@winstonsayno/mcp-gateway 0.0.0-stage → 0.4.0

package/dist/middleware/cors.js

@@ -0,0 +1,65 @@
+/**
+ * CORS Middleware
+ *
+ * Configurable Cross-Origin Resource Sharing headers.
+ * Supports wildcard, specific origins list, and regex patterns.
+ *
+ * @module middleware/cors
+ */
+const DEFAULT_METHODS = ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'];
+const DEFAULT_HEADERS = [
+    'Content-Type',
+    'Authorization',
+    'X-API-Key',
+    'X-Request-Id',
+];
+export function corsMiddleware(options) {
+    const { origins, methods = DEFAULT_METHODS, allowedHeaders = DEFAULT_HEADERS, exposedHeaders = ['X-Request-Id', 'X-RateLimit-Limit', 'X-RateLimit-Remaining', 'X-RateLimit-Reset'], credentials = false, maxAge = 86400, } = options;
+    const isAllowed = (origin) => {
+        for (const o of origins) {
+            if (o === '*')
+                return true;
+            if (o === origin)
+                return true;
+            // Support regex patterns wrapped in /…/
+            if (o.startsWith('/') && o.endsWith('/')) {
+                try {
+                    if (new RegExp(o.slice(1, -1)).test(origin))
+                        return true;
+                }
+                catch {
+                    // invalid regex — skip
+                }
+            }
+        }
+        return false;
+    };
+    return (req, res, next) => {
+        const origin = req.headers.origin ?? '';
+        const wildcard = origins.includes('*');
+        if (wildcard && !credentials) {
+            res.setHeader('Access-Control-Allow-Origin', '*');
+        }
+        else {
+            // Response depends on Origin: tell caches so (even when disallowed).
+            res.vary('Origin');
+            // Browsers reject "*" together with credentials, so reflect the origin.
+            if (origin && isAllowed(origin)) {
+                res.setHeader('Access-Control-Allow-Origin', origin);
+            }
+        }
+        if (credentials) {
+            res.setHeader('Access-Control-Allow-Credentials', 'true');
+        }
+        res.setHeader('Access-Control-Expose-Headers', exposedHeaders.join(', '));
+        if (req.method === 'OPTIONS') {
+            res.setHeader('Access-Control-Allow-Methods', methods.join(', '));
+            res.setHeader('Access-Control-Allow-Headers', allowedHeaders.join(', '));
+            res.setHeader('Access-Control-Max-Age', String(maxAge));
+            res.status(204).end();
+            return;
+        }
+        next();
+    };
+}
+//# sourceMappingURL=cors.js.map

package/dist/middleware/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../src/middleware/cors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAaH,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAC7E,MAAM,eAAe,GAAG;IACtB,cAAc;IACd,eAAe;IACf,WAAW;IACX,cAAc;CACf,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,OAAoB;IACjD,MAAM,EACJ,OAAO,EACP,OAAO,GAAG,eAAe,EACzB,cAAc,GAAG,eAAe,EAChC,cAAc,GAAG,CAAC,cAAc,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,mBAAmB,CAAC,EACpG,WAAW,GAAG,KAAK,EACnB,MAAM,GAAG,KAAK,GACf,GAAG,OAAO,CAAC;IAEZ,MAAM,SAAS,GAAG,CAAC,MAAc,EAAW,EAAE;QAC5C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAC3B,IAAI,CAAC,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;YAC9B,wCAAwC;YACxC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzC,IAAI,CAAC;oBACH,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;wBAAE,OAAO,IAAI,CAAC;gBAC3D,CAAC;gBAAC,MAAM,CAAC;oBACP,uBAAuB;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QAExC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,qEAAqE;YACrE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnB,wEAAwE;YACxE,IAAI,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QAC5D,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,+BAA+B,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAE1E,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAClE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACzE,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/middleware/error-handler.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Centralized Error Handler Middleware
+ *
+ * Bug fix (v0.1.0): unhandled errors leaked raw stack traces and returned
+ * inconsistent response shapes. This middleware normalises all errors into
+ * a single JSON envelope and never exposes internal stack traces in production.
+ *
+ * @module middleware/error-handler
+ */
+import { Request, Response, NextFunction } from 'express';
+export interface ErrorResponse {
+    error: {
+        code: string;
+        message: string;
+        requestId?: string;
+        details?: unknown;
+    };
+}
+export declare class GatewayError extends Error {
+    readonly statusCode: number;
+    readonly code: string;
+    readonly details?: unknown | undefined;
+    constructor(statusCode: number, code: string, message: string, details?: unknown | undefined);
+}
+export declare const ErrorCodes: {
+    readonly UNAUTHORIZED: "UNAUTHORIZED";
+    readonly FORBIDDEN: "FORBIDDEN";
+    readonly NOT_FOUND: "NOT_FOUND";
+    readonly TOOL_NOT_FOUND: "TOOL_NOT_FOUND";
+    readonly SERVER_NOT_FOUND: "SERVER_NOT_FOUND";
+    readonly SERVER_UNAVAILABLE: "SERVER_UNAVAILABLE";
+    readonly RATE_LIMITED: "RATE_LIMITED";
+    readonly TIMEOUT: "TIMEOUT";
+    readonly BAD_REQUEST: "BAD_REQUEST";
+    readonly INTERNAL_ERROR: "INTERNAL_ERROR";
+    readonly VALIDATION_ERROR: "VALIDATION_ERROR";
+};
+export declare function errorHandler(err: unknown, req: Request, res: Response, _next: NextFunction): void;
+export declare function notFoundHandler(req: Request, res: Response): void;
+//# sourceMappingURL=error-handler.d.ts.map

package/dist/middleware/error-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.d.ts","sourceRoot":"","sources":["../../src/middleware/error-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;CACH;AAED,qBAAa,YAAa,SAAQ,KAAK;aAEnB,UAAU,EAAE,MAAM;aAClB,IAAI,EAAE,MAAM;aAEZ,OAAO,CAAC,EAAE,OAAO;gBAHjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,OAAO,YAAA;CAKpC;AAGD,eAAO,MAAM,UAAU;;;;;;;;;;;;CAYb,CAAC;AAEX,wBAAgB,YAAY,CAC1B,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,YAAY,GAClB,IAAI,CAmDN;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI,CASjE"}

package/dist/middleware/error-handler.js

@@ -0,0 +1,98 @@
+/**
+ * Centralized Error Handler Middleware
+ *
+ * Bug fix (v0.1.0): unhandled errors leaked raw stack traces and returned
+ * inconsistent response shapes. This middleware normalises all errors into
+ * a single JSON envelope and never exposes internal stack traces in production.
+ *
+ * @module middleware/error-handler
+ */
+export class GatewayError extends Error {
+    statusCode;
+    code;
+    details;
+    constructor(statusCode, code, message, details) {
+        super(message);
+        this.statusCode = statusCode;
+        this.code = code;
+        this.details = details;
+        this.name = 'GatewayError';
+    }
+}
+// Well-known error codes
+export const ErrorCodes = {
+    UNAUTHORIZED: 'UNAUTHORIZED',
+    FORBIDDEN: 'FORBIDDEN',
+    NOT_FOUND: 'NOT_FOUND',
+    TOOL_NOT_FOUND: 'TOOL_NOT_FOUND',
+    SERVER_NOT_FOUND: 'SERVER_NOT_FOUND',
+    SERVER_UNAVAILABLE: 'SERVER_UNAVAILABLE',
+    RATE_LIMITED: 'RATE_LIMITED',
+    TIMEOUT: 'TIMEOUT',
+    BAD_REQUEST: 'BAD_REQUEST',
+    INTERNAL_ERROR: 'INTERNAL_ERROR',
+    VALIDATION_ERROR: 'VALIDATION_ERROR',
+};
+export function errorHandler(err, req, res, _next) {
+    const isDev = process.env.NODE_ENV !== 'production';
+    // Headers already flushed (e.g. a late timeout): let Express close the socket.
+    if (res.headersSent) {
+        _next(err);
+        return;
+    }
+    if (err instanceof GatewayError) {
+        const body = {
+            error: {
+                code: err.code,
+                message: err.message,
+                requestId: req.requestId,
+                ...(isDev && err.details ? { details: err.details } : {}),
+            },
+        };
+        res.status(err.statusCode).json(body);
+        return;
+    }
+    // Client errors raised by Express / body-parser (malformed JSON, payload too
+    // large, …) carry a 4xx status and must not be reported as 500s.
+    const status = getHttpStatus(err);
+    if (status !== undefined && status >= 400 && status < 500) {
+        const body = {
+            error: {
+                code: status === 413 ? 'PAYLOAD_TOO_LARGE' : ErrorCodes.BAD_REQUEST,
+                message: err instanceof Error ? err.message : 'Bad request',
+                requestId: req.requestId,
+            },
+        };
+        res.status(status).json(body);
+        return;
+    }
+    // Unknown / unexpected errors
+    const message = isDev && err instanceof Error ? err.message : 'Internal server error';
+    const body = {
+        error: {
+            code: ErrorCodes.INTERNAL_ERROR,
+            message,
+            requestId: req.requestId,
+            ...(isDev && err instanceof Error ? { details: err.stack } : {}),
+        },
+    };
+    res.status(500).json(body);
+}
+export function notFoundHandler(req, res) {
+    const body = {
+        error: {
+            code: ErrorCodes.NOT_FOUND,
+            message: `Route ${req.method} ${req.path} not found`,
+            requestId: req.requestId,
+        },
+    };
+    res.status(404).json(body);
+}
+function getHttpStatus(err) {
+    if (!err || typeof err !== 'object')
+        return undefined;
+    const e = err;
+    const s = typeof e.status === 'number' ? e.status : typeof e.statusCode === 'number' ? e.statusCode : undefined;
+    return s !== undefined && Number.isInteger(s) ? s : undefined;
+}
+//# sourceMappingURL=error-handler.js.map

package/dist/middleware/error-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.js","sourceRoot":"","sources":["../../src/middleware/error-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAEnB;IACA;IAEA;IAJlB,YACkB,UAAkB,EAClB,IAAY,EAC5B,OAAe,EACC,OAAiB;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QALC,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAQ;QAEZ,YAAO,GAAP,OAAO,CAAU;QAGjC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,yBAAyB;AACzB,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,YAAY,EAAE,cAAc;IAC5B,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;IACtB,cAAc,EAAE,gBAAgB;IAChC,gBAAgB,EAAE,kBAAkB;IACpC,kBAAkB,EAAE,oBAAoB;IACxC,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,SAAS;IAClB,WAAW,EAAE,aAAa;IAC1B,cAAc,EAAE,gBAAgB;IAChC,gBAAgB,EAAE,kBAAkB;CAC5B,CAAC;AAEX,MAAM,UAAU,YAAY,CAC1B,GAAY,EACZ,GAAY,EACZ,GAAa,EACb,KAAmB;IAEnB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;IAEpD,+EAA+E;IAC/E,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,KAAK,CAAC,GAAG,CAAC,CAAC;QACX,OAAO;IACT,CAAC;IAED,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,GAAkB;YAC1B,KAAK,EAAE;gBACL,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,SAAS,EAAG,GAAW,CAAC,SAAS;gBACjC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D;SACF,CAAC;QACF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,6EAA6E;IAC7E,iEAAiE;IACjE,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAkB;YAC1B,KAAK,EAAE;gBACL,IAAI,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW;gBACnE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa;gBAC3D,SAAS,EAAG,GAAW,CAAC,SAAS;aAClC;SACF,CAAC;QACF,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,8BAA8B;IAC9B,MAAM,OAAO,GACX,KAAK,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAExE,MAAM,IAAI,GAAkB;QAC1B,KAAK,EAAE;YACL,IAAI,EAAE,UAAU,CAAC,cAAc;YAC/B,OAAO;YACP,SAAS,EAAG,GAAW,CAAC,SAAS;YACjC,GAAG,CAAC,KAAK,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE;KACF,CAAC;IAEF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa;IACzD,MAAM,IAAI,GAAkB;QAC1B,KAAK,EAAE;YACL,IAAI,EAAE,UAAU,CAAC,SAAS;YAC1B,OAAO,EAAE,SAAS,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,YAAY;YACpD,SAAS,EAAG,GAAW,CAAC,SAAS;SAClC;KACF,CAAC;IACF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,CAAC,GAAG,GAAiD,CAAC;IAC5D,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAChH,OAAO,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC"}

package/dist/middleware/request-id.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Request ID Middleware
+ *
+ * Attaches a unique `X-Request-Id` header to every request and response,
+ * enabling end-to-end tracing across logs and downstream systems.
+ *
+ * Priority order:
+ *   1. Honour an existing `X-Request-Id` header sent by the client
+ *   2. Honour `X-Correlation-Id` (common in enterprise proxies)
+ *   3. Generate a new UUID v4
+ *
+ * @module middleware/request-id
+ */
+import { Request, Response, NextFunction } from 'express';
+declare global {
+    namespace Express {
+        interface Request {
+            requestId: string;
+        }
+    }
+}
+export declare function requestIdMiddleware(req: Request, res: Response, next: NextFunction): void;
+//# sourceMappingURL=request-id.d.ts.map

package/dist/middleware/request-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-id.d.ts","sourceRoot":"","sources":["../../src/middleware/request-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG1D,OAAO,CAAC,MAAM,CAAC;IAEb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,SAAS,EAAE,MAAM,CAAC;SACnB;KACF;CACF;AAWD,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,IAAI,CASN"}

package/dist/middleware/request-id.js

@@ -0,0 +1,30 @@
+/**
+ * Request ID Middleware
+ *
+ * Attaches a unique `X-Request-Id` header to every request and response,
+ * enabling end-to-end tracing across logs and downstream systems.
+ *
+ * Priority order:
+ *   1. Honour an existing `X-Request-Id` header sent by the client
+ *   2. Honour `X-Correlation-Id` (common in enterprise proxies)
+ *   3. Generate a new UUID v4
+ *
+ * @module middleware/request-id
+ */
+import { randomUUID } from 'crypto';
+// Client-supplied ids are echoed into headers and logs: accept only a safe,
+// bounded charset to prevent log forging / oversized headers.
+const SAFE_ID = /^[A-Za-z0-9._:\-]{1,128}$/;
+function pick(value) {
+    const v = Array.isArray(value) ? value[0] : value;
+    return v && SAFE_ID.test(v) ? v : undefined;
+}
+export function requestIdMiddleware(req, res, next) {
+    const id = pick(req.headers['x-request-id']) ||
+        pick(req.headers['x-correlation-id']) ||
+        randomUUID();
+    req.requestId = id;
+    res.setHeader('X-Request-Id', id);
+    next();
+}
+//# sourceMappingURL=request-id.js.map

package/dist/middleware/request-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-id.js","sourceRoot":"","sources":["../../src/middleware/request-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAWpC,4EAA4E;AAC5E,8DAA8D;AAC9D,MAAM,OAAO,GAAG,2BAA2B,CAAC;AAE5C,SAAS,IAAI,CAAC,KAAoC;IAChD,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClD,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,MAAM,EAAE,GACN,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACrC,UAAU,EAAE,CAAC;IAEf,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC;IACnB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAClC,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/middleware/timeout.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Request Timeout Middleware
+ *
+ * Bug fix (v0.1.0): tool-call requests to slow or unresponsive MCP servers
+ * could hang indefinitely, exhausting the Node.js event loop.
+ * This middleware enforces a per-request deadline and returns a 504 response.
+ *
+ * @module middleware/timeout
+ */
+import { Request, Response, NextFunction } from 'express';
+export declare function timeoutMiddleware(timeoutMs: number): (req: Request, res: Response, next: NextFunction) => void;
+//# sourceMappingURL=timeout.d.ts.map

package/dist/middleware/timeout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout.d.ts","sourceRoot":"","sources":["../../src/middleware/timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG1D,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,IACzC,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAAI,CAiC/D"}

package/dist/middleware/timeout.js

@@ -0,0 +1,39 @@
+/**
+ * Request Timeout Middleware
+ *
+ * Bug fix (v0.1.0): tool-call requests to slow or unresponsive MCP servers
+ * could hang indefinitely, exhausting the Node.js event loop.
+ * This middleware enforces a per-request deadline and returns a 504 response.
+ *
+ * @module middleware/timeout
+ */
+import { GatewayError, ErrorCodes } from './error-handler.js';
+export function timeoutMiddleware(timeoutMs) {
+    return (req, res, next) => {
+        // Skip timeout for SSE streaming endpoints
+        if (req.path.endsWith('/stream')) {
+            next();
+            return;
+        }
+        let timedOut = false;
+        const timer = setTimeout(() => {
+            timedOut = true;
+            // The handler may have started streaming; nothing safe to send then.
+            if (res.headersSent)
+                return;
+            res.set('Retry-After', String(Math.max(1, Math.ceil(timeoutMs / 1000))));
+            next(new GatewayError(504, ErrorCodes.TIMEOUT, `Request timed out after ${timeoutMs}ms`, { path: req.path, method: req.method }));
+        }, timeoutMs);
+        // Clear the timer once the response is sent
+        res.on('finish', () => {
+            if (!timedOut)
+                clearTimeout(timer);
+        });
+        res.on('close', () => {
+            if (!timedOut)
+                clearTimeout(timer);
+        });
+        next();
+    };
+}
+//# sourceMappingURL=timeout.js.map

package/dist/middleware/timeout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout.js","sourceRoot":"","sources":["../../src/middleware/timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE9D,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC/D,2CAA2C;QAC3C,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,qEAAqE;YACrE,IAAI,GAAG,CAAC,WAAW;gBAAE,OAAO;YAC5B,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACzE,IAAI,CACF,IAAI,YAAY,CACd,GAAG,EACH,UAAU,CAAC,OAAO,EAClB,2BAA2B,SAAS,IAAI,EACxC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CACvC,CACF,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,4CAA4C;QAC5C,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACpB,IAAI,CAAC,QAAQ;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,IAAI,CAAC,QAAQ;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/monitor/index.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Metrics collection and aggregation for mcp-gateway
+ *
+ * Audit fixes:
+ *  - Prometheus `*_total` series were the count of the *last minute*, which
+ *    goes down over time and breaks `rate()`; they are now real monotonic
+ *    counters kept independently of the retention window.
+ *  - Label values are escaped per the exposition format.
+ *  - Percentiles use the nearest-rank method; `requestsPerMinute` without a
+ *    window is computed from the actual time span instead of request count.
+ *  - The in-memory log is capped (`maxEntries`) so high traffic within the
+ *    retention window cannot exhaust memory; cleanup timer is unref()'d.
+ */
+import { EventEmitter } from 'events';
+import type { RequestMetric, AggregatedMetrics, MonitorConfig } from '../utils/types.js';
+export interface MetricsOptions {
+    /** Hard cap on retained request records (oldest dropped first). Default 100k. */
+    maxEntries?: number;
+}
+/** Per-server connection state exported as Prometheus gauges / counters. */
+export interface ServerStateSample {
+    id: string;
+    status: string;
+    /** 1 when connected (online or degraded), else 0. */
+    up: number;
+    /** Successful automatic reconnects since start (monotonic). */
+    reconnects: number;
+    /** Consecutive failed reconnect attempts right now. */
+    reconnectAttempt: number;
+    latencyMs?: number;
+}
+export declare class MetricsCollector extends EventEmitter {
+    private metrics;
+    private readonly retentionMs;
+    private readonly maxEntries;
+    private cleanupInterval?;
+    private readonly counters;
+    constructor(config?: MonitorConfig, options?: MetricsOptions);
+    record(metric: Omit<RequestMetric, 'id' | 'timestamp'>): RequestMetric;
+    aggregate(windowMs?: number): AggregatedMetrics;
+    toPrometheusText(servers?: ServerStateSample[]): string;
+    start(): void;
+    /** Drop records older than the retention period. */
+    prune(now?: number): number;
+    stop(): void;
+    getRecent(limit?: number): RequestMetric[];
+    clear(): void;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/monitor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/monitor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEzF,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,EAAE,EAAE,MAAM,CAAC;IACX,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAUD,qBAAa,gBAAiB,SAAQ,YAAY;IAChD,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,eAAe,CAAC,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqC;gBAElD,MAAM,CAAC,EAAE,aAAa,EAAE,OAAO,GAAE,cAAmB;IAQhE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,aAAa;IAwBtE,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,iBAAiB;IAsD/C,gBAAgB,CAAC,OAAO,GAAE,iBAAiB,EAAO,GAAG,MAAM;IAkG3D,KAAK,IAAI,IAAI;IAMb,oDAAoD;IACpD,KAAK,CAAC,GAAG,SAAa,GAAG,MAAM;IAS/B,IAAI,IAAI,IAAI;IAOZ,SAAS,CAAC,KAAK,SAAM,GAAG,aAAa,EAAE;IAKvC,KAAK,IAAI,IAAI;CAId"}

package/dist/monitor/index.js

@@ -0,0 +1,204 @@
+/**
+ * Metrics collection and aggregation for mcp-gateway
+ *
+ * Audit fixes:
+ *  - Prometheus `*_total` series were the count of the *last minute*, which
+ *    goes down over time and breaks `rate()`; they are now real monotonic
+ *    counters kept independently of the retention window.
+ *  - Label values are escaped per the exposition format.
+ *  - Percentiles use the nearest-rank method; `requestsPerMinute` without a
+ *    window is computed from the actual time span instead of request count.
+ *  - The in-memory log is capped (`maxEntries`) so high traffic within the
+ *    retention window cannot exhaust memory; cleanup timer is unref()'d.
+ */
+import { EventEmitter } from 'events';
+import { randomUUID } from 'crypto';
+const SERVER_STATUSES = ['online', 'degraded', 'reconnecting', 'offline', 'unknown'];
+export class MetricsCollector extends EventEmitter {
+    metrics = [];
+    retentionMs;
+    maxEntries;
+    cleanupInterval;
+    counters = new Map();
+    constructor(config, options = {}) {
+        super();
+        this.retentionMs = (config?.retentionHours ?? 24) * 60 * 60 * 1000;
+        this.maxEntries = Math.max(1, options.maxEntries ?? 100_000);
+    }
+    // ─── Recording ──────────────────────────────────────────────────────────────
+    record(metric) {
+        const full = {
+            ...metric,
+            id: randomUUID(),
+            timestamp: new Date(),
+        };
+        this.metrics.push(full);
+        // Trim in batches to keep this amortised O(1).
+        if (this.metrics.length > this.maxEntries * 1.1) {
+            this.metrics.splice(0, this.metrics.length - this.maxEntries);
+        }
+        const c = this.counters.get(metric.serverId) ?? { requests: 0, errors: 0, durationMsSum: 0 };
+        c.requests++;
+        if (!metric.success)
+            c.errors++;
+        c.durationMsSum += metric.durationMs;
+        this.counters.set(metric.serverId, c);
+        this.emit('metric', full);
+        return full;
+    }
+    // ─── Aggregation ────────────────────────────────────────────────────────────
+    aggregate(windowMs) {
+        const now = Date.now();
+        const validWindow = windowMs !== undefined && Number.isFinite(windowMs) && windowMs > 0;
+        const cutoff = validWindow ? now - windowMs : 0;
+        const recent = cutoff > 0 ? this.metrics.filter((m) => m.timestamp.getTime() >= cutoff) : this.metrics;
+        if (recent.length === 0) {
+            return {
+                totalRequests: 0,
+                successRate: 1,
+                avgLatencyMs: 0,
+                p95LatencyMs: 0,
+                p99LatencyMs: 0,
+                requestsPerMinute: 0,
+                topTools: [],
+                topServers: [],
+                errorsByServer: {},
+            };
+        }
+        let successCount = 0;
+        let latencySum = 0;
+        const latencies = new Array(recent.length);
+        const toolCounts = new Map();
+        const serverCounts = new Map();
+        const errorsByServer = {};
+        recent.forEach((m, i) => {
+            latencies[i] = m.durationMs;
+            latencySum += m.durationMs;
+            if (m.success)
+                successCount++;
+            else
+                errorsByServer[m.serverId] = (errorsByServer[m.serverId] ?? 0) + 1;
+            toolCounts.set(m.toolName, (toolCounts.get(m.toolName) ?? 0) + 1);
+            serverCounts.set(m.serverId, (serverCounts.get(m.serverId) ?? 0) + 1);
+        });
+        latencies.sort((a, b) => a - b);
+        const spanMs = validWindow ? windowMs : Math.max(60_000, now - recent[0].timestamp.getTime());
+        return {
+            totalRequests: recent.length,
+            successRate: successCount / recent.length,
+            avgLatencyMs: latencySum / recent.length,
+            p95LatencyMs: percentile(latencies, 0.95),
+            p99LatencyMs: percentile(latencies, 0.99),
+            requestsPerMinute: recent.length / (spanMs / 60_000),
+            topTools: topN(toolCounts).map(([name, count]) => ({ name, count })),
+            topServers: topN(serverCounts).map(([id, count]) => ({ id, count })),
+            errorsByServer,
+        };
+    }
+    // ─── Prometheus Format ──────────────────────────────────────────────────────
+    toPrometheusText(servers = []) {
+        const agg = this.aggregate(60_000); // gauges over the last minute
+        let total = 0;
+        let errors = 0;
+        for (const c of this.counters.values()) {
+            total += c.requests;
+            errors += c.errors;
+        }
+        const lines = [
+            '# HELP mcp_gateway_requests_total Total number of tool calls since start',
+            '# TYPE mcp_gateway_requests_total counter',
+            `mcp_gateway_requests_total ${total}`,
+            '# HELP mcp_gateway_errors_total Total number of failed tool calls since start',
+            '# TYPE mcp_gateway_errors_total counter',
+            `mcp_gateway_errors_total ${errors}`,
+            '# HELP mcp_gateway_server_requests_total Tool calls per server since start',
+            '# TYPE mcp_gateway_server_requests_total counter',
+        ];
+        for (const [id, c] of this.counters) {
+            lines.push(`mcp_gateway_server_requests_total{server="${escapeLabel(id)}"} ${c.requests}`);
+        }
+        lines.push('# HELP mcp_gateway_server_errors_total Failed tool calls per server since start', '# TYPE mcp_gateway_server_errors_total counter');
+        for (const [id, c] of this.counters) {
+            lines.push(`mcp_gateway_server_errors_total{server="${escapeLabel(id)}"} ${c.errors}`);
+        }
+        lines.push('# HELP mcp_gateway_server_duration_ms_sum Sum of tool call latency per server since start (ms)', '# TYPE mcp_gateway_server_duration_ms_sum counter');
+        for (const [id, c] of this.counters) {
+            lines.push(`mcp_gateway_server_duration_ms_sum{server="${escapeLabel(id)}"} ${c.durationMsSum}`);
+        }
+        lines.push('# HELP mcp_gateway_success_rate Request success rate over the last minute (0-1)', '# TYPE mcp_gateway_success_rate gauge', `mcp_gateway_success_rate ${agg.successRate.toFixed(4)}`, '# HELP mcp_gateway_latency_avg_ms Average latency over the last minute (ms)', '# TYPE mcp_gateway_latency_avg_ms gauge', `mcp_gateway_latency_avg_ms ${agg.avgLatencyMs.toFixed(2)}`, '# HELP mcp_gateway_latency_p95_ms P95 latency over the last minute (ms)', '# TYPE mcp_gateway_latency_p95_ms gauge', `mcp_gateway_latency_p95_ms ${agg.p95LatencyMs.toFixed(2)}`, '# HELP mcp_gateway_latency_p99_ms P99 latency over the last minute (ms)', '# TYPE mcp_gateway_latency_p99_ms gauge', `mcp_gateway_latency_p99_ms ${agg.p99LatencyMs.toFixed(2)}`);
+        if (servers.length > 0) {
+            lines.push('# HELP mcp_gateway_server_up Whether the gateway currently has a session with the server (1/0)', '# TYPE mcp_gateway_server_up gauge');
+            for (const s of servers)
+                lines.push(`mcp_gateway_server_up{server="${escapeLabel(s.id)}"} ${s.up}`);
+            lines.push('# HELP mcp_gateway_server_status Current server status (1 for the active status label)', '# TYPE mcp_gateway_server_status gauge');
+            for (const s of servers) {
+                for (const st of SERVER_STATUSES) {
+                    lines.push(`mcp_gateway_server_status{server="${escapeLabel(s.id)}",status="${st}"} ${s.status === st ? 1 : 0}`);
+                }
+            }
+            lines.push('# HELP mcp_gateway_server_reconnects_total Successful automatic reconnects per server since start', '# TYPE mcp_gateway_server_reconnects_total counter');
+            for (const s of servers) {
+                lines.push(`mcp_gateway_server_reconnects_total{server="${escapeLabel(s.id)}"} ${s.reconnects}`);
+            }
+            lines.push('# HELP mcp_gateway_server_reconnect_attempt Consecutive failed reconnect attempts (0 when healthy)', '# TYPE mcp_gateway_server_reconnect_attempt gauge');
+            for (const s of servers) {
+                lines.push(`mcp_gateway_server_reconnect_attempt{server="${escapeLabel(s.id)}"} ${s.reconnectAttempt}`);
+            }
+            const pinged = servers.filter((s) => typeof s.latencyMs === 'number');
+            if (pinged.length > 0) {
+                lines.push('# HELP mcp_gateway_server_ping_ms Latency of the last health ping (ms)', '# TYPE mcp_gateway_server_ping_ms gauge');
+                for (const s of pinged)
+                    lines.push(`mcp_gateway_server_ping_ms{server="${escapeLabel(s.id)}"} ${s.latencyMs}`);
+            }
+        }
+        lines.push('');
+        return lines.join('\n');
+    }
+    // ─── Lifecycle ──────────────────────────────────────────────────────────────
+    start() {
+        this.stop();
+        this.cleanupInterval = setInterval(() => this.prune(), 60_000);
+        this.cleanupInterval.unref();
+    }
+    /** Drop records older than the retention period. */
+    prune(now = Date.now()) {
+        const cutoff = now - this.retentionMs;
+        // Records are appended in time order: find the first one to keep.
+        let i = 0;
+        while (i < this.metrics.length && this.metrics[i].timestamp.getTime() < cutoff)
+            i++;
+        if (i > 0)
+            this.metrics.splice(0, i);
+        return i;
+    }
+    stop() {
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+            this.cleanupInterval = undefined;
+        }
+    }
+    getRecent(limit = 100) {
+        if (!Number.isFinite(limit) || limit <= 0)
+            return [];
+        return this.metrics.slice(-Math.floor(limit)).reverse();
+    }
+    clear() {
+        this.metrics = [];
+        this.counters.clear();
+    }
+}
+function percentile(sorted, p) {
+    if (sorted.length === 0)
+        return 0;
+    const idx = Math.min(sorted.length - 1, Math.max(0, Math.ceil(p * sorted.length) - 1));
+    return sorted[idx];
+}
+function topN(counts, n = 10) {
+    return Array.from(counts.entries())
+        .sort((a, b) => b[1] - a[1])
+        .slice(0, n);
+}
+function escapeLabel(v) {
+    return v.replace(/\\/g, '\\\\').replace(/\n/g, '\\n').replace(/"/g, '\\"');
+}
+//# sourceMappingURL=index.js.map

package/dist/monitor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/monitor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAqBpC,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAQrF,MAAM,OAAO,gBAAiB,SAAQ,YAAY;IACxC,OAAO,GAAoB,EAAE,CAAC;IACrB,WAAW,CAAS;IACpB,UAAU,CAAS;IAC5B,eAAe,CAAkB;IACxB,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE9D,YAAY,MAAsB,EAAE,UAA0B,EAAE;QAC9D,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,WAAW,GAAG,CAAC,MAAM,EAAE,cAAc,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACnE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED,+EAA+E;IAE/E,MAAM,CAAC,MAA+C;QACpD,MAAM,IAAI,GAAkB;YAC1B,GAAG,MAAM;YACT,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,+CAA+C;QAC/C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YAChD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAC7F,CAAC,CAAC,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAChC,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAEtC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+EAA+E;IAE/E,SAAS,CAAC,QAAiB;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAEvG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,aAAa,EAAE,CAAC;gBAChB,WAAW,EAAE,CAAC;gBACd,YAAY,EAAE,CAAC;gBACf,YAAY,EAAE,CAAC;gBACf,YAAY,EAAE,CAAC;gBACf,iBAAiB,EAAE,CAAC;gBACpB,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,cAAc,EAAE,EAAE;aACnB,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,SAAS,GAAG,IAAI,KAAK,CAAS,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC7C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC/C,MAAM,cAAc,GAA2B,EAAE,CAAC;QAElD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACtB,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;YAC5B,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC;YAC3B,IAAI,CAAC,CAAC,OAAO;gBAAE,YAAY,EAAE,CAAC;;gBACzB,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACxE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEhC,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QAE/F,OAAO;YACL,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,WAAW,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM;YACzC,YAAY,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM;YACxC,YAAY,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC;YACzC,YAAY,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC;YACzC,iBAAiB,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;YACpD,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACpE,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACpE,cAAc;SACf,CAAC;IACJ,CAAC;IAED,+EAA+E;IAE/E,gBAAgB,CAAC,UAA+B,EAAE;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,8BAA8B;QAClE,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,KAAK,IAAI,CAAC,CAAC,QAAQ,CAAC;YACpB,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,MAAM,KAAK,GAAa;YACtB,0EAA0E;YAC1E,2CAA2C;YAC3C,8BAA8B,KAAK,EAAE;YACrC,+EAA+E;YAC/E,yCAAyC;YACzC,4BAA4B,MAAM,EAAE;YACpC,4EAA4E;YAC5E,kDAAkD;SACnD,CAAC;QACF,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,6CAA6C,WAAW,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,KAAK,CAAC,IAAI,CACR,iFAAiF,EACjF,gDAAgD,CACjD,CAAC;QACF,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,2CAA2C,WAAW,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,KAAK,CAAC,IAAI,CACR,gGAAgG,EAChG,mDAAmD,CACpD,CAAC;QACF,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,8CAA8C,WAAW,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,KAAK,CAAC,IAAI,CACR,iFAAiF,EACjF,uCAAuC,EACvC,4BAA4B,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EACxD,6EAA6E,EAC7E,yCAAyC,EACzC,8BAA8B,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAC3D,yEAAyE,EACzE,yCAAyC,EACzC,8BAA8B,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAC3D,yEAAyE,EACzE,yCAAyC,EACzC,8BAA8B,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAC5D,CAAC;QAEF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CACR,gGAAgG,EAChG,oCAAoC,CACrC,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,iCAAiC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpG,KAAK,CAAC,IAAI,CACR,wFAAwF,EACxF,wCAAwC,CACzC,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;oBACjC,KAAK,CAAC,IAAI,CACR,qCAAqC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CACrG,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,KAAK,CAAC,IAAI,CACR,mGAAmG,EACnG,oDAAoD,CACrD,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,+CAA+C,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;YACnG,CAAC;YACD,KAAK,CAAC,IAAI,CACR,oGAAoG,EACpG,mDAAmD,CACpD,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,gDAAgD,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC1G,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;YACtE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CACR,wEAAwE,EACxE,yCAAyC,CAC1C,CAAC;gBACF,KAAK,MAAM,CAAC,IAAI,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,sCAAsC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YACjH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,+EAA+E;IAE/E,KAAK;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACpB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC;QACtC,kEAAkE;QAClE,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM;YAAE,CAAC,EAAE,CAAC;QACrF,IAAI,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;QACnC,CAAC;IACH,CAAC;IAED,SAAS,CAAC,KAAK,GAAG,GAAG;QACnB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF;AAED,SAAS,UAAU,CAAC,MAAgB,EAAE,CAAS;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC,GAAG,CAAE,CAAC;AACtB,CAAC;AAED,SAAS,IAAI,CAAC,MAA2B,EAAE,CAAC,GAAG,EAAE;IAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;SAChC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;SAC3B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC7E,CAAC"}