@vendure/mcp-plugin 3.8.0-minor-bootstrap.0

package/lib/oauth/oauth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.service.js","sourceRoot":"","sources":["../../src/oauth/oauth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAMwB;AACxB,wCAcuB;AAEvB,qCAA2C;AAE3C,4CAQsB;AACtB,6FAAiF;AACjF,mGAAuF;AACvF,iFAAqE;AACrE,+EAAmE;AACnE,4DAAgE;AAIhE,sFAAmF;AACnF,8CAAgD;AAChD,mEAAiE;AACjE,+CAA0E;AAC1E,qEAAmE;AASnE,+CAUuB;AACvB,6CAA8D;AAQ9D,uIAAuI;AAEhI,IAAM,eAAe,GAArB,MAAM,eAAe;IAGxB,YACqB,UAAmC,EACnC,qBAA4C,EAC5C,cAA8B,EAC9B,cAA8B,EAC9B,WAAwB,EACI,OAAiC,EAC7D,kBAAgD,EAChD,aAAqC,EACrC,aAAsC;QARtC,eAAU,GAAV,UAAU,CAAyB;QACnC,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,mBAAc,GAAd,cAAc,CAAgB;QAC9B,mBAAc,GAAd,cAAc,CAAgB;QAC9B,gBAAW,GAAX,WAAW,CAAa;QACI,YAAO,GAAP,OAAO,CAA0B;QAC7D,uBAAkB,GAAlB,kBAAkB,CAA8B;QAChD,kBAAa,GAAb,aAAa,CAAwB;QACrC,kBAAa,GAAb,aAAa,CAAyB;IACxD,CAAC;IAEJ,KAAK,CAAC,cAAc,CAAC,KAA0B;;QAC3C,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,yDAAyD;QAC/E,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,2BAAa,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,4CAAgC,EAAE,CAAC;YAC9D,MAAM,IAAI,2BAAa,CACnB,yBAAyB,EACzB,+BAA+B,4CAAgC,aAAa,CAC/E,CAAC;QACN,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,2BAAa,CAAC,sBAAsB,EAAE,2BAA2B,CAAC,CAAC;QACjF,CAAC;QACD,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YAC5C,IAAA,mCAAqB,EAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,KAAK,CAAC,0BAA0B,IAAI,KAAK,CAAC,0BAA0B,KAAK,MAAM,EAAE,CAAC;YAClF,MAAM,IAAI,2BAAa,CACnB,yBAAyB,EACzB,gGAAgG,CACnG,CAAC;QACN,CAAC;QACD,IAAI,MAAA,KAAK,CAAC,WAAW,0CAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,uCAA2B,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,2BAAa,CACnB,yBAAyB,EACzB,8GAA8G,CACjH,CAAC;QACN,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,wCAAc,CAAC,CAAC,IAAI,CACxE,IAAI,wCAAc,CAAC;YACf,QAAQ,EAAE,IAAA,yBAAW,GAAE;YACvB,UAAU,EAAE,KAAK,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAA,4BAAc,EAAC,KAAK,CAAC,UAAU,CAAC;YAC3C,OAAO,EAAE,IAAA,4BAAc,EAAC,KAAK,CAAC,QAAQ,CAAC;YACvC,YAAY,EAAE,KAAK,CAAC,aAAa;YACjC,UAAU,EAAE,MAAA,KAAK,CAAC,WAAW,mCAAI,CAAC,GAAG,uCAA2B,CAAC;YACjE,uBAAuB,EAAE,MAAA,KAAK,CAAC,0BAA0B,mCAAI,MAAM;YACnE,qBAAqB,EAAE,IAAI;YAC3B,UAAU,EAAE,IAAI;SACnB,CAAC,CACL,CAAC;QAEF,mDACI,SAAS,EAAE,MAAM,CAAC,QAAQ,EAC1B,WAAW,EAAE,MAAM,CAAC,UAAU,IAC3B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAC1D,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KACvD,aAAa,EAAE,MAAM,CAAC,YAAY,EAClC,WAAW,EAAE,MAAM,CAAC,UAAU,EAC9B,0BAA0B,EAAE,MAAM,CAAC,uBAAuB,IAC5D;IACN,CAAC;IAED,KAAK,CAAC,2BAA2B,CAAC,KAAqB;;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YAC1C,MAAM,IAAI,4BAAmB,CAAC,yCAAyC,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAA,qCAAuB,EAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,4BAAmB,CAAC,2CAA2C,CAAC,CAAC;QAC/E,CAAC;QACD,uFAAuF;QACvF,iFAAiF;QACjF,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC;QACvC,MAAM,aAAa,GAAG,CAAC,KAAa,EAAE,iBAAyB,EAAE,EAAE,CAC/D,IAAA,+BAAiB,EAAC,WAAW,EAAE;YAC3B,KAAK;YACL,iBAAiB;YACjB,KAAK,EAAE,KAAK,CAAC,KAAK;SACrB,CAAC,CAAC;QACP,IAAI,KAAK,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,aAAa,CAAC,2BAA2B,EAAE,sCAAsC,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,aAAa,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,KAAK,CAAC,qBAAqB,KAAK,MAAM,EAAE,CAAC;YACzC,OAAO,aAAa,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,QAAgB,CAAC;QACrB,IAAI,OAAmB,CAAC;QACxB,IAAI,CAAC;YACD,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,YAAY,2BAAa,EAAE,CAAC;gBAC7B,OAAO,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,CAAC,CAAC;QACZ,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,kCAAsB,EAAE,CAAC;YAC7D,OAAO,aAAa,CAChB,iBAAiB,EACjB,yBAAyB,kCAAsB,aAAa,CAC/D,CAAC;QACN,CAAC;QACD,wDAAwD;QACxD,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACxE,OAAO,aAAa,CAChB,iBAAiB,EACjB,iEAAiE,CACpE,CAAC;QACN,CAAC;QAED,IAAI,UAAe,CAAC;QACpB,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACtB,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACJ,MAAM,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;YACxD,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBACxB,aAAM,CAAC,KAAK,CACR,8FAA8F;oBAC1F,oFAAoF,EACxF,qBAAS,CACZ,CAAC;gBACF,OAAO,aAAa,CAChB,cAAc,EACd,4DAA4D,CAC/D,CAAC;YACN,CAAC;YACD,UAAU,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,qBAAqB,GAAG,IAAA,yBAAW,GAAE,CAAC;QAC5C,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,0DAAuB,CAAC,CAAC,IAAI,CAClE,IAAI,0DAAuB,CAAC;YACxB,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC;YACpD,WAAW,EAAE,MAAM;YACnB,aAAa,EAAE,MAAM,CAAC,EAAE;YACxB,WAAW;YACX,KAAK,EAAE,MAAA,KAAK,CAAC,KAAK,mCAAI,IAAI;YAC1B,aAAa,EAAE,KAAK,CAAC,cAAc;YACnC,OAAO;YACP,QAAQ;YACR,SAAS,EAAE,IAAA,wBAAU,EAAC,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,8BAA8B,CAAC;SAC1E,CAAC,CACL,CAAC;QACF,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;QACpE,OAAO,UAAU,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,2BAA2B,CAAC,YAAgC;QAC9D,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,MAAM,IAAI,4BAAmB,CAAC,2BAA2B,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QACnC,mDACI,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,qFAAqF;YACrF,wCAAwC;YACxC,gBAAgB,EAAE,IAAA,wBAAa,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EACjE,WAAW,EAAE,MAAM,CAAC,UAAU,IAC3B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAC1D,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KACvD,YAAY,EAAE,OAAO,CAAC,WAAW,EACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAC1B,OAAO,EAAE,OAAO,CAAC,OAAO,IAC1B;IACN,CAAC;IAED,KAAK,CAAC,mBAAmB,CACrB,GAAmB,EACnB,YAAoB,EACpB,QAAiB;;QAEjB,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAA,MAAA,GAAG,CAAC,OAAO,0CAAE,KAAK,CAAA,EAAE,CAAC;YAC3C,MAAM,IAAI,8BAAqB,CAAC,+DAA+D,CAAC,CAAC;QACrG,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,+BAAmB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,2BAAkB,CACxB,6EAA6E,CAChF,CAAC;QACN,CAAC;QACD,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,CAAC,2BAA2B,CAAC,YAAY,EAAE,OAAO,EAAE;YAC3D,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,MAAA,GAAG,CAAC,SAAS,mCAAI,IAAI;SACnC,CAAC,CAAC;IACP,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,sBAAsB,CACxB,GAAmB,EACnB,YAAoB,EACpB,QAAiB;;QAEjB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,IAAI,8BAAqB,CAAC,yCAAyC,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,2BAA2B,CAAC,YAAY,EAAE,MAAM,EAAE;YAC1D,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,SAAS,EAAE,UAAU;YACrB,SAAS,EAAE,MAAA,GAAG,CAAC,SAAS,mCAAI,IAAI;SACnC,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,GAAmB;QACtD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,UAAU;aACtC,aAAa,CAAC,GAAG,EAAE,oBAAa,CAAC;aACjC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjF,IAAI,aAAa,EAAE,CAAC;YAChB,MAAM,IAAI,2BAAkB,CAAC,sDAAsD,CAAC,CAAC;QACzF,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAiB;QACjC,IAAI,KAAK,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,IAAI,2BAAa,CAAC,wBAAwB,EAAE,wBAAwB,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAyB;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,EAAE,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpC,uFAAuF;QACvF,8FAA8F;QAC9F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,sCAAa,CAAC,CAAC,OAAO,CAAC;YAC1E,KAAK,EAAE;gBACH,EAAE,eAAe,EAAE,IAAI,EAAE;gBACzB,EAAE,gBAAgB,EAAE,IAAI,EAAE;gBAC1B,EAAE,wBAAwB,EAAE,IAAI,EAAE;aACrC;SACJ,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACR,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,GAAmB,EAAE,OAAW;QAClD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU;aAC9B,aAAa,CAAC,GAAG,EAAE,sCAAa,CAAC;aACjC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IACI,GAAG,CAAC,SAAS,IAAI,IAAI;YACrB,KAAK,CAAC,SAAS,IAAI,IAAI;YACvB,CAAC,IAAA,kBAAW,EAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,EAC9C,CAAC;YACC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,kJAAkJ;IAClJ,KAAK,CAAC,kBAAkB,CAAC,GAAmB;QACxC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,IAAI,8BAAqB,CAAC,yDAAyD,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,sCAAa,CAAC,CAAC,IAAI,CAAC;YAC1D,KAAK,EAAE;gBACH,OAAO,EAAE,GAAG,CAAC,YAAY;gBACzB,SAAS,EAAE,UAAU;gBACrB,SAAS,EAAE,IAAA,gBAAM,GAAE;gBACnB,SAAS,EAAE,IAAA,kBAAQ,EAAC,IAAI,IAAI,EAAE,CAAC;aAClC;YACD,SAAS,EAAE,CAAC,aAAa,CAAC;YAC1B,KAAK,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE;SACpC,CAAC,CAAC;IACP,CAAC;IAED,oHAAoH;IACpH,KAAK,CAAC,mBAAmB,CAAC,GAAmB,EAAE,OAAW;QACtD,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,IAAI,8BAAqB,CAAC,4DAA4D,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU;aAC9B,aAAa,CAAC,GAAG,EAAE,sCAAa,CAAC;aACjC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,SAAS,MAAK,UAAU,IAAI,CAAC,IAAA,kBAAW,EAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,0BAAmB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,uBAAuB,CACzB,KAAa,EACb,OAAmB,EACnB,GAAiB;QAEjB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;QACjG,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;QAE3B,IAAI,cAAc,GAAG,QAAQ,CAAC,YAAY;YACtC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,QAAQ,CAAC,YAAY,CAAC;YACtE,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACzE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACtD,MAAM,IAAI,8BAAqB,CAAC,+BAA+B,CAAC,CAAC;YACrE,CAAC;YACD,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS;YAC3B,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;YAC9D,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,IAAI,8BAAqB,CAAC,0BAA0B,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,qBAAc,CAAC;YAC3B,OAAO;YACP,OAAO;YACP,YAAY,EAAE,IAAA,4CAAwB,EAAC,GAAG,CAAC;YAC3C,OAAO,EAAE,cAAc;YACvB,YAAY,EAAE,IAAI;YAClB,qBAAqB,EAAE,KAAK;YAC5B,GAAG;YACH,aAAa,EAAE,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,CAAC;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;IAEO,WAAW,CAAC,QAAiC,EAAE,OAAmB;QACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,8BAAqB,CAAC,iCAAiC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;QAC3B,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAqB,CAAC,sBAAsB,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,KAAK,CAAC,oBAAoB,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,wCAA0B,EAAE,CAAC;QAC3C,CAAC;QACD,IACI,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC;YACpD,CAAC,OAAO,KAAK,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,UAAU,CAAC,EACxD,CAAC;YACC,MAAM,IAAI,8BAAqB,CAAC,+CAA+C,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,8BAAqB,CAAC,mDAAmD,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,8BAAqB,CAAC,sBAAsB,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,8GAA8G;IACtG,kBAAkB,CAAC,GAAmB,EAAE,KAAoB;QAChE,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,iDAAqC,CAAC,CAAC;QACjF,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,GAAG,WAAW,EAAE,CAAC;YAC9D,IAAI,CAAC,UAAU;iBACV,aAAa,CAAC,GAAG,EAAE,sCAAa,CAAC;iBACjC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBACxD,KAAK,CAAC,GAAG,CAAC,EAAE,CACT,aAAM,CAAC,KAAK,CACR,iDAAiD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EACnE,qBAAS,EACT,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,KAAK,CACb,CACJ,CAAC;QACV,CAAC;IACL,CAAC;IAED,qIAAqI;IAC7H,KAAK,CAAC,wBAAwB,CAClC,GAAmB,EACnB,WAAmB;;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU;aAC/B,aAAa,CAAC,GAAG,EAAE,sCAAa,CAAC;aACjC,kBAAkB,CAAC,OAAO,CAAC;aAC3B,iBAAiB,CAAC,mBAAmB,EAAE,aAAa,CAAC;aACrD,QAAQ,CAAC,cAAO,EAAE,gBAAgB,EAAE,4CAA4C,CAAC;aACjF,SAAS,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;aACxD,KAAK,CAAC,0CAA0C,EAAE;YAC/C,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;SAChD,CAAC;aACD,iBAAiB,EAA0C,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAA,MAAA,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,0CAAE,mBAAmB,mCAAI,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnG,CAAC;IAED,gHAAgH;IACxG,KAAK,CAAC,2BAA2B,CACrC,YAAoB,EACpB,eAA2B,EAC3B,WAA4B;QAE5B,MAAM,GAAG,GAAG,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC7E,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;YACtC,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU;aAC9B,aAAa,CAAC,GAAG,EAAE,0DAAuB,CAAC;aAC3C,kBAAkB,EAAE;aACpB,MAAM,EAAE;aACR,KAAK,CAAC,8BAA8B,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;aACtF,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAClC,YAAoB,EACpB,eAA2B;;QAE3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QACtF,OAAO;YACH,WAAW,EAAE,IAAA,+BAAiB,EAAC,OAAO,CAAC,WAAW,EAAE;gBAChD,KAAK,EAAE,eAAe;gBACtB,KAAK,EAAE,MAAA,OAAO,CAAC,KAAK,mCAAI,SAAS;aACpC,CAAC;SACL,CAAC;IACN,CAAC;IAED,6GAA6G;IACrG,KAAK,CAAC,2BAA2B,CACrC,YAAoB,EACpB,eAA2B,EAC3B,QAA4E;;QAE5E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QACnD,MAAM,aAAa,GAAG,IAAA,yBAAW,GAAE,CAAC;QACpC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;YACvE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,YAAY,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;YAC7F,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,EAAE,oDAAoB,CAAC,CAAC,IAAI,CACjE,IAAI,oDAAoB,CAAC;gBACrB,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;gBACpC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,OAAO;gBACP,SAAS;gBACT,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS;gBACT,SAAS,EAAE,IAAA,wBAAU,EAAC,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,2BAA2B,CAAC;aACtF,CAAC,CACL,CAAC;YACF,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,OAAO;YACH,WAAW,EAAE,IAAA,+BAAiB,EAAC,SAAS,CAAC,WAAW,EAAE;gBAClD,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,MAAA,SAAS,CAAC,KAAK,mCAAI,SAAS;aACtC,CAAC;SACL,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,KAAiB;QACrD,IACI,CAAC,KAAK,CAAC,IAAI;YACX,CAAC,KAAK,CAAC,SAAS;YAChB,CAAC,KAAK,CAAC,YAAY;YACnB,CAAC,KAAK,CAAC,aAAa;YACpB,CAAC,KAAK,CAAC,QAAQ,EACjB,CAAC;YACC,MAAM,IAAI,2BAAa,CACnB,iBAAiB,EACjB,wEAAwE,CAC3E,CAAC;QACN,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,oDAAoB,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;YAChC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,SAAS,EAAE,CAAC,aAAa,CAAC;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,2BAAa,CAAC,eAAe,EAAE,uCAAuC,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YAC3F,MAAM,IAAI,2BAAa,CACnB,eAAe,EACf,0DAA0D,CAC7D,CAAC;QACN,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,2BAAa,CACnB,eAAe,EACf,0DAA0D,CAC7D,CAAC;QACN,CAAC;QACD,IAAI,CAAC,IAAA,iCAAmB,EAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,2BAAa,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC;QACtE,CAAC;QACD,0FAA0F;QAC1F,8EAA8E;QAC9E,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;YACtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU;iBAC9B,aAAa,CAAC,KAAK,EAAE,oDAAoB,CAAC;iBAC1C,kBAAkB,EAAE;iBACpB,MAAM,EAAE;iBACR,KAAK,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;iBACzC,OAAO,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAClB,MAAM,IAAI,2BAAa,CAAC,eAAe,EAAE,uCAAuC,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CACtB,KAAK,EACL,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,SAAS,CACjB,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,KAAiB;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC3C,MAAM,IAAI,2BAAa,CAAC,iBAAiB,EAAE,0CAA0C,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,sCAAa,CAAC,CAAC;QACpE,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;YAClC,KAAK,EAAE,EAAE,gBAAgB,EAAE;YAC3B,SAAS,EAAE,CAAC,aAAa,CAAC;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBACnC,KAAK,EAAE,EAAE,wBAAwB,EAAE,gBAAgB,EAAE;aACxD,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,CAAC;gBACT,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,IAAI,2BAAa,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,2BAAa,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YACjD,MAAM,IAAI,2BAAa,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;QACpF,CAAC;QACD,yFAAyF;QACzF,qFAAqF;QACrF,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjB,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACxE,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,2BAAa,CACnB,eAAe,EACf,qDAAqD,CACxD,CAAC;YACN,CAAC;QACL,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,eAAe,GAAG,IAAA,yBAAW,GAAE,CAAC;QACtC,MAAM,gBAAgB,GAAG,IAAA,yBAAW,GAAE,CAAC;QACvC,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;YACrD,qFAAqF;YACrF,sFAAsF;YACtF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU;iBAC9B,aAAa,CAAC,KAAK,EAAE,sCAAa,CAAC;iBACnC,kBAAkB,EAAE;iBACpB,MAAM,CAAC,sCAAa,CAAC;iBACrB,GAAG,CAAC;gBACD,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;gBACjD,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;gBACnD,wBAAwB,EAAE,gBAAgB;gBAC1C,oBAAoB,EAAE,IAAA,wBAAU,EAAC,GAAG,EAAE,KAAK,CAAC,qBAAqB,CAAC;gBAClE,SAAS,EAAE,IAAA,wBAAU,EAAC,GAAG,EAAE,KAAK,CAAC,sBAAsB,CAAC;gBACxD,cAAc,EAAE,GAAG;aACtB,CAAC;iBACD,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;iBACnC,QAAQ,CAAC,sCAAsC,EAAE,EAAE,gBAAgB,EAAE,CAAC;iBACtE,QAAQ,CAAC,mBAAmB,CAAC;iBAC7B,OAAO,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAClB,MAAM,IAAI,2BAAa,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,IAAI,CAAC,UAAU;iBAChB,aAAa,CAAC,KAAK,EAAE,wCAAc,CAAC;iBACpC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,cAAc,CACxB,GAAmB,EACnB,MAAsB,EACtB,OAAW,EACX,SAA2B,EAC3B,QAAgB,EAChB,SAAoB;QAEpB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,mFAAmF;QACnF,2EAA2E;QAC3E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,2BAAa,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,eAAe,GAAG,IAAA,yBAAW,GAAE,CAAC;QACtC,MAAM,gBAAgB,GAAG,IAAA,yBAAW,GAAE,CAAC;QACvC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChF,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,sCAAa,CAAC,CAAC,IAAI,CACxD,IAAI,sCAAa,CAAC;YACd,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YACjD,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;YACnD,wBAAwB,EAAE,IAAI;YAC9B,WAAW,EAAE,MAAM;YACnB,aAAa,EAAE,MAAM,CAAC,EAAE;YACxB,OAAO;YACP,SAAS;YACT,QAAQ;YACR,oBAAoB,EAAE,IAAA,wBAAU,EAAC,GAAG,EAAE,KAAK,CAAC,qBAAqB,CAAC;YAClE,SAAS,EAAE,IAAA,wBAAU,EAAC,GAAG,EAAE,KAAK,CAAC,sBAAsB,CAAC;YACxD,SAAS,EAAE,IAAI;YACf,gBAAgB,EAAE,cAAc,CAAC,EAAE;YACnC,SAAS;YACT,cAAc,EAAE,GAAG;SACtB,CAAC,CACL,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU;aAChB,aAAa,CAAC,GAAG,EAAE,wCAAc,CAAC;aAClC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IACjE,CAAC;IAEO,aAAa,CAAC,eAAuB,EAAE,gBAAwB;QACnE,OAAO;YACH,YAAY,EAAE,eAAe;YAC7B,aAAa,EAAE,gBAAgB;YAC/B,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,qBAAqB;SACzD,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,GAAmB,EAAE,QAAgB;QAC1D,IAAI,IAAA,wBAAa,EAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,wCAAc,CAAC,CAAC,OAAO,CAAC;YAC5E,KAAK,EAAE,EAAE,QAAQ,EAAE;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,sBAAsB,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,8BAA8B,CACxC,YAAoB,EACpB,GAAmB;QAEnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,0DAAuB,CAAC,CAAC,OAAO,CAAC;YACtF,KAAK,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE;YACtD,SAAS,EAAE,CAAC,aAAa,CAAC;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAEO,cAAc;QAClB,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,mGAAmG;IAC3F,0BAA0B,CAAC,GAAmB;QAClD,IAAI,CAAC,mBAAmB,CACpB,GAAG,EACH,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,EAC3C,+DAA+D,CAClE,CAAC;IACN,CAAC;IAED,gIAAgI;IACxH,6BAA6B,CAAC,GAAmB;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,oBAAoB,CAAC;QAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,2BAAkB,CACxB,uEAAuE,CAC1E,CAAC;QACN,CAAC;QACD,IAAI,CAAC,mBAAmB,CACpB,GAAG,EACH,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,EAC1B,2DAA2D,CAC9D,CAAC;IACN,CAAC;IAED,gJAAgJ;IACxI,mBAAmB,CAAC,GAAmB,EAAE,cAAsB,EAAE,OAAe;;QACpF,MAAM,SAAS,GAAG,MAAA,MAAA,GAAG,CAAC,GAAG,0CAAE,OAAO,0CAAE,MAAM,CAAC;QAC3C,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO;QACX,CAAC;QACD,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;YAClC,MAAM,IAAI,2BAAkB,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;IACL,CAAC;IAED,wCAAwC;IAChC,aAAa;QACjB,OAAO,IAAA,kCAAoB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,4FAA4F;IACpF,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,IAAI,CAAC,aAAa,GAAG,IAAA,0BAAa,EAAC,IAAI,CAAC,aAAa,EAAE,CAAC,WAAW,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC;IAC9B,CAAC;IAEO,UAAU,CAAC,KAAa;QAC5B,OAAO,IAAA,4BAAe,EAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACrD,CAAC;CACJ,CAAA;AAxvBY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAUJ,WAAA,IAAA,eAAM,EAAC,8BAAkB,CAAC,CAAA;qCALE,8BAAuB;QACZ,4BAAqB;QAC5B,qBAAc;QACd,qBAAc;QACjB,kBAAW,UAEJ,2DAA4B;QACjC,8CAAsB;QACtB,gDAAuB;GAZlD,eAAe,CAwvB3B"}

package/lib/oauth/token-hash.d.ts

@@ -0,0 +1,6 @@
+/** Call once at startup and reuse the key; rotating the secret makes every stored OAuth credential unresolvable. */
+export declare function deriveHashKey(secret: string): Buffer;
+/** Deterministic and one-way, so tokens can be stored at rest and still found by an exact-match lookup, without the plaintext ever being recoverable. */
+export declare function hashToken(value: string, hashKey: Buffer): string;
+/** The `lookup:` namespace keeps these hashes separate from any other keyed hashes introduced in the future. */
+export declare function hashLookupToken(value: string, hashKey: Buffer): string;

package/lib/oauth/token-hash.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveHashKey = deriveHashKey;
+exports.hashToken = hashToken;
+exports.hashLookupToken = hashLookupToken;
+const node_crypto_1 = require("node:crypto");
+const KEY_LENGTH = 32;
+const HASH_KEY_SALT = 'mcp-oauth-hash-key-v1';
+/** Call once at startup and reuse the key; rotating the secret makes every stored OAuth credential unresolvable. */
+function deriveHashKey(secret) {
+    return (0, node_crypto_1.scryptSync)(secret, HASH_KEY_SALT, KEY_LENGTH);
+}
+/** Deterministic and one-way, so tokens can be stored at rest and still found by an exact-match lookup, without the plaintext ever being recoverable. */
+function hashToken(value, hashKey) {
+    return (0, node_crypto_1.createHmac)('sha256', hashKey).update(value).digest('base64url');
+}
+/** The `lookup:` namespace keeps these hashes separate from any other keyed hashes introduced in the future. */
+function hashLookupToken(value, hashKey) {
+    return hashToken(`lookup:${value}`, hashKey);
+}
+//# sourceMappingURL=token-hash.js.map

package/lib/oauth/token-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-hash.js","sourceRoot":"","sources":["../../src/oauth/token-hash.ts"],"names":[],"mappings":";;AAMA,sCAEC;AAGD,8BAEC;AAGD,0CAEC;AAlBD,6CAAqD;AAErD,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAE9C,oHAAoH;AACpH,SAAgB,aAAa,CAAC,MAAc;IACxC,OAAO,IAAA,wBAAU,EAAC,MAAM,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;AACzD,CAAC;AAED,yJAAyJ;AACzJ,SAAgB,SAAS,CAAC,KAAa,EAAE,OAAe;IACpD,OAAO,IAAA,wBAAU,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC3E,CAAC;AAED,gHAAgH;AAChH,SAAgB,eAAe,CAAC,KAAa,EAAE,OAAe;IAC1D,OAAO,SAAS,CAAC,UAAU,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC"}

package/lib/plugin.d.ts

@@ -0,0 +1,54 @@
+import { MiddlewareConsumer, NestModule, OnApplicationBootstrap, Type } from '@nestjs/common';
+import { I18nService, ProcessContext } from '@vendure/core';
+import { ResolvedMcpPluginOptions } from './internal-types';
+import { McpPluginOptions } from './types';
+/**
+ * @description
+ * Exposes Vendure's data and operations to AI agents via the [Model Context Protocol](https://modelcontextprotocol.io/).
+ * Tools decorated with `@McpTool` are automatically discovered and registered at bootstrap.
+ *
+ * @example
+ * ```ts
+ * import { McpPlugin } from '\@vendure/mcp-plugin';
+ *
+ * const config: VendureConfig = {
+ *     plugins: [
+ *         // Tools are exposed directly by default. Pass `toolExposure: 'discovery'`
+ *         // to expose a small set of search/execute meta-tools instead.
+ *         McpPlugin.init({}),
+ *     ],
+ * };
+ * ```
+ *
+ * @docsCategory core plugins/McpPlugin
+ * @since 3.8.0
+ */
+export declare class McpPlugin implements NestModule, OnApplicationBootstrap {
+    private readonly processContext;
+    private readonly i18nService;
+    /**
+     * @description
+     * The plugin options with every default applied. `init()` sets this, so it holds no value
+     * until the plugin is added to your Vendure config.
+     */
+    static options: ResolvedMcpPluginOptions;
+    constructor(processContext: ProcessContext, i18nService: I18nService);
+    /**
+     * Adds Vendure's error translation middleware to MCP routes, so callers receive translated
+     * error messages instead of i18n keys.
+     */
+    configure(consumer: MiddlewareConsumer): void;
+    /**
+     * @description
+     * Sets the plugin options and returns the plugin class to add to your `plugins` array.
+     * Any option you leave out falls back to its default.
+     */
+    static init(options?: McpPluginOptions): Type<McpPlugin>;
+    /**
+     * @description
+     * Builds the MCP message schemas up front, so the cost lands on startup rather than the
+     * first request, then checks the configured options for anything invalid or unsafe for a
+     * production server. Runs at startup, main server process only.
+     */
+    onApplicationBootstrap(): void;
+}

package/lib/plugin.js

@@ -0,0 +1,171 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var McpPlugin_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpPlugin = void 0;
+const server_1 = require("@modelcontextprotocol/server");
+const core_1 = require("@nestjs/core");
+const core_2 = require("@vendure/core");
+const api_extensions_1 = require("./api/api-extensions");
+const mcp_actor_service_1 = require("./api/mcp-actor.service");
+const mcp_admin_resolver_1 = require("./api/mcp-admin.resolver");
+const mcp_shop_resolver_1 = require("./api/mcp-shop.resolver");
+const check_options_1 = require("./check-options");
+const constants_1 = require("./constants");
+const entities_1 = require("./entities");
+const mcp_tool_call_log_retention_service_1 = require("./logging/mcp-tool-call-log-retention.service");
+const mcp_tool_call_log_service_1 = require("./logging/mcp-tool-call-log.service");
+const cimd_client_resolver_service_1 = require("./oauth/cimd/cimd-client-resolver.service");
+const grant_session_service_1 = require("./oauth/grant-session.service");
+const oauth_metadata_service_1 = require("./oauth/oauth-metadata.service");
+const oauth_retention_service_1 = require("./oauth/oauth-retention.service");
+const oauth_controller_1 = require("./oauth/oauth.controller");
+const oauth_service_1 = require("./oauth/oauth.service");
+const mcp_oauth_rate_limit_guard_1 = require("./rate-limit/mcp-oauth-rate-limit.guard");
+const mcp_rate_limiter_service_1 = require("./rate-limit/mcp-rate-limiter.service");
+const mcp_tool_execution_service_1 = require("./registry/mcp-tool-execution.service");
+const mcp_tool_registry_service_1 = require("./registry/mcp-tool-registry.service");
+const mcp_tool_schema_service_1 = require("./registry/mcp-tool-schema.service");
+const resolve_options_1 = require("./resolve-options");
+const mcp_shop_session_service_1 = require("./shop-session/mcp-shop-session.service");
+const mcp_oauth_retention_task_1 = require("./tasks/mcp-oauth-retention.task");
+const mcp_tool_call_log_retention_task_1 = require("./tasks/mcp-tool-call-log-retention.task");
+const active_order_service_1 = require("./tools/built-in/active-order.service");
+const catalog_query_service_1 = require("./tools/built-in/catalog-query.service");
+const custom_field_input_service_1 = require("./tools/built-in/custom-field-input.service");
+const providers_1 = require("./tools/built-in/providers");
+const serializer_service_1 = require("./tools/built-in/serializer.service");
+const mcp_transport_controller_1 = require("./transport/mcp-transport.controller");
+/**
+ * @description
+ * Exposes Vendure's data and operations to AI agents via the [Model Context Protocol](https://modelcontextprotocol.io/).
+ * Tools decorated with `@McpTool` are automatically discovered and registered at bootstrap.
+ *
+ * @example
+ * ```ts
+ * import { McpPlugin } from '\@vendure/mcp-plugin';
+ *
+ * const config: VendureConfig = {
+ *     plugins: [
+ *         // Tools are exposed directly by default. Pass `toolExposure: 'discovery'`
+ *         // to expose a small set of search/execute meta-tools instead.
+ *         McpPlugin.init({}),
+ *     ],
+ * };
+ * ```
+ *
+ * @docsCategory core plugins/McpPlugin
+ * @since 3.8.0
+ */
+let McpPlugin = McpPlugin_1 = class McpPlugin {
+    constructor(processContext, i18nService) {
+        this.processContext = processContext;
+        this.i18nService = i18nService;
+    }
+    /**
+     * Adds Vendure's error translation middleware to MCP routes, so callers receive translated
+     * error messages instead of i18n keys.
+     */
+    configure(consumer) {
+        consumer.apply(this.i18nService.handle()).forRoutes('mcp/shop', 'mcp/admin');
+    }
+    /**
+     * @description
+     * Sets the plugin options and returns the plugin class to add to your `plugins` array.
+     * Any option you leave out falls back to its default.
+     */
+    static init(options = {}) {
+        this.options = (0, resolve_options_1.resolveMcpPluginOptions)(options);
+        return McpPlugin_1;
+    }
+    /**
+     * @description
+     * Builds the MCP message schemas up front, so the cost lands on startup rather than the
+     * first request, then checks the configured options for anything invalid or unsafe for a
+     * production server. Runs at startup, main server process only.
+     */
+    onApplicationBootstrap() {
+        // Only the main server serves the OAuth routes, so only it needs this check.
+        if (!this.processContext.isServer) {
+            return;
+        }
+        (0, server_1.preloadSchemas)();
+        (0, check_options_1.checkMcpPluginOptions)(McpPlugin_1.options);
+    }
+};
+exports.McpPlugin = McpPlugin;
+exports.McpPlugin = McpPlugin = McpPlugin_1 = __decorate([
+    (0, core_2.VendurePlugin)({
+        imports: [core_2.PluginCommonModule, core_1.DiscoveryModule],
+        controllers: [oauth_controller_1.McpOauthController, mcp_transport_controller_1.McpTransportController],
+        providers: [
+            { provide: constants_1.MCP_PLUGIN_OPTIONS, useFactory: () => McpPlugin.options },
+            oauth_service_1.McpOauthService,
+            grant_session_service_1.McpGrantSessionService,
+            oauth_metadata_service_1.McpOauthMetadataService,
+            oauth_retention_service_1.McpOauthRetentionService,
+            cimd_client_resolver_service_1.McpCimdClientResolverService,
+            mcp_tool_registry_service_1.McpToolRegistryService,
+            mcp_tool_schema_service_1.McpToolSchemaService,
+            mcp_tool_execution_service_1.McpToolExecutionService,
+            mcp_shop_session_service_1.McpShopSessionService,
+            mcp_rate_limiter_service_1.McpRateLimiterService,
+            mcp_oauth_rate_limit_guard_1.McpOauthRateLimitGuard,
+            mcp_tool_call_log_service_1.McpToolCallLogService,
+            mcp_tool_call_log_retention_service_1.McpToolCallLogRetentionService,
+            active_order_service_1.McpActiveOrderService,
+            serializer_service_1.McpToolSerializerService,
+            catalog_query_service_1.McpCatalogQueryService,
+            custom_field_input_service_1.McpCustomFieldInputService,
+            mcp_actor_service_1.McpActorService,
+            ...providers_1.mcpBuiltInToolProviders,
+        ],
+        entities: [entities_1.McpOauthClient, entities_1.McpAuthorizationCode, entities_1.McpAuthorizationRequest, entities_1.McpOauthGrant, entities_1.McpToolCallLog],
+        adminApiExtensions: {
+            schema: api_extensions_1.adminApiExtensions,
+            resolvers: [mcp_admin_resolver_1.McpAdminResolver, mcp_admin_resolver_1.McpToolCallLogEntityResolver, mcp_admin_resolver_1.McpOauthGrantEntityResolver],
+        },
+        shopApiExtensions: {
+            schema: api_extensions_1.shopApiExtensions,
+            resolvers: [mcp_shop_resolver_1.McpShopResolver],
+        },
+        dashboard: '../src/dashboard/index.tsx',
+        configuration: config => {
+            var _a, _b;
+            // Defaults to the API server's own address; correct for local development only, since
+            // a production server is required to set an explicit public issuer.
+            if (McpPlugin.options.oauth && !McpPlugin.options.oauth.issuer) {
+                McpPlugin.options.oauth.issuer = `http://localhost:${config.apiOptions.port}`;
+            }
+            config.authOptions.customPermissions.push(constants_1.mcpServerPermission);
+            config.settingsStoreFields = Object.assign(Object.assign({}, config.settingsStoreFields), { [constants_1.MCP_SETTINGS_NAMESPACE]: [
+                    {
+                        name: constants_1.MCP_TOOL_TOGGLES_FIELD_NAME,
+                        scope: core_2.SettingsStoreScopes.global,
+                        requiresPermission: { read: constants_1.mcpServerPermission.Read, write: constants_1.mcpServerPermission.Update },
+                        validate: value => value == null || typeof value === 'object'
+                            ? undefined
+                            : 'MCP tool toggles must be an object',
+                    },
+                ] });
+            config.schedulerOptions.tasks.push(mcp_tool_call_log_retention_task_1.mcpToolCallLogRetentionTask.configure({
+                schedule: (_a = McpPlugin.options.logging) === null || _a === void 0 ? void 0 : _a.retentionSchedule,
+            }), mcp_oauth_retention_task_1.mcpOauthRetentionTask.configure({
+                schedule: (_b = McpPlugin.options.oauth) === null || _b === void 0 ? void 0 : _b.retentionSchedule,
+            }));
+            return config;
+        },
+        compatibility: '^3.8.0',
+    }),
+    __metadata("design:paramtypes", [core_2.ProcessContext,
+        core_2.I18nService])
+], McpPlugin);
+//# sourceMappingURL=plugin.js.map

package/lib/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,yDAA8D;AAE9D,uCAA+C;AAC/C,wCAMuB;AAEvB,yDAA6E;AAC7E,+DAA0D;AAC1D,iEAIkC;AAClC,+DAA0D;AAC1D,mDAAwD;AACxD,2CAKqB;AACrB,yCAMoB;AAEpB,uGAA+F;AAC/F,mFAA4E;AAC5E,4FAAyF;AACzF,yEAAuE;AACvE,2EAAyE;AACzE,6EAA2E;AAC3E,+DAA8D;AAC9D,yDAAwD;AACxD,wFAAiF;AACjF,oFAA8E;AAC9E,sFAAgF;AAChF,oFAA8E;AAC9E,gFAA0E;AAC1E,uDAA4D;AAC5D,sFAAgF;AAChF,+EAAyE;AACzE,+FAAuF;AACvF,gFAA8E;AAC9E,kFAAgF;AAChF,4FAAyF;AACzF,0DAAqE;AACrE,4EAA+E;AAC/E,mFAA8E;AAG9E;;;;;;;;;;;;;;;;;;;;GAoBG;AAqEI,IAAM,SAAS,iBAAf,MAAM,SAAS;IAQlB,YACqB,cAA8B,EAC9B,WAAwB;QADxB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,gBAAW,GAAX,WAAW,CAAa;IAC1C,CAAC;IAEJ;;;OAGG;IACH,SAAS,CAAC,QAA4B;QAClC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACjF,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,IAAI,CAAC,UAA4B,EAAE;QACtC,IAAI,CAAC,OAAO,GAAG,IAAA,yCAAuB,EAAC,OAAO,CAAC,CAAC;QAChD,OAAO,WAAS,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACH,sBAAsB;QAClB,6EAA6E;QAC7E,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;YAChC,OAAO;QACX,CAAC;QACD,IAAA,uBAAc,GAAE,CAAC;QACjB,IAAA,qCAAqB,EAAC,WAAS,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;CACJ,CAAA;AA7CY,8BAAS;oBAAT,SAAS;IApErB,IAAA,oBAAa,EAAC;QACX,OAAO,EAAE,CAAC,yBAAkB,EAAE,sBAAe,CAAC;QAC9C,WAAW,EAAE,CAAC,qCAAkB,EAAE,iDAAsB,CAAC;QACzD,SAAS,EAAE;YACP,EAAE,OAAO,EAAE,8BAAkB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE;YACpE,+BAAe;YACf,8CAAsB;YACtB,gDAAuB;YACvB,kDAAwB;YACxB,2DAA4B;YAC5B,kDAAsB;YACtB,8CAAoB;YACpB,oDAAuB;YACvB,gDAAqB;YACrB,gDAAqB;YACrB,mDAAsB;YACtB,iDAAqB;YACrB,oEAA8B;YAC9B,4CAAqB;YACrB,6CAAwB;YACxB,8CAAsB;YACtB,uDAA0B;YAC1B,mCAAe;YACf,GAAG,mCAAuB;SAC7B;QACD,QAAQ,EAAE,CAAC,yBAAc,EAAE,+BAAoB,EAAE,kCAAuB,EAAE,wBAAa,EAAE,yBAAc,CAAC;QACxG,kBAAkB,EAAE;YAChB,MAAM,EAAE,mCAAkB;YAC1B,SAAS,EAAE,CAAC,qCAAgB,EAAE,iDAA4B,EAAE,gDAA2B,CAAC;SAC3F;QACD,iBAAiB,EAAE;YACf,MAAM,EAAE,kCAAiB;YACzB,SAAS,EAAE,CAAC,mCAAe,CAAC;SAC/B;QACD,SAAS,EAAE,4BAA4B;QACvC,aAAa,EAAE,MAAM,CAAC,EAAE;;YACpB,sFAAsF;YACtF,oEAAoE;YACpE,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7D,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,oBAAoB,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAClF,CAAC;YACD,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,+BAAmB,CAAC,CAAC;YAC/D,MAAM,CAAC,mBAAmB,mCACnB,MAAM,CAAC,mBAAmB,KAC7B,CAAC,kCAAsB,CAAC,EAAE;oBACtB;wBACI,IAAI,EAAE,uCAA2B;wBACjC,KAAK,EAAE,0BAAmB,CAAC,MAAM;wBACjC,kBAAkB,EAAE,EAAE,IAAI,EAAE,+BAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,+BAAmB,CAAC,MAAM,EAAE;wBACzF,QAAQ,EAAE,KAAK,CAAC,EAAE,CACd,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;4BACtC,CAAC,CAAC,SAAS;4BACX,CAAC,CAAC,oCAAoC;qBACjD;iBACJ,GACJ,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAC9B,8DAA2B,CAAC,SAAS,CAAC;gBAClC,QAAQ,EAAE,MAAA,SAAS,CAAC,OAAO,CAAC,OAAO,0CAAE,iBAAiB;aACzD,CAAC,EACF,gDAAqB,CAAC,SAAS,CAAC;gBAC5B,QAAQ,EAAE,MAAA,SAAS,CAAC,OAAO,CAAC,KAAK,0CAAE,iBAAiB;aACvD,CAAC,CACL,CAAC;YACF,OAAO,MAAM,CAAC;QAClB,CAAC;QACD,aAAa,EAAE,QAAQ;KAC1B,CAAC;qCAUuC,qBAAc;QACjB,kBAAW;GAVpC,SAAS,CA6CrB"}

package/lib/rate-limit/ip-bucket-key.d.ts

@@ -0,0 +1 @@
+export declare function ipBucketKey(clientIp?: string): string;

package/lib/rate-limit/ip-bucket-key.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ipBucketKey = ipBucketKey;
+const node_net_1 = require("node:net");
+const IPV4_MAPPED_PREFIX = /^::ffff:/i;
+// An IPv6 address is keyed by its first 64 bits, since a single machine can pick a fresh address from its /64 for every request.
+function ipBucketKey(clientIp) {
+    if (clientIp == null) {
+        return 'unknown';
+    }
+    const mappedIpv4 = clientIp.replace(IPV4_MAPPED_PREFIX, '');
+    if (mappedIpv4 !== clientIp && (0, node_net_1.isIP)(mappedIpv4) === 4) {
+        return mappedIpv4;
+    }
+    if ((0, node_net_1.isIP)(clientIp) !== 6) {
+        // IPv4 is keyed as it stands. getClientIp() has already dropped anything that is not an address.
+        return clientIp;
+    }
+    return `${expandIpv6(clientIp).slice(0, 4).join(':')}::/64`;
+}
+// Node has no built-in expander, and two written forms of the same address must produce the same key.
+function expandIpv6(address) {
+    const [head, tail] = address.split('::');
+    const headGroups = head === '' ? [] : head.split(':');
+    if (tail === undefined) {
+        return headGroups.map(normalizeGroup);
+    }
+    const tailGroups = tail === '' ? [] : tail.split(':');
+    const zeroGroups = new Array(8 - headGroups.length - tailGroups.length).fill('0000');
+    return [...headGroups.map(normalizeGroup), ...zeroGroups, ...tailGroups.map(normalizeGroup)];
+}
+function normalizeGroup(group) {
+    return group.toLowerCase().padStart(4, '0');
+}
+//# sourceMappingURL=ip-bucket-key.js.map

package/lib/rate-limit/ip-bucket-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-bucket-key.js","sourceRoot":"","sources":["../../src/rate-limit/ip-bucket-key.ts"],"names":[],"mappings":";;AAKA,kCAaC;AAlBD,uCAAgC;AAEhC,MAAM,kBAAkB,GAAG,WAAW,CAAC;AAEvC,iIAAiI;AACjI,SAAgB,WAAW,CAAC,QAAiB;IACzC,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC5D,IAAI,UAAU,KAAK,QAAQ,IAAI,IAAA,eAAI,EAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,IAAI,IAAA,eAAI,EAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,iGAAiG;QACjG,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAChE,CAAC;AAED,sGAAsG;AACtG,SAAS,UAAU,CAAC,OAAe;IAC/B,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACrB,OAAO,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,GAAG,UAAU,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC"}

package/lib/rate-limit/mcp-oauth-rate-limit.guard.d.ts

@@ -0,0 +1,20 @@
+import { ArgumentsHost, CanActivate, ExceptionFilter, ExecutionContext, HttpException } from '@nestjs/common';
+import { McpRateLimiterService } from './mcp-rate-limiter.service';
+export declare class McpOauthRateLimitExceededHttpException extends HttpException {
+    readonly retryAfterSeconds: number;
+    constructor(retryAfterSeconds: number);
+}
+/**
+ * @description
+ * Rate-limits OAuth endpoints by client IP, since these endpoints have no authentication of their
+ * own. All routes on the OAuth controller share a single quota. Disabled when OAuth IP rate
+ * limiting is turned off.
+ */
+export declare class McpOauthRateLimitGuard implements CanActivate {
+    private readonly rateLimiter;
+    constructor(rateLimiter: McpRateLimiterService);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}
+export declare class McpOauthRateLimitExceptionFilter implements ExceptionFilter {
+    catch(exception: McpOauthRateLimitExceededHttpException, host: ArgumentsHost): void;
+}

package/lib/rate-limit/mcp-oauth-rate-limit.guard.js

@@ -0,0 +1,63 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpOauthRateLimitExceptionFilter = exports.McpOauthRateLimitGuard = exports.McpOauthRateLimitExceededHttpException = void 0;
+const common_1 = require("@nestjs/common");
+const get_client_ip_1 = require("../get-client-ip");
+const mcp_rate_limiter_service_1 = require("./mcp-rate-limiter.service");
+class McpOauthRateLimitExceededHttpException extends common_1.HttpException {
+    constructor(retryAfterSeconds) {
+        super({
+            error: 'rate_limit_exceeded',
+            error_description: `Too many requests. Retry after ${retryAfterSeconds} seconds.`,
+            retry_after_seconds: retryAfterSeconds,
+        }, common_1.HttpStatus.TOO_MANY_REQUESTS);
+        this.retryAfterSeconds = retryAfterSeconds;
+    }
+}
+exports.McpOauthRateLimitExceededHttpException = McpOauthRateLimitExceededHttpException;
+/**
+ * @description
+ * Rate-limits OAuth endpoints by client IP, since these endpoints have no authentication of their
+ * own. All routes on the OAuth controller share a single quota. Disabled when OAuth IP rate
+ * limiting is turned off.
+ */
+let McpOauthRateLimitGuard = class McpOauthRateLimitGuard {
+    constructor(rateLimiter) {
+        this.rateLimiter = rateLimiter;
+    }
+    async canActivate(context) {
+        const req = context.switchToHttp().getRequest();
+        const exceeded = await this.rateLimiter.checkOauthIpRateLimit((0, get_client_ip_1.getClientIp)(req));
+        if (exceeded) {
+            throw new McpOauthRateLimitExceededHttpException(exceeded.retryAfterSeconds);
+        }
+        return true;
+    }
+};
+exports.McpOauthRateLimitGuard = McpOauthRateLimitGuard;
+exports.McpOauthRateLimitGuard = McpOauthRateLimitGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [mcp_rate_limiter_service_1.McpRateLimiterService])
+], McpOauthRateLimitGuard);
+// Scoped to the controller so it runs before Vendure's app-wide ExceptionLoggerFilter can rewrite the body.
+let McpOauthRateLimitExceptionFilter = class McpOauthRateLimitExceptionFilter {
+    catch(exception, host) {
+        const res = host.switchToHttp().getResponse();
+        res.setHeader('Retry-After', String(exception.retryAfterSeconds));
+        res.status(exception.getStatus()).json(exception.getResponse());
+    }
+};
+exports.McpOauthRateLimitExceptionFilter = McpOauthRateLimitExceptionFilter;
+exports.McpOauthRateLimitExceptionFilter = McpOauthRateLimitExceptionFilter = __decorate([
+    (0, common_1.Catch)(McpOauthRateLimitExceededHttpException)
+], McpOauthRateLimitExceptionFilter);
+//# sourceMappingURL=mcp-oauth-rate-limit.guard.js.map

package/lib/rate-limit/mcp-oauth-rate-limit.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-oauth-rate-limit.guard.js","sourceRoot":"","sources":["../../src/rate-limit/mcp-oauth-rate-limit.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CASwB;AAGxB,oDAA+C;AAE/C,yEAAmE;AAEnE,MAAa,sCAAuC,SAAQ,sBAAa;IACrE,YAA4B,iBAAyB;QACjD,KAAK,CACD;YACI,KAAK,EAAE,qBAAqB;YAC5B,iBAAiB,EAAE,kCAAkC,iBAAiB,WAAW;YACjF,mBAAmB,EAAE,iBAAiB;SACzC,EACD,mBAAU,CAAC,iBAAiB,CAC/B,CAAC;QARsB,sBAAiB,GAAjB,iBAAiB,CAAQ;IASrD,CAAC;CACJ;AAXD,wFAWC;AAED;;;;;GAKG;AAEI,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAC/B,YAA6B,WAAkC;QAAlC,gBAAW,GAAX,WAAW,CAAuB;IAAG,CAAC;IAEnE,KAAK,CAAC,WAAW,CAAC,OAAyB;QACvC,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,IAAA,2BAAW,EAAC,GAAG,CAAC,CAAC,CAAC;QAChF,IAAI,QAAQ,EAAE,CAAC;YACX,MAAM,IAAI,sCAAsC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAA;AAXY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;qCAEiC,gDAAqB;GADtD,sBAAsB,CAWlC;AAED,4GAA4G;AAErG,IAAM,gCAAgC,GAAtC,MAAM,gCAAgC;IACzC,KAAK,CAAC,SAAiD,EAAE,IAAmB;QACxE,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,WAAW,EAAY,CAAC;QACxD,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAClE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;IACpE,CAAC;CACJ,CAAA;AANY,4EAAgC;2CAAhC,gCAAgC;IAD5C,IAAA,cAAK,EAAC,sCAAsC,CAAC;GACjC,gCAAgC,CAM5C"}

package/lib/rate-limit/mcp-rate-limiter.service.d.ts

@@ -0,0 +1,47 @@
+import { CacheService } from '@vendure/core';
+import { McpToolset } from '@vendure/mcp-sdk';
+import { McpExecutionContext, ResolvedMcpPluginOptions } from '../internal-types';
+export interface McpRateLimitExceeded {
+    message: string;
+    retryAfterSeconds: number;
+    scope: string;
+}
+export interface RateLimitInput {
+    executionContext: McpExecutionContext;
+    endpoint: McpToolset;
+    /** What the request is metered as: a tool name, or a JSON-RPC method name at the handshake. */
+    subject: string;
+}
+export declare class McpRateLimiterService {
+    private readonly cacheService;
+    private readonly options;
+    /** Tail of the increment queue per bucket key; an entry is removed once its tail settles. */
+    private readonly inFlightIncrements;
+    constructor(cacheService: CacheService, options: ResolvedMcpPluginOptions);
+    checkRateLimit(input: RateLimitInput): Promise<McpRateLimitExceeded | undefined>;
+    checkAnonymousIpRateLimit(endpoint: McpToolset, clientIp?: string): Promise<McpRateLimitExceeded | undefined>;
+    /** Meters the OAuth endpoints per IP; they have no session or user to key on. */
+    checkOauthIpRateLimit(clientIp?: string): Promise<McpRateLimitExceeded | undefined>;
+    checkBearerAuthFailureRateLimit(clientIp?: string): Promise<McpRateLimitExceeded | undefined>;
+    recordBearerAuthFailure(clientIp?: string): Promise<void>;
+    private runChecks;
+    private exceededDetails;
+    private buildRateLimitChecks;
+    private buildSharedBucketChecks;
+    /** The per-minute limit of a rate-limit option: 0 when the option is off or unset. */
+    private resolveRpm;
+    private buildAnonymousIpCheck;
+    private buildOauthIpCheck;
+    private buildBearerAuthFailureCheck;
+    /** The bucket for `input.subject`, keyed by actor+session (see {@link perToolBucketKey}). */
+    private buildPerToolChecks;
+    private getBucketState;
+    private incrementBucket;
+    private sessionKey;
+    private sessionOrIpKey;
+    private userKey;
+    private clientKey;
+    private perToolBucketKey;
+    private cacheKey;
+    private hash;
+}