mcp-auth-server 0.0.0-stage → 0.1.0

package/lib/mcp.auth.koa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.auth.koa.js","sourceRoot":"","sources":["../src/mcp.auth.koa.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;AAEb,mFAA0D;AAElD,wBAFD,wBAAa,CAEC;AACrB,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,kBAAe,UAAU,CAAC"}

package/lib/mcp.auth.memory.d.ts

@@ -0,0 +1,4 @@
+import MemoryStorage from './storage/memory.storage';
+export { MemoryStorage };
+declare const McpAuthMemory: {};
+export default McpAuthMemory;

package/lib/mcp.auth.memory.js

@@ -0,0 +1,11 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemoryStorage = void 0;
+const memory_storage_1 = __importDefault(require("./storage/memory.storage"));
+exports.MemoryStorage = memory_storage_1.default;
+const McpAuthMemory = {};
+exports.default = McpAuthMemory;
+//# sourceMappingURL=mcp.auth.memory.js.map

package/lib/mcp.auth.memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.auth.memory.js","sourceRoot":"","sources":["../src/mcp.auth.memory.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;AAEb,8EAAqD;AAE7C,wBAFD,wBAAa,CAEC;AACrB,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,kBAAe,aAAa,CAAC"}

package/lib/mcp.auth.mongodb.d.ts

@@ -0,0 +1,6 @@
+import MongoStorage from './storage/mongodb.storage';
+import type MongoStorageOptionsType from './types/mongo.storage.options.type';
+export { MongoStorage };
+export type { MongoStorageOptionsType };
+declare const McpAuthMongodb: {};
+export default McpAuthMongodb;

package/lib/mcp.auth.mongodb.js

@@ -0,0 +1,11 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MongoStorage = void 0;
+const mongodb_storage_1 = __importDefault(require("./storage/mongodb.storage"));
+exports.MongoStorage = mongodb_storage_1.default;
+const McpAuthMongodb = {};
+exports.default = McpAuthMongodb;
+//# sourceMappingURL=mcp.auth.mongodb.js.map

package/lib/mcp.auth.mongodb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.auth.mongodb.js","sourceRoot":"","sources":["../src/mcp.auth.mongodb.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;AAEb,gFAAqD;AAI7C,uBAJD,yBAAY,CAIC;AAEpB,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,kBAAe,cAAc,CAAC"}

package/lib/mcp.auth.node.d.ts

@@ -0,0 +1,9 @@
+import createNodeHandler from './adapters/node/create.node.handler';
+import nodeSsrfGuard from './adapters/node/node.ssrf.guard';
+import parseNodeBody from './adapters/node/parse.node.body';
+import readNodeBody from './adapters/node/read.node.body';
+import toNodeHttpRequest from './adapters/node/to.node.http.request';
+import writeNodeResponse from './adapters/node/write.node.response';
+export { createNodeHandler, nodeSsrfGuard, parseNodeBody, readNodeBody, toNodeHttpRequest, writeNodeResponse };
+declare const McpAuthNode: {};
+export default McpAuthNode;

package/lib/mcp.auth.node.js

@@ -0,0 +1,21 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeNodeResponse = exports.toNodeHttpRequest = exports.readNodeBody = exports.parseNodeBody = exports.nodeSsrfGuard = exports.createNodeHandler = void 0;
+const create_node_handler_1 = __importDefault(require("./adapters/node/create.node.handler"));
+exports.createNodeHandler = create_node_handler_1.default;
+const node_ssrf_guard_1 = __importDefault(require("./adapters/node/node.ssrf.guard"));
+exports.nodeSsrfGuard = node_ssrf_guard_1.default;
+const parse_node_body_1 = __importDefault(require("./adapters/node/parse.node.body"));
+exports.parseNodeBody = parse_node_body_1.default;
+const read_node_body_1 = __importDefault(require("./adapters/node/read.node.body"));
+exports.readNodeBody = read_node_body_1.default;
+const to_node_http_request_1 = __importDefault(require("./adapters/node/to.node.http.request"));
+exports.toNodeHttpRequest = to_node_http_request_1.default;
+const write_node_response_1 = __importDefault(require("./adapters/node/write.node.response"));
+exports.writeNodeResponse = write_node_response_1.default;
+const McpAuthNode = {};
+exports.default = McpAuthNode;
+//# sourceMappingURL=mcp.auth.node.js.map

package/lib/mcp.auth.node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.auth.node.js","sourceRoot":"","sources":["../src/mcp.auth.node.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;AAEb,8FAAoE;AAO5D,4BAPD,6BAAiB,CAOC;AANzB,sFAA4D;AAMjC,wBANpB,yBAAa,CAMoB;AALxC,sFAA4D;AAKlB,wBALnC,yBAAa,CAKmC;AAJvD,oFAA0D;AAID,uBAJlD,wBAAY,CAIkD;AAHrE,gGAAqE;AAGE,4BAHhE,8BAAiB,CAGgE;AAFxF,8FAAoE;AAEsB,4BAFnF,6BAAiB,CAEmF;AAC3G,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,kBAAe,WAAW,CAAC"}

package/lib/mcp.auth.postgres.d.ts

@@ -0,0 +1,11 @@
+import fromPg from './functions/sql/from.pg';
+import fromPostgresJs from './functions/sql/from.postgres.js';
+import SqlStorage from './storage/sql.storage';
+import type SqlExecutorType from './types/sql.executor.type';
+import type SqlStorageOptionsType from './types/sql.storage.options.type';
+declare const postgresStorage: (executor: SqlExecutorType, options?: SqlStorageOptionsType) => SqlStorage;
+declare const postgresSchema: (tablePrefix?: string) => string[];
+export { postgresStorage, postgresSchema, fromPg, fromPostgresJs, SqlStorage };
+export type { SqlExecutorType, SqlStorageOptionsType };
+declare const McpAuthPostgres: {};
+export default McpAuthPostgres;

package/lib/mcp.auth.postgres.js

@@ -0,0 +1,20 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SqlStorage = exports.fromPostgresJs = exports.fromPg = exports.postgresSchema = exports.postgresStorage = void 0;
+const from_pg_1 = __importDefault(require("./functions/sql/from.pg"));
+exports.fromPg = from_pg_1.default;
+const from_postgres_js_1 = __importDefault(require("./functions/sql/from.postgres.js"));
+exports.fromPostgresJs = from_postgres_js_1.default;
+const sql_schema_1 = __importDefault(require("./functions/sql/sql.schema"));
+const sql_storage_1 = __importDefault(require("./storage/sql.storage"));
+exports.SqlStorage = sql_storage_1.default;
+const postgresStorage = (executor, options) => new sql_storage_1.default(executor, 'postgres', options);
+exports.postgresStorage = postgresStorage;
+const postgresSchema = (tablePrefix) => (0, sql_schema_1.default)('postgres', tablePrefix);
+exports.postgresSchema = postgresSchema;
+const McpAuthPostgres = {};
+exports.default = McpAuthPostgres;
+//# sourceMappingURL=mcp.auth.postgres.js.map

package/lib/mcp.auth.postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.auth.postgres.js","sourceRoot":"","sources":["../src/mcp.auth.postgres.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;AAEb,sEAA6C;AAWJ,iBAXlC,iBAAM,CAWkC;AAV/C,wFAA8D;AAUb,yBAV1C,0BAAc,CAU0C;AAT/D,4EAAmD;AACnD,wEAA+C;AAQkB,qBAR1D,qBAAU,CAQ0D;AAH3E,MAAM,eAAe,GAAG,CAAC,QAAyB,EAAE,OAA+B,EAAc,EAAE,CAAC,IAAI,qBAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAG1I,0CAAe;AAFvB,MAAM,cAAc,GAAG,CAAC,WAAoB,EAAY,EAAE,CAAC,IAAA,oBAAS,EAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAErE,wCAAc;AAEvC,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,kBAAe,eAAe,CAAC"}

package/lib/mcp.auth.server.d.ts

@@ -0,0 +1,42 @@
+import createMcpAuth from './functions/server/create.mcp.auth';
+import oidcUpstream from './functions/upstream/oidc.upstream';
+import appSessionUpstream from './functions/upstream/app.session.upstream';
+import LruMetadataCache from './cache/lru.metadata.cache';
+import assertPublicHost from './functions/cimd/assert.public.host';
+import isMetadataClientId from './functions/cimd/is.metadata.client.id';
+import renderDefaultConsent from './functions/consent/render.default.consent';
+import escapeHtml from './functions/consent/escape.html';
+import normalizePem from './functions/keys/normalize.pem';
+import signingKeyFromEnv from './functions/keys/signing.key.from.env';
+import parseBody from './functions/body/parse.body';
+import parseQuery from './functions/body/parse.query';
+import sha256Hex from './functions/crypto/sha256.hex';
+import type AppSessionUpstreamOptionsType from './types/app.session.upstream.options.type';
+import type AuthenticatedUserType from './types/authenticated.user.type';
+import type AuthenticateResultType from './types/authenticate.result.type';
+import type AuthorizationCodeRecordType from './types/authorization.code.record.type';
+import type CimdOptionsType from './types/cimd.options.type';
+import type ClientMetadataType from './types/client.metadata.type';
+import type ClientRecordType from './types/client.record.type';
+import type ConsentModelType from './types/consent.model.type';
+import type ConsentRecordType from './types/consent.record.type';
+import type HttpRequestType from './types/http.request.type';
+import type HttpResponseType from './types/http.response.type';
+import type IMetadataCache from './types/i.metadata.cache';
+import type IStorage from './types/i.storage';
+import type IUpstream from './types/i.upstream';
+import type LoggerType from './types/logger.type';
+import type McpAuthOptionsType from './types/mcp.auth.options.type';
+import type McpAuthType from './types/mcp.auth.type';
+import type OidcUpstreamOptionsType from './types/oidc.upstream.options.type';
+import type PendingAuthorizationType from './types/pending.authorization.type';
+import type PendingFilterType from './types/pending.filter.type';
+import type RefreshTokenRecordType from './types/refresh.token.record.type';
+import type RouteNameType from './types/route.name.type';
+import type RouteType from './types/route.type';
+import type UpstreamBeginType from './types/upstream.begin.type';
+import type UpstreamContextType from './types/upstream.context.type';
+export { createMcpAuth, oidcUpstream, appSessionUpstream, LruMetadataCache, assertPublicHost, isMetadataClientId, renderDefaultConsent, escapeHtml, normalizePem, signingKeyFromEnv, parseBody, parseQuery, sha256Hex };
+export type { AppSessionUpstreamOptionsType, AuthenticatedUserType, AuthenticateResultType, AuthorizationCodeRecordType, CimdOptionsType, ClientMetadataType, ClientRecordType, ConsentModelType, ConsentRecordType, HttpRequestType, HttpResponseType, IMetadataCache, IStorage, IUpstream, LoggerType, McpAuthOptionsType, McpAuthType, OidcUpstreamOptionsType, PendingAuthorizationType, PendingFilterType, RefreshTokenRecordType, RouteNameType, RouteType, UpstreamBeginType, UpstreamContextType };
+declare const McpAuthServer: {};
+export default McpAuthServer;

package/lib/mcp.auth.server.js

@@ -0,0 +1,35 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sha256Hex = exports.parseQuery = exports.parseBody = exports.signingKeyFromEnv = exports.normalizePem = exports.escapeHtml = exports.renderDefaultConsent = exports.isMetadataClientId = exports.assertPublicHost = exports.LruMetadataCache = exports.appSessionUpstream = exports.oidcUpstream = exports.createMcpAuth = void 0;
+const create_mcp_auth_1 = __importDefault(require("./functions/server/create.mcp.auth"));
+exports.createMcpAuth = create_mcp_auth_1.default;
+const oidc_upstream_1 = __importDefault(require("./functions/upstream/oidc.upstream"));
+exports.oidcUpstream = oidc_upstream_1.default;
+const app_session_upstream_1 = __importDefault(require("./functions/upstream/app.session.upstream"));
+exports.appSessionUpstream = app_session_upstream_1.default;
+const lru_metadata_cache_1 = __importDefault(require("./cache/lru.metadata.cache"));
+exports.LruMetadataCache = lru_metadata_cache_1.default;
+const assert_public_host_1 = __importDefault(require("./functions/cimd/assert.public.host"));
+exports.assertPublicHost = assert_public_host_1.default;
+const is_metadata_client_id_1 = __importDefault(require("./functions/cimd/is.metadata.client.id"));
+exports.isMetadataClientId = is_metadata_client_id_1.default;
+const render_default_consent_1 = __importDefault(require("./functions/consent/render.default.consent"));
+exports.renderDefaultConsent = render_default_consent_1.default;
+const escape_html_1 = __importDefault(require("./functions/consent/escape.html"));
+exports.escapeHtml = escape_html_1.default;
+const normalize_pem_1 = __importDefault(require("./functions/keys/normalize.pem"));
+exports.normalizePem = normalize_pem_1.default;
+const signing_key_from_env_1 = __importDefault(require("./functions/keys/signing.key.from.env"));
+exports.signingKeyFromEnv = signing_key_from_env_1.default;
+const parse_body_1 = __importDefault(require("./functions/body/parse.body"));
+exports.parseBody = parse_body_1.default;
+const parse_query_1 = __importDefault(require("./functions/body/parse.query"));
+exports.parseQuery = parse_query_1.default;
+const sha256_hex_1 = __importDefault(require("./functions/crypto/sha256.hex"));
+exports.sha256Hex = sha256_hex_1.default;
+const McpAuthServer = {};
+exports.default = McpAuthServer;
+//# sourceMappingURL=mcp.auth.server.js.map

package/lib/mcp.auth.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.auth.server.js","sourceRoot":"","sources":["../src/mcp.auth.server.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;AAEb,yFAA+D;AAyC9D,wBAzCM,yBAAa,CAyCN;AAxCd,uFAA8D;AAyC7D,uBAzCM,uBAAY,CAyCN;AAxCb,qGAA2E;AAyC1E,6BAzCM,8BAAkB,CAyCN;AAxCnB,oFAA0D;AAyCzD,2BAzCM,4BAAgB,CAyCN;AAxCjB,6FAAmE;AAyClE,2BAzCM,4BAAgB,CAyCN;AAxCjB,mGAAwE;AAyCvE,6BAzCM,+BAAkB,CAyCN;AAxCnB,wGAA8E;AAyC7E,+BAzCM,gCAAoB,CAyCN;AAxCrB,kFAAyD;AAyCxD,qBAzCM,qBAAU,CAyCN;AAxCX,mFAA0D;AAyCzD,uBAzCM,uBAAY,CAyCN;AAxCb,iGAAsE;AAyCrE,4BAzCM,8BAAiB,CAyCN;AAxClB,6EAAoD;AAyCnD,oBAzCM,oBAAS,CAyCN;AAxCV,+EAAsD;AAyCrD,qBAzCM,qBAAU,CAyCN;AAxCX,+EAAsD;AAyCrD,oBAzCM,oBAAS,CAyCN;AA6BV,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,kBAAe,aAAa,CAAC"}

package/lib/mcp.auth.sqlite.d.ts

@@ -0,0 +1,13 @@
+import fromBetterSqlite3 from './functions/sql/from.better.sqlite3';
+import fromBunSqlite from './functions/sql/from.bun.sqlite';
+import fromD1 from './functions/sql/from.d1';
+import fromNodeSqlite from './functions/sql/from.node.sqlite';
+import SqlStorage from './storage/sql.storage';
+import type SqlExecutorType from './types/sql.executor.type';
+import type SqlStorageOptionsType from './types/sql.storage.options.type';
+declare const sqliteStorage: (executor: SqlExecutorType, options?: SqlStorageOptionsType) => SqlStorage;
+declare const sqliteSchema: (tablePrefix?: string) => string[];
+export { sqliteStorage, sqliteSchema, fromBetterSqlite3, fromNodeSqlite, fromBunSqlite, fromD1, SqlStorage };
+export type { SqlExecutorType, SqlStorageOptionsType };
+declare const McpAuthSqlite: {};
+export default McpAuthSqlite;

package/lib/mcp.auth.sqlite.js

@@ -0,0 +1,24 @@
+'use strict';
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SqlStorage = exports.fromD1 = exports.fromBunSqlite = exports.fromNodeSqlite = exports.fromBetterSqlite3 = exports.sqliteSchema = exports.sqliteStorage = void 0;
+const from_better_sqlite3_1 = __importDefault(require("./functions/sql/from.better.sqlite3"));
+exports.fromBetterSqlite3 = from_better_sqlite3_1.default;
+const from_bun_sqlite_1 = __importDefault(require("./functions/sql/from.bun.sqlite"));
+exports.fromBunSqlite = from_bun_sqlite_1.default;
+const from_d1_1 = __importDefault(require("./functions/sql/from.d1"));
+exports.fromD1 = from_d1_1.default;
+const from_node_sqlite_1 = __importDefault(require("./functions/sql/from.node.sqlite"));
+exports.fromNodeSqlite = from_node_sqlite_1.default;
+const sql_schema_1 = __importDefault(require("./functions/sql/sql.schema"));
+const sql_storage_1 = __importDefault(require("./storage/sql.storage"));
+exports.SqlStorage = sql_storage_1.default;
+const sqliteStorage = (executor, options) => new sql_storage_1.default(executor, 'sqlite', options);
+exports.sqliteStorage = sqliteStorage;
+const sqliteSchema = (tablePrefix) => (0, sql_schema_1.default)('sqlite', tablePrefix);
+exports.sqliteSchema = sqliteSchema;
+const McpAuthSqlite = {};
+exports.default = McpAuthSqlite;
+//# sourceMappingURL=mcp.auth.sqlite.js.map

package/lib/mcp.auth.sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.auth.sqlite.js","sourceRoot":"","sources":["../src/mcp.auth.sqlite.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;AAEb,8FAAoE;AAa/B,4BAb9B,6BAAiB,CAa8B;AAZtD,sFAA4D;AAYY,wBAZjE,yBAAa,CAYiE;AAXrF,sEAA6C;AAW0C,iBAXhF,iBAAM,CAWgF;AAV7F,wFAA8D;AAUN,yBAVjD,0BAAc,CAUiD;AATtE,4EAAmD;AACnD,wEAA+C;AAQgD,qBARxF,qBAAU,CAQwF;AAHzG,MAAM,aAAa,GAAG,CAAC,QAAyB,EAAE,OAA+B,EAAc,EAAE,CAAC,IAAI,qBAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAGtI,sCAAa;AAFrB,MAAM,YAAY,GAAG,CAAC,WAAoB,EAAY,EAAE,CAAC,IAAA,oBAAS,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAEnE,oCAAY;AAEnC,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,kBAAe,aAAa,CAAC"}

package/lib/storage/memory.storage.d.ts

@@ -0,0 +1,30 @@
+import type AuthorizationCodeRecordType from '../types/authorization.code.record.type';
+import type ClientRecordType from '../types/client.record.type';
+import type ConsentRecordType from '../types/consent.record.type';
+import type IStorage from '../types/i.storage';
+import type PendingAuthorizationType from '../types/pending.authorization.type';
+import type PendingFilterType from '../types/pending.filter.type';
+import type RefreshTokenRecordType from '../types/refresh.token.record.type';
+export default class MemoryStorage implements IStorage {
+    private clients;
+    private pending;
+    private codes;
+    private refreshTokens;
+    private consents;
+    getClient(clientId: string): Promise<ClientRecordType | null>;
+    saveClient(client: ClientRecordType): Promise<void>;
+    savePendingAuthorization(pending: PendingAuthorizationType): Promise<void>;
+    getPendingAuthorization(stateId: string, now: Date): Promise<PendingAuthorizationType | null>;
+    attachUserToPendingAuthorization(stateId: string, userId: string, now: Date, displayName?: string): Promise<PendingAuthorizationType | null>;
+    takePendingAuthorization(stateId: string, filter: PendingFilterType): Promise<PendingAuthorizationType | null>;
+    deletePendingAuthorization(stateId: string): Promise<void>;
+    saveAuthorizationCode(code: AuthorizationCodeRecordType): Promise<void>;
+    claimAuthorizationCode(codeHash: string, now: Date): Promise<AuthorizationCodeRecordType | null>;
+    saveRefreshToken(token: RefreshTokenRecordType): Promise<void>;
+    findRefreshToken(tokenHash: string): Promise<RefreshTokenRecordType | null>;
+    claimRefreshToken(tokenHash: string, now: Date): Promise<RefreshTokenRecordType | null>;
+    revokeRefreshTokenFamily(familyId: string, now: Date): Promise<void>;
+    hasConsent(clientId: string, userId: string): Promise<boolean>;
+    upsertConsent(consent: ConsentRecordType): Promise<void>;
+    deleteExpired(now: Date): Promise<void>;
+}

package/lib/storage/memory.storage.js

@@ -0,0 +1,91 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+class MemoryStorage {
+    clients = new Map();
+    pending = new Map();
+    codes = new Map();
+    refreshTokens = new Map();
+    consents = new Set();
+    async getClient(clientId) {
+        const client = this.clients.get(clientId);
+        return client ? { ...client } : null;
+    }
+    async saveClient(client) {
+        this.clients.set(client.clientId, { ...client });
+    }
+    async savePendingAuthorization(pending) {
+        this.pending.set(pending.stateId, { ...pending });
+    }
+    async getPendingAuthorization(stateId, now) {
+        const found = this.pending.get(stateId);
+        return found && found.expiresAt > now ? { ...found } : null;
+    }
+    async attachUserToPendingAuthorization(stateId, userId, now, displayName) {
+        const found = this.pending.get(stateId);
+        if (!found || found.expiresAt <= now || found.userId)
+            return null;
+        found.userId = userId;
+        found.userDisplayName = displayName;
+        return { ...found };
+    }
+    async takePendingAuthorization(stateId, filter) {
+        const found = this.pending.get(stateId);
+        if (!found || found.expiresAt <= filter.now)
+            return null;
+        if (undefined !== filter.hasUser && filter.hasUser !== !!found.userId)
+            return null;
+        this.pending.delete(stateId);
+        return { ...found };
+    }
+    async deletePendingAuthorization(stateId) {
+        this.pending.delete(stateId);
+    }
+    async saveAuthorizationCode(code) {
+        this.codes.set(code.codeHash, { ...code });
+    }
+    async claimAuthorizationCode(codeHash, now) {
+        const found = this.codes.get(codeHash);
+        if (!found || found.usedAt || found.expiresAt <= now)
+            return null;
+        found.usedAt = now;
+        return { ...found };
+    }
+    async saveRefreshToken(token) {
+        this.refreshTokens.set(token.tokenHash, { ...token });
+    }
+    async findRefreshToken(tokenHash) {
+        const found = this.refreshTokens.get(tokenHash);
+        return found ? { ...found } : null;
+    }
+    async claimRefreshToken(tokenHash, now) {
+        const found = this.refreshTokens.get(tokenHash);
+        if (!found || found.usedAt || found.revokedAt || found.expiresAt <= now)
+            return null;
+        found.usedAt = now;
+        return { ...found };
+    }
+    async revokeRefreshTokenFamily(familyId, now) {
+        for (const token of this.refreshTokens.values())
+            if (token.familyId === familyId && !token.revokedAt)
+                token.revokedAt = now;
+    }
+    async hasConsent(clientId, userId) {
+        return this.consents.has(JSON.stringify([clientId, userId]));
+    }
+    async upsertConsent(consent) {
+        this.consents.add(JSON.stringify([consent.clientId, consent.userId]));
+    }
+    async deleteExpired(now) {
+        for (const [key, value] of this.pending)
+            if (value.expiresAt <= now)
+                this.pending.delete(key);
+        for (const [key, value] of this.codes)
+            if (value.expiresAt <= now)
+                this.codes.delete(key);
+        for (const [key, value] of this.refreshTokens)
+            if (value.expiresAt <= now)
+                this.refreshTokens.delete(key);
+    }
+}
+exports.default = MemoryStorage;
+//# sourceMappingURL=memory.storage.js.map

package/lib/storage/memory.storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.storage.js","sourceRoot":"","sources":["../../src/storage/memory.storage.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAUb,MAAqB,aAAa;IACzB,OAAO,GAAkC,IAAI,GAAG,EAAE,CAAC;IACnD,OAAO,GAA0C,IAAI,GAAG,EAAE,CAAC;IAC3D,KAAK,GAA6C,IAAI,GAAG,EAAE,CAAC;IAC5D,aAAa,GAAwC,IAAI,GAAG,EAAE,CAAC;IAC/D,QAAQ,GAAgB,IAAI,GAAG,EAAE,CAAC;IAE1C,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC,CAAC,CAAC,EAAC,GAAG,MAAM,EAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAwB;QACxC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAC,GAAG,MAAM,EAAC,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,OAAiC;QAC/D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAC,GAAG,OAAO,EAAC,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,OAAe,EAAE,GAAS;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,KAAK,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,EAAC,GAAG,KAAK,EAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,gCAAgC,CAAC,OAAe,EAAE,MAAc,EAAE,GAAS,EAAE,WAAoB;QACtG,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAClE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;QACtB,KAAK,CAAC,eAAe,GAAG,WAAW,CAAC;QACpC,OAAO,EAAC,GAAG,KAAK,EAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,OAAe,EAAE,MAAyB;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACzD,IAAI,SAAS,KAAK,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACnF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,EAAC,GAAG,KAAK,EAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,OAAe;QAC/C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,IAAiC;QAC5D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAC,GAAG,IAAI,EAAC,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,QAAgB,EAAE,GAAS;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC;QAClE,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;QACnB,OAAO,EAAC,GAAG,KAAK,EAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAA6B;QACnD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,EAAC,GAAG,KAAK,EAAC,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAC,GAAG,KAAK,EAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,GAAS;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC;QACrF,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;QACnB,OAAO,EAAC,GAAG,KAAK,EAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,QAAgB,EAAE,GAAS;QACzD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;YAAE,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,SAAS;gBAAE,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC;IAC7H,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,MAAc;QAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAS;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9F,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1F,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa;YAAE,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3G,CAAC;CACD;AAzFD,gCAyFC"}

package/lib/storage/mongodb.storage.d.ts

@@ -0,0 +1,41 @@
+import type { Db } from 'mongodb';
+import type AuthorizationCodeRecordType from '../types/authorization.code.record.type';
+import type ClientRecordType from '../types/client.record.type';
+import type ConsentRecordType from '../types/consent.record.type';
+import type IStorage from '../types/i.storage';
+import type MongoStorageOptionsType from '../types/mongo.storage.options.type';
+import type PendingAuthorizationType from '../types/pending.authorization.type';
+import type PendingFilterType from '../types/pending.filter.type';
+import type RefreshTokenRecordType from '../types/refresh.token.record.type';
+export default class MongoStorage implements IStorage {
+    private readonly clients;
+    private readonly pending;
+    private readonly codes;
+    private readonly refreshTokens;
+    private readonly consents;
+    private readonly userIdField;
+    private readonly userIdToDb;
+    private readonly userIdFromDb;
+    constructor(db: Db, options?: MongoStorageOptionsType);
+    ensureIndexes(): Promise<void>;
+    private toClient;
+    private toPending;
+    private toCode;
+    private toRefreshToken;
+    getClient(clientId: string): Promise<ClientRecordType | null>;
+    saveClient(client: ClientRecordType): Promise<void>;
+    savePendingAuthorization(pending: PendingAuthorizationType): Promise<void>;
+    getPendingAuthorization(stateId: string, now: Date): Promise<PendingAuthorizationType | null>;
+    attachUserToPendingAuthorization(stateId: string, userId: string, now: Date, displayName?: string): Promise<PendingAuthorizationType | null>;
+    takePendingAuthorization(stateId: string, filter: PendingFilterType): Promise<PendingAuthorizationType | null>;
+    deletePendingAuthorization(stateId: string): Promise<void>;
+    saveAuthorizationCode(code: AuthorizationCodeRecordType): Promise<void>;
+    claimAuthorizationCode(codeHash: string, now: Date): Promise<AuthorizationCodeRecordType | null>;
+    saveRefreshToken(token: RefreshTokenRecordType): Promise<void>;
+    findRefreshToken(tokenHash: string): Promise<RefreshTokenRecordType | null>;
+    claimRefreshToken(tokenHash: string, now: Date): Promise<RefreshTokenRecordType | null>;
+    revokeRefreshTokenFamily(familyId: string, now: Date): Promise<void>;
+    hasConsent(clientId: string, userId: string): Promise<boolean>;
+    upsertConsent(consent: ConsentRecordType): Promise<void>;
+    deleteExpired(now: Date): Promise<void>;
+}

package/lib/storage/mongodb.storage.js

@@ -0,0 +1,172 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+class MongoStorage {
+    clients;
+    pending;
+    codes;
+    refreshTokens;
+    consents;
+    userIdField;
+    userIdToDb;
+    userIdFromDb;
+    constructor(db, options = {}) {
+        this.clients = db.collection(options.collections?.clients ?? 'mcp_oauth_clients');
+        this.pending = db.collection(options.collections?.pendingAuthorizations ?? 'mcp_oauth_pending_authorizations');
+        this.codes = db.collection(options.collections?.authorizationCodes ?? 'mcp_oauth_authorization_codes');
+        this.refreshTokens = db.collection(options.collections?.refreshTokens ?? 'mcp_oauth_refresh_tokens');
+        this.consents = db.collection(options.collections?.consents ?? 'mcp_oauth_consents');
+        this.userIdField = options.userIdField ?? 'userId';
+        this.userIdToDb = options.userIdToDb ?? ((userId) => userId);
+        this.userIdFromDb = options.userIdFromDb ?? ((value) => String(value));
+    }
+    async ensureIndexes() {
+        await this.clients.createIndex({ clientId: 1 }, { unique: true });
+        await this.pending.createIndex({ stateId: 1 }, { unique: true });
+        await this.pending.createIndex({ expiresAt: 1 }, { expireAfterSeconds: 0 });
+        await this.codes.createIndex({ codeHash: 1 }, { unique: true });
+        await this.codes.createIndex({ expiresAt: 1 }, { expireAfterSeconds: 0 });
+        await this.refreshTokens.createIndex({ tokenHash: 1 }, { unique: true });
+        await this.refreshTokens.createIndex({ familyId: 1 });
+        await this.refreshTokens.createIndex({ expiresAt: 1 }, { expireAfterSeconds: 0 });
+        await this.consents.createIndex({ clientId: 1, [this.userIdField]: 1 }, { unique: true });
+    }
+    toClient(doc) {
+        return {
+            clientId: doc.clientId,
+            clientName: doc.clientName ?? undefined,
+            redirectUris: doc.redirectUris,
+            applicationType: doc.applicationType ?? undefined,
+            tokenEndpointAuthMethod: 'none',
+            grantTypes: doc.grantTypes,
+            responseTypes: doc.responseTypes,
+            createdAt: doc.createdAt
+        };
+    }
+    toPending(doc) {
+        const userId = doc[this.userIdField];
+        return {
+            stateId: doc.stateId,
+            clientId: doc.clientId,
+            clientName: doc.clientName ?? undefined,
+            redirectUri: doc.redirectUri,
+            codeChallenge: doc.codeChallenge,
+            resource: doc.resource,
+            clientState: doc.clientState ?? undefined,
+            upstreamCodeVerifier: doc.upstreamCodeVerifier ?? undefined,
+            userId: undefined === userId || null === userId ? undefined : this.userIdFromDb(userId),
+            userDisplayName: doc.userDisplayName ?? undefined,
+            expiresAt: doc.expiresAt
+        };
+    }
+    toCode(doc) {
+        return {
+            codeHash: doc.codeHash,
+            clientId: doc.clientId,
+            redirectUri: doc.redirectUri,
+            codeChallenge: doc.codeChallenge,
+            resource: doc.resource,
+            userId: this.userIdFromDb(doc[this.userIdField]),
+            usedAt: doc.usedAt ?? undefined,
+            expiresAt: doc.expiresAt
+        };
+    }
+    toRefreshToken(doc) {
+        return {
+            tokenHash: doc.tokenHash,
+            familyId: doc.familyId,
+            clientId: doc.clientId,
+            userId: this.userIdFromDb(doc[this.userIdField]),
+            resource: doc.resource,
+            usedAt: doc.usedAt ?? undefined,
+            revokedAt: doc.revokedAt ?? undefined,
+            expiresAt: doc.expiresAt
+        };
+    }
+    async getClient(clientId) {
+        const doc = await this.clients.findOne({ clientId });
+        return doc ? this.toClient(doc) : null;
+    }
+    async saveClient(client) {
+        await this.clients.insertOne({
+            clientId: client.clientId,
+            clientName: client.clientName,
+            redirectUris: client.redirectUris,
+            applicationType: client.applicationType,
+            tokenEndpointAuthMethod: client.tokenEndpointAuthMethod,
+            grantTypes: client.grantTypes,
+            responseTypes: client.responseTypes,
+            createdAt: client.createdAt,
+            updatedAt: client.createdAt
+        });
+    }
+    async savePendingAuthorization(pending) {
+        const { userId, ...rest } = pending;
+        await this.pending.insertOne({
+            ...rest,
+            codeChallengeMethod: 'S256',
+            ...(undefined === userId ? {} : { [this.userIdField]: this.userIdToDb(userId) }),
+            createdAt: new Date(),
+            updatedAt: new Date()
+        });
+    }
+    async getPendingAuthorization(stateId, now) {
+        const doc = await this.pending.findOne({ stateId, expiresAt: { $gt: now } });
+        return doc ? this.toPending(doc) : null;
+    }
+    async attachUserToPendingAuthorization(stateId, userId, now, displayName) {
+        const doc = await this.pending.findOneAndUpdate({ stateId, expiresAt: { $gt: now }, [this.userIdField]: { $exists: false } }, { $set: { [this.userIdField]: this.userIdToDb(userId), userDisplayName: displayName, updatedAt: now } }, { returnDocument: 'after' });
+        return doc ? this.toPending(doc) : null;
+    }
+    async takePendingAuthorization(stateId, filter) {
+        const query = { stateId, expiresAt: { $gt: filter.now } };
+        if (undefined !== filter.hasUser)
+            query[this.userIdField] = { $exists: filter.hasUser };
+        const doc = await this.pending.findOneAndDelete(query);
+        return doc ? this.toPending(doc) : null;
+    }
+    async deletePendingAuthorization(stateId) {
+        await this.pending.deleteOne({ stateId });
+    }
+    async saveAuthorizationCode(code) {
+        const { userId, ...rest } = code;
+        await this.codes.insertOne({ ...rest, [this.userIdField]: this.userIdToDb(userId), createdAt: new Date(), updatedAt: new Date() });
+    }
+    async claimAuthorizationCode(codeHash, now) {
+        const doc = await this.codes.findOneAndUpdate({ codeHash, usedAt: { $exists: false }, expiresAt: { $gt: now } }, { $set: { usedAt: now, updatedAt: now } }, { returnDocument: 'after' });
+        return doc ? this.toCode(doc) : null;
+    }
+    async saveRefreshToken(token) {
+        const { userId, ...rest } = token;
+        await this.refreshTokens.insertOne({ ...rest, [this.userIdField]: this.userIdToDb(userId), createdAt: new Date(), updatedAt: new Date() });
+    }
+    async findRefreshToken(tokenHash) {
+        const doc = await this.refreshTokens.findOne({ tokenHash });
+        return doc ? this.toRefreshToken(doc) : null;
+    }
+    async claimRefreshToken(tokenHash, now) {
+        const doc = await this.refreshTokens.findOneAndUpdate({ tokenHash, usedAt: { $exists: false }, revokedAt: { $exists: false }, expiresAt: { $gt: now } }, { $set: { usedAt: now, updatedAt: now } }, { returnDocument: 'after' });
+        return doc ? this.toRefreshToken(doc) : null;
+    }
+    async revokeRefreshTokenFamily(familyId, now) {
+        await this.refreshTokens.updateMany({ familyId, revokedAt: { $exists: false } }, { $set: { revokedAt: now, updatedAt: now } });
+    }
+    async hasConsent(clientId, userId) {
+        return !!(await this.consents.findOne({ clientId, [this.userIdField]: this.userIdToDb(userId) }, { projection: { _id: 1 } }));
+    }
+    async upsertConsent(consent) {
+        const filter = { clientId: consent.clientId, [this.userIdField]: this.userIdToDb(consent.userId) };
+        try {
+            await this.consents.updateOne(filter, { $setOnInsert: { ...filter, createdAt: new Date(), updatedAt: new Date() } }, { upsert: true });
+        }
+        catch (error) {
+            if (11000 !== error.code)
+                throw error;
+        }
+    }
+    async deleteExpired(now) {
+        for (const collection of [this.pending, this.codes, this.refreshTokens])
+            await collection.deleteMany({ expiresAt: { $lte: now } });
+    }
+}
+exports.default = MongoStorage;
+//# sourceMappingURL=mongodb.storage.js.map

package/lib/storage/mongodb.storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongodb.storage.js","sourceRoot":"","sources":["../../src/storage/mongodb.storage.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAab,MAAqB,YAAY;IACf,OAAO,CAAuB;IAC9B,OAAO,CAAuB;IAC9B,KAAK,CAAuB;IAC5B,aAAa,CAAuB;IACpC,QAAQ,CAAuB;IAC/B,WAAW,CAAS;IACpB,UAAU,CAA8B;IACxC,YAAY,CAA6B;IAE1D,YAAY,EAAM,EAAE,UAAmC,EAAE;QACxD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,IAAI,mBAAmB,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,qBAAqB,IAAI,kCAAkC,CAAC,CAAC;QAC/G,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,kBAAkB,IAAI,+BAA+B,CAAC,CAAC;QACvG,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,IAAI,0BAA0B,CAAC,CAAC;QACrG,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,IAAI,oBAAoB,CAAC,CAAC;QACrF,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,MAAc,EAAW,EAAE,CAAC,MAAM,CAAC,CAAC;QAC9E,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,KAAc,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,KAAK,CAAC,aAAa;QAClB,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAC,QAAQ,EAAE,CAAC,EAAC,EAAE,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAC,OAAO,EAAE,CAAC,EAAC,EAAE,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAC,SAAS,EAAE,CAAC,EAAC,EAAE,EAAC,kBAAkB,EAAE,CAAC,EAAC,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAC,QAAQ,EAAE,CAAC,EAAC,EAAE,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAC,SAAS,EAAE,CAAC,EAAC,EAAE,EAAC,kBAAkB,EAAE,CAAC,EAAC,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAC,SAAS,EAAE,CAAC,EAAC,EAAE,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC,CAAC;QACrE,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAC,QAAQ,EAAE,CAAC,EAAC,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAC,SAAS,EAAE,CAAC,EAAC,EAAE,EAAC,kBAAkB,EAAE,CAAC,EAAC,CAAC,CAAC;QAC9E,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAC,EAAE,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC,CAAC;IACvF,CAAC;IAEO,QAAQ,CAAC,GAAa;QAC7B,OAAO;YACN,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;YACvC,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,SAAS;YACjD,uBAAuB,EAAE,MAAM;YAC/B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,SAAS,EAAE,GAAG,CAAC,SAAS;SACxB,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,GAAa;QAC9B,MAAM,MAAM,GAAY,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9C,OAAO;YACN,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;YACvC,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;YACzC,oBAAoB,EAAE,GAAG,CAAC,oBAAoB,IAAI,SAAS;YAC3D,MAAM,EAAE,SAAS,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvF,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,SAAS;YACjD,SAAS,EAAE,GAAG,CAAC,SAAS;SACxB,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,GAAa;QAC3B,OAAO;YACN,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChD,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;YAC/B,SAAS,EAAE,GAAG,CAAC,SAAS;SACxB,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,GAAa;QACnC,OAAO;YACN,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChD,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;YAC/B,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,SAAS,EAAE,GAAG,CAAC,SAAS;SACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,QAAQ,EAAC,CAAC,CAAC;QACnD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAwB;QACxC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACvD,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC3B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,OAAiC;QAC/D,MAAM,EAAC,MAAM,EAAE,GAAG,IAAI,EAAC,GAAG,OAAO,CAAC;QAClC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAC5B,GAAG,IAAI;YACP,mBAAmB,EAAE,MAAM;YAC3B,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAC,CAAC;YAC9E,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE;SACrB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,OAAe,EAAE,GAAS;QACvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,OAAO,EAAE,SAAS,EAAE,EAAC,GAAG,EAAE,GAAG,EAAC,EAAC,CAAC,CAAC;QACzE,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,gCAAgC,CAAC,OAAe,EAAE,MAAc,EAAE,GAAS,EAAE,WAAoB;QACtG,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAC9C,EAAC,OAAO,EAAE,SAAS,EAAE,EAAC,GAAG,EAAE,GAAG,EAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAC,OAAO,EAAE,KAAK,EAAC,EAAC,EACtE,EAAC,IAAI,EAAE,EAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAC,EAAC,EACnG,EAAC,cAAc,EAAE,OAAO,EAAC,CACzB,CAAC;QACF,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,OAAe,EAAE,MAAyB;QACxE,MAAM,KAAK,GAAa,EAAC,OAAO,EAAE,SAAS,EAAE,EAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAC,EAAC,CAAC;QAChE,IAAI,SAAS,KAAK,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAC,CAAC;QACtF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACvD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,OAAe;QAC/C,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAC,OAAO,EAAC,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,IAAiC;QAC5D,MAAM,EAAC,MAAM,EAAE,GAAG,IAAI,EAAC,GAAG,IAAI,CAAC;QAC/B,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAC,CAAC,CAAC;IAClI,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,QAAgB,EAAE,GAAS;QACvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAC5C,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAC,OAAO,EAAE,KAAK,EAAC,EAAE,SAAS,EAAE,EAAC,GAAG,EAAE,GAAG,EAAC,EAAC,EAC3D,EAAC,IAAI,EAAE,EAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAC,EAAC,EACrC,EAAC,cAAc,EAAE,OAAO,EAAC,CACzB,CAAC;QACF,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAA6B;QACnD,MAAM,EAAC,MAAM,EAAE,GAAG,IAAI,EAAC,GAAG,KAAK,CAAC;QAChC,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAC,CAAC,CAAC;IAC1I,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAC,SAAS,EAAC,CAAC,CAAC;QAC1D,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,GAAS;QACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CACpD,EAAC,SAAS,EAAE,MAAM,EAAE,EAAC,OAAO,EAAE,KAAK,EAAC,EAAE,SAAS,EAAE,EAAC,OAAO,EAAE,KAAK,EAAC,EAAE,SAAS,EAAE,EAAC,GAAG,EAAE,GAAG,EAAC,EAAC,EACzF,EAAC,IAAI,EAAE,EAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAC,EAAC,EACrC,EAAC,cAAc,EAAE,OAAO,EAAC,CACzB,CAAC;QACF,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,QAAgB,EAAE,GAAS;QACzD,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAC,QAAQ,EAAE,SAAS,EAAE,EAAC,OAAO,EAAE,KAAK,EAAC,EAAC,EAAE,EAAC,IAAI,EAAE,EAAC,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAC,EAAC,CAAC,CAAC;IACxH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,MAAc;QAChD,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAC,EAAE,EAAC,UAAU,EAAE,EAAC,GAAG,EAAE,CAAC,EAAC,EAAC,CAAC,CAAC,CAAC;IACzH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC7C,MAAM,MAAM,GAAa,EAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAC,CAAC;QAC3G,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAC,YAAY,EAAE,EAAC,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAC,EAAC,EAAE,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC,CAAC;QAClI,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,KAAM,KAAyB,CAAC,IAAI;gBAAE,MAAM,KAAK,CAAC;QAC5D,CAAC;IACF,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAS;QAC5B,KAAK,MAAM,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC;YAAE,MAAM,UAAU,CAAC,UAAU,CAAC,EAAC,SAAS,EAAE,EAAC,IAAI,EAAE,GAAG,EAAC,EAAC,CAAC,CAAC;IAChI,CAAC;CACD;AArMD,+BAqMC"}