@akon-labs/nexus-cli 0.1.8 → 0.1.10

package/dist/extensions/mcp/server-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-manager.js","sourceRoot":"","sources":["../../../src/extensions/mcp/server-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAEN,MAAM,EAIN,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,6BAA6B,EAC7B,iBAAiB,GAGjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EACN,oBAAoB,EACpB,0BAA0B,GAE1B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAA2B,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAwB,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EACN,oBAAoB,EACpB,iBAAiB,EAGjB,kBAAkB,EAClB,yBAAyB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAA6B,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EACN,gBAAgB,EAKhB,iCAAiC,EAGjC,yCAAyC,GAEzC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EACN,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,2BAA2B,EAC3B,iBAAiB,EACjB,gBAAgB,GAChB,MAAM,YAAY,CAAC;AAEpB,MAAM,yBAAyB,GAAG,CAAC,GAAG,IAAI,CAAC;AAC3C,MAAM,yBAAyB,GAAG,CAAC,CAAC;AACpC,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAAyB,CAAC;AAQlE,SAAS,uBAAuB,CAAC,KAAc,EAAW;IACzD,OAAO,KAAK,YAAY,iBAAiB,IAAI,CAAC,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC;AAAA,CACrG;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,UAA4B,EAAW;IACnF,IAAI,UAAU,CAAC,eAAe,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,KAAK,YAAY,YAAY,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAAA,CACpF;AAED,SAAS,yBAAyB,CAAC,UAA4B,EAAyC;IACvG,QAAQ,UAAU,CAAC,eAAe,EAAE,CAAC;QACpC,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ;YACZ,OAAO,SAAS,CAAC;QAClB,KAAK,MAAM;YACV,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACzB,KAAK,YAAY;YAChB,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC;QACxC;YACC,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;AAAA,CACD;AAED,SAAS,kBAAkB,CAAC,KAAsB,EAAU;IAC3D,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,GAAG,yBAAyB,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,yBAAyB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1G,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC,UAAU,GAAG,yBAAyB;QAClD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,GAAG,yBAAyB,CAAC,CAAC;QAC3E,CAAC,CAAC,KAAK,CAAC;AAAA,CACT;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAsB,EAAU;IACvE,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9C,OAAO,QAAQ,CAAC,MAAM,GAAG,yBAAyB;QACjD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,yBAAyB,CAAC,CAAC;QAC7E,CAAC,CAAC,QAAQ,CAAC;AAAA,CACZ;AA0BD,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAE5C,MAAM,OAAO,gBAAgB;IACpB,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,eAAe,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC/D,iBAAiB,GAAG,IAAI,GAAG,EAAqC,CAAC;IACjE,iBAAiB,GAAG,IAAI,GAAG,EAA4B,CAAC;IACxD,cAAc,CAAmC;IACjD,2BAA2B,CAA0C;IACrE,2BAA2B,GAAG,IAAI,GAAG,EAA4D,CAAC;IAClG,iBAAiB,CAAsC;IACvD,kBAAkB,GAAuB,EAAE,CAAC;IAC5C,YAAY,CAA8B;IAC1C,uBAAuB,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzD,uBAAuB,CAAqB;IAC5C,aAAa,CAA0B;IACvC,aAAa,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,eAAe,GAAG,IAAI,GAAG,EAA2B,CAAC;IACrD,aAAa,CAA+B;IAC5C,WAAW,CAA6B;IACxC,OAAO,GAAG,KAAK,CAAC;IACP,UAAU,CAAqB;IAEhD,sEAAsE;IACtE,YAAY,UAAmB,EAAE;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAAA,CAC7B;IAED,iBAAiB,CAAC,MAAwC,EAAQ;QACjE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;IAAA,CAC7B;IAED,8BAA8B,CAAC,QAAiD,EAAQ;QACvF,IAAI,CAAC,2BAA2B,GAAG,QAAQ,CAAC;IAAA,CAC5C;IAED,sBAAsB,CAAC,IAAY,EAAE,kBAAoC,EAAE,MAAc,EAAW;QACnG,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,kBAAkB,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QACnF,IAAI,CAAC;YACJ,IAAI,CAAC,2BAA2B,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC;YACvF,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,CAAC,wCAAwC,IAAI,uBAAuB,OAAO,EAAE,CAAC,CAAC;YAC3F,OAAO,KAAK,CAAC;QACd,CAAC;IAAA,CACD;IAED,oBAAoB,CAAC,MAA2C,EAAQ;QACvE,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC;IAAA,CAChC;IAED,gBAAgB,CAAC,MAA+B,EAAQ;QACvD,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;IAAA,CAC5B;IAED,0BAA0B,CAAC,SAA6B,EAAQ;QAC/D,IAAI,CAAC,uBAAuB,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAAA,CACpE;IAED,cAAc,CAAC,QAAsC,EAAQ;QAC5D,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;IAAA,CAC9B;IAED,qBAAqB,CAAC,OAA2B,EAAQ;QACxD,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC;IAAA,CAClC;IAED,eAAe,CAAC,OAAwB,EAAQ;QAC/C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAAA,CAC5B;IAED,iBAAiB,CAAC,IAAY,EAAE,MAAoB,EAA8B;QACjF,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAAA,CAChE;IAEO,2BAA2B,CAAC,UAA6B,EAAsB;QACtF,IAAI,UAAU,EAAE,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAChD,OAAO,yBAAyB,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,IAAI,CAAC,uBAAuB,CAAC;IAAA,CACpC;IAEO,mBAAmB,CAAC,UAA6B,EAAE,MAAoB,EAA8B;QAC5G,MAAM,OAAO,GAAG,IAAI,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAEpE,IAAI,CAAC,WAAW,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO;YACN,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC;IAAA,CACF;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,UAA4B,EAAE,MAAoB,EAA6B;QAC1G,IAAI,gBAAgB,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,eAAe,CAAC,CAAC;QACtF,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACpE,cAAc,CAAC,WAAW,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,OAAO;YAAE,MAAM,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACnD,cAAc,CAAC,WAAW,CAAC,CAAC;QAE5B,yCAAyC;QACzC,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAE,EAAE,WAAW,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,QAAQ,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;YACtC,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACjC,OAAO,QAAQ,CAAC;QACjB,CAAC;QAED,MAAM,sBAAsB,GAAG,QAAQ,EAAE,MAAM,KAAK,YAAY,IAAI,QAAQ,CAAC,sBAAsB,KAAK,IAAI,CAAC;QAC7G,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,iBAAiB,GAAG,IAAI,eAAe,EAAE,CAAC;QAChD,MAAM,aAAa,GAAG,mBAAmB,CAAC,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAC9C,IAAI,EACJ,UAAU,EACV,aAAa,EACb,WAAW,EACX,sBAAsB,CACtB,CAAC;QACF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG;YAC7B,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;gBACzC,MAAM,MAAM,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAAA,CAC9D,CAAC;YACH,CAAC,CAAC,iBAAiB,CAAC;QACrB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAElD,IAAI,CAAC;YACJ,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC;YACjC,IAAI,iBAAiB,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC/F,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBACzC,cAAc,CAAC,aAAa,CAAC,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,8BAA8B,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACvC,OAAO,UAAU,CAAC;QACnB,CAAC;gBAAS,CAAC;YACV,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,OAAO;gBAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClF,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,iBAAiB;gBAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7F,CAAC;IAAA,CACD;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS,CACd,IAAY,EACZ,UAA4B,EAC5B,eAAiC,EACjC,MAAoB,EACQ;QAC5B,IAAI,gBAAgB,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,eAAe,CAAC,CAAC;QACtF,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACpE,cAAc,CAAC,WAAW,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC9F,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;gBAClD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,CAAC;QAAA,CACD,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAAA,CACvC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CACjB,IAAY,EACZ,kBAAoC,EACpC,MAAoB,EACS;QAC7B,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACpE,cAAc,CAAC,WAAW,CAAC,CAAC;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,kBAAkB,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACtE,OAAO,YAAY,CAAC;QACrB,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,IAAI,6BAA6B,EAAE,6BAA6B,CAAC,CAAC;QAClH,MAAM,aAAa,GAAG;YACrB,GAAG,cAAc;YACjB,OAAO;SACP,CAAC;QACF,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,qBAAqB,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;YACjE,MAAM,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACpD,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,kBAAkB,IAAI,kBAAkB,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACpG,OAAO,YAAY,CAAC;YACrB,CAAC;YACD,IAAI,CAAC,+BAA+B,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YAC/D,OAAO,WAAW,CAAC;QACpB,CAAC;QAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,aAAa,IAAI,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG,mBAAmB,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9F,IAAI,KAAgB,CAAC;QACrB,IAAI,CAAC;YACJ,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,EAAE;gBAC3D,GAAG,aAAa;gBAChB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,SAAS,EAAE,SAAS;aACpB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,kBAAkB,IAAI,kBAAkB,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACpG,OAAO,YAAY,CAAC;YACrB,CAAC;YACD,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,cAAc,EAAE,CAAC;gBAC7E,OAAO,iBAAiB,CAAC;YAC1B,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QACD,cAAc,CAAC,WAAW,CAAC,CAAC;QAE5B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,kBAAkB,IAAI,kBAAkB,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpG,OAAO,YAAY,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,aAAa,IAAI,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;YAC/D,OAAO,YAAY,CAAC;QACrB,CAAC;QAED,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,+BAA+B,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YAC/D,OAAO,WAAW,CAAC;QACpB,CAAC;QAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC;QAC/C,kBAAkB,CAAC,KAAK,GAAG,KAAK,CAAC;QACjC,kBAAkB,CAAC,aAAa,GAAG,aAAa,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,2BAA2B,EAAE,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;YACrE,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,kBAAkB,IAAI,kBAAkB,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC7F,kBAAkB,CAAC,KAAK,GAAG,aAAa,CAAC;gBACzC,kBAAkB,CAAC,aAAa,GAAG,aAAa,CAAC;YAClD,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO,SAAS,CAAC;IAAA,CACjB;IAEO,+BAA+B,CAAC,IAAY,EAAE,UAA4B,EAAQ;QACzF,MAAM,kBAAkB,GAAG,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,kBAAkB,EAAE,UAAU,KAAK,UAAU;YAAE,OAAO;QAC1D,IAAI,CAAC,2BAA2B,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,kBAAkB,EAAE,CAAC;YACvE,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;IAAA,CACD;IAEO,KAAK,CAAC,WAAW,CACxB,IAAY,EACZ,UAA4B,EAC5B,eAAiC,EACjC,MAAoB,EACQ;QAC5B,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE3C,oEAAoE;QACpE,qEAAqE;QACrE,4CAA4C;QAC5C,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;YACjC,OAAO,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,aAAa,GAAG,eAAe,CAAC,QAAQ,CAAC;QAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3D,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;IAAA,CACb;IAEO,KAAK,CAAC,gBAAgB,CAC7B,IAAY,EACZ,UAA4B,EAC5B,MAAoB,EACpB,aAA2B,EAC3B,sBAAsB,GAAG,KAAK,EACF;QAC5B,cAAc,CAAC,MAAM,CAAC,CAAC;QAEvB,MAAM,cAAc,GAAG,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACzE,IAAI,cAAc,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACzC,IAAI,CAAC,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,MAAM,aAAa,GAAiC,WAAW;YAC9D,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACjD,CAAC,CAAC,SAAS,CAAC;QAEb,IAAI,MAAc,CAAC;QACnB,IAAI,SAAoB,CAAC;QACzB,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,WAAW,GAAG,sBAAsB,CAAC;QACzC,IAAI,sBAAsB,GAAG,KAAK,CAAC;QACnC,IAAI,UAAU,GAA4B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,oBAAoB,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAC1F,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CACxD,CAAC;QACF,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,wDAAwD,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAE3E,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC7C,IAAI,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;YACjC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YAE3D,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC/D,IAAI,QAAQ,EAAE,CAAC;oBACd,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;oBACpD,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;oBACtF,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,gBAAgB,QAAQ,CAAC,OAAO,wBAAwB,CAAC,CAAC;gBAC/E,CAAC;YACF,CAAC;YACD,cAAc,CAAC,MAAM,CAAC,CAAC;YAEvB,IAAI,UAAU,CAAC,aAAa;gBAAE,SAAS,CAAC,UAAU,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvF,MAAM,GAAG,GAAG,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC;YACjE,MAAM,cAAc,GAAG,IAAI,oBAAoB,CAAC;gBAC/C,OAAO;gBACP,IAAI;gBACJ,GAAG,EAAE,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC,UAAU,KAAK,IAAI,CAAC;gBACrE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;aAC7C,CAAC,CAAC;YACH,6EAA6E;YAC7E,yEAAyE;YACzE,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;gBAC3B,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC;oBAC5D,UAAU,GAAG,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBAAA,CACjD,CAAC,CAAC;YACJ,CAAC;YACD,SAAS,GAAG,cAAc,CAAC;QAC5B,CAAC;aAAM,IAAI,UAAU,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAClD,UAAU,EACV,IAAI,EACJ,cAAc,EACd,MAAM,EACN,aAAa,EACb,WAAW,CACX,CAAC;YACF,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;YAC/B,SAAS,GAAG,cAAc,CAAC,SAAS,CAAC;YACrC,WAAW,GAAG,cAAc,CAAC,sBAAsB,CAAC;YACpD,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBAC5C,OAAO;oBACN,MAAM;oBACN,SAAS;oBACT,UAAU;oBACV,KAAK,EAAE,EAAE;oBACT,SAAS,EAAE,EAAE;oBACb,OAAO,EAAE,EAAE;oBACX,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;oBACtB,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,YAAY;oBACpB,sBAAsB,EAAE,WAAW;iBACnC,CAAC;YACH,CAAC;YACD,eAAe,GAAG,IAAI,CAAC;YACvB,sBAAsB,GAAG,aAAa,KAAK,SAAS,CAAC;QACtD,CAAC;aAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC7C,SAAS,GAAG,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,UAAU,CAAC,MAAO,CAAE,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,aAAa,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC9C,MAAM,uBAAuB,GAAG,kBAAkB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAC1E,SAAS,GAAG,yBAAyB,CAAC,SAAS,EAAE,IAAI,EAAE,uBAAuB,EAAE,aAAa,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,CAAC;YACJ,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,IAAI,CAAC,eAAe,EAAE,CAAC;gBACtB,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;YAC9E,CAAC;YACD,IAAI,CAAC,iCAAiC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAErD,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC;YAChD,MAAM,UAAU,GAAqB;gBACpC,MAAM;gBACN,SAAS;gBACT,UAAU;gBACV,KAAK,EAAE,EAAE;gBACT,aAAa,EAAE,CAAC;gBAChB,SAAS,EAAE,EAAE;gBACb,OAAO,EAAE,EAAE;gBACX,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;gBACtB,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,WAAW;aACnB,CAAC;YAEF,sEAAsE;YACtE,wEAAwE;YACxE,2DAA2D;YAC3D,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;gBACtB,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;oBAC/C,UAAU,CAAC,MAAM,GAAG,QAAQ,CAAC;gBAC9B,CAAC;YAAA,CACD,CAAC;YAEF,yEAAyE;YACzE,iEAAiE;YACjE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC1D,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC;gBAC1C,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,cAAc,CAAC;gBAC9C,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC;aAC5C,CAAC,CAAC;YACH,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC;YACzB,UAAU,CAAC,SAAS,GAAG,SAAS,CAAC;YACjC,UAAU,CAAC,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;YAC1C,UAAU,CAAC,qBAAqB,GAAG,YAAY,CAAC,MAAM,CAAC;YAEvD,OAAO,UAAU,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,YAAY,GAAG,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzD,MAAM,kBAAkB,GACvB,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,OAAO,KAAK,qCAAqC,CAAC;YAC5F,MAAM,cAAc,GAAG,kBAAkB;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5F,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACzD,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CACnD,CAAC;YACF,IAAI,aAAa,GAAY,KAAK,CAAC;YACnC,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,aAAa,GAAG,IAAI,cAAc,CAAC,CAAC,KAAK,EAAE,GAAG,eAAe,CAAC,EAAE,6BAA6B,CAAC,CAAC;YAChG,CAAC;YAED,qEAAqE;YACrE,qBAAqB;YACrB,IAAI,uBAAuB,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjG,IAAI,CAAC,WAAW,EAAE,CAAC;oBAClB,wBAAwB,CAAC,IAAI,CAAC,CAAC;oBAC/B,WAAW,GAAG,IAAI,CAAC;gBACpB,CAAC;gBACD,OAAO;oBACN,MAAM;oBACN,SAAS;oBACT,UAAU;oBACV,KAAK,EAAE,EAAE;oBACT,SAAS,EAAE,EAAE;oBACb,OAAO,EAAE,EAAE;oBACX,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;oBACtB,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,YAAY;oBACpB,sBAAsB,EAAE,WAAW;iBACnC,CAAC;YACH,CAAC;YAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBACtD,MAAM,KAAK,GAAG,UAAU;qBACtB,KAAK,CAAC,OAAO,CAAC;qBACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;qBAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;gBAClB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,MAAM,WAAW,GAAG,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;oBACnG,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,yBAAyB,CAAC,CAAC,IAAI,CAAC,OAAK,CAAC,CAAC;oBACnE,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;gBACzE,CAAC;YACF,CAAC;YACD,MAAM,aAAa,CAAC;QACrB,CAAC;IAAA,CACD;IAEO,KAAK,CAAC,yBAAyB,CAAC,UAA4B,EAAE,KAAc,EAAkB;QACrG,MAAM,eAAe,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/E,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,gBAAgB,CAAC,UAAU,CAAE,CAAC,CAAC;YACpE,OAAO,IAAI,KAAK,CAAC,GAAG,eAAe,eAAa,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACpE,CAAC;IAAA,CACD;IAEO,KAAK,CAAC,sBAAsB,CACnC,MAAc,EACd,SAAoB,EACpB,cAA+B,EAC/B,MAAoB,EACJ;QAChB,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,YAAuC,CAAC;QAC5C,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC;YAC5B,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/D,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAAA,CAClD,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC;YACJ,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;YACnE,MAAM,YAAY,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC;oBACJ,MAAM,YAAY,CAAC;gBACpB,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBACvB,MAAM,IAAI,cAAc,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,qCAAqC,CAAC,CAAC;gBACxF,CAAC;YACF,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;gBAAS,CAAC;YACV,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACtD,CAAC;IAAA,CACD;IAEO,uBAAuB,GAAG;QACjC,OAAO;YACN,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC,iBAAiB;gBACzB,CAAC,CAAC;oBACA,WAAW,EAAE;wBACZ,IAAI,EAAE,EAAE;wBACR,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACvD;iBACD;gBACF,CAAC,CAAC,EAAE,CAAC;SACN,CAAC;IAAA,CACF;IAEO,YAAY,CAAC,UAAkB,EAAE,UAA4B,EAAU;QAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACpD,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,MAAc,CAAC;QACnB,MAAM,GAAG,IAAI,MAAM,CAClB,EAAE,IAAI,EAAE,iBAAiB,UAAU,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EACzD;YACC,mBAAmB,EAAE,yBAAyB,EAAE;YAChD,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,WAAW,EAAE;gBACZ,KAAK,EAAE;oBACN,SAAS,EAAE,CAAC,KAAmB,EAAE,KAAuB,EAAE,EAAE,CAAC;wBAC5D,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;oBAAA,CAC9D;iBACD;gBACD,SAAS,EAAE;oBACV,SAAS,EAAE,CAAC,KAAmB,EAAE,SAA+B,EAAE,EAAE,CAAC;wBACpE,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;oBAAA,CACtE;iBACD;gBACD,OAAO,EAAE;oBACR,SAAS,EAAE,CAAC,KAAmB,EAAE,OAA2B,EAAE,EAAE,CAAC;wBAChE,IAAI,CAAC,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;oBAAA,CAClE;iBACD;aACD;SACD,CACD,CAAC;QACF,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,uBAAuB,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,0BAA0B,CAAC,MAAM,EAAE;gBAClC,GAAG,IAAI,CAAC,iBAAiB;gBACzB,UAAU;gBACV,aAAa,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,aAAa,CAAC;aACxF,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC;gBACrC,MAAM,CAAC,sBAAsB,CAAC,oCAAoC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC;oBACrF,IAAI,IAAI,CAAC,aAAa,EAAE,OAAO;wBAAE,OAAO;oBACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAC9D,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC;wBAAE,OAAO;oBACjE,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC,MAAM,CAChC,+BAA+B,UAAU,yCAAyC,EAClF,MAAM,CACN,CAAC;gBAAA,CACF,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QACD,OAAO,MAAM,CAAC;IAAA,CACd;IAEO,sBAAsB,CAC7B,UAAkB,EAClB,MAAc,EACd,KAAmB,EACnB,KAAuB,EAChB;QACP,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,8CAA8C,UAAU,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3F,OAAO;QACR,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO;QAC7F,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC;QACzB,UAAU,CAAC,aAAa,GAAG,CAAC,UAAU,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,2BAA2B,EAAE,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;QACrE,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAAA,CACpD;IAEO,wBAAwB,CAC/B,UAAkB,EAClB,MAAc,EACd,KAAmB,EACnB,OAA2B,EACpB;QACP,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,gDAAgD,UAAU,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,OAAO;QACR,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO;QAC7F,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;QAC7B,UAAU,CAAC,qBAAqB,GAAG,KAAK,CAAC;QACzC,IAAI,CAAC,2BAA2B,EAAE,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;QACvE,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAAA,CACpD;IAEO,0BAA0B,CACjC,UAAkB,EAClB,MAAc,EACd,KAAmB,EACnB,SAA+B,EACxB;QACP,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,kDAAkD,UAAU,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/F,OAAO;QACR,CAAC;QACD,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO;QAC7F,UAAU,CAAC,SAAS,GAAG,SAAS,CAAC;QACjC,IAAI,CAAC,2BAA2B,EAAE,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;QACzE,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAAA,CACpD;IAED,KAAK,CAAC,4BAA4B,CACjC,UAAkB,EAClB,KAAkC,EACS;QAC3C,IAAI,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACtF,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACxC;gBACC,GAAG,IAAI,CAAC,iBAAiB;gBACzB,UAAU;gBACV,aAAa,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,aAAa,CAAC;aACxF,EACD,MAAM,CACN,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC;QACtD,CAAC;QACD,OAAO,QAAQ,CAAC;IAAA,CAChB;IAEO,sBAAsB,CAAC,UAAkB,EAAE,aAAqB,EAAQ;QAC/E,IAAI,IAAI,CAAC,aAAa,EAAE,OAAO;YAAE,OAAO;QACxC,IAAI,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACxD,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAAA,CAC5B;IAEO,KAAK,CAAC,iBAAiB,CAC9B,UAA4B,EAC5B,UAAkB,EAClB,cAA0C,EAC1C,MAAoB,EACpB,aAAgC,EAChC,sBAAsB,GAAG,KAAK,EAM5B;QACF,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,CAAE,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAE/B,oEAAoE;QACpE,wCAAwC;QACxC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CACpE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAC3D,CAAC;QACF,MAAM,OAAO,GACZ,2BAA2B,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,UAAU,kBAAkB,GAAG,GAAG,CAAC;YAC3G,EAAE,CAAC;QAEJ,qEAAqE;QACrE,uCAAuC;QACvC,MAAM,aAAa,GAClB,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC;YAClF,CAAC,CAAC,UAAU,CAAC,WAAW;YACxB,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,aAAa;gBAC1B,CAAC,CAAC,oBAAoB,CAAC,aAAa,EAAE,eAAe,UAAU,qBAAqB,CAAC;gBACrF,CAAC,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC;oBAChC,CAAC,UAAU,CAAC,WAAW,KAAK,SAAS;wBACrC,UAAU,CAAC,cAAc,KAAK,SAAS;wBACvC,UAAU,CAAC,gBAAgB,KAAK,IAAI;wBACnC,CAAC,CAAC,oBAAoB,CAAC,UAAU,EAAE,SAAS,CAAC;wBAC7C,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YACjB,IAAI,KAAK;gBAAE,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;QACtD,CAAC;QAED,IAAI,gBAAgB,IAAI,aAAa,EAAE,CAAC;YACvC,IAAI,CAAC;gBACJ,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,IAAI,KAAK,CACd,iCAAiC,UAAU,iEAAiE,CAC5G,CAAC;YACH,CAAC;QACF,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,MAAM,YAAY,GAAG,UAAU,CAAC,qBAAqB;YACpD,CAAC,CAAC,gCAAgC,CAAC,UAAU,CAAC,qBAAqB,CAAC;YACpE,CAAC,CAAC,SAAS,CAAC;QACb,MAAM,kBAAkB,GAAG,GAAqB,EAAE,CACjD,IAAI,gBAAgB,CACnB,UAAU,EACV,SAAS,EACT,kBAAkB,CAAC,UAAU,CAAC,EAC9B,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,EAAC,CAAC,EAAE,EAC9B,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,YAAY,EAAE,MAAM,CACzB,CAAC;QAEH,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,SAAS,GAA0B,aAAa,CAAC,UAAU,CAAC;YAC/D,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS;gBAC9B,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE;gBACjC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE;YACzD,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAE1B,MAAM,OAAO,GAAG,KAAK,EACpB,IAA+B,EAI9B,EAAE,CAAC;YACJ,MAAM,YAAY,GAAG,UAAU,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,gBAAgB,GAAG;gBACxB,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,YAAY,KAAK,SAAS;oBAC9B,UAAU,CAAC,KAAK,KAAK,KAAK;oBAC1B,UAAU,CAAC,KAAK,EAAE,4BAA4B,KAAK,IAAI;oBACtD,CAAC,CAAC,EAAE,4BAA4B,EAAE,IAAI,EAAE;oBACxC,CAAC,CAAC,EAAE,CAAC;aACN,CAAC;YACF,MAAM,aAAa,GAClB,IAAI,KAAK,iBAAiB;gBACzB,CAAC,CAAC,IAAI,6BAA6B,CAAC,GAAG,EAAE,gBAAgB,CAAC;gBAC1D,CAAC,CAAC,IAAI,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,aAAa;gBAC9B,CAAC,CAAC,yBAAyB,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,CAAC;gBAC3E,CAAC,CAAC,aAAa,CAAC;YACjB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAEzD,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;gBAC7E,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACnD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,kBAAkB,GACvB,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,OAAO,KAAK,qCAAqC,CAAC;gBAC5F,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBACzB,IAAI,CAAC;wBACJ,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC/D,CAAC;oBAAC,OAAO,YAAY,EAAE,CAAC;wBACvB,MAAM,IAAI,cAAc,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,oCAAoC,CAAC,CAAC;oBACvF,CAAC;gBACF,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACvD,CAAC;QAAA,CACD,CAAC;QAEF,2EAA2E;QAC3E,yEAAyE;QACzE,0FAA0F;QAC1F,IAAI,IAAI,GAA8B,UAAU,CAAC,aAAa,IAAI,iBAAiB,CAAC;QACpF,IAAI,WAAW,GAAG,sBAAsB,CAAC;QACzC,SAAS,CAAC;YACT,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO,EAAE,GAAG,MAAM,EAAE,sBAAsB,EAAE,WAAW,EAAE,CAAC;YAC7F,IAAI,MAAM,CAAC,KAAK,YAAY,cAAc,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,qCAAqC,EAAE,CAAC;gBAC9G,MAAM,MAAM,CAAC,KAAK,CAAC;YACpB,CAAC;YACD,IAAI,MAAM,EAAE,OAAO;gBAAE,cAAc,CAAC,MAAM,CAAC,CAAC;YAE5C,IAAI,SAAS,CAAC,MAAM,KAAK,mBAAmB,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvF,SAAS,GAAG,EAAE,MAAM,EAAE,qBAAqB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,CAAC;gBAC9E,SAAS;YACV,CAAC;YACD,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3C,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC/B,IAAI,CAAC,WAAW,EAAE,CAAC;wBAClB,wBAAwB,CAAC,UAAU,CAAC,CAAC;wBACrC,WAAW,GAAG,IAAI,CAAC;oBACpB,CAAC;oBACD,OAAO;wBACN,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,MAAM,EAAE,YAAY;wBACpB,sBAAsB,EAAE,WAAW;qBACnC,CAAC;gBACH,CAAC;gBACD,MAAM,MAAM,CAAC,KAAK,CAAC;YACpB,CAAC;YAED,IACC,UAAU,CAAC,aAAa,KAAK,SAAS;gBACtC,IAAI,KAAK,iBAAiB;gBAC1B,mBAAmB,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,EAC5C,CAAC;gBACF,IAAI,GAAG,KAAK,CAAC;gBACb,SAAS;YACV,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAAC;QACpB,CAAC;IAAA,CACD;IAEO,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,cAAwC,EAAsB;QACzG,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,IAAI,MAA0B,CAAC;QAE/B,GAAG,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YACvF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;YACvC,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;QAC5B,CAAC,QAAQ,MAAM,EAAE;QAEjB,OAAO,QAAQ,CAAC;IAAA,CAChB;IAEO,KAAK,CAAC,eAAe,CAC5B,MAAc,EACd,cAA+B,EACsB;QACrD,MAAM,YAAY,GAAG,MAAM,CAAC,qBAAqB,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC,YAAY,EAAE,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAElE,IAAI,CAAC;YACJ,MAAM,OAAO,GAAgB,EAAE,CAAC;YAChC,IAAI,MAA0B,CAAC;YAC/B,GAAG,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBACzF,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;gBACxC,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;YAC5B,CAAC,QAAQ,MAAM,EAAE;YACjB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,cAAc,EAAE,MAAM,EAAE,OAAO;gBAAE,cAAc,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC3E,IAAI,uBAAuB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAChD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;IAAA,CACD;IAEO,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,cAA+B,EAA0B;QACxG,MAAM,YAAY,GAAG,MAAM,CAAC,qBAAqB,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC,YAAY,EAAE,SAAS;YAAE,OAAO,EAAE,CAAC;QAExC,IAAI,CAAC;YACJ,MAAM,YAAY,GAAkB,EAAE,CAAC;YACvC,IAAI,MAA0B,CAAC;YAE/B,GAAG,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBAC3F,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/C,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;YAC5B,CAAC,QAAQ,MAAM,EAAE;YAEjB,OAAO,YAAY,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBACrC,cAAc,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,uBAAuB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAChD,yDAAyD;YACzD,OAAO,EAAE,CAAC;QACX,CAAC;IAAA,CACD;IAEO,iCAAiC,CAAC,UAAkB,EAAE,MAAc,EAAQ;QACnF,MAAM,CAAC,sBAAsB,CAC5B,iCAAiC,EACjC,EAAE,MAAM,EAAE,yCAAyC,CAAC,KAAK,CAAC,MAAM,EAAE,EAClE,CAAC,MAAM,EAAE,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAChE,IAAI,CAAC,QAAQ;gBAAE,OAAO;YACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAAA,CAC7B,CACD,CAAC;IAAA,CACF;IAED,wBAAwB,CAAC,WAAmB,EAAE,QAA0B,EAAQ;QAC/E,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAAA,CAClD;IAED,sBAAsB,CAAC,WAAmB,EAAQ;QACjD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAAA,CAC3C;IAED,KAAK,CAAC,SAAS,CACd,IAAY,EACZ,UAAkB,EAClB,IAA6B,EAC7B,MAAoB,EACO;QAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC;YACJ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC7B,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,CACvC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC1D,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CACpC,CAAC;QACH,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IAAA,CACD;IAED,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,GAAW,EAAE,MAAoB,EAA+B;QAChG,IAAI,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,eAAe,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,CAAC;YACJ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC7B,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5F,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IAAA,CACD;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAiB;QACxC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,kBAAkB,IAAI,aAAa,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE9C,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,YAAY,EAAE,CAAC;gBAClB,MAAM,YAAY,CAAC;gBACnB,OAAO;YACR,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,cAAc,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACJ,MAAM,cAAc,CAAC;gBACtB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IAAI,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;wBAAE,MAAM,KAAK,CAAC;gBACrD,CAAC;YACF,CAAC;YACD,OAAO;QACR,CAAC;QAED,2EAA2E;QAC3E,0CAA0C;QAC1C,UAAU,CAAC,MAAM,GAAG,QAAQ,CAAC;QAC7B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAChE,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,OAAO;gBAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAA,CAC9E,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC;IAAA,CACf;IAED,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,QAA0B,EAAoB;QAChF,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC1D,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IAAA,CACZ;IAEO,KAAK,CAAC,iBAAiB,CAAC,UAA4B,EAAiB;QAC5E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;YACxC,6FAA6F;YAC7F,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACvD,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpG,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAC;IAAA,CAC7F;IAED,KAAK,CAAC,QAAQ,GAAkB;QAC/B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5E,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,kBAAkB,IAAI,aAAa,CAAC,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEvF,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC;aAC9D,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAC1E,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,CAAC;QACrC,IAAI,CAAC,2BAA2B,CAAC,KAAK,EAAE,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAChC,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACnC,MAAM,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;QAChC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;IAAA,CAC1F;IAEO,sBAAsB,CAAC,KAAc,EAAW;QACvD,MAAM,OAAO,GAAc,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;QAChC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,OAAO,YAAY,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC/D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClB,IAAI,OAAO,YAAY,cAAc,EAAE,CAAC;gBACvC,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACrE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,KAAK,CAAC;IAAA,CACb;IAED,YAAY,CAAC,IAAY,EAAW;QACnC,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAAA,CACtC;IAED,aAAa,CAAC,IAAY,EAAgC;QACzD,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAAA,CAClC;IAED,iBAAiB,GAAkC;QAClD,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAAA,CACjC;IAED,KAAK,CAAC,IAAY,EAAQ;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,UAAU,EAAE,CAAC;YAChB,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,CAAC;IAAA,CACD;IAED,iBAAiB,CAAC,IAAY,EAAQ;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,UAAU,EAAE,CAAC;YAChB,UAAU,CAAC,QAAQ,GAAG,CAAC,UAAU,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACtD,CAAC;IAAA,CACD;IAED,iBAAiB,CAAC,IAAY,EAAQ;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,UAAU,EAAE,QAAQ,EAAE,CAAC;YAC1B,UAAU,CAAC,QAAQ,EAAE,CAAC;QACvB,CAAC;IAAA,CACD;IAED,MAAM,CAAC,IAAY,EAAE,SAAiB,EAAW;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QACnE,IAAI,UAAU,CAAC,QAAQ,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,UAAU,GAAG,SAAS,CAAC;IAAA,CACtD;CACD;AAED;;GAEG;AACH,SAAS,UAAU,CAClB,GAAuC,EACvC,UAAkB,EAClB,UAAU,GAAG,KAAK,EACO;IACzB,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAChD,CAAC;IACD,IAAI,UAAU;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEhE,MAAM,SAAS,GAAG,2BAA2B,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,UAAU,gBAAgB,GAAG,GAAG,CAAC,CAAC;IAC7G,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AAAA,CAC5D;AAED,SAAS,yBAAyB,CAAC,SAA6B,EAAsB;IACrF,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CAC5G","sourcesContent":["import { mkdirSync } from \"node:fs\";\nimport { isDeepStrictEqual } from \"node:util\";\nimport {\n\ttype CacheableRequestOptions,\n\tClient,\n\ttype GetPromptResult,\n\ttype ReadResourceResult,\n\ttype RequestOptions,\n\tSdkError,\n\tSdkErrorCode,\n\tSdkHttpError,\n\tSSEClientTransport,\n\tStreamableHTTPClientTransport,\n\tUnauthorizedError,\n\ttype UrlElicitationRequiredError,\n\ttype VersionNegotiationOptions,\n} from \"@modelcontextprotocol/client\";\nimport { StdioClientTransport } from \"@modelcontextprotocol/client/stdio\";\nimport { VERSION } from \"../../config.ts\";\nimport { abortable, throwIfAborted } from \"./abort.ts\";\nimport {\n\thandleUrlElicitation,\n\tregisterElicitationHandler,\n\ttype ServerElicitationConfig,\n} from \"./elicitation-handler.ts\";\nimport { createJsonSchemaValidator } from \"./json-schema-validator.ts\";\nimport { logger } from \"./logger.ts\";\nimport { type AuthStorageOptions, invalidateAuthEntryCache } from \"./mcp-auth.ts\";\nimport { extractOAuthConfig, type McpOAuthRuntime, supportsOAuth } from \"./mcp-auth-flow.ts\";\nimport { getBearerTokenForUrl } from \"./mcp-bearer-store.ts\";\nimport { McpOAuthProvider } from \"./mcp-oauth-provider.ts\";\nimport { probeMcpEndpoint } from \"./mcp-probe.ts\";\nimport {\n\tcreateMcpTraceWriter,\n\tisMcpTraceEnabled,\n\ttype McpTraceObserver,\n\ttype McpTraceWriter,\n\ttraceTransportKind,\n\twrapTransportWithMcpTrace,\n} from \"./mcp-trace.ts\";\nimport { resolveNpxBinary } from \"./npx-resolver.ts\";\nimport { createRequestHeadersCommandFetch } from \"./request-headers-command.ts\";\nimport { combineAbortSignals } from \"./runtime-owner.ts\";\nimport { registerSamplingHandler, type ServerSamplingConfig } from \"./sampling-handler.ts\";\nimport {\n\tisServerDisabled,\n\ttype McpPrompt,\n\ttype McpResource,\n\ttype McpTool,\n\ttype McpTraceSettings,\n\tSERVER_STREAM_RESULT_PATCH_METHOD,\n\ttype ServerDefinition,\n\ttype ServerStreamResultPatchNotification,\n\tserverStreamResultPatchNotificationSchema,\n\ttype Transport,\n} from \"./types.ts\";\nimport { UnixSocketClientTransport } from \"./unix-socket-transport.ts\";\nimport {\n\tinterpolateEnvVars,\n\tresolveBearerToken,\n\tresolveCommandSecret,\n\tresolveCommandSecretsRecord,\n\tresolveConfigPath,\n\tresolveServerUrl,\n} from \"./utils.ts\";\n\nconst MAX_CAPTURED_STDERR_BYTES = 8 * 1024;\nconst MAX_CAPTURED_STDERR_LINES = 3;\nconst abortCleanupPromises = new WeakMap<object, Promise<void>>();\n\ntype HttpAuthProviderState =\n\t| { status: \"disabled\" }\n\t| { status: \"implicit-deferred\" }\n\t| { status: \"explicit\"; provider: McpOAuthProvider }\n\t| { status: \"implicit-challenged\"; provider: McpOAuthProvider };\n\nfunction isUnauthorizedHttpError(error: unknown): boolean {\n\treturn error instanceof UnauthorizedError || (error instanceof SdkHttpError && error.status === 401);\n}\n\nfunction shouldFallbackToSse(error: unknown, definition: ServerDefinition): boolean {\n\tif (definition.protocolVersion === \"2026-07-28\") return false;\n\treturn error instanceof SdkHttpError && [404, 405, 406, 415].includes(error.status);\n}\n\nfunction resolveVersionNegotiation(definition: ServerDefinition): VersionNegotiationOptions | undefined {\n\tswitch (definition.protocolVersion) {\n\t\tcase undefined:\n\t\tcase \"legacy\":\n\t\t\treturn undefined;\n\t\tcase \"auto\":\n\t\t\treturn { mode: \"auto\" };\n\t\tcase \"2026-07-28\":\n\t\t\treturn { mode: { pin: \"2026-07-28\" } };\n\t\tdefault:\n\t\t\tthrow new Error(`Invalid MCP protocolVersion: ${String(definition.protocolVersion)}`);\n\t}\n}\n\nfunction boundedStderrChunk(chunk: Buffer | string): Buffer {\n\tif (Buffer.isBuffer(chunk)) {\n\t\tconst start = Math.max(0, chunk.byteLength - MAX_CAPTURED_STDERR_BYTES);\n\t\treturn Buffer.from(chunk.subarray(start));\n\t}\n\n\t// Limit string conversion before encoding; Buffer.from(largeString) would\n\t// otherwise allocate the entire stderr event before applying the cap.\n\tconst suffix = chunk.length > MAX_CAPTURED_STDERR_BYTES ? chunk.slice(-MAX_CAPTURED_STDERR_BYTES) : chunk;\n\tconst bytes = Buffer.from(suffix, \"utf8\");\n\treturn bytes.byteLength > MAX_CAPTURED_STDERR_BYTES\n\t\t? Buffer.from(bytes.subarray(bytes.byteLength - MAX_CAPTURED_STDERR_BYTES))\n\t\t: bytes;\n}\n\nfunction appendStderrTail(tail: Buffer, chunk: Buffer | string): Buffer {\n\tconst bytes = boundedStderrChunk(chunk);\n\tif (bytes.length === 0) return tail;\n\tif (tail.length === 0) return bytes;\n\tconst combined = Buffer.concat([tail, bytes]);\n\treturn combined.length > MAX_CAPTURED_STDERR_BYTES\n\t\t? Buffer.from(combined.subarray(combined.length - MAX_CAPTURED_STDERR_BYTES))\n\t\t: combined;\n}\n\nexport interface ServerConnection {\n\tclient: Client;\n\ttransport: Transport;\n\tdefinition: ServerDefinition;\n\ttools: McpTool[];\n\t/** Monotonic guard against older refresh responses replacing newer notifications. */\n\ttoolsRevision?: number;\n\tresources: McpResource[];\n\tprompts: McpPrompt[];\n\t/** True when prompts were advertised but prompts/list failed. */\n\tpromptDiscoveryFailed?: boolean;\n\tinstructions?: string;\n\tlastUsedAt: number;\n\tinFlight: number;\n\tstatus: \"connected\" | \"closed\" | \"needs-auth\";\n\t/** True once this needs-auth episode discarded the cached credential. */\n\tcredentialsInvalidated?: boolean;\n}\n\ntype UiStreamListener = (serverName: string, notification: ServerStreamResultPatchNotification[\"params\"]) => void;\ntype MetadataListChangedListener = (serverName: string, reason: string) => void;\n\nexport type ToolRefreshResult = \"updated\" | \"unchanged\" | \"superseded\" | \"refresh-timeout\";\n\nconst KEEP_ALIVE_REFRESH_TIMEOUT_MS = 5_000;\n\nexport class McpServerManager {\n\tprivate connections = new Map<string, ServerConnection>();\n\tprivate connectPromises = new Map<string, Promise<ServerConnection>>();\n\tprivate reconnectPromises = new Map<string, Promise<ServerConnection>>();\n\tprivate uiStreamListeners = new Map<string, UiStreamListener>();\n\tprivate samplingConfig: ServerSamplingConfig | undefined;\n\tprivate metadataListChangedListener: MetadataListChangedListener | undefined;\n\tprivate pendingMetadataPublications = new Map<string, { connection: ServerConnection; reason: string }>();\n\tprivate elicitationConfig: ServerElicitationConfig | undefined;\n\tprivate authStorageOptions: AuthStorageOptions = {};\n\tprivate oauthRuntime: McpOAuthRuntime | undefined;\n\tprivate acceptedUrlElicitations = new Map<string, Set<string>>();\n\tprivate defaultRequestTimeoutMs: number | undefined;\n\tprivate runtimeSignal: AbortSignal | undefined;\n\tprivate closePromises = new Map<string, Promise<void>>();\n\tprivate closeGenerations = new Map<string, number>();\n\tprivate connectAttempts = new Map<string, AbortController>();\n\tprivate traceSettings: McpTraceSettings | undefined;\n\tprivate traceWriter: McpTraceWriter | undefined;\n\tprivate stopped = false;\n\tprivate readonly defaultCwd: string | undefined;\n\n\t/** Default cwd for stdio servers without an explicit config `cwd`. */\n\tconstructor(defaultCwd?: string) {\n\t\tthis.defaultCwd = defaultCwd;\n\t}\n\n\tsetSamplingConfig(config: ServerSamplingConfig | undefined): void {\n\t\tthis.samplingConfig = config;\n\t}\n\n\tsetMetadataListChangedListener(listener: MetadataListChangedListener | undefined): void {\n\t\tthis.metadataListChangedListener = listener;\n\t}\n\n\tpublishMetadataChanged(name: string, expectedConnection: ServerConnection, reason: string): boolean {\n\t\tconst current = this.connections.get(name);\n\t\tif (current !== expectedConnection || current.status !== \"connected\") return false;\n\t\ttry {\n\t\t\tthis.metadataListChangedListener?.(name, reason);\n\t\t\tthis.pendingMetadataPublications.delete(name);\n\t\t\treturn true;\n\t\t} catch (error) {\n\t\t\tthis.pendingMetadataPublications.set(name, { connection: expectedConnection, reason });\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\tlogger.debug(`MCP: metadata publication failed for ${name}; queued for retry: ${message}`);\n\t\t\treturn false;\n\t\t}\n\t}\n\n\tsetElicitationConfig(config: ServerElicitationConfig | undefined): void {\n\t\tthis.elicitationConfig = config;\n\t}\n\n\tsetRuntimeSignal(signal: AbortSignal | undefined): void {\n\t\tthis.runtimeSignal = signal;\n\t}\n\n\tsetDefaultRequestTimeoutMs(timeoutMs: number | undefined): void {\n\t\tthis.defaultRequestTimeoutMs = normalizeRequestTimeoutMs(timeoutMs);\n\t}\n\n\tsetTraceConfig(settings: McpTraceSettings | undefined): void {\n\t\tthis.traceSettings = settings;\n\t}\n\n\tsetAuthStorageOptions(options: AuthStorageOptions): void {\n\t\tthis.authStorageOptions = options;\n\t}\n\n\tsetOAuthRuntime(runtime: McpOAuthRuntime): void {\n\t\tthis.oauthRuntime = runtime;\n\t}\n\n\tgetRequestOptions(name: string, signal?: AbortSignal): RequestOptions | undefined {\n\t\tconst connection = this.connections.get(name);\n\t\treturn this.buildRequestOptions(connection?.definition, signal);\n\t}\n\n\tprivate getResolvedRequestTimeoutMs(definition?: ServerDefinition): number | undefined {\n\t\tif (definition?.requestTimeoutMs !== undefined) {\n\t\t\treturn normalizeRequestTimeoutMs(definition.requestTimeoutMs);\n\t\t}\n\t\treturn this.defaultRequestTimeoutMs;\n\t}\n\n\tprivate buildRequestOptions(definition?: ServerDefinition, signal?: AbortSignal): RequestOptions | undefined {\n\t\tconst timeout = this.getResolvedRequestTimeoutMs(definition);\n\t\tconst ownedSignal = combineAbortSignals(this.runtimeSignal, signal);\n\n\t\tif (!ownedSignal && timeout === undefined) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\treturn {\n\t\t\t...(ownedSignal ? { signal: ownedSignal } : {}),\n\t\t\t...(timeout !== undefined ? { timeout } : {}),\n\t\t};\n\t}\n\n\tasync connect(name: string, definition: ServerDefinition, signal?: AbortSignal): Promise<ServerConnection> {\n\t\tif (isServerDisabled(definition)) throw new Error(`MCP server \"${name}\" is disabled`);\n\t\tif (this.stopped) throw new Error(\"MCP server manager is closed\");\n\t\tconst ownedSignal = combineAbortSignals(this.runtimeSignal, signal);\n\t\tthrowIfAborted(ownedSignal);\n\t\tconst closing = this.closePromises.get(name);\n\t\tif (closing) await abortable(closing, ownedSignal);\n\t\tthrowIfAborted(ownedSignal);\n\n\t\t// Dedupe concurrent connection attempts.\n\t\tif (this.connectPromises.has(name)) {\n\t\t\treturn abortable(this.connectPromises.get(name)!, ownedSignal);\n\t\t}\n\n\t\tconst existing = this.connections.get(name);\n\t\tif (existing?.status === \"connected\") {\n\t\t\texisting.lastUsedAt = Date.now();\n\t\t\treturn existing;\n\t\t}\n\n\t\tconst credentialsInvalidated = existing?.status === \"needs-auth\" && existing.credentialsInvalidated === true;\n\t\tconst generation = this.closeGenerations.get(name) ?? 0;\n\t\tconst attemptController = new AbortController();\n\t\tconst attemptSignal = combineAbortSignals(ownedSignal, attemptController.signal);\n\t\tconst connectionAttempt = this.createConnection(\n\t\t\tname,\n\t\t\tdefinition,\n\t\t\tattemptSignal,\n\t\t\townedSignal,\n\t\t\tcredentialsInvalidated,\n\t\t);\n\t\tconst promise = definition.url\n\t\t\t? connectionAttempt.catch(async (error) => {\n\t\t\t\t\tthrow await this.enrichHttpConnectionError(definition, error);\n\t\t\t\t})\n\t\t\t: connectionAttempt;\n\t\tthis.connectPromises.set(name, promise);\n\t\tthis.connectAttempts.set(name, attemptController);\n\n\t\ttry {\n\t\t\tconst connection = await promise;\n\t\t\tif (attemptController.signal.aborted || (this.closeGenerations.get(name) ?? 0) !== generation) {\n\t\t\t\tawait this.disposeConnection(connection);\n\t\t\t\tthrowIfAborted(attemptSignal);\n\t\t\t\tthrow new Error(`MCP connection for ${name} was closed while connecting`);\n\t\t\t}\n\t\t\tthis.connections.set(name, connection);\n\t\t\treturn connection;\n\t\t} finally {\n\t\t\tif (this.connectPromises.get(name) === promise) this.connectPromises.delete(name);\n\t\t\tif (this.connectAttempts.get(name) === attemptController) this.connectAttempts.delete(name);\n\t\t}\n\t}\n\n\t/**\n\t * Reconnect a server whose connection was proven stale (e.g. by a 404\n\t * \"session no longer exists\" response). Single-flight per server name —\n\t * concurrent callers that raced to the same failure share one reconnect —\n\t * and identity-guarded: `staleConnection` is only torn down if it is\n\t * still the manager's current connection for `name`. If a concurrent\n\t * reconnect (or an unrelated connect()) already replaced it with a fresh\n\t * connection, that fresh connection is returned untouched.\n\t */\n\tasync reconnect(\n\t\tname: string,\n\t\tdefinition: ServerDefinition,\n\t\tstaleConnection: ServerConnection,\n\t\tsignal?: AbortSignal,\n\t): Promise<ServerConnection> {\n\t\tif (isServerDisabled(definition)) throw new Error(`MCP server \"${name}\" is disabled`);\n\t\tif (this.stopped) throw new Error(\"MCP server manager is closed\");\n\t\tconst ownedSignal = combineAbortSignals(this.runtimeSignal, signal);\n\t\tthrowIfAborted(ownedSignal);\n\t\tconst inFlight = this.reconnectPromises.get(name);\n\t\tif (inFlight) {\n\t\t\treturn abortable(inFlight, ownedSignal);\n\t\t}\n\n\t\tconst promise = this.doReconnect(name, definition, staleConnection, ownedSignal).finally(() => {\n\t\t\tif (this.reconnectPromises.get(name) === promise) {\n\t\t\t\tthis.reconnectPromises.delete(name);\n\t\t\t}\n\t\t});\n\t\tthis.reconnectPromises.set(name, promise);\n\t\treturn abortable(promise, ownedSignal);\n\t}\n\n\t/**\n\t * Fetch the authoritative tool catalog for a connection that still appears\n\t * connected. The SDK response cache is explicitly bypassed so this request\n\t * also proves the remote Streamable HTTP session is usable. Results are\n\t * identity-guarded: a late response from a replaced connection is ignored.\n\t */\n\tasync refreshTools(\n\t\tname: string,\n\t\texpectedConnection: ServerConnection,\n\t\tsignal?: AbortSignal,\n\t): Promise<ToolRefreshResult> {\n\t\tif (this.stopped) throw new Error(\"MCP server manager is closed\");\n\t\tconst ownedSignal = combineAbortSignals(this.runtimeSignal, signal);\n\t\tthrowIfAborted(ownedSignal);\n\n\t\tconst current = this.connections.get(name);\n\t\tif (current !== expectedConnection || current.status !== \"connected\") {\n\t\t\treturn \"superseded\";\n\t\t}\n\n\t\tconst requestOptions = this.buildRequestOptions(expectedConnection.definition, signal);\n\t\tconst timeout = Math.min(requestOptions?.timeout ?? KEEP_ALIVE_REFRESH_TIMEOUT_MS, KEEP_ALIVE_REFRESH_TIMEOUT_MS);\n\t\tconst healthOptions = {\n\t\t\t...requestOptions,\n\t\t\ttimeout,\n\t\t};\n\t\tif (!expectedConnection.client.getServerCapabilities?.()?.tools) {\n\t\t\tawait expectedConnection.client.ping(healthOptions);\n\t\t\tthrowIfAborted(ownedSignal);\n\t\t\tif (this.connections.get(name) !== expectedConnection || expectedConnection.status !== \"connected\") {\n\t\t\t\treturn \"superseded\";\n\t\t\t}\n\t\t\tthis.retryPendingMetadataPublication(name, expectedConnection);\n\t\t\treturn \"unchanged\";\n\t\t}\n\n\t\tconst toolsRevision = expectedConnection.toolsRevision ?? 0;\n\t\tconst refreshSignal = combineAbortSignals(healthOptions.signal, AbortSignal.timeout(timeout));\n\t\tlet tools: McpTool[];\n\t\ttry {\n\t\t\ttools = await this.fetchAllTools(expectedConnection.client, {\n\t\t\t\t...healthOptions,\n\t\t\t\t...(refreshSignal ? { signal: refreshSignal } : {}),\n\t\t\t\tcacheMode: \"refresh\",\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tthrowIfAborted(ownedSignal);\n\t\t\tif (this.connections.get(name) !== expectedConnection || expectedConnection.status !== \"connected\") {\n\t\t\t\treturn \"superseded\";\n\t\t\t}\n\t\t\tif (error instanceof SdkError && error.code === SdkErrorCode.RequestTimeout) {\n\t\t\t\treturn \"refresh-timeout\";\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t\tthrowIfAborted(ownedSignal);\n\n\t\tif (this.connections.get(name) !== expectedConnection || expectedConnection.status !== \"connected\") {\n\t\t\treturn \"superseded\";\n\t\t}\n\t\tif ((expectedConnection.toolsRevision ?? 0) !== toolsRevision) {\n\t\t\treturn \"superseded\";\n\t\t}\n\n\t\tif (isDeepStrictEqual(expectedConnection.tools, tools)) {\n\t\t\tthis.retryPendingMetadataPublication(name, expectedConnection);\n\t\t\treturn \"unchanged\";\n\t\t}\n\n\t\tconst previousTools = expectedConnection.tools;\n\t\texpectedConnection.tools = tools;\n\t\texpectedConnection.toolsRevision = toolsRevision + 1;\n\t\ttry {\n\t\t\tawait this.metadataListChangedListener?.(name, \"keep-alive-refresh\");\n\t\t\tthis.pendingMetadataPublications.delete(name);\n\t\t} catch (error) {\n\t\t\tif (this.connections.get(name) === expectedConnection && expectedConnection.tools === tools) {\n\t\t\t\texpectedConnection.tools = previousTools;\n\t\t\t\texpectedConnection.toolsRevision = toolsRevision;\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t\treturn \"updated\";\n\t}\n\n\tprivate retryPendingMetadataPublication(name: string, connection: ServerConnection): void {\n\t\tconst pendingPublication = this.pendingMetadataPublications.get(name);\n\t\tif (pendingPublication?.connection !== connection) return;\n\t\tthis.metadataListChangedListener?.(name, pendingPublication.reason);\n\t\tif (this.pendingMetadataPublications.get(name) === pendingPublication) {\n\t\t\tthis.pendingMetadataPublications.delete(name);\n\t\t}\n\t}\n\n\tprivate async doReconnect(\n\t\tname: string,\n\t\tdefinition: ServerDefinition,\n\t\tstaleConnection: ServerConnection,\n\t\tsignal?: AbortSignal,\n\t): Promise<ServerConnection> {\n\t\tthrowIfAborted(signal);\n\t\tconst current = this.connections.get(name);\n\n\t\t// Never tear down a connection we didn't prove stale: if the map no\n\t\t// longer holds the connection we were asked to replace, someone else\n\t\t// already reconnected (or connected) first.\n\t\tif (current !== staleConnection) {\n\t\t\treturn current ?? this.connect(name, definition, signal);\n\t\t}\n\n\t\tconst staleInFlight = staleConnection.inFlight;\n\t\tawait this.close(name);\n\t\tconst fresh = await this.connect(name, definition, signal);\n\t\tfresh.inFlight = Math.max(fresh.inFlight, staleInFlight);\n\t\treturn fresh;\n\t}\n\n\tprivate async createConnection(\n\t\tname: string,\n\t\tdefinition: ServerDefinition,\n\t\tsignal?: AbortSignal,\n\t\trequestSignal?: AbortSignal,\n\t\tcredentialsInvalidated = false,\n\t): Promise<ServerConnection> {\n\t\tthrowIfAborted(signal);\n\n\t\tconst tracingEnabled = isMcpTraceEnabled(definition, this.traceSettings);\n\t\tif (tracingEnabled && !this.traceWriter) {\n\t\t\tthis.traceWriter = createMcpTraceWriter(this.defaultCwd, this.traceSettings ?? {});\n\t\t}\n\t\tconst traceWriter = tracingEnabled ? this.traceWriter : undefined;\n\t\tconst traceObserver: McpTraceObserver | undefined = traceWriter\n\t\t\t? { record: (event) => traceWriter.write(event) }\n\t\t\t: undefined;\n\n\t\tlet client: Client;\n\t\tlet transport: Transport;\n\t\tlet clientConnected = false;\n\t\tlet invalidated = credentialsInvalidated;\n\t\tlet transportAlreadyTraced = false;\n\t\tlet stderrTail: Buffer<ArrayBufferLike> = Buffer.alloc(0);\n\t\tconst configuredTransports = [definition.command, definition.url, definition.socket].filter(\n\t\t\t(value) => typeof value === \"string\" && value.length > 0,\n\t\t);\n\t\tif (configuredTransports.length !== 1) {\n\t\t\tthrow new Error(`Server ${name} must configure exactly one of command, url, or socket`);\n\t\t}\n\n\t\tconst requestOptions = this.buildRequestOptions(definition, requestSignal);\n\n\t\tif (definition.command) {\n\t\t\tclient = this.createClient(name, definition);\n\t\t\tlet command = definition.command;\n\t\t\tlet args = (definition.args ?? []).map(interpolateEnvVars);\n\n\t\t\tif (command === \"npx\" || command === \"npm\") {\n\t\t\t\tconst resolved = await resolveNpxBinary(command, args, signal);\n\t\t\t\tif (resolved) {\n\t\t\t\t\tcommand = resolved.isJs ? \"node\" : resolved.binPath;\n\t\t\t\t\targs = resolved.isJs ? [resolved.binPath, ...resolved.extraArgs] : resolved.extraArgs;\n\t\t\t\t\tlogger.debug(`${name} resolved to ${resolved.binPath} (skipping npm parent)`);\n\t\t\t\t}\n\t\t\t}\n\t\t\tthrowIfAborted(signal);\n\n\t\t\tif (definition.pluginDataDir) mkdirSync(definition.pluginDataDir, { recursive: true });\n\t\t\tconst cwd = resolveConfigPath(definition.cwd) ?? this.defaultCwd;\n\t\t\tconst stdioTransport = new StdioClientTransport({\n\t\t\t\tcommand,\n\t\t\t\targs,\n\t\t\t\tenv: resolveEnv(definition.env, name, definition.literalEnv === true),\n\t\t\t\t...(cwd !== undefined ? { cwd } : {}),\n\t\t\t\tstderr: definition.debug ? \"inherit\" : \"pipe\",\n\t\t\t});\n\t\t\t// Keep non-debug child diagnostics available for connection failures without\n\t\t\t// retaining an unbounded stream or changing the existing debug behavior.\n\t\t\tif (stdioTransport.stderr) {\n\t\t\t\tstdioTransport.stderr.on(\"data\", (chunk: Buffer | string) => {\n\t\t\t\t\tstderrTail = appendStderrTail(stderrTail, chunk);\n\t\t\t\t});\n\t\t\t}\n\t\t\ttransport = stdioTransport;\n\t\t} else if (definition.url) {\n\t\t\tconst httpConnection = await this.connectHttpClient(\n\t\t\t\tdefinition,\n\t\t\t\tname,\n\t\t\t\trequestOptions,\n\t\t\t\tsignal,\n\t\t\t\ttraceObserver,\n\t\t\t\tinvalidated,\n\t\t\t);\n\t\t\tclient = httpConnection.client;\n\t\t\ttransport = httpConnection.transport;\n\t\t\tinvalidated = httpConnection.credentialsInvalidated;\n\t\t\tif (httpConnection.status === \"needs-auth\") {\n\t\t\t\treturn {\n\t\t\t\t\tclient,\n\t\t\t\t\ttransport,\n\t\t\t\t\tdefinition,\n\t\t\t\t\ttools: [],\n\t\t\t\t\tresources: [],\n\t\t\t\t\tprompts: [],\n\t\t\t\t\tlastUsedAt: Date.now(),\n\t\t\t\t\tinFlight: 0,\n\t\t\t\t\tstatus: \"needs-auth\",\n\t\t\t\t\tcredentialsInvalidated: invalidated,\n\t\t\t\t};\n\t\t\t}\n\t\t\tclientConnected = true;\n\t\t\ttransportAlreadyTraced = traceObserver !== undefined;\n\t\t} else {\n\t\t\tclient = this.createClient(name, definition);\n\t\t\ttransport = new UnixSocketClientTransport(resolveConfigPath(definition.socket!)!);\n\t\t}\n\n\t\tif (traceObserver && !transportAlreadyTraced) {\n\t\t\tconst traceTransportKindValue = traceTransportKind(definition, transport);\n\t\t\ttransport = wrapTransportWithMcpTrace(transport, name, traceTransportKindValue, traceObserver);\n\t\t}\n\n\t\ttry {\n\t\t\tthrowIfAborted(signal);\n\t\t\tif (!clientConnected) {\n\t\t\t\tawait this.connectClientWithAbort(client, transport, requestOptions, signal);\n\t\t\t}\n\t\t\tthis.attachAdapterNotificationHandlers(name, client);\n\n\t\t\tconst instructions = client.getInstructions?.();\n\t\t\tconst connection: ServerConnection = {\n\t\t\t\tclient,\n\t\t\t\ttransport,\n\t\t\t\tdefinition,\n\t\t\t\ttools: [],\n\t\t\t\ttoolsRevision: 0,\n\t\t\t\tresources: [],\n\t\t\t\tprompts: [],\n\t\t\t\t...(instructions !== undefined ? { instructions } : {}),\n\t\t\t\tlastUsedAt: Date.now(),\n\t\t\t\tinFlight: 0,\n\t\t\t\tstatus: \"connected\",\n\t\t\t};\n\n\t\t\t// Reflect the SDK's own close signal in connection status, guarded by\n\t\t\t// identity so a stale connection's late close can never clobber a fresh\n\t\t\t// connection. The SDK client owns the transport callbacks.\n\t\t\tclient.onclose = () => {\n\t\t\t\tif (this.connections.get(name) === connection) {\n\t\t\t\t\tconnection.status = \"closed\";\n\t\t\t\t}\n\t\t\t};\n\n\t\t\t// Discover tools, resources, and prompts. Resource and prompt listing is\n\t\t\t// optional: only servers advertising the capability are queried.\n\t\t\tconst [tools, resources, promptResult] = await Promise.all([\n\t\t\t\tthis.fetchAllTools(client, requestOptions),\n\t\t\t\tthis.fetchAllResources(client, requestOptions),\n\t\t\t\tthis.fetchAllPrompts(client, requestOptions),\n\t\t\t]);\n\t\t\tconnection.tools = tools;\n\t\t\tconnection.resources = resources;\n\t\t\tconnection.prompts = promptResult.prompts;\n\t\t\tconnection.promptDiscoveryFailed = promptResult.failed;\n\n\t\t\treturn connection;\n\t\t} catch (error) {\n\t\t\t// If connectClientWithAbort closed the transport, await that exact close.\n\t\t\t// Otherwise the SDK client owns its transport and performs cleanup once.\n\t\t\tconst abortCleanup = abortCleanupPromises.get(transport);\n\t\t\tconst abortCleanupFailed =\n\t\t\t\terror instanceof AggregateError && error.message === \"MCP connection abort cleanup failed\";\n\t\t\tconst cleanupResults = abortCleanupFailed\n\t\t\t\t? []\n\t\t\t\t: await Promise.allSettled([abortCleanup ?? Promise.resolve().then(() => client.close())]);\n\t\t\tconst cleanupFailures = cleanupResults.flatMap((result) =>\n\t\t\t\tresult.status === \"rejected\" ? [result.reason] : [],\n\t\t\t);\n\t\t\tlet reportedError: unknown = error;\n\t\t\tif (cleanupFailures.length > 0) {\n\t\t\t\treportedError = new AggregateError([error, ...cleanupFailures], \"MCP connection setup failed\");\n\t\t\t}\n\n\t\t\t// A cleanup failure remains a setup failure rather than being hidden\n\t\t\t// behind needs-auth.\n\t\t\tif (isUnauthorizedHttpError(error) && supportsOAuth(definition) && cleanupFailures.length === 0) {\n\t\t\t\tif (!invalidated) {\n\t\t\t\t\tinvalidateAuthEntryCache(name);\n\t\t\t\t\tinvalidated = true;\n\t\t\t\t}\n\t\t\t\treturn {\n\t\t\t\t\tclient,\n\t\t\t\t\ttransport,\n\t\t\t\t\tdefinition,\n\t\t\t\t\ttools: [],\n\t\t\t\t\tresources: [],\n\t\t\t\t\tprompts: [],\n\t\t\t\t\tlastUsedAt: Date.now(),\n\t\t\t\t\tinFlight: 0,\n\t\t\t\t\tstatus: \"needs-auth\",\n\t\t\t\t\tcredentialsInvalidated: invalidated,\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tif (stderrTail.length > 0) {\n\t\t\t\tconst stderrText = stderrTail.toString(\"utf8\").trim();\n\t\t\t\tconst lines = stderrText\n\t\t\t\t\t.split(/\\r?\\n/)\n\t\t\t\t\t.map((line) => line.trim())\n\t\t\t\t\t.filter(Boolean);\n\t\t\t\tif (lines.length > 0) {\n\t\t\t\t\tconst baseMessage = reportedError instanceof Error ? reportedError.message : String(reportedError);\n\t\t\t\t\tconst detail = lines.slice(-MAX_CAPTURED_STDERR_LINES).join(\" — \");\n\t\t\t\t\tthrow new Error(`${baseMessage} (${detail})`, { cause: reportedError });\n\t\t\t\t}\n\t\t\t}\n\t\t\tthrow reportedError;\n\t\t}\n\t}\n\n\tprivate async enrichHttpConnectionError(definition: ServerDefinition, error: unknown): Promise<Error> {\n\t\tconst originalMessage = error instanceof Error ? error.message : String(error);\n\t\ttry {\n\t\t\tconst probe = await probeMcpEndpoint(resolveServerUrl(definition)!);\n\t\t\treturn new Error(`${originalMessage} — probe: ${probe.classification}`, { cause: error });\n\t\t} catch {\n\t\t\treturn error instanceof Error ? error : new Error(originalMessage);\n\t\t}\n\t}\n\n\tprivate async connectClientWithAbort(\n\t\tclient: Client,\n\t\ttransport: Transport,\n\t\trequestOptions?: RequestOptions,\n\t\tsignal?: AbortSignal,\n\t): Promise<void> {\n\t\tthrowIfAborted(signal);\n\t\tlet abortCleanup: Promise<void> | undefined;\n\t\tconst closeTransport = () => {\n\t\t\tabortCleanup = Promise.resolve().then(() => transport.close());\n\t\t\tabortCleanupPromises.set(transport, abortCleanup);\n\t\t};\n\t\tsignal?.addEventListener(\"abort\", closeTransport, { once: true });\n\t\ttry {\n\t\t\tawait abortable(client.connect(transport, requestOptions), signal);\n\t\t\tawait abortCleanup;\n\t\t} catch (error) {\n\t\t\tif (abortCleanup) {\n\t\t\t\ttry {\n\t\t\t\t\tawait abortCleanup;\n\t\t\t\t} catch (cleanupError) {\n\t\t\t\t\tthrow new AggregateError([error, cleanupError], \"MCP connection abort cleanup failed\");\n\t\t\t\t}\n\t\t\t}\n\t\t\tthrow error;\n\t\t} finally {\n\t\t\tsignal?.removeEventListener(\"abort\", closeTransport);\n\t\t}\n\t}\n\n\tprivate buildClientCapabilities() {\n\t\treturn {\n\t\t\t...(this.samplingConfig ? { sampling: {} } : {}),\n\t\t\t...(this.elicitationConfig\n\t\t\t\t? {\n\t\t\t\t\t\telicitation: {\n\t\t\t\t\t\t\tform: {},\n\t\t\t\t\t\t\t...(this.elicitationConfig.allowUrl ? { url: {} } : {}),\n\t\t\t\t\t\t},\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t};\n\t}\n\n\tprivate createClient(serverName: string, definition: ServerDefinition): Client {\n\t\tconst capabilities = this.buildClientCapabilities();\n\t\tconst versionNegotiation = resolveVersionNegotiation(definition);\n\t\tlet client: Client;\n\t\tclient = new Client(\n\t\t\t{ name: `nexus-cli-mcp-${serverName}`, version: VERSION },\n\t\t\t{\n\t\t\t\tjsonSchemaValidator: createJsonSchemaValidator(),\n\t\t\t\t...(versionNegotiation ? { versionNegotiation } : {}),\n\t\t\t\t...(Object.keys(capabilities).length > 0 ? { capabilities } : {}),\n\t\t\t\tlistChanged: {\n\t\t\t\t\ttools: {\n\t\t\t\t\t\tonChanged: (error: Error | null, tools: McpTool[] | null) => {\n\t\t\t\t\t\t\tthis.handleToolsListChanged(serverName, client, error, tools);\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tresources: {\n\t\t\t\t\t\tonChanged: (error: Error | null, resources: McpResource[] | null) => {\n\t\t\t\t\t\t\tthis.handleResourcesListChanged(serverName, client, error, resources);\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tprompts: {\n\t\t\t\t\t\tonChanged: (error: Error | null, prompts: McpPrompt[] | null) => {\n\t\t\t\t\t\t\tthis.handlePromptsListChanged(serverName, client, error, prompts);\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t);\n\t\tif (this.samplingConfig) {\n\t\t\tregisterSamplingHandler(client, { ...this.samplingConfig, serverName });\n\t\t}\n\t\tif (this.elicitationConfig) {\n\t\t\tregisterElicitationHandler(client, {\n\t\t\t\t...this.elicitationConfig,\n\t\t\t\tserverName,\n\t\t\t\tonUrlAccepted: (elicitationId) => this.rememberUrlElicitation(serverName, elicitationId),\n\t\t\t});\n\t\t\tif (this.elicitationConfig.allowUrl) {\n\t\t\t\tclient.setNotificationHandler(\"notifications/elicitation/complete\", (notification) => {\n\t\t\t\t\tif (this.runtimeSignal?.aborted) return;\n\t\t\t\t\tconst accepted = this.acceptedUrlElicitations.get(serverName);\n\t\t\t\t\tif (!accepted?.delete(notification.params.elicitationId)) return;\n\t\t\t\t\tthis.elicitationConfig?.ui.notify(\n\t\t\t\t\t\t`MCP browser interaction for ${serverName} completed. You can retry the tool now.`,\n\t\t\t\t\t\t\"info\",\n\t\t\t\t\t);\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t\treturn client;\n\t}\n\n\tprivate handleToolsListChanged(\n\t\tserverName: string,\n\t\tclient: Client,\n\t\terror: Error | null,\n\t\ttools: McpTool[] | null,\n\t): void {\n\t\tif (error) {\n\t\t\tlogger.debug(`MCP: tools/list_changed refresh failed for ${serverName}: ${error.message}`);\n\t\t\treturn;\n\t\t}\n\t\tif (!tools) return;\n\t\tconst connection = this.connections.get(serverName);\n\t\tif (!connection || connection.client !== client || connection.status !== \"connected\") return;\n\t\tconnection.tools = tools;\n\t\tconnection.toolsRevision = (connection.toolsRevision ?? 0) + 1;\n\t\tthis.metadataListChangedListener?.(serverName, \"tools-list-changed\");\n\t\tthis.pendingMetadataPublications.delete(serverName);\n\t}\n\n\tprivate handlePromptsListChanged(\n\t\tserverName: string,\n\t\tclient: Client,\n\t\terror: Error | null,\n\t\tprompts: McpPrompt[] | null,\n\t): void {\n\t\tif (error) {\n\t\t\tlogger.debug(`MCP: prompts/list_changed refresh failed for ${serverName}: ${error.message}`);\n\t\t\treturn;\n\t\t}\n\t\tif (!prompts) return;\n\t\tconst connection = this.connections.get(serverName);\n\t\tif (!connection || connection.client !== client || connection.status !== \"connected\") return;\n\t\tconnection.prompts = prompts;\n\t\tconnection.promptDiscoveryFailed = false;\n\t\tthis.metadataListChangedListener?.(serverName, \"prompts-list-changed\");\n\t\tthis.pendingMetadataPublications.delete(serverName);\n\t}\n\n\tprivate handleResourcesListChanged(\n\t\tserverName: string,\n\t\tclient: Client,\n\t\terror: Error | null,\n\t\tresources: McpResource[] | null,\n\t): void {\n\t\tif (error) {\n\t\t\tlogger.debug(`MCP: resources/list_changed refresh failed for ${serverName}: ${error.message}`);\n\t\t\treturn;\n\t\t}\n\t\tif (!resources) return;\n\t\tconst connection = this.connections.get(serverName);\n\t\tif (!connection || connection.client !== client || connection.status !== \"connected\") return;\n\t\tconnection.resources = resources;\n\t\tthis.metadataListChangedListener?.(serverName, \"resources-list-changed\");\n\t\tthis.pendingMetadataPublications.delete(serverName);\n\t}\n\n\tasync handleUrlElicitationRequired(\n\t\tserverName: string,\n\t\terror: UrlElicitationRequiredError,\n\t): Promise<\"accept\" | \"decline\" | \"cancel\"> {\n\t\tif (this.runtimeSignal?.aborted || !this.elicitationConfig?.allowUrl) return \"cancel\";\n\t\tfor (const params of error.elicitations) {\n\t\t\tconst result = await handleUrlElicitation(\n\t\t\t\t{\n\t\t\t\t\t...this.elicitationConfig,\n\t\t\t\t\tserverName,\n\t\t\t\t\tonUrlAccepted: (elicitationId) => this.rememberUrlElicitation(serverName, elicitationId),\n\t\t\t\t},\n\t\t\t\tparams,\n\t\t\t);\n\t\t\tif (result.action !== \"accept\") return result.action;\n\t\t}\n\t\treturn \"accept\";\n\t}\n\n\tprivate rememberUrlElicitation(serverName: string, elicitationId: string): void {\n\t\tif (this.runtimeSignal?.aborted) return;\n\t\tlet accepted = this.acceptedUrlElicitations.get(serverName);\n\t\tif (!accepted) {\n\t\t\taccepted = new Set();\n\t\t\tthis.acceptedUrlElicitations.set(serverName, accepted);\n\t\t}\n\t\taccepted.add(elicitationId);\n\t}\n\n\tprivate async connectHttpClient(\n\t\tdefinition: ServerDefinition,\n\t\tserverName: string,\n\t\trequestOptions: RequestOptions | undefined,\n\t\tsignal?: AbortSignal,\n\t\ttraceObserver?: McpTraceObserver,\n\t\tcredentialsInvalidated = false,\n\t): Promise<{\n\t\tclient: Client;\n\t\ttransport: Transport;\n\t\tstatus: \"connected\" | \"needs-auth\";\n\t\tcredentialsInvalidated: boolean;\n\t}> {\n\t\tthrowIfAborted(signal);\n\t\tconst serverUrl = resolveServerUrl(definition)!;\n\t\tconst url = new URL(serverUrl);\n\n\t\t// Resolve secret commands only for this connection attempt, without\n\t\t// mutating the persisted configuration.\n\t\tconst hasCommandHeader = Object.values(definition.headers ?? {}).some(\n\t\t\t(value) => value.startsWith(\"!\") && !value.startsWith(\"!!\"),\n\t\t);\n\t\tconst headers =\n\t\t\tresolveCommandSecretsRecord(definition.headers, (key) => `MCP server \"${serverName}\" HTTP header \"${key}\"`) ??\n\t\t\t{};\n\n\t\t// Resolve bearer auth before creating requestInit so every attempted\n\t\t// transport receives the same headers.\n\t\tconst commandBearer =\n\t\t\tdefinition.bearerToken?.startsWith(\"!\") && !definition.bearerToken.startsWith(\"!!\")\n\t\t\t\t? definition.bearerToken\n\t\t\t\t: undefined;\n\t\tif (definition.auth === \"bearer\") {\n\t\t\tconst token = commandBearer\n\t\t\t\t? resolveCommandSecret(commandBearer, `MCP server \"${serverName}\" HTTP bearer token`)\n\t\t\t\t: (resolveBearerToken(definition) ??\n\t\t\t\t\t(definition.bearerToken === undefined &&\n\t\t\t\t\tdefinition.bearerTokenEnv === undefined &&\n\t\t\t\t\tdefinition.bearerTokenStore === true\n\t\t\t\t\t\t? getBearerTokenForUrl(serverName, serverUrl)\n\t\t\t\t\t\t: undefined));\n\t\t\tif (token) headers.Authorization = `Bearer ${token}`;\n\t\t}\n\n\t\tif (hasCommandHeader || commandBearer) {\n\t\t\ttry {\n\t\t\t\tnew Headers(headers);\n\t\t\t} catch {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`Failed to resolve MCP server \"${serverName}\" HTTP command secret: command returned an invalid header value`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\tconst requestInit = Object.keys(headers).length > 0 ? { headers } : undefined;\n\t\tconst requestFetch = definition.requestHeadersCommand\n\t\t\t? createRequestHeadersCommandFetch(definition.requestHeadersCommand)\n\t\t\t: undefined;\n\t\tconst createAuthProvider = (): McpOAuthProvider =>\n\t\t\tnew McpOAuthProvider(\n\t\t\t\tserverName,\n\t\t\t\tserverUrl,\n\t\t\t\textractOAuthConfig(definition),\n\t\t\t\t{ onRedirect: async () => {} },\n\t\t\t\tthis.authStorageOptions,\n\t\t\t\tthis.oauthRuntime?.signal,\n\t\t\t);\n\n\t\t// Explicit OAuth checks secure storage immediately. Implicit OAuth defers\n\t\t// provider construction until the server proves authentication is needed.\n\t\tlet authState: HttpAuthProviderState = supportsOAuth(definition)\n\t\t\t? definition.auth === undefined\n\t\t\t\t? { status: \"implicit-deferred\" }\n\t\t\t\t: { status: \"explicit\", provider: createAuthProvider() }\n\t\t\t: { status: \"disabled\" };\n\n\t\tconst attempt = async (\n\t\t\tkind: \"streamable-http\" | \"sse\",\n\t\t): Promise<\n\t\t\t| { status: \"connected\"; client: Client; transport: Transport }\n\t\t\t| { status: \"failed\"; client: Client; transport: Transport; error: unknown }\n\t\t> => {\n\t\t\tconst authProvider = \"provider\" in authState ? authState.provider : undefined;\n\t\t\tconst transportOptions = {\n\t\t\t\t...(requestInit !== undefined ? { requestInit } : {}),\n\t\t\t\t...(requestFetch !== undefined ? { fetch: requestFetch } : {}),\n\t\t\t\t...(authProvider !== undefined ? { authProvider } : {}),\n\t\t\t\t...(authProvider !== undefined &&\n\t\t\t\tdefinition.oauth !== false &&\n\t\t\t\tdefinition.oauth?.skipIssuerMetadataValidation === true\n\t\t\t\t\t? { skipIssuerMetadataValidation: true }\n\t\t\t\t\t: {}),\n\t\t\t};\n\t\t\tconst baseTransport: Transport =\n\t\t\t\tkind === \"streamable-http\"\n\t\t\t\t\t? new StreamableHTTPClientTransport(url, transportOptions)\n\t\t\t\t\t: new SSEClientTransport(url, transportOptions);\n\t\t\tconst transport = traceObserver\n\t\t\t\t? wrapTransportWithMcpTrace(baseTransport, serverName, kind, traceObserver)\n\t\t\t\t: baseTransport;\n\t\t\tconst client = this.createClient(serverName, definition);\n\n\t\t\ttry {\n\t\t\t\tawait this.connectClientWithAbort(client, transport, requestOptions, signal);\n\t\t\t\treturn { status: \"connected\", client, transport };\n\t\t\t} catch (error) {\n\t\t\t\tconst abortCleanupFailed =\n\t\t\t\t\terror instanceof AggregateError && error.message === \"MCP connection abort cleanup failed\";\n\t\t\t\tif (!abortCleanupFailed) {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tawait (abortCleanupPromises.get(transport) ?? client.close());\n\t\t\t\t\t} catch (cleanupError) {\n\t\t\t\t\t\tthrow new AggregateError([error, cleanupError], \"MCP HTTP connection cleanup failed\");\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn { status: \"failed\", client, transport, error };\n\t\t\t}\n\t\t};\n\n\t\t// Connect the real client once. Retry Streamable HTTP only for an implicit\n\t\t// OAuth challenge; use SSE only for definitive endpoint incompatibility.\n\t\t// Agent Plugins set httpTransport, and their declared transport is used without fallback.\n\t\tlet kind: \"streamable-http\" | \"sse\" = definition.httpTransport ?? \"streamable-http\";\n\t\tlet invalidated = credentialsInvalidated;\n\t\tfor (;;) {\n\t\t\tconst result = await attempt(kind);\n\t\t\tif (result.status === \"connected\") return { ...result, credentialsInvalidated: invalidated };\n\t\t\tif (result.error instanceof AggregateError && result.error.message === \"MCP connection abort cleanup failed\") {\n\t\t\t\tthrow result.error;\n\t\t\t}\n\t\t\tif (signal?.aborted) throwIfAborted(signal);\n\n\t\t\tif (authState.status === \"implicit-deferred\" && isUnauthorizedHttpError(result.error)) {\n\t\t\t\tauthState = { status: \"implicit-challenged\", provider: createAuthProvider() };\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (isUnauthorizedHttpError(result.error)) {\n\t\t\t\tif (supportsOAuth(definition)) {\n\t\t\t\t\tif (!invalidated) {\n\t\t\t\t\t\tinvalidateAuthEntryCache(serverName);\n\t\t\t\t\t\tinvalidated = true;\n\t\t\t\t\t}\n\t\t\t\t\treturn {\n\t\t\t\t\t\tclient: result.client,\n\t\t\t\t\t\ttransport: result.transport,\n\t\t\t\t\t\tstatus: \"needs-auth\",\n\t\t\t\t\t\tcredentialsInvalidated: invalidated,\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\tthrow result.error;\n\t\t\t}\n\n\t\t\tif (\n\t\t\t\tdefinition.httpTransport === undefined &&\n\t\t\t\tkind === \"streamable-http\" &&\n\t\t\t\tshouldFallbackToSse(result.error, definition)\n\t\t\t) {\n\t\t\t\tkind = \"sse\";\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tthrow result.error;\n\t\t}\n\t}\n\n\tprivate async fetchAllTools(client: Client, requestOptions?: CacheableRequestOptions): Promise<McpTool[]> {\n\t\tconst allTools: McpTool[] = [];\n\t\tlet cursor: string | undefined;\n\n\t\tdo {\n\t\t\tconst result = await client.listTools(cursor ? { cursor } : undefined, requestOptions);\n\t\t\tallTools.push(...(result.tools ?? []));\n\t\t\tcursor = result.nextCursor;\n\t\t} while (cursor);\n\n\t\treturn allTools;\n\t}\n\n\tprivate async fetchAllPrompts(\n\t\tclient: Client,\n\t\trequestOptions?: RequestOptions,\n\t): Promise<{ prompts: McpPrompt[]; failed: boolean }> {\n\t\tconst capabilities = client.getServerCapabilities?.();\n\t\tif (!capabilities?.prompts) return { prompts: [], failed: false };\n\n\t\ttry {\n\t\t\tconst prompts: McpPrompt[] = [];\n\t\t\tlet cursor: string | undefined;\n\t\t\tdo {\n\t\t\t\tconst result = await client.listPrompts(cursor ? { cursor } : undefined, requestOptions);\n\t\t\t\tprompts.push(...(result.prompts ?? []));\n\t\t\t\tcursor = result.nextCursor;\n\t\t\t} while (cursor);\n\t\t\treturn { prompts, failed: false };\n\t\t} catch (error) {\n\t\t\tif (requestOptions?.signal?.aborted) throwIfAborted(requestOptions.signal);\n\t\t\tif (isUnauthorizedHttpError(error)) throw error;\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\tlogger.debug(`MCP: prompts/list failed: ${message}`);\n\t\t\treturn { prompts: [], failed: true };\n\t\t}\n\t}\n\n\tprivate async fetchAllResources(client: Client, requestOptions?: RequestOptions): Promise<McpResource[]> {\n\t\tconst capabilities = client.getServerCapabilities?.();\n\t\tif (!capabilities?.resources) return [];\n\n\t\ttry {\n\t\t\tconst allResources: McpResource[] = [];\n\t\t\tlet cursor: string | undefined;\n\n\t\t\tdo {\n\t\t\t\tconst result = await client.listResources(cursor ? { cursor } : undefined, requestOptions);\n\t\t\t\tallResources.push(...(result.resources ?? []));\n\t\t\t\tcursor = result.nextCursor;\n\t\t\t} while (cursor);\n\n\t\t\treturn allResources;\n\t\t} catch (error) {\n\t\t\tif (requestOptions?.signal?.aborted) {\n\t\t\t\tthrowIfAborted(requestOptions.signal);\n\t\t\t}\n\t\t\tif (isUnauthorizedHttpError(error)) throw error;\n\t\t\t// The server advertises resources but the listing failed\n\t\t\treturn [];\n\t\t}\n\t}\n\n\tprivate attachAdapterNotificationHandlers(serverName: string, client: Client): void {\n\t\tclient.setNotificationHandler(\n\t\t\tSERVER_STREAM_RESULT_PATCH_METHOD,\n\t\t\t{ params: serverStreamResultPatchNotificationSchema.shape.params },\n\t\t\t(params) => {\n\t\t\t\tconst listener = this.uiStreamListeners.get(params.streamToken);\n\t\t\t\tif (!listener) return;\n\t\t\t\tlistener(serverName, params);\n\t\t\t},\n\t\t);\n\t}\n\n\tregisterUiStreamListener(streamToken: string, listener: UiStreamListener): void {\n\t\tthis.uiStreamListeners.set(streamToken, listener);\n\t}\n\n\tremoveUiStreamListener(streamToken: string): void {\n\t\tthis.uiStreamListeners.delete(streamToken);\n\t}\n\n\tasync getPrompt(\n\t\tname: string,\n\t\tpromptName: string,\n\t\targs?: Record<string, string>,\n\t\tsignal?: AbortSignal,\n\t): Promise<GetPromptResult> {\n\t\tconst connection = this.connections.get(name);\n\t\tif (!connection || connection.status !== \"connected\") {\n\t\t\tthrow new Error(`Server \"${name}\" is not connected`);\n\t\t}\n\t\ttry {\n\t\t\tthis.touch(name);\n\t\t\tthis.incrementInFlight(name);\n\t\t\treturn await connection.client.getPrompt(\n\t\t\t\t{ name: promptName, ...(args ? { arguments: args } : {}) },\n\t\t\t\tthis.getRequestOptions(name, signal),\n\t\t\t);\n\t\t} finally {\n\t\t\tthis.decrementInFlight(name);\n\t\t\tthis.touch(name);\n\t\t}\n\t}\n\n\tasync readResource(name: string, uri: string, signal?: AbortSignal): Promise<ReadResourceResult> {\n\t\tif (isServerDisabled(this.connections.get(name)?.definition)) {\n\t\t\tthrow new Error(`MCP server \"${name}\" is disabled`);\n\t\t}\n\t\tconst connection = this.connections.get(name);\n\t\tif (!connection || connection.status !== \"connected\") {\n\t\t\tthrow new Error(`Server \"${name}\" is not connected`);\n\t\t}\n\n\t\ttry {\n\t\t\tthis.touch(name);\n\t\t\tthis.incrementInFlight(name);\n\t\t\treturn await connection.client.readResource({ uri }, this.getRequestOptions(name, signal));\n\t\t} finally {\n\t\t\tthis.decrementInFlight(name);\n\t\t\tthis.touch(name);\n\t\t}\n\t}\n\n\tasync close(name: string): Promise<void> {\n\t\tthis.closeGenerations.set(name, (this.closeGenerations.get(name) ?? 0) + 1);\n\t\tthis.connectAttempts.get(name)?.abort(new Error(`MCP connection ${name} was closed`));\n\t\tthis.pendingMetadataPublications.delete(name);\n\n\t\tconst connection = this.connections.get(name);\n\t\tif (!connection) {\n\t\t\tconst pendingClose = this.closePromises.get(name);\n\t\t\tif (pendingClose) {\n\t\t\t\tawait pendingClose;\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst pendingConnect = this.connectPromises.get(name);\n\t\t\tif (pendingConnect) {\n\t\t\t\ttry {\n\t\t\t\t\tawait pendingConnect;\n\t\t\t\t} catch (error) {\n\t\t\t\t\tif (this.containsCleanupFailure(error)) throw error;\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\n\t\t// Delete before awaiting SDK cleanup so a replacement cannot be removed by\n\t\t// an old close operation finishing later.\n\t\tconnection.status = \"closed\";\n\t\tthis.connections.delete(name);\n\t\tthis.acceptedUrlElicitations.delete(name);\n\t\tconst closing = this.disposeConnection(connection).finally(() => {\n\t\t\tif (this.closePromises.get(name) === closing) this.closePromises.delete(name);\n\t\t});\n\t\tthis.closePromises.set(name, closing);\n\t\treturn closing;\n\t}\n\n\tasync closeIfCurrent(name: string, expected: ServerConnection): Promise<boolean> {\n\t\tif (this.connections.get(name) !== expected) return false;\n\t\tawait this.close(name);\n\t\treturn true;\n\t}\n\n\tprivate async disposeConnection(connection: ServerConnection): Promise<void> {\n\t\tconst results = await Promise.allSettled([\n\t\t\t// Only client.close() is needed; the client owns the transport and will close it internally.\n\t\t\tPromise.resolve().then(() => connection.client.close()),\n\t\t\tthis.traceWriter?.flush() ?? Promise.resolve(),\n\t\t]);\n\t\tconst failures = results.flatMap((result) => (result.status === \"rejected\" ? [result.reason] : []));\n\t\tif (failures.length > 0) throw new AggregateError(failures, \"MCP connection cleanup failed\");\n\t}\n\n\tasync closeAll(): Promise<void> {\n\t\tthis.stopped = true;\n\t\tconst names = new Set([...this.connections.keys(), ...this.connectPromises.keys()]);\n\t\tfor (const name of names) {\n\t\t\tthis.closeGenerations.set(name, (this.closeGenerations.get(name) ?? 0) + 1);\n\t\t\tthis.connectAttempts.get(name)?.abort(new Error(`MCP connection ${name} was closed`));\n\t\t}\n\n\t\tconst pendingConnects = [...this.connectPromises.values()];\n\t\tconst currentNames = [...this.connections.keys()];\n\t\tconst pendingResults = await Promise.allSettled(pendingConnects);\n\t\tconst results = await Promise.allSettled(currentNames.map((name) => this.close(name)));\n\n\t\t// A connect that resolved during the first close snapshot is still fenced;\n\t\t// close any handle that was already inserted before its attempt settled.\n\t\tconst lateNames = [...this.connections.keys()];\n\t\tconst lateResults = await Promise.allSettled(lateNames.map((name) => this.close(name)));\n\t\tconst failures = [...pendingResults, ...results, ...lateResults]\n\t\t\t.flatMap((result) => (result.status === \"rejected\" ? [result.reason] : []))\n\t\t\t.filter((error) => this.containsCleanupFailure(error));\n\t\tthis.uiStreamListeners.clear();\n\t\tthis.acceptedUrlElicitations.clear();\n\t\tthis.pendingMetadataPublications.clear();\n\t\tthis.samplingConfig = undefined;\n\t\tthis.elicitationConfig = undefined;\n\t\tawait this.traceWriter?.flush();\n\t\tif (failures.length > 0) throw new AggregateError(failures, \"MCP manager cleanup failed\");\n\t}\n\n\tprivate containsCleanupFailure(error: unknown): boolean {\n\t\tconst pending: unknown[] = [error];\n\t\tconst seen = new Set<unknown>();\n\t\twhile (pending.length > 0) {\n\t\t\tconst current = pending.pop();\n\t\t\tif (!(current instanceof Error) || seen.has(current)) continue;\n\t\t\tseen.add(current);\n\t\t\tif (current instanceof AggregateError) {\n\t\t\t\tif (/cleanup failed|setup failed/.test(current.message)) return true;\n\t\t\t\tpending.push(...current.errors);\n\t\t\t}\n\t\t\tif (current.cause !== undefined) pending.push(current.cause);\n\t\t}\n\t\treturn false;\n\t}\n\n\tisConnecting(name: string): boolean {\n\t\treturn this.connectPromises.has(name);\n\t}\n\n\tgetConnection(name: string): ServerConnection | undefined {\n\t\treturn this.connections.get(name);\n\t}\n\n\tgetAllConnections(): Map<string, ServerConnection> {\n\t\treturn new Map(this.connections);\n\t}\n\n\ttouch(name: string): void {\n\t\tconst connection = this.connections.get(name);\n\t\tif (connection) {\n\t\t\tconnection.lastUsedAt = Date.now();\n\t\t}\n\t}\n\n\tincrementInFlight(name: string): void {\n\t\tconst connection = this.connections.get(name);\n\t\tif (connection) {\n\t\t\tconnection.inFlight = (connection.inFlight ?? 0) + 1;\n\t\t}\n\t}\n\n\tdecrementInFlight(name: string): void {\n\t\tconst connection = this.connections.get(name);\n\t\tif (connection?.inFlight) {\n\t\t\tconnection.inFlight--;\n\t\t}\n\t}\n\n\tisIdle(name: string, timeoutMs: number): boolean {\n\t\tconst connection = this.connections.get(name);\n\t\tif (!connection || connection.status !== \"connected\") return false;\n\t\tif (connection.inFlight > 0) return false;\n\t\treturn Date.now() - connection.lastUsedAt > timeoutMs;\n\t}\n}\n\n/**\n * Resolve environment variables with interpolation.\n */\nfunction resolveEnv(\n\tenv: Record<string, string> | undefined,\n\tserverName: string,\n\tliteralEnv = false,\n): Record<string, string> {\n\tconst resolved: Record<string, string> = {};\n\tfor (const [key, value] of Object.entries(process.env)) {\n\t\tif (value !== undefined) resolved[key] = value;\n\t}\n\tif (literalEnv) return env ? { ...resolved, ...env } : resolved;\n\n\tconst overrides = resolveCommandSecretsRecord(env, (key) => `MCP server \"${serverName}\" stdio env \"${key}\"`);\n\treturn overrides ? { ...resolved, ...overrides } : resolved;\n}\n\nfunction normalizeRequestTimeoutMs(timeoutMs: number | undefined): number | undefined {\n\treturn typeof timeoutMs === \"number\" && Number.isFinite(timeoutMs) && timeoutMs > 0 ? timeoutMs : undefined;\n}\n"]}

package/dist/extensions/mcp/session-recovery.d.ts

@@ -0,0 +1,27 @@
+import type { McpServerManager, ServerConnection } from "./server-manager.ts";
+import { type McpConfig } from "./types.ts";
+export declare function isTerminatedSession(err: unknown, hadSessionId: boolean): boolean;
+export declare class SessionRecoveryAuthRequiredError extends Error {
+    readonly serverName: string;
+    readonly authMessage: string | undefined;
+    constructor(serverName: string, authMessage?: string);
+}
+export interface SessionRecoveryDeps {
+    manager: McpServerManager;
+    config: McpConfig;
+    signal?: AbortSignal;
+    onNeedsAuth?: (serverName: string) => Promise<ServerConnection | undefined>;
+}
+/**
+ * Runs `fn` against the current connection for `serverName`. If it fails
+ * with a terminated Streamable HTTP session (see `isTerminatedSession`),
+ * reconnects exactly once via `McpServerManager.reconnect` (single-flight,
+ * identity-guarded — see server-manager.ts) and retries `fn` exactly once
+ * against the fresh connection.
+ *
+ * Any other failure — including a second failure after reconnecting, or the
+ * server having been removed from config in the meantime — propagates
+ * unchanged through the caller's existing error handling.
+ */
+export declare function withSessionRecovery<T>(deps: SessionRecoveryDeps, serverName: string, fn: (conn: ServerConnection) => Promise<T>): Promise<T>;
+//# sourceMappingURL=session-recovery.d.ts.map

package/dist/extensions/mcp/session-recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-recovery.d.ts","sourceRoot":"","sources":["../../../src/extensions/mcp/session-recovery.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAe9D,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAehF;AAUD,qBAAa,gCAAiC,SAAQ,KAAK;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAEzC,YAAY,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAKnD;CACD;AAED,MAAM,WAAW,mBAAmB;IACnC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,WAAW,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;CAC5E;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,EAC1C,IAAI,EAAE,mBAAmB,EACzB,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,CAAC,CAAC,GACxC,OAAO,CAAC,CAAC,CAAC,CAgEZ","sourcesContent":["// session-recovery.ts\n//\n// Streamable HTTP session recovery.\n//\n// Per the MCP spec (Streamable HTTP transport):\n//   \"When a client receives HTTP 404 in response to a request containing an\n//   Mcp-Session-Id, it MUST start a new session by sending a new\n//   InitializeRequest without a session ID attached.\"\n//\n// A 404 for a request that carried a session ID is therefore the spec's own\n// definition of \"this session no longer exists\" (e.g. the remote server\n// process restarted and lost its in-memory session table). Because the spec\n// requires the server to reject the request *before* processing it, retrying\n// the same call against a freshly initialized session cannot double-execute\n// the original request.\n//\n// This module intentionally does NOT:\n//   - match broad error messages without a prior session id\n//   - match generic HTTP 400 responses, which are ambiguous and can mean\n//     many things other than \"your session is gone\"\n//   - treat generic -32000/ConnectionClosed errors as session expiry\n//   - treat AbortError/cancellation as a session failure\nimport { ProtocolError, SdkHttpError, UnauthorizedError } from \"@modelcontextprotocol/client\";\nimport { throwIfAborted } from \"./abort.ts\";\nimport { logger } from \"./logger.ts\";\nimport { invalidateAuthEntryCache } from \"./mcp-auth.ts\";\nimport { supportsOAuth } from \"./mcp-auth-flow.ts\";\nimport type { McpServerManager, ServerConnection } from \"./server-manager.ts\";\nimport { isServerDisabled, type McpConfig } from \"./types.ts\";\n\n/**\n * True when `err` is a stale Streamable HTTP session signal for a request\n * sent while carrying an `Mcp-Session-Id`: the spec's 404 transport\n * response, or the narrowly-known `-32000 Server not initialized` protocol\n * gate response some servers emit before dispatching to a handler.\n *\n * `hadSessionId` must reflect the transport's session id from *before* the\n * call that produced `err` was made. Callers must capture it before the call\n * rather than rely on catch-time transport state.\n */\nconst CONNECTION_CLOSED_PROTOCOL_CODE = -32000;\nconst SERVER_NOT_INITIALIZED_MCP_MESSAGES = new Set([\"Server not initialized\", \"Bad Request: Server not initialized\"]);\n\nexport function isTerminatedSession(err: unknown, hadSessionId: boolean): boolean {\n\tif (!hadSessionId) return false;\n\tif (err instanceof SdkHttpError) {\n\t\treturn (\n\t\t\terr.status === 404 ||\n\t\t\t(err.status === 400 &&\n\t\t\t\t/\"code\"\\s*:\\s*-32000/.test(err.message) &&\n\t\t\t\t/\"message\"\\s*:\\s*\"Bad Request: Server not initialized\"/.test(err.message))\n\t\t);\n\t}\n\treturn (\n\t\terr instanceof ProtocolError &&\n\t\terr.code === CONNECTION_CLOSED_PROTOCOL_CODE &&\n\t\tSERVER_NOT_INITIALIZED_MCP_MESSAGES.has(err.message)\n\t);\n}\n\nfunction hasSessionId(connection: ServerConnection): boolean {\n\t// Only StreamableHTTPClientTransport exposes `sessionId`; stdio/SSE\n\t// transports (and test doubles that omit `transport` entirely) simply\n\t// read as `undefined` here.\n\tconst transport = connection.transport as { sessionId?: string } | undefined;\n\treturn transport?.sessionId != null;\n}\n\nexport class SessionRecoveryAuthRequiredError extends Error {\n\treadonly serverName: string;\n\treadonly authMessage: string | undefined;\n\n\tconstructor(serverName: string, authMessage?: string) {\n\t\tsuper(authMessage ?? `MCP server \"${serverName}\" requires OAuth authentication after reconnect.`);\n\t\tthis.name = \"SessionRecoveryAuthRequiredError\";\n\t\tthis.serverName = serverName;\n\t\tthis.authMessage = authMessage;\n\t}\n}\n\nexport interface SessionRecoveryDeps {\n\tmanager: McpServerManager;\n\tconfig: McpConfig;\n\tsignal?: AbortSignal;\n\tonNeedsAuth?: (serverName: string) => Promise<ServerConnection | undefined>;\n}\n\n/**\n * Runs `fn` against the current connection for `serverName`. If it fails\n * with a terminated Streamable HTTP session (see `isTerminatedSession`),\n * reconnects exactly once via `McpServerManager.reconnect` (single-flight,\n * identity-guarded — see server-manager.ts) and retries `fn` exactly once\n * against the fresh connection.\n *\n * Any other failure — including a second failure after reconnecting, or the\n * server having been removed from config in the meantime — propagates\n * unchanged through the caller's existing error handling.\n */\nexport async function withSessionRecovery<T>(\n\tdeps: SessionRecoveryDeps,\n\tserverName: string,\n\tfn: (conn: ServerConnection) => Promise<T>,\n): Promise<T> {\n\tif (isServerDisabled(deps.config.mcpServers[serverName])) {\n\t\tthrow new Error(`MCP server \"${serverName}\" is disabled`);\n\t}\n\tconst connection = deps.manager.getConnection(serverName);\n\tif (!connection) {\n\t\tthrow new Error(`Server \"${serverName}\" is not connected`);\n\t}\n\n\tconst hadSessionId = hasSessionId(connection);\n\n\ttry {\n\t\treturn await fn(connection);\n\t} catch (err) {\n\t\tconst definition = deps.config.mcpServers[serverName];\n\t\tif (\n\t\t\tdefinition &&\n\t\t\tsupportsOAuth(definition) &&\n\t\t\t(err instanceof UnauthorizedError || (err instanceof SdkHttpError && err.status === 401))\n\t\t) {\n\t\t\tinvalidateAuthEntryCache(serverName);\n\t\t}\n\t\tif (!isTerminatedSession(err, hadSessionId)) {\n\t\t\tthrow err;\n\t\t}\n\n\t\t// Re-read the live definition rather than reusing the stale\n\t\t// connection's definition, in case config changed since connect. If the\n\t\t// server was removed from config in the meantime there is nothing to\n\t\t// reconnect to, so surface the original error.\n\t\tif (!definition) {\n\t\t\tthrow err;\n\t\t}\n\n\t\tthrowIfAborted(deps.signal);\n\t\tlogger.debug(`MCP session for \"${serverName}\" expired; reconnecting`, {\n\t\t\tserver: serverName,\n\t\t});\n\t\tlet freshConnection = deps.signal\n\t\t\t? await deps.manager.reconnect(serverName, definition, connection, deps.signal)\n\t\t\t: await deps.manager.reconnect(serverName, definition, connection);\n\t\tthrowIfAborted(deps.signal);\n\n\t\tif (freshConnection.status === \"needs-auth\") {\n\t\t\tfreshConnection = (await deps.onNeedsAuth?.(serverName)) ?? freshConnection;\n\t\t\tthrowIfAborted(deps.signal);\n\t\t}\n\n\t\tif (freshConnection.status === \"needs-auth\") {\n\t\t\tthrow new SessionRecoveryAuthRequiredError(serverName);\n\t\t}\n\t\tif (freshConnection.status !== \"connected\") {\n\t\t\tthrow err;\n\t\t}\n\n\t\ttry {\n\t\t\tdeps.manager.publishMetadataChanged(serverName, freshConnection, \"session-reconnect\");\n\t\t} catch (publicationError) {\n\t\t\tconst message = publicationError instanceof Error ? publicationError.message : String(publicationError);\n\t\t\tlogger.debug(`MCP metadata publication after reconnect failed for \"${serverName}\": ${message}`);\n\t\t}\n\t\tthrowIfAborted(deps.signal);\n\t\treturn fn(freshConnection);\n\t}\n}\n"]}

package/dist/extensions/mcp/session-recovery.js

@@ -0,0 +1,140 @@
+// session-recovery.ts
+//
+// Streamable HTTP session recovery.
+//
+// Per the MCP spec (Streamable HTTP transport):
+//   "When a client receives HTTP 404 in response to a request containing an
+//   Mcp-Session-Id, it MUST start a new session by sending a new
+//   InitializeRequest without a session ID attached."
+//
+// A 404 for a request that carried a session ID is therefore the spec's own
+// definition of "this session no longer exists" (e.g. the remote server
+// process restarted and lost its in-memory session table). Because the spec
+// requires the server to reject the request *before* processing it, retrying
+// the same call against a freshly initialized session cannot double-execute
+// the original request.
+//
+// This module intentionally does NOT:
+//   - match broad error messages without a prior session id
+//   - match generic HTTP 400 responses, which are ambiguous and can mean
+//     many things other than "your session is gone"
+//   - treat generic -32000/ConnectionClosed errors as session expiry
+//   - treat AbortError/cancellation as a session failure
+import { ProtocolError, SdkHttpError, UnauthorizedError } from "@modelcontextprotocol/client";
+import { throwIfAborted } from "./abort.js";
+import { logger } from "./logger.js";
+import { invalidateAuthEntryCache } from "./mcp-auth.js";
+import { supportsOAuth } from "./mcp-auth-flow.js";
+import { isServerDisabled } from "./types.js";
+/**
+ * True when `err` is a stale Streamable HTTP session signal for a request
+ * sent while carrying an `Mcp-Session-Id`: the spec's 404 transport
+ * response, or the narrowly-known `-32000 Server not initialized` protocol
+ * gate response some servers emit before dispatching to a handler.
+ *
+ * `hadSessionId` must reflect the transport's session id from *before* the
+ * call that produced `err` was made. Callers must capture it before the call
+ * rather than rely on catch-time transport state.
+ */
+const CONNECTION_CLOSED_PROTOCOL_CODE = -32000;
+const SERVER_NOT_INITIALIZED_MCP_MESSAGES = new Set(["Server not initialized", "Bad Request: Server not initialized"]);
+export function isTerminatedSession(err, hadSessionId) {
+    if (!hadSessionId)
+        return false;
+    if (err instanceof SdkHttpError) {
+        return (err.status === 404 ||
+            (err.status === 400 &&
+                /"code"\s*:\s*-32000/.test(err.message) &&
+                /"message"\s*:\s*"Bad Request: Server not initialized"/.test(err.message)));
+    }
+    return (err instanceof ProtocolError &&
+        err.code === CONNECTION_CLOSED_PROTOCOL_CODE &&
+        SERVER_NOT_INITIALIZED_MCP_MESSAGES.has(err.message));
+}
+function hasSessionId(connection) {
+    // Only StreamableHTTPClientTransport exposes `sessionId`; stdio/SSE
+    // transports (and test doubles that omit `transport` entirely) simply
+    // read as `undefined` here.
+    const transport = connection.transport;
+    return transport?.sessionId != null;
+}
+export class SessionRecoveryAuthRequiredError extends Error {
+    serverName;
+    authMessage;
+    constructor(serverName, authMessage) {
+        super(authMessage ?? `MCP server "${serverName}" requires OAuth authentication after reconnect.`);
+        this.name = "SessionRecoveryAuthRequiredError";
+        this.serverName = serverName;
+        this.authMessage = authMessage;
+    }
+}
+/**
+ * Runs `fn` against the current connection for `serverName`. If it fails
+ * with a terminated Streamable HTTP session (see `isTerminatedSession`),
+ * reconnects exactly once via `McpServerManager.reconnect` (single-flight,
+ * identity-guarded — see server-manager.ts) and retries `fn` exactly once
+ * against the fresh connection.
+ *
+ * Any other failure — including a second failure after reconnecting, or the
+ * server having been removed from config in the meantime — propagates
+ * unchanged through the caller's existing error handling.
+ */
+export async function withSessionRecovery(deps, serverName, fn) {
+    if (isServerDisabled(deps.config.mcpServers[serverName])) {
+        throw new Error(`MCP server "${serverName}" is disabled`);
+    }
+    const connection = deps.manager.getConnection(serverName);
+    if (!connection) {
+        throw new Error(`Server "${serverName}" is not connected`);
+    }
+    const hadSessionId = hasSessionId(connection);
+    try {
+        return await fn(connection);
+    }
+    catch (err) {
+        const definition = deps.config.mcpServers[serverName];
+        if (definition &&
+            supportsOAuth(definition) &&
+            (err instanceof UnauthorizedError || (err instanceof SdkHttpError && err.status === 401))) {
+            invalidateAuthEntryCache(serverName);
+        }
+        if (!isTerminatedSession(err, hadSessionId)) {
+            throw err;
+        }
+        // Re-read the live definition rather than reusing the stale
+        // connection's definition, in case config changed since connect. If the
+        // server was removed from config in the meantime there is nothing to
+        // reconnect to, so surface the original error.
+        if (!definition) {
+            throw err;
+        }
+        throwIfAborted(deps.signal);
+        logger.debug(`MCP session for "${serverName}" expired; reconnecting`, {
+            server: serverName,
+        });
+        let freshConnection = deps.signal
+            ? await deps.manager.reconnect(serverName, definition, connection, deps.signal)
+            : await deps.manager.reconnect(serverName, definition, connection);
+        throwIfAborted(deps.signal);
+        if (freshConnection.status === "needs-auth") {
+            freshConnection = (await deps.onNeedsAuth?.(serverName)) ?? freshConnection;
+            throwIfAborted(deps.signal);
+        }
+        if (freshConnection.status === "needs-auth") {
+            throw new SessionRecoveryAuthRequiredError(serverName);
+        }
+        if (freshConnection.status !== "connected") {
+            throw err;
+        }
+        try {
+            deps.manager.publishMetadataChanged(serverName, freshConnection, "session-reconnect");
+        }
+        catch (publicationError) {
+            const message = publicationError instanceof Error ? publicationError.message : String(publicationError);
+            logger.debug(`MCP metadata publication after reconnect failed for "${serverName}": ${message}`);
+        }
+        throwIfAborted(deps.signal);
+        return fn(freshConnection);
+    }
+}
+//# sourceMappingURL=session-recovery.js.map

package/dist/extensions/mcp/session-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-recovery.js","sourceRoot":"","sources":["../../../src/extensions/mcp/session-recovery.ts"],"names":[],"mappings":"AAAA,sBAAsB;AACtB,EAAE;AACF,oCAAoC;AACpC,EAAE;AACF,gDAAgD;AAChD,4EAA4E;AAC5E,iEAAiE;AACjE,sDAAsD;AACtD,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,wBAAwB;AACxB,EAAE;AACF,sCAAsC;AACtC,4DAA4D;AAC5D,yEAAyE;AACzE,oDAAoD;AACpD,qEAAqE;AACrE,yDAAyD;AACzD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EAAE,gBAAgB,EAAkB,MAAM,YAAY,CAAC;AAE9D;;;;;;;;;GASG;AACH,MAAM,+BAA+B,GAAG,CAAC,KAAK,CAAC;AAC/C,MAAM,mCAAmC,GAAG,IAAI,GAAG,CAAC,CAAC,wBAAwB,EAAE,qCAAqC,CAAC,CAAC,CAAC;AAEvH,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,YAAqB,EAAW;IACjF,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;QACjC,OAAO,CACN,GAAG,CAAC,MAAM,KAAK,GAAG;YAClB,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG;gBAClB,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACvC,uDAAuD,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAC3E,CAAC;IACH,CAAC;IACD,OAAO,CACN,GAAG,YAAY,aAAa;QAC5B,GAAG,CAAC,IAAI,KAAK,+BAA+B;QAC5C,mCAAmC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CACpD,CAAC;AAAA,CACF;AAED,SAAS,YAAY,CAAC,UAA4B,EAAW;IAC5D,oEAAoE;IACpE,sEAAsE;IACtE,4BAA4B;IAC5B,MAAM,SAAS,GAAG,UAAU,CAAC,SAA+C,CAAC;IAC7E,OAAO,SAAS,EAAE,SAAS,IAAI,IAAI,CAAC;AAAA,CACpC;AAED,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IACjD,UAAU,CAAS;IACnB,WAAW,CAAqB;IAEzC,YAAY,UAAkB,EAAE,WAAoB,EAAE;QACrD,KAAK,CAAC,WAAW,IAAI,eAAe,UAAU,kDAAkD,CAAC,CAAC;QAClG,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAAA,CAC/B;CACD;AASD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,IAAyB,EACzB,UAAkB,EAClB,EAA0C,EAC7B;IACb,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,eAAe,UAAU,eAAe,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,oBAAoB,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,YAAY,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAE9C,IAAI,CAAC;QACJ,OAAO,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACtD,IACC,UAAU;YACV,aAAa,CAAC,UAAU,CAAC;YACzB,CAAC,GAAG,YAAY,iBAAiB,IAAI,CAAC,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,EACxF,CAAC;YACF,wBAAwB,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC;YAC7C,MAAM,GAAG,CAAC;QACX,CAAC;QAED,4DAA4D;QAC5D,wEAAwE;QACxE,qEAAqE;QACrE,+CAA+C;QAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,GAAG,CAAC;QACX,CAAC;QAED,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,oBAAoB,UAAU,yBAAyB,EAAE;YACrE,MAAM,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,IAAI,eAAe,GAAG,IAAI,CAAC,MAAM;YAChC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YAC/E,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACpE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE5B,IAAI,eAAe,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAC7C,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC,IAAI,eAAe,CAAC;YAC5E,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAC7C,MAAM,IAAI,gCAAgC,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,eAAe,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC5C,MAAM,GAAG,CAAC;QACX,CAAC;QAED,IAAI,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,UAAU,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,gBAAgB,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,gBAAgB,YAAY,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACxG,MAAM,CAAC,KAAK,CAAC,wDAAwD,UAAU,MAAM,OAAO,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;IAC5B,CAAC;AAAA,CACD","sourcesContent":["// session-recovery.ts\n//\n// Streamable HTTP session recovery.\n//\n// Per the MCP spec (Streamable HTTP transport):\n//   \"When a client receives HTTP 404 in response to a request containing an\n//   Mcp-Session-Id, it MUST start a new session by sending a new\n//   InitializeRequest without a session ID attached.\"\n//\n// A 404 for a request that carried a session ID is therefore the spec's own\n// definition of \"this session no longer exists\" (e.g. the remote server\n// process restarted and lost its in-memory session table). Because the spec\n// requires the server to reject the request *before* processing it, retrying\n// the same call against a freshly initialized session cannot double-execute\n// the original request.\n//\n// This module intentionally does NOT:\n//   - match broad error messages without a prior session id\n//   - match generic HTTP 400 responses, which are ambiguous and can mean\n//     many things other than \"your session is gone\"\n//   - treat generic -32000/ConnectionClosed errors as session expiry\n//   - treat AbortError/cancellation as a session failure\nimport { ProtocolError, SdkHttpError, UnauthorizedError } from \"@modelcontextprotocol/client\";\nimport { throwIfAborted } from \"./abort.ts\";\nimport { logger } from \"./logger.ts\";\nimport { invalidateAuthEntryCache } from \"./mcp-auth.ts\";\nimport { supportsOAuth } from \"./mcp-auth-flow.ts\";\nimport type { McpServerManager, ServerConnection } from \"./server-manager.ts\";\nimport { isServerDisabled, type McpConfig } from \"./types.ts\";\n\n/**\n * True when `err` is a stale Streamable HTTP session signal for a request\n * sent while carrying an `Mcp-Session-Id`: the spec's 404 transport\n * response, or the narrowly-known `-32000 Server not initialized` protocol\n * gate response some servers emit before dispatching to a handler.\n *\n * `hadSessionId` must reflect the transport's session id from *before* the\n * call that produced `err` was made. Callers must capture it before the call\n * rather than rely on catch-time transport state.\n */\nconst CONNECTION_CLOSED_PROTOCOL_CODE = -32000;\nconst SERVER_NOT_INITIALIZED_MCP_MESSAGES = new Set([\"Server not initialized\", \"Bad Request: Server not initialized\"]);\n\nexport function isTerminatedSession(err: unknown, hadSessionId: boolean): boolean {\n\tif (!hadSessionId) return false;\n\tif (err instanceof SdkHttpError) {\n\t\treturn (\n\t\t\terr.status === 404 ||\n\t\t\t(err.status === 400 &&\n\t\t\t\t/\"code\"\\s*:\\s*-32000/.test(err.message) &&\n\t\t\t\t/\"message\"\\s*:\\s*\"Bad Request: Server not initialized\"/.test(err.message))\n\t\t);\n\t}\n\treturn (\n\t\terr instanceof ProtocolError &&\n\t\terr.code === CONNECTION_CLOSED_PROTOCOL_CODE &&\n\t\tSERVER_NOT_INITIALIZED_MCP_MESSAGES.has(err.message)\n\t);\n}\n\nfunction hasSessionId(connection: ServerConnection): boolean {\n\t// Only StreamableHTTPClientTransport exposes `sessionId`; stdio/SSE\n\t// transports (and test doubles that omit `transport` entirely) simply\n\t// read as `undefined` here.\n\tconst transport = connection.transport as { sessionId?: string } | undefined;\n\treturn transport?.sessionId != null;\n}\n\nexport class SessionRecoveryAuthRequiredError extends Error {\n\treadonly serverName: string;\n\treadonly authMessage: string | undefined;\n\n\tconstructor(serverName: string, authMessage?: string) {\n\t\tsuper(authMessage ?? `MCP server \"${serverName}\" requires OAuth authentication after reconnect.`);\n\t\tthis.name = \"SessionRecoveryAuthRequiredError\";\n\t\tthis.serverName = serverName;\n\t\tthis.authMessage = authMessage;\n\t}\n}\n\nexport interface SessionRecoveryDeps {\n\tmanager: McpServerManager;\n\tconfig: McpConfig;\n\tsignal?: AbortSignal;\n\tonNeedsAuth?: (serverName: string) => Promise<ServerConnection | undefined>;\n}\n\n/**\n * Runs `fn` against the current connection for `serverName`. If it fails\n * with a terminated Streamable HTTP session (see `isTerminatedSession`),\n * reconnects exactly once via `McpServerManager.reconnect` (single-flight,\n * identity-guarded — see server-manager.ts) and retries `fn` exactly once\n * against the fresh connection.\n *\n * Any other failure — including a second failure after reconnecting, or the\n * server having been removed from config in the meantime — propagates\n * unchanged through the caller's existing error handling.\n */\nexport async function withSessionRecovery<T>(\n\tdeps: SessionRecoveryDeps,\n\tserverName: string,\n\tfn: (conn: ServerConnection) => Promise<T>,\n): Promise<T> {\n\tif (isServerDisabled(deps.config.mcpServers[serverName])) {\n\t\tthrow new Error(`MCP server \"${serverName}\" is disabled`);\n\t}\n\tconst connection = deps.manager.getConnection(serverName);\n\tif (!connection) {\n\t\tthrow new Error(`Server \"${serverName}\" is not connected`);\n\t}\n\n\tconst hadSessionId = hasSessionId(connection);\n\n\ttry {\n\t\treturn await fn(connection);\n\t} catch (err) {\n\t\tconst definition = deps.config.mcpServers[serverName];\n\t\tif (\n\t\t\tdefinition &&\n\t\t\tsupportsOAuth(definition) &&\n\t\t\t(err instanceof UnauthorizedError || (err instanceof SdkHttpError && err.status === 401))\n\t\t) {\n\t\t\tinvalidateAuthEntryCache(serverName);\n\t\t}\n\t\tif (!isTerminatedSession(err, hadSessionId)) {\n\t\t\tthrow err;\n\t\t}\n\n\t\t// Re-read the live definition rather than reusing the stale\n\t\t// connection's definition, in case config changed since connect. If the\n\t\t// server was removed from config in the meantime there is nothing to\n\t\t// reconnect to, so surface the original error.\n\t\tif (!definition) {\n\t\t\tthrow err;\n\t\t}\n\n\t\tthrowIfAborted(deps.signal);\n\t\tlogger.debug(`MCP session for \"${serverName}\" expired; reconnecting`, {\n\t\t\tserver: serverName,\n\t\t});\n\t\tlet freshConnection = deps.signal\n\t\t\t? await deps.manager.reconnect(serverName, definition, connection, deps.signal)\n\t\t\t: await deps.manager.reconnect(serverName, definition, connection);\n\t\tthrowIfAborted(deps.signal);\n\n\t\tif (freshConnection.status === \"needs-auth\") {\n\t\t\tfreshConnection = (await deps.onNeedsAuth?.(serverName)) ?? freshConnection;\n\t\t\tthrowIfAborted(deps.signal);\n\t\t}\n\n\t\tif (freshConnection.status === \"needs-auth\") {\n\t\t\tthrow new SessionRecoveryAuthRequiredError(serverName);\n\t\t}\n\t\tif (freshConnection.status !== \"connected\") {\n\t\t\tthrow err;\n\t\t}\n\n\t\ttry {\n\t\t\tdeps.manager.publishMetadataChanged(serverName, freshConnection, \"session-reconnect\");\n\t\t} catch (publicationError) {\n\t\t\tconst message = publicationError instanceof Error ? publicationError.message : String(publicationError);\n\t\t\tlogger.debug(`MCP metadata publication after reconnect failed for \"${serverName}\": ${message}`);\n\t\t}\n\t\tthrowIfAborted(deps.signal);\n\t\treturn fn(freshConnection);\n\t}\n}\n"]}

package/dist/extensions/mcp/skills/mcp-scripting/SKILL.md

@@ -0,0 +1,38 @@
+---
+name: mcp-scripting
+description: Write mcpScript JavaScript for discovering, inspecting, and calling MCP tools.
+---
+
+# MCP scripting
+
+For multi-call MCP work, write ordinary JavaScript with loops, filtering, chaining, fan-out, or other logic between calls. Run that source with `mcpScript`; it is the primary MCP orchestration surface. For a single MCP search, describe, status check, auth action, or tool call, use `mcp` instead.
+
+Write the source naturally, then pass it as `mcpScript`'s `code` argument:
+
+```js
+const { items } = await tools.search({ query: "search issues", server: "github" });
+const candidate = items[0];
+if (!candidate) return { error: "No matching tool" };
+
+const details = await tools.describe({ path: candidate.path });
+if (details.error) return details;
+
+const result = await tools.call(details.path, { query: "is:open label:bug" });
+if (!result.ok) return result;
+emit({ tool: details.path, completed: true });
+return result.data;
+```
+
+## Workflow
+
+1. Find candidate tools with `await tools.search({ query, server?, limit?, offset? })`.
+2. Inspect the exact returned path with `await tools.describe({ path })`.
+3. Call it with `tools.call(path, args)`.
+
+Calls resolve to `{ ok: true, data }` or `{ ok: false, error }`; handle failed calls instead of expecting them to stop the script. `emit(value)` adds user-visible output before the final `return` value. `console` output is captured too.
+
+`tools` is a non-enumerable proxy: `Object.keys(tools)` throws. Always use `tools.search` for discovery. When a known flat path is a valid identifier, direct calls such as `tools.github_search_issues(args)` are supported; use bracket syntax for hyphenated names: `tools["server_tool-name"](args)`. `search`, `call`, `describe`, and promise/serialization names (`then`, `catch`, `finally`, `toJSON`, `toString`, `valueOf`) are reserved on the proxy; if a flat path collides with one, call it via `tools.call("exact-path", args)`.
+
+`tools.search` and `tools.describe` are asynchronous and must be awaited. The default script timeout is 30 seconds; the worker is terminated at the deadline, including for infinite loops. Every invocation still uses normal lazy connection, authentication, output guarding, and approval gates. Result details contain a concise `calls` trace with every search, describe, and call operation; each entry includes its query or path, outcome, and duration.
+
+Use plain JavaScript loops and Promise utilities for composition. Fluent helpers such as `tools.find(...).one()`, `tools.parallel(...)`, and `tools.retry(...)` are not provided.

package/dist/extensions/mcp/state.d.ts

@@ -0,0 +1,62 @@
+import type { ExtensionAPI, ExtensionContext } from "../../core/extensions/types.ts";
+import type { ConsentManager } from "./consent-manager.ts";
+import type { McpLifecycleManager } from "./lifecycle.ts";
+import type { AuthStorageOptions } from "./mcp-auth.ts";
+import type { McpOAuthRuntime } from "./mcp-auth-flow.ts";
+import type { McpStatusEventBus } from "./mcp-status.ts";
+import type { McpRuntimeOwner } from "./runtime-owner.ts";
+import type { McpServerManager } from "./server-manager.ts";
+import type { McpConfig, PromptMetadata, ToolMetadata, UiSessionMessages, UiStreamSummary } from "./types.ts";
+import type { UiResourceHandler } from "./ui-resource-handler.ts";
+import type { UiServerHandle } from "./ui-server.ts";
+export interface CompletedUiSession {
+    serverName: string;
+    toolName: string;
+    completedAt: Date;
+    reason: string;
+    messages: UiSessionMessages;
+    stream?: UiStreamSummary;
+}
+export type SendMessageFn = (message: {
+    customType: string;
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    display?: string;
+    details?: unknown;
+}, options?: {
+    triggerTurn?: boolean;
+}) => void;
+export interface McpExtensionState {
+    owner: McpRuntimeOwner;
+    manager: McpServerManager;
+    lifecycle: McpLifecycleManager;
+    toolMetadata: Map<string, ToolMetadata[]>;
+    /** Resource counts retained separately because tool metadata includes resource tools. */
+    resourceCounts: Map<string, number>;
+    promptMetadata: Map<string, PromptMetadata[]>;
+    /** Servers whose prompt inventory came from successful live discovery. */
+    promptMetadataLive: Set<string>;
+    serverInstructions: Map<string, string>;
+    config: McpConfig;
+    programmaticConfig?: boolean;
+    oauthRuntime: McpOAuthRuntime;
+    authStorageOptions: AuthStorageOptions;
+    failureTracker: Map<string, number>;
+    failureMessages: Map<string, string>;
+    /** Session-only approvals keyed by server and original tool name. */
+    approvedToolCalls: Map<string, true>;
+    /** Shared event bus used by permission extensions to broker MCP approvals. */
+    approvalEvents?: ExtensionAPI["events"];
+    uiResourceHandler: UiResourceHandler;
+    consentManager: ConsentManager;
+    uiServer: UiServerHandle | null;
+    completedUiSessions: CompletedUiSession[];
+    openBrowser: (url: string) => Promise<void>;
+    ui?: ExtensionContext["ui"];
+    sendMessage?: SendMessageFn;
+    onToolMetadataUpdated?: (serverName: string, reason: string) => void | Promise<void>;
+    statusEvents?: McpStatusEventBus;
+}
+//# sourceMappingURL=state.d.ts.map

package/dist/extensions/mcp/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/extensions/mcp/state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACrF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC9G,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,WAAW,kBAAkB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,IAAI,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,MAAM,aAAa,GAAG,CAC3B,OAAO,EAAE;IACR,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CAClB,EACD,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,KAC/B,IAAI,CAAC;AAEV,MAAM,WAAW,iBAAiB;IACjC,KAAK,EAAE,eAAe,CAAC;IACvB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAC1C,yFAAyF;IACzF,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAC9C,0EAA0E;IAC1E,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,EAAE,SAAS,CAAC;IAClB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,EAAE,eAAe,CAAC;IAC9B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,qEAAqE;IACrE,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrC,8EAA8E;IAC9E,cAAc,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxC,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,cAAc,EAAE,cAAc,CAAC;IAC/B,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,mBAAmB,EAAE,kBAAkB,EAAE,CAAC;IAC1C,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,EAAE,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC5B,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,qBAAqB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,YAAY,CAAC,EAAE,iBAAiB,CAAC;CACjC","sourcesContent":["import type { ExtensionAPI, ExtensionContext } from \"../../core/extensions/types.ts\";\nimport type { ConsentManager } from \"./consent-manager.ts\";\nimport type { McpLifecycleManager } from \"./lifecycle.ts\";\nimport type { AuthStorageOptions } from \"./mcp-auth.ts\";\nimport type { McpOAuthRuntime } from \"./mcp-auth-flow.ts\";\nimport type { McpStatusEventBus } from \"./mcp-status.ts\";\nimport type { McpRuntimeOwner } from \"./runtime-owner.ts\";\nimport type { McpServerManager } from \"./server-manager.ts\";\nimport type { McpConfig, PromptMetadata, ToolMetadata, UiSessionMessages, UiStreamSummary } from \"./types.ts\";\nimport type { UiResourceHandler } from \"./ui-resource-handler.ts\";\nimport type { UiServerHandle } from \"./ui-server.ts\";\n\nexport interface CompletedUiSession {\n\tserverName: string;\n\ttoolName: string;\n\tcompletedAt: Date;\n\treason: string;\n\tmessages: UiSessionMessages;\n\tstream?: UiStreamSummary;\n}\n\nexport type SendMessageFn = (\n\tmessage: {\n\t\tcustomType: string;\n\t\tcontent: Array<{ type: \"text\"; text: string }>;\n\t\tdisplay?: string;\n\t\tdetails?: unknown;\n\t},\n\toptions?: { triggerTurn?: boolean },\n) => void;\n\nexport interface McpExtensionState {\n\towner: McpRuntimeOwner;\n\tmanager: McpServerManager;\n\tlifecycle: McpLifecycleManager;\n\ttoolMetadata: Map<string, ToolMetadata[]>;\n\t/** Resource counts retained separately because tool metadata includes resource tools. */\n\tresourceCounts: Map<string, number>;\n\tpromptMetadata: Map<string, PromptMetadata[]>;\n\t/** Servers whose prompt inventory came from successful live discovery. */\n\tpromptMetadataLive: Set<string>;\n\tserverInstructions: Map<string, string>;\n\tconfig: McpConfig;\n\tprogrammaticConfig?: boolean;\n\toauthRuntime: McpOAuthRuntime;\n\tauthStorageOptions: AuthStorageOptions;\n\tfailureTracker: Map<string, number>;\n\tfailureMessages: Map<string, string>;\n\t/** Session-only approvals keyed by server and original tool name. */\n\tapprovedToolCalls: Map<string, true>;\n\t/** Shared event bus used by permission extensions to broker MCP approvals. */\n\tapprovalEvents?: ExtensionAPI[\"events\"];\n\tuiResourceHandler: UiResourceHandler;\n\tconsentManager: ConsentManager;\n\tuiServer: UiServerHandle | null;\n\tcompletedUiSessions: CompletedUiSession[];\n\topenBrowser: (url: string) => Promise<void>;\n\tui?: ExtensionContext[\"ui\"];\n\tsendMessage?: SendMessageFn;\n\tonToolMetadataUpdated?: (serverName: string, reason: string) => void | Promise<void>;\n\tstatusEvents?: McpStatusEventBus;\n}\n"]}

package/dist/extensions/mcp/state.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=state.js.map

package/dist/extensions/mcp/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/extensions/mcp/state.ts"],"names":[],"mappings":"","sourcesContent":["import type { ExtensionAPI, ExtensionContext } from \"../../core/extensions/types.ts\";\nimport type { ConsentManager } from \"./consent-manager.ts\";\nimport type { McpLifecycleManager } from \"./lifecycle.ts\";\nimport type { AuthStorageOptions } from \"./mcp-auth.ts\";\nimport type { McpOAuthRuntime } from \"./mcp-auth-flow.ts\";\nimport type { McpStatusEventBus } from \"./mcp-status.ts\";\nimport type { McpRuntimeOwner } from \"./runtime-owner.ts\";\nimport type { McpServerManager } from \"./server-manager.ts\";\nimport type { McpConfig, PromptMetadata, ToolMetadata, UiSessionMessages, UiStreamSummary } from \"./types.ts\";\nimport type { UiResourceHandler } from \"./ui-resource-handler.ts\";\nimport type { UiServerHandle } from \"./ui-server.ts\";\n\nexport interface CompletedUiSession {\n\tserverName: string;\n\ttoolName: string;\n\tcompletedAt: Date;\n\treason: string;\n\tmessages: UiSessionMessages;\n\tstream?: UiStreamSummary;\n}\n\nexport type SendMessageFn = (\n\tmessage: {\n\t\tcustomType: string;\n\t\tcontent: Array<{ type: \"text\"; text: string }>;\n\t\tdisplay?: string;\n\t\tdetails?: unknown;\n\t},\n\toptions?: { triggerTurn?: boolean },\n) => void;\n\nexport interface McpExtensionState {\n\towner: McpRuntimeOwner;\n\tmanager: McpServerManager;\n\tlifecycle: McpLifecycleManager;\n\ttoolMetadata: Map<string, ToolMetadata[]>;\n\t/** Resource counts retained separately because tool metadata includes resource tools. */\n\tresourceCounts: Map<string, number>;\n\tpromptMetadata: Map<string, PromptMetadata[]>;\n\t/** Servers whose prompt inventory came from successful live discovery. */\n\tpromptMetadataLive: Set<string>;\n\tserverInstructions: Map<string, string>;\n\tconfig: McpConfig;\n\tprogrammaticConfig?: boolean;\n\toauthRuntime: McpOAuthRuntime;\n\tauthStorageOptions: AuthStorageOptions;\n\tfailureTracker: Map<string, number>;\n\tfailureMessages: Map<string, string>;\n\t/** Session-only approvals keyed by server and original tool name. */\n\tapprovedToolCalls: Map<string, true>;\n\t/** Shared event bus used by permission extensions to broker MCP approvals. */\n\tapprovalEvents?: ExtensionAPI[\"events\"];\n\tuiResourceHandler: UiResourceHandler;\n\tconsentManager: ConsentManager;\n\tuiServer: UiServerHandle | null;\n\tcompletedUiSessions: CompletedUiSession[];\n\topenBrowser: (url: string) => Promise<void>;\n\tui?: ExtensionContext[\"ui\"];\n\tsendMessage?: SendMessageFn;\n\tonToolMetadataUpdated?: (serverName: string, reason: string) => void | Promise<void>;\n\tstatusEvents?: McpStatusEventBus;\n}\n"]}

package/dist/extensions/mcp/tool-approval.d.ts

@@ -0,0 +1,11 @@
+import type { McpExtensionState } from "./state.ts";
+import { type McpConfig, type McpToolApprovalOrigin, type ToolMetadata } from "./types.ts";
+export type ToolCallApprovalResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: "denied" | "approval_required_headless";
+};
+export declare function isToolCallApprovalRequired(config: McpConfig, serverName: string, toolMeta: Pick<ToolMetadata, "originalName">, toolMetadata?: ReadonlyMap<string, readonly ToolMetadata[]>): boolean;
+export declare function ensureToolCallApproved(state: McpExtensionState, serverName: string, toolMeta: ToolMetadata, args: Record<string, unknown> | undefined, signal?: AbortSignal, origin?: McpToolApprovalOrigin, approvalMetadata?: ReadonlyMap<string, readonly ToolMetadata[]>): Promise<ToolCallApprovalResult>;
+//# sourceMappingURL=tool-approval.d.ts.map

package/dist/extensions/mcp/tool-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-approval.d.ts","sourceRoot":"","sources":["../../../src/extensions/mcp/tool-approval.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAGN,KAAK,SAAS,EAGd,KAAK,qBAAqB,EAI1B,KAAK,YAAY,EACjB,MAAM,YAAY,CAAC;AAGpB,MAAM,MAAM,sBAAsB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,4BAA4B,CAAA;CAAE,CAAC;AAiBnH,wBAAgB,0BAA0B,CACzC,MAAM,EAAE,SAAS,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,EAC5C,YAAY,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC,GACzD,OAAO,CAyDT;AA8CD,wBAAsB,sBAAsB,CAC3C,KAAK,EAAE,iBAAiB,EACxB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACzC,MAAM,CAAC,EAAE,WAAW,EACpB,MAAM,GAAE,qBAAmE,EAC3E,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC,GAC7D,OAAO,CAAC,sBAAsB,CAAC,CA6CjC","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport { abortable } from \"./abort.ts\";\nimport { combineAbortSignals } from \"./runtime-owner.ts\";\nimport type { McpExtensionState } from \"./state.ts\";\nimport {\n\tgetToolNameCandidates,\n\tMCP_TOOL_APPROVAL_REQUEST_EVENT,\n\ttype McpConfig,\n\ttype McpToolApprovalDecision,\n\ttype McpToolApprovalHandler,\n\ttype McpToolApprovalOrigin,\n\ttype McpToolApprovalRequest,\n\tmatchesToolPattern,\n\tresolveToolPrefix,\n\ttype ToolMetadata,\n} from \"./types.ts\";\nimport { sanitizeTerminalText } from \"./utils.ts\";\n\nexport type ToolCallApprovalResult = { ok: true } | { ok: false; reason: \"denied\" | \"approval_required_headless\" };\n\nfunction stableStringify(value: unknown): string {\n\tif (value === null || value === undefined || typeof value !== \"object\") {\n\t\tconst serialized = JSON.stringify(value);\n\t\treturn serialized === undefined ? \"undefined\" : serialized;\n\t}\n\tif (Array.isArray(value)) {\n\t\treturn `[${value.map((item) => stableStringify(item)).join(\",\")}]`;\n\t}\n\tconst object = value as Record<string, unknown>;\n\treturn `{${Object.keys(object)\n\t\t.sort()\n\t\t.map((key) => `${JSON.stringify(key)}:${stableStringify(object[key])}`)\n\t\t.join(\",\")}}`;\n}\n\nexport function isToolCallApprovalRequired(\n\tconfig: McpConfig,\n\tserverName: string,\n\ttoolMeta: Pick<ToolMetadata, \"originalName\">,\n\ttoolMetadata?: ReadonlyMap<string, readonly ToolMetadata[]>,\n): boolean {\n\tconst definition = config.mcpServers[serverName];\n\tconst serverApproval = definition?.approveTools;\n\tconst approval = serverApproval !== undefined ? serverApproval : config.settings?.approveTools;\n\n\tif (approval === true) return true;\n\tif (!Array.isArray(approval) || approval.length === 0) return false;\n\n\tconst prefix = resolveToolPrefix(definition, config.settings?.toolPrefix);\n\tconst currentCandidates = getToolNameCandidates(toolMeta.originalName, serverName, prefix, false);\n\tif (serverApproval !== undefined) {\n\t\tif (matchesToolPattern(currentCandidates, approval)) return true;\n\t\tif (!toolMetadata)\n\t\t\treturn matchesToolPattern(getToolNameCandidates(toolMeta.originalName, serverName, prefix), approval);\n\t\tconst legacyCandidates = getToolNameCandidates(toolMeta.originalName, serverName, prefix);\n\t\tconst legacyEmittedName = [...currentCandidates]\n\t\t\t.find((candidate) => candidate !== toolMeta.originalName)\n\t\t\t?.replace(/-/g, \"_\");\n\t\tif (legacyEmittedName) legacyCandidates.add(legacyEmittedName);\n\t\tfor (const candidate of currentCandidates) legacyCandidates.delete(candidate);\n\t\tconst otherCurrentCandidates = new Set<string>();\n\t\tfor (const tool of toolMetadata.get(serverName) ?? []) {\n\t\t\tfor (const candidate of getToolNameCandidates(tool.originalName, serverName, prefix, false)) {\n\t\t\t\totherCurrentCandidates.add(candidate);\n\t\t\t}\n\t\t}\n\t\tfor (const candidate of currentCandidates) otherCurrentCandidates.delete(candidate);\n\t\treturn approval.some(\n\t\t\t(pattern) =>\n\t\t\t\tmatchesToolPattern(legacyCandidates, [pattern]) && !matchesToolPattern(otherCurrentCandidates, [pattern]),\n\t\t);\n\t}\n\n\tif (matchesToolPattern(currentCandidates, approval)) return true;\n\tif (!toolMetadata) return false;\n\n\tconst legacyCandidates = getToolNameCandidates(toolMeta.originalName, serverName, prefix);\n\tconst legacyEmittedName = [...currentCandidates]\n\t\t.find((candidate) => candidate !== toolMeta.originalName)\n\t\t?.replace(/-/g, \"_\");\n\tif (legacyEmittedName) legacyCandidates.add(legacyEmittedName);\n\tfor (const candidate of currentCandidates) legacyCandidates.delete(candidate);\n\tconst otherCurrentCandidates = new Set<string>();\n\tfor (const [name, metadata] of toolMetadata) {\n\t\tconst otherPrefix = resolveToolPrefix(config.mcpServers[name], config.settings?.toolPrefix);\n\t\tfor (const tool of metadata) {\n\t\t\tfor (const candidate of getToolNameCandidates(tool.originalName, name, otherPrefix, false)) {\n\t\t\t\totherCurrentCandidates.add(candidate);\n\t\t\t}\n\t\t}\n\t}\n\tfor (const candidate of currentCandidates) otherCurrentCandidates.delete(candidate);\n\n\treturn approval.some(\n\t\t(pattern) =>\n\t\t\tmatchesToolPattern(legacyCandidates, [pattern]) && !matchesToolPattern(otherCurrentCandidates, [pattern]),\n\t);\n}\n\nfunction isMcpToolApprovalDecision(value: unknown): value is McpToolApprovalDecision {\n\treturn value === \"allow_once\" || value === \"allow_for_session\" || value === \"deny\" || value === \"abstain\";\n}\n\nasync function requestBrokerApproval(\n\tstate: McpExtensionState,\n\tserverName: string,\n\ttoolMeta: ToolMetadata,\n\targs: Record<string, unknown> | undefined,\n\torigin: McpToolApprovalOrigin,\n\tsignal?: AbortSignal,\n): Promise<McpToolApprovalDecision> {\n\tif (!state.approvalEvents) return \"abstain\";\n\n\tlet acceptingClaim = true;\n\tlet handler: McpToolApprovalHandler | undefined;\n\tconst request: McpToolApprovalRequest = {\n\t\trequestId: randomUUID(),\n\t\tserverName,\n\t\toriginalToolName: toolMeta.originalName,\n\t\tprefixedToolName: toolMeta.name,\n\t\targs: args ?? {},\n\t\torigin,\n\t\t...(signal !== undefined ? { signal } : {}),\n\t\tclaim(candidate: McpToolApprovalHandler) {\n\t\t\tif (!acceptingClaim || handler) return false;\n\t\t\thandler = candidate;\n\t\t\treturn true;\n\t\t},\n\t};\n\n\tstate.approvalEvents.emit(MCP_TOOL_APPROVAL_REQUEST_EVENT, request);\n\tacceptingClaim = false;\n\tif (!handler) return \"abstain\";\n\n\ttry {\n\t\tconst decision = await abortable(Promise.resolve().then(handler), signal);\n\t\treturn isMcpToolApprovalDecision(decision) ? decision : \"deny\";\n\t} catch (error) {\n\t\tif (signal?.aborted) throw error;\n\t\treturn \"deny\";\n\t}\n}\n\nexport async function ensureToolCallApproved(\n\tstate: McpExtensionState,\n\tserverName: string,\n\ttoolMeta: ToolMetadata,\n\targs: Record<string, unknown> | undefined,\n\tsignal?: AbortSignal,\n\torigin: McpToolApprovalOrigin = toolMeta.resourceUri ? \"resource\" : \"proxy\",\n\tapprovalMetadata?: ReadonlyMap<string, readonly ToolMetadata[]>,\n): Promise<ToolCallApprovalResult> {\n\tconst argsHash = createHash(\"sha256\")\n\t\t.update(stableStringify(args ?? {}))\n\t\t.digest(\"hex\");\n\tconst cacheKey = `${serverName}\\u0000${toolMeta.originalName}\\u0000${argsHash}`;\n\tif (!state.approvedToolCalls) state.approvedToolCalls = new Map<string, true>();\n\tconst approvedToolCalls = state.approvedToolCalls;\n\tif (approvedToolCalls.has(cacheKey)) {\n\t\treturn { ok: true };\n\t}\n\n\tconst brokerDecision = await requestBrokerApproval(state, serverName, toolMeta, args, origin, signal);\n\tif (brokerDecision === \"allow_once\") return { ok: true };\n\tif (brokerDecision === \"allow_for_session\") {\n\t\tapprovedToolCalls.set(cacheKey, true);\n\t\treturn { ok: true };\n\t}\n\tif (brokerDecision === \"deny\") return { ok: false, reason: \"denied\" };\n\n\tif (!isToolCallApprovalRequired(state.config, serverName, toolMeta, approvalMetadata ?? state.toolMetadata)) {\n\t\treturn { ok: true };\n\t}\n\n\tif (!state.ui) {\n\t\treturn { ok: false, reason: \"approval_required_headless\" };\n\t}\n\n\tconst json = JSON.stringify(args ?? {}, null, 2);\n\tconst sanitized = sanitizeTerminalText(json);\n\tconst preview = sanitized.length > 500 ? `${sanitized.slice(0, 500)}...` : sanitized;\n\tconst title = `MCP: ${sanitizeTerminalText(serverName)} wants to run ${sanitizeTerminalText(toolMeta.originalName)}`;\n\tconst ownedSignal = combineAbortSignals(state.owner?.signal, signal);\n\tconst decision = await abortable(\n\t\tstate.ui.select(`${title}\\n\\nArguments:\\n${preview}`, [\"Allow once\", \"Allow for session\", \"Deny\"]),\n\t\townedSignal,\n\t);\n\n\tif (decision === \"Allow once\") {\n\t\treturn { ok: true };\n\t}\n\tif (decision === \"Allow for session\") {\n\t\tapprovedToolCalls.set(cacheKey, true);\n\t\treturn { ok: true };\n\t}\n\treturn { ok: false, reason: \"denied\" };\n}\n"]}