@aitne/daemon 0.1.0

package/dist/services/mcp/probe.js

@@ -0,0 +1,437 @@
+import { execFileSync, spawn } from "node:child_process";
+import { mkdir } from "node:fs/promises";
+import { join } from "node:path";
+import { randomUUID } from "node:crypto";
+import { toSafeErrorMessage } from "../../logging.js";
+const PROBE_TIMEOUT_MS = 10_000;
+/**
+ * MCP protocol version we send in `initialize`. The three official clients
+ * (Claude, Codex, Gemini) all ship with `2024-11-05` or later negotiators,
+ * so the probe advertising 2024-11-05 is the lowest-common-denominator that
+ * still gets us `tools/list` support. Upstream spec:
+ * https://modelcontextprotocol.io/specification/2024-11-05
+ */
+const MCP_PROTOCOL_VERSION = "2024-11-05";
+export async function probeMcpServer(server, options) {
+    const now = options.now ?? Date.now;
+    const start = now();
+    const timeoutMs = options.timeoutMs ?? PROBE_TIMEOUT_MS;
+    try {
+        const tools = await runProbe(server, options, timeoutMs);
+        return {
+            ok: true,
+            toolCount: tools.length,
+            tools,
+            durationMs: Math.max(0, now() - start),
+        };
+    }
+    catch (err) {
+        return {
+            ok: false,
+            toolCount: 0,
+            tools: [],
+            error: toSafeErrorMessage(err),
+            durationMs: Math.max(0, now() - start),
+        };
+    }
+}
+async function runProbe(server, options, timeoutMs) {
+    switch (server.transport) {
+        case "stdio":
+            return probeStdio(server, options, timeoutMs);
+        case "http":
+        case "sse":
+            return probeHttp(server, options, timeoutMs);
+        default:
+            // Defensive fallback for rows hand-edited or produced by a future
+            // migration that introduces a transport this probe doesn't yet know.
+            throw new Error(`Unsupported transport: ${String(server.transport)}`);
+    }
+}
+/* ------------------------------------------------------------------ *
+ * stdio transport
+ * ------------------------------------------------------------------ */
+/**
+ * Minimal env allowlist that lets common MCP server binaries (npx, uvx,
+ * node, python) resolve. We intentionally do NOT inherit `process.env` —
+ * the probe is an uncontrolled third party and should only see what we
+ * hand it.
+ */
+const BASE_STDIO_ENV_KEYS = [
+    "PATH",
+    "HOME",
+    "USER",
+    "LANG",
+    "LC_ALL",
+    "TMPDIR",
+    "TERM",
+    "NODE_PATH",
+    "NVM_DIR",
+];
+function buildStdioEnv(envKeys, secrets) {
+    const env = {};
+    for (const key of BASE_STDIO_ENV_KEYS) {
+        const v = process.env[key];
+        if (v !== undefined)
+            env[key] = v;
+    }
+    for (const key of envKeys) {
+        const v = secrets[key];
+        if (v !== undefined)
+            env[key] = v;
+    }
+    return env;
+}
+async function probeStdio(server, options, timeoutMs) {
+    if (!server.command) {
+        throw new Error("stdio probe requires server.command");
+    }
+    const probeId = `${server.id}-${randomUUID().slice(0, 8)}`;
+    const sandboxCwd = join(options.dataDir, "mcp", server.id, "probe-sandbox", probeId);
+    await mkdir(sandboxCwd, { recursive: true, mode: 0o700 });
+    // `??` fallbacks: the McpServer shape materializes envKeys/headerKeys as
+    // required arrays, but the DB row can carry `args` as null, so only that
+    // path is genuinely observable from tests.
+    const env = buildStdioEnv(server.envKeys, options.secrets);
+    const child = spawn(server.command, server.args ?? [], {
+        cwd: server.cwd ?? sandboxCwd,
+        env,
+        stdio: ["pipe", "pipe", "pipe"],
+        // POSIX: detached=true makes the child a process-group leader so the
+        // killTree below can take down grandchildren via `kill -pid`. On
+        // Windows there are no process groups; `taskkill /T` reads the
+        // parent-pid chain instead, so the flag is unnecessary there and the
+        // hidden-window helps avoid a flashing console for child binaries.
+        detached: process.platform !== "win32",
+        windowsHide: true,
+    });
+    let settled = false;
+    const stderrBuf = [];
+    const killTree = () => {
+        /* c8 ignore next — defensive; spawn always assigns pid, killed flips after
+           our own kill() call. Kept so a mocked child in future tests can't escape. */
+        if (child.pid == null || child.killed)
+            return;
+        /* c8 ignore start — Windows-only branch, untestable on POSIX CI. */
+        if (process.platform === "win32") {
+            // Windows has no process groups; `taskkill /T /F` walks the parent-pid
+            // tree to terminate descendants the way `kill -pid` does on POSIX.
+            try {
+                execFileSync("taskkill", ["/T", "/F", "/PID", String(child.pid)], {
+                    stdio: "pipe",
+                    windowsHide: true,
+                });
+                return;
+            }
+            catch {
+                try {
+                    child.kill("SIGKILL");
+                }
+                catch {
+                    /* already gone */
+                }
+                return;
+            }
+        }
+        /* c8 ignore stop */
+        try {
+            process.kill(-child.pid, "SIGKILL");
+        }
+        catch {
+            /* c8 ignore start — race: process exits between pid check and signal. */
+            try {
+                child.kill("SIGKILL");
+            }
+            catch {
+                /* already gone */
+            }
+            /* c8 ignore stop */
+        }
+    };
+    return new Promise((resolve, reject) => {
+        const finish = (fn) => {
+            /* c8 ignore start — idempotence guard. The exit handler already checks
+               `!settled` before calling finish, and timer/error handlers install
+               once() listeners; the second branch only trips if a future refactor
+               re-enters finish from an async tail. */
+            if (settled)
+                return;
+            /* c8 ignore stop */
+            settled = true;
+            try {
+                fn();
+            }
+            finally {
+                killTree();
+            }
+        };
+        const timer = setTimeout(() => {
+            finish(() => reject(new Error(`probe timed out after ${timeoutMs}ms (stderr: ${truncate(stderrBuf.join(""), 400)})`)));
+        }, timeoutMs);
+        /* c8 ignore next 6 — surfaced only when spawn(2) itself fails after the
+           child handle was returned (EMFILE / ENOMEM mid-fork). The "missing
+           binary" test produces an exit-code path instead. */
+        child.once("error", (err) => {
+            finish(() => {
+                clearTimeout(timer);
+                reject(err);
+            });
+        });
+        child.stderr?.on("data", (chunk) => {
+            stderrBuf.push(chunk.toString("utf8"));
+        });
+        readLines(child, (line) => {
+            let message;
+            try {
+                message = JSON.parse(line);
+            }
+            catch {
+                return;
+            }
+            runner.handle(message);
+        });
+        const runner = createProbeRunner({
+            send: (msg) => {
+                child.stdin?.write(`${JSON.stringify(msg)}\n`);
+            },
+            onTools: (tools) => {
+                finish(() => {
+                    clearTimeout(timer);
+                    resolve(tools);
+                });
+            },
+            onError: (err) => {
+                finish(() => {
+                    clearTimeout(timer);
+                    reject(err);
+                });
+            },
+        });
+        /* onError above is exercised via init-error + list-error stdio scenarios. */
+        runner.start();
+        child.once("exit", (code, signal) => {
+            if (!settled) {
+                finish(() => {
+                    clearTimeout(timer);
+                    reject(new Error(`probe process exited before tools/list returned (code=${code}, signal=${signal}, stderr: ${truncate(stderrBuf.join(""), 400)})`));
+                });
+            }
+        });
+    });
+}
+function readLines(child, onLine) {
+    let buf = "";
+    child.stdout?.on("data", (chunk) => {
+        buf += chunk.toString("utf8");
+        let idx;
+        while ((idx = buf.indexOf("\n")) >= 0) {
+            const line = buf.slice(0, idx).trim();
+            buf = buf.slice(idx + 1);
+            if (line.length > 0)
+                onLine(line);
+        }
+    });
+}
+function truncate(s, max) {
+    return s.length > max ? `${s.slice(0, max)}…` : s;
+}
+/* ------------------------------------------------------------------ *
+ * http / sse transport
+ * ------------------------------------------------------------------ */
+async function probeHttp(server, options, timeoutMs) {
+    if (!server.url) {
+        throw new Error("http probe requires server.url");
+    }
+    const origin = new URL(server.url).origin;
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort("probe timeout"), timeoutMs);
+    const headers = {
+        "Content-Type": "application/json",
+        Accept: "application/json, text/event-stream",
+    };
+    for (const key of server.headerKeys) {
+        const v = options.secrets[key];
+        if (v !== undefined)
+            headers[key] = v;
+    }
+    try {
+        // Streamable HTTP transports accept one JSON-RPC message per POST and
+        // return the reply either inline as JSON or as a single SSE event.
+        const initReply = await httpRpc({
+            url: server.url,
+            origin,
+            headers,
+            body: buildInitRequest(),
+            signal: ctrl.signal,
+        });
+        if ("error" in initReply && initReply.error) {
+            throw new Error(`initialize failed: ${initReply.error.message}`);
+        }
+        // Per spec, clients SHOULD send `notifications/initialized` after init.
+        // Some servers reject `tools/list` before they see it.
+        await httpRpc({
+            url: server.url,
+            origin,
+            headers,
+            body: buildInitializedNotification(),
+            signal: ctrl.signal,
+            isNotification: true,
+        }).catch(() => undefined); // notifications don't need a reply
+        const listReply = await httpRpc({
+            url: server.url,
+            origin,
+            headers,
+            body: buildToolsListRequest(),
+            signal: ctrl.signal,
+        });
+        if ("error" in listReply && listReply.error) {
+            throw new Error(`tools/list failed: ${listReply.error.message}`);
+        }
+        return extractTools(listReply.result);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+async function httpRpc(params) {
+    const res = await fetch(params.url, {
+        method: "POST",
+        headers: params.headers,
+        body: JSON.stringify(params.body),
+        redirect: "manual",
+        signal: params.signal,
+    });
+    if (res.status >= 300 && res.status < 400) {
+        // Surface a same-origin redirect only; cross-origin bounces terminate
+        // the probe so we don't ship headers to an untrusted host.
+        const loc = res.headers.get("location");
+        if (!loc)
+            throw new Error(`redirect without Location header (status ${res.status})`);
+        const target = new URL(loc, params.url);
+        if (target.origin !== params.origin) {
+            throw new Error(`refusing cross-origin redirect to ${target.origin} (from ${params.origin})`);
+        }
+        return httpRpc({ ...params, url: target.toString() });
+    }
+    if (!res.ok) {
+        const body = await res.text().catch(() => "");
+        throw new Error(`HTTP ${res.status}: ${truncate(body, 400)}`);
+    }
+    if (params.isNotification) {
+        // Spec allows 202 with no body for notifications.
+        return { jsonrpc: "2.0", id: null, result: null };
+    }
+    /* c8 ignore start — `res.headers.get` never returns null when the server
+       includes a body; the `??` fallback placates TS's strict header typing. */
+    const contentType = res.headers.get("content-type") ?? "";
+    /* c8 ignore stop */
+    if (contentType.includes("text/event-stream")) {
+        return parseSseEvent(await res.text());
+    }
+    return (await res.json());
+}
+/** Pull the first `data:`-carried JSON-RPC payload out of an SSE body. */
+function parseSseEvent(raw) {
+    for (const line of raw.split(/\r?\n/)) {
+        if (!line.startsWith("data:"))
+            continue;
+        const payload = line.slice(5).trim();
+        if (payload.length === 0)
+            continue;
+        try {
+            return JSON.parse(payload);
+        }
+        catch {
+            // fall through
+        }
+    }
+    throw new Error("SSE response did not include a JSON-RPC payload");
+}
+function buildInitRequest() {
+    return {
+        jsonrpc: "2.0",
+        id: 1,
+        method: "initialize",
+        params: {
+            protocolVersion: MCP_PROTOCOL_VERSION,
+            capabilities: {},
+            clientInfo: { name: "personal-agent-probe", version: "0.1.0" },
+        },
+    };
+}
+function buildInitializedNotification() {
+    return { jsonrpc: "2.0", method: "notifications/initialized" };
+}
+function buildToolsListRequest() {
+    return { jsonrpc: "2.0", id: 2, method: "tools/list" };
+}
+function extractTools(result) {
+    if (typeof result !== "object" || result == null)
+        return [];
+    const list = result.tools;
+    if (!Array.isArray(list))
+        return [];
+    const out = [];
+    for (const raw of list) {
+        if (typeof raw !== "object" || raw == null)
+            continue;
+        const obj = raw;
+        if (typeof obj.name !== "string")
+            continue;
+        const entry = typeof obj.description === "string"
+            ? { name: obj.name, description: obj.description }
+            : { name: obj.name };
+        out.push(entry);
+    }
+    return out;
+}
+/** State machine for the two-step stdio handshake (init → initialized → tools/list). */
+function createProbeRunner(io) {
+    let phase = "awaiting_init";
+    return {
+        start() {
+            io.send(buildInitRequest());
+        },
+        handle(message) {
+            if (phase === "done")
+                return;
+            if (!("id" in message))
+                return; // ignore notifications
+            const response = message;
+            if (phase === "awaiting_init") {
+                if (response.id !== 1)
+                    return;
+                if (response.error) {
+                    phase = "done";
+                    io.onError(new Error(`initialize failed: ${response.error.message}`));
+                    return;
+                }
+                io.send(buildInitializedNotification());
+                io.send(buildToolsListRequest());
+                phase = "awaiting_tools";
+                return;
+            }
+            if (phase === "awaiting_tools") {
+                if (response.id !== 2)
+                    return;
+                if (response.error) {
+                    phase = "done";
+                    io.onError(new Error(`tools/list failed: ${response.error.message}`));
+                    return;
+                }
+                phase = "done";
+                /* extractTools never throws — it filters invalid shapes — but the
+                   try/catch stays so a future refactor that adds a throw still surfaces
+                   as a structured probe failure instead of a bare promise rejection. */
+                try {
+                    io.onTools(extractTools(response.result));
+                    /* c8 ignore next 3 */
+                }
+                catch (err) {
+                    io.onError(err);
+                }
+            }
+        },
+    };
+}
+//# sourceMappingURL=probe.js.map

package/dist/services/mcp/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../../src/services/mcp/probe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGtD,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC;;;;;;GAMG;AACH,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAgC1C,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAGC,EACD,OAAwB;IAExB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;IACpB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAExD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACzD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,SAAS,EAAE,KAAK,CAAC,MAAM;YACvB,KAAK;YACL,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;SACvC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,CAAC;YACZ,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC;YAC9B,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;SACvC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAA4C,EAC5C,OAAwB,EACxB,SAAiB;IAEjB,QAAQ,MAAM,CAAC,SAAS,EAAE,CAAC;QACzB,KAAK,OAAO;YACV,OAAO,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC;QACZ,KAAK,KAAK;YACR,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/C;YACE,kEAAkE;YAClE,qEAAqE;YACrE,MAAM,IAAI,KAAK,CACb,0BAA0B,MAAM,CAAE,MAAgC,CAAC,SAAS,CAAC,EAAE,CAChF,CAAC;IACN,CAAC;AACH,CAAC;AAED;;wEAEwE;AAExE;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG;IAC1B,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,WAAW;IACX,SAAS;CACD,CAAC;AAEX,SAAS,aAAa,CACpB,OAA0B,EAC1B,OAA+B;IAE/B,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAA4C,EAC5C,OAAwB,EACxB,SAAiB;IAEjB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,EAAE,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IACrF,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE1D,yEAAyE;IACzE,yEAAyE;IACzE,2CAA2C;IAC3C,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE;QACrD,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,UAAU;QAC7B,GAAG;QACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,qEAAqE;QACrE,iEAAiE;QACjE,+DAA+D;QAC/D,qEAAqE;QACrE,mEAAmE;QACnE,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;QACtC,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB;uFAC+E;QAC/E,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO;QAC9C,oEAAoE;QACpE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,uEAAuE;YACvE,mEAAmE;YACnE,IAAI,CAAC;gBACH,YAAY,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE;oBAChE,KAAK,EAAE,MAAM;oBACb,WAAW,EAAE,IAAI;iBAClB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,kBAAkB;gBACpB,CAAC;gBACD,OAAO;YACT,CAAC;QACH,CAAC;QACD,oBAAoB;QACpB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;YACD,oBAAoB;QACtB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9D,MAAM,MAAM,GAAG,CAAC,EAAc,EAAE,EAAE;YAChC;;;sDAG0C;YAC1C,IAAI,OAAO;gBAAE,OAAO;YACpB,oBAAoB;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC;gBACH,EAAE,EAAE,CAAC;YACP,CAAC;oBAAS,CAAC;gBACT,QAAQ,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CACJ,IAAI,KAAK,CACP,yBAAyB,SAAS,eAAe,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CACtF,CACF,CACF,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd;;8DAEsD;QACtD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC1B,MAAM,CAAC,GAAG,EAAE;gBACV,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,OAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;gBACZ,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,MAAM,CAAC,GAAG,EAAE;oBACV,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACf,MAAM,CAAC,GAAG,EAAE;oBACV,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;QACH,6EAA6E;QAE7E,MAAM,CAAC,KAAK,EAAE,CAAC;QAEf,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,EAAE;oBACV,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CACJ,IAAI,KAAK,CACP,yDAAyD,IAAI,YAAY,MAAM,aAAa,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CACjI,CACF,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAChB,KAAmB,EACnB,MAA8B;IAE9B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,GAAW,CAAC;QAChB,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;wEAEwE;AAExE,KAAK,UAAU,SAAS,CACtB,MAA4C,EAC5C,OAAwB,EACxB,SAAiB;IAEjB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC,CAAC;IAEvE,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,qCAAqC;KAC9C,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,CAAC;QACH,sEAAsE;QACtE,mEAAmE;QACnE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC;YAC9B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM;YACN,OAAO;YACP,IAAI,EAAE,gBAAgB,EAAE;YACxB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,SAAS,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,wEAAwE;QACxE,uDAAuD;QACvD,MAAM,OAAO,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM;YACN,OAAO;YACP,IAAI,EAAE,4BAA4B,EAAE;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,mCAAmC;QAE9D,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC;YAC9B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM;YACN,OAAO;YACP,IAAI,EAAE,qBAAqB,EAAE;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,SAAS,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,MAOtB;IACC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;QAClC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1C,sEAAsE;QACtE,2DAA2D;QAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,qCAAqC,MAAM,CAAC,MAAM,UAAU,MAAM,CAAC,MAAM,GAAG,CAC7E,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,kDAAkD;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IAED;gFAC4E;IAC5E,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC1D,oBAAoB;IACpB,IAAI,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC9C,OAAO,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoB,CAAC;AAC/C,CAAC;AAED,0EAA0E;AAC1E,SAAS,aAAa,CAAC,GAAW;IAChC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACrE,CAAC;AA4BD,SAAS,gBAAgB;IACvB,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE,EAAE,CAAC;QACL,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE;YACN,eAAe,EAAE,oBAAoB;YACrC,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE;SAC/D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B;IACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,MAAe;IACnC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAI,MAA8B,CAAC,KAAK,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,IAAI,IAAI;YAAE,SAAS;QACrD,MAAM,GAAG,GAAG,GAAgD,CAAC;QAC7D,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QAC3C,MAAM,KAAK,GACT,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;YACjC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;YAClD,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wFAAwF;AACxF,SAAS,iBAAiB,CAAC,EAI1B;IACC,IAAI,KAAK,GAAgD,eAAe,CAAC;IACzE,OAAO;QACL,KAAK;YACH,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,CAAC,OAAuB;YAC5B,IAAI,KAAK,KAAK,MAAM;gBAAE,OAAO;YAC7B,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC;gBAAE,OAAO,CAAC,uBAAuB;YACvD,MAAM,QAAQ,GAAG,OAA0B,CAAC;YAE5C,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;gBAC9B,IAAI,QAAQ,CAAC,EAAE,KAAK,CAAC;oBAAE,OAAO;gBAC9B,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACnB,KAAK,GAAG,MAAM,CAAC;oBACf,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBACtE,OAAO;gBACT,CAAC;gBACD,EAAE,CAAC,IAAI,CAAC,4BAA4B,EAAE,CAAC,CAAC;gBACxC,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC;gBACjC,KAAK,GAAG,gBAAgB,CAAC;gBACzB,OAAO;YACT,CAAC;YAED,IAAI,KAAK,KAAK,gBAAgB,EAAE,CAAC;gBAC/B,IAAI,QAAQ,CAAC,EAAE,KAAK,CAAC;oBAAE,OAAO;gBAC9B,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACnB,KAAK,GAAG,MAAM,CAAC;oBACf,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBACtE,OAAO;gBACT,CAAC;gBACD,KAAK,GAAG,MAAM,CAAC;gBACf;;wFAEwE;gBACxE,IAAI,CAAC;oBACH,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC1C,sBAAsB;gBACxB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,EAAE,CAAC,OAAO,CAAC,GAAY,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/services/mcp/registry.d.ts

@@ -0,0 +1,84 @@
+import type Database from "better-sqlite3";
+import { type BackendId } from "@aitne/shared";
+import { type McpProbeResult, type McpRiskTier, type McpServer, type McpTransport } from "./types.js";
+import type { EncryptedBlobStore } from "../../secrets/encrypted-blob-store.js";
+export interface McpServerInput {
+    id: string;
+    name: string;
+    transport: McpTransport;
+    command?: string | null;
+    args?: string[] | null;
+    cwd?: string | null;
+    url?: string | null;
+    envKeys?: string[];
+    headerKeys?: string[];
+    backends: BackendId[];
+    enabled?: boolean;
+    riskTier?: McpRiskTier;
+    toolAllowlist?: string[] | null;
+}
+export declare class DuplicateMcpServerError extends Error {
+    readonly code = "duplicate_mcp_server";
+    constructor(id: string);
+}
+export declare class McpServerNotFoundError extends Error {
+    readonly code = "mcp_server_not_found";
+    constructor(id: string);
+}
+export declare class InvalidMcpServerError extends Error {
+    readonly code = "invalid_mcp_server";
+    constructor(message: string);
+}
+export declare function listMcpServers(db: Database.Database): McpServer[];
+export declare function getMcpServer(db: Database.Database, id: string): McpServer | null;
+export declare function anyMcpServerEnabled(db: Database.Database): boolean;
+export declare function insertMcpServer(db: Database.Database, input: McpServerInput): McpServer;
+export interface McpServerPatch {
+    name?: string;
+    transport?: McpTransport;
+    command?: string | null;
+    args?: string[] | null;
+    cwd?: string | null;
+    url?: string | null;
+    envKeys?: string[];
+    headerKeys?: string[];
+    backends?: BackendId[];
+    riskTier?: McpRiskTier;
+    toolAllowlist?: string[] | null;
+}
+export declare function updateMcpServer(db: Database.Database, id: string, patch: McpServerPatch): McpServer;
+export declare function setMcpServerEnabled(db: Database.Database, id: string, enabled: boolean): McpServer;
+export declare function deleteMcpServer(db: Database.Database, id: string): boolean;
+/**
+ * Kill switch — flip every `enabled=1` row to `enabled=0` in a single
+ * statement. Returns the count of rows actually changed so the caller
+ * (dashboard) can render a "disabled N servers" confirmation. Rows that
+ * were already disabled are not touched (SQL `WHERE enabled = 1`), so
+ * `updated_at` stays meaningful as "last user-driven state change".
+ */
+export declare function disableAllMcpServers(db: Database.Database): number;
+export declare function saveMcpProbeResult(db: Database.Database, id: string, result: McpProbeResult): McpServer;
+export declare function getMcpSecret(blobStore: EncryptedBlobStore, serverId: string, keyName: string): Promise<string | null>;
+export declare function setMcpSecret(blobStore: EncryptedBlobStore, serverId: string, keyName: string, value: string): Promise<void>;
+export declare function deleteMcpSecret(blobStore: EncryptedBlobStore, serverId: string, keyName: string): Promise<void>;
+/**
+ * Delete every stored secret for this server — called after DELETE /api/mcp/servers/:id
+ * so orphaned blobs don't linger on disk. Callers iterate over `envKeys +
+ * headerKeys` captured *before* the DB row is deleted; this helper only takes
+ * the list of names so the registry never has to reason about transport.
+ */
+export declare function deleteAllMcpSecrets(blobStore: EncryptedBlobStore, serverId: string, keyNames: readonly string[]): Promise<void>;
+/**
+ * Resolve every secret this server declares, returning a flat record keyed
+ * by the variable/header name (`{ HA_TOKEN: "..." }`). Missing secrets are
+ * returned as `null`.
+ *
+ * NOTE — shape mismatch with generators: the config generators in
+ * `./generators/` expect `{ "<serverId>:<keyName>": value }` so secrets for
+ * multiple servers can coexist without env-var name collisions. When the
+ * Phase 3 session-workdir materializer calls the generators, it must build
+ * that scoped map explicitly. The unscoped shape returned here is designed
+ * for probe consumption, which only ever sees one server at a time.
+ */
+export declare function resolveMcpSecrets(blobStore: EncryptedBlobStore, server: Pick<McpServer, "id" | "envKeys" | "headerKeys">): Promise<Record<string, string | null>>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/services/mcp/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/services/mcp/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAe,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AA6FhF,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,YAAY,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CACjC;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,0BAA0B;gBAC3B,EAAE,EAAE,MAAM;CAIvB;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,0BAA0B;gBAC3B,EAAE,EAAE,MAAM;CAIvB;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,wBAAwB;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,SAAS,EAAE,CAKjE;AAED,wBAAgB,YAAY,CAC1B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,EAAE,EAAE,MAAM,GACT,SAAS,GAAG,IAAI,CAKlB;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAalE;AA2CD,wBAAgB,eAAe,CAC7B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,cAAc,GACpB,SAAS,CAsEX;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CACjC;AAED,wBAAgB,eAAe,CAC7B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,cAAc,GACpB,SAAS,CA0FX;AAUD,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,OAAO,GACf,SAAS,CAUX;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAG1E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAKlE;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,cAAc,GACrB,SAAS,CAcX;AAMD,wBAAsB,YAAY,CAChC,SAAS,EAAE,kBAAkB,EAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAExB;AAED,wBAAsB,YAAY,CAChC,SAAS,EAAE,kBAAkB,EAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,eAAe,CACnC,SAAS,EAAE,kBAAkB,EAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,kBAAkB,EAC7B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,OAAO,CAAC,IAAI,CAAC,CAIf;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,kBAAkB,EAC7B,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,SAAS,GAAG,YAAY,CAAC,GACvD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAYxC"}