project-cpu-mcp 0.9.1 → 0.11.1

package/dist/paybox/auth/authority.js

@@ -0,0 +1,410 @@
+import { getAddress } from 'viem';
+import { PAYBOX_SCHEMA_VERSION, PAYBOX_TOKEN_REFRESH_WINDOW_MS } from '../constants.js';
+import { payboxRefreshState, withPayboxRefreshState } from './coordinator.utils.js';
+import { PayboxAuthInvalidError, PayboxFullAccessWalletRequiredError, PayboxTemporarilyUnavailableError, PayboxWalletSelectionError, } from '../errors.js';
+import { PayboxAuthStatus, PayboxErrorCode, PayboxRefreshFailureDisposition, PayboxRefreshState, PayboxResetCause, PayboxSelectionPhase, } from '../types.js';
+export class PayboxAuthority {
+    options;
+    onInvalidated;
+    wallet = null;
+    walletGeneration = null;
+    address = null;
+    authenticating = null;
+    restoring = null;
+    continuing = null;
+    material = null;
+    selection = null;
+    credentialId = null;
+    refreshing = null;
+    refreshPersistenceError = null;
+    generation = 0;
+    constructor(options, onInvalidated) {
+        this.options = options;
+        this.onInvalidated = onInvalidated;
+        const stored = options.storage.load();
+        if (stored?.tokens === null || stored?.signingKey === null || stored === null)
+            return;
+        if (payboxRefreshState(stored) === PayboxRefreshState.ExchangePending) {
+            this.refreshPersistenceError = new PayboxTemporarilyUnavailableError(null, PayboxRefreshFailureDisposition.Ambiguous);
+        }
+        this.material = { tokens: stored.tokens, signingKey: stored.signingKey };
+        if (stored.credentialId === null || stored.address === null)
+            return;
+        this.credentialId = stored.credentialId;
+        this.address = stored.address;
+        this.wallet = this.createWallet(this.material, stored.credentialId, stored.address, this.generation);
+        this.walletGeneration = this.generation;
+    }
+    isReady() {
+        return this.wallet !== null && this.walletGeneration === this.generation;
+    }
+    get() {
+        if (!this.isReady() || this.wallet === null) {
+            throw new Error('Paybox wallet is not authenticated. Call cpu_authenticate first.');
+        }
+        return this.wallet;
+    }
+    hasMaterial() {
+        return this.material !== null;
+    }
+    async authenticate(material, requestedCredentialId) {
+        if (material !== null) {
+            return this.continueAuthentication(material, requestedCredentialId, this.generation);
+        }
+        if (this.isReady())
+            return this.authenticateReadyWallet(requestedCredentialId);
+        const generation = await this.refreshIfExpiring();
+        if (this.material === null)
+            throw new Error('Paybox auth material is unavailable.');
+        return this.continueAuthentication(this.material, requestedCredentialId, generation);
+    }
+    reset() {
+        const authentication = this.authenticating;
+        this.generation += 1;
+        this.wallet = null;
+        this.walletGeneration = null;
+        this.address = null;
+        this.authenticating = null;
+        this.restoring = null;
+        this.continuing = null;
+        this.material = null;
+        this.selection = null;
+        this.credentialId = null;
+        this.refreshing = null;
+        this.refreshPersistenceError = null;
+        authentication?.controller.abort(new Error('Paybox authentication was invalidated.'));
+        let resetError = null;
+        for (const clear of [() => this.options.storage.clear(), () => this.options.authenticator.clearSession()]) {
+            try {
+                clear();
+            }
+            catch (error) {
+                resetError ??= error instanceof Error ? error : new Error('Paybox authentication reset failed.');
+            }
+        }
+        if (resetError !== null)
+            throw resetError;
+    }
+    async authenticateReadyWallet(requestedCredentialId) {
+        this.assertNoWalletSelection(requestedCredentialId);
+        if (this.wallet === null || this.address === null || this.credentialId === null) {
+            throw new Error('Paybox Wallet identity is incomplete.');
+        }
+        const generation = await this.refreshIfExpiring();
+        if (!this.isReady() || this.wallet === null || this.material === null) {
+            throw new Error('Paybox Wallet restoration failed.');
+        }
+        return this.authenticateRestored(this.wallet, this.material, generation, this.credentialId, this.address);
+    }
+    assertNoWalletSelection(requestedCredentialId) {
+        if (requestedCredentialId !== null) {
+            throw new PayboxWalletSelectionError(PayboxErrorCode.WalletSelectionNotPending);
+        }
+    }
+    authenticateRestored(wallet, material, generation, credentialId, address) {
+        if (this.restoring !== null) {
+            if (this.restoring.generation === generation &&
+                this.restoring.credentialId === credentialId &&
+                this.restoring.address === address) {
+                return this.restoring.promise;
+            }
+            throw new Error('Paybox authentication is already in progress for another Wallet.');
+        }
+        const authentication = this.runRestoredAuthentication(wallet, material, generation, credentialId, address);
+        this.restoring = { credentialId, address, generation, promise: authentication };
+        return authentication;
+    }
+    async runRestoredAuthentication(wallet, material, generation, credentialId, address) {
+        try {
+            const discovery = await this.options.sdk.listEligibleAutonomousEvmGrants(material.tokens, material.signingKey);
+            this.assertCurrent(generation);
+            const selected = discovery.grants.find((grant) => grant.credentialId === credentialId);
+            if (selected === undefined || getAddress(selected.address) !== address) {
+                throw new PayboxAuthInvalidError('The selected Paybox Wallet grant is no longer valid.', PayboxResetCause.SelectedGrantMissing);
+            }
+            await this.authenticateFresh(wallet, generation, credentialId, address);
+            this.assertCurrent(generation);
+            return { status: PayboxAuthStatus.Authenticated, address };
+        }
+        finally {
+            if (this.restoring?.generation === generation &&
+                this.restoring.credentialId === credentialId &&
+                this.restoring.address === address) {
+                this.restoring = null;
+            }
+        }
+    }
+    continueAuthentication(material, requestedCredentialId, generation) {
+        if (this.continuing !== null) {
+            if (this.continuing.generation !== generation || this.continuing.material !== material) {
+                throw new Error('Paybox authentication is already in progress for another auth state.');
+            }
+            if (this.continuing.requestedCredentialId === requestedCredentialId ||
+                (requestedCredentialId === null && this.continuing.requestedCredentialId !== null)) {
+                return this.continuing.promise;
+            }
+            throw new PayboxWalletSelectionError(PayboxErrorCode.WalletSelectionNotPending);
+        }
+        const continuation = this.runContinuation(material, requestedCredentialId, generation);
+        this.continuing = { material, requestedCredentialId, generation, promise: continuation };
+        return continuation;
+    }
+    async runContinuation(material, requestedCredentialId, generation) {
+        try {
+            return await this.continueWithMaterial(material, requestedCredentialId, generation);
+        }
+        finally {
+            if (this.continuing?.generation === generation &&
+                this.continuing.material === material &&
+                this.continuing.requestedCredentialId === requestedCredentialId) {
+                this.continuing = null;
+            }
+        }
+    }
+    async continueWithMaterial(material, requestedCredentialId, generation) {
+        if (this.selection?.phase === PayboxSelectionPhase.Activating) {
+            if (requestedCredentialId === null || this.selection.credentialId === requestedCredentialId) {
+                return this.selection.promise;
+            }
+            throw new PayboxWalletSelectionError(PayboxErrorCode.WalletSelectionNotPending);
+        }
+        if (this.selection?.phase === PayboxSelectionPhase.AwaitingChoice) {
+            if (requestedCredentialId === null) {
+                return { status: PayboxAuthStatus.WalletSelectionRequired, choices: this.selection.choices };
+            }
+            const choices = this.selection.choices;
+            const activation = this.selectGrant(material, requestedCredentialId, choices, generation);
+            this.selection = {
+                phase: PayboxSelectionPhase.Activating,
+                choices,
+                credentialId: requestedCredentialId,
+                promise: activation,
+            };
+            return activation;
+        }
+        if (requestedCredentialId !== null) {
+            throw new PayboxWalletSelectionError(PayboxErrorCode.WalletSelectionNotPending);
+        }
+        const discovery = await this.options.sdk.listEligibleAutonomousEvmGrants(material.tokens, material.signingKey);
+        this.assertCurrent(generation);
+        if (discovery.grants.length === 0) {
+            this.rememberMaterial(material);
+            throw new PayboxFullAccessWalletRequiredError(discovery.managementUrl);
+        }
+        if (discovery.grants.length > 1) {
+            this.rememberMaterial(material);
+            this.selection = { phase: PayboxSelectionPhase.AwaitingChoice, choices: discovery.grants };
+            return { status: PayboxAuthStatus.WalletSelectionRequired, choices: discovery.grants };
+        }
+        return this.activateGrant(material, discovery.grants[0], generation);
+    }
+    async selectGrant(material, requestedCredentialId, previousChoices, generation) {
+        let discovery;
+        try {
+            discovery = await this.options.sdk.listEligibleAutonomousEvmGrants(material.tokens, material.signingKey);
+            this.assertCurrent(generation);
+        }
+        catch (error) {
+            this.restoreSelection(requestedCredentialId, previousChoices, generation);
+            throw error;
+        }
+        const selected = discovery.grants.find((grant) => grant.credentialId === requestedCredentialId);
+        if (selected === undefined) {
+            if (this.isSelectionActivation(requestedCredentialId, generation)) {
+                this.selection =
+                    discovery.grants.length === 0
+                        ? null
+                        : { phase: PayboxSelectionPhase.AwaitingChoice, choices: discovery.grants };
+            }
+            throw new PayboxWalletSelectionError(PayboxErrorCode.WalletSelectionInvalid);
+        }
+        try {
+            return await this.activateGrant(material, selected, generation);
+        }
+        catch (error) {
+            this.restoreSelection(requestedCredentialId, discovery.grants, generation);
+            throw error;
+        }
+    }
+    async activateGrant(material, grant, generation) {
+        const address = getAddress(grant.address);
+        const wallet = this.createWallet(material, grant.credentialId, address, generation);
+        await this.authenticateFresh(wallet, generation, grant.credentialId, address);
+        this.assertCurrent(generation);
+        this.options.storage.save({
+            version: PAYBOX_SCHEMA_VERSION,
+            tokens: material.tokens,
+            signingKey: material.signingKey,
+            credentialId: grant.credentialId,
+            address,
+        });
+        this.wallet = wallet;
+        this.walletGeneration = generation;
+        this.address = address;
+        this.credentialId = grant.credentialId;
+        this.material = material;
+        this.selection = null;
+        return { status: PayboxAuthStatus.Authenticated, address };
+    }
+    rememberMaterial(material) {
+        this.options.storage.save({
+            version: PAYBOX_SCHEMA_VERSION,
+            tokens: material.tokens,
+            signingKey: material.signingKey,
+            credentialId: null,
+            address: null,
+        });
+        this.material = material;
+    }
+    async refreshIfExpiring() {
+        if (this.refreshPersistenceError !== null)
+            throw this.refreshPersistenceError;
+        const material = this.material;
+        if (material === null ||
+            material.tokens.expiresAt === null ||
+            material.tokens.expiresAt > Date.now() + PAYBOX_TOKEN_REFRESH_WINDOW_MS) {
+            return this.generation;
+        }
+        if (this.refreshing !== null) {
+            await this.refreshing.promise;
+            return this.generation;
+        }
+        const generation = this.generation;
+        const refresh = this.rotateTokens(material, generation);
+        const flight = { generation, promise: refresh };
+        this.refreshing = flight;
+        try {
+            await refresh;
+        }
+        finally {
+            if (this.refreshing === flight)
+                this.refreshing = null;
+        }
+        return this.generation;
+    }
+    async rotateTokens(material, generation) {
+        if (material.tokens.refreshToken === null) {
+            throw new PayboxAuthInvalidError('Paybox OAuth refresh token is unavailable.', PayboxResetCause.InvalidRefresh);
+        }
+        const currentRecord = this.record(material);
+        this.options.storage.save(withPayboxRefreshState(currentRecord, PayboxRefreshState.ExchangePending));
+        let tokens;
+        try {
+            tokens = await this.options.sdk.refreshTokens(material.tokens);
+        }
+        catch (error) {
+            const refreshError = error instanceof Error ? error : new Error('Paybox OAuth tokens could not be refreshed safely.');
+            if (this.generation === generation)
+                this.recoverRefreshFailure(currentRecord, refreshError);
+            throw refreshError;
+        }
+        this.assertCurrent(generation);
+        const refreshed = { tokens, signingKey: material.signingKey };
+        try {
+            this.options.storage.save(this.record(refreshed));
+        }
+        catch (error) {
+            this.refreshPersistenceError =
+                error instanceof Error ? error : new Error('Rotated Paybox OAuth tokens could not be persisted.');
+            throw this.refreshPersistenceError;
+        }
+        this.assertCurrent(generation);
+        this.material = refreshed;
+    }
+    recoverRefreshFailure(currentRecord, refreshError) {
+        if (!(refreshError instanceof PayboxTemporarilyUnavailableError)) {
+            this.refreshPersistenceError = refreshError;
+            return;
+        }
+        try {
+            this.options.storage.save(withPayboxRefreshState(currentRecord, PayboxRefreshState.Ready));
+            this.refreshPersistenceError = null;
+        }
+        catch (error) {
+            this.refreshPersistenceError =
+                error instanceof Error ? error : new Error('Paybox refresh recovery could not be persisted.');
+            throw this.refreshPersistenceError;
+        }
+    }
+    record(material) {
+        return {
+            version: PAYBOX_SCHEMA_VERSION,
+            tokens: material.tokens,
+            signingKey: material.signingKey,
+            credentialId: this.credentialId,
+            address: this.address,
+        };
+    }
+    createWallet(material, credentialId, address, generation) {
+        return this.options.sdk.createWallet(material.tokens, material.signingKey, credentialId, address, this.walletAuthority(material, credentialId, address, generation));
+    }
+    walletAuthority(candidate, credentialId, address, generation) {
+        let authorityGeneration = generation;
+        return {
+            current: async () => {
+                this.assertCurrent(authorityGeneration);
+                if (this.credentialId === credentialId && this.address === address) {
+                    await this.refreshIfExpiring();
+                    if (this.credentialId !== credentialId || this.address !== address || this.material === null) {
+                        throw new Error('Paybox Wallet authority was invalidated.');
+                    }
+                    authorityGeneration = this.generation;
+                    return this.material;
+                }
+                return candidate;
+            },
+            invalidate: () => {
+                if (this.generation !== authorityGeneration)
+                    return;
+                try {
+                    this.reset();
+                }
+                finally {
+                    this.onInvalidated();
+                }
+            },
+        };
+    }
+    async authenticateFresh(wallet, generation, credentialId, address) {
+        if (this.authenticating !== null) {
+            if (this.authenticating.generation === generation &&
+                this.authenticating.credentialId === credentialId &&
+                this.authenticating.address === address) {
+                return this.authenticating.promise;
+            }
+            throw new Error('Paybox authentication is already in progress for another Wallet.');
+        }
+        const controller = new AbortController();
+        const authentication = this.options.authenticator.authenticate(wallet, controller.signal);
+        const flight = {
+            credentialId,
+            address,
+            generation,
+            controller,
+            promise: authentication,
+        };
+        this.authenticating = flight;
+        try {
+            return await authentication;
+        }
+        finally {
+            if (this.authenticating === flight)
+                this.authenticating = null;
+        }
+    }
+    restoreSelection(requestedCredentialId, choices, generation) {
+        if (this.isSelectionActivation(requestedCredentialId, generation)) {
+            this.selection = { phase: PayboxSelectionPhase.AwaitingChoice, choices };
+        }
+    }
+    isSelectionActivation(requestedCredentialId, generation) {
+        return (this.generation === generation &&
+            this.selection?.phase === PayboxSelectionPhase.Activating &&
+            this.selection.credentialId === requestedCredentialId);
+    }
+    assertCurrent(generation) {
+        if (this.generation !== generation)
+            throw new Error('Paybox authentication was invalidated.');
+    }
+}
+//# sourceMappingURL=authority.js.map

package/dist/paybox/auth/authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.js","sourceRoot":"","sources":["../../../src/paybox/auth/authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAgB,MAAM,MAAM,CAAC;AAEhD,OAAO,EAAE,qBAAqB,EAAE,8BAA8B,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAGpF,OAAO,EACH,sBAAsB,EACtB,mCAAmC,EACnC,iCAAiC,EACjC,0BAA0B,GAC7B,MAAM,cAAc,CAAC;AACtB,OAAO,EACH,gBAAgB,EAChB,eAAe,EACf,+BAA+B,EAC/B,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,GAWvB,MAAM,aAAa,CAAC;AAErB,MAAM,OAAO,eAAe;IAeH;IACA;IAfb,MAAM,GAAyB,IAAI,CAAC;IACpC,gBAAgB,GAAkB,IAAI,CAAC;IACvC,OAAO,GAAmB,IAAI,CAAC;IAC/B,cAAc,GAAsC,IAAI,CAAC;IACzD,SAAS,GAA8C,IAAI,CAAC;IAC5D,UAAU,GAAoC,IAAI,CAAC;IACnD,QAAQ,GAA8B,IAAI,CAAC;IAC3C,SAAS,GAAgC,IAAI,CAAC;IAC9C,YAAY,GAAkB,IAAI,CAAC;IACnC,UAAU,GAA+B,IAAI,CAAC;IAC9C,uBAAuB,GAAiB,IAAI,CAAC;IAC7C,UAAU,GAAG,CAAC,CAAC;IAEvB,YACqB,OAA+B,EAC/B,aAAyB;QADzB,YAAO,GAAP,OAAO,CAAwB;QAC/B,kBAAa,GAAb,aAAa,CAAY;QAE1C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,MAAM,EAAE,MAAM,KAAK,IAAI,IAAI,MAAM,EAAE,UAAU,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO;QACtF,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,kBAAkB,CAAC,eAAe,EAAE,CAAC;YACpE,IAAI,CAAC,uBAAuB,GAAG,IAAI,iCAAiC,CAChE,IAAI,EACJ,+BAA+B,CAAC,SAAS,CAC5C,CAAC;QACN,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QACzE,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO;QACpE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACrG,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC;IAC5C,CAAC;IAED,OAAO;QACH,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,UAAU,CAAC;IAC7E,CAAC;IAED,GAAG;QACC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACvB,CAAC;IAED,WAAW;QACP,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,YAAY,CACd,QAAmC,EACnC,qBAAoC;QAEpC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,qBAAqB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO,IAAI,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;QAC/E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,qBAAqB,EAAE,UAAU,CAAC,CAAC;IACzF,CAAC;IAED,KAAK;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC3C,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC;QACpC,cAAc,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;QACtF,IAAI,UAAU,GAAiB,IAAI,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC;YACxG,IAAI,CAAC;gBACD,KAAK,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,UAAU,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACrG,CAAC;QACL,CAAC;QACD,IAAI,UAAU,KAAK,IAAI;YAAE,MAAM,UAAU,CAAC;IAC9C,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,qBAAoC;QACtE,IAAI,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9G,CAAC;IAEO,uBAAuB,CAAC,qBAAoC;QAChE,IAAI,qBAAqB,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,0BAA0B,CAAC,eAAe,CAAC,yBAAyB,CAAC,CAAC;QACpF,CAAC;IACL,CAAC;IAEO,oBAAoB,CACxB,MAAqB,EACrB,QAA4B,EAC5B,UAAkB,EAClB,YAAoB,EACpB,OAAgB;QAEhB,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC1B,IACI,IAAI,CAAC,SAAS,CAAC,UAAU,KAAK,UAAU;gBACxC,IAAI,CAAC,SAAS,CAAC,YAAY,KAAK,YAAY;gBAC5C,IAAI,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,EACpC,CAAC;gBACC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAClC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QAC3G,IAAI,CAAC,SAAS,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;QAChF,OAAO,cAAc,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACnC,MAAqB,EACrB,QAA4B,EAC5B,UAAkB,EAClB,YAAoB,EACpB,OAAgB;QAEhB,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CACpE,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,UAAU,CACtB,CAAC;YACF,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;YACvF,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,OAAO,EAAE,CAAC;gBACrE,MAAM,IAAI,sBAAsB,CAC5B,sDAAsD,EACtD,gBAAgB,CAAC,oBAAoB,CACxC,CAAC;YACN,CAAC;YACD,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;YACxE,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YAC/B,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAC/D,CAAC;gBAAS,CAAC;YACP,IACI,IAAI,CAAC,SAAS,EAAE,UAAU,KAAK,UAAU;gBACzC,IAAI,CAAC,SAAS,CAAC,YAAY,KAAK,YAAY;gBAC5C,IAAI,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,EACpC,CAAC;gBACC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YAC1B,CAAC;QACL,CAAC;IACL,CAAC;IAEO,sBAAsB,CAC1B,QAA4B,EAC5B,qBAAoC,EACpC,UAAkB;QAElB,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACrF,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YAC5F,CAAC;YACD,IACI,IAAI,CAAC,UAAU,CAAC,qBAAqB,KAAK,qBAAqB;gBAC/D,CAAC,qBAAqB,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,qBAAqB,KAAK,IAAI,CAAC,EACpF,CAAC;gBACC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YACnC,CAAC;YACD,MAAM,IAAI,0BAA0B,CAAC,eAAe,CAAC,yBAAyB,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,qBAAqB,EAAE,UAAU,CAAC,CAAC;QACvF,IAAI,CAAC,UAAU,GAAG,EAAE,QAAQ,EAAE,qBAAqB,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QACzF,OAAO,YAAY,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,eAAe,CACzB,QAA4B,EAC5B,qBAAoC,EACpC,UAAkB;QAElB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,qBAAqB,EAAE,UAAU,CAAC,CAAC;QACxF,CAAC;gBAAS,CAAC;YACP,IACI,IAAI,CAAC,UAAU,EAAE,UAAU,KAAK,UAAU;gBAC1C,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,QAAQ;gBACrC,IAAI,CAAC,UAAU,CAAC,qBAAqB,KAAK,qBAAqB,EACjE,CAAC;gBACC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YAC3B,CAAC;QACL,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAC9B,QAA4B,EAC5B,qBAAoC,EACpC,UAAkB;QAElB,IAAI,IAAI,CAAC,SAAS,EAAE,KAAK,KAAK,oBAAoB,CAAC,UAAU,EAAE,CAAC;YAC5D,IAAI,qBAAqB,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY,KAAK,qBAAqB,EAAE,CAAC;gBAC1F,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAClC,CAAC;YACD,MAAM,IAAI,0BAA0B,CAAC,eAAe,CAAC,yBAAyB,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,KAAK,KAAK,oBAAoB,CAAC,cAAc,EAAE,CAAC;YAChE,IAAI,qBAAqB,KAAK,IAAI,EAAE,CAAC;gBACjC,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,uBAAuB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACjG,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YACvC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,qBAAqB,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAC1F,IAAI,CAAC,SAAS,GAAG;gBACb,KAAK,EAAE,oBAAoB,CAAC,UAAU;gBACtC,OAAO;gBACP,YAAY,EAAE,qBAAqB;gBACnC,OAAO,EAAE,UAAU;aACtB,CAAC;YACF,OAAO,UAAU,CAAC;QACtB,CAAC;QACD,IAAI,qBAAqB,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,0BAA0B,CAAC,eAAe,CAAC,yBAAyB,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC/G,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAC/B,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,IAAI,mCAAmC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,CAAC,SAAS,GAAG,EAAE,KAAK,EAAE,oBAAoB,CAAC,cAAc,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;YAC3F,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,uBAAuB,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;QAC3F,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAwB,EAAE,UAAU,CAAC,CAAC;IAChG,CAAC;IAEO,KAAK,CAAC,WAAW,CACrB,QAA4B,EAC5B,qBAA6B,EAC7B,eAA2C,EAC3C,UAAkB;QAElB,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YACD,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;YACzG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;YAC1E,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,qBAAqB,CAAC,CAAC;QAChG,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,qBAAqB,CAAC,qBAAqB,EAAE,UAAU,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,SAAS;oBACV,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;wBACzB,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,EAAE,KAAK,EAAE,oBAAoB,CAAC,cAAc,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;YACxF,CAAC;YACD,MAAM,IAAI,0BAA0B,CAAC,eAAe,CAAC,sBAAsB,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC3E,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CACvB,QAA4B,EAC5B,KAA0B,EAC1B,UAAkB;QAElB,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACpF,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC9E,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YACtB,OAAO,EAAE,qBAAqB;YAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO;SACV,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;IAC/D,CAAC;IAEO,gBAAgB,CAAC,QAA4B;QACjD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YACtB,OAAO,EAAE,qBAAqB;YAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC3B,IAAI,IAAI,CAAC,uBAAuB,KAAK,IAAI;YAAE,MAAM,IAAI,CAAC,uBAAuB,CAAC;QAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IACI,QAAQ,KAAK,IAAI;YACjB,QAAQ,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI;YAClC,QAAQ,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,8BAA8B,EACzE,CAAC;YACC,OAAO,IAAI,CAAC,UAAU,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAC9B,OAAO,IAAI,CAAC,UAAU,CAAC;QAC3B,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,MAAM,GAAwB,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACrE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;QACzB,IAAI,CAAC;YACD,MAAM,OAAO,CAAC;QAClB,CAAC;gBAAS,CAAC;YACP,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM;gBAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QAC3D,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAA4B,EAAE,UAAkB;QACvE,IAAI,QAAQ,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,sBAAsB,CAC5B,4CAA4C,EAC5C,gBAAgB,CAAC,cAAc,CAClC,CAAC;QACN,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,aAAa,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC,CAAC;QACrG,IAAI,MAAoC,CAAC;QACzC,IAAI,CAAC;YACD,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,YAAY,GACd,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACrG,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU;gBAAE,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;YAC5F,MAAM,YAAY,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAuB,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;QAClF,IAAI,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,uBAAuB;gBACxB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACtG,MAAM,IAAI,CAAC,uBAAuB,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;IAC9B,CAAC;IAEO,qBAAqB,CAAC,aAA+B,EAAE,YAAmB;QAC9E,IAAI,CAAC,CAAC,YAAY,YAAY,iCAAiC,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,uBAAuB,GAAG,YAAY,CAAC;YAC5C,OAAO;QACX,CAAC;QACD,IAAI,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,aAAa,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3F,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,uBAAuB;gBACxB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YAClG,MAAM,IAAI,CAAC,uBAAuB,CAAC;QACvC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,QAA4B;QACvC,OAAO;YACH,OAAO,EAAE,qBAAqB;YAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;SACxB,CAAC;IACN,CAAC;IAEO,YAAY,CAChB,QAA4B,EAC5B,YAAoB,EACpB,OAAgB,EAChB,UAAkB;QAElB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAChC,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,UAAU,EACnB,YAAY,EACZ,OAAO,EACP,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,CAAC,CACpE,CAAC;IACN,CAAC;IAEO,eAAe,CACnB,SAA6B,EAC7B,YAAoB,EACpB,OAAgB,EAChB,UAAkB;QAElB,IAAI,mBAAmB,GAAG,UAAU,CAAC;QACrC,OAAO;YACH,OAAO,EAAE,KAAK,IAAI,EAAE;gBAChB,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;gBACxC,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;oBACjE,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBAC/B,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;wBAC3F,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;oBAChE,CAAC;oBACD,mBAAmB,GAAG,IAAI,CAAC,UAAU,CAAC;oBACtC,OAAO,IAAI,CAAC,QAAQ,CAAC;gBACzB,CAAC;gBACD,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,UAAU,EAAE,GAAG,EAAE;gBACb,IAAI,IAAI,CAAC,UAAU,KAAK,mBAAmB;oBAAE,OAAO;gBACpD,IAAI,CAAC;oBACD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC;wBAAS,CAAC;oBACP,IAAI,CAAC,aAAa,EAAE,CAAC;gBACzB,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC3B,MAAqB,EACrB,UAAkB,EAClB,YAAoB,EACpB,OAAe;QAEf,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YAC/B,IACI,IAAI,CAAC,cAAc,CAAC,UAAU,KAAK,UAAU;gBAC7C,IAAI,CAAC,cAAc,CAAC,YAAY,KAAK,YAAY;gBACjD,IAAI,CAAC,cAAc,CAAC,OAAO,KAAK,OAAO,EACzC,CAAC;gBACC,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YACvC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1F,MAAM,MAAM,GAA+B;YACvC,YAAY;YACZ,OAAO;YACP,UAAU;YACV,UAAU;YACV,OAAO,EAAE,cAAc;SAC1B,CAAC;QACF,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;QAC7B,IAAI,CAAC;YACD,OAAO,MAAM,cAAc,CAAC;QAChC,CAAC;gBAAS,CAAC;YACP,IAAI,IAAI,CAAC,cAAc,KAAK,MAAM;gBAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QACnE,CAAC;IACL,CAAC;IAEO,gBAAgB,CACpB,qBAA6B,EAC7B,OAAmC,EACnC,UAAkB;QAElB,IAAI,IAAI,CAAC,qBAAqB,CAAC,qBAAqB,EAAE,UAAU,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,SAAS,GAAG,EAAE,KAAK,EAAE,oBAAoB,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC;QAC7E,CAAC;IACL,CAAC;IAEO,qBAAqB,CAAC,qBAA6B,EAAE,UAAkB;QAC3E,OAAO,CACH,IAAI,CAAC,UAAU,KAAK,UAAU;YAC9B,IAAI,CAAC,SAAS,EAAE,KAAK,KAAK,oBAAoB,CAAC,UAAU;YACzD,IAAI,CAAC,SAAS,CAAC,YAAY,KAAK,qBAAqB,CACxD,CAAC;IACN,CAAC;IAEO,aAAa,CAAC,UAAkB;QACpC,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAClG,CAAC;CACJ"}

package/dist/paybox/auth/browser-opener.d.ts

@@ -0,0 +1,8 @@
+import type { IPayboxBrowserOpener, PayboxBrowserSpawn } from '../types.js';
+export declare class SystemBrowserOpener implements IPayboxBrowserOpener {
+    private readonly platform;
+    private readonly spawnProcess;
+    constructor(platform?: NodeJS.Platform, spawnProcess?: PayboxBrowserSpawn);
+    open(url: string): void;
+}
+//# sourceMappingURL=browser-opener.d.ts.map

package/dist/paybox/auth/browser-opener.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-opener.d.ts","sourceRoot":"","sources":["../../../src/paybox/auth/browser-opener.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE5E,qBAAa,mBAAoB,YAAW,oBAAoB;IAExD,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY;gBADZ,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,YAAY,GAAE,kBAA0B;IAGtD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;CAUjC"}

package/dist/paybox/auth/browser-opener.js

@@ -0,0 +1,22 @@
+import { spawn } from 'node:child_process';
+import { browserLaunchCommand } from './browser-opener.utils.js';
+export class SystemBrowserOpener {
+    platform;
+    spawnProcess;
+    constructor(platform = process.platform, spawnProcess = spawn) {
+        this.platform = platform;
+        this.spawnProcess = spawnProcess;
+    }
+    open(url) {
+        const [command, args] = browserLaunchCommand(url, this.platform);
+        try {
+            const child = this.spawnProcess(command, args, { stdio: 'ignore', detached: true });
+            child.once('error', () => undefined);
+            child.unref();
+        }
+        catch {
+            // The authorization URL returned to the caller remains the headless fallback.
+        }
+    }
+}
+//# sourceMappingURL=browser-opener.js.map

package/dist/paybox/auth/browser-opener.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-opener.js","sourceRoot":"","sources":["../../../src/paybox/auth/browser-opener.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE,MAAM,OAAO,mBAAmB;IAEP;IACA;IAFrB,YACqB,WAA4B,OAAO,CAAC,QAAQ,EAC5C,eAAmC,KAAK;QADxC,aAAQ,GAAR,QAAQ,CAAoC;QAC5C,iBAAY,GAAZ,YAAY,CAA4B;IAC1D,CAAC;IAEG,IAAI,CAAC,GAAW;QACnB,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACrC,KAAK,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACL,8EAA8E;QAClF,CAAC;IACL,CAAC;CACJ"}

package/dist/paybox/auth/browser-opener.utils.d.ts

@@ -0,0 +1,2 @@
+export declare function browserLaunchCommand(url: string, platform: NodeJS.Platform): readonly [string, ReadonlyArray<string>];
+//# sourceMappingURL=browser-opener.utils.d.ts.map

package/dist/paybox/auth/browser-opener.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-opener.utils.d.ts","sourceRoot":"","sources":["../../../src/paybox/auth/browser-opener.utils.ts"],"names":[],"mappings":"AAAA,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAQrH"}

package/dist/paybox/auth/browser-opener.utils.js

@@ -0,0 +1,10 @@
+export function browserLaunchCommand(url, platform) {
+    if (platform === 'darwin') {
+        return ['open', [url]];
+    }
+    if (platform === 'win32') {
+        return ['rundll32', ['url.dll,FileProtocolHandler', url]];
+    }
+    return ['xdg-open', [url]];
+}
+//# sourceMappingURL=browser-opener.utils.js.map

package/dist/paybox/auth/browser-opener.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-opener.utils.js","sourceRoot":"","sources":["../../../src/paybox/auth/browser-opener.utils.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,QAAyB;IACvE,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,UAAU,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/B,CAAC"}

package/dist/paybox/auth/constants.d.ts

@@ -0,0 +1,16 @@
+export declare const OAUTH_DISCOVERY_PATH = "/.well-known/oauth-authorization-server";
+export declare const OAUTH_SCOPE = "mcp offline_access";
+export declare const PAYBOX_OAUTH_CLIENT_NAME = "Project CPU MCP";
+export declare const OAUTH_CONFIRMED_AUTH_HTTP_STATUSES: Set<number>;
+export declare const LOOPBACK_HOST = "127.0.0.1";
+export declare const LOOPBACK_CALLBACK_PREFIX = "/oauth/callback/";
+export declare const LOOPBACK_KEY_PREFIX = "/oauth/key/";
+export declare const PAYBOX_AGENT_KEY_PATH = "/agent-key";
+export declare const DEFAULT_LOOPBACK_TIMEOUT_MS: number;
+export declare const KEY_BODY_LIMIT_BYTES = 4096;
+export declare const HTML_HEADERS: {
+    'cache-control': string;
+    'content-security-policy': string;
+    'content-type': string;
+};
+//# sourceMappingURL=constants.d.ts.map

package/dist/paybox/auth/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/paybox/auth/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,4CAA4C,CAAC;AAC9E,eAAO,MAAM,WAAW,uBAAuB,CAAC;AAChD,eAAO,MAAM,wBAAwB,oBAAoB,CAAC;AAC1D,eAAO,MAAM,kCAAkC,aAA2B,CAAC;AAC3E,eAAO,MAAM,aAAa,cAAc,CAAC;AACzC,eAAO,MAAM,wBAAwB,qBAAqB,CAAC;AAC3D,eAAO,MAAM,mBAAmB,gBAAgB,CAAC;AACjD,eAAO,MAAM,qBAAqB,eAAe,CAAC;AAClD,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AACzD,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,eAAO,MAAM,YAAY;;;;CAKxB,CAAC"}

package/dist/paybox/auth/constants.js

@@ -0,0 +1,16 @@
+export const OAUTH_DISCOVERY_PATH = '/.well-known/oauth-authorization-server';
+export const OAUTH_SCOPE = 'mcp offline_access';
+export const PAYBOX_OAUTH_CLIENT_NAME = 'Project CPU MCP';
+export const OAUTH_CONFIRMED_AUTH_HTTP_STATUSES = new Set([400, 401, 403]);
+export const LOOPBACK_HOST = '127.0.0.1';
+export const LOOPBACK_CALLBACK_PREFIX = '/oauth/callback/';
+export const LOOPBACK_KEY_PREFIX = '/oauth/key/';
+export const PAYBOX_AGENT_KEY_PATH = '/agent-key';
+export const DEFAULT_LOOPBACK_TIMEOUT_MS = 5 * 60 * 1000;
+export const KEY_BODY_LIMIT_BYTES = 4096;
+export const HTML_HEADERS = {
+    'cache-control': 'no-store',
+    'content-security-policy': "default-src 'none'; style-src 'unsafe-inline'; font-src data:; form-action 'self'; base-uri 'none'",
+    'content-type': 'text/html; charset=utf-8',
+};
+//# sourceMappingURL=constants.js.map

package/dist/paybox/auth/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/paybox/auth/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG,yCAAyC,CAAC;AAC9E,MAAM,CAAC,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAChD,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC;AAC1D,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC;AACzC,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC;AAC3D,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AACjD,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAClD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,YAAY,GAAG;IACxB,eAAe,EAAE,UAAU;IAC3B,yBAAyB,EACrB,oGAAoG;IACxG,cAAc,EAAE,0BAA0B;CAC7C,CAAC"}

package/dist/paybox/auth/coordinator.d.ts

@@ -0,0 +1,21 @@
+import type { ILogger } from '../../logger/types.js';
+import type { WalletManager, WalletProvider } from '../../wallet/types.js';
+import { type PayboxAuthenticateInput, type PayboxAuthenticateResult, type PayboxCoordinatorOptions } from '../types.js';
+/** The sole lifecycle owner: auth transport returns material, this module decides persistence and selection. */
+export declare class PayboxCoordinator implements WalletProvider {
+    private readonly logger;
+    private readonly authFlow;
+    private readonly authority;
+    private forcing;
+    constructor(options: PayboxCoordinatorOptions, logger?: ILogger);
+    isReady(): boolean;
+    get(): WalletManager;
+    authenticate(input: PayboxAuthenticateInput): Promise<PayboxAuthenticateResult>;
+    private runForcedAuthentication;
+    private authenticateForced;
+    private authenticateWithRecovery;
+    private advanceAuthentication;
+    private pollAuthFlow;
+    private resetAuthState;
+}
+//# sourceMappingURL=coordinator.d.ts.map

package/dist/paybox/auth/coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator.d.ts","sourceRoot":"","sources":["../../../src/paybox/auth/coordinator.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAO3E,OAAO,EAGH,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAChC,MAAM,aAAa,CAAC;AAErB,gHAAgH;AAChH,qBAAa,iBAAkB,YAAW,cAAc;IAOhD,OAAO,CAAC,QAAQ,CAAC,MAAM;IAN3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,OAAO,CAAkD;gBAG7D,OAAO,EAAE,wBAAwB,EAChB,MAAM,GAAE,OAA0B;IASvD,OAAO,IAAI,OAAO;IAIlB,GAAG,IAAI,aAAa;IAIpB,YAAY,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC;YAQjE,uBAAuB;YAQvB,kBAAkB;YAKlB,wBAAwB;IAgBtC,OAAO,CAAC,qBAAqB;YAMf,YAAY;IAa1B,OAAO,CAAC,cAAc;CAIzB"}

package/dist/paybox/auth/coordinator.factory.d.ts

@@ -0,0 +1,5 @@
+import { PayboxCoordinator } from './coordinator.js';
+import type { ILogger } from '../../logger/types.js';
+import type { PayboxCoordinatorOptions } from '../types.js';
+export declare function createPayboxCoordinator(options: PayboxCoordinatorOptions, logger: ILogger): PayboxCoordinator;
+//# sourceMappingURL=coordinator.factory.d.ts.map

package/dist/paybox/auth/coordinator.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator.factory.d.ts","sourceRoot":"","sources":["../../../src/paybox/auth/coordinator.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE5D,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,OAAO,GAAG,iBAAiB,CAE7G"}

package/dist/paybox/auth/coordinator.factory.js

@@ -0,0 +1,5 @@
+import { PayboxCoordinator } from './coordinator.js';
+export function createPayboxCoordinator(options, logger) {
+    return new PayboxCoordinator(options, logger.child('paybox:coordinator'));
+}
+//# sourceMappingURL=coordinator.factory.js.map

package/dist/paybox/auth/coordinator.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator.factory.js","sourceRoot":"","sources":["../../../src/paybox/auth/coordinator.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAIrD,MAAM,UAAU,uBAAuB,CAAC,OAAiC,EAAE,MAAe;IACtF,OAAO,IAAI,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAC9E,CAAC"}