@alneas/eaos-server 0.0.0-stage → 0.2.0

package/dist/chunk-VF5YDZJC.js

@@ -0,0 +1,305 @@
+import {
+  EntitlementError,
+  requiresEntitlementRuntime
+} from "./chunk-46UWPEW2.js";
+
+// src/mcp.ts
+import { Hono } from "hono";
+import { bodyLimit } from "hono/body-limit";
+import Ajv from "ajv";
+import Ajv2020 from "ajv/dist/2020.js";
+import addFormats from "ajv-formats";
+function createMcpRouter(runtime, options) {
+  const router = new Hono();
+  const ajv = new Ajv({ strict: false, allErrors: true });
+  const ajv2020 = new Ajv2020({ strict: false, allErrors: true });
+  addFormats(ajv);
+  addFormats(ajv2020);
+  const entitled = async (p, id) => {
+    const rule = runtime.registry.get(id)?.entitlement;
+    return !rule || !requiresEntitlementRuntime(rule) || !!options.entitlements && (await options.entitlements.check(p, id, rule)).allowed;
+  };
+  const admit = async (p, plugin, operation) => {
+    if (!plugin.entitlement || !requiresEntitlementRuntime(plugin.entitlement)) return;
+    if (!options.entitlements) throw Error("Entitlement service unavailable");
+    await options.entitlements.admit(p, plugin.id, plugin.entitlement, operation);
+  };
+  const preview = async (p, plugin) => {
+    if (!plugin.entitlement || !requiresEntitlementRuntime(plugin.entitlement)) return null;
+    if (!options.entitlements) return { status: 503, error: "Entitlement service unavailable" };
+    const decision = await options.entitlements.check(p, plugin.id, plugin.entitlement);
+    return decision.allowed ? null : { status: decision.status, error: decision.reason };
+  };
+  router.use("*", bodyLimit({ maxSize: 1024 * 1024 }));
+  router.onError((error, c) => {
+    options.onError?.(error);
+    return c.json({ error: "MCP request failed" }, 500);
+  });
+  function tools() {
+    const names = /* @__PURE__ */ new Set();
+    return runtime.registry.getAll().flatMap((plugin) => (plugin.mcp?.tools ?? []).map((tool) => {
+      if (names.has(tool.name)) throw new Error(`Duplicate MCP tool name: ${tool.name}`);
+      names.add(tool.name);
+      return { plugin, tool };
+    }));
+  }
+  async function resolveAIAdapters(principal2, pluginId, toolName, traceId) {
+    if (!options.resolveAIHostAdapters) return void 0;
+    return options.resolveAIHostAdapters({
+      principal: principal2,
+      pluginId,
+      toolName,
+      context: { tenantId: principal2.tenantId, userId: principal2.userId, operation: `mcp:${toolName}`, traceId }
+    });
+  }
+  async function principal(c) {
+    const p = await options.resolvePrincipal(c);
+    if (!p || typeof p.userId !== "string" || !p.userId.trim() || typeof p.tenantId !== "string" || !p.tenantId.trim() || !Array.isArray(p.roles) || !p.roles.every((v) => typeof v === "string") || !Array.isArray(p.enabledPluginIds) || !p.enabledPluginIds.every((v) => typeof v === "string")) return null;
+    if (options.tenantId && p.tenantId !== options.tenantId) return null;
+    return { userId: p.userId, tenantId: p.tenantId, roles: [...p.roles], enabledPluginIds: [...p.enabledPluginIds] };
+  }
+  router.get("/tools", async (c) => {
+    const p = await principal(c);
+    if (!p) return c.json({ error: "Unauthorized" }, 401);
+    const active = /* @__PURE__ */ new Set();
+    for (const id of p.enabledPluginIds) if ((!options.isPluginEnabled || await options.isPluginEnabled(p, id)) && await entitled(p, id)) active.add(id);
+    return c.json({ tools: tools().filter(
+      ({ plugin, tool }) => active.has(plugin.id) && runtime.gatekeeper.validateCall({ toolName: tool.name, userRoles: p.roles, tenantId: p.tenantId }).allowed
+    ).map(({ plugin, tool }) => ({ name: tool.name, description: tool.description, inputSchema: tool.parameters, pluginId: plugin.id })) });
+  });
+  router.post("/execute", async (c) => {
+    const p = await principal(c);
+    if (!p) return c.json({ error: "Unauthorized" }, 401);
+    if (!/^application\/json(?:;|$)/i.test(c.req.header("Content-Type") ?? "")) return c.json({ error: "JSON content type required" }, 415);
+    const body = await c.req.json().catch(() => null);
+    if (!body || typeof body !== "object" || Array.isArray(body) || typeof body.name !== "string" || !body.args || typeof body.args !== "object" || Array.isArray(body.args) || Object.keys(body).some((k) => k !== "name" && k !== "args")) return c.json({ error: "Expected { name, args }" }, 400);
+    const entry = tools().find(({ tool }) => tool.name === body.name);
+    if (!entry || !p.enabledPluginIds.includes(entry.plugin.id) || options.isPluginEnabled && !await options.isPluginEnabled(p, entry.plugin.id)) return c.json({ error: "Tool unavailable" }, 404);
+    const admission = await preview(p, entry.plugin);
+    if (admission) return c.json({ error: admission.error }, admission.status);
+    const traceId = crypto.randomUUID();
+    const verdict = runtime.gatekeeper.validateCall({ toolName: entry.tool.name, userRoles: p.roles, tenantId: p.tenantId, traceId });
+    const audit = {
+      toolName: entry.tool.name,
+      userId: p.userId,
+      tenantId: p.tenantId,
+      traceId,
+      riskLevel: verdict.riskLevel,
+      approvalLevel: verdict.approvalLevel
+    };
+    if (!verdict.allowed) {
+      runtime.gatekeeper.logCall({ ...audit, status: "BLOCKED", reason: verdict.reason });
+      return c.json({ error: "Forbidden", traceId }, 403);
+    }
+    const schema = entry.tool.parameters;
+    const validator = (String(schema.$schema ?? "").includes("2020-12") ? ajv2020 : ajv).compile(schema);
+    if (!validator(body.args)) return c.json({ error: "Invalid tool arguments", traceId }, 400);
+    if (verdict.requireHumanApproval) {
+      runtime.gatekeeper.logCall({ ...audit, status: "PENDING_APPROVAL" });
+      return c.json({ requireHumanApproval: true, approvalLevel: verdict.approvalLevel, traceId }, 202);
+    }
+    if (options.isPluginEnabled && !await options.isPluginEnabled(p, entry.plugin.id)) return c.json({ error: "Tool unavailable" }, 404);
+    const dependencies = await options.createToolContext?.(p, entry.plugin.id) ?? {};
+    const aiHostAdapters = await resolveAIAdapters(p, entry.plugin.id, entry.tool.name, traceId);
+    if (options.isPluginEnabled && !await options.isPluginEnabled(p, entry.plugin.id)) return c.json({ error: "Tool unavailable" }, 404);
+    const context = Object.freeze({
+      ...dependencies,
+      ...aiHostAdapters ? { aiHostAdapters: Object.freeze(aiHostAdapters) } : {},
+      tenantId: p.tenantId,
+      userId: p.userId,
+      roles: Object.freeze([...p.roles]),
+      pluginId: entry.plugin.id,
+      traceId
+    });
+    try {
+      await admit(p, entry.plugin, `mcp:${entry.tool.name}`);
+    } catch (error) {
+      if (error instanceof EntitlementError) {
+        runtime.gatekeeper.logCall({ ...audit, status: "BLOCKED", reason: error.message });
+        return c.json({ error: error.message }, error.decision.status);
+      }
+      throw error;
+    }
+    runtime.gatekeeper.logCall({ ...audit, status: "ALLOWED" });
+    const result = await entry.tool.handler(body.args, context);
+    return c.json({ result, traceId });
+  });
+  const sseSessions = /* @__PURE__ */ new Map();
+  const boundedNumber = (value, fallback, minimum) => typeof value === "number" && Number.isFinite(value) ? Math.max(minimum, Math.floor(value)) : fallback;
+  const sseSessionTtlMs = boundedNumber(options.sseSessionTtlMs, 30 * 60 * 1e3, 1e3);
+  const maxSseSessions = boundedNumber(options.maxSseSessions, 1e3, 1);
+  function purgeExpiredSseSessions(now = Date.now()) {
+    for (const [id, session] of sseSessions) {
+      if (now - session.createdAt >= sseSessionTtlMs || now - session.lastActivityAt >= sseSessionTtlMs) sseSessions.delete(id);
+    }
+  }
+  router.get("/sse", async (c) => {
+    const p = await principal(c);
+    if (!p) return c.json({ error: "Unauthorized" }, 401);
+    const now = Date.now();
+    purgeExpiredSseSessions(now);
+    if (sseSessions.size >= maxSseSessions) return c.json({ error: "MCP SSE capacity exhausted" }, 503);
+    const sessionId = crypto.randomUUID();
+    const endpointUrl = `${new URL(c.req.url).pathname.replace(/\/sse$/, "")}/message?sessionId=${sessionId}`;
+    let cleanup;
+    const stream = new ReadableStream({
+      start(controller) {
+        const encoder = new TextEncoder();
+        const send = (data) => {
+          try {
+            const session = sseSessions.get(sessionId);
+            if (session) session.lastActivityAt = Date.now();
+            controller.enqueue(encoder.encode(data));
+          } catch {
+            cleanup?.();
+          }
+        };
+        sseSessions.set(sessionId, { userId: p.userId, tenantId: p.tenantId, createdAt: now, lastActivityAt: now, send });
+        cleanup = () => sseSessions.delete(sessionId);
+        send(`event: endpoint
+data: ${endpointUrl}
+
+`);
+      },
+      cancel() {
+        cleanup?.();
+      }
+    });
+    return new Response(stream, {
+      headers: {
+        "Content-Type": "text/event-stream",
+        "Cache-Control": "no-cache",
+        Connection: "keep-alive"
+      }
+    });
+  });
+  router.post("/message", async (c) => {
+    const p = await principal(c);
+    if (!p) return c.json({ jsonrpc: "2.0", error: { code: -32e3, message: "Unauthorized" }, id: null }, 401);
+    const body = await c.req.json().catch(() => null);
+    if (!body || typeof body !== "object" || body.jsonrpc !== "2.0" || typeof body.method !== "string") {
+      return c.json({ jsonrpc: "2.0", error: { code: -32600, message: "Invalid Request" }, id: body?.id ?? null }, 400);
+    }
+    const id = body.id ?? null;
+    const sessionId = c.req.query("sessionId");
+    purgeExpiredSseSessions();
+    const session = sessionId ? sseSessions.get(sessionId) : void 0;
+    if (sessionId && !session) return c.json({ jsonrpc: "2.0", error: { code: -32e3, message: "MCP session unavailable" }, id }, 404);
+    if (session && (session.userId !== p.userId || session.tenantId !== p.tenantId)) {
+      return c.json({ jsonrpc: "2.0", error: { code: -32003, message: "MCP session owner mismatch" }, id }, 403);
+    }
+    if (session) session.lastActivityAt = Date.now();
+    const sendRpcResponse = (payload) => {
+      const serialized = JSON.stringify(payload);
+      if (session) {
+        session.send(`event: message
+data: ${serialized}
+
+`);
+      }
+      return c.json(payload);
+    };
+    if (body.method === "tools/list") {
+      const active = /* @__PURE__ */ new Set();
+      for (const pid of p.enabledPluginIds) if ((!options.isPluginEnabled || await options.isPluginEnabled(p, pid)) && await entitled(p, pid)) active.add(pid);
+      const available = tools().filter(
+        ({ plugin, tool }) => active.has(plugin.id) && runtime.gatekeeper.validateCall({ toolName: tool.name, userRoles: p.roles, tenantId: p.tenantId }).allowed
+      ).map(({ plugin, tool }) => ({
+        name: tool.name,
+        description: tool.description,
+        inputSchema: tool.parameters,
+        pluginId: plugin.id
+      }));
+      return sendRpcResponse({ jsonrpc: "2.0", result: { tools: available }, id });
+    }
+    if (body.method === "tools/call") {
+      const toolName = body.params?.name;
+      const toolArgs = body.params?.arguments ?? {};
+      if (typeof toolName !== "string" || typeof toolArgs !== "object" || Array.isArray(toolArgs)) {
+        return sendRpcResponse({ jsonrpc: "2.0", error: { code: -32602, message: "Invalid params" }, id });
+      }
+      const entry = tools().find(({ tool }) => tool.name === toolName);
+      if (!entry || !p.enabledPluginIds.includes(entry.plugin.id) || options.isPluginEnabled && !await options.isPluginEnabled(p, entry.plugin.id)) {
+        return sendRpcResponse({ jsonrpc: "2.0", error: { code: -32601, message: "Tool not found" }, id });
+      }
+      const admission = await preview(p, entry.plugin);
+      if (admission) return sendRpcResponse({ jsonrpc: "2.0", error: { code: -32003, message: admission.error, data: { status: admission.status } }, id });
+      const traceId = crypto.randomUUID();
+      const verdict = runtime.gatekeeper.validateCall({ toolName: entry.tool.name, userRoles: p.roles, tenantId: p.tenantId, traceId });
+      const audit = {
+        toolName: entry.tool.name,
+        userId: p.userId,
+        tenantId: p.tenantId,
+        traceId,
+        riskLevel: verdict.riskLevel,
+        approvalLevel: verdict.approvalLevel
+      };
+      if (!verdict.allowed) {
+        runtime.gatekeeper.logCall({ ...audit, status: "BLOCKED", reason: verdict.reason });
+        return sendRpcResponse({ jsonrpc: "2.0", error: { code: -32003, message: "Forbidden: tool execution denied" }, id });
+      }
+      const schema = entry.tool.parameters;
+      const validator = (String(schema.$schema ?? "").includes("2020-12") ? ajv2020 : ajv).compile(schema);
+      if (!validator(toolArgs)) {
+        return sendRpcResponse({ jsonrpc: "2.0", error: { code: -32602, message: "Invalid tool arguments" }, id });
+      }
+      if (verdict.requireHumanApproval) {
+        runtime.gatekeeper.logCall({ ...audit, status: "PENDING_APPROVAL" });
+        return sendRpcResponse({
+          jsonrpc: "2.0",
+          result: {
+            content: [{ type: "text", text: `Human approval required (${verdict.approvalLevel})` }],
+            isError: true,
+            requireHumanApproval: true,
+            approvalLevel: verdict.approvalLevel,
+            traceId
+          },
+          id
+        });
+      }
+      if (options.isPluginEnabled && !await options.isPluginEnabled(p, entry.plugin.id)) {
+        return sendRpcResponse({ jsonrpc: "2.0", error: { code: -32601, message: "Tool not found" }, id });
+      }
+      const dependencies = await options.createToolContext?.(p, entry.plugin.id) ?? {};
+      const aiHostAdapters = await resolveAIAdapters(p, entry.plugin.id, entry.tool.name, traceId);
+      if (options.isPluginEnabled && !await options.isPluginEnabled(p, entry.plugin.id)) {
+        return sendRpcResponse({ jsonrpc: "2.0", error: { code: -32601, message: "Tool not found" }, id });
+      }
+      const context = Object.freeze({
+        ...dependencies,
+        ...aiHostAdapters ? { aiHostAdapters: Object.freeze(aiHostAdapters) } : {},
+        tenantId: p.tenantId,
+        userId: p.userId,
+        roles: Object.freeze([...p.roles]),
+        pluginId: entry.plugin.id,
+        traceId
+      });
+      try {
+        await admit(p, entry.plugin, `mcp:${entry.tool.name}`);
+      } catch (error) {
+        if (error instanceof EntitlementError) {
+          runtime.gatekeeper.logCall({ ...audit, status: "BLOCKED", reason: error.message });
+          return sendRpcResponse({ jsonrpc: "2.0", error: { code: -32003, message: error.message, data: { status: error.decision.status } }, id });
+        }
+        throw error;
+      }
+      runtime.gatekeeper.logCall({ ...audit, status: "ALLOWED" });
+      const handlerResult = await entry.tool.handler(toolArgs, context);
+      return sendRpcResponse({
+        jsonrpc: "2.0",
+        result: {
+          content: [{ type: "text", text: JSON.stringify(handlerResult) }],
+          traceId
+        },
+        id
+      });
+    }
+    return sendRpcResponse({ jsonrpc: "2.0", error: { code: -32601, message: "Method not found" }, id });
+  });
+  return router;
+}
+
+export {
+  createMcpRouter
+};
+//# sourceMappingURL=chunk-VF5YDZJC.js.map

package/dist/chunk-VF5YDZJC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/mcp.ts"],"sourcesContent":["import { Hono, type Context } from 'hono'\nimport { bodyLimit } from 'hono/body-limit'\nimport Ajv from 'ajv'\nimport Ajv2020 from 'ajv/dist/2020.js'\nimport addFormats from 'ajv-formats'\nimport { EntitlementError, requiresEntitlementRuntime, type PluginEntitlementRuntime } from './entitlements/index'\nimport type { AIExecutionContext, AIHostAdapters, McpGatekeeper, PluginRegistry, McpToolDefinition, PluginManifest } from '@alneas/eaos-core'\n\n/**\n * Host-verified identity, roles, and enabled plugins used for MCP discovery and execution.\n * @see createMcpRouter.\n */\nexport interface McpPrincipal {\n  /** Nonblank authenticated user identifier. */\n  userId: string\n  /** Nonblank authorized tenant identifier. */\n  tenantId: string\n  /** Verified role strings passed to the gatekeeper; an empty array is permitted. */\n  roles: string[]\n  /** Exact installed plugin IDs, resolved from the server's current tenant configuration. */\n  enabledPluginIds: string[]\n}\n/**\n * Shared registry and policy/audit service used by {@link createMcpRouter}.\n */\nexport interface McpRuntime {\n  /** Registry supplying trusted manifests and executable tool handlers. Duplicate tool names fail discovery/execution. */\n  registry: PluginRegistry\n  /** Current permission/approval policy and audit sink consulted for tool discovery and calls. */\n  gatekeeper: McpGatekeeper\n}\n/**\n * Live host authorization, resource injection, and bounded SSE-session settings for {@link createMcpRouter}.\n */\nexport interface McpRouterOptions {\n  /** Runtime for declared commercial/usage entitlements; required by plugins whose rules need external entitlement checks. */\n  entitlements?: PluginEntitlementRuntime\n  /** Additional current lifecycle gate; called on discovery and immediately before execution. */\n  isPluginEnabled?: (principal: McpPrincipal, pluginId: string) => Promise<boolean>\n  /** Must verify authentication, tenant membership and enabled plugins on every request. */\n  resolvePrincipal: (context: Context) => Promise<McpPrincipal | null>\n  /** Optional binding for a tenant-dedicated backend. */\n  tenantId?: string\n  /** Inject already tenant-scoped resources; never pass an unrestricted administrative DB. */\n  createToolContext?: (principal: McpPrincipal, pluginId: string) => Promise<Record<string, unknown>>\n  /** Resolve provider-neutral AI adapters after live authorization; the result is injected into the verified tool context. */\n  resolveAIHostAdapters?: (input: {\n  /**\n   * Verified current request principal after membership and enabled-plugin resolution.\n   */\n  principal: McpPrincipal;\n  /**\n   * Owning plugin whose admitted tool needs host AI adapters.\n   */\n  pluginId: string;\n  /**\n   * Exact registered MCP tool name being executed.\n   */\n  toolName: string;\n  /**\n   * Verified AI execution identity, operation mcp:toolName, and generated trace ID; no client scope overrides are accepted here.\n   */\n  context: AIExecutionContext }) => Promise<AIHostAdapters | undefined>\n  /** Operational errors only; request bodies/credentials are not passed. */\n  onError?: (error: unknown) => void\n  /** Maximum SSE session age and inactivity in milliseconds; finite values are floored and clamped to at least 1000. Defaults to 1800000 for absent/nonfinite input. */\n  sseSessionTtlMs?: number\n  /** Per-router SSE session capacity; finite values are floored and clamped to at least 1. Defaults to 1000 for absent/nonfinite input. */\n  maxSseSessions?: number\n}\n\n/**\n * Creates authenticated MCP tool discovery/execution routes and an SSE JSON-RPC transport.\n * @param runtime - Trusted plugin/tool registry and gatekeeper with audit behavior.\n * @param options - Host principal verification, current lifecycle/entitlement checks, scoped dependencies, AI adapters, and SSE limits.\n * @returns A Hono router exposing GET /tools, POST /execute, GET /sse, and POST /message; no network listener is started.\n * @throws Router construction can propagate validator setup errors. Request-time callback, schema compilation, tool, or audit errors are passed to onError and normally rendered as a generic 500; a throwing onError can itself fail error handling.\n * @remarks Every request resolves current identity and enabled plugins. Tool discovery hides unavailable tools; calls validate arguments, recheck lifecycle before execution, and perform entitlement admission. Human-approval requirements return pending data without executing the handler; no client approval flag bypasses this. Request bodies are limited to 1 MiB. Host callbacks must supply tenant-scoped resources and enforce real membership and lifecycle checks; the router does not open databases or persist results. SSE session state is process-local, owner-bound, capacity-limited, and removed on stream cancellation or lazy expiry checks. Expiry removes the mapping without explicitly closing the existing stream; no heartbeat or cross-process session sharing is provided. Tool failures may occur after side effects, so retry/idempotency remains host-owned.\n * @example\n * ```typescript\n * import { createMcpRouter, type McpRuntime, type McpRouterOptions } from \"@alneas/eaos-server/mcp\";\n * export function mcpRoutes(runtime: McpRuntime, options: McpRouterOptions) {\n *   // options.resolvePrincipal must verify live identity, membership, and enabled plugins.\n *   // Supply only tenant-scoped resources through createToolContext.\n *   return createMcpRouter(runtime, options);\n * }\n * ```\n */\nexport function createMcpRouter(runtime: McpRuntime, options: McpRouterOptions): Hono {\n  const router = new Hono()\n  const ajv = new Ajv({ strict: false, allErrors: true })\n  const ajv2020 = new Ajv2020({ strict: false, allErrors: true })\n  addFormats(ajv); addFormats(ajv2020)\n  const entitled = async (p: McpPrincipal, id: string) => {\n    const rule = runtime.registry.get(id)?.entitlement\n    return !rule || !requiresEntitlementRuntime(rule) || !!options.entitlements && (await options.entitlements.check(p, id, rule)).allowed\n  }\n  const admit = async (p: McpPrincipal, plugin: PluginManifest, operation: string) => {\n    if (!plugin.entitlement || !requiresEntitlementRuntime(plugin.entitlement)) return\n    if (!options.entitlements) throw Error('Entitlement service unavailable')\n    await options.entitlements.admit(p, plugin.id, plugin.entitlement, operation)\n  }\n  const preview = async (p: McpPrincipal, plugin: PluginManifest) => {\n    if (!plugin.entitlement || !requiresEntitlementRuntime(plugin.entitlement)) return null\n    if (!options.entitlements) return { status: 503 as const, error: 'Entitlement service unavailable' }\n    const decision = await options.entitlements.check(p, plugin.id, plugin.entitlement)\n    return decision.allowed ? null : { status: decision.status, error: decision.reason }\n  }\n  router.use('*', bodyLimit({ maxSize: 1024 * 1024 }))\n  router.onError((error, c) => {\n    options.onError?.(error)\n    return c.json({ error: 'MCP request failed' }, 500)\n  })\n\n  function tools(): Array<{ plugin: PluginManifest; tool: McpToolDefinition }> {\n    const names = new Set<string>()\n    return runtime.registry.getAll().flatMap(plugin => (plugin.mcp?.tools ?? []).map(tool => {\n      if (names.has(tool.name)) throw new Error(`Duplicate MCP tool name: ${tool.name}`)\n      names.add(tool.name)\n      return { plugin, tool }\n    }))\n  }\n\n  async function resolveAIAdapters(principal: McpPrincipal, pluginId: string, toolName: string, traceId: string): Promise<AIHostAdapters | undefined> {\n    if (!options.resolveAIHostAdapters) return undefined\n    return options.resolveAIHostAdapters({\n      principal,\n      pluginId,\n      toolName,\n      context: { tenantId: principal.tenantId, userId: principal.userId, operation: `mcp:${toolName}`, traceId },\n    })\n  }\n\n  async function principal(c: Context): Promise<McpPrincipal | null> {\n    const p = await options.resolvePrincipal(c)\n    if (!p || typeof p.userId !== 'string' || !p.userId.trim() || typeof p.tenantId !== 'string' || !p.tenantId.trim()\n      || !Array.isArray(p.roles) || !p.roles.every(v => typeof v === 'string')\n      || !Array.isArray(p.enabledPluginIds) || !p.enabledPluginIds.every(v => typeof v === 'string')) return null\n    if (options.tenantId && p.tenantId !== options.tenantId) return null\n    return { userId: p.userId, tenantId: p.tenantId, roles: [...p.roles], enabledPluginIds: [...p.enabledPluginIds] }\n  }\n\n  router.get('/tools', async c => {\n    const p = await principal(c)\n    if (!p) return c.json({ error: 'Unauthorized' }, 401)\n    const active = new Set<string>()\n    for (const id of p.enabledPluginIds) if ((!options.isPluginEnabled || await options.isPluginEnabled(p, id)) && await entitled(p, id)) active.add(id)\n    return c.json({ tools: tools().filter(({ plugin, tool }) =>\n      active.has(plugin.id) && runtime.gatekeeper.validateCall({ toolName: tool.name, userRoles: p.roles, tenantId: p.tenantId }).allowed\n    ).map(({ plugin, tool }) => ({ name: tool.name, description: tool.description, inputSchema: tool.parameters, pluginId: plugin.id })) })\n  })\n\n  router.post('/execute', async c => {\n    const p = await principal(c)\n    if (!p) return c.json({ error: 'Unauthorized' }, 401)\n    if (!/^application\\/json(?:;|$)/i.test(c.req.header('Content-Type') ?? '')) return c.json({ error: 'JSON content type required' }, 415)\n    const body = await c.req.json().catch(() => null)\n    if (!body || typeof body !== 'object' || Array.isArray(body) || typeof body.name !== 'string'\n      || !body.args || typeof body.args !== 'object' || Array.isArray(body.args)\n      || Object.keys(body).some(k => k !== 'name' && k !== 'args')) return c.json({ error: 'Expected { name, args }' }, 400)\n    const entry = tools().find(({ tool }) => tool.name === body.name)\n    // Do not reveal disabled plugin tools through discovery or execution.\n    if (!entry || !p.enabledPluginIds.includes(entry.plugin.id) || (options.isPluginEnabled && !await options.isPluginEnabled(p, entry.plugin.id))) return c.json({ error: 'Tool unavailable' }, 404)\n    const admission = await preview(p, entry.plugin)\n    if (admission) return c.json({ error: admission.error }, admission.status)\n    const traceId = crypto.randomUUID()\n    const verdict = runtime.gatekeeper.validateCall({ toolName: entry.tool.name, userRoles: p.roles, tenantId: p.tenantId, traceId })\n    const audit = { toolName: entry.tool.name, userId: p.userId, tenantId: p.tenantId, traceId,\n      riskLevel: verdict.riskLevel, approvalLevel: verdict.approvalLevel }\n    if (!verdict.allowed) {\n      runtime.gatekeeper.logCall({ ...audit, status: 'BLOCKED', reason: verdict.reason })\n      return c.json({ error: 'Forbidden', traceId }, 403)\n    }\n    const schema = entry.tool.parameters\n    const validator = (String(schema.$schema ?? '').includes('2020-12') ? ajv2020 : ajv).compile(schema)\n    if (!validator(body.args)) return c.json({ error: 'Invalid tool arguments', traceId }, 400)\n    if (verdict.requireHumanApproval) {\n      runtime.gatekeeper.logCall({ ...audit, status: 'PENDING_APPROVAL' })\n      // No client-supplied approval flag or token can bypass this branch.\n      return c.json({ requireHumanApproval: true, approvalLevel: verdict.approvalLevel, traceId }, 202)\n    }\n    if (options.isPluginEnabled && !await options.isPluginEnabled(p, entry.plugin.id)) return c.json({ error: 'Tool unavailable' }, 404)\n    const dependencies = await options.createToolContext?.(p, entry.plugin.id) ?? {}\n    const aiHostAdapters = await resolveAIAdapters(p, entry.plugin.id, entry.tool.name, traceId)\n    if (options.isPluginEnabled && !await options.isPluginEnabled(p, entry.plugin.id)) return c.json({ error: 'Tool unavailable' }, 404)\n    const context = Object.freeze({ ...dependencies, ...(aiHostAdapters ? { aiHostAdapters: Object.freeze(aiHostAdapters) } : {}), tenantId: p.tenantId, userId: p.userId,\n      roles: Object.freeze([...p.roles]), pluginId: entry.plugin.id, traceId })\n    try { await admit(p, entry.plugin, `mcp:${entry.tool.name}`) }\n    catch (error) { if (error instanceof EntitlementError) { runtime.gatekeeper.logCall({ ...audit, status: 'BLOCKED', reason: error.message }); return c.json({ error: error.message }, error.decision.status) } throw error }\n    runtime.gatekeeper.logCall({ ...audit, status: 'ALLOWED' })\n    const result = await entry.tool.handler(body.args, context)\n    return c.json({ result, traceId })\n  })\n\n  // ---------- MCP SSE (Server-Sent Events) & JSON-RPC 2.0 Transport ----------\n  interface SseSession {\n    userId: string\n    tenantId: string\n    createdAt: number\n    lastActivityAt: number\n    send: (chunk: string) => void\n  }\n  const sseSessions = new Map<string, SseSession>()\n  const boundedNumber = (value: number | undefined, fallback: number, minimum: number): number =>\n    typeof value === 'number' && Number.isFinite(value) ? Math.max(minimum, Math.floor(value)) : fallback\n  const sseSessionTtlMs = boundedNumber(options.sseSessionTtlMs, 30 * 60 * 1_000, 1_000)\n  const maxSseSessions = boundedNumber(options.maxSseSessions, 1_000, 1)\n\n  function purgeExpiredSseSessions(now = Date.now()): void {\n    for (const [id, session] of sseSessions) {\n      if (now - session.createdAt >= sseSessionTtlMs || now - session.lastActivityAt >= sseSessionTtlMs) sseSessions.delete(id)\n    }\n  }\n\n  router.get('/sse', async c => {\n    const p = await principal(c)\n    if (!p) return c.json({ error: 'Unauthorized' }, 401)\n\n    const now = Date.now()\n    purgeExpiredSseSessions(now)\n    if (sseSessions.size >= maxSseSessions) return c.json({ error: 'MCP SSE capacity exhausted' }, 503)\n\n    const sessionId = crypto.randomUUID()\n    const endpointUrl = `${new URL(c.req.url).pathname.replace(/\\/sse$/, '')}/message?sessionId=${sessionId}`\n\n    let cleanup: (() => void) | undefined\n    const stream = new ReadableStream({\n      start(controller) {\n        const encoder = new TextEncoder()\n        const send = (data: string) => {\n          try {\n            const session = sseSessions.get(sessionId)\n            if (session) session.lastActivityAt = Date.now()\n            controller.enqueue(encoder.encode(data))\n          } catch {\n            cleanup?.()\n          }\n        }\n        sseSessions.set(sessionId, { userId: p.userId, tenantId: p.tenantId, createdAt: now, lastActivityAt: now, send })\n        cleanup = () => sseSessions.delete(sessionId)\n\n        // MCP SSE Initial Handshake: emit endpoint URL\n        send(`event: endpoint\\ndata: ${endpointUrl}\\n\\n`)\n      },\n      cancel() {\n        cleanup?.()\n      },\n    })\n\n    return new Response(stream, {\n      headers: {\n        'Content-Type': 'text/event-stream',\n        'Cache-Control': 'no-cache',\n        Connection: 'keep-alive',\n      },\n    })\n  })\n\n  router.post('/message', async c => {\n    const p = await principal(c)\n    if (!p) return c.json({ jsonrpc: '2.0', error: { code: -32000, message: 'Unauthorized' }, id: null }, 401)\n\n    const body = await c.req.json().catch(() => null)\n    if (!body || typeof body !== 'object' || body.jsonrpc !== '2.0' || typeof body.method !== 'string') {\n      return c.json({ jsonrpc: '2.0', error: { code: -32600, message: 'Invalid Request' }, id: body?.id ?? null }, 400)\n    }\n\n    const id = body.id ?? null\n    const sessionId = c.req.query('sessionId')\n    purgeExpiredSseSessions()\n    const session = sessionId ? sseSessions.get(sessionId) : undefined\n    if (sessionId && !session) return c.json({ jsonrpc: '2.0', error: { code: -32000, message: 'MCP session unavailable' }, id }, 404)\n    if (session && (session.userId !== p.userId || session.tenantId !== p.tenantId)) {\n      return c.json({ jsonrpc: '2.0', error: { code: -32003, message: 'MCP session owner mismatch' }, id }, 403)\n    }\n    if (session) session.lastActivityAt = Date.now()\n\n    const sendRpcResponse = (payload: object) => {\n      const serialized = JSON.stringify(payload)\n      if (session) {\n        session.send(`event: message\\ndata: ${serialized}\\n\\n`)\n      }\n      return c.json(payload)\n    }\n\n    // 1. tools/list\n    if (body.method === 'tools/list') {\n      const active = new Set<string>()\n      for (const pid of p.enabledPluginIds) if ((!options.isPluginEnabled || await options.isPluginEnabled(p, pid)) && await entitled(p, pid)) active.add(pid)\n\n      const available = tools()\n        .filter(({ plugin, tool }) =>\n          active.has(plugin.id) &&\n          runtime.gatekeeper.validateCall({ toolName: tool.name, userRoles: p.roles, tenantId: p.tenantId }).allowed\n        )\n        .map(({ plugin, tool }) => ({\n          name: tool.name,\n          description: tool.description,\n          inputSchema: tool.parameters,\n          pluginId: plugin.id,\n        }))\n\n      return sendRpcResponse({ jsonrpc: '2.0', result: { tools: available }, id })\n    }\n\n    // 2. tools/call\n    if (body.method === 'tools/call') {\n      const toolName = body.params?.name\n      const toolArgs = body.params?.arguments ?? {}\n\n      if (typeof toolName !== 'string' || typeof toolArgs !== 'object' || Array.isArray(toolArgs)) {\n        return sendRpcResponse({ jsonrpc: '2.0', error: { code: -32602, message: 'Invalid params' }, id })\n      }\n\n      const entry = tools().find(({ tool }) => tool.name === toolName)\n      if (!entry || !p.enabledPluginIds.includes(entry.plugin.id) || (options.isPluginEnabled && !await options.isPluginEnabled(p, entry.plugin.id))) {\n        return sendRpcResponse({ jsonrpc: '2.0', error: { code: -32601, message: 'Tool not found' }, id })\n      }\n      const admission = await preview(p, entry.plugin)\n      if (admission) return sendRpcResponse({ jsonrpc: '2.0', error: { code: -32003, message: admission.error, data: { status: admission.status } }, id })\n\n      const traceId = crypto.randomUUID()\n      const verdict = runtime.gatekeeper.validateCall({ toolName: entry.tool.name, userRoles: p.roles, tenantId: p.tenantId, traceId })\n      const audit = { toolName: entry.tool.name, userId: p.userId, tenantId: p.tenantId, traceId,\n        riskLevel: verdict.riskLevel, approvalLevel: verdict.approvalLevel }\n\n      if (!verdict.allowed) {\n        runtime.gatekeeper.logCall({ ...audit, status: 'BLOCKED', reason: verdict.reason })\n        return sendRpcResponse({ jsonrpc: '2.0', error: { code: -32003, message: 'Forbidden: tool execution denied' }, id })\n      }\n\n      const schema = entry.tool.parameters\n      const validator = (String(schema.$schema ?? '').includes('2020-12') ? ajv2020 : ajv).compile(schema)\n      if (!validator(toolArgs)) {\n        return sendRpcResponse({ jsonrpc: '2.0', error: { code: -32602, message: 'Invalid tool arguments' }, id })\n      }\n\n      if (verdict.requireHumanApproval) {\n        runtime.gatekeeper.logCall({ ...audit, status: 'PENDING_APPROVAL' })\n        return sendRpcResponse({\n          jsonrpc: '2.0',\n          result: {\n            content: [{ type: 'text', text: `Human approval required (${verdict.approvalLevel})` }],\n            isError: true,\n            requireHumanApproval: true,\n            approvalLevel: verdict.approvalLevel,\n            traceId,\n          },\n          id,\n        })\n      }\n\n      if (options.isPluginEnabled && !await options.isPluginEnabled(p, entry.plugin.id)) {\n        return sendRpcResponse({ jsonrpc: '2.0', error: { code: -32601, message: 'Tool not found' }, id })\n      }\n      const dependencies = await options.createToolContext?.(p, entry.plugin.id) ?? {}\n      const aiHostAdapters = await resolveAIAdapters(p, entry.plugin.id, entry.tool.name, traceId)\n      if (options.isPluginEnabled && !await options.isPluginEnabled(p, entry.plugin.id)) {\n        return sendRpcResponse({ jsonrpc: '2.0', error: { code: -32601, message: 'Tool not found' }, id })\n      }\n      const context = Object.freeze({ ...dependencies, ...(aiHostAdapters ? { aiHostAdapters: Object.freeze(aiHostAdapters) } : {}), tenantId: p.tenantId, userId: p.userId,\n        roles: Object.freeze([...p.roles]), pluginId: entry.plugin.id, traceId })\n\n      try { await admit(p, entry.plugin, `mcp:${entry.tool.name}`) }\n      catch (error) {\n        if (error instanceof EntitlementError) { runtime.gatekeeper.logCall({ ...audit, status: 'BLOCKED', reason: error.message }); return sendRpcResponse({ jsonrpc: '2.0', error: { code: -32003, message: error.message, data: { status: error.decision.status } }, id }) }\n        throw error\n      }\n      runtime.gatekeeper.logCall({ ...audit, status: 'ALLOWED' })\n      const handlerResult = await entry.tool.handler(toolArgs, context)\n\n      return sendRpcResponse({\n        jsonrpc: '2.0',\n        result: {\n          content: [{ type: 'text', text: JSON.stringify(handlerResult) }],\n          traceId,\n        },\n        id,\n      })\n    }\n\n    return sendRpcResponse({ jsonrpc: '2.0', error: { code: -32601, message: 'Method not found' }, id })\n  })\n  return router\n}\n"],"mappings":";;;;;;AAAA,SAAS,YAA0B;AACnC,SAAS,iBAAiB;AAC1B,OAAO,SAAS;AAChB,OAAO,aAAa;AACpB,OAAO,gBAAgB;AAoFhB,SAAS,gBAAgB,SAAqB,SAAiC;AACpF,QAAM,SAAS,IAAI,KAAK;AACxB,QAAM,MAAM,IAAI,IAAI,EAAE,QAAQ,OAAO,WAAW,KAAK,CAAC;AACtD,QAAM,UAAU,IAAI,QAAQ,EAAE,QAAQ,OAAO,WAAW,KAAK,CAAC;AAC9D,aAAW,GAAG;AAAG,aAAW,OAAO;AACnC,QAAM,WAAW,OAAO,GAAiB,OAAe;AACtD,UAAM,OAAO,QAAQ,SAAS,IAAI,EAAE,GAAG;AACvC,WAAO,CAAC,QAAQ,CAAC,2BAA2B,IAAI,KAAK,CAAC,CAAC,QAAQ,iBAAiB,MAAM,QAAQ,aAAa,MAAM,GAAG,IAAI,IAAI,GAAG;AAAA,EACjI;AACA,QAAM,QAAQ,OAAO,GAAiB,QAAwB,cAAsB;AAClF,QAAI,CAAC,OAAO,eAAe,CAAC,2BAA2B,OAAO,WAAW,EAAG;AAC5E,QAAI,CAAC,QAAQ,aAAc,OAAM,MAAM,iCAAiC;AACxE,UAAM,QAAQ,aAAa,MAAM,GAAG,OAAO,IAAI,OAAO,aAAa,SAAS;AAAA,EAC9E;AACA,QAAM,UAAU,OAAO,GAAiB,WAA2B;AACjE,QAAI,CAAC,OAAO,eAAe,CAAC,2BAA2B,OAAO,WAAW,EAAG,QAAO;AACnF,QAAI,CAAC,QAAQ,aAAc,QAAO,EAAE,QAAQ,KAAc,OAAO,kCAAkC;AACnG,UAAM,WAAW,MAAM,QAAQ,aAAa,MAAM,GAAG,OAAO,IAAI,OAAO,WAAW;AAClF,WAAO,SAAS,UAAU,OAAO,EAAE,QAAQ,SAAS,QAAQ,OAAO,SAAS,OAAO;AAAA,EACrF;AACA,SAAO,IAAI,KAAK,UAAU,EAAE,SAAS,OAAO,KAAK,CAAC,CAAC;AACnD,SAAO,QAAQ,CAAC,OAAO,MAAM;AAC3B,YAAQ,UAAU,KAAK;AACvB,WAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;AAAA,EACpD,CAAC;AAED,WAAS,QAAoE;AAC3E,UAAM,QAAQ,oBAAI,IAAY;AAC9B,WAAO,QAAQ,SAAS,OAAO,EAAE,QAAQ,aAAW,OAAO,KAAK,SAAS,CAAC,GAAG,IAAI,UAAQ;AACvF,UAAI,MAAM,IAAI,KAAK,IAAI,EAAG,OAAM,IAAI,MAAM,4BAA4B,KAAK,IAAI,EAAE;AACjF,YAAM,IAAI,KAAK,IAAI;AACnB,aAAO,EAAE,QAAQ,KAAK;AAAA,IACxB,CAAC,CAAC;AAAA,EACJ;AAEA,iBAAe,kBAAkBA,YAAyB,UAAkB,UAAkB,SAAsD;AAClJ,QAAI,CAAC,QAAQ,sBAAuB,QAAO;AAC3C,WAAO,QAAQ,sBAAsB;AAAA,MACnC,WAAAA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,EAAE,UAAUA,WAAU,UAAU,QAAQA,WAAU,QAAQ,WAAW,OAAO,QAAQ,IAAI,QAAQ;AAAA,IAC3G,CAAC;AAAA,EACH;AAEA,iBAAe,UAAU,GAA0C;AACjE,UAAM,IAAI,MAAM,QAAQ,iBAAiB,CAAC;AAC1C,QAAI,CAAC,KAAK,OAAO,EAAE,WAAW,YAAY,CAAC,EAAE,OAAO,KAAK,KAAK,OAAO,EAAE,aAAa,YAAY,CAAC,EAAE,SAAS,KAAK,KAC5G,CAAC,MAAM,QAAQ,EAAE,KAAK,KAAK,CAAC,EAAE,MAAM,MAAM,OAAK,OAAO,MAAM,QAAQ,KACpE,CAAC,MAAM,QAAQ,EAAE,gBAAgB,KAAK,CAAC,EAAE,iBAAiB,MAAM,OAAK,OAAO,MAAM,QAAQ,EAAG,QAAO;AACzG,QAAI,QAAQ,YAAY,EAAE,aAAa,QAAQ,SAAU,QAAO;AAChE,WAAO,EAAE,QAAQ,EAAE,QAAQ,UAAU,EAAE,UAAU,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,EAAE;AAAA,EAClH;AAEA,SAAO,IAAI,UAAU,OAAM,MAAK;AAC9B,UAAM,IAAI,MAAM,UAAU,CAAC;AAC3B,QAAI,CAAC,EAAG,QAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;AACpD,UAAM,SAAS,oBAAI,IAAY;AAC/B,eAAW,MAAM,EAAE,iBAAkB,MAAK,CAAC,QAAQ,mBAAmB,MAAM,QAAQ,gBAAgB,GAAG,EAAE,MAAM,MAAM,SAAS,GAAG,EAAE,EAAG,QAAO,IAAI,EAAE;AACnJ,WAAO,EAAE,KAAK,EAAE,OAAO,MAAM,EAAE;AAAA,MAAO,CAAC,EAAE,QAAQ,KAAK,MACpD,OAAO,IAAI,OAAO,EAAE,KAAK,QAAQ,WAAW,aAAa,EAAE,UAAU,KAAK,MAAM,WAAW,EAAE,OAAO,UAAU,EAAE,SAAS,CAAC,EAAE;AAAA,IAC9H,EAAE,IAAI,CAAC,EAAE,QAAQ,KAAK,OAAO,EAAE,MAAM,KAAK,MAAM,aAAa,KAAK,aAAa,aAAa,KAAK,YAAY,UAAU,OAAO,GAAG,EAAE,EAAE,CAAC;AAAA,EACxI,CAAC;AAED,SAAO,KAAK,YAAY,OAAM,MAAK;AACjC,UAAM,IAAI,MAAM,UAAU,CAAC;AAC3B,QAAI,CAAC,EAAG,QAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;AACpD,QAAI,CAAC,6BAA6B,KAAK,EAAE,IAAI,OAAO,cAAc,KAAK,EAAE,EAAG,QAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;AACtI,UAAM,OAAO,MAAM,EAAE,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AAChD,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,KAAK,OAAO,KAAK,SAAS,YAChF,CAAC,KAAK,QAAQ,OAAO,KAAK,SAAS,YAAY,MAAM,QAAQ,KAAK,IAAI,KACtE,OAAO,KAAK,IAAI,EAAE,KAAK,OAAK,MAAM,UAAU,MAAM,MAAM,EAAG,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,GAAG,GAAG;AACvH,UAAM,QAAQ,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,MAAM,KAAK,SAAS,KAAK,IAAI;AAEhE,QAAI,CAAC,SAAS,CAAC,EAAE,iBAAiB,SAAS,MAAM,OAAO,EAAE,KAAM,QAAQ,mBAAmB,CAAC,MAAM,QAAQ,gBAAgB,GAAG,MAAM,OAAO,EAAE,EAAI,QAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;AAChM,UAAM,YAAY,MAAM,QAAQ,GAAG,MAAM,MAAM;AAC/C,QAAI,UAAW,QAAO,EAAE,KAAK,EAAE,OAAO,UAAU,MAAM,GAAG,UAAU,MAAM;AACzE,UAAM,UAAU,OAAO,WAAW;AAClC,UAAM,UAAU,QAAQ,WAAW,aAAa,EAAE,UAAU,MAAM,KAAK,MAAM,WAAW,EAAE,OAAO,UAAU,EAAE,UAAU,QAAQ,CAAC;AAChI,UAAM,QAAQ;AAAA,MAAE,UAAU,MAAM,KAAK;AAAA,MAAM,QAAQ,EAAE;AAAA,MAAQ,UAAU,EAAE;AAAA,MAAU;AAAA,MACjF,WAAW,QAAQ;AAAA,MAAW,eAAe,QAAQ;AAAA,IAAc;AACrE,QAAI,CAAC,QAAQ,SAAS;AACpB,cAAQ,WAAW,QAAQ,EAAE,GAAG,OAAO,QAAQ,WAAW,QAAQ,QAAQ,OAAO,CAAC;AAClF,aAAO,EAAE,KAAK,EAAE,OAAO,aAAa,QAAQ,GAAG,GAAG;AAAA,IACpD;AACA,UAAM,SAAS,MAAM,KAAK;AAC1B,UAAM,aAAa,OAAO,OAAO,WAAW,EAAE,EAAE,SAAS,SAAS,IAAI,UAAU,KAAK,QAAQ,MAAM;AACnG,QAAI,CAAC,UAAU,KAAK,IAAI,EAAG,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,QAAQ,GAAG,GAAG;AAC1F,QAAI,QAAQ,sBAAsB;AAChC,cAAQ,WAAW,QAAQ,EAAE,GAAG,OAAO,QAAQ,mBAAmB,CAAC;AAEnE,aAAO,EAAE,KAAK,EAAE,sBAAsB,MAAM,eAAe,QAAQ,eAAe,QAAQ,GAAG,GAAG;AAAA,IAClG;AACA,QAAI,QAAQ,mBAAmB,CAAC,MAAM,QAAQ,gBAAgB,GAAG,MAAM,OAAO,EAAE,EAAG,QAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;AACnI,UAAM,eAAe,MAAM,QAAQ,oBAAoB,GAAG,MAAM,OAAO,EAAE,KAAK,CAAC;AAC/E,UAAM,iBAAiB,MAAM,kBAAkB,GAAG,MAAM,OAAO,IAAI,MAAM,KAAK,MAAM,OAAO;AAC3F,QAAI,QAAQ,mBAAmB,CAAC,MAAM,QAAQ,gBAAgB,GAAG,MAAM,OAAO,EAAE,EAAG,QAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,GAAG,GAAG;AACnI,UAAM,UAAU,OAAO,OAAO;AAAA,MAAE,GAAG;AAAA,MAAc,GAAI,iBAAiB,EAAE,gBAAgB,OAAO,OAAO,cAAc,EAAE,IAAI,CAAC;AAAA,MAAI,UAAU,EAAE;AAAA,MAAU,QAAQ,EAAE;AAAA,MAC7J,OAAO,OAAO,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC;AAAA,MAAG,UAAU,MAAM,OAAO;AAAA,MAAI;AAAA,IAAQ,CAAC;AAC1E,QAAI;AAAE,YAAM,MAAM,GAAG,MAAM,QAAQ,OAAO,MAAM,KAAK,IAAI,EAAE;AAAA,IAAE,SACtD,OAAO;AAAE,UAAI,iBAAiB,kBAAkB;AAAE,gBAAQ,WAAW,QAAQ,EAAE,GAAG,OAAO,QAAQ,WAAW,QAAQ,MAAM,QAAQ,CAAC;AAAG,eAAO,EAAE,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,MAAM,SAAS,MAAM;AAAA,MAAE;AAAE,YAAM;AAAA,IAAM;AAC1N,YAAQ,WAAW,QAAQ,EAAE,GAAG,OAAO,QAAQ,UAAU,CAAC;AAC1D,UAAM,SAAS,MAAM,MAAM,KAAK,QAAQ,KAAK,MAAM,OAAO;AAC1D,WAAO,EAAE,KAAK,EAAE,QAAQ,QAAQ,CAAC;AAAA,EACnC,CAAC;AAUD,QAAM,cAAc,oBAAI,IAAwB;AAChD,QAAM,gBAAgB,CAAC,OAA2B,UAAkB,YAClE,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,KAAK,IAAI,SAAS,KAAK,MAAM,KAAK,CAAC,IAAI;AAC/F,QAAM,kBAAkB,cAAc,QAAQ,iBAAiB,KAAK,KAAK,KAAO,GAAK;AACrF,QAAM,iBAAiB,cAAc,QAAQ,gBAAgB,KAAO,CAAC;AAErE,WAAS,wBAAwB,MAAM,KAAK,IAAI,GAAS;AACvD,eAAW,CAAC,IAAI,OAAO,KAAK,aAAa;AACvC,UAAI,MAAM,QAAQ,aAAa,mBAAmB,MAAM,QAAQ,kBAAkB,gBAAiB,aAAY,OAAO,EAAE;AAAA,IAC1H;AAAA,EACF;AAEA,SAAO,IAAI,QAAQ,OAAM,MAAK;AAC5B,UAAM,IAAI,MAAM,UAAU,CAAC;AAC3B,QAAI,CAAC,EAAG,QAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;AAEpD,UAAM,MAAM,KAAK,IAAI;AACrB,4BAAwB,GAAG;AAC3B,QAAI,YAAY,QAAQ,eAAgB,QAAO,EAAE,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;AAElG,UAAM,YAAY,OAAO,WAAW;AACpC,UAAM,cAAc,GAAG,IAAI,IAAI,EAAE,IAAI,GAAG,EAAE,SAAS,QAAQ,UAAU,EAAE,CAAC,sBAAsB,SAAS;AAEvG,QAAI;AACJ,UAAM,SAAS,IAAI,eAAe;AAAA,MAChC,MAAM,YAAY;AAChB,cAAM,UAAU,IAAI,YAAY;AAChC,cAAM,OAAO,CAAC,SAAiB;AAC7B,cAAI;AACF,kBAAM,UAAU,YAAY,IAAI,SAAS;AACzC,gBAAI,QAAS,SAAQ,iBAAiB,KAAK,IAAI;AAC/C,uBAAW,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,UACzC,QAAQ;AACN,sBAAU;AAAA,UACZ;AAAA,QACF;AACA,oBAAY,IAAI,WAAW,EAAE,QAAQ,EAAE,QAAQ,UAAU,EAAE,UAAU,WAAW,KAAK,gBAAgB,KAAK,KAAK,CAAC;AAChH,kBAAU,MAAM,YAAY,OAAO,SAAS;AAG5C,aAAK;AAAA,QAA0B,WAAW;AAAA;AAAA,CAAM;AAAA,MAClD;AAAA,MACA,SAAS;AACP,kBAAU;AAAA,MACZ;AAAA,IACF,CAAC;AAED,WAAO,IAAI,SAAS,QAAQ;AAAA,MAC1B,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,iBAAiB;AAAA,QACjB,YAAY;AAAA,MACd;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAED,SAAO,KAAK,YAAY,OAAM,MAAK;AACjC,UAAM,IAAI,MAAM,UAAU,CAAC;AAC3B,QAAI,CAAC,EAAG,QAAO,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,EAAE,MAAM,OAAQ,SAAS,eAAe,GAAG,IAAI,KAAK,GAAG,GAAG;AAEzG,UAAM,OAAO,MAAM,EAAE,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AAChD,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,KAAK,YAAY,SAAS,OAAO,KAAK,WAAW,UAAU;AAClG,aAAO,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,EAAE,MAAM,QAAQ,SAAS,kBAAkB,GAAG,IAAI,MAAM,MAAM,KAAK,GAAG,GAAG;AAAA,IAClH;AAEA,UAAM,KAAK,KAAK,MAAM;AACtB,UAAM,YAAY,EAAE,IAAI,MAAM,WAAW;AACzC,4BAAwB;AACxB,UAAM,UAAU,YAAY,YAAY,IAAI,SAAS,IAAI;AACzD,QAAI,aAAa,CAAC,QAAS,QAAO,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,EAAE,MAAM,OAAQ,SAAS,0BAA0B,GAAG,GAAG,GAAG,GAAG;AACjI,QAAI,YAAY,QAAQ,WAAW,EAAE,UAAU,QAAQ,aAAa,EAAE,WAAW;AAC/E,aAAO,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,EAAE,MAAM,QAAQ,SAAS,6BAA6B,GAAG,GAAG,GAAG,GAAG;AAAA,IAC3G;AACA,QAAI,QAAS,SAAQ,iBAAiB,KAAK,IAAI;AAE/C,UAAM,kBAAkB,CAAC,YAAoB;AAC3C,YAAM,aAAa,KAAK,UAAU,OAAO;AACzC,UAAI,SAAS;AACX,gBAAQ,KAAK;AAAA,QAAyB,UAAU;AAAA;AAAA,CAAM;AAAA,MACxD;AACA,aAAO,EAAE,KAAK,OAAO;AAAA,IACvB;AAGA,QAAI,KAAK,WAAW,cAAc;AAChC,YAAM,SAAS,oBAAI,IAAY;AAC/B,iBAAW,OAAO,EAAE,iBAAkB,MAAK,CAAC,QAAQ,mBAAmB,MAAM,QAAQ,gBAAgB,GAAG,GAAG,MAAM,MAAM,SAAS,GAAG,GAAG,EAAG,QAAO,IAAI,GAAG;AAEvJ,YAAM,YAAY,MAAM,EACrB;AAAA,QAAO,CAAC,EAAE,QAAQ,KAAK,MACtB,OAAO,IAAI,OAAO,EAAE,KACpB,QAAQ,WAAW,aAAa,EAAE,UAAU,KAAK,MAAM,WAAW,EAAE,OAAO,UAAU,EAAE,SAAS,CAAC,EAAE;AAAA,MACrG,EACC,IAAI,CAAC,EAAE,QAAQ,KAAK,OAAO;AAAA,QAC1B,MAAM,KAAK;AAAA,QACX,aAAa,KAAK;AAAA,QAClB,aAAa,KAAK;AAAA,QAClB,UAAU,OAAO;AAAA,MACnB,EAAE;AAEJ,aAAO,gBAAgB,EAAE,SAAS,OAAO,QAAQ,EAAE,OAAO,UAAU,GAAG,GAAG,CAAC;AAAA,IAC7E;AAGA,QAAI,KAAK,WAAW,cAAc;AAChC,YAAM,WAAW,KAAK,QAAQ;AAC9B,YAAM,WAAW,KAAK,QAAQ,aAAa,CAAC;AAE5C,UAAI,OAAO,aAAa,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,GAAG;AAC3F,eAAO,gBAAgB,EAAE,SAAS,OAAO,OAAO,EAAE,MAAM,QAAQ,SAAS,iBAAiB,GAAG,GAAG,CAAC;AAAA,MACnG;AAEA,YAAM,QAAQ,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,MAAM,KAAK,SAAS,QAAQ;AAC/D,UAAI,CAAC,SAAS,CAAC,EAAE,iBAAiB,SAAS,MAAM,OAAO,EAAE,KAAM,QAAQ,mBAAmB,CAAC,MAAM,QAAQ,gBAAgB,GAAG,MAAM,OAAO,EAAE,GAAI;AAC9I,eAAO,gBAAgB,EAAE,SAAS,OAAO,OAAO,EAAE,MAAM,QAAQ,SAAS,iBAAiB,GAAG,GAAG,CAAC;AAAA,MACnG;AACA,YAAM,YAAY,MAAM,QAAQ,GAAG,MAAM,MAAM;AAC/C,UAAI,UAAW,QAAO,gBAAgB,EAAE,SAAS,OAAO,OAAO,EAAE,MAAM,QAAQ,SAAS,UAAU,OAAO,MAAM,EAAE,QAAQ,UAAU,OAAO,EAAE,GAAG,GAAG,CAAC;AAEnJ,YAAM,UAAU,OAAO,WAAW;AAClC,YAAM,UAAU,QAAQ,WAAW,aAAa,EAAE,UAAU,MAAM,KAAK,MAAM,WAAW,EAAE,OAAO,UAAU,EAAE,UAAU,QAAQ,CAAC;AAChI,YAAM,QAAQ;AAAA,QAAE,UAAU,MAAM,KAAK;AAAA,QAAM,QAAQ,EAAE;AAAA,QAAQ,UAAU,EAAE;AAAA,QAAU;AAAA,QACjF,WAAW,QAAQ;AAAA,QAAW,eAAe,QAAQ;AAAA,MAAc;AAErE,UAAI,CAAC,QAAQ,SAAS;AACpB,gBAAQ,WAAW,QAAQ,EAAE,GAAG,OAAO,QAAQ,WAAW,QAAQ,QAAQ,OAAO,CAAC;AAClF,eAAO,gBAAgB,EAAE,SAAS,OAAO,OAAO,EAAE,MAAM,QAAQ,SAAS,mCAAmC,GAAG,GAAG,CAAC;AAAA,MACrH;AAEA,YAAM,SAAS,MAAM,KAAK;AAC1B,YAAM,aAAa,OAAO,OAAO,WAAW,EAAE,EAAE,SAAS,SAAS,IAAI,UAAU,KAAK,QAAQ,MAAM;AACnG,UAAI,CAAC,UAAU,QAAQ,GAAG;AACxB,eAAO,gBAAgB,EAAE,SAAS,OAAO,OAAO,EAAE,MAAM,QAAQ,SAAS,yBAAyB,GAAG,GAAG,CAAC;AAAA,MAC3G;AAEA,UAAI,QAAQ,sBAAsB;AAChC,gBAAQ,WAAW,QAAQ,EAAE,GAAG,OAAO,QAAQ,mBAAmB,CAAC;AACnE,eAAO,gBAAgB;AAAA,UACrB,SAAS;AAAA,UACT,QAAQ;AAAA,YACN,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,4BAA4B,QAAQ,aAAa,IAAI,CAAC;AAAA,YACtF,SAAS;AAAA,YACT,sBAAsB;AAAA,YACtB,eAAe,QAAQ;AAAA,YACvB;AAAA,UACF;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH;AAEA,UAAI,QAAQ,mBAAmB,CAAC,MAAM,QAAQ,gBAAgB,GAAG,MAAM,OAAO,EAAE,GAAG;AACjF,eAAO,gBAAgB,EAAE,SAAS,OAAO,OAAO,EAAE,MAAM,QAAQ,SAAS,iBAAiB,GAAG,GAAG,CAAC;AAAA,MACnG;AACA,YAAM,eAAe,MAAM,QAAQ,oBAAoB,GAAG,MAAM,OAAO,EAAE,KAAK,CAAC;AAC/E,YAAM,iBAAiB,MAAM,kBAAkB,GAAG,MAAM,OAAO,IAAI,MAAM,KAAK,MAAM,OAAO;AAC3F,UAAI,QAAQ,mBAAmB,CAAC,MAAM,QAAQ,gBAAgB,GAAG,MAAM,OAAO,EAAE,GAAG;AACjF,eAAO,gBAAgB,EAAE,SAAS,OAAO,OAAO,EAAE,MAAM,QAAQ,SAAS,iBAAiB,GAAG,GAAG,CAAC;AAAA,MACnG;AACA,YAAM,UAAU,OAAO,OAAO;AAAA,QAAE,GAAG;AAAA,QAAc,GAAI,iBAAiB,EAAE,gBAAgB,OAAO,OAAO,cAAc,EAAE,IAAI,CAAC;AAAA,QAAI,UAAU,EAAE;AAAA,QAAU,QAAQ,EAAE;AAAA,QAC7J,OAAO,OAAO,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC;AAAA,QAAG,UAAU,MAAM,OAAO;AAAA,QAAI;AAAA,MAAQ,CAAC;AAE1E,UAAI;AAAE,cAAM,MAAM,GAAG,MAAM,QAAQ,OAAO,MAAM,KAAK,IAAI,EAAE;AAAA,MAAE,SACtD,OAAO;AACZ,YAAI,iBAAiB,kBAAkB;AAAE,kBAAQ,WAAW,QAAQ,EAAE,GAAG,OAAO,QAAQ,WAAW,QAAQ,MAAM,QAAQ,CAAC;AAAG,iBAAO,gBAAgB,EAAE,SAAS,OAAO,OAAO,EAAE,MAAM,QAAQ,SAAS,MAAM,SAAS,MAAM,EAAE,QAAQ,MAAM,SAAS,OAAO,EAAE,GAAG,GAAG,CAAC;AAAA,QAAE;AACtQ,cAAM;AAAA,MACR;AACA,cAAQ,WAAW,QAAQ,EAAE,GAAG,OAAO,QAAQ,UAAU,CAAC;AAC1D,YAAM,gBAAgB,MAAM,MAAM,KAAK,QAAQ,UAAU,OAAO;AAEhE,aAAO,gBAAgB;AAAA,QACrB,SAAS;AAAA,QACT,QAAQ;AAAA,UACN,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,UAAU,aAAa,EAAE,CAAC;AAAA,UAC/D;AAAA,QACF;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAEA,WAAO,gBAAgB,EAAE,SAAS,OAAO,OAAO,EAAE,MAAM,QAAQ,SAAS,mBAAmB,GAAG,GAAG,CAAC;AAAA,EACrG,CAAC;AACD,SAAO;AACT;","names":["principal"]}