@coffeerunhobby/mcp-ha-connect 1.3.0 → 1.3.4

package/dist/tools/omada/namespace.js

@@ -0,0 +1,496 @@
+/**
+ * Omada resource-graph namespace.
+ *
+ * Instead of registering one MCP tool per Omada endpoint (which explodes the
+ * tool-schema budget for small models), graph mode exposes a single discoverable
+ * namespace via `omada_browse` (navigate) + `omada_read` (fetch). This manifest is
+ * the source of truth mapping graph paths → fetch logic + per-path RBAC.
+ *
+ * Design (see the "resource graph with lazy expansion" discussion):
+ *  - `browse` returns resource *types/metadata*, never instances — no enumeration,
+ *    no controller calls, zero payload explosion.
+ *  - `read` is where data is fetched: single leaves, collections (optionally a
+ *    single member via `id`), or paginated logs (single page via page/pageSize).
+ *  - Authorization is per-path: each node declares the Permission bit it needs.
+ *    Most nodes are QUERY; the security subtree (`/security/threats`) requires
+ *    ADMIN, demonstrating that sensitive subtrees can require a higher bit without
+ *    touching the tools.
+ *
+ * `graph` mode is a complete superset of `eager` reads: every eager read getter
+ * has a corresponding graph node here, including the ADMIN-gated IDS/IPS
+ * threat-management log (`/security/threats`), which maps its mandatory epoch
+ * time-window onto the required `params.startTime`/`params.endTime` validated by
+ * `omada_read` before any controller call.
+ */
+import { Permission } from '../../permissions/index.js';
+const Q = Permission.QUERY;
+const A = Permission.ADMIN;
+const HOUR_MS = 60 * 60 * 1000;
+/**
+ * Resolve an epoch-MILLISECONDS time window for the event/alert log endpoints
+ * (`/sites/{siteId}/logs/{events,alerts}`), which require `filters.timeStart` and
+ * `filters.timeEnd`. Explicit `params.startTime`/`params.endTime` win; otherwise
+ * default to the last 7 days so a bare `omada_read('/events')` "just works".
+ * Exported for unit testing (inject `now` to keep tests deterministic).
+ */
+export function resolveLogWindowMs(params, now = Date.now()) {
+    const timeEnd = params?.endTime ? Number(params.endTime) : now;
+    const timeStart = params?.startTime ? Number(params.startTime) : timeEnd - 7 * 24 * HOUR_MS;
+    return { timeStart, timeEnd };
+}
+/**
+ * Resolve an epoch-SECONDS time window for the dashboard top-usage endpoints
+ * (`top-device-cpu-usage` / `top-device-memory-usage`), which require `start` and
+ * `end`. Explicit `params.startTime`/`params.endTime` (seconds) win; otherwise
+ * default to the last 24 hours. Exported for unit testing.
+ */
+export function resolveUsageWindowSec(params, now = Date.now()) {
+    const end = params?.endTime ? Number(params.endTime) : Math.floor(now / 1000);
+    const start = params?.startTime ? Number(params.startTime) : end - 24 * 60 * 60;
+    return { start, end };
+}
+/**
+ * The Omada resource graph. Containers have no `fetch` (browse-only); collections
+ * and leaves fetch data. Existing client methods back the well-trodden reads;
+ * the generic `client.readResource(...)` backs newly-added endpoints with zero
+ * new client code.
+ */
+export const OMADA_RESOURCES = [
+    {
+        path: '/',
+        kind: 'container',
+        permission: Q,
+        description: 'Root of the Omada network resource graph. Browse children to discover resources.',
+    },
+    // ---- Sites -------------------------------------------------------------
+    {
+        path: '/sites',
+        kind: 'collection',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'All sites on the controller. Most resources are scoped to a site via the optional siteId argument.',
+        fetch: (c) => c.listSites(),
+    },
+    // ---- Devices (infrastructure) -----------------------------------------
+    {
+        path: '/devices',
+        kind: 'collection',
+        permission: Q,
+        estimatedSize: 'medium',
+        description: 'Network infrastructure (APs, switches, gateways). Pass id=<MAC> to look up a single device.',
+        params: [{ name: 'id', required: false, description: 'Device MAC to fetch a single device' }],
+        fetch: (c, a) => (a.id ? c.getDevice(a.id, a.siteId) : c.listDevices(a.siteId)),
+    },
+    {
+        path: '/devices/pending',
+        kind: 'collection',
+        permission: Q,
+        paginated: true,
+        defaultPageSize: 50,
+        estimatedSize: 'small',
+        description: 'Devices discovered but not yet adopted into the site (paginated). Use page/pageSize.',
+        fetch: (c, a) => c.readResource({
+            pathTemplate: '/sites/{siteId}/grid/devices/pending',
+            siteId: a.siteId,
+            paginated: true,
+            page: a.page,
+            pageSize: a.pageSize,
+        }),
+    },
+    {
+        path: '/devices/stats',
+        kind: 'collection',
+        permission: Q,
+        paginated: true,
+        defaultPageSize: 50,
+        estimatedSize: 'medium',
+        description: 'Per-device statistics (CPU, memory, traffic). Paginated — use page/pageSize.',
+        fetch: (c, a) => c.listDevicesStats({ page: a.page ?? 1, pageSize: a.pageSize ?? 50 }),
+    },
+    {
+        path: '/devices/stack',
+        kind: 'leaf',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'Switch-stack detail. Requires stackId.',
+        params: [{ name: 'stackId', required: true, description: 'Switch stack identifier' }],
+        fetch: (c, a) => c.getSwitchStackDetail(a.params?.stackId ?? '', a.siteId),
+    },
+    // ---- Clients (connected users) ----------------------------------------
+    {
+        path: '/clients',
+        kind: 'collection',
+        permission: Q,
+        estimatedSize: 'large',
+        description: 'Connected clients (phones, laptops, IoT). Pass id=<MAC> to look up a single client.',
+        params: [{ name: 'id', required: false, description: 'Client MAC to fetch a single client' }],
+        fetch: (c, a) => (a.id ? c.getClient(a.id, a.siteId) : c.listClients(a.siteId)),
+    },
+    {
+        path: '/clients/active',
+        kind: 'collection',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'Most active clients by traffic.',
+        fetch: (c, a) => c.listMostActiveClients(a.siteId),
+    },
+    {
+        path: '/clients/activity',
+        kind: 'collection',
+        permission: Q,
+        estimatedSize: 'medium',
+        description: 'Per-client activity (traffic over time). Optional time window via params.start/params.end (epoch seconds).',
+        params: [
+            { name: 'start', required: false, description: 'Start timestamp, epoch seconds' },
+            { name: 'end', required: false, description: 'End timestamp, epoch seconds' },
+        ],
+        fetch: (c, a) => c.listClientsActivity({
+            siteId: a.siteId,
+            start: a.params?.start !== undefined ? Number(a.params.start) : undefined,
+            end: a.params?.end !== undefined ? Number(a.params.end) : undefined,
+        }),
+    },
+    {
+        path: '/clients/past-connections',
+        kind: 'collection',
+        permission: Q,
+        paginated: true,
+        defaultPageSize: 50,
+        estimatedSize: 'large',
+        description: 'Historical client connections (paginated). Use page/pageSize.',
+        fetch: (c, a) => c.listClientsPastConnections({ siteId: a.siteId, page: a.page ?? 1, pageSize: a.pageSize ?? 50 }),
+    },
+    // ---- Gateway -----------------------------------------------------------
+    { path: '/gateway', kind: 'container', permission: Q, description: 'Gateway/router status and connectivity.' },
+    {
+        path: '/gateway/wan',
+        kind: 'leaf',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'WAN port status for a gateway: WAN IP, DNS, uptime, link speed, TX/RX. Requires gatewayMac (find via /devices).',
+        params: [{ name: 'gatewayMac', required: true, description: 'Gateway MAC address' }],
+        fetch: (c, a) => c.readResource({
+            pathTemplate: '/sites/{siteId}/gateways/{gatewayMac}/wan-status',
+            siteId: a.siteId,
+            pathParams: { gatewayMac: a.params?.gatewayMac ?? '' },
+        }),
+    },
+    {
+        path: '/gateway/health',
+        kind: 'leaf',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'Detailed per-WAN health for a gateway. Requires gatewayMac (find via /devices).',
+        params: [{ name: 'gatewayMac', required: true, description: 'Gateway MAC address' }],
+        fetch: (c, a) => c.readResource({
+            pathTemplate: '/sites/{siteId}/health/gateways/{gatewayMac}/wans/details',
+            siteId: a.siteId,
+            pathParams: { gatewayMac: a.params?.gatewayMac ?? '' },
+        }),
+    },
+    // ---- Network config ----------------------------------------------------
+    { path: '/network', kind: 'container', permission: Q, description: 'Network configuration: internet, LANs, WLAN groups, firewall.' },
+    {
+        path: '/network/internet',
+        kind: 'leaf',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'Internet/WAN connection information for the site.',
+        fetch: (c, a) => c.getInternetInfo(a.siteId),
+    },
+    {
+        path: '/network/lan-networks',
+        kind: 'collection',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'Configured LAN networks / VLANs.',
+        fetch: (c, a) => c.getLanNetworkList(a.siteId),
+    },
+    {
+        path: '/network/lan-profiles',
+        kind: 'collection',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'LAN profiles.',
+        fetch: (c, a) => c.getLanProfileList(a.siteId),
+    },
+    {
+        path: '/network/wlan-groups',
+        kind: 'collection',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'WLAN groups.',
+        fetch: (c, a) => c.getWlanGroupList(a.siteId),
+    },
+    {
+        path: '/network/firewall',
+        kind: 'leaf',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'Gateway firewall settings for the site.',
+        fetch: (c, a) => c.getFirewallSetting(a.siteId),
+    },
+    {
+        path: '/network/port-forwarding',
+        kind: 'collection',
+        permission: Q,
+        paginated: true,
+        defaultPageSize: 10,
+        estimatedSize: 'small',
+        description: "Port-forwarding status (paginated). params.type is 'User' (default) or 'UPnP'.",
+        params: [{ name: 'type', required: false, description: "'User' (default) or 'UPnP'" }],
+        fetch: (c, a) => c.getPortForwardingStatus(a.params?.type === 'UPnP' ? 'UPnP' : 'User', a.siteId, a.page ?? 1, a.pageSize ?? 10),
+    },
+    {
+        path: '/network/rate-limit-profiles',
+        kind: 'collection',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'Configured client rate-limit profiles (input for the rate-limit write tools).',
+        fetch: (c, a) => c.getRateLimitProfiles(a.siteId),
+    },
+    // ---- WiFi / wireless security -----------------------------------------
+    { path: '/wifi', kind: 'container', permission: Q, description: 'Wireless: SSIDs, speed tests, rogue-AP and intrusion detection.' },
+    {
+        path: '/wifi/speedtest',
+        kind: 'leaf',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'Latest speed-test result for an access point. Requires apMac (find via /devices).',
+        params: [{ name: 'apMac', required: true, description: 'Access point MAC address' }],
+        fetch: (c, a) => c.readResource({
+            pathTemplate: '/sites/{siteId}/aps/{apMac}/speed-test-result',
+            siteId: a.siteId,
+            pathParams: { apMac: a.params?.apMac ?? '' },
+        }),
+    },
+    {
+        path: '/wifi/rogue',
+        kind: 'collection',
+        permission: Q,
+        paginated: true,
+        defaultPageSize: 50,
+        estimatedSize: 'small',
+        description: 'Rogue access points detected near the site (paginated). Use page/pageSize.',
+        fetch: (c, a) => c.readResource({
+            pathTemplate: '/sites/{siteId}/insight/rogueaps',
+            siteId: a.siteId,
+            paginated: true,
+            page: a.page,
+            pageSize: a.pageSize,
+        }),
+    },
+    {
+        path: '/wifi/wids',
+        kind: 'collection',
+        permission: Q,
+        paginated: true,
+        defaultPageSize: 50,
+        estimatedSize: 'small',
+        description: 'Wireless Intrusion Detection System (WIDS) entries (paginated). Use page/pageSize. ' +
+            'Note: the controller restricts this endpoint to Omada Pro controllers/sites; on a ' +
+            'standard controller it returns a "Pro only" message rather than data.',
+        fetch: (c, a) => c.readResource({
+            pathTemplate: '/sites/{siteId}/insight/wids',
+            siteId: a.siteId,
+            paginated: true,
+            page: a.page,
+            pageSize: a.pageSize,
+        }),
+    },
+    {
+        path: '/wifi/ssids',
+        kind: 'collection',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'SSIDs in a WLAN group. Requires wlanId; pass params.ssidId too to fetch a single SSID detail.',
+        params: [
+            { name: 'wlanId', required: true, description: 'WLAN group id (find via /network/wlan-groups)' },
+            { name: 'ssidId', required: false, description: 'SSID id — when set, returns that SSID detail instead of the list' },
+        ],
+        fetch: (c, a) => a.params?.ssidId
+            ? c.getSsidDetail(a.params.wlanId ?? '', a.params.ssidId, a.siteId)
+            : c.getSsidList(a.params?.wlanId ?? '', a.siteId),
+    },
+    // ---- Events / alerts (paginated) --------------------------------------
+    {
+        path: '/events',
+        kind: 'collection',
+        permission: Q,
+        paginated: true,
+        defaultPageSize: 50,
+        estimatedSize: 'large',
+        description: 'Site event log (paginated). Use page/pageSize. The controller requires a time window: by default this ' +
+            'returns the last 7 days. Override with params.startTime / params.endTime (epoch MILLISECONDS, e.g. ' +
+            '1679297710438). Optional params.module filters by source module.',
+        params: [
+            { name: 'startTime', required: false, description: 'Window start, epoch ms (default: 7 days ago)' },
+            { name: 'endTime', required: false, description: 'Window end, epoch ms (default: now)' },
+            { name: 'module', required: false, description: 'Filter by module (e.g. "Device", "Client", "User")' },
+        ],
+        fetch: (c, a) => {
+            const { timeStart, timeEnd } = resolveLogWindowMs(a.params);
+            const query = { 'filters.timeStart': timeStart, 'filters.timeEnd': timeEnd };
+            if (a.params?.module) {
+                query['filters.module'] = a.params.module;
+            }
+            return c.readResource({ pathTemplate: '/sites/{siteId}/logs/events', siteId: a.siteId, paginated: true, page: a.page, pageSize: a.pageSize, query });
+        },
+    },
+    {
+        path: '/events/alerts',
+        kind: 'collection',
+        permission: Q,
+        paginated: true,
+        defaultPageSize: 50,
+        estimatedSize: 'large',
+        description: 'Site alert log (paginated). Use page/pageSize. The controller requires a time window: by default this ' +
+            'returns the last 7 days. Override with params.startTime / params.endTime (epoch MILLISECONDS). Optional ' +
+            'params.module filters by source module; params.resolved ("true"/"false") filters by resolution state.',
+        params: [
+            { name: 'startTime', required: false, description: 'Window start, epoch ms (default: 7 days ago)' },
+            { name: 'endTime', required: false, description: 'Window end, epoch ms (default: now)' },
+            { name: 'module', required: false, description: 'Filter by module (e.g. "Device", "Client", "User")' },
+            { name: 'resolved', required: false, description: '"true" or "false" to filter by resolution state' },
+        ],
+        fetch: (c, a) => {
+            const { timeStart, timeEnd } = resolveLogWindowMs(a.params);
+            const query = { 'filters.timeStart': timeStart, 'filters.timeEnd': timeEnd };
+            if (a.params?.module) {
+                query['filters.module'] = a.params.module;
+            }
+            if (a.params?.resolved === 'true' || a.params?.resolved === 'false') {
+                query['filters.resolved'] = a.params.resolved;
+            }
+            return c.readResource({ pathTemplate: '/sites/{siteId}/logs/alerts', siteId: a.siteId, paginated: true, page: a.page, pageSize: a.pageSize, query });
+        },
+    },
+    // ---- Dashboard ---------------------------------------------------------
+    {
+        path: '/dashboard',
+        kind: 'leaf',
+        permission: Q,
+        estimatedSize: 'medium',
+        description: 'Site dashboard overview diagram (topology + summary).',
+        fetch: (c, a) => c.readResource({ pathTemplate: '/sites/{siteId}/dashboard/overview-diagram', siteId: a.siteId }),
+    },
+    {
+        path: '/dashboard/cpu',
+        kind: 'collection',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'Devices with the highest CPU usage over a time window (default: last 24h). Override with params.startTime / ' +
+            'params.endTime (epoch SECONDS, e.g. 1682000000).',
+        params: [
+            { name: 'startTime', required: false, description: 'Window start, epoch seconds (default: 24h ago)' },
+            { name: 'endTime', required: false, description: 'Window end, epoch seconds (default: now)' },
+        ],
+        fetch: (c, a) => c.readResource({ pathTemplate: '/sites/{siteId}/dashboard/top-device-cpu-usage', siteId: a.siteId, query: resolveUsageWindowSec(a.params) }),
+    },
+    {
+        path: '/dashboard/memory',
+        kind: 'collection',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'Devices with the highest memory usage over a time window (default: last 24h). Override with params.startTime / ' +
+            'params.endTime (epoch SECONDS, e.g. 1682000000).',
+        params: [
+            { name: 'startTime', required: false, description: 'Window start, epoch seconds (default: 24h ago)' },
+            { name: 'endTime', required: false, description: 'Window end, epoch seconds (default: now)' },
+        ],
+        fetch: (c, a) => c.readResource({ pathTemplate: '/sites/{siteId}/dashboard/top-device-memory-usage', siteId: a.siteId, query: resolveUsageWindowSec(a.params) }),
+    },
+    // ---- Firmware ----------------------------------------------------------
+    {
+        path: '/firmware',
+        kind: 'leaf',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'Latest available firmware info for a device. Requires deviceMac (find via /devices).',
+        params: [{ name: 'deviceMac', required: true, description: 'Device MAC address' }],
+        fetch: (c, a) => c.readResource({
+            pathTemplate: '/sites/{siteId}/devices/{deviceMac}/latest-firmware-info',
+            siteId: a.siteId,
+            pathParams: { deviceMac: a.params?.deviceMac ?? '' },
+        }),
+    },
+    {
+        path: '/firmware/critical',
+        kind: 'leaf',
+        permission: Q,
+        estimatedSize: 'small',
+        description: 'Controller-wide overview of critical firmware upgrades (not site-scoped).',
+        fetch: (c) => c.readResource({ pathTemplate: '/upgrade/overview/critical', siteScoped: false }),
+    },
+    // ---- Security (IDS/IPS) — ADMIN only -----------------------------------
+    {
+        path: '/security',
+        kind: 'container',
+        permission: A,
+        description: 'Security: IDS/IPS threat-management log. ADMIN only.',
+    },
+    {
+        path: '/security/threats',
+        kind: 'collection',
+        permission: A,
+        paginated: true,
+        defaultPageSize: 10,
+        estimatedSize: 'large',
+        description: 'IDS/IPS threat-management log (paginated, ADMIN). REQUIRES a time window: params.startTime and params.endTime ' +
+            '(epoch SECONDS, e.g. 1682000000). Optional params: archived ("true"/"false", default false), severity ' +
+            '(0=Critical,1=Major,2=Concerning,3=Minor), sortTime ("asc"/"desc"), searchKey (fuzzy text), siteList ' +
+            '(comma-separated site IDs; default all sites).',
+        params: [
+            { name: 'startTime', required: true, description: 'Window start, epoch seconds (e.g. 1682000000)' },
+            { name: 'endTime', required: true, description: 'Window end, epoch seconds (e.g. 1682003600)' },
+            { name: 'archived', required: false, description: '"true" or "false" (default false)' },
+            { name: 'severity', required: false, description: '0=Critical, 1=Major, 2=Concerning, 3=Minor' },
+            { name: 'sortTime', required: false, description: 'Sort by time: "asc" or "desc"' },
+            { name: 'searchKey', required: false, description: 'Fuzzy search on description/classification' },
+            { name: 'siteList', required: false, description: 'Comma-separated site IDs (default: all sites)' },
+        ],
+        fetch: (c, a) => c.getThreatList({
+            siteList: a.params?.siteList,
+            archived: a.params?.archived === 'true',
+            page: a.page ?? 1,
+            pageSize: a.pageSize ?? 10,
+            startTime: Number(a.params?.startTime),
+            endTime: Number(a.params?.endTime),
+            severity: a.params?.severity !== undefined ? Number(a.params.severity) : undefined,
+            sortTime: a.params?.sortTime === 'asc' ? 'asc' : a.params?.sortTime === 'desc' ? 'desc' : undefined,
+            searchKey: a.params?.searchKey,
+        }),
+    },
+];
+const byPath = new Map(OMADA_RESOURCES.map((n) => [n.path, n]));
+/** Normalize a user-supplied path: leading slash, no trailing slash, '/' for root. */
+export function normalizePath(path) {
+    if (!path || path === '/') {
+        return '/';
+    }
+    let p = path.trim();
+    if (!p.startsWith('/')) {
+        p = `/${p}`;
+    }
+    if (p.length > 1 && p.endsWith('/')) {
+        p = p.slice(0, -1);
+    }
+    return p;
+}
+/** The immediate parent path, or null for the root. */
+function parentPath(path) {
+    if (path === '/') {
+        return null;
+    }
+    const idx = path.lastIndexOf('/');
+    return idx <= 0 ? '/' : path.slice(0, idx);
+}
+export function getResourceNode(path) {
+    return byPath.get(normalizePath(path));
+}
+/** Direct children (one segment deeper) of the given path. */
+export function childrenOf(path) {
+    const norm = normalizePath(path);
+    return OMADA_RESOURCES.filter((n) => parentPath(n.path) === norm);
+}
+//# sourceMappingURL=namespace.js.map

package/dist/tools/omada/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../../src/tools/omada/namespace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAqCxD,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;AAC3B,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;AAE3B,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/B;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA0C,EAC1C,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/D,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAC5F,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA0C,EAC1C,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,GAAG,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAChF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAmB;IAC7C;QACE,IAAI,EAAE,GAAG;QACT,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,kFAAkF;KAChG;IAED,2EAA2E;IAC3E;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,oGAAoG;QACjH,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE;KAC5B;IAED,0EAA0E;IAC1E;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,QAAQ;QACvB,WAAW,EAAE,6FAA6F;QAC1G,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;QAC7F,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;KAChF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,IAAI;QACf,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,sFAAsF;QACnG,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,YAAY,CAAC;YACb,YAAY,EAAE,sCAAsC;YACpD,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC;KACL;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,IAAI;QACf,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,QAAQ;QACvB,WAAW,EAAE,8EAA8E;QAC3F,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;KACvF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,wCAAwC;QACrD,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;QACrF,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;KAC3E;IAED,0EAA0E;IAC1E;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,qFAAqF;QAClG,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;QAC7F,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;KAChF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,iCAAiC;QAC9C,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC;KACnD;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,QAAQ;QACvB,WAAW,EAAE,4GAA4G;QACzH,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,gCAAgC,EAAE;YACjF,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,8BAA8B,EAAE;SAC9E;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,mBAAmB,CAAC;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;YACzE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SACpE,CAAC;KACL;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,IAAI;QACf,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,+DAA+D;QAC5E,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;KACnH;IAED,2EAA2E;IAC3E,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,yCAAyC,EAAE;IAC9G;QACE,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,iHAAiH;QAC9H,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;QACpF,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,YAAY,CAAC;YACb,YAAY,EAAE,kDAAkD;YAChE,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,IAAI,EAAE,EAAE;SACvD,CAAC;KACL;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,iFAAiF;QAC9F,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;QACpF,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,YAAY,CAAC;YACb,YAAY,EAAE,2DAA2D;YACzE,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,IAAI,EAAE,EAAE;SACvD,CAAC;KACL;IAED,2EAA2E;IAC3E,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,+DAA+D,EAAE;IACpI;QACE,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,mDAAmD;QAChE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC;KAC7C;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,kCAAkC;QAC/C,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC;KAC/C;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,eAAe;QAC5B,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC;KAC/C;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,cAAc;QAC3B,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC;KAC9C;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,yCAAyC;QACtD,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC;KAChD;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,IAAI;QACf,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,gFAAgF;QAC7F,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;QACtF,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;KAClH;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,+EAA+E;QAC5F,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC;KAClD;IAED,0EAA0E;IAC1E,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,iEAAiE,EAAE;IACnI;QACE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,mFAAmF;QAChG,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;QACpF,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,YAAY,CAAC;YACb,YAAY,EAAE,+CAA+C;YAC7D,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,EAAE;SAC7C,CAAC;KACL;IACD;QACE,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,IAAI;QACf,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,4EAA4E;QACzF,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,YAAY,CAAC;YACb,YAAY,EAAE,kCAAkC;YAChD,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC;KACL;IACD;QACE,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,IAAI;QACf,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,OAAO;QACtB,WAAW,EACT,qFAAqF;YACrF,oFAAoF;YACpF,uEAAuE;QACzE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,YAAY,CAAC;YACb,YAAY,EAAE,8BAA8B;YAC5C,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC;KACL;IACD;QACE,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,+FAA+F;QAC5G,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,+CAA+C,EAAE;YAChG,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,kEAAkE,EAAE;SACrH;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,MAAM,EAAE,MAAM;YACd,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;YACnE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;KACtD;IAED,0EAA0E;IAC1E;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,IAAI;QACf,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,OAAO;QACtB,WAAW,EACT,wGAAwG;YACxG,qGAAqG;YACrG,kEAAkE;QACpE,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,8CAA8C,EAAE;YACnG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,qCAAqC,EAAE;YACxF,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,oDAAoD,EAAE;SACvG;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACd,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5D,MAAM,KAAK,GAA4B,EAAE,mBAAmB,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;YACtG,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBACrB,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5C,CAAC;YACD,OAAO,CAAC,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,6BAA6B,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACvJ,CAAC;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,IAAI;QACf,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,OAAO;QACtB,WAAW,EACT,wGAAwG;YACxG,0GAA0G;YAC1G,uGAAuG;QACzG,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,8CAA8C,EAAE;YACnG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,qCAAqC,EAAE;YACxF,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,oDAAoD,EAAE;YACtG,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,iDAAiD,EAAE;SACtG;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACd,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5D,MAAM,KAAK,GAA4B,EAAE,mBAAmB,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;YACtG,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBACrB,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5C,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACpE,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;YAChD,CAAC;YACD,OAAO,CAAC,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,6BAA6B,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACvJ,CAAC;KACF;IAED,2EAA2E;IAC3E;QACE,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,QAAQ;QACvB,WAAW,EAAE,uDAAuD;QACpE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,4CAA4C,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;KAClH;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EACT,8GAA8G;YAC9G,kDAAkD;QACpD,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,gDAAgD,EAAE;YACrG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,0CAA0C,EAAE;SAC9F;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,gDAAgD,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;KAC/I;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EACT,iHAAiH;YACjH,kDAAkD;QACpD,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,gDAAgD,EAAE;YACrG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,0CAA0C,EAAE;SAC9F;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,mDAAmD,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;KAClJ;IAED,2EAA2E;IAC3E;QACE,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,sFAAsF;QACnG,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;QAClF,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,YAAY,CAAC;YACb,YAAY,EAAE,0DAA0D;YACxE,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,EAAE;SACrD,CAAC;KACL;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,2EAA2E;QACxF,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,4BAA4B,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;KAChG;IAED,2EAA2E;IAC3E;QACE,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,sDAAsD;KACpE;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,IAAI;QACf,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,OAAO;QACtB,WAAW,EACT,gHAAgH;YAChH,wGAAwG;YACxG,uGAAuG;YACvG,gDAAgD;QAClD,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,+CAA+C,EAAE;YACnG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,6CAA6C,EAAE;YAC/F,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,mCAAmC,EAAE;YACvF,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,4CAA4C,EAAE;YAChG,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,+BAA+B,EAAE;YACnF,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,4CAA4C,EAAE;YACjG,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,+CAA+C,EAAE;SACpG;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,aAAa,CAAC;YACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ;YAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,KAAK,MAAM;YACvC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;YACjB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;YAC1B,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC;YACtC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC;YAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;YAClF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACnG,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS;SAC/B,CAAC;KACL;CACF,CAAC;AAEF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAuB,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtF,sFAAsF;AACtF,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IACd,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,uDAAuD;AACvD,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;AACpE,CAAC"}

package/dist/version.d.ts

@@ -2,4 +2,4 @@
  * Package version - hardcoded at build time for reliability
  * Keep in sync with package.json version
  */
-export declare const VERSION = "1.3.0";
+export declare const VERSION = "1.3.4";

package/dist/version.js

@@ -2,5 +2,5 @@
  * Package version - hardcoded at build time for reliability
  * Keep in sync with package.json version
  */
-export const VERSION = '1.3.0';
+export const VERSION = '1.3.4';
 //# sourceMappingURL=version.js.map

package/docs/CHANGELOG.md

@@ -1,3 +1,66 @@
+### 1.3.4
+**Feature — Omada resource-graph tool registration (`MCP_TOOL_REGISTRATION_MODE`).**
+Implements the previously-designed-but-unbuilt registration-mode switch as a *resource
+graph* for the Omada plugin. `MCP_TOOL_REGISTRATION_MODE=graph` registers two discovery
+tools — `omada_browse` (navigate a permission-filtered tree of resource **types**, never
+instances) and `omada_read` (generic, per-path-RBAC data fetch with single-page
+pagination) — plus the 5 typed write/action tools, in place of the ~21 individual read
+getters. `eager` (default) is unchanged. A single `OmadaClient.readResource()` primitive
+(path-template driven) backs newly-exposed endpoints (gateway WAN/health, AP speed-test,
+rogue-AP/WIDS, event/alert logs, dashboard CPU/memory, firmware info + controller-wide
+critical-firmware) with no per-endpoint client code. `graph` mode is now a **complete
+superset** of `eager` reads: the ADMIN-gated IDS/IPS threat-management log is exposed at
+`/security/threats`, with its mandatory epoch time-window enforced via required
+`params.startTime`/`params.endTime` (epoch seconds) validated before any controller call —
+the first node to require a higher permission bit (ADMIN) than QUERY, demonstrating the
+per-path RBAC. New manifest (`namespace.ts`) + tools (`graph.ts`); `getCallerPermissions()`
+extracted in `tools/common.ts` and reused for per-path checks. Suite grew by 47 unit tests
+(namespace + graph + config parsing).
+
+**Fix — `OMADA_SITE_ID` is validated against the live controller at startup.** The Omada
+controller's site list is now treated as the source of truth; `OMADA_SITE_ID` is only a
+selector against it. At boot (reusing the existing `listSites()` connection test) a
+configured `OMADA_SITE_ID` that is **not** present on the controller — e.g. a site id that
+drifted after a controller migration, the same way `OMADA_OMADAC_ID` does — now disables the
+**Omada plugin** with a clear, actionable error that names the bad value and lists the valid
+sites, instead of silently scoping every site-scoped read to a dead site and surfacing later
+as a confusing "user does not have permissions to access this site" error. The failure is
+scoped to the Omada plugin only — Home Assistant and Local AI keep working (graceful
+degradation preserved). Default-site auto-resolution for site-scoped reads is otherwise
+unchanged: callers still need not pass `siteId` when a valid default is configured. New pure
+`checkConfiguredSite()` helper + 4 unit tests.
+
+**Fix — graph reads that require query parameters now send them (events/alerts, dashboard
+CPU/memory, rogue-AP/WIDS, pending devices).** Seven graph nodes were authored from endpoint
+paths alone and never sent the query parameters the controller requires, so every call
+returned a bare framework `400 Bad Request` (rejected before reaching the Omada handler — no
+`errorCode`/`msg` envelope). Verified against the live controller's own OpenAPI spec and
+fixed:
+- `/events` and `/events/alerts` now send the mandatory `filters.timeStart`/`filters.timeEnd`
+  window (epoch **milliseconds**). The window is optional to the caller and **defaults to the
+  last 7 days**, so a bare `omada_read('/events')` works; override via `params.startTime` /
+  `params.endTime`, with optional `params.module` (and `params.resolved` for alerts).
+- `/dashboard/cpu` and `/dashboard/memory` now send the mandatory `start`/`end` window
+  (epoch **seconds**), defaulting to the **last 24 h**; override via `params.startTime` /
+  `params.endTime`.
+- `/wifi/rogue`, `/wifi/wids`, and `/devices/pending` are now declared `paginated` so they
+  forward `page`/`pageSize` (all three are paginated list endpoints). `/wifi/wids` is
+  documented as Omada **Pro-only** — on a standard controller it returns a clear "Pro only"
+  message rather than data.
+Two pure, unit-tested window helpers (`resolveLogWindowMs`, `resolveUsageWindowSec`) back the
+defaults. Also surfaces the controller's own `errorCode`/`msg` in `RequestHandler`'s thrown
+HTTP-error message (when present) so a rejected request explains itself instead of collapsing
+to `"400 "` — internal hostnames/headers are still kept out of the message. Suite grew by 10
+unit tests (window helpers + fixed-node wiring).
+
+### 1.3.1
+**Patch — RBAC role-name case-insensitivity.** Follow-up to the v1.3.0 fail-closed
+permission change. `getUserPermissions` now resolves both the per-user `role` and the
+`defaultRole` fall-back case-insensitively: a lowercase `"operator"` / `"admin"` in
+`MCP_PERMISSIONS_CONFIG` (a common real-world spelling) maps to the correct mask instead
+of silently collapsing to an empty (no-permission) mask. Unknown role names still fail
+closed to `NONE`. Regression tests added under `tests/permissions/`.
+
 ### 1.3.0
 **Security hardening release.** A full OWASP-aligned audit (API Top 10 2023 + Top 10 2021)
 drove fixes across access control, authentication, injection, transport, configuration,

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Home Assistant MCP Wrapper",
-    "version": "1.3.0",
+    "version": "1.3.4",
     "description": "REST endpoints that wrap MCP tools for Home Assistant integration. Raw JSON-RPC passthrough available at POST / for n8n compatibility."
   },
   "servers": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coffeerunhobby/mcp-ha-connect",
-  "version": "1.3.0",
+  "version": "1.3.4",
   "description": "Smart home MCP server for Home Assistant plus Local AI integration",
   "type": "module",
   "main": "dist/index.js",