gitlab-mcp 1.0.0 → 1.2.0

package/dist/http-app.js

@@ -0,0 +1,550 @@
+import { randomUUID } from "node:crypto";
+import { createMcpExpressApp } from "@modelcontextprotocol/sdk/server/express.js";
+import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import express from "express";
+import { runWithSessionAuth } from "./lib/auth-context.js";
+import { hasReachedSessionCapacity } from "./lib/session-capacity.js";
+import { createMcpServer } from "./server/build-server.js";
+export function setupMcpHttpApp(deps) {
+    const { context, env: appEnv, logger: appLogger } = deps;
+    const app = createMcpExpressApp({ host: appEnv.HTTP_HOST });
+    app.use(express.json({ limit: "2mb" }));
+    app.use((error, req, res, next) => {
+        if (req.path !== "/mcp" || !isJsonBodyParserError(error)) {
+            next(error);
+            return;
+        }
+        if (error.type === "entity.too.large") {
+            res.status(413).json({
+                jsonrpc: "2.0",
+                error: {
+                    code: -32013,
+                    message: "JSON payload exceeds 2mb limit"
+                },
+                id: null
+            });
+            return;
+        }
+        res.status(400).json({
+            jsonrpc: "2.0",
+            error: {
+                code: -32700,
+                message: "Invalid JSON payload"
+            },
+            id: null
+        });
+    });
+    const sessions = new Map();
+    const pendingSessions = new Set();
+    const sseSessions = new Map();
+    /* ---- /healthz ---- */
+    app.get("/healthz", (_req, res) => {
+        res.status(200).json({
+            status: hasReachedSessionCapacity({
+                streamableSessions: sessions.size,
+                pendingSessions: pendingSessions.size,
+                sseSessions: sseSessions.size,
+                maxSessions: appEnv.MAX_SESSIONS
+            })
+                ? "degraded"
+                : "ok",
+            server: appEnv.MCP_SERVER_NAME,
+            activeSessions: sessions.size,
+            activeSseSessions: sseSessions.size,
+            pendingSessions: pendingSessions.size,
+            maxSessions: appEnv.MAX_SESSIONS,
+            remoteAuthorization: appEnv.REMOTE_AUTHORIZATION,
+            readOnlyMode: appEnv.GITLAB_READ_ONLY_MODE,
+            sseEnabled: appEnv.SSE
+        });
+    });
+    /* ---- SSE endpoints ---- */
+    if (appEnv.SSE) {
+        app.get("/sse", async (req, res) => {
+            let sessionId;
+            try {
+                const parsedAuth = parseRequestAuth(req);
+                const fallbackToken = appEnv.REMOTE_AUTHORIZATION
+                    ? undefined
+                    : appEnv.GITLAB_PERSONAL_ACCESS_TOKEN;
+                if (hasReachedSessionCapacity({
+                    streamableSessions: sessions.size,
+                    pendingSessions: pendingSessions.size,
+                    sseSessions: sseSessions.size,
+                    maxSessions: appEnv.MAX_SESSIONS
+                })) {
+                    res.status(503).send(`Maximum ${appEnv.MAX_SESSIONS} concurrent sessions reached`);
+                    return;
+                }
+                const server = createMcpServer(context);
+                const transport = new SSEServerTransport("/messages", res);
+                sessionId = transport.sessionId;
+                const state = {
+                    sessionId,
+                    server,
+                    transport,
+                    lastAccessAt: Date.now(),
+                    closed: false
+                };
+                sseSessions.set(sessionId, state);
+                const currentSessionId = sessionId;
+                res.on("close", () => {
+                    void closeSseSession(currentSessionId, "client-close");
+                });
+                await runWithSessionAuth({
+                    sessionId,
+                    token: parsedAuth?.token ?? fallbackToken,
+                    apiUrl: parsedAuth?.apiUrl ?? appEnv.GITLAB_API_URL,
+                    header: parsedAuth?.header,
+                    updatedAt: Date.now()
+                }, async () => {
+                    await server.connect(transport);
+                });
+                appLogger.info({ sessionId }, "MCP SSE session initialized");
+            }
+            catch (error) {
+                if (sessionId) {
+                    await closeSseSession(sessionId, "connect-error");
+                }
+                appLogger.error({ err: error, sessionId }, "Failed to initialize SSE session");
+                if (!res.headersSent) {
+                    res.status(500).send("Failed to initialize SSE session");
+                }
+            }
+        });
+        app.post("/messages", async (req, res) => {
+            let sessionId;
+            try {
+                sessionId = String(req.query.sessionId ?? "");
+                if (!sessionId) {
+                    res.status(400).send("Missing sessionId");
+                    return;
+                }
+                const session = sseSessions.get(sessionId);
+                if (!session || session.closed) {
+                    res.status(400).send("No transport found for sessionId");
+                    return;
+                }
+                const parsedAuth = parseRequestAuth(req);
+                const fallbackToken = appEnv.REMOTE_AUTHORIZATION
+                    ? undefined
+                    : appEnv.GITLAB_PERSONAL_ACCESS_TOKEN;
+                session.lastAccessAt = Date.now();
+                await runWithSessionAuth({
+                    sessionId,
+                    token: parsedAuth?.token ?? fallbackToken,
+                    apiUrl: parsedAuth?.apiUrl ?? appEnv.GITLAB_API_URL,
+                    header: parsedAuth?.header,
+                    updatedAt: Date.now()
+                }, async () => {
+                    await session.transport.handlePostMessage(req, res, req.body);
+                });
+            }
+            catch (error) {
+                appLogger.error({ err: error, sessionId }, "SSE post message failed");
+                if (!res.headersSent) {
+                    res.status(500).send("SSE message processing failed");
+                }
+            }
+        });
+    }
+    /* ---- /mcp (streamable HTTP) ---- */
+    app.all("/mcp", async (req, res) => {
+        const incomingSessionId = req.header("mcp-session-id") ?? undefined;
+        let session = incomingSessionId ? sessions.get(incomingSessionId) : undefined;
+        let createdSession = false;
+        try {
+            const parsedAuth = parseRequestAuth(req);
+            if (appEnv.REMOTE_AUTHORIZATION && !parsedAuth?.token) {
+                res.status(401).json({
+                    jsonrpc: "2.0",
+                    error: {
+                        code: -32010,
+                        message: "Missing remote authorization token. Provide 'Authorization: Bearer <token>' or 'Private-Token'."
+                    },
+                    id: null
+                });
+                return;
+            }
+            if (appEnv.REMOTE_AUTHORIZATION && appEnv.ENABLE_DYNAMIC_API_URL && !parsedAuth?.apiUrl) {
+                res.status(400).json({
+                    jsonrpc: "2.0",
+                    error: {
+                        code: -32011,
+                        message: "Missing 'X-GitLab-API-URL' while ENABLE_DYNAMIC_API_URL=true and REMOTE_AUTHORIZATION=true."
+                    },
+                    id: null
+                });
+                return;
+            }
+            if (incomingSessionId && !session) {
+                res.status(404).json({
+                    jsonrpc: "2.0",
+                    error: {
+                        code: -32001,
+                        message: `Unknown session '${incomingSessionId}'`
+                    },
+                    id: null
+                });
+                return;
+            }
+            if (!session) {
+                if (req.method !== "POST") {
+                    res.status(400).json({
+                        jsonrpc: "2.0",
+                        error: {
+                            code: -32000,
+                            message: "Session not initialized. First call must be a POST initialize request."
+                        },
+                        id: null
+                    });
+                    return;
+                }
+                if (hasReachedSessionCapacity({
+                    streamableSessions: sessions.size,
+                    pendingSessions: pendingSessions.size,
+                    sseSessions: sseSessions.size,
+                    maxSessions: appEnv.MAX_SESSIONS
+                })) {
+                    res.status(503).json({
+                        jsonrpc: "2.0",
+                        error: {
+                            code: -32002,
+                            message: `Maximum ${appEnv.MAX_SESSIONS} concurrent sessions reached`
+                        },
+                        id: null
+                    });
+                    return;
+                }
+                session = await createSession(parsedAuth);
+                createdSession = true;
+            }
+            else {
+                refreshSessionAuth(session, parsedAuth);
+            }
+            if (!session) {
+                throw new Error("Session state missing after initialization");
+            }
+            const activeSession = session;
+            if (!checkSessionRateLimit(activeSession)) {
+                res.status(429).json({
+                    jsonrpc: "2.0",
+                    error: {
+                        code: -32003,
+                        message: `Rate limit exceeded: max ${appEnv.MAX_REQUESTS_PER_MINUTE} requests/min per session`
+                    },
+                    id: null
+                });
+                return;
+            }
+            await enqueueSessionRequest(activeSession, async () => {
+                const runtimeAuth = buildRuntimeAuth(activeSession);
+                await runWithSessionAuth(runtimeAuth, async () => {
+                    await activeSession.transport.handleRequest(req, res, req.body);
+                });
+            });
+        }
+        catch (error) {
+            appLogger.error({
+                err: error,
+                method: req.method,
+                sessionId: incomingSessionId
+            }, "MCP HTTP request failed");
+            if (!res.headersSent && isClientHeaderValidationError(error)) {
+                res.status(400).json({
+                    jsonrpc: "2.0",
+                    error: {
+                        code: -32012,
+                        message: error.message
+                    },
+                    id: null
+                });
+                return;
+            }
+            if (!res.headersSent) {
+                res.status(500).json({
+                    jsonrpc: "2.0",
+                    error: {
+                        code: -32603,
+                        message: "Internal server error"
+                    },
+                    id: null
+                });
+            }
+        }
+        finally {
+            if (createdSession && session) {
+                await discardPendingSessionIfUninitialized(session);
+            }
+        }
+    });
+    /* ---- Internal helpers (closures) ---- */
+    async function createSession(initialAuth) {
+        const server = createMcpServer(context);
+        const state = {
+            server,
+            transport: undefined,
+            lastAccessAt: Date.now(),
+            queue: Promise.resolve(),
+            activeRequests: 0,
+            closed: false,
+            auth: initialAuth,
+            rateLimit: {
+                windowStart: Date.now(),
+                count: 0
+            }
+        };
+        pendingSessions.add(state);
+        const transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: () => randomUUID(),
+            enableJsonResponse: appEnv.HTTP_JSON_ONLY,
+            onsessioninitialized: (sessionId) => {
+                state.sessionId = sessionId;
+                state.lastAccessAt = Date.now();
+                sessions.set(sessionId, state);
+                pendingSessions.delete(state);
+                appLogger.info({ sessionId }, "MCP session initialized");
+            },
+            onsessionclosed: async (sessionId) => {
+                await closeSession(sessionId, "transport-close");
+            }
+        });
+        state.transport = transport;
+        transport.onerror = (error) => {
+            appLogger.error({ err: error, sessionId: state.sessionId }, "MCP transport error");
+        };
+        try {
+            await server.connect(transport);
+            return state;
+        }
+        catch (error) {
+            pendingSessions.delete(state);
+            if (state.sessionId) {
+                await closeSession(state.sessionId, "transport-close");
+                throw error;
+            }
+            state.closed = true;
+            try {
+                await transport.close();
+            }
+            catch (closeError) {
+                appLogger.warn({ err: closeError }, "Failed to close transport after session init failure");
+            }
+            try {
+                await server.close();
+            }
+            catch (closeError) {
+                appLogger.warn({ err: closeError }, "Failed to close MCP server after session init failure");
+            }
+            throw error;
+        }
+    }
+    function checkSessionRateLimit(session) {
+        const now = Date.now();
+        const oneMinute = 60_000;
+        if (now - session.rateLimit.windowStart >= oneMinute) {
+            session.rateLimit.windowStart = now;
+            session.rateLimit.count = 0;
+        }
+        if (session.rateLimit.count >= appEnv.MAX_REQUESTS_PER_MINUTE) {
+            return false;
+        }
+        session.rateLimit.count += 1;
+        return true;
+    }
+    function refreshSessionAuth(session, auth) {
+        if (!auth) {
+            return;
+        }
+        session.auth = auth;
+        session.lastAccessAt = Date.now();
+    }
+    function buildRuntimeAuth(session) {
+        const fallbackToken = appEnv.REMOTE_AUTHORIZATION
+            ? undefined
+            : appEnv.GITLAB_PERSONAL_ACCESS_TOKEN;
+        return {
+            sessionId: session.sessionId,
+            token: session.auth?.token ?? fallbackToken,
+            apiUrl: session.auth?.apiUrl ?? appEnv.GITLAB_API_URL,
+            header: session.auth?.header,
+            updatedAt: session.auth?.updatedAt ?? Date.now()
+        };
+    }
+    function parseRequestAuth(req) {
+        if (!appEnv.REMOTE_AUTHORIZATION) {
+            return undefined;
+        }
+        const privateToken = req.header("private-token")?.trim();
+        const authorization = req.header("authorization")?.trim();
+        const bearerToken = authorization?.toLowerCase().startsWith("bearer ")
+            ? authorization.slice(7).trim()
+            : undefined;
+        const token = privateToken || bearerToken;
+        let apiUrl;
+        if (appEnv.ENABLE_DYNAMIC_API_URL) {
+            const dynamicApiUrl = req.header("x-gitlab-api-url")?.trim();
+            if (dynamicApiUrl) {
+                try {
+                    const parsedApiUrl = new URL(dynamicApiUrl);
+                    if (!isHttpUrl(parsedApiUrl)) {
+                        throw new Error("unsupported protocol");
+                    }
+                    apiUrl = parsedApiUrl.toString();
+                }
+                catch {
+                    throw new Error(`Invalid x-gitlab-api-url header: '${dynamicApiUrl}'`);
+                }
+            }
+        }
+        if (!token && !apiUrl) {
+            return undefined;
+        }
+        return {
+            token,
+            apiUrl,
+            header: privateToken ? "private-token" : bearerToken ? "authorization" : undefined,
+            updatedAt: Date.now()
+        };
+    }
+    async function enqueueSessionRequest(session, task) {
+        const queued = session.queue.then(async () => {
+            session.activeRequests += 1;
+            session.lastAccessAt = Date.now();
+            try {
+                await task();
+            }
+            finally {
+                session.activeRequests -= 1;
+                session.lastAccessAt = Date.now();
+            }
+        });
+        session.queue = queued.catch(() => undefined);
+        await queued;
+    }
+    async function garbageCollectSessions() {
+        const now = Date.now();
+        const timeoutMs = appEnv.SESSION_TIMEOUT_SECONDS * 1000;
+        for (const [sessionId, session] of sessions) {
+            if (session.activeRequests > 0 || session.closed) {
+                continue;
+            }
+            if (now - session.lastAccessAt < timeoutMs) {
+                continue;
+            }
+            await closeSession(sessionId, "idle-timeout");
+        }
+        for (const [sessionId, session] of sseSessions) {
+            if (session.closed) {
+                continue;
+            }
+            if (now - session.lastAccessAt < timeoutMs) {
+                continue;
+            }
+            await closeSseSession(sessionId, "idle-timeout");
+        }
+    }
+    async function discardPendingSessionIfUninitialized(session) {
+        if (session.closed || session.sessionId || !pendingSessions.has(session)) {
+            return;
+        }
+        session.closed = true;
+        pendingSessions.delete(session);
+        try {
+            await session.transport.close();
+        }
+        catch (error) {
+            appLogger.warn({ err: error }, "Failed to close uninitialized transport cleanly");
+        }
+        try {
+            await session.server.close();
+        }
+        catch (error) {
+            appLogger.warn({ err: error }, "Failed to close uninitialized MCP server cleanly");
+        }
+        appLogger.info("Discarded uninitialized pending session");
+    }
+    async function closeSession(sessionId, reason) {
+        const session = sessions.get(sessionId);
+        if (!session || session.closed) {
+            return;
+        }
+        session.closed = true;
+        sessions.delete(sessionId);
+        try {
+            await session.transport.close();
+        }
+        catch (error) {
+            appLogger.warn({ err: error, sessionId, reason }, "Failed to close transport cleanly");
+        }
+        try {
+            await session.server.close();
+        }
+        catch (error) {
+            appLogger.warn({ err: error, sessionId, reason }, "Failed to close MCP server cleanly");
+        }
+        appLogger.info({ sessionId, reason }, "MCP session closed");
+    }
+    async function closeSseSession(sessionId, reason) {
+        const session = sseSessions.get(sessionId);
+        if (!session || session.closed) {
+            return;
+        }
+        session.closed = true;
+        sseSessions.delete(sessionId);
+        try {
+            await session.transport.close();
+        }
+        catch (error) {
+            appLogger.warn({ err: error, sessionId, reason }, "Failed to close SSE transport cleanly");
+        }
+        try {
+            await session.server.close();
+        }
+        catch (error) {
+            appLogger.warn({ err: error, sessionId, reason }, "Failed to close SSE MCP server cleanly");
+        }
+        appLogger.info({ sessionId, reason }, "MCP SSE session closed");
+    }
+    async function shutdown(httpServer, gcIntervalHandle) {
+        appLogger.info("Shutting down HTTP server");
+        clearInterval(gcIntervalHandle);
+        const pendingClose = [...sessions.keys()].map((sessionId) => closeSession(sessionId, "shutdown"));
+        const pendingSseClose = [...sseSessions.keys()].map((sessionId) => closeSseSession(sessionId, "shutdown"));
+        const pendingInitClose = [...pendingSessions].map((session) => discardPendingSessionIfUninitialized(session));
+        await Promise.allSettled([...pendingClose, ...pendingSseClose, ...pendingInitClose]);
+        await new Promise((resolve, reject) => {
+            httpServer.close((error) => {
+                if (error) {
+                    reject(error);
+                    return;
+                }
+                resolve();
+            });
+        });
+    }
+    return {
+        app,
+        sessions,
+        pendingSessions,
+        sseSessions,
+        closeSession,
+        closeSseSession,
+        garbageCollectSessions,
+        shutdown
+    };
+}
+function isClientHeaderValidationError(error) {
+    return error instanceof Error && error.message.startsWith("Invalid x-gitlab-api-url header:");
+}
+function isJsonBodyParserError(error) {
+    return (error instanceof Error &&
+        "type" in error &&
+        (error.type === "entity.parse.failed" ||
+            error.type === "entity.too.large"));
+}
+function isHttpUrl(url) {
+    return url.protocol === "http:" || url.protocol === "https:";
+}
+//# sourceMappingURL=http-app.js.map

package/dist/http-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-app.js","sourceRoot":"","sources":["../src/http-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAElF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAEnG,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,kBAAkB,EAAoB,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAyD3D,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAEzD,MAAM,GAAG,GAAG,mBAAmB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5D,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACxC,GAAG,CAAC,GAAG,CACL,CAAC,KAAc,EAAE,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;QAC1F,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,KAAK,CAAC,CAAC;YACZ,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,gCAAgC;iBAC1C;gBACD,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,CAAC,KAAK;gBACZ,OAAO,EAAE,sBAAsB;aAChC;YACD,EAAE,EAAE,IAAI;SACT,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IACjD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAgB,CAAC;IAChD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEvD,wBAAwB;IAExB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAChC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,MAAM,EAAE,yBAAyB,CAAC;gBAChC,kBAAkB,EAAE,QAAQ,CAAC,IAAI;gBACjC,eAAe,EAAE,eAAe,CAAC,IAAI;gBACrC,WAAW,EAAE,WAAW,CAAC,IAAI;gBAC7B,WAAW,EAAE,MAAM,CAAC,YAAY;aACjC,CAAC;gBACA,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,IAAI;YACR,MAAM,EAAE,MAAM,CAAC,eAAe;YAC9B,cAAc,EAAE,QAAQ,CAAC,IAAI;YAC7B,iBAAiB,EAAE,WAAW,CAAC,IAAI;YACnC,eAAe,EAAE,eAAe,CAAC,IAAI;YACrC,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,mBAAmB,EAAE,MAAM,CAAC,oBAAoB;YAChD,YAAY,EAAE,MAAM,CAAC,qBAAqB;YAC1C,UAAU,EAAE,MAAM,CAAC,GAAG;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,6BAA6B;IAE7B,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACjC,IAAI,SAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACzC,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB;oBAC/C,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC;gBAExC,IACE,yBAAyB,CAAC;oBACxB,kBAAkB,EAAE,QAAQ,CAAC,IAAI;oBACjC,eAAe,EAAE,eAAe,CAAC,IAAI;oBACrC,WAAW,EAAE,WAAW,CAAC,IAAI;oBAC7B,WAAW,EAAE,MAAM,CAAC,YAAY;iBACjC,CAAC,EACF,CAAC;oBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,YAAY,8BAA8B,CAAC,CAAC;oBACnF,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBACxC,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBAC3D,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;gBAChC,MAAM,KAAK,GAAoB;oBAC7B,SAAS;oBACT,MAAM;oBACN,SAAS;oBACT,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;oBACxB,MAAM,EAAE,KAAK;iBACd,CAAC;gBACF,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAClC,MAAM,gBAAgB,GAAG,SAAS,CAAC;gBAEnC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACnB,KAAK,eAAe,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;gBACzD,CAAC,CAAC,CAAC;gBAEH,MAAM,kBAAkB,CACtB;oBACE,SAAS;oBACT,KAAK,EAAE,UAAU,EAAE,KAAK,IAAI,aAAa;oBACzC,MAAM,EAAE,UAAU,EAAE,MAAM,IAAI,MAAM,CAAC,cAAc;oBACnD,MAAM,EAAE,UAAU,EAAE,MAAM;oBAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,EACD,KAAK,IAAI,EAAE;oBACT,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAClC,CAAC,CACF,CAAC;gBACF,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,6BAA6B,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,eAAe,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;gBACpD,CAAC;gBACD,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,kCAAkC,CAAC,CAAC;gBAC/E,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACvC,IAAI,SAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;gBAC9C,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;oBAC1C,OAAO;gBACT,CAAC;gBAED,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;oBACzD,OAAO;gBACT,CAAC;gBAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACzC,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB;oBAC/C,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC;gBACxC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAElC,MAAM,kBAAkB,CACtB;oBACE,SAAS;oBACT,KAAK,EAAE,UAAU,EAAE,KAAK,IAAI,aAAa;oBACzC,MAAM,EAAE,UAAU,EAAE,MAAM,IAAI,MAAM,CAAC,cAAc;oBACnD,MAAM,EAAE,UAAU,EAAE,MAAM;oBAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,EACD,KAAK,IAAI,EAAE;oBACT,MAAM,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChE,CAAC,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,yBAAyB,CAAC,CAAC;gBACtE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,sCAAsC;IAEtC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,iBAAiB,GAAG,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,SAAS,CAAC;QACpE,IAAI,OAAO,GAAG,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,IAAI,cAAc,GAAG,KAAK,CAAC;QAE3B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAEzC,IAAI,MAAM,CAAC,oBAAoB,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;gBACtD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EACL,iGAAiG;qBACpG;oBACD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,sBAAsB,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;gBACxF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EACL,6FAA6F;qBAChG;oBACD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,iBAAiB,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,oBAAoB,iBAAiB,GAAG;qBAClD;oBACD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,CAAC,KAAK;4BACZ,OAAO,EAAE,wEAAwE;yBAClF;wBACD,EAAE,EAAE,IAAI;qBACT,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,IACE,yBAAyB,CAAC;oBACxB,kBAAkB,EAAE,QAAQ,CAAC,IAAI;oBACjC,eAAe,EAAE,eAAe,CAAC,IAAI;oBACrC,WAAW,EAAE,WAAW,CAAC,IAAI;oBAC7B,WAAW,EAAE,MAAM,CAAC,YAAY;iBACjC,CAAC,EACF,CAAC;oBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,CAAC,KAAK;4BACZ,OAAO,EAAE,WAAW,MAAM,CAAC,YAAY,8BAA8B;yBACtE;wBACD,EAAE,EAAE,IAAI;qBACT,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;gBAC1C,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC1C,CAAC;YAED,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,aAAa,GAAG,OAAO,CAAC;YAE9B,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,4BAA4B,MAAM,CAAC,uBAAuB,2BAA2B;qBAC/F;oBACD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,qBAAqB,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;gBACpD,MAAM,WAAW,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;gBACpD,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;oBAC/C,MAAM,aAAa,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClE,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,KAAK,CACb;gBACE,GAAG,EAAE,KAAK;gBACV,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,iBAAiB;aAC7B,EACD,yBAAyB,CAC1B,CAAC;YAEF,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,6BAA6B,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB;oBACD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,uBAAuB;qBACjC;oBACD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,cAAc,IAAI,OAAO,EAAE,CAAC;gBAC9B,MAAM,oCAAoC,CAAC,OAAO,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2CAA2C;IAE3C,KAAK,UAAU,aAAa,CAAC,WAAyB;QACpD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,KAAK,GAAiB;YAC1B,MAAM;YACN,SAAS,EAAE,SAAqD;YAChE,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE;YACxB,cAAc,EAAE,CAAC;YACjB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE;gBACT,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;gBACvB,KAAK,EAAE,CAAC;aACT;SACF,CAAC;QAEF,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAE3B,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;YACtC,kBAAkB,EAAE,MAAM,CAAC,cAAc;YACzC,oBAAoB,EAAE,CAAC,SAAS,EAAE,EAAE;gBAClC,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;gBAC5B,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAChC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC/B,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC9B,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,yBAAyB,CAAC,CAAC;YAC3D,CAAC;YACD,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;gBACnC,MAAM,YAAY,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YACnD,CAAC;SACF,CAAC,CAAC;QAEH,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAE5B,SAAS,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE;YAC5B,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,qBAAqB,CAAC,CAAC;QACrF,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE9B,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACpB,MAAM,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;gBACvD,MAAM,KAAK,CAAC;YACd,CAAC;YAED,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAC1B,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,sDAAsD,CAAC,CAAC;YAC9F,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,SAAS,CAAC,IAAI,CACZ,EAAE,GAAG,EAAE,UAAU,EAAE,EACnB,uDAAuD,CACxD,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,qBAAqB,CAAC,OAAqB;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,MAAM,CAAC;QAEzB,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,IAAI,SAAS,EAAE,CAAC;YACrD,OAAO,CAAC,SAAS,CAAC,WAAW,GAAG,GAAG,CAAC;YACpC,OAAO,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,MAAM,CAAC,uBAAuB,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,kBAAkB,CAAC,OAAqB,EAAE,IAAkB;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;QACpB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,CAAC;IAED,SAAS,gBAAgB,CAAC,OAAqB;QAC7C,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB;YAC/C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC;QAExC,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,aAAa;YAC3C,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,IAAI,MAAM,CAAC,cAAc;YACrD,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM;YAC5B,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;SACjD,CAAC;IACJ,CAAC;IAED,SAAS,gBAAgB,CAAC,GAAoB;QAC5C,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC;QACzD,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC;QAE1D,MAAM,WAAW,GAAG,aAAa,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YACpE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;YAC/B,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,KAAK,GAAG,YAAY,IAAI,WAAW,CAAC;QAE1C,IAAI,MAA0B,CAAC;QAE/B,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAClC,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC;YAC7D,IAAI,aAAa,EAAE,CAAC;gBAClB,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;oBAC5C,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;wBAC7B,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;oBAC1C,CAAC;oBACD,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;gBACnC,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,KAAK,CAAC,qCAAqC,aAAa,GAAG,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,KAAK;YACL,MAAM;YACN,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;YAClF,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,qBAAqB,CAClC,OAAqB,EACrB,IAAyB;QAEzB,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC3C,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;YAC5B,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAElC,IAAI,CAAC;gBACH,MAAM,IAAI,EAAE,CAAC;YACf,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;gBAC5B,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,MAAM,CAAC;IACf,CAAC;IAED,KAAK,UAAU,sBAAsB;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,MAAM,CAAC,uBAAuB,GAAG,IAAI,CAAC;QAExD,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,cAAc,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjD,SAAS;YACX,CAAC;YAED,IAAI,GAAG,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,EAAE,CAAC;gBAC3C,SAAS;YACX,CAAC;YAED,MAAM,YAAY,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAChD,CAAC;QAED,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,SAAS;YACX,CAAC;YAED,IAAI,GAAG,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,EAAE,CAAC;gBAC3C,SAAS;YACX,CAAC;YAED,MAAM,eAAe,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,KAAK,UAAU,oCAAoC,CAAC,OAAqB;QACvE,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACzE,OAAO;QACT,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QACtB,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,iDAAiD,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,kDAAkD,CAAC,CAAC;QACrF,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,UAAU,YAAY,CACzB,SAAiB,EACjB,MAAuD;QAEvD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QACtB,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE3B,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,mCAAmC,CAAC,CAAC;QACzF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,oCAAoC,CAAC,CAAC;QAC1F,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,UAAU,eAAe,CAC5B,SAAiB,EACjB,MAAsE;QAEtE,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QACtB,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,uCAAuC,CAAC,CAAC;QAC7F,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,wCAAwC,CAAC,CAAC;QAC9F,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,UAAU,QAAQ,CACrB,UAAsB,EACtB,gBAAgD;QAEhD,SAAS,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAE5C,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAEhC,MAAM,YAAY,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAC1D,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CACpC,CAAC;QACF,MAAM,eAAe,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAChE,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,CACvC,CAAC;QACF,MAAM,gBAAgB,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5D,oCAAoC,CAAC,OAAO,CAAC,CAC9C,CAAC;QACF,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,eAAe,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC;QAErF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACzB,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBAED,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,GAAG;QACH,QAAQ;QACR,eAAe;QACf,WAAW;QACX,YAAY;QACZ,eAAe;QACf,sBAAsB;QACtB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAc;IACnD,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,kCAAkC,CAAC,CAAC;AAChG,CAAC;AAMD,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,CACL,KAAK,YAAY,KAAK;QACtB,MAAM,IAAI,KAAK;QACf,CAAE,KAA2B,CAAC,IAAI,KAAK,qBAAqB;YACzD,KAA2B,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAQ;IACzB,OAAO,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;AAC/D,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/http.js

@@ -0,0 +1,65 @@
+#!/usr/bin/env node
+import { createServer } from "node:http";
+import { env } from "./config/env.js";
+import { GitLabClient } from "./lib/gitlab-client.js";
+import { logger } from "./lib/logger.js";
+import { configureNetworkRuntime } from "./lib/network.js";
+import { OutputFormatter } from "./lib/output.js";
+import { ToolPolicyEngine } from "./lib/policy.js";
+import { GitLabRequestRuntime } from "./lib/request-runtime.js";
+import { setupMcpHttpApp } from "./http-app.js";
+/* ------------------------------------------------------------------ */
+/*  Module entry point                                                 */
+/* ------------------------------------------------------------------ */
+const requestRuntime = new GitLabRequestRuntime(env, logger);
+configureNetworkRuntime(env, logger);
+const context = {
+    env,
+    logger,
+    gitlab: new GitLabClient(env.GITLAB_API_URL, env.GITLAB_PERSONAL_ACCESS_TOKEN, {
+        apiUrls: env.GITLAB_API_URLS,
+        timeoutMs: env.GITLAB_HTTP_TIMEOUT_MS,
+        beforeRequest: (requestContext) => requestRuntime.beforeRequest(requestContext)
+    }),
+    policy: new ToolPolicyEngine({
+        readOnlyMode: env.GITLAB_READ_ONLY_MODE,
+        allowedTools: env.GITLAB_ALLOWED_TOOLS,
+        deniedToolsRegex: env.GITLAB_DENIED_TOOLS_REGEX
+            ? new RegExp(env.GITLAB_DENIED_TOOLS_REGEX)
+            : undefined,
+        enabledFeatures: {
+            wiki: env.USE_GITLAB_WIKI,
+            milestone: env.USE_MILESTONE,
+            pipeline: env.USE_PIPELINE,
+            release: env.USE_RELEASE
+        }
+    }),
+    formatter: new OutputFormatter({
+        responseMode: env.GITLAB_RESPONSE_MODE,
+        maxBytes: env.GITLAB_MAX_RESPONSE_BYTES
+    })
+};
+const { app, shutdown, garbageCollectSessions } = setupMcpHttpApp({ context, env, logger });
+const httpServer = createServer(app);
+httpServer.listen(env.HTTP_PORT, env.HTTP_HOST, () => {
+    logger.info({
+        host: env.HTTP_HOST,
+        port: env.HTTP_PORT,
+        transport: env.SSE ? "streamable-http+sse" : "streamable-http",
+        jsonOnly: env.HTTP_JSON_ONLY,
+        maxSessions: env.MAX_SESSIONS,
+        sessionTimeoutSeconds: env.SESSION_TIMEOUT_SECONDS,
+        remoteAuthEnabled: env.REMOTE_AUTHORIZATION
+    }, "MCP HTTP server started");
+});
+const gcInterval = setInterval(() => {
+    void garbageCollectSessions();
+}, 30_000);
+gcInterval.unref();
+process.once("SIGINT", () => {
+    void shutdown(httpServer, gcInterval);
+});
+process.once("SIGTERM", () => {
+    void shutdown(httpServer, gcInterval);
+});
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,MAAM,cAAc,GAAG,IAAI,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7D,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAErC,MAAM,OAAO,GAAe;IAC1B,GAAG;IACH,MAAM;IACN,MAAM,EAAE,IAAI,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,4BAA4B,EAAE;QAC7E,OAAO,EAAE,GAAG,CAAC,eAAe;QAC5B,SAAS,EAAE,GAAG,CAAC,sBAAsB;QACrC,aAAa,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,aAAa,CAAC,cAAc,CAAC;KAChF,CAAC;IACF,MAAM,EAAE,IAAI,gBAAgB,CAAC;QAC3B,YAAY,EAAE,GAAG,CAAC,qBAAqB;QACvC,YAAY,EAAE,GAAG,CAAC,oBAAoB;QACtC,gBAAgB,EAAE,GAAG,CAAC,yBAAyB;YAC7C,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC;YAC3C,CAAC,CAAC,SAAS;QACb,eAAe,EAAE;YACf,IAAI,EAAE,GAAG,CAAC,eAAe;YACzB,SAAS,EAAE,GAAG,CAAC,aAAa;YAC5B,QAAQ,EAAE,GAAG,CAAC,YAAY;YAC1B,OAAO,EAAE,GAAG,CAAC,WAAW;SACzB;KACF,CAAC;IACF,SAAS,EAAE,IAAI,eAAe,CAAC;QAC7B,YAAY,EAAE,GAAG,CAAC,oBAAoB;QACtC,QAAQ,EAAE,GAAG,CAAC,yBAAyB;KACxC,CAAC;CACH,CAAC;AAEF,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,sBAAsB,EAAE,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;AAE5F,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;AAErC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE;IACnD,MAAM,CAAC,IAAI,CACT;QACE,IAAI,EAAE,GAAG,CAAC,SAAS;QACnB,IAAI,EAAE,GAAG,CAAC,SAAS;QACnB,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,iBAAiB;QAC9D,QAAQ,EAAE,GAAG,CAAC,cAAc;QAC5B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,qBAAqB,EAAE,GAAG,CAAC,uBAAuB;QAClD,iBAAiB,EAAE,GAAG,CAAC,oBAAoB;KAC5C,EACD,yBAAyB,CAC1B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;IAClC,KAAK,sBAAsB,EAAE,CAAC;AAChC,CAAC,EAAE,MAAM,CAAC,CAAC;AAEX,UAAU,CAAC,KAAK,EAAE,CAAC;AAEnB,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;IAC1B,KAAK,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;IAC3B,KAAK,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};