@vendure/mcp-plugin 3.8.0-minor-bootstrap.0

package/lib/api/mcp-admin.resolver.js

@@ -0,0 +1,463 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpOauthGrantEntityResolver = exports.McpToolCallLogEntityResolver = exports.McpAdminResolver = void 0;
+const common_1 = require("@nestjs/common");
+const graphql_1 = require("@nestjs/graphql");
+const core_1 = require("@vendure/core");
+const DateUtils_1 = require("typeorm/util/DateUtils");
+const constants_1 = require("../constants");
+const entities_1 = require("../entities");
+const mcp_tool_call_log_retention_service_1 = require("../logging/mcp-tool-call-log-retention.service");
+const oauth_service_1 = require("../oauth/oauth.service");
+const mcp_tool_registry_service_1 = require("../registry/mcp-tool-registry.service");
+const mcp_actor_service_1 = require("./mcp-actor.service");
+const STATS_TIME_RANGE_HOURS = new Map([
+    ['1h', 1],
+    ['24h', 24],
+    ['7d', 24 * 7],
+    ['30d', 24 * 30],
+]);
+const STATS_CACHE_TTL_MS = 60000;
+let McpAdminResolver = class McpAdminResolver {
+    constructor(connection, registry, oauthService, cacheService, listQueryBuilder, options, toolCallLogRetention) {
+        this.connection = connection;
+        this.registry = registry;
+        this.oauthService = oauthService;
+        this.cacheService = cacheService;
+        this.listQueryBuilder = listQueryBuilder;
+        this.options = options;
+        this.toolCallLogRetention = toolCallLogRetention;
+    }
+    async mcpTools(ctx) {
+        const toggles = await this.registry.getToolToggles(ctx);
+        return this.registry.getRegistrySnapshot().map(tool => this.toToolInfo(tool, toggles));
+    }
+    async mcpOauthGrants(ctx, args) {
+        var _a, _b;
+        const qb = this.listQueryBuilder.build(entities_1.McpOauthGrant, (_a = args.options) !== null && _a !== void 0 ? _a : undefined, {
+            ctx,
+            relations: ['oauthClient'],
+            customPropertyMap: { oauthClientName: 'oauthClient.clientName' },
+        });
+        if (!args.includeInactive) {
+            qb.andWhere('mcpoauthgrant.revokedAt IS NULL').andWhere('mcpoauthgrant.expiresAt > :now', {
+                now: new Date(),
+            });
+        }
+        this.scopeToChannel(qb, 'mcpoauthgrant', ctx.channelId);
+        this.applyDefaultOrder(qb, 'mcpoauthgrant', (_b = args.options) === null || _b === void 0 ? void 0 : _b.sort, 'lastActivityAt');
+        const [items, totalItems] = await qb.getManyAndCount();
+        return { items, totalItems };
+    }
+    async mcpToolCallLogs(ctx, args) {
+        var _a, _b;
+        // Filtering or sorting by clientIp would reveal the addresses the field resolver hides.
+        if (!ctx.userHasPermissions([core_1.Permission.ReadCustomer]) &&
+            listOptionsUseField(args.options, 'clientIp')) {
+            throw new core_1.ForbiddenError();
+        }
+        const qb = this.listQueryBuilder.build(entities_1.McpToolCallLog, (_a = args.options) !== null && _a !== void 0 ? _a : undefined, {
+            ctx,
+            entityAlias: 'log',
+        });
+        this.scopeToChannel(qb, 'log', ctx.channelId);
+        this.applyDefaultOrder(qb, 'log', (_b = args.options) === null || _b === void 0 ? void 0 : _b.sort, 'createdAt');
+        const [items, totalItems] = await qb.getManyAndCount();
+        return { items, totalItems };
+    }
+    async mcpStats(ctx, args) {
+        var _a;
+        const timeRange = (_a = args.timeRange) !== null && _a !== void 0 ? _a : '24h';
+        const hours = STATS_TIME_RANGE_HOURS.get(timeRange);
+        if (hours == null) {
+            throw new core_1.UserInputError(`Invalid timeRange "${timeRange}" - use one of ${Array.from(STATS_TIME_RANGE_HOURS.keys()).join(', ')}`);
+        }
+        const cacheKey = `mcp:stats:${String(ctx.channelId)}:${timeRange}`;
+        const cached = await this.cacheService.get(cacheKey);
+        if (cached) {
+            return cached;
+        }
+        const stats = await this.computeStats(ctx, hours);
+        await this.cacheService.set(cacheKey, stats, { ttl: STATS_CACHE_TTL_MS });
+        return stats;
+    }
+    mcpServerConfig() {
+        var _a, _b;
+        return {
+            toolExposure: this.options.toolExposure,
+            shopAccess: this.options.shopAccess,
+            oauthConfigured: this.options.oauth != null,
+            issuer: (_b = (_a = this.options.oauth) === null || _a === void 0 ? void 0 : _a.issuer) !== null && _b !== void 0 ? _b : null,
+        };
+    }
+    async setMcpToolEnabled(ctx, args) {
+        const tool = this.registry
+            .getRegistrySnapshot()
+            .find(t => t.name === args.toolName && t.toolset === args.toolset);
+        if (!tool) {
+            throw new core_1.UserInputError(`Unknown MCP tool "${args.toolName}" in toolset "${args.toolset}"`);
+        }
+        await this.registry.setToolEnabled(ctx, args.toolset, args.toolName, args.enabled);
+        const toggles = await this.registry.getToolToggles(ctx);
+        return this.toToolInfo(tool, toggles);
+    }
+    async revokeMcpOauthGrant(ctx, args) {
+        return this.oauthService.revokeGrantById(ctx, args.id);
+    }
+    async removeExpiredMcpToolCallLogs(ctx) {
+        return this.toolCallLogRetention.deleteExpiredToolCallLogs(ctx, ctx.channelId);
+    }
+    async authorizeMcpClient(ctx, args) {
+        return this.oauthService.approveAdminRequest(ctx, args.requestToken, args.approved);
+    }
+    toToolInfo(tool, toggles) {
+        return {
+            id: this.registry.toolKey(tool.toolset, tool.name),
+            name: tool.name,
+            toolset: tool.toolset,
+            description: tool.description,
+            pluginSource: tool.pluginSource,
+            behavior: tool.resolvedBehavior,
+            enabled: this.registry.isToolEnabled(tool, toggles),
+        };
+    }
+    async computeStats(ctx, hours) {
+        const since = DateUtils_1.DateUtils.mixedDateToUtcDatetimeString(new Date(Date.now() - hours * 3600000));
+        const statusRows = await this.windowedQuery(ctx, since)
+            .select('log.status', 'status')
+            .addSelect('COUNT(*)', 'count')
+            .groupBy('log.status')
+            .getRawMany();
+        let totalCalls = 0;
+        let successCount = 0;
+        for (const row of statusRows) {
+            const count = Number(row.count);
+            totalCalls += count;
+            if (row.status === 'success') {
+                successCount += count;
+            }
+        }
+        const topToolRows = await this.windowedQuery(ctx, since)
+            .select('log.toolName', 'toolName')
+            .addSelect('COUNT(*)', 'count')
+            .groupBy('log.toolName')
+            .orderBy('count', 'DESC')
+            // Secondary key so tools with equal counts sort deterministically instead of in DB-dependent order
+            .addOrderBy('log.toolName', 'ASC')
+            .limit(10)
+            .getRawMany();
+        const topTools = topToolRows.map(row => ({ toolName: row.toolName, count: Number(row.count) }));
+        const durationCount = await this.windowedQuery(ctx, since)
+            .andWhere('log.durationMs IS NOT NULL')
+            .getCount();
+        const { p50LatencyMs, p95LatencyMs } = await this.durationPercentiles(ctx, since, durationCount);
+        return {
+            totalCalls,
+            successRate: totalCalls === 0 ? 0 : successCount / totalCalls,
+            errorRate: totalCalls === 0 ? 0 : (totalCalls - successCount) / totalCalls,
+            p50LatencyMs,
+            p95LatencyMs,
+            callsPerHour: totalCalls / hours,
+            topTools,
+        };
+    }
+    // Numbers the rows in duration order and picks the two positions, in one statement.
+    async durationPercentiles(ctx, since, total) {
+        if (total === 0) {
+            return { p50LatencyMs: null, p95LatencyMs: null };
+        }
+        // 1-based position of the nth-percentile row in duration order.
+        const positionOf = (percentile) => Math.floor((total - 1) * percentile) + 1;
+        const p50Position = positionOf(0.5);
+        const p95Position = positionOf(0.95);
+        // Lower-case aliases: Postgres folds these unquoted column names to lower case.
+        const rows = await this.connection
+            .getRepository(ctx, entities_1.McpToolCallLog)
+            .manager.createQueryBuilder()
+            .select('ranked.duration_ms', 'duration_ms')
+            .addSelect('ranked.row_position', 'row_position')
+            .from(subQuery => {
+            const ranked = subQuery
+                .select('log.durationMs', 'duration_ms')
+                .addSelect('ROW_NUMBER() OVER (ORDER BY log.durationMs ASC)', 'row_position')
+                .from(entities_1.McpToolCallLog, 'log');
+            return this.limitToWindow(ranked, ctx, since).andWhere('log.durationMs IS NOT NULL');
+        }, 'ranked')
+            .where('ranked.row_position IN (:...positions)', { positions: [p50Position, p95Position] })
+            .getRawMany();
+        const durationAt = (position) => {
+            const row = rows.find(r => Number(r.row_position) === position);
+            return row ? Number(row.duration_ms) : null;
+        };
+        return { p50LatencyMs: durationAt(p50Position), p95LatencyMs: durationAt(p95Position) };
+    }
+    windowedQuery(ctx, since) {
+        const qb = this.connection.getRepository(ctx, entities_1.McpToolCallLog).createQueryBuilder('log');
+        return this.limitToWindow(qb, ctx, since);
+    }
+    limitToWindow(qb, ctx, since) {
+        qb.where('log.createdAt >= :since', { since });
+        this.scopeToChannel(qb, 'log', ctx.channelId);
+        return qb;
+    }
+    // Shared by the grants list, the tool-call log list and the statistics window.
+    scopeToChannel(qb, alias, channelId) {
+        qb.andWhere(`${alias}.channelId = :channelId`, { channelId });
+    }
+    // Newest first by default, with id DESC always last so same-timestamp rows stay in a stable order.
+    applyDefaultOrder(qb, alias, sort, column) {
+        if (Object.keys(sort !== null && sort !== void 0 ? sort : {}).length === 0) {
+            qb.orderBy(`${alias}.${column}`, 'DESC');
+        }
+        qb.addOrderBy(`${alias}.id`, 'DESC');
+    }
+};
+exports.McpAdminResolver = McpAdminResolver;
+__decorate([
+    (0, graphql_1.Query)(),
+    (0, core_1.Allow)(constants_1.mcpServerPermission.Read),
+    __param(0, (0, core_1.Ctx)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext]),
+    __metadata("design:returntype", Promise)
+], McpAdminResolver.prototype, "mcpTools", null);
+__decorate([
+    (0, graphql_1.Query)(),
+    (0, core_1.Allow)(constants_1.mcpServerPermission.Read),
+    __param(0, (0, core_1.Ctx)()),
+    __param(1, (0, graphql_1.Args)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext, Object]),
+    __metadata("design:returntype", Promise)
+], McpAdminResolver.prototype, "mcpOauthGrants", null);
+__decorate([
+    (0, graphql_1.Query)(),
+    (0, core_1.Allow)(constants_1.mcpServerPermission.Read),
+    __param(0, (0, core_1.Ctx)()),
+    __param(1, (0, graphql_1.Args)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext, Object]),
+    __metadata("design:returntype", Promise)
+], McpAdminResolver.prototype, "mcpToolCallLogs", null);
+__decorate([
+    (0, graphql_1.Query)(),
+    (0, core_1.Allow)(constants_1.mcpServerPermission.Read),
+    __param(0, (0, core_1.Ctx)()),
+    __param(1, (0, graphql_1.Args)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext, Object]),
+    __metadata("design:returntype", Promise)
+], McpAdminResolver.prototype, "mcpStats", null);
+__decorate([
+    (0, graphql_1.Query)(),
+    (0, core_1.Allow)(constants_1.mcpServerPermission.Read),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Object)
+], McpAdminResolver.prototype, "mcpServerConfig", null);
+__decorate([
+    (0, graphql_1.Mutation)(),
+    (0, core_1.Allow)(constants_1.mcpServerPermission.Update),
+    __param(0, (0, core_1.Ctx)()),
+    __param(1, (0, graphql_1.Args)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext, Object]),
+    __metadata("design:returntype", Promise)
+], McpAdminResolver.prototype, "setMcpToolEnabled", null);
+__decorate([
+    (0, graphql_1.Mutation)(),
+    (0, core_1.Allow)(constants_1.mcpServerPermission.Update),
+    __param(0, (0, core_1.Ctx)()),
+    __param(1, (0, graphql_1.Args)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext, Object]),
+    __metadata("design:returntype", Promise)
+], McpAdminResolver.prototype, "revokeMcpOauthGrant", null);
+__decorate([
+    (0, graphql_1.Mutation)(),
+    (0, core_1.Allow)(constants_1.mcpServerPermission.Update),
+    __param(0, (0, core_1.Ctx)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext]),
+    __metadata("design:returntype", Promise)
+], McpAdminResolver.prototype, "removeExpiredMcpToolCallLogs", null);
+__decorate([
+    (0, graphql_1.Mutation)(),
+    (0, core_1.Allow)(core_1.Permission.Authenticated),
+    __param(0, (0, core_1.Ctx)()),
+    __param(1, (0, graphql_1.Args)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext, Object]),
+    __metadata("design:returntype", Promise)
+], McpAdminResolver.prototype, "authorizeMcpClient", null);
+exports.McpAdminResolver = McpAdminResolver = __decorate([
+    (0, graphql_1.Resolver)(),
+    __param(5, (0, common_1.Inject)(constants_1.MCP_PLUGIN_OPTIONS)),
+    __metadata("design:paramtypes", [core_1.TransactionalConnection,
+        mcp_tool_registry_service_1.McpToolRegistryService,
+        oauth_service_1.McpOauthService,
+        core_1.CacheService,
+        core_1.ListQueryBuilder, Object, mcp_tool_call_log_retention_service_1.McpToolCallLogRetentionService])
+], McpAdminResolver);
+/** A field that holds personal data: visible only with ReadCustomer on top of the MCP read permission. */
+function personalField(ctx, value) {
+    return ctx.userHasPermissions([core_1.Permission.ReadCustomer]) ? value : null;
+}
+/** True when the list options sort by the field or filter on it, including inside nested `_and` / `_or` groups. */
+function listOptionsUseField(options, field) {
+    if ((options === null || options === void 0 ? void 0 : options.sort) && field in options.sort) {
+        return true;
+    }
+    return filterUsesField(options === null || options === void 0 ? void 0 : options.filter, field);
+}
+function filterUsesField(filter, field) {
+    if (!filter || typeof filter !== 'object') {
+        return false;
+    }
+    const _a = filter, { _and, _or } = _a, fields = __rest(_a, ["_and", "_or"]);
+    if (field in fields) {
+        return true;
+    }
+    return [_and, _or].some(group => Array.isArray(group) && group.some(item => filterUsesField(item, field)));
+}
+// Input, output and clientIp need the ReadCustomer permission on top of the MCP read permission,
+// since they can hold personal data; without it they resolve to null rather than an error.
+let McpToolCallLogEntityResolver = class McpToolCallLogEntityResolver {
+    constructor(actorService) {
+        this.actorService = actorService;
+    }
+    // Not `@Allow`: that would error on every row, and the log should stay readable for admins without customer access.
+    input(log, ctx) {
+        return personalField(ctx, log.input);
+    }
+    output(log, ctx) {
+        return personalField(ctx, log.output);
+    }
+    clientIp(log, ctx) {
+        return personalField(ctx, log.clientIp);
+    }
+    // Resolved per row rather than joined, since the stored id points at either a Customer or an Administrator.
+    async actorName(log, ctx) {
+        const identity = await this.actorService.resolveIdentity(ctx, log.actor, log.actorType);
+        return identity.name;
+    }
+    async customerId(log, ctx) {
+        const identity = await this.actorService.resolveIdentity(ctx, log.actor, log.actorType);
+        return identity.customerId;
+    }
+};
+exports.McpToolCallLogEntityResolver = McpToolCallLogEntityResolver;
+__decorate([
+    (0, graphql_1.ResolveField)(),
+    __param(0, (0, graphql_1.Parent)()),
+    __param(1, (0, core_1.Ctx)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [entities_1.McpToolCallLog, core_1.RequestContext]),
+    __metadata("design:returntype", Object)
+], McpToolCallLogEntityResolver.prototype, "input", null);
+__decorate([
+    (0, graphql_1.ResolveField)(),
+    __param(0, (0, graphql_1.Parent)()),
+    __param(1, (0, core_1.Ctx)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [entities_1.McpToolCallLog, core_1.RequestContext]),
+    __metadata("design:returntype", Object)
+], McpToolCallLogEntityResolver.prototype, "output", null);
+__decorate([
+    (0, graphql_1.ResolveField)(),
+    __param(0, (0, graphql_1.Parent)()),
+    __param(1, (0, core_1.Ctx)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [entities_1.McpToolCallLog, core_1.RequestContext]),
+    __metadata("design:returntype", Object)
+], McpToolCallLogEntityResolver.prototype, "clientIp", null);
+__decorate([
+    (0, graphql_1.ResolveField)(),
+    __param(0, (0, graphql_1.Parent)()),
+    __param(1, (0, core_1.Ctx)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [entities_1.McpToolCallLog, core_1.RequestContext]),
+    __metadata("design:returntype", Promise)
+], McpToolCallLogEntityResolver.prototype, "actorName", null);
+__decorate([
+    (0, graphql_1.ResolveField)(),
+    __param(0, (0, graphql_1.Parent)()),
+    __param(1, (0, core_1.Ctx)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [entities_1.McpToolCallLog, core_1.RequestContext]),
+    __metadata("design:returntype", Promise)
+], McpToolCallLogEntityResolver.prototype, "customerId", null);
+exports.McpToolCallLogEntityResolver = McpToolCallLogEntityResolver = __decorate([
+    (0, graphql_1.Resolver)('McpToolCallLog'),
+    __metadata("design:paramtypes", [mcp_actor_service_1.McpActorService])
+], McpToolCallLogEntityResolver);
+let McpOauthGrantEntityResolver = class McpOauthGrantEntityResolver {
+    constructor(actorService) {
+        this.actorService = actorService;
+    }
+    // The client is loaded as a relation by the list query; the schema exposes only its name.
+    oauthClientName(grant) {
+        var _a, _b;
+        return (_b = (_a = grant.oauthClient) === null || _a === void 0 ? void 0 : _a.clientName) !== null && _b !== void 0 ? _b : null;
+    }
+    async actorName(grant, ctx) {
+        const identity = await this.actorService.resolveIdentity(ctx, grant.actorId, grant.actorType);
+        return identity.name;
+    }
+    async customerId(grant, ctx) {
+        const identity = await this.actorService.resolveIdentity(ctx, grant.actorId, grant.actorType);
+        return identity.customerId;
+    }
+};
+exports.McpOauthGrantEntityResolver = McpOauthGrantEntityResolver;
+__decorate([
+    (0, graphql_1.ResolveField)(),
+    __param(0, (0, graphql_1.Parent)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [entities_1.McpOauthGrant]),
+    __metadata("design:returntype", Object)
+], McpOauthGrantEntityResolver.prototype, "oauthClientName", null);
+__decorate([
+    (0, graphql_1.ResolveField)(),
+    __param(0, (0, graphql_1.Parent)()),
+    __param(1, (0, core_1.Ctx)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [entities_1.McpOauthGrant, core_1.RequestContext]),
+    __metadata("design:returntype", Promise)
+], McpOauthGrantEntityResolver.prototype, "actorName", null);
+__decorate([
+    (0, graphql_1.ResolveField)(),
+    __param(0, (0, graphql_1.Parent)()),
+    __param(1, (0, core_1.Ctx)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [entities_1.McpOauthGrant, core_1.RequestContext]),
+    __metadata("design:returntype", Promise)
+], McpOauthGrantEntityResolver.prototype, "customerId", null);
+exports.McpOauthGrantEntityResolver = McpOauthGrantEntityResolver = __decorate([
+    (0, graphql_1.Resolver)('McpOauthGrant'),
+    __metadata("design:paramtypes", [mcp_actor_service_1.McpActorService])
+], McpOauthGrantEntityResolver);
+//# sourceMappingURL=mcp-admin.resolver.js.map

package/lib/api/mcp-admin.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-admin.resolver.js","sourceRoot":"","sources":["../../src/api/mcp-admin.resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAwC;AACxC,6CAAwF;AACxF,wCAeuB;AAGvB,sDAAmD;AAEnD,4CAAuE;AACvE,0CAA4D;AAE5D,wGAAgG;AAChG,0DAAyD;AACzD,qFAA+E;AAI/E,2DAAsD;AAgCtD,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAiB;IACnD,CAAC,IAAI,EAAE,CAAC,CAAC;IACT,CAAC,KAAK,EAAE,EAAE,CAAC;IACX,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACd,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC;CACnB,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAG3B,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IACzB,YACqB,UAAmC,EACnC,QAAgC,EAChC,YAA6B,EAC7B,YAA0B,EAC1B,gBAAkC,EACN,OAAiC,EAC7D,oBAAoD;QANpD,eAAU,GAAV,UAAU,CAAyB;QACnC,aAAQ,GAAR,QAAQ,CAAwB;QAChC,iBAAY,GAAZ,YAAY,CAAiB;QAC7B,iBAAY,GAAZ,YAAY,CAAc;QAC1B,qBAAgB,GAAhB,gBAAgB,CAAkB;QACN,YAAO,GAAP,OAAO,CAA0B;QAC7D,yBAAoB,GAApB,oBAAoB,CAAgC;IACtE,CAAC;IAIE,AAAN,KAAK,CAAC,QAAQ,CAAQ,GAAmB;QACrC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3F,CAAC;IAIK,AAAN,KAAK,CAAC,cAAc,CACT,GAAmB,EAClB,IAA6E;;QAErF,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,wBAAa,EAAE,MAAA,IAAI,CAAC,OAAO,mCAAI,SAAS,EAAE;YAC7E,GAAG;YACH,SAAS,EAAE,CAAC,aAAa,CAAC;YAC1B,iBAAiB,EAAE,EAAE,eAAe,EAAE,wBAAwB,EAAE;SACnE,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YACxB,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC,QAAQ,CAAC,gCAAgC,EAAE;gBACtF,GAAG,EAAE,IAAI,IAAI,EAAE;aAClB,CAAC,CAAC;QACP,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,eAAe,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,eAAe,EAAE,MAAA,IAAI,CAAC,OAAO,0CAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAClF,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,eAAe,EAAE,CAAC;QACvD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACjC,CAAC;IAIK,AAAN,KAAK,CAAC,eAAe,CACV,GAAmB,EAClB,IAAoD;;QAE5D,wFAAwF;QACxF,IACI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,iBAAU,CAAC,YAAY,CAAC,CAAC;YAClD,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAC/C,CAAC;YACC,MAAM,IAAI,qBAAc,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,yBAAc,EAAE,MAAA,IAAI,CAAC,OAAO,mCAAI,SAAS,EAAE;YAC9E,GAAG;YACH,WAAW,EAAE,KAAK;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,MAAA,IAAI,CAAC,OAAO,0CAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,MAAM,EAAE,CAAC,eAAe,EAAE,CAAC;QACvD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACjC,CAAC;IAIK,AAAN,KAAK,CAAC,QAAQ,CAAQ,GAAmB,EAAU,IAA4B;;QAC3E,MAAM,SAAS,GAAG,MAAA,IAAI,CAAC,SAAS,mCAAI,KAAK,CAAC;QAC1C,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAChB,MAAM,IAAI,qBAAc,CACpB,sBAAsB,SAAS,kBAAkB,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1G,CAAC;QACN,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAW,QAAQ,CAAC,CAAC;QAC/D,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,MAAM,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC;IACjB,CAAC;IAID,eAAe;;QACX,OAAO;YACH,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;YACnC,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI;YAC3C,MAAM,EAAE,MAAA,MAAA,IAAI,CAAC,OAAO,CAAC,KAAK,0CAAE,MAAM,mCAAI,IAAI;SAC7C,CAAC;IACN,CAAC;IAIK,AAAN,KAAK,CAAC,iBAAiB,CACZ,GAAmB,EAClB,IAAiE;QAEzE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ;aACrB,mBAAmB,EAAE;aACrB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,qBAAc,CAAC,qBAAqB,IAAI,CAAC,QAAQ,iBAAiB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAIK,AAAN,KAAK,CAAC,mBAAmB,CAAQ,GAAmB,EAAU,IAAgB;QAC1E,OAAO,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;IAIK,AAAN,KAAK,CAAC,4BAA4B,CAAQ,GAAmB;QACzD,OAAO,IAAI,CAAC,oBAAoB,CAAC,yBAAyB,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACnF,CAAC;IAIK,AAAN,KAAK,CAAC,kBAAkB,CACb,GAAmB,EAClB,IAAiD;QAEzD,OAAO,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxF,CAAC;IAEO,UAAU,CAAC,IAAuB,EAAE,OAAgC;QACxE,OAAO;YACH,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;YAClD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,IAAI,CAAC,gBAAgB;YAC/B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC;SACtD,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAmB,EAAE,KAAa;QACzD,MAAM,KAAK,GAAG,qBAAS,CAAC,4BAA4B,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,OAAS,CAAC,CAAC,CAAC;QAE/F,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;aAClD,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC;aAC9B,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC;aAC9B,OAAO,CAAC,YAAY,CAAC;aACrB,UAAU,EAAyD,CAAC;QAEzE,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChC,UAAU,IAAI,KAAK,CAAC;YACpB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC3B,YAAY,IAAI,KAAK,CAAC;YAC1B,CAAC;QACL,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;aACnD,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC;aAClC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC;aAC9B,OAAO,CAAC,cAAc,CAAC;aACvB,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;YACzB,mGAAmG;aAClG,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC;aACjC,KAAK,CAAC,EAAE,CAAC;aACT,UAAU,EAAgD,CAAC;QAChE,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAEhG,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;aACrD,QAAQ,CAAC,4BAA4B,CAAC;aACtC,QAAQ,EAAE,CAAC;QAChB,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAEjG,OAAO;YACH,UAAU;YACV,WAAW,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,UAAU;YAC7D,SAAS,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,YAAY,CAAC,GAAG,UAAU;YAC1E,YAAY;YACZ,YAAY;YACZ,YAAY,EAAE,UAAU,GAAG,KAAK;YAChC,QAAQ;SACX,CAAC;IACN,CAAC;IAED,oFAAoF;IAC5E,KAAK,CAAC,mBAAmB,CAC7B,GAAmB,EACnB,KAAa,EACb,KAAa;QAEb,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YACd,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACtD,CAAC;QACD,gEAAgE;QAChE,MAAM,UAAU,GAAG,CAAC,UAAkB,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACpF,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QACrC,gFAAgF;QAChF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU;aAC7B,aAAa,CAAC,GAAG,EAAE,yBAAc,CAAC;aAClC,OAAO,CAAC,kBAAkB,EAAE;aAC5B,MAAM,CAAC,oBAAoB,EAAE,aAAa,CAAC;aAC3C,SAAS,CAAC,qBAAqB,EAAE,cAAc,CAAC;aAChD,IAAI,CAAC,QAAQ,CAAC,EAAE;YACb,MAAM,MAAM,GAAG,QAAQ;iBAClB,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC;iBACvC,SAAS,CAAC,iDAAiD,EAAE,cAAc,CAAC;iBAC5E,IAAI,CAAC,yBAAc,EAAE,KAAK,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QACzF,CAAC,EAAE,QAAQ,CAAC;aACX,KAAK,CAAC,wCAAwC,EAAE,EAAE,SAAS,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;aAC1F,UAAU,EAAmE,CAAC;QACnF,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAE,EAAE;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC;YAChE,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,CAAC,CAAC;QACF,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;IAC5F,CAAC;IAEO,aAAa,CAAC,GAAmB,EAAE,KAAa;QACpD,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,yBAAc,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAEO,aAAa,CACjB,EAAyB,EACzB,GAAmB,EACnB,KAAa;QAEb,EAAE,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO,EAAE,CAAC;IACd,CAAC;IAED,+EAA+E;IACvE,cAAc,CAA0B,EAAyB,EAAE,KAAa,EAAE,SAAa;QACnG,EAAE,CAAC,QAAQ,CAAC,GAAG,KAAK,yBAAyB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,mGAAmG;IAC3F,iBAAiB,CACrB,EAAyB,EACzB,KAAa,EACb,IAAwD,EACxD,MAAc;QAEd,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,IAAI,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QACD,EAAE,CAAC,UAAU,CAAC,GAAG,KAAK,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;CACJ,CAAA;AAjQY,4CAAgB;AAanB;IAFL,IAAA,eAAK,GAAE;IACP,IAAA,YAAK,EAAC,+BAAmB,CAAC,IAAI,CAAC;IAChB,WAAA,IAAA,UAAG,GAAE,CAAA;;qCAAM,qBAAc;;gDAGxC;AAIK;IAFL,IAAA,eAAK,GAAE;IACP,IAAA,YAAK,EAAC,+BAAmB,CAAC,IAAI,CAAC;IAE3B,WAAA,IAAA,UAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;;qCADK,qBAAc;;sDAiB7B;AAIK;IAFL,IAAA,eAAK,GAAE;IACP,IAAA,YAAK,EAAC,+BAAmB,CAAC,IAAI,CAAC;IAE3B,WAAA,IAAA,UAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;;qCADK,qBAAc;;uDAkB7B;AAIK;IAFL,IAAA,eAAK,GAAE;IACP,IAAA,YAAK,EAAC,+BAAmB,CAAC,IAAI,CAAC;IAChB,WAAA,IAAA,UAAG,GAAE,CAAA;IAAuB,WAAA,IAAA,cAAI,GAAE,CAAA;;qCAAvB,qBAAc;;gDAgBxC;AAID;IAFC,IAAA,eAAK,GAAE;IACP,IAAA,YAAK,EAAC,+BAAmB,CAAC,IAAI,CAAC;;;;uDAQ/B;AAIK;IAFL,IAAA,kBAAQ,GAAE;IACV,IAAA,YAAK,EAAC,+BAAmB,CAAC,MAAM,CAAC;IAE7B,WAAA,IAAA,UAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;;qCADK,qBAAc;;yDAY7B;AAIK;IAFL,IAAA,kBAAQ,GAAE;IACV,IAAA,YAAK,EAAC,+BAAmB,CAAC,MAAM,CAAC;IACP,WAAA,IAAA,UAAG,GAAE,CAAA;IAAuB,WAAA,IAAA,cAAI,GAAE,CAAA;;qCAAvB,qBAAc;;2DAEnD;AAIK;IAFL,IAAA,kBAAQ,GAAE;IACV,IAAA,YAAK,EAAC,+BAAmB,CAAC,MAAM,CAAC;IACE,WAAA,IAAA,UAAG,GAAE,CAAA;;qCAAM,qBAAc;;oEAE5D;AAIK;IAFL,IAAA,kBAAQ,GAAE;IACV,IAAA,YAAK,EAAC,iBAAU,CAAC,aAAa,CAAC;IAE3B,WAAA,IAAA,UAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;;qCADK,qBAAc;;0DAI7B;2BAlIQ,gBAAgB;IAD5B,IAAA,kBAAQ,GAAE;IAQF,WAAA,IAAA,eAAM,EAAC,8BAAkB,CAAC,CAAA;qCALE,8BAAuB;QACzB,kDAAsB;QAClB,+BAAe;QACf,mBAAY;QACR,uBAAgB,UAEZ,oEAA8B;GARhE,gBAAgB,CAiQ5B;AAED,0GAA0G;AAC1G,SAAS,aAAa,CAAI,GAAmB,EAAE,KAAQ;IACnD,OAAO,GAAG,CAAC,kBAAkB,CAAC,CAAC,iBAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC;AAED,mHAAmH;AACnH,SAAS,mBAAmB,CAAC,OAAqD,EAAE,KAAa;IAC7F,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,KAAI,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,eAAe,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,eAAe,CAAC,MAAe,EAAE,KAAa;IACnD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,KAA2B,MAAiC,EAA5D,EAAE,IAAI,EAAE,GAAG,OAAiD,EAA5C,MAAM,cAAtB,eAAwB,CAAoC,CAAC;IACnE,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CACnB,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CACpF,CAAC;AACN,CAAC;AAED,iGAAiG;AACjG,2FAA2F;AAEpF,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IACrC,YAA6B,YAA6B;QAA7B,iBAAY,GAAZ,YAAY,CAAiB;IAAG,CAAC;IAE9D,oHAAoH;IAEpH,KAAK,CAAW,GAAmB,EAAS,GAAmB;QAC3D,OAAO,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAGD,MAAM,CAAW,GAAmB,EAAS,GAAmB;QAC5D,OAAO,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAGD,QAAQ,CAAW,GAAmB,EAAS,GAAmB;QAC9D,OAAO,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,4GAA4G;IAEtG,AAAN,KAAK,CAAC,SAAS,CAAW,GAAmB,EAAS,GAAmB;QACrE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACxF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACzB,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAW,GAAmB,EAAS,GAAmB;QACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACxF,OAAO,QAAQ,CAAC,UAAU,CAAC;IAC/B,CAAC;CACJ,CAAA;AA/BY,oEAA4B;AAKrC;IADC,IAAA,sBAAY,GAAE;IACR,WAAA,IAAA,gBAAM,GAAE,CAAA;IAAuB,WAAA,IAAA,UAAG,GAAE,CAAA;;qCAAtB,yBAAc,EAAc,qBAAc;;yDAE9D;AAGD;IADC,IAAA,sBAAY,GAAE;IACP,WAAA,IAAA,gBAAM,GAAE,CAAA;IAAuB,WAAA,IAAA,UAAG,GAAE,CAAA;;qCAAtB,yBAAc,EAAc,qBAAc;;0DAE/D;AAGD;IADC,IAAA,sBAAY,GAAE;IACL,WAAA,IAAA,gBAAM,GAAE,CAAA;IAAuB,WAAA,IAAA,UAAG,GAAE,CAAA;;qCAAtB,yBAAc,EAAc,qBAAc;;4DAEjE;AAIK;IADL,IAAA,sBAAY,GAAE;IACE,WAAA,IAAA,gBAAM,GAAE,CAAA;IAAuB,WAAA,IAAA,UAAG,GAAE,CAAA;;qCAAtB,yBAAc,EAAc,qBAAc;;6DAGxE;AAGK;IADL,IAAA,sBAAY,GAAE;IACG,WAAA,IAAA,gBAAM,GAAE,CAAA;IAAuB,WAAA,IAAA,UAAG,GAAE,CAAA;;qCAAtB,yBAAc,EAAc,qBAAc;;8DAGzE;uCA9BQ,4BAA4B;IADxC,IAAA,kBAAQ,EAAC,gBAAgB,CAAC;qCAEoB,mCAAe;GADjD,4BAA4B,CA+BxC;AAGM,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACpC,YAA6B,YAA6B;QAA7B,iBAAY,GAAZ,YAAY,CAAiB;IAAG,CAAC;IAE9D,0FAA0F;IAE1F,eAAe,CAAW,KAAoB;;QAC1C,OAAO,MAAA,MAAA,KAAK,CAAC,WAAW,0CAAE,UAAU,mCAAI,IAAI,CAAC;IACjD,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAW,KAAoB,EAAS,GAAmB;QACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9F,OAAO,QAAQ,CAAC,IAAI,CAAC;IACzB,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAW,KAAoB,EAAS,GAAmB;QACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9F,OAAO,QAAQ,CAAC,UAAU,CAAC;IAC/B,CAAC;CACJ,CAAA;AApBY,kEAA2B;AAKpC;IADC,IAAA,sBAAY,GAAE;IACE,WAAA,IAAA,gBAAM,GAAE,CAAA;;qCAAQ,wBAAa;;kEAE7C;AAGK;IADL,IAAA,sBAAY,GAAE;IACE,WAAA,IAAA,gBAAM,GAAE,CAAA;IAAwB,WAAA,IAAA,UAAG,GAAE,CAAA;;qCAArB,wBAAa,EAAc,qBAAc;;4DAGzE;AAGK;IADL,IAAA,sBAAY,GAAE;IACG,WAAA,IAAA,gBAAM,GAAE,CAAA;IAAwB,WAAA,IAAA,UAAG,GAAE,CAAA;;qCAArB,wBAAa,EAAc,qBAAc;;6DAG1E;sCAnBQ,2BAA2B;IADvC,IAAA,kBAAQ,EAAC,eAAe,CAAC;qCAEqB,mCAAe;GADjD,2BAA2B,CAoBvC"}

package/lib/api/mcp-shop.resolver.d.ts

@@ -0,0 +1,25 @@
+import { ID, RequestContext } from '@vendure/core';
+import { McpOauthService } from '../oauth/oauth.service';
+/** One of the signed-in customer's own active MCP OAuth grants, summarised for a connected-assistants page. */
+interface McpCustomerOauthGrantInfo {
+    id: ID;
+    createdAt: Date;
+    oauthClientName: string | null;
+    lastActivityAt: Date;
+    expiresAt: Date;
+}
+export declare class McpShopResolver {
+    private readonly oauthService;
+    constructor(oauthService: McpOauthService);
+    authorizeMcpClient(ctx: RequestContext, args: {
+        requestToken: string;
+        approved: boolean;
+    }): Promise<{
+        redirectUrl: string;
+    }>;
+    activeMcpClientGrants(ctx: RequestContext): Promise<McpCustomerOauthGrantInfo[]>;
+    revokeMcpClientGrant(ctx: RequestContext, args: {
+        id: ID;
+    }): Promise<boolean>;
+}
+export {};

package/lib/api/mcp-shop.resolver.js

@@ -0,0 +1,74 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpShopResolver = void 0;
+const graphql_1 = require("@nestjs/graphql");
+const core_1 = require("@vendure/core");
+const oauth_service_1 = require("../oauth/oauth.service");
+let McpShopResolver = class McpShopResolver {
+    constructor(oauthService) {
+        this.oauthService = oauthService;
+    }
+    async authorizeMcpClient(ctx, args) {
+        return this.oauthService.approveCustomerRequest(ctx, args.requestToken, args.approved);
+    }
+    async activeMcpClientGrants(ctx) {
+        const grants = await this.oauthService.listCustomerGrants(ctx);
+        return grants.map(grant => {
+            var _a, _b;
+            return ({
+                id: grant.id,
+                createdAt: grant.createdAt,
+                oauthClientName: (_b = (_a = grant.oauthClient) === null || _a === void 0 ? void 0 : _a.clientName) !== null && _b !== void 0 ? _b : null,
+                lastActivityAt: grant.lastActivityAt,
+                expiresAt: grant.expiresAt,
+            });
+        });
+    }
+    async revokeMcpClientGrant(ctx, args) {
+        return this.oauthService.revokeCustomerGrant(ctx, args.id);
+    }
+};
+exports.McpShopResolver = McpShopResolver;
+__decorate([
+    (0, graphql_1.Mutation)(),
+    (0, core_1.Allow)(core_1.Permission.Public),
+    __param(0, (0, core_1.Ctx)()),
+    __param(1, (0, graphql_1.Args)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext, Object]),
+    __metadata("design:returntype", Promise)
+], McpShopResolver.prototype, "authorizeMcpClient", null);
+__decorate([
+    (0, graphql_1.Query)(),
+    (0, core_1.Allow)(core_1.Permission.Owner),
+    __param(0, (0, core_1.Ctx)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext]),
+    __metadata("design:returntype", Promise)
+], McpShopResolver.prototype, "activeMcpClientGrants", null);
+__decorate([
+    (0, graphql_1.Mutation)(),
+    (0, core_1.Allow)(core_1.Permission.Owner),
+    __param(0, (0, core_1.Ctx)()),
+    __param(1, (0, graphql_1.Args)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext, Object]),
+    __metadata("design:returntype", Promise)
+], McpShopResolver.prototype, "revokeMcpClientGrant", null);
+exports.McpShopResolver = McpShopResolver = __decorate([
+    (0, graphql_1.Resolver)(),
+    __metadata("design:paramtypes", [oauth_service_1.McpOauthService])
+], McpShopResolver);
+//# sourceMappingURL=mcp-shop.resolver.js.map

package/lib/api/mcp-shop.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-shop.resolver.js","sourceRoot":"","sources":["../../src/api/mcp-shop.resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6CAAkE;AAClE,wCAA2E;AAE3E,0DAAyD;AAYlD,IAAM,eAAe,GAArB,MAAM,eAAe;IACxB,YAA6B,YAA6B;QAA7B,iBAAY,GAAZ,YAAY,CAAiB;IAAG,CAAC;IAIxD,AAAN,KAAK,CAAC,kBAAkB,CACb,GAAmB,EAClB,IAAiD;QAEzD,OAAO,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3F,CAAC;IAIK,AAAN,KAAK,CAAC,qBAAqB,CAAQ,GAAmB;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC/D,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;;YAAC,OAAA,CAAC;gBACxB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,eAAe,EAAE,MAAA,MAAA,KAAK,CAAC,WAAW,0CAAE,UAAU,mCAAI,IAAI;gBACtD,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;aAC7B,CAAC,CAAA;SAAA,CAAC,CAAC;IACR,CAAC;IAIK,AAAN,KAAK,CAAC,oBAAoB,CAAQ,GAAmB,EAAU,IAAgB;QAC3E,OAAO,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;CACJ,CAAA;AA9BY,0CAAe;AAKlB;IAFL,IAAA,kBAAQ,GAAE;IACV,IAAA,YAAK,EAAC,iBAAU,CAAC,MAAM,CAAC;IAEpB,WAAA,IAAA,UAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;;qCADK,qBAAc;;yDAI7B;AAIK;IAFL,IAAA,eAAK,GAAE;IACP,IAAA,YAAK,EAAC,iBAAU,CAAC,KAAK,CAAC;IACK,WAAA,IAAA,UAAG,GAAE,CAAA;;qCAAM,qBAAc;;4DASrD;AAIK;IAFL,IAAA,kBAAQ,GAAE;IACV,IAAA,YAAK,EAAC,iBAAU,CAAC,KAAK,CAAC;IACI,WAAA,IAAA,UAAG,GAAE,CAAA;IAAuB,WAAA,IAAA,cAAI,GAAE,CAAA;;qCAAvB,qBAAc;;2DAEpD;0BA7BQ,eAAe;IAD3B,IAAA,kBAAQ,GAAE;qCAEoC,+BAAe;GADjD,eAAe,CA8B3B"}

package/lib/check-options.d.ts

@@ -0,0 +1,7 @@
+import { ResolvedMcpPluginOptions } from './internal-types';
+/**
+ * @description
+ * Checks the resolved plugin options at startup: warns about settings that only matter on a real
+ * deployment, and throws when an OAuth option is shaped in a way nothing can work with.
+ */
+export declare function checkMcpPluginOptions(options: ResolvedMcpPluginOptions): void;