
+/** Nothing arrived before our own deadline. */
+export class TimeoutError extends ThreadsError {
+}
+/** A media container failed to process, expired, or never finished. */
+export class ContainerError extends ThreadsError {
+}
+/** Writes are disabled, or a destructive tool was called without `confirm`. */
+export class WriteBlockedError extends ThreadsError {
+    constructor(message) {
+        super(message, 0, "(local)", { type: "WriteBlocked" });
+    }
+}
+/** A post is longer than Threads will accept. Raised before anything is sent. */
+export class TextTooLongError extends ThreadsError {
+    constructor(message) {
+        super(message, 0, "(local)", { type: "TextTooLong" });
+    }
+}
+/**
+ * Pull Meta's error envelope out of a response body.
+ *
+ * Falls back to raw text capped at 500 characters, so an HTML error page from
+ * a load balancer in front of the Graph API does not become the whole message.
+ */
+export function parseErrorBody(body) {
+    const empty = { code: 0, subcode: 0, type: "", message: "", traceId: "" };
+    const text = body.trim();
+    if (!text)
+        return empty;
+    try {
+        const parsed = JSON.parse(text);
+        if (parsed && typeof parsed === "object") {
+            const err = parsed.error;
+            if (err && typeof err === "object") {
+                const e = err;
+                return {
+                    code: typeof e.code === "number" ? e.code : 0,
+                    subcode: typeof e.error_subcode === "number" ? e.error_subcode : 0,
+                    type: typeof e.type === "string" ? e.type : "",
+                    message: typeof e.message === "string" ? e.message.slice(0, 500) : "",
+                    traceId: typeof e.fbtrace_id === "string" ? e.fbtrace_id : "",
+                };
+            }
+        }
+    }
+    catch {
+        // Not JSON. Fall through to the raw text.
+    }
+    return { ...empty, message: text.replace(/\s+/g, " ").slice(0, 500) };
+}
+/**
+ * Meta's OAuth error codes, as far as they are documented and observed.
+ *
+ * 190 is every token problem at once, and the subcode is what separates them.
+ * 463 means expired, which a refresh fixes. 467 means invalidated, which it
+ * does not: the person has to authorise again.
+ */
+const OAUTH_CODE = 190;
+const SUBCODE_EXPIRED = 463;
+const SUBCODE_INVALIDATED = 467;
+const SUBCODE_CHANGED_PASSWORD = 460;
+/** True when this failure means a token refresh is worth attempting. */
+export function isRefreshable(code, subcode) {
+    return code === OAUTH_CODE && subcode === SUBCODE_EXPIRED;
+}
+/** True when the token is dead and only a fresh authorisation will help. */
+export function isUnrecoverableToken(code, subcode) {
+    return code === OAUTH_CODE && (subcode === SUBCODE_INVALIDATED || subcode === SUBCODE_CHANGED_PASSWORD);
+}
+/**
+ * The scope each endpoint needs, so a permission failure can name it.
+ *
+ * Threads splits its permissions far more finely than most APIs, and the error
+ * Meta returns for a missing one does not say which is missing. Being told
+ * "add threads_manage_insights" is the difference between a two-minute fix in
+ * the App Dashboard and an afternoon of guessing.
+ */
+const SCOPE_FOR = [
+    [/threads_publish|\/threads$/, "threads_content_publish"],
+    [/manage_reply|pending_replies/, "threads_manage_replies"],
+    [/\/replies|\/conversation/, "threads_read_replies"],
+    [/insights/, "threads_manage_insights"],
+    [/keyword_search/, "threads_keyword_search"],
+    [/profile_lookup/, "threads_profile_discovery"],
+    [/location_search/, "threads_location_tagging"],
+];
+export function scopeFor(endpoint) {
+    for (const [pattern, scope] of SCOPE_FOR) {
+        if (pattern.test(endpoint))
+            return scope;
+    }
+    return undefined;
+}
+/** Map a status plus Meta's error code onto the right class. */
+export function errorFor(status, endpoint, body) {
+    const { code, subcode, type, message, traceId } = parseErrorBody(body);
+    const parts = { code, subcode, type, detail: message, traceId };
+    // Meta signals a spent quota with codes 4, 17 and 32 rather than HTTP 429.
+    if (status === 429 || code === 4 || code === 17 || code === 32 || code === 613) {
+        return new RateLimitError(`Threads rate limited ${endpoint}. Posting is capped at 250 posts and 1,000 replies per rolling 24 hours, and deletes at 100. Call get_publishing_limit to see what is left.`, status, endpoint, parts);
+    }
+    if (code === OAUTH_CODE || status === 401) {
+        if (isUnrecoverableToken(code, subcode)) {
+            return new AuthenticationError(`The Threads token was invalidated and cannot be refreshed. Run \`threads-mcp login\` to authorise again.`, status, endpoint, parts);
+        }
+        return new AuthenticationError(`Threads rejected the token for ${endpoint}. A long-lived token lasts 60 days and dies permanently if it is never refreshed. Try \`threads-mcp refresh\`, then \`threads-mcp login\` if that fails.`, status, endpoint, parts);
+    }
+    if (status === 403 || code === 10 || (code >= 200 && code <= 299)) {
+        const scope = scopeFor(endpoint);
+        return new PermissionError(scope
+            ? `Threads refused ${endpoint}. This endpoint needs the \`${scope}\` scope, granted both when the profile authorises the app and by App Review for anyone other than a tester on your own app.`
+            : `Threads refused ${endpoint} for this profile. This is usually a missing OAuth scope or an App Review permission that has not been granted.`, status, endpoint, parts);
+    }
+    if (status === 404 || code === 803) {
+        return new NotFoundError(`Not found via ${endpoint}. Check the post or container id. A deleted post, a container that expired after 24 hours, and an id that never existed all look the same here.`, status, endpoint, parts);
+    }
+    if (status >= 500) {
+        return new ServerError(`Threads returned ${status} for ${endpoint}. This is upstream and usually transient.`, status, endpoint, parts);
+    }
+    return new ValidationError(`Threads rejected the request to ${endpoint}${code ? ` (code ${code}${subcode ? `/${subcode}` : ""})` : ""}.`, status, endpoint, parts);
+}
+//# sourceMappingURL=errors.js.map

package/dist/api/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/api/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,MAAM,CAAS;IACf,QAAQ,CAAS;IAC1B,gDAAgD;IACvC,IAAI,CAAS;IACb,OAAO,CAAS;IACzB,gDAAgD;IACvC,IAAI,CAAS;IACb,MAAM,CAAS;IACxB,uEAAuE;IAC9D,OAAO,CAAS;IAEzB,YACE,OAAe,EACf,MAAc,EACd,QAAgB,EAChB,QAAmG,EAAE;QAErG,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,MAAM;QACJ,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,OAAO;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,MAAM,OAAO,mBAAoB,SAAQ,YAAY;CAAG;AAExD,oFAAoF;AACpF,MAAM,OAAO,eAAgB,SAAQ,YAAY;CAAG;AAEpD,gFAAgF;AAChF,MAAM,OAAO,eAAgB,SAAQ,YAAY;CAAG;AAEpD,+EAA+E;AAC/E,MAAM,OAAO,aAAc,SAAQ,YAAY;CAAG;AAElD,8EAA8E;AAC9E,MAAM,OAAO,cAAe,SAAQ,YAAY;CAAG;AAEnD,wDAAwD;AACxD,MAAM,OAAO,WAAY,SAAQ,YAAY;CAAG;AAEhD,+CAA+C;AAC/C,MAAM,OAAO,YAAa,SAAQ,YAAY;CAAG;AAEjD,uEAAuE;AACvE,MAAM,OAAO,cAAe,SAAQ,YAAY;CAAG;AAEnD,+EAA+E;AAC/E,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IACzD,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,OAAO,gBAAiB,SAAQ,YAAY;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IACxD,CAAC;CACF;AAUD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAExB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,GAAG,GAAI,MAAkC,CAAC,KAAK,CAAC;YACtD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,GAA8B,CAAC;gBACzC,OAAO;oBACL,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC7C,OAAO,EAAE,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;oBAClE,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;oBAC9C,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;oBACrE,OAAO,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;iBAC9D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;IAED,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAe;IACzD,OAAO,IAAI,KAAK,UAAU,IAAI,OAAO,KAAK,eAAe,CAAC;AAC5D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,OAAe;IAChE,OAAO,IAAI,KAAK,UAAU,IAAI,CAAC,OAAO,KAAK,mBAAmB,IAAI,OAAO,KAAK,wBAAwB,CAAC,CAAC;AAC1G,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,SAAS,GAA4B;IACzC,CAAC,4BAA4B,EAAE,yBAAyB,CAAC;IACzD,CAAC,8BAA8B,EAAE,wBAAwB,CAAC;IAC1D,CAAC,0BAA0B,EAAE,sBAAsB,CAAC;IACpD,CAAC,UAAU,EAAE,yBAAyB,CAAC;IACvC,CAAC,gBAAgB,EAAE,wBAAwB,CAAC;IAC5C,CAAC,gBAAgB,EAAE,2BAA2B,CAAC;IAC/C,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;CAChD,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,QAAgB,EAAE,IAAY;IACrE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAEhE,2EAA2E;IAC3E,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QAC/E,OAAO,IAAI,cAAc,CACvB,wBAAwB,QAAQ,6IAA6I,EAC7K,MAAM,EACN,QAAQ,EACR,KAAK,CACN,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,UAAU,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1C,IAAI,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,mBAAmB,CAC5B,0GAA0G,EAC1G,MAAM,EACN,QAAQ,EACR,KAAK,CACN,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,mBAAmB,CAC5B,kCAAkC,QAAQ,0JAA0J,EACpM,MAAM,EACN,QAAQ,EACR,KAAK,CACN,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjC,OAAO,IAAI,eAAe,CACxB,KAAK;YACH,CAAC,CAAC,mBAAmB,QAAQ,+BAA+B,KAAK,8HAA8H;YAC/L,CAAC,CAAC,mBAAmB,QAAQ,iHAAiH,EAChJ,MAAM,EACN,QAAQ,EACR,KAAK,CACN,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACnC,OAAO,IAAI,aAAa,CACtB,iBAAiB,QAAQ,iJAAiJ,EAC1K,MAAM,EACN,QAAQ,EACR,KAAK,CACN,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,OAAO,IAAI,WAAW,CACpB,oBAAoB,MAAM,QAAQ,QAAQ,2CAA2C,EACrF,MAAM,EACN,QAAQ,EACR,KAAK,CACN,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,eAAe,CACxB,mCAAmC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAC7G,MAAM,EACN,QAAQ,EACR,KAAK,CACN,CAAC;AACJ,CAAC"}

package/dist/api/identity.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Post ids, container ids, and the two hostnames Threads answers on.
+ *
+ * A Threads post has a numeric media id, which is what every endpoint wants,
+ * and a permalink containing a shortcode, which is what a person copies out of
+ * the app. They are not the same string and there is no public endpoint that
+ * converts a shortcode back into an id.
+ *
+ * So: anywhere a tool takes a post, it accepts a numeric id, or a permalink
+ * whose numeric id we can read. A permalink that carries only a shortcode is
+ * refused with an explanation rather than being silently sent to the API as a
+ * malformed id, which fails several layers later with a message about nothing.
+ */
+export type PostRef = {
+    /** The numeric media id, when it could be determined. */
+    id?: string;
+    /** The permalink shortcode, when the input was a URL. */
+    shortcode?: string;
+    username?: string;
+};
+/** True for a bare numeric Threads media or container id. */
+export declare function isMediaId(value: string): boolean;
+export declare function parsePostRef(raw: string): PostRef;
+/**
+ * Resolve whatever the caller passed into the numeric id the API needs.
+ *
+ * Threads publishes no shortcode-to-id endpoint, so a permalink alone cannot be
+ * resolved. Saying that plainly is better than sending the shortcode and
+ * letting Meta return a generic "Unsupported get request".
+ */
+export declare function requireMediaId(raw: string): string;
+/** Best-effort permalink, for display when the API did not return one. */
+export declare function webUrl(username: string | undefined, shortcode: string | undefined): string | undefined;

package/dist/api/identity.js

@@ -0,0 +1,52 @@
+/**
+ * Post ids, container ids, and the two hostnames Threads answers on.
+ *
+ * A Threads post has a numeric media id, which is what every endpoint wants,
+ * and a permalink containing a shortcode, which is what a person copies out of
+ * the app. They are not the same string and there is no public endpoint that
+ * converts a shortcode back into an id.
+ *
+ * So: anywhere a tool takes a post, it accepts a numeric id, or a permalink
+ * whose numeric id we can read. A permalink that carries only a shortcode is
+ * refused with an explanation rather than being silently sent to the API as a
+ * malformed id, which fails several layers later with a message about nothing.
+ */
+/** Threads moved to threads.com; threads.net still resolves. Both are accepted. */
+const PERMALINK = /^https?:\/\/(?:www\.)?threads\.(?:net|com)\/(?:@([\w.]+)\/)?post\/([A-Za-z0-9_-]+)/i;
+/** True for a bare numeric Threads media or container id. */
+export function isMediaId(value) {
+    return /^\d{5,}$/.test(value.trim());
+}
+export function parsePostRef(raw) {
+    const value = raw.trim();
+    if (isMediaId(value))
+        return { id: value };
+    const match = PERMALINK.exec(value);
+    if (match) {
+        return { shortcode: match[2], username: match[1]?.toLowerCase() };
+    }
+    return {};
+}
+/**
+ * Resolve whatever the caller passed into the numeric id the API needs.
+ *
+ * Threads publishes no shortcode-to-id endpoint, so a permalink alone cannot be
+ * resolved. Saying that plainly is better than sending the shortcode and
+ * letting Meta return a generic "Unsupported get request".
+ */
+export function requireMediaId(raw) {
+    const ref = parsePostRef(raw);
+    if (ref.id)
+        return ref.id;
+    if (ref.shortcode) {
+        throw new Error(`"${raw}" is a Threads permalink. Threads has no public endpoint that converts a permalink shortcode back into the numeric post id the API needs. Use the numeric id, which get_posts returns for every post alongside its permalink.`);
+    }
+    throw new Error(`"${raw}" is not a Threads post id. Pass the numeric id, which get_posts and get_replies return on every result.`);
+}
+/** Best-effort permalink, for display when the API did not return one. */
+export function webUrl(username, shortcode) {
+    if (!username || !shortcode)
+        return undefined;
+    return `https://www.threads.com/@${username}/post/${shortcode}`;
+}
+//# sourceMappingURL=identity.js.map

package/dist/api/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/api/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,mFAAmF;AACnF,MAAM,SAAS,GAAG,qFAAqF,CAAC;AAUxG,6DAA6D;AAC7D,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAE3C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC;IACpE,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC,EAAE,CAAC;IAC1B,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,IAAI,GAAG,+NAA+N,CACvO,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CACb,IAAI,GAAG,0GAA0G,CAClH,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,MAAM,CAAC,QAA4B,EAAE,SAA6B;IAChF,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,OAAO,4BAA4B,QAAQ,SAAS,SAAS,EAAE,CAAC;AAClE,CAAC"}

package/dist/auth/login.d.ts

@@ -0,0 +1,32 @@
+/**
+ * `threads-mcp login`: the whole OAuth flow, on the command line.
+ *
+ * Threads is not a platform where you can paste a credential and be done. You
+ * need a Meta app, and the token that app's Graph Explorer hands out is
+ * short-lived, so the usual "paste a token into the config" route produces
+ * something that stops working in an hour. That is why so many Threads
+ * integrations are described as flaky: they are not flaky, they were set up
+ * with the wrong kind of token.
+ *
+ * This command does the sequence properly: opens the authorisation URL, catches
+ * the redirect on a loopback listener, exchanges the code, exchanges the
+ * short-lived token for a 60-day one, verifies it against `GET /me`, and writes
+ * it to a store the server can refresh on its own afterwards.
+ *
+ * The loopback redirect binds 127.0.0.1 on a port you choose, and the same URL
+ * has to be listed as a valid redirect URI in the app's settings. That is the
+ * one manual step nothing can remove.
+ */
+/** Every scope this server can use. Anything not granted simply stays unused. */
+export declare const ALL_SCOPES: string[];
+/** The subset that needs nothing from App Review while you are a tester. */
+export declare const CORE_SCOPES: string[];
+export declare function authorizeUrl(appId: string, redirectUri: string, scopes: string[]): string;
+export type LoginOptions = {
+    port: number;
+    scopes: string[];
+    /** Skip the browser and take a short-lived token pasted in by hand. */
+    manual: boolean;
+};
+export declare function loginOptionsFrom(argv: string[]): LoginOptions;
+export declare function runLogin(argv?: string[]): Promise<number>;

package/dist/auth/login.js

@@ -0,0 +1,204 @@
+/**
+ * `threads-mcp login`: the whole OAuth flow, on the command line.
+ *
+ * Threads is not a platform where you can paste a credential and be done. You
+ * need a Meta app, and the token that app's Graph Explorer hands out is
+ * short-lived, so the usual "paste a token into the config" route produces
+ * something that stops working in an hour. That is why so many Threads
+ * integrations are described as flaky: they are not flaky, they were set up
+ * with the wrong kind of token.
+ *
+ * This command does the sequence properly: opens the authorisation URL, catches
+ * the redirect on a loopback listener, exchanges the code, exchanges the
+ * short-lived token for a 60-day one, verifies it against `GET /me`, and writes
+ * it to a store the server can refresh on its own afterwards.
+ *
+ * The loopback redirect binds 127.0.0.1 on a port you choose, and the same URL
+ * has to be listed as a valid redirect URI in the app's settings. That is the
+ * one manual step nothing can remove.
+ */
+import { createServer } from "node:http";
+import { spawn } from "node:child_process";
+import { createInterface } from "node:readline/promises";
+import { loadConfig, normalizeUsername } from "../config.js";
+import { exchangeForLongLived, expiryFrom } from "./tokens.js";
+import { upsertToken } from "./store.js";
+import { ThreadsClient } from "../api/client.js";
+const AUTH_HOST = "https://threads.net";
+/** Every scope this server can use. Anything not granted simply stays unused. */
+export const ALL_SCOPES = [
+    "threads_basic",
+    "threads_content_publish",
+    "threads_manage_replies",
+    "threads_read_replies",
+    "threads_manage_insights",
+    "threads_delete",
+    "threads_keyword_search",
+    "threads_profile_discovery",
+    "threads_location_tagging",
+];
+/** The subset that needs nothing from App Review while you are a tester. */
+export const CORE_SCOPES = [
+    "threads_basic",
+    "threads_content_publish",
+    "threads_manage_replies",
+    "threads_read_replies",
+    "threads_manage_insights",
+    "threads_delete",
+];
+export function authorizeUrl(appId, redirectUri, scopes) {
+    const url = new URL(`${AUTH_HOST}/oauth/authorize`);
+    url.searchParams.set("client_id", appId);
+    url.searchParams.set("redirect_uri", redirectUri);
+    url.searchParams.set("scope", scopes.join(","));
+    url.searchParams.set("response_type", "code");
+    return url.toString();
+}
+function open(url) {
+    const command = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
+    try {
+        spawn(command, [url], { detached: true, stdio: "ignore", shell: process.platform === "win32" }).unref();
+    }
+    catch {
+        // No browser is fine. The URL is printed either way.
+    }
+}
+/** Wait for Meta to redirect back with `?code=`. Resolves with the code. */
+function awaitCode(port, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        const server = createServer((req, res) => {
+            const url = new URL(req.url ?? "/", `http://127.0.0.1:${port}`);
+            const code = url.searchParams.get("code");
+            const error = url.searchParams.get("error_description") ?? url.searchParams.get("error");
+            res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
+            res.end(`<!doctype html><meta charset="utf-8"><title>threads-mcp</title>` +
+                `<body style="font:16px system-ui;padding:3rem;max-width:34rem">` +
+                (code
+                    ? `<h1>Authorised</h1><p>You can close this tab and go back to the terminal.</p>`
+                    : `<h1>Authorisation failed</h1><p>${error ?? "No code was returned."}</p>`) +
+                `</body>`);
+            server.close();
+            clearTimeout(timer);
+            if (code)
+                resolve(code);
+            else
+                reject(new Error(error ?? "Threads returned no authorisation code."));
+        });
+        const timer = setTimeout(() => {
+            server.close();
+            reject(new Error(`No redirect arrived within ${Math.round(timeoutMs / 1000)}s.`));
+        }, timeoutMs);
+        server.on("error", (error) => {
+            clearTimeout(timer);
+            reject(new Error(`Could not listen on 127.0.0.1:${port}: ${error.message}. Pass --port to use another one, and add the matching redirect URI to the app.`));
+        });
+        // Only loopback. This listener briefly holds an authorisation code.
+        server.listen(port, "127.0.0.1");
+    });
+}
+/** Exchange the authorisation code for a short-lived token. */
+async function exchangeCode(appId, appSecret, redirectUri, code, graphHost) {
+    const body = new URLSearchParams({
+        client_id: appId,
+        client_secret: appSecret,
+        grant_type: "authorization_code",
+        redirect_uri: redirectUri,
+        code,
+    });
+    const res = await fetch(`${graphHost}/oauth/access_token`, { method: "POST", body });
+    const text = await res.text();
+    if (!res.ok)
+        throw new Error(`Code exchange failed (${res.status}): ${text.slice(0, 300)}`);
+    const parsed = JSON.parse(text);
+    if (!parsed.access_token)
+        throw new Error("Code exchange returned no access_token.");
+    return parsed.access_token;
+}
+export function loginOptionsFrom(argv) {
+    const portFlag = argv.find((a) => a.startsWith("--port="));
+    const port = Number(portFlag?.split("=")[1] ?? 8788);
+    return {
+        port: Number.isFinite(port) && port > 0 ? port : 8788,
+        scopes: argv.includes("--all-scopes") ? ALL_SCOPES : CORE_SCOPES,
+        manual: argv.includes("--manual"),
+    };
+}
+export async function runLogin(argv = []) {
+    const options = loginOptionsFrom(argv);
+    const config = loadConfig();
+    const out = (line) => process.stdout.write(`${line}\n`);
+    if (!config.appId || !config.appSecret) {
+        out("threads-mcp login needs a Meta app.");
+        out("");
+        out("  1. Create one at developers.facebook.com, add the Threads use case,");
+        out("     and copy the Threads App ID and App Secret from its settings.");
+        out(`  2. Add http://127.0.0.1:${options.port}/callback as a valid`);
+        out("     OAuth redirect URI on that app.");
+        out("  3. Export both and run this again:");
+        out("");
+        out("       export THREADS_APP_ID=...");
+        out("       export THREADS_APP_SECRET=...");
+        out("       threads-mcp login");
+        out("");
+        return 1;
+    }
+    const redirectUri = `http://127.0.0.1:${options.port}/callback`;
+    const url = authorizeUrl(config.appId, redirectUri, options.scopes);
+    let shortLived;
+    if (options.manual) {
+        out("Open this URL, authorise, then paste the short-lived token:");
+        out("");
+        out(`  ${url}`);
+        out("");
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        shortLived = (await rl.question("Short-lived token: ")).trim();
+        rl.close();
+        if (!shortLived) {
+            out("Nothing pasted.");
+            return 1;
+        }
+    }
+    else {
+        out(`Redirect URI: ${redirectUri}`);
+        out(`Scopes:       ${options.scopes.join(", ")}`);
+        out("");
+        out("Opening the authorisation page. If nothing opens, use this URL:");
+        out("");
+        out(`  ${url}`);
+        out("");
+        out("Waiting for the redirect…");
+        const waiting = awaitCode(options.port, 300_000);
+        open(url);
+        const code = await waiting;
+        out("Got the code. Exchanging it…");
+        shortLived = await exchangeCode(config.appId, config.appSecret, redirectUri, code, config.graphHost);
+    }
+    out("Exchanging for a 60-day token…");
+    const longLived = await exchangeForLongLived(shortLived, config.appSecret, config.graphHost);
+    const expiresAt = expiryFrom(longLived);
+    // Verify before storing. A token that cannot read /me is not worth keeping,
+    // and finding that out now is better than on the first tool call.
+    const account = { accessToken: longLived.access_token, source: "store" };
+    const client = new ThreadsClient({ ...config, accounts: [account] });
+    const profile = await client.profile(account);
+    upsertToken(config.storePath, {
+        user_id: profile.id,
+        username: profile.username ? normalizeUsername(profile.username) : undefined,
+        access_token: longLived.access_token,
+        expires_at: expiresAt,
+        obtained_at: Date.now(),
+        scopes: options.scopes,
+    });
+    const days = expiresAt ? Math.round((expiresAt - Date.now()) / 86_400_000) : 60;
+    out("");
+    out(`Authorised as @${profile.username ?? profile.id} (${profile.id}).`);
+    out(`Token valid for ${days} days, saved to ${config.storePath}`);
+    out("");
+    out("The server refreshes it automatically while it is running. If nothing runs");
+    out("for 60 days the token expires for good, so run `threads-mcp refresh` if you");
+    out("are going away, or just leave the MCP client connected.");
+    out("");
+    out("Check everything with: threads-mcp doctor");
+    return 0;
+}
+//# sourceMappingURL=login.js.map

package/dist/auth/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/auth/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAgB,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,SAAS,GAAG,qBAAqB,CAAC;AAExC,iFAAiF;AACjF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,eAAe;IACf,yBAAyB;IACzB,wBAAwB;IACxB,sBAAsB;IACtB,yBAAyB;IACzB,gBAAgB;IAChB,wBAAwB;IACxB,2BAA2B;IAC3B,0BAA0B;CAC3B,CAAC;AAEF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,eAAe;IACf,yBAAyB;IACzB,wBAAwB;IACxB,sBAAsB;IACtB,yBAAyB;IACzB,gBAAgB;CACjB,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,WAAmB,EAAE,MAAgB;IAC/E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,SAAS,kBAAkB,CAAC,CAAC;IACpD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACzC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IAC/F,IAAI,CAAC;QACH,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC1G,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS,CAAC,IAAY,EAAE,SAAiB;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAEzF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACnE,GAAG,CAAC,GAAG,CACL,iEAAiE;gBAC/D,iEAAiE;gBACjE,CAAC,IAAI;oBACH,CAAC,CAAC,+EAA+E;oBACjF,CAAC,CAAC,mCAAmC,KAAK,IAAI,uBAAuB,MAAM,CAAC;gBAC9E,SAAS,CACZ,CAAC;YAEF,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC;;gBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,yCAAyC,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACpF,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CACJ,IAAI,KAAK,CACP,iCAAiC,IAAI,KAAK,KAAK,CAAC,OAAO,iFAAiF,CACzI,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,oEAAoE;QACpE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+DAA+D;AAC/D,KAAK,UAAU,YAAY,CACzB,KAAa,EACb,SAAiB,EACjB,WAAmB,EACnB,IAAY,EACZ,SAAiB;IAEjB,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,SAAS;QACxB,UAAU,EAAE,oBAAoB;QAChC,YAAY,EAAE,WAAW;QACzB,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,qBAAqB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAE5F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA8B,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC,YAAY,CAAC;AAC7B,CAAC;AASD,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACrD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACrD,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;QAChE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAiB,EAAE;IAChD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAEhE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACvC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QAC3C,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,uEAAuE,CAAC,CAAC;QAC7E,GAAG,CAAC,oEAAoE,CAAC,CAAC;QAC1E,GAAG,CAAC,6BAA6B,OAAO,CAAC,IAAI,sBAAsB,CAAC,CAAC;QACrE,GAAG,CAAC,sCAAsC,CAAC,CAAC;QAC5C,GAAG,CAAC,sCAAsC,CAAC,CAAC;QAC5C,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,kCAAkC,CAAC,CAAC;QACxC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QAC5C,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAChC,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,WAAW,GAAG,oBAAoB,OAAO,CAAC,IAAI,WAAW,CAAC;IAChE,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAEpE,IAAI,UAAkB,CAAC;IAEvB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,6DAA6D,CAAC,CAAC;QACnE,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QAChB,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,UAAU,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/D,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,GAAG,CAAC,iBAAiB,CAAC,CAAC;YACvB,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,iBAAiB,WAAW,EAAE,CAAC,CAAC;QACpC,GAAG,CAAC,iBAAiB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,iEAAiE,CAAC,CAAC;QACvE,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QAChB,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,2BAA2B,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC;QAE3B,GAAG,CAAC,8BAA8B,CAAC,CAAC;QACpC,UAAU,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACvG,CAAC;IAED,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7F,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAExC,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,OAAO,GAAY,EAAE,WAAW,EAAE,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAClF,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9C,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE;QAC5B,OAAO,EAAE,OAAO,CAAC,EAAE;QACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC5E,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,UAAU,EAAE,SAAS;QACrB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACvB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhF,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,kBAAkB,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IACzE,GAAG,CAAC,mBAAmB,IAAI,mBAAmB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAClE,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,4EAA4E,CAAC,CAAC;IAClF,GAAG,CAAC,6EAA6E,CAAC,CAAC;IACnF,GAAG,CAAC,yDAAyD,CAAC,CAAC;IAC/D,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACjD,OAAO,CAAC,CAAC;AACX,CAAC"}