mcp4openapi 0.1.0 → 0.2.0

package/dist/src/oauth-provider.js

@@ -0,0 +1,588 @@
+/**
+ * OAuth 2.0 Provider Adapter
+ *
+ * Implements MCP SDK OAuthServerProvider interface to integrate with external
+ * OAuth 2.0 authorization servers (e.g., GitLab, GitHub, etc.)
+ *
+ * Architecture:
+ * - This server acts as an OAuth client to the external provider (Proxy/Gateway)
+ * - Implements "Callback Mode":
+ *   1. Client -> MCP (Authorize) -> MCP redirects to Provider (with MCP callback URL)
+ *   2. Provider -> MCP (Callback) -> MCP exchanges code for tokens
+ *   3. MCP redirects to Client (with Internal Code)
+ *   4. Client -> MCP (Token) -> MCP returns stored tokens
+ */
+import { randomUUID, createHash } from 'node:crypto';
+import { OAUTH_PATHS } from './constants.js';
+import { escapeHtmlSafe } from './validation-utils.js';
+/**
+ * In-memory store for OAuth client registrations
+ */
+export class InMemoryClientsStore {
+    clients = new Map();
+    async getClient(clientId) {
+        return this.clients.get(clientId);
+    }
+    async registerClient(clientMetadata) {
+        this.clients.set(clientMetadata.client_id, clientMetadata);
+        return clientMetadata;
+    }
+}
+/**
+ * OAuth Provider Adapter for external OAuth servers
+ */
+export class ExternalOAuthProvider {
+    config;
+    logger;
+    _clientsStore;
+    // In-memory storage
+    authorizationCodes = new Map();
+    accessTokens = new Map();
+    stateStore = new Map();
+    endpointsInitialized = false;
+    initializationPromise = null;
+    constructor(config, logger) {
+        this.config = config;
+        this.logger = logger;
+        this._clientsStore = new InMemoryClientsStore();
+        // Resolve environment variables in OAuth config
+        this.config = this.resolveEnvVars(config);
+        // Pre-register mcp-proxy-client for VS Code compatibility
+        // VS Code doesn't call /oauth/register endpoint before calling /oauth/authorize
+        // This client has empty redirect_uris, allowing any redirect URI (validated at runtime)
+        const proxyClient = {
+            client_id: 'mcp-proxy-client',
+            client_secret: 'mcp-proxy-secret',
+            redirect_uris: [], // Empty = allow any redirect URI
+            grant_types: ['authorization_code', 'refresh_token'],
+            response_types: ['code'],
+            scope: this.config.scopes ? this.config.scopes.join(' ') : '',
+        };
+        this._clientsStore.registerClient(proxyClient);
+        this.logger.info('Pre-registered mcp-proxy-client for VS Code compatibility');
+    }
+    /**
+     * Lazy initialization of OAuth endpoints (async)
+     * Public method to allow HttpTransport to ensure initialization before client validation
+     */
+    async ensureEndpointsInitialized() {
+        if (this.endpointsInitialized) {
+            return;
+        }
+        // Prevent concurrent initializations
+        if (this.initializationPromise) {
+            return this.initializationPromise;
+        }
+        this.initializationPromise = (async () => {
+            // Register default client BEFORE deriving endpoints
+            // This ensures the client is available immediately, even if endpoint derivation fails
+            // The client_id from config should be registered as soon as possible to avoid
+            // race conditions where /oauth/authorize is called before initialization completes
+            if (this.config.client_id) {
+                // Allow localhost and configured redirect_uri for default client
+                const allowedUris = [];
+                if (this.config.redirect_uri) {
+                    allowedUris.push(this.config.redirect_uri);
+                }
+                // Also allow common localhost patterns for development/testing
+                allowedUris.push('http://localhost:3003/oauth/callback');
+                allowedUris.push('http://127.0.0.1:3003/oauth/callback');
+                const defaultClient = {
+                    client_id: this.config.client_id,
+                    client_secret: this.config.client_secret,
+                    redirect_uris: allowedUris,
+                    grant_types: ['authorization_code', 'refresh_token'],
+                    response_types: ['code'],
+                    scope: this.config.scopes ? this.config.scopes.join(' ') : '',
+                };
+                this._clientsStore.registerClient(defaultClient);
+                this.logger.info('Registered default OAuth client', {
+                    clientId: this.config.client_id,
+                    redirectUris: allowedUris
+                });
+            }
+            // Derive endpoints from issuer if needed
+            this.config = await this.deriveEndpointsFromIssuer(this.config);
+            // Validate that we have required endpoints
+            if (!this.config.authorization_endpoint || !this.config.token_endpoint) {
+                throw new Error('OAuth config must provide either issuer OR both authorization_endpoint and token_endpoint');
+            }
+            this.logger.info('ExternalOAuthProvider initialized', {
+                authEndpoint: this.config.authorization_endpoint,
+                tokenEndpoint: this.config.token_endpoint,
+                hasClientId: !!this.config.client_id,
+                scopes: this.config.scopes || [],
+            });
+            this.endpointsInitialized = true;
+        })();
+        return this.initializationPromise;
+    }
+    get clientsStore() {
+        return this._clientsStore;
+    }
+    get authorizationEndpoint() {
+        // May be undefined before ensureEndpointsInitialized() is called
+        // when OAuth config provides issuer instead of explicit endpoints
+        return this.config.authorization_endpoint;
+    }
+    get redirectUri() {
+        return this.config.redirect_uri;
+    }
+    get scopes() {
+        return this.config.scopes || [];
+    }
+    /**
+     * Fetch OAuth Authorization Server Metadata (RFC 8414)
+     */
+    async fetchOAuthMetadata(issuerUrl) {
+        try {
+            // Use URL constructor to properly handle trailing slashes
+            const metadataUrl = new URL(OAUTH_PATHS.WELL_KNOWN_AUTHORIZATION_SERVER, issuerUrl).toString();
+            const response = await fetch(metadataUrl, {
+                headers: { 'Accept': 'application/json' },
+                signal: AbortSignal.timeout(5000), // 5 second timeout
+            });
+            if (!response.ok) {
+                return null;
+            }
+            const metadata = await response.json();
+            return {
+                authorization_endpoint: metadata.authorization_endpoint,
+                token_endpoint: metadata.token_endpoint,
+            };
+        }
+        catch (error) {
+            this.logger.debug('OAuth metadata fetch failed', { issuerUrl, error });
+            return null;
+        }
+    }
+    /**
+     * Resolve environment variable references in OAuth config
+     */
+    resolveEnvVars(config) {
+        const resolve = (value) => {
+            if (!value)
+                return value;
+            const match = value.match(/^\$\{env:([^}]+)\}$/);
+            if (match) {
+                const envVar = match[1];
+                const envValue = process.env[envVar];
+                if (!envValue) {
+                    throw new Error(`Environment variable ${envVar} not found (referenced in OAuth config)`);
+                }
+                return envValue;
+            }
+            return value;
+        };
+        return {
+            ...config,
+            issuer: resolve(config.issuer),
+            authorization_endpoint: resolve(config.authorization_endpoint) || config.authorization_endpoint,
+            token_endpoint: resolve(config.token_endpoint) || config.token_endpoint,
+            client_id: resolve(config.client_id),
+            client_secret: resolve(config.client_secret),
+            redirect_uri: resolve(config.redirect_uri),
+            registration_endpoint: resolve(config.registration_endpoint),
+            introspection_endpoint: resolve(config.introspection_endpoint),
+            revocation_endpoint: resolve(config.revocation_endpoint),
+        };
+    }
+    /**
+     * Derive OAuth endpoints from issuer if needed
+     */
+    async deriveEndpointsFromIssuer(config) {
+        // If both endpoints are explicitly provided, no need to derive
+        if (config.authorization_endpoint && config.token_endpoint) {
+            return config;
+        }
+        // If issuer is not provided, we can't derive
+        if (!config.issuer) {
+            if (!config.authorization_endpoint || !config.token_endpoint) {
+                throw new Error('OAuth config must provide either issuer OR both authorization_endpoint and token_endpoint');
+            }
+            return config;
+        }
+        const issuer = config.issuer;
+        this.logger.info('Deriving OAuth endpoints from issuer', { issuer });
+        // Try to fetch OAuth metadata
+        const metadata = await this.fetchOAuthMetadata(issuer);
+        if (metadata) {
+            this.logger.info('Successfully discovered OAuth endpoints', {
+                authorization_endpoint: metadata.authorization_endpoint,
+                token_endpoint: metadata.token_endpoint,
+            });
+            return {
+                ...config,
+                authorization_endpoint: config.authorization_endpoint || metadata.authorization_endpoint,
+                token_endpoint: config.token_endpoint || metadata.token_endpoint,
+            };
+        }
+        // Fallback to standard OAuth paths
+        this.logger.info('OAuth metadata fetch failed, using standard OAuth paths', { issuer });
+        return {
+            ...config,
+            authorization_endpoint: config.authorization_endpoint || `${issuer}/oauth/authorize`,
+            token_endpoint: config.token_endpoint || `${issuer}/oauth/token`,
+        };
+    }
+    /**
+     * Begin authorization flow
+     * Stores state and redirects to External Provider with MCP Callback URI
+     */
+    async authorize(client, params, res) {
+        await this.ensureEndpointsInitialized();
+        this.logger.info('Starting OAuth authorization', {
+            clientId: client.client_id,
+            scopes: params.scopes,
+            redirectUri: params.redirectUri,
+            registeredUris: client.redirect_uris,
+        });
+        // Validate redirect URI
+        if (client.redirect_uris && client.redirect_uris.length > 0 && !client.redirect_uris.includes(params.redirectUri)) {
+            this.logger.error('Invalid redirect URI', undefined, {
+                providedUri: params.redirectUri,
+                registeredUris: client.redirect_uris,
+            });
+            throw new Error('Unregistered redirect_uri');
+        }
+        const stateToken = randomUUID();
+        this.stateStore.set(stateToken, {
+            clientRedirectUri: params.redirectUri,
+            codeChallenge: params.codeChallenge,
+            originalState: params.state,
+            clientId: client.client_id,
+            scopes: params.scopes,
+        });
+        const authUrl = new URL(this.config.authorization_endpoint);
+        const clientId = this.config.client_id || client.client_id;
+        if (!this.config.redirect_uri) {
+            throw new Error('MCP4_OAUTH_REDIRECT_URI must be configured');
+        }
+        const callbackUri = this.config.redirect_uri;
+        authUrl.searchParams.set('client_id', clientId);
+        authUrl.searchParams.set('redirect_uri', callbackUri);
+        authUrl.searchParams.set('response_type', 'code');
+        authUrl.searchParams.set('state', stateToken);
+        if (params.scopes && params.scopes.length > 0) {
+            authUrl.searchParams.set('scope', params.scopes.join(' '));
+        }
+        else if (this.config.scopes && this.config.scopes.length > 0) {
+            authUrl.searchParams.set('scope', this.config.scopes.join(' '));
+        }
+        // NOTE: Do NOT forward PKCE parameters to external provider
+        // The MCP server acts as an OAuth proxy with client_secret (confidential client)
+        // PKCE is used only between Cursor <-> MCP, not between MCP <-> External Provider
+        // If we forwarded code_challenge, we would need code_verifier which only Cursor has
+        this.logger.info('Redirecting to external OAuth provider', {
+            authUrl: authUrl.toString(),
+            callbackUri,
+            stateToken,
+            hasClientSecret: !!this.config.client_secret,
+        });
+        res.redirect(authUrl.toString());
+    }
+    /**
+     * Handle callback from External Provider
+     * Exchanges code for tokens and redirects to Client with Internal Code
+     */
+    async handleCallback(req, res) {
+        await this.ensureEndpointsInitialized();
+        const { code, state, error } = req.query;
+        if (error) {
+            this.logger.error('OAuth callback error', undefined, { error, state });
+            // Sanitize error messages to prevent XSS
+            const safeError = escapeHtmlSafe(error);
+            res.status(400);
+            res.json({
+                error: safeError,
+                error_description: `Authorization failed: ${safeError}`
+            });
+            return;
+        }
+        if (!code || typeof code !== 'string') {
+            res.status(400).send('Missing authorization code');
+            return;
+        }
+        if (!state || typeof state !== 'string') {
+            res.status(400).send('Missing state parameter');
+            return;
+        }
+        const storedState = this.stateStore.get(state);
+        if (!storedState) {
+            res.status(400).send('Invalid or expired state');
+            return;
+        }
+        // Clean up state
+        this.stateStore.delete(state);
+        try {
+            // Exchange External Code for Tokens
+            const tokens = await this.exchangeCodeWithProvider(code, undefined, this.config.redirect_uri);
+            // Generate Internal Code
+            const internalCode = randomUUID();
+            // Store Internal Code -> Tokens mapping
+            const client = await this._clientsStore.getClient(storedState.clientId);
+            if (!client)
+                throw new Error('Client not found');
+            this.authorizationCodes.set(internalCode, {
+                client,
+                params: {
+                    redirectUri: storedState.clientRedirectUri,
+                    codeChallenge: storedState.codeChallenge,
+                    scopes: storedState.scopes || [],
+                    state: storedState.originalState
+                },
+                createdAt: Date.now(),
+                tokens
+            });
+            // Redirect to Client
+            const clientUrl = new URL(storedState.clientRedirectUri);
+            clientUrl.searchParams.set('code', internalCode);
+            if (storedState.originalState) {
+                clientUrl.searchParams.set('state', storedState.originalState);
+            }
+            this.logger.info('Redirecting to client with internal code', {
+                clientUrl: clientUrl.toString(),
+                internalCode
+            });
+            res.redirect(clientUrl.toString());
+        }
+        catch (err) {
+            this.logger.error('Callback handling failed', err);
+            res.status(500).send('Internal Server Error during token exchange');
+        }
+    }
+    /**
+     * Get code challenge for authorization code (Internal)
+     */
+    async challengeForAuthorizationCode(client, authorizationCode) {
+        const codeData = this.authorizationCodes.get(authorizationCode);
+        if (!codeData) {
+            throw new Error('Invalid authorization code');
+        }
+        if (codeData.client.client_id !== client.client_id) {
+            throw new Error('Authorization code was not issued to this client');
+        }
+        return codeData.params.codeChallenge;
+    }
+    /**
+     * Exchange authorization code for access token (Internal)
+     */
+    async exchangeAuthorizationCode(client, authorizationCode, codeVerifier, redirectUri, resource) {
+        await this.ensureEndpointsInitialized();
+        this.logger.info('Exchanging internal authorization code', {
+            clientId: client.client_id,
+        });
+        const codeData = this.authorizationCodes.get(authorizationCode);
+        if (!codeData) {
+            throw new Error('Invalid authorization code');
+        }
+        if (codeData.client.client_id !== client.client_id) {
+            throw new Error('Authorization code was not issued to this client');
+        }
+        // Validate expiration (5 minutes)
+        const codeAge = Date.now() - codeData.createdAt;
+        const EXPIRATION_MS = 5 * 60 * 1000; // 5 minutes
+        if (codeAge > EXPIRATION_MS) {
+            this.authorizationCodes.delete(authorizationCode);
+            throw new Error('Authorization code expired');
+        }
+        // Validate PKCE if code challenge was provided
+        if (codeData.params.codeChallenge) {
+            if (!codeVerifier) {
+                throw new Error('code_verifier is required for PKCE');
+            }
+            // Verify code challenge (S256 method)
+            const hash = createHash('sha256').update(codeVerifier).digest('base64url');
+            if (hash !== codeData.params.codeChallenge) {
+                throw new Error('Invalid code_verifier');
+            }
+        }
+        if (!codeData.tokens) {
+            throw new Error('No tokens associated with this code');
+        }
+        // Delete authorization code (single use)
+        this.authorizationCodes.delete(authorizationCode);
+        // Store access token for validation
+        const tokenData = {
+            token: codeData.tokens.access_token,
+            clientId: client.client_id,
+            scopes: codeData.params.scopes || this.config.scopes || [],
+            expiresAt: codeData.tokens.expires_in
+                ? Date.now() + codeData.tokens.expires_in * 1000
+                : undefined,
+            resource,
+        };
+        this.accessTokens.set(codeData.tokens.access_token, tokenData);
+        return codeData.tokens;
+    }
+    /**
+     * Exchange authorization code with external OAuth provider
+     */
+    async exchangeCodeWithProvider(code, codeVerifier, redirectUri) {
+        const tokenUrl = this.config.token_endpoint;
+        const body = new URLSearchParams({
+            grant_type: 'authorization_code',
+            code,
+            redirect_uri: redirectUri,
+        });
+        if (codeVerifier) {
+            body.set('code_verifier', codeVerifier);
+        }
+        if (this.config.client_id) {
+            body.set('client_id', this.config.client_id);
+        }
+        if (this.config.client_secret) {
+            body.set('client_secret', this.config.client_secret);
+        }
+        this.logger.debug('Exchanging code with external provider', { tokenUrl });
+        const response = await fetch(tokenUrl, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                'Accept': 'application/json',
+            },
+            body: body.toString(),
+        });
+        if (!response.ok) {
+            const errorText = await response.text();
+            this.logger.error('Token exchange failed', undefined, {
+                httpStatus: response.status,
+                errorMessage: errorText,
+            });
+            throw new Error(`Token exchange failed: ${response.status} ${errorText}`);
+        }
+        const tokenResponse = await response.json();
+        return tokenResponse;
+    }
+    async exchangeRefreshToken(client, refreshToken, scopes, resource) {
+        await this.ensureEndpointsInitialized();
+        this.logger.info('Exchanging refresh token', { clientId: client.client_id });
+        const tokenUrl = this.config.token_endpoint;
+        const body = new URLSearchParams({
+            grant_type: 'refresh_token',
+            refresh_token: refreshToken,
+        });
+        if (scopes && scopes.length > 0) {
+            body.set('scope', scopes.join(' '));
+        }
+        if (this.config.client_id) {
+            body.set('client_id', this.config.client_id);
+        }
+        if (this.config.client_secret) {
+            body.set('client_secret', this.config.client_secret);
+        }
+        const response = await fetch(tokenUrl, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                'Accept': 'application/json',
+            },
+            body: body.toString(),
+        });
+        if (!response.ok) {
+            const errorText = await response.text();
+            this.logger.error('Refresh token exchange failed', undefined, {
+                httpStatus: response.status,
+                errorMessage: errorText,
+            });
+            throw new Error(`Refresh token exchange failed: ${response.status}`);
+        }
+        const tokenResponse = await response.json();
+        const tokenData = {
+            token: tokenResponse.access_token,
+            clientId: client.client_id,
+            scopes: scopes || this.config.scopes || [],
+            expiresAt: tokenResponse.expires_in
+                ? Date.now() + tokenResponse.expires_in * 1000
+                : undefined,
+            resource,
+        };
+        this.accessTokens.set(tokenResponse.access_token, tokenData);
+        return tokenResponse;
+    }
+    async verifyAccessToken(token) {
+        const tokenData = this.accessTokens.get(token);
+        if (!tokenData) {
+            if (this.config.introspection_endpoint) {
+                return await this.introspectToken(token);
+            }
+            throw new Error('Invalid or expired token');
+        }
+        if (tokenData.expiresAt && tokenData.expiresAt < Date.now()) {
+            this.accessTokens.delete(token);
+            throw new Error('Token expired');
+        }
+        return {
+            token,
+            clientId: tokenData.clientId,
+            scopes: tokenData.scopes,
+            expiresAt: tokenData.expiresAt ? Math.floor(tokenData.expiresAt / 1000) : undefined,
+            resource: tokenData.resource,
+        };
+    }
+    async introspectToken(token) {
+        const introspectionUrl = this.config.introspection_endpoint;
+        if (!introspectionUrl) {
+            throw new Error('Introspection endpoint not configured');
+        }
+        const body = new URLSearchParams({ token });
+        if (this.config.client_id) {
+            body.set('client_id', this.config.client_id);
+        }
+        if (this.config.client_secret) {
+            body.set('client_secret', this.config.client_secret);
+        }
+        const response = await fetch(introspectionUrl, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+                'Accept': 'application/json',
+            },
+            body: body.toString(),
+        });
+        if (!response.ok) {
+            throw new Error(`Token introspection failed: ${response.status}`);
+        }
+        const introspectionResponse = await response.json();
+        if (!introspectionResponse.active) {
+            throw new Error('Token is not active');
+        }
+        return {
+            token,
+            clientId: introspectionResponse.client_id || 'unknown',
+            scopes: introspectionResponse.scope ? introspectionResponse.scope.split(' ') : [],
+            expiresAt: introspectionResponse.exp,
+            resource: introspectionResponse.aud ? new URL(introspectionResponse.aud) : undefined,
+        };
+    }
+    async revokeToken(client, request) {
+        this.logger.info('Revoking token', { clientId: client.client_id });
+        this.accessTokens.delete(request.token);
+        if (this.config.revocation_endpoint) {
+            await this.revokeTokenWithProvider(request.token);
+        }
+    }
+    async revokeTokenWithProvider(token) {
+        const revocationUrl = this.config.revocation_endpoint;
+        if (!revocationUrl)
+            return;
+        const body = new URLSearchParams({ token });
+        if (this.config.client_id) {
+            body.set('client_id', this.config.client_id);
+        }
+        if (this.config.client_secret) {
+            body.set('client_secret', this.config.client_secret);
+        }
+        const response = await fetch(revocationUrl, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: body.toString(),
+        });
+        if (!response.ok) {
+            this.logger.warn('Token revocation failed', { status: response.status });
+        }
+    }
+}
+//# sourceMappingURL=oauth-provider.js.map

package/dist/src/oauth-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-provider.js","sourceRoot":"","sources":["../../src/oauth-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAerD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD;;GAEG;AACH,MAAM,OAAO,oBAAoB;IACvB,OAAO,GAAG,IAAI,GAAG,EAAsC,CAAC;IAEhE,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,cAA0C;QAC7D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAC3D,OAAO,cAAc,CAAC;IACxB,CAAC;CACF;AAkCD;;GAEG;AACH,MAAM,OAAO,qBAAqB;IACxB,MAAM,CAAc;IACpB,MAAM,CAAS;IACf,aAAa,CAAuB;IAE5C,oBAAoB;IACZ,kBAAkB,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC9D,YAAY,GAAG,IAAI,GAAG,EAA2B,CAAC;IAClD,UAAU,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEnD,oBAAoB,GAAY,KAAK,CAAC;IACtC,qBAAqB,GAAyB,IAAI,CAAC;IAE3D,YAAY,MAAmB,EAAE,MAAc;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAEhD,gDAAgD;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAE1C,0DAA0D;QAC1D,gFAAgF;QAChF,wFAAwF;QACxF,MAAM,WAAW,GAA+B;YAC9C,SAAS,EAAE,kBAAkB;YAC7B,aAAa,EAAE,kBAAkB;YACjC,aAAa,EAAE,EAAE,EAAE,iCAAiC;YACpD,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YACpD,cAAc,EAAE,CAAC,MAAM,CAAC;YACxB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;SAC9D,CAAC;QACF,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IAChF,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,0BAA0B;QACrC,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,qCAAqC;QACrC,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,qBAAqB,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,qBAAqB,GAAG,CAAC,KAAK,IAAI,EAAE;YACvC,oDAAoD;YACpD,sFAAsF;YACtF,8EAA8E;YAC9E,mFAAmF;YACnF,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC1B,iEAAiE;gBACjE,MAAM,WAAW,GAAa,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;oBAC7B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC7C,CAAC;gBACD,+DAA+D;gBAC/D,WAAW,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;gBACzD,WAAW,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;gBAEzD,MAAM,aAAa,GAA+B;oBAChD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;oBAChC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;oBACxC,aAAa,EAAE,WAAW;oBAC1B,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;oBACpD,cAAc,EAAE,CAAC,MAAM,CAAC;oBACxB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;iBAC9D,CAAC;gBACF,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;gBACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;oBAClD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;oBAC/B,YAAY,EAAE,WAAW;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,yCAAyC;YACzC,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEhE,2CAA2C;YAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACvE,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;YAC/G,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBACpD,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB;gBAChD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;gBACzC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE;aACjC,CAAC,CAAC;YAEH,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;QACnC,CAAC,CAAC,EAAE,CAAC;QAEL,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,IAAI,qBAAqB;QACvB,iEAAiE;QACjE,kEAAkE;QAClE,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC;IAC5C,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;IAClC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAAC,SAAiB;QAChD,IAAI,CAAC;YACH,0DAA0D;YAC1D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,+BAA+B,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC/F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;gBACxC,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE;gBACzC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,mBAAmB;aACvD,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;YAC9C,OAAO;gBACL,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;gBACvD,cAAc,EAAE,QAAQ,CAAC,cAAc;aACxC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,MAAmB;QACxC,MAAM,OAAO,GAAG,CAAC,KAAyB,EAAsB,EAAE;YAChE,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YAEzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACjD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,yCAAyC,CAAC,CAAC;gBAC3F,CAAC;gBACD,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QAEF,OAAO;YACL,GAAG,MAAM;YACT,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YAC9B,sBAAsB,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,IAAI,MAAM,CAAC,sBAAsB;YAC/F,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,cAAc;YACvE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YACpC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;YAC5C,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;YAC1C,qBAAqB,EAAE,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC;YAC5D,sBAAsB,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC;YAC9D,mBAAmB,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;SACzD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,yBAAyB,CAAC,MAAmB;QACzD,+DAA+D;QAC/D,IAAI,MAAM,CAAC,sBAAsB,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3D,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;YAC/G,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAErE,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE;gBAC1D,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;gBACvD,cAAc,EAAE,QAAQ,CAAC,cAAc;aACxC,CAAC,CAAC;YACH,OAAO;gBACL,GAAG,MAAM;gBACT,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,QAAQ,CAAC,sBAAsB;gBACxF,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc;aACjE,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACxF,OAAO;YACL,GAAG,MAAM;YACT,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,GAAG,MAAM,kBAAkB;YACpF,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,GAAG,MAAM,cAAc;SACjE,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CACb,MAAkC,EAClC,MAA2B,EAC3B,GAAa;QAEb,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAExC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;YAC/C,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,cAAc,EAAE,MAAM,CAAC,aAAa;SACrC,CAAC,CAAC;QAEH,wBAAwB;QACxB,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAClH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,SAAS,EAAE;gBACnD,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,cAAc,EAAE,MAAM,CAAC,aAAa;aACrC,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAEhC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE;YAC9B,iBAAiB,EAAE,MAAM,CAAC,WAAW;YACrC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,aAAa,EAAE,MAAM,CAAC,KAAK;YAC3B,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAuB,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;QAE3D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAE7C,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAChD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACtD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAE9C,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,4DAA4D;QAC5D,iFAAiF;QACjF,kFAAkF;QAClF,oFAAoF;QAEpF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;YACzD,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;YAC3B,WAAW;YACX,UAAU;YACV,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa;SAC7C,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,GAAY,EAAE,GAAa;QAC9C,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAExC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;QAEzC,IAAI,KAAK,EAAE,CAAC;YACR,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAEvE,yCAAyC;YACzC,MAAM,SAAS,GAAG,cAAc,CAAC,KAAe,CAAC,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,SAAS;gBAChB,iBAAiB,EAAE,yBAAyB,SAAS,EAAE;aACxD,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YACnD,OAAO;QACX,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAChD,OAAO;QACX,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACjD,OAAO;QACX,CAAC;QAED,iBAAiB;QACjB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE9B,IAAI,CAAC;YACD,oCAAoC;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAC9C,IAAI,EACJ,SAAS,EACT,IAAI,CAAC,MAAM,CAAC,YAAa,CAC5B,CAAC;YAEF,yBAAyB;YACzB,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;YAElC,wCAAwC;YACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACxE,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAEjD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE;gBACtC,MAAM;gBACN,MAAM,EAAE;oBACJ,WAAW,EAAE,WAAW,CAAC,iBAAiB;oBAC1C,aAAa,EAAE,WAAW,CAAC,aAAa;oBACxC,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE;oBAChC,KAAK,EAAE,WAAW,CAAC,aAAa;iBACnC;gBACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,MAAM;aACT,CAAC,CAAC;YAEH,qBAAqB;YACrB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;YACzD,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACjD,IAAI,WAAW,CAAC,aAAa,EAAE,CAAC;gBAC5B,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;YACnE,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;gBACzD,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE;gBAC/B,YAAY;aACf,CAAC,CAAC;YAEH,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAY,CAAC,CAAC;YAC5D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,6BAA6B,CACjC,MAAkC,EAClC,iBAAyB;QAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAEhE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAC7B,MAAkC,EAClC,iBAAyB,EACzB,YAAqB,EACrB,WAAoB,EACpB,QAAc;QAEd,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAExC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;YACzD,QAAQ,EAAE,MAAM,CAAC,SAAS;SAC3B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAEhE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QAED,kCAAkC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC;QAChD,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;QACjD,IAAI,OAAO,GAAG,aAAa,EAAE,CAAC;YAC5B,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,+CAA+C;QAC/C,IAAI,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAClC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACxD,CAAC;YAED,sCAAsC;YACtC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC3E,IAAI,IAAI,KAAK,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3D,CAAC;QAED,yCAAyC;QACzC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAElD,oCAAoC;QACpC,MAAM,SAAS,GAAoB;YACjC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY;YACnC,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE;YAC1D,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU;gBACnC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI;gBAChD,CAAC,CAAC,SAAS;YACb,QAAQ;SACT,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAE/D,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,wBAAwB,CACpC,IAAY,EACZ,YAAgC,EAChC,WAAmB;QAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,cAAe,CAAC;QAE7C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC;QAEH,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE1E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YACrC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,QAAQ,EAAE,kBAAkB;aAC7B;YACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,SAAS,EAAE;gBACpD,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,YAAY,EAAE,SAAS;aACxB,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAiB,CAAC;QAE3D,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,MAAkC,EAClC,YAAoB,EACpB,MAAiB,EACjB,QAAc;QAEd,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAExC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAE7E,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,cAAe,CAAC;QAE7C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;QAEH,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YACrC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,QAAQ,EAAE,kBAAkB;aAC7B;YACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,SAAS,EAAE;gBAC5D,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,YAAY,EAAE,SAAS;aACxB,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAiB,CAAC;QAE3D,MAAM,SAAS,GAAoB;YACjC,KAAK,EAAE,aAAa,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE;YAC1C,SAAS,EAAE,aAAa,CAAC,UAAU;gBACjC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,UAAU,GAAG,IAAI;gBAC9C,CAAC,CAAC,SAAS;YACb,QAAQ;SACT,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAE7D,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAE/C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBACvC,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5D,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QAED,OAAO;YACL,KAAK;YACL,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YACnF,QAAQ,EAAE,SAAS,CAAC,QAAQ;SAC7B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,KAAa;QACzC,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC;QAE5D,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5C,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;YAC7C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,QAAQ,EAAE,kBAAkB;aAC7B;YACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,qBAAqB,GAAG,MAAM,QAAQ,CAAC,IAAI,EAMhD,CAAC;QAEF,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QAED,OAAO;YACL,KAAK;YACL,QAAQ,EAAE,qBAAqB,CAAC,SAAS,IAAI,SAAS;YACtD,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;YACjF,SAAS,EAAE,qBAAqB,CAAC,GAAG;YACpC,QAAQ,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SACrF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CACf,MAAkC,EAClC,OAAoC;QAEpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,KAAa;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;QACtD,IAAI,CAAC,aAAa;YAAE,OAAO;QAE3B,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5C,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;CACF"}

package/dist/src/openapi-parser.d.ts

@@ -8,6 +8,7 @@ import type { OperationInfo, PathInfo } from './types/openapi.js';
 export declare class OpenAPIParser {
     private spec?;
     private index?;
+    private schemaCache;
     load(specPath: string): Promise<void>;
     /**
      * Build search index from OpenAPI spec
@@ -27,9 +28,24 @@ export declare class OpenAPIParser {
     private resolveParameter;
     private extractRequestBody;
     private extractSchema;
+    private resolveSchema;
+    private mergeSchemaInfo;
+    private cloneSchemaInfo;
     getOperation(operationId: string): OperationInfo | undefined;
     getPath(path: string): PathInfo | undefined;
     getBaseUrl(): string;
+    /**
+     * Get resource metadata from OpenAPI spec
+     *
+     * Why: Used for OAuth 2.0 Protected Resource Metadata (RFC 8707)
+     * to provide human-readable name and documentation URL for the API.
+     *
+     * Returns undefined for fields not present in spec.
+     */
+    getResourceMetadata(): {
+        name?: string;
+        documentation?: string;
+    };
     getAllOperations(): OperationInfo[];
     /**
      * Get first security scheme from OpenAPI spec

package/dist/src/openapi-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openapi-parser.d.ts","sourceRoot":"","sources":["../../src/openapi-parser.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAgB,aAAa,EAAiB,QAAQ,EAA+B,MAAM,oBAAoB,CAAC;AAE5H,qBAAa,aAAa;IACxB,OAAO,CAAC,IAAI,CAAC,CAAqB;IAClC,OAAO,CAAC,KAAK,CAAC,CAAe;IAEvB,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa3C;;;;;OAKG;IACH,OAAO,CAAC,UAAU;IAkClB,OAAO,CAAC,oBAAoB;IAiB5B,OAAO,CAAC,iBAAiB;IAqBzB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,kBAAkB;IAoB1B,OAAO,CAAC,aAAa;IA0BrB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAI5D,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAI3C,UAAU,IAAI,MAAM;IAKpB,gBAAgB,IAAI,aAAa,EAAE;IAInC;;;;;;;OAOG;IACH,iBAAiB,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;CAoD/F"}
+{"version":3,"file":"openapi-parser.d.ts","sourceRoot":"","sources":["../../src/openapi-parser.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAgB,aAAa,EAAiB,QAAQ,EAA+B,MAAM,oBAAoB,CAAC;AAE5H,qBAAa,aAAa;IACxB,OAAO,CAAC,IAAI,CAAC,CAAqB;IAClC,OAAO,CAAC,KAAK,CAAC,CAAe;IAC7B,OAAO,CAAC,WAAW,CAAiC;IAE9C,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAc3C;;;;;OAKG;IACH,OAAO,CAAC,UAAU;IAmClB,OAAO,CAAC,oBAAoB;IAiB5B,OAAO,CAAC,iBAAiB;IAqBzB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,kBAAkB;IAoB1B,OAAO,CAAC,aAAa;IAsDrB,OAAO,CAAC,aAAa;IAyCrB,OAAO,CAAC,eAAe;IA4BvB,OAAO,CAAC,eAAe;IAwCvB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAI5D,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAI3C,UAAU,IAAI,MAAM;IAKpB;;;;;;;OAOG;IACH,mBAAmB,IAAI;QACrB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB;IAOD,gBAAgB,IAAI,aAAa,EAAE;IAInC;;;;;;;OAOG;IACH,iBAAiB,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;CAoD/F"}