paygate-mcp 3.3.0 → 3.5.0

package/dist/groups.d.ts

@@ -0,0 +1,140 @@
+/**
+ * Key Groups — Policy templates for API keys.
+ *
+ * Groups define shared policies (ACL, rate limits, pricing, quotas, IP rules)
+ * that are inherited by all member keys. Key-level settings override group defaults.
+ *
+ * Unlike Teams (which share budgets), Groups share *policies*:
+ *   - Tool ACL (allowedTools / deniedTools)
+ *   - Rate limit override (calls per minute)
+ *   - Per-tool pricing overrides
+ *   - Quota defaults (daily/monthly limits)
+ *   - IP allowlist
+ *   - Metadata tags
+ */
+import { QuotaConfig, ToolPricing } from './types';
+export interface KeyGroupRecord {
+    /** Unique group ID (grp_ prefix + 16 hex chars) */
+    id: string;
+    /** Human-readable group name (unique) */
+    name: string;
+    /** Group description */
+    description: string;
+    /** Tool whitelist (inherited by member keys if their list is empty). */
+    allowedTools: string[];
+    /** Tool blacklist (merged with member key's denied tools). */
+    deniedTools: string[];
+    /** Rate limit override (calls per minute). 0 = use global default. */
+    rateLimitPerMin: number;
+    /** Per-tool pricing overrides (merged with global, group wins for conflicts). */
+    toolPricing: Record<string, ToolPricing>;
+    /** Quota defaults for member keys (used when key has no per-key quota). */
+    quota?: QuotaConfig;
+    /** IP allowlist (merged with key-level allowlist). */
+    ipAllowlist: string[];
+    /** Default credits for new keys assigned to this group. 0 = use /keys default. */
+    defaultCredits: number;
+    /** Max spending limit for member keys. 0 = unlimited. */
+    maxSpendingLimit: number;
+    /** Arbitrary metadata tags. */
+    tags: Record<string, string>;
+    /** ISO timestamp when group was created. */
+    createdAt: string;
+    /** Whether group is active. */
+    active: boolean;
+}
+/** Resolved policy: the merged result of group + key settings. */
+export interface ResolvedPolicy {
+    allowedTools: string[];
+    deniedTools: string[];
+    rateLimitPerMin: number;
+    quota?: QuotaConfig;
+    ipAllowlist: string[];
+    toolPricing: Record<string, ToolPricing>;
+    maxSpendingLimit: number;
+}
+export interface KeyGroupInfo {
+    id: string;
+    name: string;
+    description: string;
+    memberCount: number;
+    allowedTools: string[];
+    deniedTools: string[];
+    rateLimitPerMin: number;
+    quota?: QuotaConfig;
+    ipAllowlist: string[];
+    defaultCredits: number;
+    maxSpendingLimit: number;
+    tags: Record<string, string>;
+    createdAt: string;
+    active: boolean;
+}
+export declare class KeyGroupManager {
+    private groups;
+    /** Reverse index: apiKey → groupId */
+    private keyToGroup;
+    createGroup(params: {
+        name: string;
+        description?: string;
+        allowedTools?: string[];
+        deniedTools?: string[];
+        rateLimitPerMin?: number;
+        toolPricing?: Record<string, ToolPricing>;
+        quota?: QuotaConfig;
+        ipAllowlist?: string[];
+        defaultCredits?: number;
+        maxSpendingLimit?: number;
+        tags?: Record<string, string>;
+    }): KeyGroupRecord;
+    getGroup(id: string): KeyGroupRecord | undefined;
+    getGroupByName(name: string): KeyGroupRecord | undefined;
+    updateGroup(id: string, updates: {
+        name?: string;
+        description?: string;
+        allowedTools?: string[];
+        deniedTools?: string[];
+        rateLimitPerMin?: number;
+        toolPricing?: Record<string, ToolPricing>;
+        quota?: QuotaConfig | null;
+        ipAllowlist?: string[];
+        defaultCredits?: number;
+        maxSpendingLimit?: number;
+        tags?: Record<string, string>;
+    }): KeyGroupRecord;
+    deleteGroup(id: string): boolean;
+    listGroups(): KeyGroupInfo[];
+    assignKey(apiKey: string, groupId: string): void;
+    removeKey(apiKey: string): boolean;
+    getKeyGroup(apiKey: string): KeyGroupRecord | undefined;
+    getKeyGroupId(apiKey: string): string | undefined;
+    getGroupMembers(groupId: string): string[];
+    /**
+     * Resolve the effective policy for a key, merging group defaults with key overrides.
+     *
+     * Resolution rules:
+     *   - allowedTools: key-level wins if non-empty, else group default
+     *   - deniedTools: union of group + key (both applied)
+     *   - rateLimitPerMin: key-level wins if set, else group default
+     *   - quota: key-level wins if set, else group default
+     *   - ipAllowlist: union of group + key (both applied)
+     *   - toolPricing: group pricing is base, key-level (if any) would need external handling
+     *   - maxSpendingLimit: group's maxSpendingLimit is a cap on the key's spending limit
+     */
+    resolvePolicy(apiKey: string, keyRecord: {
+        allowedTools: string[];
+        deniedTools: string[];
+        ipAllowlist: string[];
+        quota?: QuotaConfig;
+        spendingLimit: number;
+    }): ResolvedPolicy | null;
+    serialize(): {
+        groups: [string, KeyGroupRecord][];
+        assignments: [string, string][];
+    };
+    load(data: {
+        groups: [string, KeyGroupRecord][];
+        assignments: [string, string][];
+    }): void;
+    get count(): number;
+}
+//# sourceMappingURL=groups.d.ts.map

package/dist/groups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"groups.d.ts","sourceRoot":"","sources":["../src/groups.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAInD,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,8DAA8D;IAC9D,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,sEAAsE;IACtE,eAAe,EAAE,MAAM,CAAC;IACxB,iFAAiF;IACjF,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACzC,2EAA2E;IAC3E,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,sDAAsD;IACtD,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,kFAAkF;IAClF,cAAc,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,gBAAgB,EAAE,MAAM,CAAC;IACzB,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACzC,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB;AAID,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAqC;IACnD,sCAAsC;IACtC,OAAO,CAAC,UAAU,CAA6B;IAI/C,WAAW,CAAC,MAAM,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1C,KAAK,CAAC,EAAE,WAAW,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC/B,GAAG,cAAc;IAiClB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIhD,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAOxD,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;QAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1C,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;QAC3B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC/B,GAAG,cAAc;IA+BlB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAchC,UAAU,IAAI,YAAY,EAAE;IA2B5B,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAMhD,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIlC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAWvD,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAWjD,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE;IAU1C;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE;QACvC,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,KAAK,CAAC,EAAE,WAAW,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,cAAc,GAAG,IAAI;IA0CzB,SAAS,IAAI;QAAE,MAAM,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC;QAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAA;KAAE;IAOpF,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC;QAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAA;KAAE,GAAG,IAAI;IAiBzF,IAAI,KAAK,IAAI,MAAM,CAMlB;CACF"}

package/dist/groups.js

@@ -0,0 +1,258 @@
+"use strict";
+/**
+ * Key Groups — Policy templates for API keys.
+ *
+ * Groups define shared policies (ACL, rate limits, pricing, quotas, IP rules)
+ * that are inherited by all member keys. Key-level settings override group defaults.
+ *
+ * Unlike Teams (which share budgets), Groups share *policies*:
+ *   - Tool ACL (allowedTools / deniedTools)
+ *   - Rate limit override (calls per minute)
+ *   - Per-tool pricing overrides
+ *   - Quota defaults (daily/monthly limits)
+ *   - IP allowlist
+ *   - Metadata tags
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeyGroupManager = void 0;
+const crypto_1 = require("crypto");
+// ─── KeyGroupManager ─────────────────────────────────────────────────────────
+class KeyGroupManager {
+    groups = new Map();
+    /** Reverse index: apiKey → groupId */
+    keyToGroup = new Map();
+    // ─── CRUD ────────────────────────────────────────────────────────────────
+    createGroup(params) {
+        const name = String(params.name || '').trim();
+        if (!name)
+            throw new Error('Group must have a name');
+        // Enforce unique names
+        for (const g of this.groups.values()) {
+            if (g.active && g.name === name) {
+                throw new Error(`Group '${name}' already exists`);
+            }
+        }
+        const id = 'grp_' + (0, crypto_1.randomBytes)(8).toString('hex');
+        const record = {
+            id,
+            name,
+            description: String(params.description || ''),
+            allowedTools: params.allowedTools || [],
+            deniedTools: params.deniedTools || [],
+            rateLimitPerMin: Math.max(0, Math.floor(Number(params.rateLimitPerMin) || 0)),
+            toolPricing: params.toolPricing || {},
+            quota: params.quota,
+            ipAllowlist: params.ipAllowlist || [],
+            defaultCredits: Math.max(0, Math.floor(Number(params.defaultCredits) || 0)),
+            maxSpendingLimit: Math.max(0, Math.floor(Number(params.maxSpendingLimit) || 0)),
+            tags: params.tags || {},
+            createdAt: new Date().toISOString(),
+            active: true,
+        };
+        this.groups.set(id, record);
+        return record;
+    }
+    getGroup(id) {
+        return this.groups.get(id);
+    }
+    getGroupByName(name) {
+        for (const g of this.groups.values()) {
+            if (g.active && g.name === name)
+                return g;
+        }
+        return undefined;
+    }
+    updateGroup(id, updates) {
+        const group = this.groups.get(id);
+        if (!group || !group.active)
+            throw new Error(`Group '${id}' not found`);
+        // Check name uniqueness if name is being changed
+        if (updates.name !== undefined && updates.name !== group.name) {
+            const name = String(updates.name).trim();
+            if (!name)
+                throw new Error('Group must have a name');
+            for (const g of this.groups.values()) {
+                if (g.active && g.id !== id && g.name === name) {
+                    throw new Error(`Group '${name}' already exists`);
+                }
+            }
+            group.name = name;
+        }
+        if (updates.description !== undefined)
+            group.description = String(updates.description);
+        if (updates.allowedTools !== undefined)
+            group.allowedTools = updates.allowedTools;
+        if (updates.deniedTools !== undefined)
+            group.deniedTools = updates.deniedTools;
+        if (updates.rateLimitPerMin !== undefined)
+            group.rateLimitPerMin = Math.max(0, Math.floor(Number(updates.rateLimitPerMin) || 0));
+        if (updates.toolPricing !== undefined)
+            group.toolPricing = updates.toolPricing;
+        if (updates.quota === null)
+            delete group.quota;
+        else if (updates.quota !== undefined)
+            group.quota = updates.quota;
+        if (updates.ipAllowlist !== undefined)
+            group.ipAllowlist = updates.ipAllowlist;
+        if (updates.defaultCredits !== undefined)
+            group.defaultCredits = Math.max(0, Math.floor(Number(updates.defaultCredits) || 0));
+        if (updates.maxSpendingLimit !== undefined)
+            group.maxSpendingLimit = Math.max(0, Math.floor(Number(updates.maxSpendingLimit) || 0));
+        if (updates.tags !== undefined)
+            group.tags = { ...group.tags, ...updates.tags };
+        return group;
+    }
+    deleteGroup(id) {
+        const group = this.groups.get(id);
+        if (!group || !group.active)
+            return false;
+        group.active = false;
+        // Remove all key assignments for this group
+        for (const [key, gid] of this.keyToGroup.entries()) {
+            if (gid === id)
+                this.keyToGroup.delete(key);
+        }
+        return true;
+    }
+    listGroups() {
+        const result = [];
+        for (const g of this.groups.values()) {
+            if (!g.active)
+                continue;
+            const memberCount = this.getGroupMembers(g.id).length;
+            result.push({
+                id: g.id,
+                name: g.name,
+                description: g.description,
+                memberCount,
+                allowedTools: g.allowedTools,
+                deniedTools: g.deniedTools,
+                rateLimitPerMin: g.rateLimitPerMin,
+                quota: g.quota,
+                ipAllowlist: g.ipAllowlist,
+                defaultCredits: g.defaultCredits,
+                maxSpendingLimit: g.maxSpendingLimit,
+                tags: g.tags,
+                createdAt: g.createdAt,
+                active: g.active,
+            });
+        }
+        return result;
+    }
+    // ─── Key Membership ──────────────────────────────────────────────────────
+    assignKey(apiKey, groupId) {
+        const group = this.groups.get(groupId);
+        if (!group || !group.active)
+            throw new Error(`Group '${groupId}' not found`);
+        this.keyToGroup.set(apiKey, groupId);
+    }
+    removeKey(apiKey) {
+        return this.keyToGroup.delete(apiKey);
+    }
+    getKeyGroup(apiKey) {
+        const groupId = this.keyToGroup.get(apiKey);
+        if (!groupId)
+            return undefined;
+        const group = this.groups.get(groupId);
+        if (!group || !group.active) {
+            this.keyToGroup.delete(apiKey);
+            return undefined;
+        }
+        return group;
+    }
+    getKeyGroupId(apiKey) {
+        const groupId = this.keyToGroup.get(apiKey);
+        if (!groupId)
+            return undefined;
+        const group = this.groups.get(groupId);
+        if (!group || !group.active) {
+            this.keyToGroup.delete(apiKey);
+            return undefined;
+        }
+        return groupId;
+    }
+    getGroupMembers(groupId) {
+        const members = [];
+        for (const [key, gid] of this.keyToGroup.entries()) {
+            if (gid === groupId)
+                members.push(key);
+        }
+        return members;
+    }
+    // ─── Policy Resolution ───────────────────────────────────────────────────
+    /**
+     * Resolve the effective policy for a key, merging group defaults with key overrides.
+     *
+     * Resolution rules:
+     *   - allowedTools: key-level wins if non-empty, else group default
+     *   - deniedTools: union of group + key (both applied)
+     *   - rateLimitPerMin: key-level wins if set, else group default
+     *   - quota: key-level wins if set, else group default
+     *   - ipAllowlist: union of group + key (both applied)
+     *   - toolPricing: group pricing is base, key-level (if any) would need external handling
+     *   - maxSpendingLimit: group's maxSpendingLimit is a cap on the key's spending limit
+     */
+    resolvePolicy(apiKey, keyRecord) {
+        const group = this.getKeyGroup(apiKey);
+        if (!group)
+            return null;
+        // Allowed tools: key wins if non-empty, else group
+        const allowedTools = keyRecord.allowedTools.length > 0
+            ? keyRecord.allowedTools
+            : group.allowedTools;
+        // Denied tools: union (both applied)
+        const deniedSet = new Set([...group.deniedTools, ...keyRecord.deniedTools]);
+        const deniedTools = Array.from(deniedSet);
+        // Rate limit: group default (0 = use global)
+        const rateLimitPerMin = group.rateLimitPerMin;
+        // Quota: key wins if set, else group
+        const quota = keyRecord.quota || group.quota;
+        // IP allowlist: union
+        const ipSet = new Set([...group.ipAllowlist, ...keyRecord.ipAllowlist]);
+        const ipAllowlist = Array.from(ipSet);
+        // Tool pricing: group overrides
+        const toolPricing = group.toolPricing;
+        // Spending limit: cap to group's max if group has one set and key's limit is higher (or unlimited)
+        let maxSpendingLimit = group.maxSpendingLimit;
+        return {
+            allowedTools,
+            deniedTools,
+            rateLimitPerMin,
+            quota,
+            ipAllowlist,
+            toolPricing,
+            maxSpendingLimit,
+        };
+    }
+    // ─── Serialization (for state file persistence) ──────────────────────────
+    serialize() {
+        return {
+            groups: Array.from(this.groups.entries()),
+            assignments: Array.from(this.keyToGroup.entries()),
+        };
+    }
+    load(data) {
+        this.groups.clear();
+        this.keyToGroup.clear();
+        if (data.groups) {
+            for (const [id, record] of data.groups) {
+                this.groups.set(id, record);
+            }
+        }
+        if (data.assignments) {
+            for (const [key, groupId] of data.assignments) {
+                this.keyToGroup.set(key, groupId);
+            }
+        }
+    }
+    get count() {
+        let count = 0;
+        for (const g of this.groups.values()) {
+            if (g.active)
+                count++;
+        }
+        return count;
+    }
+}
+exports.KeyGroupManager = KeyGroupManager;
+//# sourceMappingURL=groups.js.map

package/dist/groups.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groups.js","sourceRoot":"","sources":["../src/groups.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAEH,mCAAqC;AAgErC,gFAAgF;AAEhF,MAAa,eAAe;IAClB,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IACnD,sCAAsC;IAC9B,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE/C,4EAA4E;IAE5E,WAAW,CAAC,MAYX;QACC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAErD,uBAAuB;QACvB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,kBAAkB,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,GAAG,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,MAAM,GAAmB;YAC7B,EAAE;YACF,IAAI;YACJ,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;YAC7C,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YACrC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7E,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YACrC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YACrC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3E,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/E,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,IAAI;SACb,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,cAAc,CAAC,IAAY;QACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,WAAW,CAAC,EAAU,EAAE,OAYvB;QACC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAExE,iDAAiD;QACjD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACrD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;oBAC/C,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,kBAAkB,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;YACD,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QACpB,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACvF,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;YAAE,KAAK,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QAClF,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAC/E,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;YAAE,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjI,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAC/E,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC;aAC1C,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAClE,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAC/E,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;YAAE,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9H,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS;YAAE,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpI,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAEhF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,WAAW,CAAC,EAAU;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1C,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;QAErB,4CAA4C;QAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,IAAI,GAAG,KAAK,EAAE;gBAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU;QACR,MAAM,MAAM,GAAmB,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,CAAC,CAAC,MAAM;gBAAE,SAAS;YACxB,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,WAAW;gBACX,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;gBACpC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4EAA4E;IAE5E,SAAS,CAAC,MAAc,EAAE,OAAe;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,OAAO,aAAa,CAAC,CAAC;QAC7E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa,CAAC,MAAc;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,eAAe,CAAC,OAAe;QAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,IAAI,GAAG,KAAK,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAE5E;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,MAAc,EAAE,SAM7B;QACC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,mDAAmD;QACnD,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACpD,CAAC,CAAC,SAAS,CAAC,YAAY;YACxB,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;QAEvB,qCAAqC;QACrC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE1C,6CAA6C;QAC7C,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;QAE9C,qCAAqC;QACrC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC;QAE7C,sBAAsB;QACtB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEtC,gCAAgC;QAChC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QAEtC,mGAAmG;QACnG,IAAI,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;QAE9C,OAAO;YACL,YAAY;YACZ,WAAW;YACX,eAAe;YACf,KAAK;YACL,WAAW;YACX,WAAW;YACX,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,4EAA4E;IAE5E,SAAS;QACP,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;SACnD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,IAA6E;QAChF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAExB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,KAAK;QACP,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,CAAC,MAAM;gBAAE,KAAK,EAAE,CAAC;QACxB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAxRD,0CAwRC"}

package/dist/index.d.ts

@@ -55,6 +55,10 @@ export { ScopedTokenManager, TokenRevocationList } from './tokens';
 export type { TokenPayload, TokenValidation, TokenCreateOptions, RevokedTokenEntry } from './tokens';
 export { AdminKeyManager, ROLE_HIERARCHY, VALID_ROLES } from './admin-keys';
 export type { AdminRole, AdminKeyRecord } from './admin-keys';
+export { PluginManager } from './plugin';
+export type { PayGatePlugin, PluginGateContext, PluginToolContext, PluginGateOverride, PluginInfo } from './plugin';
+export { KeyGroupManager } from './groups';
+export type { KeyGroupRecord, KeyGroupInfo, ResolvedPolicy } from './groups';
 export type { PayGateConfig, JsonRpcRequest, JsonRpcResponse, JsonRpcError, ToolCallParams, ToolInfo, ToolPricing, ServerBackendConfig, ApiKeyRecord, UsageEvent, UsageSummary, GateDecision, QuotaConfig, BatchToolCall, BatchGateResult, } from './types';
 export { DEFAULT_CONFIG } from './types';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACrG,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACvD,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AACxG,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,YAAY,EAAE,eAAe,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC1F,YAAY,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC/H,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC7E,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACvD,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvE,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACnE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC5E,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9D,YAAY,EACV,aAAa,EACb,cAAc,EACd,eAAe,EACf,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,aAAa,EACb,eAAe,GAChB,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACrG,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACvD,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AACxG,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,YAAY,EAAE,eAAe,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC1F,YAAY,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC/H,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC7E,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACvD,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvE,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACnE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC5E,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,YAAY,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACpH,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE7E,YAAY,EACV,aAAa,EACb,cAAc,EACd,eAAe,EACf,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,aAAa,EACb,eAAe,GAChB,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -16,7 +16,7 @@
  * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_CONFIG = exports.VALID_ROLES = exports.ROLE_HIERARCHY = exports.AdminKeyManager = exports.TokenRevocationList = exports.ScopedTokenManager = exports.formatDiagnostics = exports.validateConfig = exports.PayGateError = exports.PayGateClient = exports.RedisSync = exports.RedisSubscriber = exports.parseRedisUrl = exports.RedisClient = exports.TeamManager = exports.AlertEngine = exports.AnalyticsEngine = exports.getDashboardHtml = exports.MetricsCollector = exports.ToolRegistry = exports.maskKeyForAudit = exports.AuditLogger = exports.writeSseKeepAlive = exports.writeSseEvent = exports.writeSseHeaders = exports.SessionManager = exports.OAuthProvider = exports.QuotaTracker = exports.WebhookEmitter = exports.StripeWebhookHandler = exports.RateLimiter = exports.UsageMeter = exports.KeyStore = exports.MultiServerRouter = exports.HttpMcpProxy = exports.McpProxy = exports.Gate = exports.PayGateServer = void 0;
+exports.DEFAULT_CONFIG = exports.KeyGroupManager = exports.PluginManager = exports.VALID_ROLES = exports.ROLE_HIERARCHY = exports.AdminKeyManager = exports.TokenRevocationList = exports.ScopedTokenManager = exports.formatDiagnostics = exports.validateConfig = exports.PayGateError = exports.PayGateClient = exports.RedisSync = exports.RedisSubscriber = exports.parseRedisUrl = exports.RedisClient = exports.TeamManager = exports.AlertEngine = exports.AnalyticsEngine = exports.getDashboardHtml = exports.MetricsCollector = exports.ToolRegistry = exports.maskKeyForAudit = exports.AuditLogger = exports.writeSseKeepAlive = exports.writeSseEvent = exports.writeSseHeaders = exports.SessionManager = exports.OAuthProvider = exports.QuotaTracker = exports.WebhookEmitter = exports.StripeWebhookHandler = exports.RateLimiter = exports.UsageMeter = exports.KeyStore = exports.MultiServerRouter = exports.HttpMcpProxy = exports.McpProxy = exports.Gate = exports.PayGateServer = void 0;
 var server_1 = require("./server");
 Object.defineProperty(exports, "PayGateServer", { enumerable: true, get: function () { return server_1.PayGateServer; } });
 var gate_1 = require("./gate");
@@ -80,6 +80,10 @@ var admin_keys_1 = require("./admin-keys");
 Object.defineProperty(exports, "AdminKeyManager", { enumerable: true, get: function () { return admin_keys_1.AdminKeyManager; } });
 Object.defineProperty(exports, "ROLE_HIERARCHY", { enumerable: true, get: function () { return admin_keys_1.ROLE_HIERARCHY; } });
 Object.defineProperty(exports, "VALID_ROLES", { enumerable: true, get: function () { return admin_keys_1.VALID_ROLES; } });
+var plugin_1 = require("./plugin");
+Object.defineProperty(exports, "PluginManager", { enumerable: true, get: function () { return plugin_1.PluginManager; } });
+var groups_1 = require("./groups");
+Object.defineProperty(exports, "KeyGroupManager", { enumerable: true, get: function () { return groups_1.KeyGroupManager; } });
 var types_1 = require("./types");
 Object.defineProperty(exports, "DEFAULT_CONFIG", { enumerable: true, get: function () { return types_1.DEFAULT_CONFIG; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAEH,mCAAyC;AAAhC,uGAAA,aAAa,OAAA;AACtB,+BAA8B;AAArB,4FAAA,IAAI,OAAA;AACb,iCAAmC;AAA1B,iGAAA,QAAQ,OAAA;AACjB,2CAA4C;AAAnC,0GAAA,YAAY,OAAA;AACrB,mCAA6C;AAApC,2GAAA,iBAAiB,OAAA;AAC1B,iCAAmC;AAA1B,iGAAA,QAAQ,OAAA;AACjB,iCAAqC;AAA5B,mGAAA,UAAU,OAAA;AACnB,+CAA6C;AAApC,2GAAA,WAAW,OAAA;AACpB,mCAAgD;AAAvC,8GAAA,oBAAoB,OAAA;AAC7B,qCAA2C;AAAlC,yGAAA,cAAc,OAAA;AAEvB,iCAAuC;AAA9B,qGAAA,YAAY,OAAA;AACrB,iCAAwC;AAA/B,sGAAA,aAAa,OAAA;AAEtB,qCAA8F;AAArF,yGAAA,cAAc,OAAA;AAAE,0GAAA,eAAe,OAAA;AAAE,wGAAA,aAAa,OAAA;AAAE,4GAAA,iBAAiB,OAAA;AAC1E,iCAAuD;AAA9C,oGAAA,WAAW,OAAA;AAAE,wGAAA,eAAe,OAAA;AAErC,uCAA0C;AAAjC,wGAAA,YAAY,OAAA;AACrB,qCAA6C;AAApC,2GAAA,gBAAgB,OAAA;AAIzB,yCAA+C;AAAtC,6GAAA,gBAAgB,OAAA;AACzB,yCAA8C;AAArC,4GAAA,eAAe,OAAA;AAExB,mCAAuC;AAA9B,qGAAA,WAAW,OAAA;AAEpB,iCAAsC;AAA7B,oGAAA,WAAW,OAAA;AAEpB,+CAA6E;AAApE,2GAAA,WAAW,OAAA;AAAE,6GAAA,aAAa,OAAA;AAAE,+GAAA,eAAe,OAAA;AAEpD,2CAAyC;AAAhC,uGAAA,SAAS,OAAA;AAElB,mCAAuD;AAA9C,uGAAA,aAAa,OAAA;AAAE,sGAAA,YAAY,OAAA;AAEpC,uDAAuE;AAA9D,kHAAA,cAAc,OAAA;AAAE,qHAAA,iBAAiB,OAAA;AAE1C,mCAAmE;AAA1D,4GAAA,kBAAkB,OAAA;AAAE,6GAAA,mBAAmB,OAAA;AAEhD,2CAA4E;AAAnE,6GAAA,eAAe,OAAA;AAAE,4GAAA,cAAc,OAAA;AAAE,yGAAA,WAAW,OAAA;AAqBrD,iCAAyC;AAAhC,uGAAA,cAAc,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAEH,mCAAyC;AAAhC,uGAAA,aAAa,OAAA;AACtB,+BAA8B;AAArB,4FAAA,IAAI,OAAA;AACb,iCAAmC;AAA1B,iGAAA,QAAQ,OAAA;AACjB,2CAA4C;AAAnC,0GAAA,YAAY,OAAA;AACrB,mCAA6C;AAApC,2GAAA,iBAAiB,OAAA;AAC1B,iCAAmC;AAA1B,iGAAA,QAAQ,OAAA;AACjB,iCAAqC;AAA5B,mGAAA,UAAU,OAAA;AACnB,+CAA6C;AAApC,2GAAA,WAAW,OAAA;AACpB,mCAAgD;AAAvC,8GAAA,oBAAoB,OAAA;AAC7B,qCAA2C;AAAlC,yGAAA,cAAc,OAAA;AAEvB,iCAAuC;AAA9B,qGAAA,YAAY,OAAA;AACrB,iCAAwC;AAA/B,sGAAA,aAAa,OAAA;AAEtB,qCAA8F;AAArF,yGAAA,cAAc,OAAA;AAAE,0GAAA,eAAe,OAAA;AAAE,wGAAA,aAAa,OAAA;AAAE,4GAAA,iBAAiB,OAAA;AAC1E,iCAAuD;AAA9C,oGAAA,WAAW,OAAA;AAAE,wGAAA,eAAe,OAAA;AAErC,uCAA0C;AAAjC,wGAAA,YAAY,OAAA;AACrB,qCAA6C;AAApC,2GAAA,gBAAgB,OAAA;AAIzB,yCAA+C;AAAtC,6GAAA,gBAAgB,OAAA;AACzB,yCAA8C;AAArC,4GAAA,eAAe,OAAA;AAExB,mCAAuC;AAA9B,qGAAA,WAAW,OAAA;AAEpB,iCAAsC;AAA7B,oGAAA,WAAW,OAAA;AAEpB,+CAA6E;AAApE,2GAAA,WAAW,OAAA;AAAE,6GAAA,aAAa,OAAA;AAAE,+GAAA,eAAe,OAAA;AAEpD,2CAAyC;AAAhC,uGAAA,SAAS,OAAA;AAElB,mCAAuD;AAA9C,uGAAA,aAAa,OAAA;AAAE,sGAAA,YAAY,OAAA;AAEpC,uDAAuE;AAA9D,kHAAA,cAAc,OAAA;AAAE,qHAAA,iBAAiB,OAAA;AAE1C,mCAAmE;AAA1D,4GAAA,kBAAkB,OAAA;AAAE,6GAAA,mBAAmB,OAAA;AAEhD,2CAA4E;AAAnE,6GAAA,eAAe,OAAA;AAAE,4GAAA,cAAc,OAAA;AAAE,yGAAA,WAAW,OAAA;AAErD,mCAAyC;AAAhC,uGAAA,aAAa,OAAA;AAEtB,mCAA2C;AAAlC,yGAAA,eAAe,OAAA;AAqBxB,iCAAyC;AAAhC,uGAAA,cAAc,OAAA"}

package/dist/plugin.d.ts

@@ -0,0 +1,172 @@
+/**
+ * Plugin System — Extensible middleware hooks for custom billing, auth,
+ * pricing, logging, and request handling logic.
+ *
+ * Plugins register named hook functions that run at key points in the
+ * request lifecycle:
+ *
+ *   Gate hooks (synchronous — hot path):
+ *     - beforeGate:     Short-circuit gate evaluation (deny/allow early)
+ *     - afterGate:      Modify gate decision after evaluation
+ *     - onDeny:         Notification when a tool call is denied
+ *     - transformPrice: Override tool pricing dynamically
+ *
+ *   Tool hooks (async — wraps proxy forward):
+ *     - beforeToolCall: Modify request before forwarding to MCP server
+ *     - afterToolCall:  Modify response after receiving from MCP server
+ *
+ *   HTTP hooks (async):
+ *     - onRequest:      Handle custom HTTP endpoints before normal routing
+ *
+ *   Lifecycle hooks (async):
+ *     - onStart:        Called when the server starts
+ *     - onStop:         Called when the server stops
+ *
+ * Plugins run in registration order. Gate hooks are sync to avoid adding
+ * latency to the critical billing path. Tool/HTTP/lifecycle hooks may be async.
+ */
+import { GateDecision, JsonRpcRequest, JsonRpcResponse, ApiKeyRecord } from './types';
+import { IncomingMessage, ServerResponse } from 'http';
+/** Context passed to gate-level hooks. */
+export interface PluginGateContext {
+    /** The API key (null if missing) */
+    apiKey: string | null;
+    /** Tool being called */
+    toolName: string;
+    /** Tool call arguments */
+    toolArgs?: Record<string, unknown>;
+    /** Client IP address */
+    clientIp?: string;
+    /** Resolved API key record (null if key is invalid) */
+    keyRecord?: ApiKeyRecord;
+}
+/** Context passed to tool-level hooks. */
+export interface PluginToolContext {
+    /** The API key */
+    apiKey: string | null;
+    /** Tool being called */
+    toolName: string;
+    /** Tool call arguments */
+    toolArgs?: Record<string, unknown>;
+    /** The JSON-RPC request being forwarded */
+    request: JsonRpcRequest;
+}
+/** Result from a beforeGate hook that short-circuits the gate. */
+export interface PluginGateOverride {
+    /** Whether to allow or deny the tool call */
+    allowed: boolean;
+    /** Reason for the decision */
+    reason?: string;
+    /** Credits to charge (only when allowed=true). Default: 0 */
+    creditsCharged?: number;
+}
+/** Plugin info returned by list(). */
+export interface PluginInfo {
+    name: string;
+    version?: string;
+    hooks: string[];
+}
+export interface PayGatePlugin {
+    /** Unique plugin name (required). */
+    name: string;
+    /** Plugin version (for discovery). */
+    version?: string;
+    /** Called when the server starts. */
+    onStart?: () => void | Promise<void>;
+    /** Called when the server stops. */
+    onStop?: () => void | Promise<void>;
+    /**
+     * Called before gate evaluation.
+     * Return a PluginGateOverride to short-circuit (allow or deny without
+     * normal checks). Return null to continue with normal evaluation.
+     */
+    beforeGate?: (context: PluginGateContext) => PluginGateOverride | null;
+    /**
+     * Called after gate evaluation.
+     * Receives the context and the gate's decision. Return the (possibly
+     * modified) decision. Plugins run in order and each sees the previous
+     * plugin's output.
+     */
+    afterGate?: (context: PluginGateContext, decision: GateDecision) => GateDecision;
+    /**
+     * Called when a tool call is denied (fire-and-forget).
+     * Useful for logging, monitoring, or alerting.
+     */
+    onDeny?: (context: PluginGateContext, reason: string) => void;
+    /**
+     * Override tool pricing dynamically.
+     * Return the new price in credits, or null to use the default price.
+     * First plugin to return non-null wins.
+     */
+    transformPrice?: (toolName: string, basePrice: number, args?: Record<string, unknown>) => number | null;
+    /**
+     * Called before a tool call is forwarded to the MCP server.
+     * Can modify the request. Return the (possibly modified) request.
+     */
+    beforeToolCall?: (context: PluginToolContext) => Promise<JsonRpcRequest> | JsonRpcRequest;
+    /**
+     * Called after a tool call response is received from the MCP server.
+     * Can modify the response. Return the (possibly modified) response.
+     */
+    afterToolCall?: (context: PluginToolContext, response: JsonRpcResponse) => Promise<JsonRpcResponse> | JsonRpcResponse;
+    /**
+     * Called for each HTTP request before normal routing.
+     * Return true if the request was handled (response already sent).
+     * Return false to continue with normal routing.
+     * Use this to add custom endpoints to the server.
+     */
+    onRequest?: (req: IncomingMessage, res: ServerResponse) => boolean | Promise<boolean>;
+}
+export declare class PluginManager {
+    private plugins;
+    /** Register a plugin. Plugins run in registration order. */
+    register(plugin: PayGatePlugin): void;
+    /** Unregister a plugin by name. Returns true if found and removed. */
+    unregister(name: string): boolean;
+    /** List all registered plugins with their hooks. */
+    list(): PluginInfo[];
+    /** Number of registered plugins. */
+    get count(): number;
+    /**
+     * Execute beforeGate hooks in order.
+     * First non-null result short-circuits the gate.
+     */
+    executeBeforeGate(context: PluginGateContext): PluginGateOverride | null;
+    /**
+     * Execute afterGate hooks in order.
+     * Each plugin can modify the decision; changes cascade through.
+     */
+    executeAfterGate(context: PluginGateContext, decision: GateDecision): GateDecision;
+    /**
+     * Execute onDeny hooks (fire-and-forget).
+     */
+    executeOnDeny(context: PluginGateContext, reason: string): void;
+    /**
+     * Execute transformPrice hooks. First non-null result wins.
+     */
+    executeTransformPrice(toolName: string, basePrice: number, args?: Record<string, unknown>): number;
+    /**
+     * Execute beforeToolCall hooks in order.
+     * Each can modify the request; changes cascade.
+     */
+    executeBeforeToolCall(context: PluginToolContext): Promise<JsonRpcRequest>;
+    /**
+     * Execute afterToolCall hooks in order.
+     * Each can modify the response; changes cascade.
+     */
+    executeAfterToolCall(context: PluginToolContext, response: JsonRpcResponse): Promise<JsonRpcResponse>;
+    /**
+     * Execute onRequest hooks. First handler returning true wins.
+     */
+    executeOnRequest(req: IncomingMessage, res: ServerResponse): Promise<boolean>;
+    /**
+     * Execute onStart hooks for all plugins.
+     */
+    executeStart(): Promise<void>;
+    /**
+     * Execute onStop hooks for all plugins (in reverse order for clean teardown).
+     */
+    executeStop(): Promise<void>;
+    private getPluginHooks;
+}
+//# sourceMappingURL=plugin.d.ts.map

package/dist/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AAIvD,0CAA0C;AAC1C,MAAM,WAAW,iBAAiB;IAChC,oCAAoC;IACpC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,wBAAwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B;AAED,0CAA0C;AAC1C,MAAM,WAAW,iBAAiB;IAChC,kBAAkB;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,2CAA2C;IAC3C,OAAO,EAAE,cAAc,CAAC;CACzB;AAED,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,6CAA6C;IAC7C,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,sCAAsC;AACtC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAID,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IAIjB,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAIpC;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,kBAAkB,GAAG,IAAI,CAAC;IAEvE;;;;;OAKG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,KAAK,YAAY,CAAC;IAEjF;;;OAGG;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAE9D;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,GAAG,IAAI,CAAC;IAIxG;;;OAGG;IACH,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,cAAc,CAAC,GAAG,cAAc,CAAC;IAE1F;;;OAGG;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAAC;IAItH;;;;;OAKG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvF;AAID,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAAuB;IAEtC,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;IAUrC,sEAAsE;IACtE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAOjC,oDAAoD;IACpD,IAAI,IAAI,UAAU,EAAE;IAQpB,oCAAoC;IACpC,IAAI,KAAK,IAAI,MAAM,CAElB;IAID;;;OAGG;IACH,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,GAAG,kBAAkB,GAAG,IAAI;IAcxE;;;OAGG;IACH,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,GAAG,YAAY;IAclF;;OAEG;IACH,aAAa,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAY/D;;OAEG;IACH,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM;IAkBlG;;;OAGG;IACG,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC;IAchF;;;OAGG;IACG,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAgB3G;;OAEG;IACG,gBAAgB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBnF;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAQnC;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAelC,OAAO,CAAC,cAAc;CAavB"}