@certscore/mcp 0.2.19 → 0.2.21

package/dist/index.d.ts

@@ -11,4 +11,5 @@ export declare function getCertScoreMcpDoctorReport(options?: CertScoreMcpDoctor
     exitCode: number;
     lines: string[];
 }>;
+export { captureMcpResponse, withResponseCapture } from "./response-capture.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAMrD,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAgDD,wBAAsB,2BAA2B,CAAC,OAAO,GAAE,yBAA8B;;;GAyFxF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAMrD,MAAM,WAAW,yBAAyB;IACxC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAgDD,wBAAsB,2BAA2B,CAAC,OAAO,GAAE,yBAA8B;;;GAyFxF;AAsBD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -163,3 +163,4 @@ if (isMainModule()) {
         process.exitCode = 1;
     });
 }
+export { captureMcpResponse, withResponseCapture } from "./response-capture.js";

package/dist/response-capture.d.ts

@@ -0,0 +1,12 @@
+import { type McpResponseSummary } from "@website-signal-risk-scanner/shared/dist/mcp-response-summary.js";
+type SafeMetadata = {
+    message?: string;
+    recommendedNextAction?: string;
+    upstream?: McpResponseSummary["upstream"];
+};
+/** Only call with template-owned text. Never mark upstream messages or caller values. */
+export declare function withResponseCapture<T extends object>(result: T, metadata: SafeMetadata): T;
+export declare function transferResponseCapture<T extends object>(payload: unknown, result: T): T;
+export declare function captureMcpResponse(result: unknown, protocolError?: unknown): McpResponseSummary;
+export {};
+//# sourceMappingURL=response-capture.d.ts.map

package/dist/response-capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-capture.d.ts","sourceRoot":"","sources":["../src/response-capture.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,kEAAkE,CAAC;AAErI,KAAK,YAAY,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAA;CAAE,CAAC;AAEpH,yFAAyF;AACzF,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,GAAG,CAAC,CAG1F;AACD,wBAAgB,uBAAuB,CAAC,CAAC,SAAS,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAGxF;AAGD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,OAAO,GAAG,kBAAkB,CAsC/F"}

package/dist/response-capture.js

@@ -0,0 +1,64 @@
+import { mcpResponseSummarySchema } from "@website-signal-risk-scanner/shared/dist/mcp-response-summary.js";
+const controlled = new WeakMap();
+/** Only call with template-owned text. Never mark upstream messages or caller values. */
+export function withResponseCapture(result, metadata) {
+    controlled.set(result, metadata);
+    return result;
+}
+export function transferResponseCapture(payload, result) {
+    const metadata = payload && typeof payload === "object" ? controlled.get(payload) : undefined;
+    return metadata ? withResponseCapture(result, metadata) : result;
+}
+const record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
+const token = (value) => typeof value === "string" && /^[a-zA-Z0-9_.:-]{1,80}$/.test(value) ? value : undefined;
+export function captureMcpResponse(result, protocolError) {
+    const outer = record(result);
+    let payload = record(outer.structuredContent);
+    if (!Object.keys(payload).length && Array.isArray(outer.content)) {
+        const text = outer.content.find((item) => item?.type === "text")?.text;
+        if (typeof text === "string") {
+            try {
+                payload = record(JSON.parse(text));
+            }
+            catch { /* Markdown is never retained. */ }
+        }
+    }
+    const protocol = record(protocolError);
+    const error = protocolError ? record(protocol.data) : record(payload.error);
+    const safe = controlled.get(protocolError ? protocol : outer) ?? {};
+    const retryAfterSeconds = Object.hasOwn(error, "retryAfterSeconds") ? error.retryAfterSeconds : payload.retryAfterSeconds;
+    const summary = {
+        version: 1, captureBasis: "response_generated", templateVersion: "2026-09-11.1",
+        kind: protocolError ? "protocol_error" : "tool_result", isError: protocolError ? true : outer.isError === true,
+        type: token(payload.type), status: token(payload.status), errorCode: token(error.code), reasonCode: token(error.reasonCode),
+        ...(Number.isInteger(protocolError ? protocol.code : error.mcpCode) ? { mcpCode: protocolError ? protocol.code : error.mcpCode } : {}),
+        ...(typeof error.retryable === "boolean" ? { retryable: error.retryable } : {}),
+        ...(retryAfterSeconds === null || Number.isInteger(retryAfterSeconds) && retryAfterSeconds >= 0 && retryAfterSeconds <= 86400 ? { retryAfterSeconds } : {}),
+        recommendedNextTool: payload.recommendedNextTool === null ? null : token(payload.recommendedNextTool),
+        ...safe,
+        textOmitted: Boolean((protocolError ? protocol.message : error.message) && !safe.message || (error.recommendedNextAction || payload.recommendedNextAction) && !safe.recommendedNextAction),
+        summaryTruncated: false,
+    };
+    // Issues are captured only from our controlled validation response.
+    if (safe.message && Array.isArray(error.issues))
+        summary.issues = error.issues.slice(0, 8).map((issue) => ({ field: token(issue.field) ?? "arguments", code: token(issue.code) ?? "invalid", ...(issue.required === true ? { required: true } : {}) }));
+    for (const [key, limit] of [["message", 400], ["recommendedNextAction", 800]]) {
+        if ((summary[key]?.length ?? 0) > limit) {
+            summary[key] = summary[key].slice(0, limit);
+            summary.summaryTruncated = true;
+        }
+    }
+    // Bound UTF-8 bytes as well as character counts; preserve diagnosis before prose.
+    for (const key of ["recommendedNextAction", "message", "issues"]) {
+        if (Buffer.byteLength(JSON.stringify(summary)) <= 2048)
+            break;
+        delete summary[key];
+        summary.summaryTruncated = true;
+        summary.textOmitted = true;
+    }
+    const parsed = mcpResponseSummarySchema.safeParse(summary);
+    return parsed.success ? parsed.data : {
+        version: 1, captureBasis: "response_generated", templateVersion: "2026-09-11.1",
+        kind: summary.kind, isError: summary.isError, textOmitted: true, summaryTruncated: true,
+    };
+}

package/dist/server.d.ts

@@ -1,5 +1,8 @@
+import type { McpResponseSummary } from "@website-signal-risk-scanner/shared";
+import { type McpCallerInput } from "@website-signal-risk-scanner/shared/dist/mcp-caller-input.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import type { RequestInfo } from "@modelcontextprotocol/sdk/types.js";
+import { type RequestInfo } from "@modelcontextprotocol/sdk/types.js";
+import { type McpTaskContext } from "@website-signal-risk-scanner/shared/dist/mcp-product-context.js";
 export interface CertScoreMcpOptions {
     apiKey?: string;
     baseUrl?: string;
@@ -12,12 +15,44 @@ export interface CertScoreMcpOptions {
     toolProfile?: "full" | "light";
     initialPreConsentPreviewWaitMs?: number;
     exampleDomainDemoUrl?: string | null;
+    onToolInvocationStarted?: (input: {
+        requestId: string;
+        toolName: string;
+        startedAt: string;
+    }) => void | Promise<void>;
     onToolInvocation?: (observation: McpToolInvocationObservation, requestContext: McpToolInvocationRequestContext) => void | Promise<void>;
 }
 export type McpToolInvocationRequestContext = {
     headers: RequestInfo["headers"] | null;
 };
 export type McpToolInvocationObservation = {
+    requestId?: string;
+    timing?: {
+        startedAt: string;
+        responseGeneratedAt: string;
+    };
+    callerInput?: McpCallerInput;
+    captureBasis?: "protocol_request";
+    taskContext?: McpTaskContext;
+    response?: {
+        bytes: number | null;
+        truncated: boolean | null;
+        effectiveMaxBytes?: number;
+        summary?: McpResponseSummary;
+    };
+    requestArguments?: {
+        values: Record<string, string | number | boolean>;
+        omitted: boolean;
+    };
+    rateLimit?: {
+        kind: "scan_creation" | "upstream";
+        retryAfterSeconds?: number;
+        scope?: string;
+        windowId?: string;
+        limit?: number;
+        used?: number;
+        windowSeconds?: number;
+    };
     durationMs: number;
     errorCode: string | null;
     freshness: "latest" | "refresh" | null;
@@ -34,6 +69,11 @@ export type McpToolInvocationObservation = {
     toolName: string;
     transportOutcome: "mcp_result" | "mcp_error";
 };
+/** Retain only bounded tool options; URL paths, queries and unknown/free-text inputs are omitted. */
+export declare function projectMcpTelemetryArguments(args: Record<string, unknown>): {
+    values: Record<string, string | number | boolean>;
+    omitted: boolean;
+};
 export declare function projectMcpToolInvocationObservation(input: {
     args: unknown;
     durationMs: number;

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAItE,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,wBAAwB,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,MAAM,GAAG,IAAI,CAAC;IAC9E,gCAAgC,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACvD,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,gBAAgB,CAAC,EAAE,WAAW,GAAG,eAAe,GAAG,IAAI,CAAC;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/B,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,gBAAgB,CAAC,EAAE,CACjB,WAAW,EAAE,4BAA4B,EACzC,cAAc,EAAE,+BAA+B,KAC5C,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAID,MAAM,MAAM,+BAA+B,GAAG;IAC5C,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;CACxC,CAAC;AA4BF,MAAM,MAAM,4BAA4B,GAAG;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAC;IACvC,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,SAAS,GAAG,OAAO,GAAG,cAAc,CAAC;IAC9C,YAAY,EAAE,SAAS,GAAG,cAAc,CAAC;IACzC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qBAAqB,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;IACtE,YAAY,EAAE,QAAQ,GAAG,KAAK,GAAG,aAAa,GAAG,gBAAgB,CAAC;IAClE,QAAQ,EAAE,OAAO,GAAG,OAAO,GAAG,YAAY,GAAG,IAAI,CAAC;IAClD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,YAAY,GAAG,WAAW,CAAC;CAC9C,CAAC;AAqKF,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,4BAA4B,CAqD/B;AAkBD,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,mBAAwB,aAwZzE"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAE9E,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAG1H,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAA8C,KAAK,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAClH,OAAO,EAA0B,KAAK,cAAc,EAAE,MAAM,iEAAiE,CAAC;AAI9H,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,wBAAwB,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,MAAM,GAAG,IAAI,CAAC;IAC9E,gCAAgC,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACvD,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,gBAAgB,CAAC,EAAE,WAAW,GAAG,eAAe,GAAG,IAAI,CAAC;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/B,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,uBAAuB,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtH,gBAAgB,CAAC,EAAE,CACjB,WAAW,EAAE,4BAA4B,EACzC,cAAc,EAAE,+BAA+B,KAC5C,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAID,MAAM,MAAM,+BAA+B,GAAG;IAC5C,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;CACxC,CAAC;AA4BF,MAAM,MAAM,4BAA4B,GAAG;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,kBAAkB,CAAA;KAAE,CAAC;IACzH,gBAAgB,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3F,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,eAAe,GAAG,UAAU,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzK,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAC;IACvC,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,SAAS,GAAG,OAAO,GAAG,cAAc,CAAC;IAC9C,YAAY,EAAE,SAAS,GAAG,cAAc,CAAC;IACzC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qBAAqB,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;IACtE,YAAY,EAAE,QAAQ,GAAG,KAAK,GAAG,aAAa,GAAG,gBAAgB,CAAC;IAClE,QAAQ,EAAE,OAAO,GAAG,OAAO,GAAG,YAAY,GAAG,IAAI,CAAC;IAClD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,YAAY,GAAG,WAAW,CAAC;CAC9C,CAAC;AAqKF,qGAAqG;AACrG,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;EAwBzE;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,4BAA4B,CAgE/B;AAiCD,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,mBAAwB,aAudzE"}

package/dist/server.js

@@ -1,6 +1,12 @@
+import { randomUUID } from "node:crypto";
+import { captureMcpResponse, withResponseCapture } from "./response-capture.js";
+import { z } from "zod";
+import { captureMcpCallerInput } from "@website-signal-risk-scanner/shared/dist/mcp-caller-input.js";
 import { CertScoreClient } from "@certscore/sdk";
 import { certScoreMcpToolContracts, isCanonicalScanId } from "@certscore/api-contracts";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { CallToolRequestSchema, ErrorCode, McpError } from "@modelcontextprotocol/sdk/types.js";
+import { sanitizeMcpTaskContext } from "@website-signal-risk-scanner/shared/dist/mcp-product-context.js";
 import { CERTSCORE_MCP_VERSION } from "./version.js";
 import { boundEvidencePacket, buildScanBundle, exportFindings, findingListText, limitPreConsentRows, markdownReportText, MAX_EVIDENCE_PACKET_CHARS, normalizeDetail, normalizeFormat, paginateFindingList, preConsentInventoryText, pulseReportText, scanBundleText, scanSiteText, scanStatusText, toInvalidArgumentsToolError, toInvalidScanIdToolError, toToolError, toToolResult, withMcpAgentGuidance, withMcpScanProvenanceGuidance } from "./tools.js";
 const LIGHT_MCP_BUNDLE_RESPONSE_CEILING_BYTES = 25_000;
@@ -159,6 +165,38 @@ function isCertScoreCanaryUrl(value) {
         return false;
     }
 }
+/** Retain only bounded tool options; URL paths, queries and unknown/free-text inputs are omitted. */
+export function projectMcpTelemetryArguments(args) {
+    const values = {};
+    const options = {
+        freshness: ["latest", "refresh"], scanFrom: ["eu_de", "eu_ie", "california"],
+        detail: ["tiny", "quick", "standard", "full", "summary", "evidence", "findings"], format: ["json", "markdown"],
+    };
+    for (const [key, allowed] of Object.entries(options)) {
+        if (typeof args[key] === "string" && allowed.includes(args[key]))
+            values[key] = args[key];
+    }
+    for (const key of ["scanId", "jobId", "findingId"]) {
+        const token = boundedTelemetryToken(args[key], 128);
+        if (token)
+            values[key] = token;
+    }
+    for (const key of ["maxWaitSeconds", "maxBytes", "maxFindings", "maxPreConsentRows", "maxRows", "limit", "offset"]) {
+        const value = args[key];
+        if (typeof value === "number" && Number.isInteger(value) && value >= 0 && value <= 1_000_000)
+            values[key] = value;
+    }
+    if (typeof args.waitForCompletion === "boolean")
+        values.waitForCompletion = args.waitForCompletion;
+    const url = telemetryUrl(args.url);
+    if (url)
+        values.url = url;
+    const domain = telemetryHostname(args.domain);
+    if (domain && /^[a-z0-9.-]+$/.test(domain))
+        values.domain = domain;
+    const omitted = Object.keys(args).some((key) => !(key in values) || args[key] !== values[key]);
+    return { values, omitted };
+}
 export function projectMcpToolInvocationObservation(input) {
     const args = input.args && typeof input.args === "object" && !Array.isArray(input.args)
         ? input.args
@@ -167,9 +205,17 @@ export function projectMcpToolInvocationObservation(input) {
     const error = result.error && typeof result.error === "object" && !Array.isArray(result.error)
         ? result.error
         : null;
-    const errorCode = boundedTelemetryToken(error?.code ?? result.errorCode, 100);
+    const completedNoGo = result.status === "completed_limited"
+        && result.resultDisposition === "no_go";
+    // A completed no-go is a usable terminal scan result. Agent guidance embeds
+    // its reason-specific remedy in `error`, but the MCP tool call itself
+    // succeeded and must not be counted as a transport or invocation failure.
+    const errorCode = completedNoGo
+        ? null
+        : boundedTelemetryToken(error?.code ?? result.errorCode, 100);
     const rateLimited = errorCode === "rate_limited" || result.status === "rate_limited";
-    const isError = Boolean(input.result?.isError) || Boolean(error);
+    const isError = !completedNoGo
+        && (Boolean(input.result?.isError) || Boolean(error));
     const outcome = rateLimited ? "rate_limited" : isError ? "error" : "success";
     const resultScanId = boundedTelemetryToken(result.scanId ?? result.scan_id ?? result.jobId, 128);
     const inputScanId = boundedTelemetryToken(args.scanId, 128);
@@ -192,6 +238,8 @@ export function projectMcpToolInvocationObservation(input) {
                     ? "new"
                     : "unavailable";
     return {
+        requestArguments: projectMcpTelemetryArguments(args),
+        ...(rateLimited ? { rateLimit: projectMcpRateLimit(error ?? result) } : {}),
         durationMs: Math.max(0, Math.min(Math.round(input.durationMs), 3_600_000)),
         errorCode: rateLimited ? "rate_limited" : errorCode,
         freshness: args.freshness === "refresh" ? "refresh" : input.toolName === "certscore_scan_site" ? "latest" : null,
@@ -205,13 +253,30 @@ export function projectMcpToolInvocationObservation(input) {
             : result.scanFrom === "eu_de" || result.scanFrom === "eu_ie" || result.scanFrom === "california"
                 ? result.scanFrom
                 : null,
-        scanId: resultScanId ?? inputScanId,
+        scanId: outcome === "error" && ["invalid_scan_id", "invalid_arguments", "invalid_url", "unknown_tool"].includes(errorCode ?? "")
+            ? null : resultScanId ?? inputScanId,
         scanStatus: boundedTelemetryToken(result.status, 64),
         targetHostname,
         toolName: input.toolName,
         transportOutcome: isError ? "mcp_error" : "mcp_result",
     };
 }
+function projectMcpRateLimit(error) {
+    const creation = error.creationRateLimit && typeof error.creationRateLimit === "object" && !Array.isArray(error.creationRateLimit)
+        ? error.creationRateLimit : null;
+    const projected = { kind: creation ? "scan_creation" : "upstream" };
+    for (const key of ["scope", "windowId"]) {
+        const value = boundedTelemetryToken(creation?.[key], 128);
+        if (value)
+            projected[key] = value;
+    }
+    for (const key of ["retryAfterSeconds", "limit", "used", "windowSeconds"]) {
+        const value = key === "retryAfterSeconds" ? error[key] : creation?.[key];
+        if (typeof value === "number" && Number.isInteger(value) && value >= 0 && value <= 1_000_000)
+            projected[key] = value;
+    }
+    return projected;
+}
 function observeToolInvocation(observer, observation, requestContext) {
     if (!observer)
         return;
@@ -247,6 +312,7 @@ export function createCertScoreMcpServer(options = {}) {
     server.createToolError = (message) => message.includes("Input validation error:")
         ? toInvalidArgumentsToolError(message)
         : sdkCreateToolError(message);
+    const registeredToolNames = new Set();
     const lightTools = new Set(["certscore_scan_site", "certscore_get_scan_status", "certscore_get_scan_bundle"]);
     const scanIdTools = new Set([
         "certscore_explain_finding",
@@ -259,44 +325,105 @@ export function createCertScoreMcpServer(options = {}) {
         "certscore_get_scan_status",
         "certscore_list_findings",
     ]);
-    const registerMcpTool = server.registerTool.bind(server);
-    const registerTool = (name, contract, handler) => {
-        if (options.toolProfile === "light" && !lightTools.has(name)) {
-            return;
-        }
-        const typedHandler = handler;
-        registerMcpTool(name, contract, async (input, extra) => {
+    // Intercept SDK registration through its public API so lookup/validation errors
+    // and original arguments are observed once, before SDK normalization. Restore
+    // the registration method after constructing this server; no private handler map.
+    const registerRequest = server.server.setRequestHandler.bind(server.server);
+    server.server.setRequestHandler = ((schema, handler) => {
+        if (schema !== CallToolRequestSchema)
+            return registerRequest(schema, handler);
+        return registerRequest(CallToolRequestSchema, async (request, extra) => {
             const startedAt = Date.now();
+            const requestId = randomUUID();
+            const name = request.params.name;
+            if (options.onToolInvocationStarted) {
+                void Promise.resolve().then(() => options.onToolInvocationStarted({ requestId, toolName: name, startedAt: new Date(startedAt).toISOString() }))
+                    .catch(() => console.error("[certscore-mcp] request-start observation failed"));
+            }
+            const args = request.params.arguments ?? {};
+            const taskContext = sanitizeMcpTaskContext(args.taskContext);
+            const forwardedRequest = name === "certscore_scan_site" && args.taskContext !== undefined && !taskContext
+                ? {
+                    ...request,
+                    params: {
+                        ...request.params,
+                        arguments: Object.fromEntries(Object.entries(args).filter(([key]) => key !== "taskContext")),
+                    },
+                }
+                : request;
+            const known = registeredToolNames.has(name);
+            let result;
+            let protocolFailure;
             try {
-                const scanId = input && typeof input === "object" && !Array.isArray(input)
-                    ? input.scanId
-                    : null;
-                const result = scanIdTools.has(name) && !isCanonicalScanId(scanId)
-                    ? toInvalidScanIdToolError()
-                    : await typedHandler(input, extra);
-                observeToolInvocation(options.onToolInvocation, projectMcpToolInvocationObservation({
-                    args: input,
-                    durationMs: Date.now() - startedAt,
-                    result,
-                    toolName: name,
-                }), { headers: extra.requestInfo?.headers ?? null });
+                if (!known) {
+                    result = { isError: true, structuredContent: { error: { code: "unknown_tool" } } };
+                    const availableTools = [...registeredToolNames];
+                    const recommendedNextAction = "Refresh the available tools using your MCP client's tool discovery (tools/list), then call a supported tool.";
+                    throw withResponseCapture(new McpError(ErrorCode.InvalidParams, `This tool is unavailable on this endpoint. ${recommendedNextAction} Available tools: ${availableTools.join(", ")}.`, { code: "unknown_tool", retryable: false, recommendedNextAction, availableTools }), { message: `This tool is unavailable on this endpoint. ${recommendedNextAction} Available tools: ${availableTools.join(", ")}.`, recommendedNextAction });
+                }
+                const contract = certScoreMcpToolContracts.find(candidate => candidate.name === name);
+                const validation = z.object(contract.inputSchema).safeParse(forwardedRequest.params.arguments ?? {});
+                result = validation.success
+                    ? await handler(forwardedRequest, extra)
+                    : toInvalidArgumentsToolError(`Input validation error: tool ${name}`, {
+                        tool: name,
+                        issues: validation.error.issues.map(issue => ({
+                            // Only schema-owned top-level names; never echo values or dynamic keys.
+                            field: typeof issue.path[0] === "string" && Object.hasOwn(contract.inputSchema, issue.path[0]) ? issue.path[0] : "arguments",
+                            code: issue.code,
+                            ...(issue.code === "invalid_type" && issue.received === "undefined" ? { required: true } : {}),
+                        })).filter((issue, index, issues) => issues.findIndex(other => other.field === issue.field) === index).slice(0, 8),
+                    });
                 return result;
             }
             catch (error) {
-                observeToolInvocation(options.onToolInvocation, {
-                    ...projectMcpToolInvocationObservation({
-                        args: input,
-                        durationMs: Date.now() - startedAt,
-                        result: { isError: true, structuredContent: { error: { code: "handler_exception" } } },
-                        toolName: name,
-                    }),
-                    errorCode: "handler_exception",
-                    outcome: "error",
-                    transportOutcome: "mcp_error",
-                }, { headers: extra.requestInfo?.headers ?? null });
+                protocolFailure = error;
+                result ??= { isError: true, structuredContent: { error: { code: "handler_exception" } } };
                 throw error;
             }
+            finally {
+                try {
+                    const observation = projectMcpToolInvocationObservation({ args, durationMs: Date.now() - startedAt, result, toolName: name });
+                    if (!known)
+                        observation.errorCode = "unknown_tool";
+                    else if (observation.outcome === "error" && !observation.errorCode)
+                        observation.errorCode = "protocol_error";
+                    const payload = telemetryResultRecord(result);
+                    const metadata = payload.mcpMetadata;
+                    observeToolInvocation(options.onToolInvocation, {
+                        ...observation,
+                        requestId,
+                        timing: { startedAt: new Date(startedAt).toISOString(), responseGeneratedAt: new Date().toISOString() },
+                        captureBasis: "protocol_request",
+                        callerInput: captureMcpCallerInput(args, request.params._meta),
+                        ...(taskContext ? { taskContext } : {}),
+                        response: {
+                            summary: captureMcpResponse(result, protocolFailure),
+                            bytes: protocolFailure ? null : Math.min(10_000_000, Buffer.byteLength(JSON.stringify(result ?? null))),
+                            truncated: typeof metadata?.truncated === "boolean" ? metadata.truncated : null,
+                            ...(typeof metadata?.effectiveMaxBytes === "number" ? { effectiveMaxBytes: metadata.effectiveMaxBytes } : {}),
+                        },
+                    }, { headers: extra.requestInfo?.headers ?? null });
+                }
+                catch {
+                    // Best-effort telemetry must never replace a tool response or its error.
+                    console.error("[certscore-mcp] telemetry projection failed");
+                }
+            }
         });
+    });
+    const registerMcpTool = server.registerTool.bind(server);
+    const registerTool = (name, contract, handler) => {
+        if (options.toolProfile === "light" && !lightTools.has(name))
+            return;
+        const typedHandler = handler;
+        registerMcpTool(name, contract, async (input, extra) => {
+            const scanId = input && typeof input === "object" && !Array.isArray(input)
+                ? input.scanId : null;
+            return scanIdTools.has(name) && !isCanonicalScanId(scanId)
+                ? toInvalidScanIdToolError() : typedHandler(input, extra);
+        });
+        registeredToolNames.add(name);
     };
     registerTool("certscore_scan_site", toolContract("certscore_scan_site"), async (input, extra) => {
         const toolStartedAtMs = Date.now();
@@ -304,11 +431,13 @@ export function createCertScoreMcpServer(options = {}) {
         const client = clientForRequest(extra);
         const demoSubstitution = exampleDomainDemoSubstitution(input.url, options.exampleDomainDemoUrl);
         const effectiveUrl = demoSubstitution?.effectiveUrl ?? input.url;
+        let creationCompleted = false;
         try {
             const created = await client.scans.create(effectiveUrl, {
                 freshness: input.freshness ?? "latest",
                 scanFrom: input.scanFrom
             });
+            creationCompleted = true;
             console.log(JSON.stringify({
                 event: "mcp.certscore_scan_site.creation_completed",
                 durationMs: Date.now() - creationStartedAtMs,
@@ -387,7 +516,7 @@ export function createCertScoreMcpServer(options = {}) {
                 durationMs: Date.now() - creationStartedAtMs,
                 errorName: error instanceof Error ? error.name : "UnknownError",
             }));
-            return toToolError(error);
+            return toToolError(error, { scanCreation: !creationCompleted });
         }
     });
     registerTool("certscore_get_scan", toolContract("certscore_get_scan"), async ({ scanId }) => {
@@ -560,5 +689,6 @@ export function createCertScoreMcpServer(options = {}) {
             return toToolError(error);
         }
     });
+    server.server.setRequestHandler = registerRequest;
     return server;
 }

package/dist/tools.d.ts

@@ -13,8 +13,17 @@ type ActionableError = {
     mcpCode?: number;
 };
 export declare function toToolResult(payload: unknown, text?: string): CallToolResult;
-export declare function toToolError(error: unknown): CallToolResult;
-export declare function toInvalidArgumentsToolError(errorMessage: string): CallToolResult;
+export declare function toToolError(error: unknown, context?: {
+    scanCreation?: boolean;
+}): CallToolResult;
+export declare function toInvalidArgumentsToolError(errorMessage: string, validation?: {
+    tool: string;
+    issues: {
+        field: string;
+        code: string;
+        required?: boolean;
+    }[];
+}): CallToolResult;
 export declare function toInvalidScanIdToolError(): CallToolResult;
 export declare function withMcpAgentGuidance<T extends Record<string, any>>(value: T, fallbackProvenanceMode?: ScanProvenanceMode, pollGuidanceContext?: McpPollGuidanceContext): T & {
     error: ActionableError | null;

package/dist/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAkB,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,yBAAyB,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG5M,eAAO,MAAM,yBAAyB,SAAU,CAAC;AAiBjD,KAAK,sBAAsB,GAAG,eAAe,GAAG,aAAa,GAAG,UAAU,CAAC;AAE3E,KAAK,kBAAkB,GAAG,kBAAkB,GAAG,gCAAgC,GAAG,yBAAyB,GAAG,SAAS,CAAC;AAcxH,KAAK,eAAe,GAAG;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AA0CF,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,cAAc,CAa5E;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAsD1D;AAED,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,CA0ChF;AAED,wBAAgB,wBAAwB,IAAI,cAAc,CAczD;AA2GD,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAChE,KAAK,EAAE,CAAC,EACR,sBAAsB,GAAE,kBAA8B,EACtD,mBAAmB,GAAE,sBAAmC,GACvD,CAAC,GAAG;IACL,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,yBAAyB,EAAE,MAAM,CAAC;CACnC,CAuDA;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,sBAAsB,EAAE,kBAAkB;;;;;;;;WA3D3G,eAAe,GAAG,IAAI;+BACF,MAAM;EAgElC;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,kBAAkB,SAA4B,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0C9H;AA6XD,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,WAAW,CAE5E;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,WAAW,CAE5E;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,iBAEjD;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,iBAGlD;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,UAAU,EAAE,CAQpE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW;;;;;;;;;;;;;;;;;;;;EAsBjD;AAED,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnE,OAAO,EAAE,CAAC,EACV,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAChD,CAAC,CAoBH;AAED,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnE,OAAO,EAAE,CAAC,EACV,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACjC,CAAC,CA2BH;AA2KD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,UAexD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,YAAY,GAAE,MAAM,EAAO,UAiBnF;AAqJD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,SAAiC,UAcjG;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,UAqBjE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,SAAqB,UAoBrF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,UAS5D;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,UA+HzD;AA2ED,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,MAAM,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;IACtD,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,WAAW,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yBAAyB,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAC7D,MAAM,EAAE,WAAW,GAAG,IAAI,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,IAAI,EAAE,YAAY,CAAC;CACpB,uBA4YA;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiCpE"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAA4C,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,yBAAyB,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAQtO,eAAO,MAAM,yBAAyB,SAAU,CAAC;AAmBjD,KAAK,sBAAsB,GAAG,eAAe,GAAG,aAAa,GAAG,UAAU,CAAC;AAE3E,KAAK,kBAAkB,GAAG,kBAAkB,GAAG,gCAAgC,GAAG,yBAAyB,GAAG,SAAS,CAAC;AAcxH,KAAK,eAAe,GAAG;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AA6CF,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,cAAc,CAa5E;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,cAAc,CAgEpG;AAED,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CAAE,GAAG,cAAc,CA6C9K;AAED,wBAAgB,wBAAwB,IAAI,cAAc,CAczD;AA+GD,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAChE,KAAK,EAAE,CAAC,EACR,sBAAsB,GAAE,kBAA8B,EACtD,mBAAmB,GAAE,sBAAmC,GACvD,CAAC,GAAG;IACL,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,yBAAyB,EAAE,MAAM,CAAC;CACnC,CA8DA;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,sBAAsB,EAAE,kBAAkB;;;;;;;;WAlE3G,eAAe,GAAG,IAAI;+BACF,MAAM;EAuElC;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,kBAAkB,SAA4B,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0C9H;AA6XD,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,WAAW,CAE5E;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,WAAW,CAE5E;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,iBAEjD;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,iBAGlD;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,UAAU,EAAE,CAQpE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW;;;;;;;;;;;;;;;;;;;;EAsBjD;AAED,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnE,OAAO,EAAE,CAAC,EACV,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAChD,CAAC,CAoBH;AAED,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnE,OAAO,EAAE,CAAC,EACV,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACjC,CAAC,CA2BH;AAoMD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,UAmBxD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,YAAY,GAAE,MAAM,EAAO,UAmBnF;AAgKD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,SAAiC,UAcjG;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,UAqBjE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,SAAqB,UAsBrF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,UAS5D;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,UAmIzD;AA2ED,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,MAAM,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;IACtD,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,WAAW,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yBAAyB,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAC7D,MAAM,EAAE,WAAW,GAAG,IAAI,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,IAAI,EAAE,YAAY,CAAC;CACpB,uBA0ZA;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiCpE"}