bcs-mcp 0.2.5

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,141 @@
+# bcs-mcp
+
+**Твой портфель БКС Мир инвестиций — в диалоге с AI.**
+
+MCP-сервер, который подключает Claude (Claude Code, Claude Desktop — и любой другой
+MCP-клиент) к [BCS Trade API](https://trade-api.bcs.ru/). Смотри портфель, котировки,
+стакан, свечи, анализируй позиции и планируй ребалансировку — обычными фразами, на русском.
+
+Это не торговый робот и не «сигналы». Решения всегда принимаешь ты — сервер лишь
+даёт модели безопасный доступ к данным твоего брокерского счёта.
+
+Собран по образу и подобию [t-invest-mcp](https://github.com/human-turn/t-invest-mcp)
+(аналогичный сервер для Т-Инвестиций) — та же модель безопасности и файловых выгрузок.
+
+## Почему это безопасно
+
+- **Read-only по умолчанию.** Торговые операции даже не регистрируются, пока ты их
+  явно не включишь. Достаточно токена **«только для чтения»**.
+- **Сделки — только с твоего подтверждения.** Если включишь торговлю, перед каждой
+  заявкой сервер показывает диалог «Купить N шт. X?» — без явного «да» заявка не уйдёт.
+- **У БКС нет песочницы** — поэтому торговый режим включай осознанно: каждая заявка реальная.
+- Токен живёт в переменной окружения и никогда не попадает в код, логи и ответы сервера.
+  Быстрый старт ниже кладёт его в конфиг клиента — для постоянного использования держи
+  токен в системном keychain, рецепт: [docs/secure-token.md](docs/secure-token.md).
+
+## Быстрый старт (5 минут)
+
+Нужен Node.js ≥ 22 и брокерский счёт в БКС.
+
+1. **Токен.** Войди в веб-версию [БКС Мир инвестиций](https://lk.bcs.ru/) →
+   «Профиль» → «Управление счетами» → нажми на брокерский счёт → «Токены API» →
+   «Выпустить токен», тип **«Только для чтения»**. Токен показывается один раз;
+   живёт 90 дней. Токен привязан ровно к одному счёту.
+2. **Подключение к Claude Code:**
+
+   ```bash
+   claude mcp add bcs \
+     -e BCS_REFRESH_TOKEN=<ваш-токен> \
+     -- node /path/to/bcs-mcp/dist/index.js
+   ```
+
+   Для Claude Desktop тот же блок добавляется в Settings → Developer → Edit Config:
+
+   ```json
+   {
+     "mcpServers": {
+       "bcs": {
+         "command": "node",
+         "args": ["/path/to/bcs-mcp/dist/index.js"],
+         "env": { "BCS_REFRESH_TOKEN": "<ваш-токен>" }
+       }
+     }
+   }
+   ```
+
+   Перед этим: `npm install && npm run build` в папке проекта.
+
+3. **Проверка:** спроси «покажи мой портфель БКС».
+
+## Готовое из коробки: slash-команды
+
+В Claude Code появляются как `/bcs:<имя>`:
+
+| Команда | Что делает |
+|---|---|
+| `portfolio_review` | Полный обзор: структура, концентрация, риски |
+| `rebalance_check` | Дрейф от целевых долей + план сделок в лотах (без исполнения) |
+| `invest_cash <сумма>` | Пришла зарплата: куда докупить, чтобы приблизиться к целям |
+| `bond_picker <сумма> <горизонт>` | Скрининг каталога облигаций: рейтинг, купон, доходность, лесенка |
+| `fire_progress` | Прогресс к целям (FIRE) из `portfolio-target.json`: прогноз, требуемый взнос |
+| `position_deep_dive <тикер>` | Разбор бумаги: карточка, динамика, моя позиция |
+| `trades_review [дней]` | Мои сделки за период: обороты, средние цены, комиссии |
+| `weekly [сумма]` | Недельный ритуал: дайджест + план докупок |
+| `quarterly` | Обзор портфеля + проверка ребалансировки |
+| `feedback [тема]` | Репорт о проблеме для разработчиков (без токена и личных данных) |
+
+Все команды **анализируют и предлагают** — ни одна не совершает сделок сама.
+Целевые доли для ребалансировки задаются файлом `portfolio-target.json` в корне проекта
+(эталон — MCP-ресурс `bcs://portfolio-target/example`, формат совместим с t-invest-mcp).
+
+Дивиденды и купоны BCS Trade API не отдаёт — рядом можно подключить публичный
+[moex-mcp](https://github.com/cyberash-dev/moex-mcp) (MOEX ISS): команды это учитывают.
+
+## Переменные окружения
+
+| Переменная | Значение | Описание |
+|---|---|---|
+| `BCS_REFRESH_TOKEN` | обязательна | Refresh-токен из ЛК БКС (90 дней, привязан к счёту) |
+| `BCS_ALLOW_TRADING` | `true`/`false` | Регистрирует place/edit/cancel_order. Нужен токен «для торговли и чтения». РЕАЛЬНЫЕ деньги! |
+| `BCS_CONFIRM` | `off` | Отключает elicitation-подтверждение сделок (по умолчанию включено; выключать не рекомендуется — песочницы нет) |
+| `BCS_OUTPUT_DIR` | путь | Корень для файловых выгрузок `outputPath` (по умолчанию — cwd сервера) |
+
+## Tools
+
+Read-only (всегда):
+
+| Tool | Описание |
+|---|---|
+| `get_portfolio` | Портфель: позиции с P&L, долями, стоимостью в RUB/USD/EUR; итоги по классам (срез `term`, по умолчанию T0) |
+| `get_limits` | Денежные и депо-лимиты: свободные средства по валютам (`free` = quantity − locked; снимок на начало дня) |
+| `get_quotes` | Котировки (батч): bid/offer, last, open/high/low, изменение за день |
+| `get_order_book` | Стакан L2 (глубина 20) |
+| `get_recent_trades` | Лента обезличенных сделок: новейшие `limit` (расширяемое окно), период `from`/`to`; полный период в файл — через `outputPath` |
+| `get_candles` | Свечи OHLCV (M1…MN); с `outputPath` — весь период чанками |
+| `find_instrument` | Карточки по тикерам/ISIN: лот, classCode, купоны, дивдоходность, рейтинги (одна карточка на бумагу; `allBoards` — все площадки) |
+| `get_instruments_by_type` | Каталог инструментов типа (акции/облигации/ETF/фьючерсы…), пагинация |
+| `get_trading_schedule` | Сессии инструмента на сегодня (МСК, отсортированы) |
+| `get_trading_status` | Открыт/закрыт инструмент сейчас + кросс-чек с расписанием (`warning` при расхождении) |
+| `get_discounts` | Маржинальные дисконты (long/short) |
+| `get_orders` | Список заявок (данные с 26.01.2026) |
+| `get_order_status` | Статус заявки по UUID или биржевому номеру |
+| `get_trades` | Мои исполненные сделки (данные с 26.01.2026) |
+| `get_server_info` | Диагностика сервера (для фидбэка) |
+
+Торговые (`BCS_ALLOW_TRADING=true`): `place_order`, `edit_order`, `cancel_order`.
+**Важно:** количество в заявках — в штуках, не в лотах (лот — `lotSize` из `find_instrument`).
+
+### Выгрузка в файл
+
+Каждый read-tool принимает `outputPath` (путь относительно `BCS_OUTPUT_DIR`) и
+`outputFormat` (`json`/`csv`). Сервер пишет результат на диск, в диалог возвращает
+summary. Для `get_candles` и `get_instruments_by_type` это включает выкачивание
+полного периода/каталога чанками. Запись возможна строго внутри корня выгрузок.
+
+## Ограничения BCS Trade API
+
+- Нет истории денежных операций (полученные дивиденды, комиссии, пополнения) —
+  только биржевые сделки. XIRR и налоговые отчёты поэтому невозможны.
+- Нет песочницы.
+- Один токен = один счёт (несколько счетов — несколько инстансов сервера).
+- Списки заявок/сделок — только с 26.01.2026.
+
+## Disclaimer
+
+Не является индивидуальной инвестиционной рекомендацией. Все торговые решения вы
+принимаете самостоятельно. `place_order` оперирует реальными деньгами — используйте
+`BCS_ALLOW_TRADING=true` осознанно и держите подтверждение сделок включённым.
+
+## License
+
+Apache 2.0

package/dist/catalog.js

@@ -0,0 +1,63 @@
+import { API } from "./endpoints.js";
+import { bcsFetch } from "./client.js";
+import { pickList } from "./helpers.js";
+/** Lazy ticker catalog for prompt-argument completions (stocks + bonds + ETFs, 24h TTL) */
+const TTL_MS = 24 * 60 * 60 * 1000;
+/** After a failed load, don't hammer the rate-limited API on every completion keystroke */
+const FAIL_COOLDOWN_MS = 60_000;
+const PAGE_SIZE = 100;
+const MAX_PAGES = 100; // backstop: 10k tickers per type is plenty for completion
+// Same idiom as instruments-cache: one state object + shared in-flight promise
+let loaded = null;
+let loading = null;
+let lastFailAt = 0;
+async function byType(type) {
+    const all = [];
+    for (let page = 0; page < MAX_PAGES; page++) {
+        const items = pickList(await bcsFetch(API.information, "/instruments/by-type", {
+            query: { type, page: String(page), size: String(PAGE_SIZE) },
+        }), "instruments");
+        all.push(...items);
+        if (items.length < PAGE_SIZE)
+            break;
+    }
+    return all;
+}
+async function load() {
+    const [stocks, bonds, etfs] = await Promise.all([byType("STOCK"), byType("BONDS"), byType("ETF")]);
+    const set = new Set();
+    for (const list of [stocks, bonds, etfs]) {
+        for (const i of list)
+            if (i.ticker)
+                set.add(i.ticker.toUpperCase());
+    }
+    return [...set].sort();
+}
+export async function completeTicker(prefix) {
+    try {
+        const fresh = loaded !== null && Date.now() - loaded.at < TTL_MS;
+        const coolingDown = Date.now() - lastFailAt < FAIL_COOLDOWN_MS;
+        if (!fresh && !coolingDown) {
+            loading ??= load()
+                .then((t) => {
+                loaded = { tickers: t, at: Date.now() };
+                return t;
+            })
+                .catch((e) => {
+                lastFailAt = Date.now();
+                throw e;
+            })
+                .finally(() => {
+                loading = null;
+            });
+            await loading;
+        }
+        const p = prefix.toUpperCase();
+        // stale data beats no data: on refresh failure the previous catalog keeps serving
+        return (loaded?.tickers ?? []).filter((t) => t.startsWith(p)).slice(0, 100);
+    }
+    catch {
+        return (loaded?.tickers ?? []).filter((t) => t.startsWith(prefix.toUpperCase())).slice(0, 100);
+    }
+}
+//# sourceMappingURL=catalog.js.map

package/dist/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,2FAA2F;AAE3F,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,2FAA2F;AAC3F,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,0DAA0D;AAMjF,+EAA+E;AAC/E,IAAI,MAAM,GAA6C,IAAI,CAAC;AAC5D,IAAI,OAAO,GAA6B,IAAI,CAAC;AAC7C,IAAI,UAAU,GAAG,CAAC,CAAC;AAEnB,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,QAAQ,CACpB,MAAM,QAAQ,CAAU,GAAG,CAAC,WAAW,EAAE,sBAAsB,EAAE;YAC/D,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE;SAC7D,CAAC,EACF,aAAa,CACd,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QACnB,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;YAAE,MAAM;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnG,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,IAAI,CAAC,CAAC,MAAM;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc;IACjD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC;QACjE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,gBAAgB,CAAC;QAC/D,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3B,OAAO,KAAK,IAAI,EAAE;iBACf,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACV,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACxC,OAAO,CAAC,CAAC;YACX,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;gBACX,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACxB,MAAM,CAAC,CAAC;YACV,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC,CAAC,CAAC;YACL,MAAM,OAAO,CAAC;QAChB,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAC/B,kFAAkF;QAClF,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjG,CAAC;AACH,CAAC"}

package/dist/client.js

@@ -0,0 +1,179 @@
+import { setTimeout as sleep } from "node:timers/promises";
+import { AUTH_URL } from "./endpoints.js";
+export const config = {
+    refreshToken: process.env.BCS_REFRESH_TOKEN ?? "",
+    allowTrading: process.env.BCS_ALLOW_TRADING === "true",
+    /** Human confirmation (MCP elicitation) before each trade; opt out with BCS_CONFIRM=off */
+    confirm: process.env.BCS_CONFIRM !== "off",
+};
+/** Refresh access tokens a minute before their 24h expiry */
+const EXPIRY_MARGIN_MS = 60_000;
+const RATE_LIMIT_RETRIES = 2;
+const RATE_LIMIT_BACKOFF_MS = 5_000;
+/** Hard cap per HTTP attempt — a hung connection must not hang the MCP tool call */
+const REQUEST_TIMEOUT_MS = 30_000;
+export class BcsApiError extends Error {
+    status;
+    body;
+    kind;
+    constructor(message, status, body, kind = "api") {
+        super(message);
+        this.status = status;
+        this.body = body;
+        this.kind = kind;
+        this.name = "BcsApiError";
+    }
+}
+/**
+ * Keycloak token manager: exchanges the refresh token for a 24h access token,
+ * caches it, and keeps the rotated refresh token in memory (the env value stays
+ * valid until its own 90-day expiry, but the freshest one is preferred).
+ * The in-flight promise is cached so concurrent calls share one auth request.
+ */
+class TokenManager {
+    refreshToken = config.refreshToken;
+    accessToken = null;
+    expiresAt = 0;
+    inFlight = null;
+    /**
+     * `staleToken` marks the token that just got a 401: refresh happens only if the
+     * cache still holds that exact token — if a concurrent call already refreshed,
+     * the fresh cached token is returned without another Keycloak round-trip.
+     */
+    async getAccessToken(staleToken) {
+        const cachedValid = this.accessToken !== null && Date.now() < this.expiresAt;
+        if (cachedValid && this.accessToken !== staleToken)
+            return this.accessToken;
+        this.inFlight ??= this.fetchAccessToken().finally(() => {
+            this.inFlight = null;
+        });
+        return this.inFlight;
+    }
+    /** Diagnostics for get_server_info — never exposes token values */
+    status() {
+        const valid = this.accessToken !== null && Date.now() < this.expiresAt;
+        return {
+            accessTokenCached: valid,
+            accessExpiresInMinutes: valid ? Math.round((this.expiresAt - Date.now()) / 60_000) : null,
+        };
+    }
+    async fetchAccessToken() {
+        if (!this.refreshToken)
+            throw new Error("BCS_REFRESH_TOKEN is not set");
+        const clientId = config.allowTrading ? "trade-api-write" : "trade-api-read";
+        const body = new URLSearchParams({
+            client_id: clientId,
+            grant_type: "refresh_token",
+            refresh_token: this.refreshToken,
+        });
+        const res = await fetch(AUTH_URL, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body,
+            signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+        });
+        if (!res.ok) {
+            // Plain Error (not BcsApiError): HTTP hints for API endpoints don't apply to auth failures.
+            // Never include tokens in the error text.
+            throw new Error(`Auth failed: HTTP ${res.status} — check that BCS_REFRESH_TOKEN is valid, not expired (90 days) ` +
+                `and matches the mode (a read-only token cannot authenticate as trade-api-write)`);
+        }
+        const data = (await res.json());
+        this.accessToken = data.access_token;
+        this.expiresAt = Date.now() + data.expires_in * 1000 - EXPIRY_MARGIN_MS;
+        if (data.refresh_token)
+            this.refreshToken = data.refresh_token; // Keycloak rotates it
+        return this.accessToken;
+    }
+}
+const tokens = new TokenManager();
+/** Token diagnostics (no secret values) for get_server_info */
+export const tokenStatus = () => tokens.status();
+function classifyError(status, body) {
+    const trimmed = body.trim();
+    if (trimmed.startsWith("<"))
+        return { kind: "no-route", detail: "" }; // gateway HTML — route does not exist
+    try {
+        const parsed = JSON.parse(trimmed);
+        if (parsed.displayOptions?.text)
+            return { kind: "no-data", detail: parsed.displayOptions.text };
+    }
+    catch {
+        // not JSON — fall through
+    }
+    return { kind: "api", detail: trimmed.slice(0, 500) };
+}
+/**
+ * Authenticated request to the BCS Trade API.
+ * `base` is a service root from endpoints.ts, `path` starts with "/".
+ * Retries once with a token refresh on 401 (only if no one refreshed meanwhile)
+ * and up to RATE_LIMIT_RETRIES times with a growing backoff on 429
+ * (unless retry429 is false). Every attempt is capped by REQUEST_TIMEOUT_MS.
+ */
+export async function bcsFetch(base, path, opts = {}) {
+    const url = new URL(base + path);
+    for (const [k, v] of Object.entries(opts.query ?? {})) {
+        if (v === undefined)
+            continue;
+        for (const item of Array.isArray(v) ? v : [v])
+            url.searchParams.append(k, item);
+    }
+    const method = opts.method ?? "GET";
+    let retried401 = false;
+    let rateRetries = 0;
+    let staleToken;
+    for (;;) {
+        const token = await tokens.getAccessToken(staleToken);
+        staleToken = undefined;
+        let res;
+        try {
+            res = await fetch(url, {
+                method,
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                    ...(opts.body != null ? { "Content-Type": "application/json" } : {}),
+                },
+                body: opts.body != null ? JSON.stringify(opts.body) : undefined,
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+        }
+        catch (e) {
+            if (e.name === "TimeoutError" || e.name === "AbortError") {
+                throw new Error(`Request timeout after ${REQUEST_TIMEOUT_MS / 1000}s: ${method} ${url.pathname}`);
+            }
+            throw e;
+        }
+        if (res.status === 401 && !retried401) {
+            retried401 = true;
+            staleToken = token; // refresh only if nobody refreshed the cache meanwhile
+            res.body?.cancel().catch(() => { });
+            continue;
+        }
+        if (!res.ok) {
+            const body = await res.text().catch(() => "");
+            // 429 with "message exceeds maximum size" is the backend's ~4 MB cap leaking through —
+            // the feed only grows during the day, so backoff-and-retry cannot succeed
+            const tooLarge = res.status === 429 && /exceeds maximum size/i.test(body);
+            if (res.status === 429 && !tooLarge && rateRetries < RATE_LIMIT_RETRIES && opts.retry429 !== false) {
+                rateRetries++;
+                await sleep(RATE_LIMIT_BACKOFF_MS * rateRetries);
+                continue;
+            }
+            const { kind, detail } = classifyError(res.status, body);
+            throw new BcsApiError(`HTTP ${res.status} ${method} ${url.pathname}${detail ? ` — ${detail}` : ""}`, res.status, detail, tooLarge ? "too-large" : kind);
+        }
+        if (res.status === 204)
+            return undefined;
+        // Some mutation endpoints answer 200 with an empty body — that is still success
+        const text = await res.text();
+        if (!text.trim())
+            return undefined;
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            throw new Error(`Unexpected non-JSON response (HTTP ${res.status}, ${method} ${url.pathname}): ${text.slice(0, 200)}`);
+        }
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;IACjD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM;IACtD,2FAA2F;IAC3F,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,KAAK;CAClC,CAAC;AAEX,6DAA6D;AAC7D,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,oFAAoF;AACpF,MAAM,kBAAkB,GAAG,MAAM,CAAC;AASlC,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGlB;IACA;IACA;IAJlB,YACE,OAAe,EACC,MAAc,EACd,IAAY,EACZ,OAAqB,KAAK;QAE1C,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAsB;QAG1C,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAQD;;;;;GAKG;AACH,MAAM,YAAY;IACR,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACnC,WAAW,GAAkB,IAAI,CAAC;IAClC,SAAS,GAAG,CAAC,CAAC;IACd,QAAQ,GAA2B,IAAI,CAAC;IAEhD;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,UAAmB;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7E,IAAI,WAAW,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC,WAAqB,CAAC;QACtF,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACrD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,mEAAmE;IACnE,MAAM;QACJ,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QACvE,OAAO;YACL,iBAAiB,EAAE,KAAK;YACxB,sBAAsB,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;SAC1F,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC5E,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,QAAQ;YACnB,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,IAAI,CAAC,YAAY;SACjC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI;YACJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,4FAA4F;YAC5F,0CAA0C;YAC1C,MAAM,IAAI,KAAK,CACb,qBAAqB,GAAG,CAAC,MAAM,kEAAkE;gBAC/F,iFAAiF,CACpF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;QACjD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,gBAAgB,CAAC;QACxE,IAAI,IAAI,CAAC,aAAa;YAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,sBAAsB;QACtF,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;AAElC,+DAA+D;AAC/D,MAAM,CAAC,MAAM,WAAW,GAAG,GAAuC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;AAarF,SAAS,aAAa,CAAC,MAAc,EAAE,IAAY;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,sCAAsC;IAC5G,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA2C,CAAC;QAC7E,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAI,IAAY,EAAE,IAAY,EAAE,OAAuB,EAAE;IACrF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;IAEpC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,UAA8B,CAAC;IACnC,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACtD,UAAU,GAAG,SAAS,CAAC;QACvB,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBACrB,MAAM;gBACN,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrE;gBACD,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAAW,CAAC,IAAI,KAAK,cAAc,IAAK,CAAW,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC/E,MAAM,IAAI,KAAK,CAAC,yBAAyB,kBAAkB,GAAG,IAAI,MAAM,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YACpG,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACtC,UAAU,GAAG,IAAI,CAAC;YAClB,UAAU,GAAG,KAAK,CAAC,CAAC,uDAAuD;YAC3E,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,uFAAuF;YACvF,0EAA0E;YAC1E,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1E,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,WAAW,GAAG,kBAAkB,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;gBACnG,WAAW,EAAE,CAAC;gBACd,MAAM,KAAK,CAAC,qBAAqB,GAAG,WAAW,CAAC,CAAC;gBACjD,SAAS;YACX,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,IAAI,WAAW,CACnB,QAAQ,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAC7E,GAAG,CAAC,MAAM,EACV,MAAM,EACN,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAC9B,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,gFAAgF;QAChF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,SAAc,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,sCAAsC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/endpoints.js

@@ -0,0 +1,18 @@
+/**
+ * BCS Trade API service base URLs.
+ * The PDF manual is partially outdated — paths here are verified against the
+ * live API and https://trade-api.bcs.ru (see also bcs-trade-go as a reference).
+ */
+export const AUTH_URL = "https://be.broker.ru/trade-api-keycloak/realms/tradeapi/protocol/openid-connect/token";
+const BASE = "https://be.broker.ru";
+export const API = {
+    portfolio: `${BASE}/trade-api-bff-portfolio/api/v1`,
+    limits: `${BASE}/trade-api-bff-limit/api/v1`,
+    operations: `${BASE}/trade-api-bff-operations/api/v1`,
+    orderDetails: `${BASE}/trade-api-bff-order-details/api/v1`,
+    tradeDetails: `${BASE}/trade-api-bff-trade-details/api/v1`,
+    information: `${BASE}/trade-api-information-service/api/v1`,
+    marketData: `${BASE}/trade-api-market-data-connector/api/v1`,
+    marginal: `${BASE}/trade-api-bff-marginal-indicators/api/v1`,
+};
+//# sourceMappingURL=endpoints.js.map

package/dist/endpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoints.js","sourceRoot":"","sources":["../src/endpoints.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GACnB,uFAAuF,CAAC;AAE1F,MAAM,IAAI,GAAG,sBAAsB,CAAC;AAEpC,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,SAAS,EAAE,GAAG,IAAI,iCAAiC;IACnD,MAAM,EAAE,GAAG,IAAI,6BAA6B;IAC5C,UAAU,EAAE,GAAG,IAAI,kCAAkC;IACrD,YAAY,EAAE,GAAG,IAAI,qCAAqC;IAC1D,YAAY,EAAE,GAAG,IAAI,qCAAqC;IAC1D,WAAW,EAAE,GAAG,IAAI,uCAAuC;IAC3D,UAAU,EAAE,GAAG,IAAI,yCAAyC;IAC5D,QAAQ,EAAE,GAAG,IAAI,2CAA2C;CACpD,CAAC"}