toolhome 0.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +295 -0
- package/README.zh.md +281 -0
- package/dist/server/app.d.ts +16 -0
- package/dist/server/app.d.ts.map +1 -0
- package/dist/server/app.js +166 -0
- package/dist/server/app.js.map +1 -0
- package/dist/server/cli/main.d.ts +3 -0
- package/dist/server/cli/main.d.ts.map +1 -0
- package/dist/server/cli/main.js +587 -0
- package/dist/server/cli/main.js.map +1 -0
- package/dist/server/cli-plane/allow-list.d.ts +18 -0
- package/dist/server/cli-plane/allow-list.d.ts.map +1 -0
- package/dist/server/cli-plane/allow-list.js +28 -0
- package/dist/server/cli-plane/allow-list.js.map +1 -0
- package/dist/server/cli-plane/cli-service.d.ts +41 -0
- package/dist/server/cli-plane/cli-service.d.ts.map +1 -0
- package/dist/server/cli-plane/cli-service.js +282 -0
- package/dist/server/cli-plane/cli-service.js.map +1 -0
- package/dist/server/cli-plane/frames.d.ts +26 -0
- package/dist/server/cli-plane/frames.d.ts.map +1 -0
- package/dist/server/cli-plane/frames.js +12 -0
- package/dist/server/cli-plane/frames.js.map +1 -0
- package/dist/server/cli-plane/models.d.ts +174 -0
- package/dist/server/cli-plane/models.d.ts.map +1 -0
- package/dist/server/cli-plane/models.js +169 -0
- package/dist/server/cli-plane/models.js.map +1 -0
- package/dist/server/cli-plane/routes.d.ts +32 -0
- package/dist/server/cli-plane/routes.d.ts.map +1 -0
- package/dist/server/cli-plane/routes.js +94 -0
- package/dist/server/cli-plane/routes.js.map +1 -0
- package/dist/server/cli-plane/runner.d.ts +41 -0
- package/dist/server/cli-plane/runner.d.ts.map +1 -0
- package/dist/server/cli-plane/runner.js +163 -0
- package/dist/server/cli-plane/runner.js.map +1 -0
- package/dist/server/cli-plane/status.d.ts +12 -0
- package/dist/server/cli-plane/status.d.ts.map +1 -0
- package/dist/server/cli-plane/status.js +24 -0
- package/dist/server/cli-plane/status.js.map +1 -0
- package/dist/server/config/harness-import.d.ts +44 -0
- package/dist/server/config/harness-import.d.ts.map +1 -0
- package/dist/server/config/harness-import.js +166 -0
- package/dist/server/config/harness-import.js.map +1 -0
- package/dist/server/config.d.ts +20 -0
- package/dist/server/config.d.ts.map +1 -0
- package/dist/server/config.js +80 -0
- package/dist/server/config.js.map +1 -0
- package/dist/server/control/client.d.ts +24 -0
- package/dist/server/control/client.d.ts.map +1 -0
- package/dist/server/control/client.js +115 -0
- package/dist/server/control/client.js.map +1 -0
- package/dist/server/control/control-api.d.ts +39 -0
- package/dist/server/control/control-api.d.ts.map +1 -0
- package/dist/server/control/control-api.js +291 -0
- package/dist/server/control/control-api.js.map +1 -0
- package/dist/server/control/control-service.d.ts +713 -0
- package/dist/server/control/control-service.d.ts.map +1 -0
- package/dist/server/control/control-service.js +693 -0
- package/dist/server/control/control-service.js.map +1 -0
- package/dist/server/control/openapi.d.ts +2 -0
- package/dist/server/control/openapi.d.ts.map +1 -0
- package/dist/server/control/openapi.js +370 -0
- package/dist/server/control/openapi.js.map +1 -0
- package/dist/server/data-plane/data-plane.d.ts +20 -0
- package/dist/server/data-plane/data-plane.d.ts.map +1 -0
- package/dist/server/data-plane/data-plane.js +335 -0
- package/dist/server/data-plane/data-plane.js.map +1 -0
- package/dist/server/data-plane/gateway-server.d.ts +13 -0
- package/dist/server/data-plane/gateway-server.d.ts.map +1 -0
- package/dist/server/data-plane/gateway-server.js +796 -0
- package/dist/server/data-plane/gateway-server.js.map +1 -0
- package/dist/server/data-plane/legacy-session.d.ts +18 -0
- package/dist/server/data-plane/legacy-session.d.ts.map +1 -0
- package/dist/server/data-plane/legacy-session.js +137 -0
- package/dist/server/data-plane/legacy-session.js.map +1 -0
- package/dist/server/data-plane/projection.d.ts +18 -0
- package/dist/server/data-plane/projection.d.ts.map +1 -0
- package/dist/server/data-plane/projection.js +44 -0
- package/dist/server/data-plane/projection.js.map +1 -0
- package/dist/server/data-plane/registry.d.ts +31 -0
- package/dist/server/data-plane/registry.d.ts.map +1 -0
- package/dist/server/data-plane/registry.js +129 -0
- package/dist/server/data-plane/registry.js.map +1 -0
- package/dist/server/data-plane/task-extension.d.ts +7 -0
- package/dist/server/data-plane/task-extension.d.ts.map +1 -0
- package/dist/server/data-plane/task-extension.js +33 -0
- package/dist/server/data-plane/task-extension.js.map +1 -0
- package/dist/server/data-plane/virtualization.d.ts +35 -0
- package/dist/server/data-plane/virtualization.d.ts.map +1 -0
- package/dist/server/data-plane/virtualization.js +228 -0
- package/dist/server/data-plane/virtualization.js.map +1 -0
- package/dist/server/domain/errors.d.ts +9 -0
- package/dist/server/domain/errors.d.ts.map +1 -0
- package/dist/server/domain/errors.js +19 -0
- package/dist/server/domain/errors.js.map +1 -0
- package/dist/server/domain/models.d.ts +720 -0
- package/dist/server/domain/models.d.ts.map +1 -0
- package/dist/server/domain/models.js +327 -0
- package/dist/server/domain/models.js.map +1 -0
- package/dist/server/main.d.ts +2 -0
- package/dist/server/main.d.ts.map +1 -0
- package/dist/server/main.js +37 -0
- package/dist/server/main.js.map +1 -0
- package/dist/server/manage/management-mcp.d.ts +27 -0
- package/dist/server/manage/management-mcp.d.ts.map +1 -0
- package/dist/server/manage/management-mcp.js +431 -0
- package/dist/server/manage/management-mcp.js.map +1 -0
- package/dist/server/market/catalog.d.ts +111 -0
- package/dist/server/market/catalog.d.ts.map +1 -0
- package/dist/server/market/catalog.js +784 -0
- package/dist/server/market/catalog.js.map +1 -0
- package/dist/server/market/installers.d.ts +64 -0
- package/dist/server/market/installers.d.ts.map +1 -0
- package/dist/server/market/installers.js +181 -0
- package/dist/server/market/installers.js.map +1 -0
- package/dist/server/market/market-service.d.ts +146 -0
- package/dist/server/market/market-service.d.ts.map +1 -0
- package/dist/server/market/market-service.js +930 -0
- package/dist/server/market/market-service.js.map +1 -0
- package/dist/server/observability/call-recorder.d.ts +22 -0
- package/dist/server/observability/call-recorder.d.ts.map +1 -0
- package/dist/server/observability/call-recorder.js +99 -0
- package/dist/server/observability/call-recorder.js.map +1 -0
- package/dist/server/observability/logger.d.ts +16 -0
- package/dist/server/observability/logger.d.ts.map +1 -0
- package/dist/server/observability/logger.js +25 -0
- package/dist/server/observability/logger.js.map +1 -0
- package/dist/server/security/api-keys.d.ts +15 -0
- package/dist/server/security/api-keys.d.ts.map +1 -0
- package/dist/server/security/api-keys.js +35 -0
- package/dist/server/security/api-keys.js.map +1 -0
- package/dist/server/security/auth-service.d.ts +26 -0
- package/dist/server/security/auth-service.d.ts.map +1 -0
- package/dist/server/security/auth-service.js +76 -0
- package/dist/server/security/auth-service.js.map +1 -0
- package/dist/server/security/control-session.d.ts +9 -0
- package/dist/server/security/control-session.d.ts.map +1 -0
- package/dist/server/security/control-session.js +51 -0
- package/dist/server/security/control-session.js.map +1 -0
- package/dist/server/security/credential-materializer.d.ts +20 -0
- package/dist/server/security/credential-materializer.d.ts.map +1 -0
- package/dist/server/security/credential-materializer.js +82 -0
- package/dist/server/security/credential-materializer.js.map +1 -0
- package/dist/server/security/cursor-codec.d.ts +13 -0
- package/dist/server/security/cursor-codec.d.ts.map +1 -0
- package/dist/server/security/cursor-codec.js +43 -0
- package/dist/server/security/cursor-codec.js.map +1 -0
- package/dist/server/security/oauth-routes.d.ts +21 -0
- package/dist/server/security/oauth-routes.d.ts.map +1 -0
- package/dist/server/security/oauth-routes.js +100 -0
- package/dist/server/security/oauth-routes.js.map +1 -0
- package/dist/server/security/oauth-server.d.ts +16 -0
- package/dist/server/security/oauth-server.d.ts.map +1 -0
- package/dist/server/security/oauth-server.js +544 -0
- package/dist/server/security/oauth-server.js.map +1 -0
- package/dist/server/security/secret-box.d.ts +7 -0
- package/dist/server/security/secret-box.d.ts.map +1 -0
- package/dist/server/security/secret-box.js +27 -0
- package/dist/server/security/secret-box.js.map +1 -0
- package/dist/server/security/secure-action.d.ts +21 -0
- package/dist/server/security/secure-action.d.ts.map +1 -0
- package/dist/server/security/secure-action.js +69 -0
- package/dist/server/security/secure-action.js.map +1 -0
- package/dist/server/storage/sqlite-store.d.ts +70 -0
- package/dist/server/storage/sqlite-store.d.ts.map +1 -0
- package/dist/server/storage/sqlite-store.js +1522 -0
- package/dist/server/storage/sqlite-store.js.map +1 -0
- package/dist/server/storage/store.d.ts +82 -0
- package/dist/server/storage/store.d.ts.map +1 -0
- package/dist/server/storage/store.js +2 -0
- package/dist/server/storage/store.js.map +1 -0
- package/dist/server/upstream/adapter.d.ts +52 -0
- package/dist/server/upstream/adapter.d.ts.map +1 -0
- package/dist/server/upstream/adapter.js +807 -0
- package/dist/server/upstream/adapter.js.map +1 -0
- package/dist/server/upstream/credential-resolver.d.ts +14 -0
- package/dist/server/upstream/credential-resolver.d.ts.map +1 -0
- package/dist/server/upstream/credential-resolver.js +56 -0
- package/dist/server/upstream/credential-resolver.js.map +1 -0
- package/dist/server/upstream/extension-transport.d.ts +17 -0
- package/dist/server/upstream/extension-transport.d.ts.map +1 -0
- package/dist/server/upstream/extension-transport.js +207 -0
- package/dist/server/upstream/extension-transport.js.map +1 -0
- package/dist/server/upstream/manager.d.ts +23 -0
- package/dist/server/upstream/manager.d.ts.map +1 -0
- package/dist/server/upstream/manager.js +324 -0
- package/dist/server/upstream/manager.js.map +1 -0
- package/dist/server/upstream/oauth-provider.d.ts +38 -0
- package/dist/server/upstream/oauth-provider.d.ts.map +1 -0
- package/dist/server/upstream/oauth-provider.js +225 -0
- package/dist/server/upstream/oauth-provider.js.map +1 -0
- package/dist/server/upstream/oauth-refresh.d.ts +65 -0
- package/dist/server/upstream/oauth-refresh.d.ts.map +1 -0
- package/dist/server/upstream/oauth-refresh.js +240 -0
- package/dist/server/upstream/oauth-refresh.js.map +1 -0
- package/dist/server/upstream/oauth-routes.d.ts +17 -0
- package/dist/server/upstream/oauth-routes.d.ts.map +1 -0
- package/dist/server/upstream/oauth-routes.js +87 -0
- package/dist/server/upstream/oauth-routes.js.map +1 -0
- package/dist/server/upstream/oauth-service.d.ts +143 -0
- package/dist/server/upstream/oauth-service.d.ts.map +1 -0
- package/dist/server/upstream/oauth-service.js +217 -0
- package/dist/server/upstream/oauth-service.js.map +1 -0
- package/dist/server/upstream/stable-json.d.ts +3 -0
- package/dist/server/upstream/stable-json.d.ts.map +1 -0
- package/dist/server/upstream/stable-json.js +17 -0
- package/dist/server/upstream/stable-json.js.map +1 -0
- package/package.json +69 -0
- package/skills/toolhome/SKILL.md +238 -0
- package/skills/toolhome/references/cli-reference.md +242 -0
- package/skills/toolhome/references/deployment.md +113 -0
- package/skills/toolhome/references/market-guide.md +128 -0
- package/skills/toolhome/references/oauth-guide.md +96 -0
- package/skills/toolhome/references/troubleshooting.md +133 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"market-service.js","sourceRoot":"","sources":["../../../src/market/market-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,eAAe,EACf,iBAAiB,GAIlB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,UAAU,EAAoB,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAY/C,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAsBzD,MAAM,OAAO,aAAa;IACf,QAAQ,CAAiB;IACzB,MAAM,CAAQ;IACd,QAAQ,CAAsB;IAC9B,UAAU,CAAS;IACnB,MAAM,CAAyB;IAC/B,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;IACnC,YAAY,GAAG,IAAI,GAAG,EAAiB,CAAC;IACxC,mBAAmB,GAAG,IAAI,GAAG,EAA6C,CAAC;IACpF,QAAQ,GAAG,KAAK,CAAC;IACjB,0EAA0E;IACjE,gBAAgB,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE9D,YACE,OAAuB,EACvB,KAAY,EACZ,OAA4B,EAC5B,SAAiB,EACjB,OAAgB,EAChB,UAAmB;QAEnB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,MAAM,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,GAAG;YACZ,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;YACnC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;YAClC,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;YAC7C,mBAAmB,EAAE,GAAG;YACxB,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;SACtE,CAAC;QACF,oEAAoE;QACpE,0EAA0E;QAC1E,IAAI,CAAC,MAAM,CAAC,0BAA0B,EAAE,CAAC;IAC3C,CAAC;IAED,IAAI;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,SAAS,GACb,KAAK,KAAK,KAAK;gBACb,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI;gBAC7C,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;YACzD,OAAO;gBACL,GAAG,KAAK;gBACR,KAAK;gBACL,SAAS;gBACT,gBAAgB,EAAE,YAAY,EAAE,YAAY,IAAI,IAAI;gBACpD,eAAe,EACb,YAAY,KAAK,IAAI;oBACrB,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,YAAY,CAAC,YAAY;wBAC1D,WAAW,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,cAAc,CAAC;aACxD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,GAAG,aAAa;aAC1B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;aAChF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC;QAChD,OAAO,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE;YAC5C,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,IAAI,UAAU,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,gBAAgB,EAAE,YAAa,CAAC,YAAY;gBAC5C,cAAc;gBACd,eAAe,EACb,cAAc,KAAK,YAAa,CAAC,YAAY;oBAC7C,WAAW,CAAC,KAAK,CAAC,KAAK,YAAa,CAAC,cAAc;gBACrD,cAAc,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;aAClD,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,IAAI,UAAU,CAAC;QACnD,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAC1C,IACE,YAAY,CAAC,YAAY,KAAK,cAAc;YAC5C,YAAY,CAAC,cAAc,KAAK,cAAc,EAC9C,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC/C,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,UAAU,CAAC,CAAC;QACtE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3D,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7C,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;gBAC7C,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAC;QACtF,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAClF,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,aAAa;YAC5B,KAAK,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;SACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CACX,EAAU,EACV,MAAM,GAA2B,EAAE,EACnC,WAAW,GAAG,KAAK;QAQnB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GACV,QAAQ,CAAC,UAAU,KAAK,QAAQ;gBAC9B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC1C,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,mBAAmB;oBAC3B,SAAS,EAAE;wBACT,OAAO,EAAE,KAAK,CAAC,EAAE;wBACjB,OAAO,EAAE,QAAQ,CAAC,YAAY;wBAC9B,UAAU,EAAE,QAAQ,CAAC,UAAU;wBAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;qBAClB;iBACF,CAAC;YACJ,CAAC;YACD,wEAAwE;YACxE,mEAAmE;YACnE,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,MAAM;iBACnC,iBAAiB,EAAE;iBACnB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACzC,IAAI,WAAW,CAAC,QAAQ,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7E,MAAM,IAAI,QAAQ,CAChB,sBAAsB,EACtB,0BAA0B,WAAW,CAAC,IAAI,EAAE,EAC5C,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAC1C,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CACzF,CAAC;QACF,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CACzB,KAAK,EACL,gBAAgB,EAChB,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAC7D,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC;YACH,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,wEAAwE;gBACxE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;gBAC3F,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjD,OAAO;oBACL,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;oBACpB,MAAM,EAAE,iBAAiB;oBACzB,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,SAAS,EAAE,GAAG;iBACf,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACvC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,aAAa,CAAC,KAAkB,EAAE,MAA8B,EAAE,GAAY;QAC5E,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACxC,MAAM,IAAI,GACR,UAAU,CAAC,KAAK,CAAC,KAAK,KAAK;YACzB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC;YACzC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,UAAU,CAAC,IAAmB;QAC5B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,KAAK,IAAI,CAAC,IAAI,CACZ,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EACpC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CACrC,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,cAAc,CAClB,QAAgB,EAChB,KAAa,EACb,WAA+B,EAC/B,MAA8B;QAE9B,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,YAAY,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC1F,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAClE,IAAI,UAAU;oBAAE,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;YAC3D,IAAI,UAAU;gBAAE,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;YACtE,MAAM,IAAI,QAAQ,CAChB,sBAAsB,EACtB,gDAAgD,EAChD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,QAAQ,CAChB,8BAA8B,EAC9B,iBAAiB,KAAK,CAAC,EAAE,wCAAwC,EACjE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,CAAC;QACrC,IAAI,OAAO;YAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;gBAC7C,uEAAuE;gBACvE,2EAA2E;gBAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;gBAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACxD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;oBACnD,MAAM,IAAI,QAAQ,CAChB,sBAAsB,EACtB,gDAAgD,EAChD,GAAG,CACJ,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE;oBAClD,MAAM,EAAE,YAAY;oBACpB,IAAI,EAAE,UAAU;iBACjB,CAAC,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI;gBACtD,MAAM,EAAE,SAAS,CAAC,GAAG;gBACrB,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,aAAa;aACpC,CAAC;YACF,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO;gBAAE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;YACzD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,sFAAsF;IACtF,gBAAgB,CAAC,QAAgB,EAAE,KAAyB,EAAE,WAAoB;QAChF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE,iCAAiC,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,IAAI;YAC1B,SAAS,EAAE,KAAK,EAAE,IAAI,IAAI,IAAI;YAC9B,MAAM,EAAE,CAAC,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC;iBAC5B,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;iBAC3C,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBACrB,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,WAAW,EAAE,WAAW,CAAC,WAAW;aACrC,CAAC,CAAC;SACN,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,aAAa,UAAU,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBAChC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAC;gBAC3F,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;oBAC3B,IAAI,GAAG,CAAC,YAAY;wBAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;oBACrE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC9B,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,MAAM;yBACnC,iBAAiB,EAAE;yBACnB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;wBAC/C,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;gBACzF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAC;gBAC3F,CAAC;gBACD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM;qBAC9B,iBAAiB,EAAE;qBACnB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC/C,wEAAwE;gBACxE,iEAAiE;gBACjE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;oBAC3B,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;wBACzC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC;oBACH,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;wBAC7B,IAAI,MAAM,CAAC,YAAY;4BAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;wBACnF,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC9C,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,oEAAoE;oBACpE,kDAAkD;oBAClD,IAAI,CAAC;wBACH,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;4BAC3B,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;gCACzC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;oCAC7B,MAAM,EAAE,YAAY,CAAC,MAAM;oCAC3B,OAAO,EAAE,YAAY,CAAC,OAAO;oCAC7B,YAAY,EAAE,YAAY,CAAC,YAAY;oCACvC,cAAc,EAAE,YAAY,CAAC,cAAc;oCAC3C,UAAU,EAAE,YAAY,CAAC,UAAU;oCACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;oCAC/B,YAAY,EAAE,YAAY,CAAC,YAAY;iCACxC,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC,CAAC,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC;wBACP,mEAAmE;oBACrE,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,2EAA2E;IAE3E;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,KAAkB,EAAE,MAA8B,EAAE,GAAY;QACnF,IAAI,UAAsE,CAAC;QAC3E,IAAI,GAA+C,CAAC;QACpD,IAAI,YAA4C,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACnD,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAC1C,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC;aAChD,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC;YACvD,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,gBAAgB,GACpB,WAAW,KAAK,IAAI;gBAClB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;YAChE,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;gBAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;oBACvC,IAAI,EAAE,KAAK,CAAC,EAAE;oBACd,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,aAAa,EAAE,UAAU,CAAC,aAAa;oBACvC,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;oBAC7C,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,WAAW,EAAE,KAAK;oBAClB,YAAY,EAAE,UAAW,CAAC,EAAE;oBAC5B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,EAAE;oBAClD,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;oBAChC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE;oBAC1E,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,KAAK,CAAC,aAAa,IAAI,OAAO;oBACzC,cAAc,EAAE,EAAE,GAAG,IAAI;iBAC1B,CAAC,CAAC;gBACH,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;oBACzD,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,YAAY,EAAE,KAAK,CAAC,OAAO,IAAI,UAAU;oBACzC,cAAc,EAAE,WAAW,CAAC,KAAK,CAAC;oBAClC,UAAU,EAAE,KAAK;oBACjB,QAAQ,EAAE,UAAU,CAAC,EAAE;oBACvB,YAAY,EAAE,UAAW,CAAC,EAAE;iBAC7B,CAAC,CAAC;gBACH,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,mBAAmB,EAAE,CAAC;YAChE,CAAC,CAAC,CAAC;YACH,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC;YACtB,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;gBAChB,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,KAAK,EAAE,GAAG,CAAC,EAAE;oBACb,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,UAAU;oBACV,YAAY;iBACb;aACF,CAAC,CAAC;YACH,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,IAAI,YAAY,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBAChF,IAAI,GAAG,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrD,IAAI,UAAU,KAAK,SAAS;oBAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;YAAC,MAAM,CAAC;gBACP,6DAA6D;YAC/D,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;oBAChB,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE;oBACtB,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB;iBAC5E,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,uEAAuE;YACzE,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,UAAU,CACR,KAAkB,EAClB,gBAA+B,EAC/B,MAAkC;QAElC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAC1C,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,gBAAgB;YAChB,sEAAsE;YACtE,uEAAuE;YACvE,kEAAkE;YAClE,cAAc,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,gBAAgB,IAAI,QAAQ,IAAI,UAAU,EAAE,EAAE;YAC7E,MAAM;YACN,IAAI,EAAE,MAAM;YACZ,aAAa,EAAE,EAAE;YACjB,eAAe,EAAE,IAAI;YACrB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,MAAM,IAAI,GAAY,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAa;QACjB,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YAClB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC1B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa;YAChD,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,oBAAoB,CAAC,MAAwB;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9F,IACE,MAAM,KAAK,IAAI;YACf,MAAM,CAAC,MAAM,KAAK,SAAS;YAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAC1C,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE;gBACrD,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,uBAAuB;gBAC7B,SAAS,EAAE,uBAAuB;aACnC,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,MAAM,CAAC,aAAa;gBAC5B,KAAK,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;aACrC,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,aAAa;YAC5B,KAAK,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;SACrC,CAAC;IACJ,CAAC;IAED,OAAO,CACL,GAAY,EACZ,KAA2E;QAE3E,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YAC1B,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC1D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IACzD,CAAC;IAED,aAAa,CAAC,GAAY,EAAE,KAAgC;QAC1D,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAkB,EAAE,MAA8B,EAAE,GAAY;QAChF,IAAI,UAAsE,CAAC;QAC3E,IAAI,MAAgC,CAAC;QACrC,IAAI,YAA4C,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,gBAAgB,GACpB,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1F,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACnD,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAC1C,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC;aAChD,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACxC,IAAI,EAAE,KAAK,CAAC,EAAE;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;gBACnD,SAAS;gBACT,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;gBAC5C,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,YAAY,EAAE,KAAK,CAAC,OAAO,IAAI,UAAU;gBACzC,cAAc,EAAE,WAAW,CAAC,KAAK,CAAC;gBAClC,UAAU,EAAE,QAAQ;gBACpB,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,YAAY,EAAE,UAAU,CAAC,EAAE;aAC5B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,IAAI,YAAY,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAClF,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxE,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,UAAU,KAAK,SAAS;oBAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;oBAChB,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE;oBACtB,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB;iBAC5E,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,uEAAuE;YACzE,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,MAAM,CAAC,EAAU;QACf,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;QAC1F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,qBAAqB,CAAC,OAAe;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO;QACpC,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACpD,MAAM,MAAM,GACV,GAAG,KAAK,IAAI,IAAI,CAAC,iBAAiB,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACxF,IACE,MAAM,KAAK,IAAI;oBACf,MAAM,CAAC,MAAM,KAAK,SAAS;oBAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAC1C,CAAC;oBACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBACtC,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,IAAI,QAAQ,CAChB,8BAA8B,EAC9B,iBAAiB,OAAO,wCAAwC,EAChE,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,OAAe,EAAE,WAAmB;QAC9C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,aAAa,CAAC,OAAe,EAAE,WAAmB;QAChD,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,WAAW,EAAE,CAAC;YAC3D,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAkB,EAAE,YAAgC,EAAE,GAAY;QACjF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,gBAAgB,GACpB,QAAQ,KAAK,IAAI;gBACf,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAEpF,IAAI,YAAY,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACzC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC5D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBACpB,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,mCAAmC,EAAE,GAAG,CAAC,CAAC;gBACnF,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBACpE,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;gBACzE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC;gBACvD,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC3D,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACjD,sEAAsE;gBACtE,iDAAiD;gBACjD,IAAI,YAAgC,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC/C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxE,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC,CAAC;gBAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,EAAE;oBAC9D,YAAY,EAAE,KAAK,CAAC,OAAO,IAAI,UAAU;oBACzC,cAAc,EAAE,WAAW,CAAC,KAAK,CAAC;iBACnC,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;oBAChB,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE;wBACN,OAAO,EAAE,KAAK,CAAC,EAAE;wBACjB,OAAO,EAAE,OAAO,CAAC,YAAY;wBAC7B,UAAU,EAAE,YAAY,CAAC,UAAU;wBACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;wBAC/B,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;qBACxD;iBACF,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACtD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBACjB,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,gCAAgC,EAAE,GAAG,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,iBAAiB,GACrB,YAAY,CAAC,YAAY,KAAK,IAAI;oBAChC,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBAClE,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;oBAC/B,6BAA6B,CAAC,iBAAiB,EAAE,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;gBACnF,CAAC;gBACD,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;gBAChE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACpD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE;oBAC5B,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,aAAa,EAAE,UAAU,CAAC,aAAa;oBACvC,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;oBAC7C,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,EAAE;oBAClD,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;oBAChC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE;iBAC3E,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC,CAAC;gBAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,EAAE;oBAC9D,YAAY,EAAE,KAAK,CAAC,OAAO,IAAI,UAAU;oBACzC,cAAc,EAAE,WAAW,CAAC,KAAK,CAAC;iBACnC,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;oBAChB,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE;wBACN,OAAO,EAAE,KAAK,CAAC,EAAE;wBACjB,OAAO,EAAE,OAAO,CAAC,YAAY;wBAC7B,UAAU,EAAE,YAAY,CAAC,UAAU;wBACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;qBAChC;iBACF,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;oBAChB,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE;oBACtB,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB;iBAC3E,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,oDAAoD;YACtD,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,eAAe,CAAC,KAAkB;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;QAC1B,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,GAAG,GACP,KAAK,CAAC,IAAI,KAAK,KAAK;YAClB,CAAC,CAAC,yBAAyB,GAAG,OAAO;YACrC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY;gBAC3B,CAAC,CAAC,kCAAkC,GAAG,SAAS;gBAChD,CAAC,CAAC,IAAI,CAAC;QACb,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwD,CAAC;YAC5F,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;gBAC9B,CAAC,CAAC,IAAI,CAAC,OAAO;gBACd,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,OAAO,KAAK,QAAQ;oBACtC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;oBACnB,CAAC,CAAC,IAAI,CAAC;YACb,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,gBAAgB,CACd,KAAkB,EAClB,OAAwC,EACxC,MAA8B;QAE9B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO;gBACL,IAAI,EAAE,iBAAiB;gBACvB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,EAAE;gBACpB,YAAY,EAAE,MAAM;gBACpB,gBAAgB,EAAE,KAAK;gBACvB,OAAO,EAAE,EAAE;aACZ,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CACvD,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,GAAW,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAC1E,CAAC;QACF,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;YACrC,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI;gBACJ,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;gBACnD,YAAY,EAAE,MAAM;aACrB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE;gBACJ,KAAK;gBACL,MAAM;gBACN,IAAI;gBACJ,OAAO,CAAC,OAAO;gBACf,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;aAC7D;YACD,GAAG,EAAE,EAAE;YACP,YAAY,EAAE,MAAM;SACrB,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,YAA2B;QAC9C,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC/D,OAAO,OAAO,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED,cAAc,CACZ,KAAkB,EAClB,OAAO,GAAoC,IAAI;QAS/C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,QAAQ,CAChB,gCAAgC,EAChC,qBAAqB,KAAK,CAAC,EAAE,mCAAmC,EAChE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EACL,OAAO,EAAE,OAAO;gBAChB,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW;oBACzB,CAAC,CAAC,QAAQ,EAAE,IAAI,KAAK,QAAQ;wBAC3B,CAAC,CAAC,QAAQ,CAAC,KAAK;wBAChB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;oBACvB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9B,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;YACzF,UAAU,EACR,OAAO,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACzF,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,YAAY,IAAI,MAAM;YACtD,gBAAgB,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC5E,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK;aACnC,CAAC,CAAC;YACH,SAAS;SACV,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,KAAkB,EAAE,MAA8B;QACnE,QAAQ,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAC9B,KAAK,OAAO;gBACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;YAChD,KAAK,KAAK;gBACR,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YAC5C,KAAK,QAAQ;gBACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5E,KAAK,SAAS;gBACZ,OAAO;oBACL,IAAI,EAAE,SAAS;oBACf,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,UAAU;oBACvC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE;iBAC/C,CAAC;YACJ,KAAK,SAAS;gBACZ,OAAO;oBACL,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;wBACvC,MAAM,CAAC,IAAI;wBACX,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;qBACzE,CAAC,CACH;iBACF,CAAC;QACN,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,GAAY;QAC5B,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC;YAC3C,UAAU,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CACrC,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC;SACzD,CAAC;IACJ,CAAC;IAED,qBAAqB,CACnB,KAAgD,EAChD,MAAsB;QAEtB,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;YAAE,OAAO;QACpC,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,oBAAoB,CAClB,GAAY,EACZ,OAAe,EACf,IAAc,EACd,OAAO,GAA4B,EAAE;QAErC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;gBACjC,QAAQ,EAAE,IAAI;gBACd,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;gBAC/C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;gBAC/B,MAAM,GAAG,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAChC,CAAC,CAAC;YACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,EAClD,OAAO,CAAC,SAAS,IAAI,OAAO,CAC7B,CAAC;YACF,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzC,CAAC,CAAC;YACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC/D,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
import type { ToolCallDraft } from '../domain/models.js';
|
|
2
|
+
import type { Logger } from './logger.js';
|
|
3
|
+
import type { Store } from '../storage/store.js';
|
|
4
|
+
/**
|
|
5
|
+
* Fire-and-forget recorder for MCP tool calls.
|
|
6
|
+
*
|
|
7
|
+
* The data plane never awaits recording: drafts are queued and flushed in
|
|
8
|
+
* batches inside a single transaction. If the queue overflows we drop the
|
|
9
|
+
* newest drafts, count them, and log a warning once — the call path must never
|
|
10
|
+
* be slowed down or fail because of observability.
|
|
11
|
+
*
|
|
12
|
+
* Retention: rows older than `retentionDays` are deleted hourly in small
|
|
13
|
+
* batches (a `trim_tool_calls` SQL trigger caps total rows as a backstop).
|
|
14
|
+
*/
|
|
15
|
+
export declare class CallRecorder {
|
|
16
|
+
#private;
|
|
17
|
+
constructor(store: Store, logger: Logger, retentionDays?: number);
|
|
18
|
+
record(draft: ToolCallDraft): void;
|
|
19
|
+
flush(): Promise<void>;
|
|
20
|
+
close(): Promise<void>;
|
|
21
|
+
}
|
|
22
|
+
//# sourceMappingURL=call-recorder.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"call-recorder.d.ts","sourceRoot":"","sources":["../../../src/observability/call-recorder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAMjD;;;;;;;;;;GAUG;AACH,qBAAa,YAAY;;IAUvB,YAAY,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,SAAK,EAQ3D;IAED,MAAM,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAYjC;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3B;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ3B;CAoCF"}
|
|
@@ -0,0 +1,99 @@
|
|
|
1
|
+
const FLUSH_INTERVAL_MS = 50;
|
|
2
|
+
const MAX_QUEUE = 10_000;
|
|
3
|
+
const RETENTION_CHECK_INTERVAL_MS = 60 * 60 * 1_000;
|
|
4
|
+
/**
|
|
5
|
+
* Fire-and-forget recorder for MCP tool calls.
|
|
6
|
+
*
|
|
7
|
+
* The data plane never awaits recording: drafts are queued and flushed in
|
|
8
|
+
* batches inside a single transaction. If the queue overflows we drop the
|
|
9
|
+
* newest drafts, count them, and log a warning once — the call path must never
|
|
10
|
+
* be slowed down or fail because of observability.
|
|
11
|
+
*
|
|
12
|
+
* Retention: rows older than `retentionDays` are deleted hourly in small
|
|
13
|
+
* batches (a `trim_tool_calls` SQL trigger caps total rows as a backstop).
|
|
14
|
+
*/
|
|
15
|
+
export class CallRecorder {
|
|
16
|
+
#store;
|
|
17
|
+
#logger;
|
|
18
|
+
#retentionDays;
|
|
19
|
+
#queue = [];
|
|
20
|
+
#dropped = 0;
|
|
21
|
+
#flushTimer = null;
|
|
22
|
+
#retentionTimer = null;
|
|
23
|
+
#closed = false;
|
|
24
|
+
constructor(store, logger, retentionDays = 30) {
|
|
25
|
+
this.#store = store;
|
|
26
|
+
this.#logger = logger;
|
|
27
|
+
this.#retentionDays = Math.max(0, Math.floor(retentionDays));
|
|
28
|
+
this.#flushTimer = setInterval(() => void this.#flush(), FLUSH_INTERVAL_MS);
|
|
29
|
+
if (this.#retentionDays > 0) {
|
|
30
|
+
this.#retentionTimer = setInterval(() => void this.#runRetention(), RETENTION_CHECK_INTERVAL_MS);
|
|
31
|
+
}
|
|
32
|
+
}
|
|
33
|
+
record(draft) {
|
|
34
|
+
if (this.#closed)
|
|
35
|
+
return;
|
|
36
|
+
if (this.#queue.length >= MAX_QUEUE) {
|
|
37
|
+
this.#dropped += 1;
|
|
38
|
+
if (this.#dropped === 1) {
|
|
39
|
+
this.#logger.warn('Call recorder queue full, dropping call records', {
|
|
40
|
+
queue: this.#queue.length,
|
|
41
|
+
});
|
|
42
|
+
}
|
|
43
|
+
return;
|
|
44
|
+
}
|
|
45
|
+
this.#queue.push(draft);
|
|
46
|
+
}
|
|
47
|
+
async flush() {
|
|
48
|
+
await this.#flush();
|
|
49
|
+
}
|
|
50
|
+
async close() {
|
|
51
|
+
if (this.#closed)
|
|
52
|
+
return;
|
|
53
|
+
this.#closed = true;
|
|
54
|
+
if (this.#flushTimer)
|
|
55
|
+
clearInterval(this.#flushTimer);
|
|
56
|
+
if (this.#retentionTimer)
|
|
57
|
+
clearInterval(this.#retentionTimer);
|
|
58
|
+
this.#flushTimer = null;
|
|
59
|
+
this.#retentionTimer = null;
|
|
60
|
+
await this.#flush();
|
|
61
|
+
}
|
|
62
|
+
async #flush() {
|
|
63
|
+
const batch = this.#queue;
|
|
64
|
+
this.#queue = [];
|
|
65
|
+
if (batch.length === 0)
|
|
66
|
+
return;
|
|
67
|
+
try {
|
|
68
|
+
this.#store.transaction(() => {
|
|
69
|
+
this.#store.insertToolCalls(batch);
|
|
70
|
+
});
|
|
71
|
+
if (this.#dropped > 0) {
|
|
72
|
+
this.#logger.warn('Call recorder dropped records', { dropped: this.#dropped });
|
|
73
|
+
this.#dropped = 0;
|
|
74
|
+
}
|
|
75
|
+
}
|
|
76
|
+
catch (error) {
|
|
77
|
+
// Drop the batch; never retry into an unbounded loop.
|
|
78
|
+
this.#logger.warn('Failed to persist tool call records', {
|
|
79
|
+
count: batch.length,
|
|
80
|
+
error: error instanceof Error ? error.message : String(error),
|
|
81
|
+
});
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
async #runRetention() {
|
|
85
|
+
const before = new Date(Date.now() - this.#retentionDays * 86_400_000).toISOString();
|
|
86
|
+
try {
|
|
87
|
+
const deleted = this.#store.deleteOldToolCalls(before);
|
|
88
|
+
if (deleted > 0) {
|
|
89
|
+
this.#logger.info('Tool call retention cleanup', { deleted, before });
|
|
90
|
+
}
|
|
91
|
+
}
|
|
92
|
+
catch (error) {
|
|
93
|
+
this.#logger.warn('Tool call retention cleanup failed', {
|
|
94
|
+
error: error instanceof Error ? error.message : String(error),
|
|
95
|
+
});
|
|
96
|
+
}
|
|
97
|
+
}
|
|
98
|
+
}
|
|
99
|
+
//# sourceMappingURL=call-recorder.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"call-recorder.js","sourceRoot":"","sources":["../../../src/observability/call-recorder.ts"],"names":[],"mappings":"AAIA,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,SAAS,GAAG,MAAM,CAAC;AACzB,MAAM,2BAA2B,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,YAAY;IACd,MAAM,CAAQ;IACd,OAAO,CAAS;IAChB,cAAc,CAAS;IAChC,MAAM,GAAoB,EAAE,CAAC;IAC7B,QAAQ,GAAG,CAAC,CAAC;IACb,WAAW,GAA0C,IAAI,CAAC;IAC1D,eAAe,GAA0C,IAAI,CAAC;IAC9D,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAY,KAAY,EAAE,MAAc,EAAE,aAAa,GAAG,EAAE;QAC1D,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,aAAa,EAAE,EAAE,2BAA2B,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAoB;QACzB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnB,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,iDAAiD,EAAE;oBACnE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,WAAW;YAAE,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,eAAe;YAAE,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC/B,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;gBAC3B,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC/E,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sDAAsD;YACtD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,qCAAqC,EAAE;gBACvD,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACrF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACvD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE;gBACtD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
declare const severity: {
|
|
2
|
+
debug: number;
|
|
3
|
+
info: number;
|
|
4
|
+
warn: number;
|
|
5
|
+
error: number;
|
|
6
|
+
};
|
|
7
|
+
export type LogLevel = keyof typeof severity;
|
|
8
|
+
export interface Logger {
|
|
9
|
+
debug(message: string, detail?: Record<string, unknown>): void;
|
|
10
|
+
info(message: string, detail?: Record<string, unknown>): void;
|
|
11
|
+
warn(message: string, detail?: Record<string, unknown>): void;
|
|
12
|
+
error(message: string, detail?: Record<string, unknown>): void;
|
|
13
|
+
}
|
|
14
|
+
export declare function createLogger(minimum: LogLevel): Logger;
|
|
15
|
+
export {};
|
|
16
|
+
//# sourceMappingURL=logger.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/observability/logger.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,QAAQ;;;;;CAAgF,CAAC;AAE/F,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,QAAQ,CAAC;AAE7C,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAChE;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,QAAQ,GAAG,MAAM,CAoBtD"}
|
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
const severity = { debug: 10, info: 20, warn: 30, error: 40 };
|
|
2
|
+
export function createLogger(minimum) {
|
|
3
|
+
const emit = (level, message, detail) => {
|
|
4
|
+
if (severity[level] < severity[minimum])
|
|
5
|
+
return;
|
|
6
|
+
const entry = {
|
|
7
|
+
time: new Date().toISOString(),
|
|
8
|
+
level,
|
|
9
|
+
message,
|
|
10
|
+
...(detail === undefined ? {} : { detail }),
|
|
11
|
+
};
|
|
12
|
+
const line = JSON.stringify(entry);
|
|
13
|
+
if (level === 'error' || level === 'warn')
|
|
14
|
+
process.stderr.write(`${line}\n`);
|
|
15
|
+
else
|
|
16
|
+
process.stdout.write(`${line}\n`);
|
|
17
|
+
};
|
|
18
|
+
return {
|
|
19
|
+
debug: (message, detail) => emit('debug', message, detail),
|
|
20
|
+
info: (message, detail) => emit('info', message, detail),
|
|
21
|
+
warn: (message, detail) => emit('warn', message, detail),
|
|
22
|
+
error: (message, detail) => emit('error', message, detail),
|
|
23
|
+
};
|
|
24
|
+
}
|
|
25
|
+
//# sourceMappingURL=logger.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/observability/logger.ts"],"names":[],"mappings":"AAAA,MAAM,QAAQ,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAmC,CAAC;AAW/F,MAAM,UAAU,YAAY,CAAC,OAAiB;IAC5C,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,MAAgC,EAAQ,EAAE;QACxF,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO;QAChD,MAAM,KAAK,GAAG;YACZ,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,KAAK;YACL,OAAO;YACP,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC5C,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;;YACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;QAC1D,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACxD,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACxD,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;KAC3D,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
import type { ApiKeyKind } from '../domain/models.js';
|
|
2
|
+
export interface GeneratedApiKey {
|
|
3
|
+
secret: string;
|
|
4
|
+
prefix: string;
|
|
5
|
+
digest: string;
|
|
6
|
+
}
|
|
7
|
+
export declare class ApiKeyHasher {
|
|
8
|
+
#private;
|
|
9
|
+
constructor(pepper: string);
|
|
10
|
+
generate(kind: ApiKeyKind): GeneratedApiKey;
|
|
11
|
+
digest(secret: string): string;
|
|
12
|
+
verify(secret: string, expectedHex: string): boolean;
|
|
13
|
+
kindFor(secret: string): ApiKeyKind | null;
|
|
14
|
+
}
|
|
15
|
+
//# sourceMappingURL=api-keys.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../../src/security/api-keys.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAOtD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,YAAY;;IAGvB,YAAY,MAAM,EAAE,MAAM,EAEzB;IAED,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,eAAe,CAO1C;IAED,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE7B;IAED,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAInD;IAED,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAIzC;CACF"}
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
|
|
2
|
+
const keyPrefixes = {
|
|
3
|
+
control: 'tch_ctl_',
|
|
4
|
+
access: 'tch_mcp_',
|
|
5
|
+
};
|
|
6
|
+
export class ApiKeyHasher {
|
|
7
|
+
#pepper;
|
|
8
|
+
constructor(pepper) {
|
|
9
|
+
this.#pepper = pepper;
|
|
10
|
+
}
|
|
11
|
+
generate(kind) {
|
|
12
|
+
const secret = `${keyPrefixes[kind]}${randomBytes(32).toString('base64url')}`;
|
|
13
|
+
return {
|
|
14
|
+
secret,
|
|
15
|
+
prefix: secret.slice(0, keyPrefixes[kind].length + 8),
|
|
16
|
+
digest: this.digest(secret),
|
|
17
|
+
};
|
|
18
|
+
}
|
|
19
|
+
digest(secret) {
|
|
20
|
+
return createHmac('sha256', this.#pepper).update(secret, 'utf8').digest('hex');
|
|
21
|
+
}
|
|
22
|
+
verify(secret, expectedHex) {
|
|
23
|
+
const actual = Buffer.from(this.digest(secret), 'hex');
|
|
24
|
+
const expected = Buffer.from(expectedHex, 'hex');
|
|
25
|
+
return actual.length === expected.length && timingSafeEqual(actual, expected);
|
|
26
|
+
}
|
|
27
|
+
kindFor(secret) {
|
|
28
|
+
if (secret.startsWith(keyPrefixes.control))
|
|
29
|
+
return 'control';
|
|
30
|
+
if (secret.startsWith(keyPrefixes.access))
|
|
31
|
+
return 'access';
|
|
32
|
+
return null;
|
|
33
|
+
}
|
|
34
|
+
}
|
|
35
|
+
//# sourceMappingURL=api-keys.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../../src/security/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGvE,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,UAAU;IACnB,MAAM,EAAE,UAAU;CACkB,CAAC;AAQvC,MAAM,OAAO,YAAY;IACd,OAAO,CAAS;IAEzB,YAAY,MAAc;QACxB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED,QAAQ,CAAC,IAAgB;QACvB,MAAM,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9E,OAAO;YACL,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACrD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,MAAc;QACnB,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,WAAmB;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7D,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}
|
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
import type { AuthInfo } from '@modelcontextprotocol/server';
|
|
2
|
+
import type { ApiKeyKind, ApiKeyRecord, ControlScope } from '../domain/models.js';
|
|
3
|
+
import type { Store } from '../storage/store.js';
|
|
4
|
+
import type { ApiKeyHasher } from './api-keys.js';
|
|
5
|
+
export interface IssuedApiKey {
|
|
6
|
+
key: ApiKeyRecord;
|
|
7
|
+
secret: string;
|
|
8
|
+
}
|
|
9
|
+
export interface AuthPrincipal {
|
|
10
|
+
id: string;
|
|
11
|
+
kind: ApiKeyKind;
|
|
12
|
+
name: string;
|
|
13
|
+
/** Control keys carry a scope; access keys have null. */
|
|
14
|
+
scope: ControlScope | null;
|
|
15
|
+
}
|
|
16
|
+
export declare class AuthService {
|
|
17
|
+
#private;
|
|
18
|
+
constructor(store: Store, hasher: ApiKeyHasher);
|
|
19
|
+
ensureBootstrapControlKey(secret: string | undefined): void;
|
|
20
|
+
issue(kind: ApiKeyKind, name: string, scope?: ControlScope | null): IssuedApiKey;
|
|
21
|
+
authenticate(kind: ApiKeyKind, secret: string): AuthPrincipal;
|
|
22
|
+
authenticateBearer(kind: ApiKeyKind, request: Request): AuthPrincipal;
|
|
23
|
+
toMcpAuthInfo(principal: AuthPrincipal, token: string, resource: URL): AuthInfo;
|
|
24
|
+
}
|
|
25
|
+
export declare function bearerToken(request: Request): string | null;
|
|
26
|
+
//# sourceMappingURL=auth-service.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"auth-service.d.ts","sourceRoot":"","sources":["../../../src/security/auth-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAE7D,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,YAAY,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;CAC5B;AAED,qBAAa,WAAW;;IAKtB,YAAY,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAG7C;IAED,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAgB1D;IAED,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,GAAG,YAAY,CAY/E;IAED,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,CAe5D;IAED,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,aAAa,CAIpE;IAED,aAAa,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,QAAQ,CAQ9E;CACF;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAK3D"}
|
|
@@ -0,0 +1,76 @@
|
|
|
1
|
+
import { AppError } from '../domain/errors.js';
|
|
2
|
+
export class AuthService {
|
|
3
|
+
#lastTouched = new Map();
|
|
4
|
+
#store;
|
|
5
|
+
#hasher;
|
|
6
|
+
constructor(store, hasher) {
|
|
7
|
+
this.#store = store;
|
|
8
|
+
this.#hasher = hasher;
|
|
9
|
+
}
|
|
10
|
+
ensureBootstrapControlKey(secret) {
|
|
11
|
+
if (this.#store.listApiKeys('control').some((key) => key.revokedAt === null))
|
|
12
|
+
return;
|
|
13
|
+
if (!secret) {
|
|
14
|
+
throw new AppError('bootstrap_key_required', 'TOOLHOME_BOOTSTRAP_CONTROL_KEY is required on first start', 500);
|
|
15
|
+
}
|
|
16
|
+
this.#store.createApiKey({
|
|
17
|
+
kind: 'control',
|
|
18
|
+
name: 'bootstrap',
|
|
19
|
+
prefix: secret.slice(0, 16),
|
|
20
|
+
digest: this.#hasher.digest(secret),
|
|
21
|
+
scope: 'admin',
|
|
22
|
+
});
|
|
23
|
+
}
|
|
24
|
+
issue(kind, name, scope) {
|
|
25
|
+
const generated = this.#hasher.generate(kind);
|
|
26
|
+
return {
|
|
27
|
+
key: this.#store.createApiKey({
|
|
28
|
+
kind,
|
|
29
|
+
name,
|
|
30
|
+
prefix: generated.prefix,
|
|
31
|
+
digest: generated.digest,
|
|
32
|
+
scope: kind === 'control' ? (scope ?? 'admin') : null,
|
|
33
|
+
}),
|
|
34
|
+
secret: generated.secret,
|
|
35
|
+
};
|
|
36
|
+
}
|
|
37
|
+
authenticate(kind, secret) {
|
|
38
|
+
if (this.#hasher.kindFor(secret) !== kind) {
|
|
39
|
+
throw new AppError('unauthorized', 'Invalid or revoked credential', 401);
|
|
40
|
+
}
|
|
41
|
+
const key = this.#store.getApiKeyByDigest(kind, this.#hasher.digest(secret));
|
|
42
|
+
if (!key || !this.#hasher.verify(secret, key.digest)) {
|
|
43
|
+
throw new AppError('unauthorized', 'Invalid or revoked credential', 401);
|
|
44
|
+
}
|
|
45
|
+
const timestamp = Date.now();
|
|
46
|
+
const lastTouched = this.#lastTouched.get(key.id) ?? 0;
|
|
47
|
+
if (timestamp - lastTouched >= 60_000) {
|
|
48
|
+
this.#store.touchApiKey(key.id);
|
|
49
|
+
this.#lastTouched.set(key.id, timestamp);
|
|
50
|
+
}
|
|
51
|
+
return { id: key.id, kind, name: key.name, scope: key.scope };
|
|
52
|
+
}
|
|
53
|
+
authenticateBearer(kind, request) {
|
|
54
|
+
const token = bearerToken(request);
|
|
55
|
+
if (!token)
|
|
56
|
+
throw new AppError('unauthorized', 'Bearer credential required', 401);
|
|
57
|
+
return this.authenticate(kind, token);
|
|
58
|
+
}
|
|
59
|
+
toMcpAuthInfo(principal, token, resource) {
|
|
60
|
+
return {
|
|
61
|
+
token,
|
|
62
|
+
clientId: principal.id,
|
|
63
|
+
scopes: ['mcp:use'],
|
|
64
|
+
resource,
|
|
65
|
+
extra: { credentialKind: principal.kind, name: principal.name },
|
|
66
|
+
};
|
|
67
|
+
}
|
|
68
|
+
}
|
|
69
|
+
export function bearerToken(request) {
|
|
70
|
+
const authorization = request.headers.get('authorization');
|
|
71
|
+
if (!authorization)
|
|
72
|
+
return null;
|
|
73
|
+
const match = /^Bearer[\t ]+([^\s].*)$/i.exec(authorization);
|
|
74
|
+
return match?.[1]?.trim() || null;
|
|
75
|
+
}
|
|
76
|
+
//# sourceMappingURL=auth-service.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"auth-service.js","sourceRoot":"","sources":["../../../src/security/auth-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAkB/C,MAAM,OAAO,WAAW;IACb,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,CAAQ;IACd,OAAO,CAAe;IAE/B,YAAY,KAAY,EAAE,MAAoB;QAC5C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED,yBAAyB,CAAC,MAA0B;QAClD,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC;YAAE,OAAO;QACrF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,QAAQ,CAChB,wBAAwB,EACxB,2DAA2D,EAC3D,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YACvB,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACnC,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAgB,EAAE,IAAY,EAAE,KAA2B;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC5B,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;aACtD,CAAC;YACF,MAAM,EAAE,SAAS,CAAC,MAAM;SACzB,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,IAAgB,EAAE,MAAc;QAC3C,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1C,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,+BAA+B,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,+BAA+B,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,SAAS,GAAG,WAAW,IAAI,MAAM,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAChE,CAAC;IAED,kBAAkB,CAAC,IAAgB,EAAE,OAAgB;QACnD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,aAAa,CAAC,SAAwB,EAAE,KAAa,EAAE,QAAa;QAClE,OAAO;YACL,KAAK;YACL,QAAQ,EAAE,SAAS,CAAC,EAAE;YACtB,MAAM,EAAE,CAAC,SAAS,CAAC;YACnB,QAAQ;YACR,KAAK,EAAE,EAAE,cAAc,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE;SAChE,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,OAAgB;IAC1C,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3D,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AACpC,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
import type { AuthPrincipal } from './auth-service.js';
|
|
2
|
+
export declare class ControlSessionService {
|
|
3
|
+
#private;
|
|
4
|
+
constructor(masterKey: string);
|
|
5
|
+
issue(principal: AuthPrincipal): Promise<string>;
|
|
6
|
+
verify(token: string): Promise<AuthPrincipal>;
|
|
7
|
+
}
|
|
8
|
+
export declare function cookieValue(request: Request, name: string): string | null;
|
|
9
|
+
//# sourceMappingURL=control-session.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"control-session.d.ts","sourceRoot":"","sources":["../../../src/security/control-session.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAQvD,qBAAa,qBAAqB;;IAGhC,YAAY,SAAS,EAAE,MAAM,EAE5B;IAEK,KAAK,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CASrD;IAEK,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAYlD;CACF;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQzE"}
|
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
import { createHash } from 'node:crypto';
|
|
2
|
+
import { SignJWT, jwtVerify } from 'jose';
|
|
3
|
+
import { z } from 'zod';
|
|
4
|
+
import { AppError } from '../domain/errors.js';
|
|
5
|
+
const claimsSchema = z.object({
|
|
6
|
+
sub: z.string(),
|
|
7
|
+
name: z.string(),
|
|
8
|
+
kind: z.literal('control'),
|
|
9
|
+
});
|
|
10
|
+
export class ControlSessionService {
|
|
11
|
+
#key;
|
|
12
|
+
constructor(masterKey) {
|
|
13
|
+
this.#key = createHash('sha256').update(`toolhome.session:${masterKey}`).digest();
|
|
14
|
+
}
|
|
15
|
+
async issue(principal) {
|
|
16
|
+
return new SignJWT({ name: principal.name, kind: 'control' })
|
|
17
|
+
.setProtectedHeader({ alg: 'HS256', typ: 'JWT' })
|
|
18
|
+
.setSubject(principal.id)
|
|
19
|
+
.setIssuer('toolhome')
|
|
20
|
+
.setAudience('toolhome-control')
|
|
21
|
+
.setIssuedAt()
|
|
22
|
+
.setExpirationTime('8h')
|
|
23
|
+
.sign(this.#key);
|
|
24
|
+
}
|
|
25
|
+
async verify(token) {
|
|
26
|
+
try {
|
|
27
|
+
const result = await jwtVerify(token, this.#key, {
|
|
28
|
+
algorithms: ['HS256'],
|
|
29
|
+
issuer: 'toolhome',
|
|
30
|
+
audience: 'toolhome-control',
|
|
31
|
+
});
|
|
32
|
+
const claims = claimsSchema.parse(result.payload);
|
|
33
|
+
return { id: claims.sub, name: claims.name, kind: 'control', scope: null };
|
|
34
|
+
}
|
|
35
|
+
catch {
|
|
36
|
+
throw new AppError('unauthorized', 'Control session is invalid or expired', 401);
|
|
37
|
+
}
|
|
38
|
+
}
|
|
39
|
+
}
|
|
40
|
+
export function cookieValue(request, name) {
|
|
41
|
+
const cookie = request.headers.get('cookie');
|
|
42
|
+
if (!cookie)
|
|
43
|
+
return null;
|
|
44
|
+
for (const part of cookie.split(';')) {
|
|
45
|
+
const [key, ...rest] = part.trim().split('=');
|
|
46
|
+
if (key === name)
|
|
47
|
+
return decodeURIComponent(rest.join('='));
|
|
48
|
+
}
|
|
49
|
+
return null;
|
|
50
|
+
}
|
|
51
|
+
//# sourceMappingURL=control-session.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"control-session.js","sourceRoot":"","sources":["../../../src/security/control-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAG/C,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,OAAO,qBAAqB;IACvB,IAAI,CAAa;IAE1B,YAAY,SAAiB;QAC3B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,oBAAoB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAwB;QAClC,OAAO,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;aAC1D,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;aAChD,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;aACxB,SAAS,CAAC,UAAU,CAAC;aACrB,WAAW,CAAC,kBAAkB,CAAC;aAC/B,WAAW,EAAE;aACb,iBAAiB,CAAC,IAAI,CAAC;aACvB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;gBAC/C,UAAU,EAAE,CAAC,OAAO,CAAC;gBACrB,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,kBAAkB;aAC7B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,uCAAuC,EAAE,GAAG,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,OAAgB,EAAE,IAAY;IACxD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
import type { CredentialPayload } from '../domain/models.js';
|
|
2
|
+
export interface MaterializedCredential {
|
|
3
|
+
headers: Record<string, string>;
|
|
4
|
+
env: Record<string, string>;
|
|
5
|
+
bearerToken?: string;
|
|
6
|
+
}
|
|
7
|
+
/**
|
|
8
|
+
* Converts one stored credential into the common material used by MCP and CLI
|
|
9
|
+
* consumers. OAuth remains backed by StoredOAuthProvider for MCP; its access
|
|
10
|
+
* token can be projected to a CLI environment when a binding requests it.
|
|
11
|
+
*/
|
|
12
|
+
export declare function materializeCredentialPayload(payload: CredentialPayload): MaterializedCredential;
|
|
13
|
+
/**
|
|
14
|
+
* Maps a stored credential payload to the environment variables a platform CLI
|
|
15
|
+
* expects. Binding values support `env:<name>`, `token`, `value`,
|
|
16
|
+
* `header:<name>`, and `accessToken`.
|
|
17
|
+
*/
|
|
18
|
+
export declare function validateCliCredentialBindings(payload: CredentialPayload, bindings: Record<string, string>): void;
|
|
19
|
+
export declare function materializeCliCredential(payload: CredentialPayload, bindings: Record<string, string>): Record<string, string>;
|
|
20
|
+
//# sourceMappingURL=credential-materializer.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"credential-materializer.d.ts","sourceRoot":"","sources":["../../../src/security/credential-materializer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,iBAAiB,GAAG,sBAAsB,CAiB/F;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,IAAI,CAYN;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB"}
|
|
@@ -0,0 +1,82 @@
|
|
|
1
|
+
import { AppError } from '../domain/errors.js';
|
|
2
|
+
/**
|
|
3
|
+
* Converts one stored credential into the common material used by MCP and CLI
|
|
4
|
+
* consumers. OAuth remains backed by StoredOAuthProvider for MCP; its access
|
|
5
|
+
* token can be projected to a CLI environment when a binding requests it.
|
|
6
|
+
*/
|
|
7
|
+
export function materializeCredentialPayload(payload) {
|
|
8
|
+
switch (payload.type) {
|
|
9
|
+
case 'bearer':
|
|
10
|
+
return { headers: {}, env: {}, bearerToken: payload.token };
|
|
11
|
+
case 'api-key':
|
|
12
|
+
return { headers: { [payload.headerName]: payload.value }, env: {} };
|
|
13
|
+
case 'headers':
|
|
14
|
+
return { headers: payload.headers, env: {} };
|
|
15
|
+
case 'env':
|
|
16
|
+
return { headers: {}, env: payload.variables };
|
|
17
|
+
case 'oauth':
|
|
18
|
+
return {
|
|
19
|
+
headers: {},
|
|
20
|
+
env: {},
|
|
21
|
+
...(payload.accessToken === undefined ? {} : { bearerToken: payload.accessToken }),
|
|
22
|
+
};
|
|
23
|
+
}
|
|
24
|
+
}
|
|
25
|
+
/**
|
|
26
|
+
* Maps a stored credential payload to the environment variables a platform CLI
|
|
27
|
+
* expects. Binding values support `env:<name>`, `token`, `value`,
|
|
28
|
+
* `header:<name>`, and `accessToken`.
|
|
29
|
+
*/
|
|
30
|
+
export function validateCliCredentialBindings(payload, bindings) {
|
|
31
|
+
if (payload.type === 'env' && Object.keys(bindings).length === 0)
|
|
32
|
+
return;
|
|
33
|
+
if (Object.keys(bindings).length === 0) {
|
|
34
|
+
throw new AppError('credential_binding_invalid', 'CLI credentials require at least one environment binding', 400);
|
|
35
|
+
}
|
|
36
|
+
for (const source of Object.values(bindings)) {
|
|
37
|
+
assertBindingSource(payload, source, true);
|
|
38
|
+
}
|
|
39
|
+
}
|
|
40
|
+
export function materializeCliCredential(payload, bindings) {
|
|
41
|
+
validateCliCredentialBindings(payload, bindings);
|
|
42
|
+
if (payload.type === 'env' && Object.keys(bindings).length === 0)
|
|
43
|
+
return payload.variables;
|
|
44
|
+
return Object.fromEntries(Object.entries(bindings).map(([name, source]) => [name, resolveBinding(payload, source)]));
|
|
45
|
+
}
|
|
46
|
+
function resolveBinding(payload, source) {
|
|
47
|
+
assertBindingSource(payload, source, false);
|
|
48
|
+
if (payload.type === 'env' && source.startsWith('env:')) {
|
|
49
|
+
return payload.variables[source.slice('env:'.length)];
|
|
50
|
+
}
|
|
51
|
+
if (payload.type === 'bearer' && source === 'token')
|
|
52
|
+
return payload.token;
|
|
53
|
+
if (payload.type === 'api-key' && source === 'value')
|
|
54
|
+
return payload.value;
|
|
55
|
+
if (payload.type === 'headers' && source.startsWith('header:')) {
|
|
56
|
+
return payload.headers[source.slice('header:'.length)];
|
|
57
|
+
}
|
|
58
|
+
if (payload.type === 'oauth' && source === 'accessToken')
|
|
59
|
+
return payload.accessToken;
|
|
60
|
+
throw new AppError('credential_binding_invalid', `Credential binding source "${source}" is not available`, 400);
|
|
61
|
+
}
|
|
62
|
+
function assertBindingSource(payload, source, allowPendingOAuth) {
|
|
63
|
+
if (payload.type === 'env' && source.startsWith('env:')) {
|
|
64
|
+
if (payload.variables[source.slice('env:'.length)] !== undefined)
|
|
65
|
+
return;
|
|
66
|
+
}
|
|
67
|
+
if (payload.type === 'bearer' && source === 'token')
|
|
68
|
+
return;
|
|
69
|
+
if (payload.type === 'api-key' && source === 'value')
|
|
70
|
+
return;
|
|
71
|
+
if (payload.type === 'headers' && source.startsWith('header:')) {
|
|
72
|
+
if (payload.headers[source.slice('header:'.length)] !== undefined)
|
|
73
|
+
return;
|
|
74
|
+
}
|
|
75
|
+
if (payload.type === 'oauth' && source === 'accessToken') {
|
|
76
|
+
if (payload.accessToken || allowPendingOAuth)
|
|
77
|
+
return;
|
|
78
|
+
throw new AppError('credential_authorization_required', 'OAuth credential requires authorization before CLI execution', 400);
|
|
79
|
+
}
|
|
80
|
+
throw new AppError('credential_binding_invalid', `Credential binding source "${source}" is not available`, 400);
|
|
81
|
+
}
|
|
82
|
+
//# sourceMappingURL=credential-materializer.js.map
|