@creezio/mcp-facade 0.22.0

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAExD;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX,kBAAkB,GAClB,MAAM,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,YAAY,CAAC;IACpB,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,CAAC;AAEF,mEAAmE;AACnE,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,CAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,KAAK,CAAC,EAAE,gBAAgB,KACrB,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEpD;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,CACpC,KAAK,EAAE,MAAM,KACV,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;AAE5D,MAAM,MAAM,iBAAiB,GAAG,iBAAiB,GAAG;IAClD,OAAO,EAAE,cAAc,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,MAC1B,iBAAiB,EAAE,GACnB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;AAEjC,wEAAwE;AACxE,MAAM,MAAM,sBAAsB,GAAG,MACjC,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC,GACzD,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC;AAEvE,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GACf;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,MAAM,MAAM,sBAAsB,GAAG,CACnC,GAAG,EAAE,mBAAmB,KACrB,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAE5D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,yEAAyE;IACzE,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,uBAAuB,CAAC;IAC7C,mCAAmC;IACnC,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,sBAAsB,CAAC;IAC9C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,aAAa,CAAC,EAAE,MAAM,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;OAGG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;OAGG;IACH,yBAAyB,CAAC,EAAE,CAC1B,KAAK,EAAE,iBAAiB,EAAE,EAC1B,GAAG,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KACxE,iBAAiB,EAAE,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;CACzD,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,iBAAiB,EAAE,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAExE,MAAM,MAAM,aAAa,GACrB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist-cjs/admin/adapters.js

@@ -0,0 +1,27 @@
+"use strict";
+/**
+ * Injection host pour mcp-admin (évite imports `@/` marque).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.configureMcpAdmin = configureMcpAdmin;
+exports.getMcpAdminAdapters = getMcpAdminAdapters;
+exports.isMcpAdminConfigured = isMcpAdminConfigured;
+exports.resetMcpAdminAdaptersForTests = resetMcpAdminAdaptersForTests;
+let adapters = null;
+function configureMcpAdmin(next) {
+    adapters = next;
+}
+function getMcpAdminAdapters() {
+    if (!adapters) {
+        throw new Error("@creezio/mcp-admin: configureMcpAdmin({ getDb, getWriteDb, … }) requis avant usage");
+    }
+    return adapters;
+}
+/** True si `configureMcpAdmin` a été câblé (garde opt-in non cassante). */
+function isMcpAdminConfigured() {
+    return adapters !== null;
+}
+function resetMcpAdminAdaptersForTests() {
+    adapters = null;
+}
+//# sourceMappingURL=adapters.js.map

package/dist-cjs/admin/adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../src/admin/adapters.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAMH,8CAEC;AAED,kDAOC;AAGD,oDAEC;AAED,sEAEC;AAtBD,IAAI,QAAQ,GAA4B,IAAI,CAAC;AAE7C,SAAgB,iBAAiB,CAAC,IAAsB;IACtD,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC;AAED,SAAgB,mBAAmB;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,2EAA2E;AAC3E,SAAgB,oBAAoB;IAClC,OAAO,QAAQ,KAAK,IAAI,CAAC;AAC3B,CAAC;AAED,SAAgB,6BAA6B;IAC3C,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC"}

package/dist-cjs/admin/http-routes.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMcpAdminRoutes = createMcpAdminRoutes;
+/**
+ * Routes Hono Admin MCP (port TempoFlow — N6).
+ * Auth owner reste côté marque (montage sous /admin).
+ */
+const hono_1 = require("hono");
+const mcp_admin_js_1 = require("./mcp-admin.js");
+const adapters_js_1 = require("./adapters.js");
+function createMcpAdminRoutes(opts = {}) {
+    const app = new hono_1.Hono();
+    app.get("/mcp/status", (c) => c.json((0, mcp_admin_js_1.mcpAdminStatus)()));
+    app.get("/mcp/tools", (c) => c.json({ tools: (0, mcp_admin_js_1.listMcpToolPolicies)() }));
+    app.get("/mcp/clients", (c) => c.json({ clients: (0, mcp_admin_js_1.listMcpClients)() }));
+    app.get("/mcp/diagnostics", (c) => c.json((0, mcp_admin_js_1.mcpDiagnostics)()));
+    app.get("/mcp/metrics", (c) => c.json((0, mcp_admin_js_1.mcpMetrics)()));
+    app.get("/mcp/audit-logs", (c) => c.json({ logs: (0, mcp_admin_js_1.listMcpAuditLogs)(Number(c.req.query("limit")) || 200) }));
+    app.get("/mcp/diagnostics/export", (c) => {
+        const prefix = opts.diagnosticFilenamePrefix ||
+            (0, adapters_js_1.getMcpAdminAdapters)().diagnosticFilenamePrefix ||
+            "creezio";
+        c.header("Content-Disposition", `attachment; filename="${prefix}-mcp-diagnostic-${new Date().toISOString().slice(0, 10)}.json"`);
+        return c.json((0, mcp_admin_js_1.exportMcpDiagnostics)());
+    });
+    app.patch("/mcp/policies/:tool", async (c) => {
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            return c.json({ error: "JSON attendu" }, 400);
+        }
+        const policy = (0, mcp_admin_js_1.updateMcpToolPolicy)(c.req.param("tool"), body);
+        if (!policy)
+            return c.json({ error: "Tool inconnu" }, 404);
+        return c.json({ policy });
+    });
+    app.patch("/mcp/clients/:clientId", async (c) => {
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            return c.json({ error: "JSON attendu" }, 400);
+        }
+        if (typeof body.enabled !== "boolean") {
+            return c.json({ error: "enabled booléen requis" }, 400);
+        }
+        const ok = (0, mcp_admin_js_1.setMcpClientEnabled)(c.req.param("clientId"), body.enabled);
+        return ok ? c.json({ ok: true }) : c.json({ error: "Client introuvable" }, 404);
+    });
+    app.delete("/mcp/clients/:clientId", (c) => {
+        const ok = (0, mcp_admin_js_1.revokeMcpClient)(c.req.param("clientId"));
+        return ok ? c.json({ ok: true }) : c.json({ error: "Client introuvable" }, 404);
+    });
+    app.post("/mcp/clients/:clientId/rotate-secret", (c) => {
+        const result = (0, mcp_admin_js_1.rotateMcpClientSecret)(c.req.param("clientId"));
+        if (!result) {
+            return c.json({ error: "Client introuvable, révoqué ou public (sans secret)" }, 400);
+        }
+        return c.json({
+            clientSecret: result.clientSecret,
+            warning: "Ce secret ne sera plus affiché. Les refresh tokens précédents sont révoqués.",
+        });
+    });
+    return app;
+}
+//# sourceMappingURL=http-routes.js.map

package/dist-cjs/admin/http-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-routes.js","sourceRoot":"","sources":["../../src/admin/http-routes.ts"],"names":[],"mappings":";;AAyBA,oDA4EC;AArGD;;;GAGG;AACH,+BAA4B;AAC5B,iDAYwB;AACxB,+CAAoD;AAOpD,SAAgB,oBAAoB,CAClC,OAAoC,EAAE;IAEtC,MAAM,GAAG,GAAG,IAAI,WAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAA,6BAAc,GAAE,CAAC,CAAC,CAAC;IACxD,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAA,kCAAmB,GAAE,EAAE,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAA,6BAAc,GAAE,EAAE,CAAC,CAAC,CAAC;IACtE,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAA,6BAAc,GAAE,CAAC,CAAC,CAAC;IAC7D,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAA,yBAAU,GAAE,CAAC,CAAC,CAAC;IACrD,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAC/B,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAA,+BAAgB,EAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,CACxE,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,EAAE,EAAE;QACvC,MAAM,MAAM,GACV,IAAI,CAAC,wBAAwB;YAC7B,IAAA,iCAAmB,GAAE,CAAC,wBAAwB;YAC9C,SAAS,CAAC;QACZ,CAAC,CAAC,MAAM,CACN,qBAAqB,EACrB,yBAAyB,MAAM,mBAAmB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAChG,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAA,mCAAoB,GAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,IAAI,IAIH,CAAC;QACF,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,kCAAmB,EAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9C,IAAI,IAA2B,CAAC;QAChC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,EAAE,GAAG,IAAA,kCAAmB,EAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC,EAAE,EAAE;QACzC,MAAM,EAAE,GAAG,IAAA,8BAAe,EAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACpD,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,sCAAsC,EAAE,CAAC,CAAC,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,IAAA,oCAAqB,EAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,qDAAqD,EAAE,EAChE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,OAAO,EACL,8EAA8E;SACjF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist-cjs/admin/index.js

@@ -0,0 +1,40 @@
+"use strict";
+/**
+ * MCP admin — policies, clients OAuth, diagnostics, routes Hono (N6).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerGuardedMcpTool = exports.getStoredMcpToolPolicy = exports.createToolPolicyAuthorize = exports.checkToolPolicy = exports.createMcpAdminRoutes = exports.exportMcpDiagnostics = exports.pruneMcpAuditLogs = exports.listMcpAuditLogs = exports.auditMcpAdmin = exports.mcpMetrics = exports.mcpDiagnostics = exports.mcpAdminStatus = exports.touchMcpClient = exports.clientCanAuthenticate = exports.rotateMcpClientSecret = exports.revokeMcpClient = exports.setMcpClientEnabled = exports.listMcpClients = exports.updateMcpToolPolicy = exports.filterListedToolsByEnabledPolicy = exports.disabledMcpToolPolicyNames = exports.getMcpToolPolicy = exports.listMcpToolPolicies = exports.seedMcpToolPolicies = exports.ensureMcpAdminSchema = exports.resetMcpAdminAdaptersForTests = exports.isMcpAdminConfigured = exports.getMcpAdminAdapters = exports.configureMcpAdmin = void 0;
+var adapters_js_1 = require("./adapters.js");
+Object.defineProperty(exports, "configureMcpAdmin", { enumerable: true, get: function () { return adapters_js_1.configureMcpAdmin; } });
+Object.defineProperty(exports, "getMcpAdminAdapters", { enumerable: true, get: function () { return adapters_js_1.getMcpAdminAdapters; } });
+Object.defineProperty(exports, "isMcpAdminConfigured", { enumerable: true, get: function () { return adapters_js_1.isMcpAdminConfigured; } });
+Object.defineProperty(exports, "resetMcpAdminAdaptersForTests", { enumerable: true, get: function () { return adapters_js_1.resetMcpAdminAdaptersForTests; } });
+var mcp_admin_js_1 = require("./mcp-admin.js");
+Object.defineProperty(exports, "ensureMcpAdminSchema", { enumerable: true, get: function () { return mcp_admin_js_1.ensureMcpAdminSchema; } });
+Object.defineProperty(exports, "seedMcpToolPolicies", { enumerable: true, get: function () { return mcp_admin_js_1.seedMcpToolPolicies; } });
+Object.defineProperty(exports, "listMcpToolPolicies", { enumerable: true, get: function () { return mcp_admin_js_1.listMcpToolPolicies; } });
+Object.defineProperty(exports, "getMcpToolPolicy", { enumerable: true, get: function () { return mcp_admin_js_1.getMcpToolPolicy; } });
+Object.defineProperty(exports, "disabledMcpToolPolicyNames", { enumerable: true, get: function () { return mcp_admin_js_1.disabledMcpToolPolicyNames; } });
+Object.defineProperty(exports, "filterListedToolsByEnabledPolicy", { enumerable: true, get: function () { return mcp_admin_js_1.filterListedToolsByEnabledPolicy; } });
+Object.defineProperty(exports, "updateMcpToolPolicy", { enumerable: true, get: function () { return mcp_admin_js_1.updateMcpToolPolicy; } });
+Object.defineProperty(exports, "listMcpClients", { enumerable: true, get: function () { return mcp_admin_js_1.listMcpClients; } });
+Object.defineProperty(exports, "setMcpClientEnabled", { enumerable: true, get: function () { return mcp_admin_js_1.setMcpClientEnabled; } });
+Object.defineProperty(exports, "revokeMcpClient", { enumerable: true, get: function () { return mcp_admin_js_1.revokeMcpClient; } });
+Object.defineProperty(exports, "rotateMcpClientSecret", { enumerable: true, get: function () { return mcp_admin_js_1.rotateMcpClientSecret; } });
+Object.defineProperty(exports, "clientCanAuthenticate", { enumerable: true, get: function () { return mcp_admin_js_1.clientCanAuthenticate; } });
+Object.defineProperty(exports, "touchMcpClient", { enumerable: true, get: function () { return mcp_admin_js_1.touchMcpClient; } });
+Object.defineProperty(exports, "mcpAdminStatus", { enumerable: true, get: function () { return mcp_admin_js_1.mcpAdminStatus; } });
+Object.defineProperty(exports, "mcpDiagnostics", { enumerable: true, get: function () { return mcp_admin_js_1.mcpDiagnostics; } });
+Object.defineProperty(exports, "mcpMetrics", { enumerable: true, get: function () { return mcp_admin_js_1.mcpMetrics; } });
+Object.defineProperty(exports, "auditMcpAdmin", { enumerable: true, get: function () { return mcp_admin_js_1.auditMcpAdmin; } });
+Object.defineProperty(exports, "listMcpAuditLogs", { enumerable: true, get: function () { return mcp_admin_js_1.listMcpAuditLogs; } });
+Object.defineProperty(exports, "pruneMcpAuditLogs", { enumerable: true, get: function () { return mcp_admin_js_1.pruneMcpAuditLogs; } });
+Object.defineProperty(exports, "exportMcpDiagnostics", { enumerable: true, get: function () { return mcp_admin_js_1.exportMcpDiagnostics; } });
+var http_routes_js_1 = require("./http-routes.js");
+Object.defineProperty(exports, "createMcpAdminRoutes", { enumerable: true, get: function () { return http_routes_js_1.createMcpAdminRoutes; } });
+var tool_policy_guard_js_1 = require("./tool-policy-guard.js");
+Object.defineProperty(exports, "checkToolPolicy", { enumerable: true, get: function () { return tool_policy_guard_js_1.checkToolPolicy; } });
+Object.defineProperty(exports, "createToolPolicyAuthorize", { enumerable: true, get: function () { return tool_policy_guard_js_1.createToolPolicyAuthorize; } });
+Object.defineProperty(exports, "getStoredMcpToolPolicy", { enumerable: true, get: function () { return tool_policy_guard_js_1.getStoredMcpToolPolicy; } });
+Object.defineProperty(exports, "registerGuardedMcpTool", { enumerable: true, get: function () { return tool_policy_guard_js_1.registerGuardedMcpTool; } });
+//# sourceMappingURL=index.js.map

package/dist-cjs/admin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAUH,6CAKuB;AAJrB,gHAAA,iBAAiB,OAAA;AACjB,kHAAA,mBAAmB,OAAA;AACnB,mHAAA,oBAAoB,OAAA;AACpB,4HAAA,6BAA6B,OAAA;AAQ/B,+CAqBwB;AApBtB,oHAAA,oBAAoB,OAAA;AACpB,mHAAA,mBAAmB,OAAA;AACnB,mHAAA,mBAAmB,OAAA;AACnB,gHAAA,gBAAgB,OAAA;AAChB,0HAAA,0BAA0B,OAAA;AAC1B,gIAAA,gCAAgC,OAAA;AAChC,mHAAA,mBAAmB,OAAA;AACnB,8GAAA,cAAc,OAAA;AACd,mHAAA,mBAAmB,OAAA;AACnB,+GAAA,eAAe,OAAA;AACf,qHAAA,qBAAqB,OAAA;AACrB,qHAAA,qBAAqB,OAAA;AACrB,8GAAA,cAAc,OAAA;AACd,8GAAA,cAAc,OAAA;AACd,8GAAA,cAAc,OAAA;AACd,0GAAA,UAAU,OAAA;AACV,6GAAA,aAAa,OAAA;AACb,gHAAA,gBAAgB,OAAA;AAChB,iHAAA,iBAAiB,OAAA;AACjB,oHAAA,oBAAoB,OAAA;AAItB,mDAAwD;AAA/C,sHAAA,oBAAoB,OAAA;AAe7B,+DAKgC;AAJ9B,uHAAA,eAAe,OAAA;AACf,iIAAA,yBAAyB,OAAA;AACzB,8HAAA,sBAAsB,OAAA;AACtB,8HAAA,sBAAsB,OAAA"}

package/dist-cjs/admin/mcp-admin.js

@@ -0,0 +1,441 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ensureMcpAdminSchema = ensureMcpAdminSchema;
+exports.seedMcpToolPolicies = seedMcpToolPolicies;
+exports.listMcpToolPolicies = listMcpToolPolicies;
+exports.getMcpToolPolicy = getMcpToolPolicy;
+exports.disabledMcpToolPolicyNames = disabledMcpToolPolicyNames;
+exports.filterListedToolsByEnabledPolicy = filterListedToolsByEnabledPolicy;
+exports.updateMcpToolPolicy = updateMcpToolPolicy;
+exports.listMcpClients = listMcpClients;
+exports.setMcpClientEnabled = setMcpClientEnabled;
+exports.revokeMcpClient = revokeMcpClient;
+exports.rotateMcpClientSecret = rotateMcpClientSecret;
+exports.clientCanAuthenticate = clientCanAuthenticate;
+exports.touchMcpClient = touchMcpClient;
+exports.mcpAdminStatus = mcpAdminStatus;
+exports.mcpDiagnostics = mcpDiagnostics;
+exports.mcpMetrics = mcpMetrics;
+exports.auditMcpAdmin = auditMcpAdmin;
+exports.listMcpAuditLogs = listMcpAuditLogs;
+exports.pruneMcpAuditLogs = pruneMcpAuditLogs;
+exports.exportMcpDiagnostics = exportMcpDiagnostics;
+const node_crypto_1 = require("node:crypto");
+const adapters_js_1 = require("./adapters.js");
+function getDb() {
+    return (0, adapters_js_1.getMcpAdminAdapters)().getDb();
+}
+function getWriteDb() {
+    return (0, adapters_js_1.getMcpAdminAdapters)().getWriteDb();
+}
+function tableExists(name) {
+    return (0, adapters_js_1.getMcpAdminAdapters)().tableExists(name);
+}
+function MCP_TOOL_REGISTRY() {
+    return (0, adapters_js_1.getMcpAdminAdapters)().listTools();
+}
+function mcpOauthReady() {
+    return (0, adapters_js_1.getMcpAdminAdapters)().mcpOauthReady();
+}
+function resolveMcpPublicUrl() {
+    return (0, adapters_js_1.getMcpAdminAdapters)().resolveMcpPublicUrl();
+}
+function listRequestLogs(opts) {
+    const fn = (0, adapters_js_1.getMcpAdminAdapters)().listRequestLogs;
+    return fn ? fn(opts) : { logs: [] };
+}
+let schemaEnsured = false;
+/** Rôles acceptés dans les policies (adapters, défaut historique). */
+function policyRoleNames() {
+    return (0, adapters_js_1.getMcpAdminAdapters)().policyRoleNames || ["owner", "collaborator"];
+}
+/** Scopes acceptés dans les policies (adapters, défaut historique). */
+function policyScopeNames() {
+    return ((0, adapters_js_1.getMcpAdminAdapters)().policyScopeNames || [
+        "crm",
+        "crm:read",
+        "crm:write",
+        "full",
+    ]);
+}
+function hasColumn(table, column) {
+    if (!tableExists(table))
+        return false;
+    return getDb()
+        .prepare(`PRAGMA table_info("${table.replaceAll('"', '""')}")`)
+        .all().some((item) => item.name === column);
+}
+function ensureMcpAdminSchema() {
+    if (schemaEnsured)
+        return;
+    const db = getWriteDb();
+    if (tableExists("mcp_oauth_clients")) {
+        if (!hasColumn("mcp_oauth_clients", "enabled")) {
+            db.exec(`ALTER TABLE mcp_oauth_clients ADD COLUMN enabled INTEGER NOT NULL DEFAULT 1`);
+        }
+        if (!hasColumn("mcp_oauth_clients", "revoked_at")) {
+            db.exec(`ALTER TABLE mcp_oauth_clients ADD COLUMN revoked_at TEXT`);
+        }
+        if (!hasColumn("mcp_oauth_clients", "last_used_at")) {
+            db.exec(`ALTER TABLE mcp_oauth_clients ADD COLUMN last_used_at TEXT`);
+        }
+    }
+    if (tableExists("mcp_tool_policies") &&
+        !hasColumn("mcp_tool_policies", "admin_override")) {
+        db.exec(`ALTER TABLE mcp_tool_policies ADD COLUMN admin_override INTEGER NOT NULL DEFAULT 0`);
+    }
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS mcp_tool_policies (
+      tool_name TEXT PRIMARY KEY,
+      enabled INTEGER NOT NULL DEFAULT 1,
+      allowed_roles TEXT NOT NULL DEFAULT 'owner,collaborator',
+      allowed_scopes TEXT NOT NULL DEFAULT '',
+      -- 1 si l'admin a explicitement fixé enabled (updateMcpToolPolicy) —
+      -- distingue une désactivation admin du seed par défaut
+      -- (mcpPublishDefault=false → enabled=0 « non publié par défaut »).
+      admin_override INTEGER NOT NULL DEFAULT 0,
+      updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+    );
+    CREATE TABLE IF NOT EXISTS mcp_audit_logs (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      created_at TEXT NOT NULL DEFAULT (datetime('now')),
+      event TEXT NOT NULL,
+      actor TEXT,
+      client_id TEXT,
+      tool_name TEXT,
+      outcome TEXT NOT NULL DEFAULT 'ok',
+      detail_json TEXT
+    );
+    CREATE INDEX IF NOT EXISTS idx_mcp_audit_created ON mcp_audit_logs(created_at);
+  `);
+    const insert = db.prepare(`INSERT OR IGNORE INTO mcp_tool_policies
+       (tool_name, enabled, allowed_roles, allowed_scopes)
+     VALUES (?, ?, ?, ?)`);
+    const seedFn = () => {
+        for (const tool of MCP_TOOL_REGISTRY()) {
+            const roles = (tool.defaultRoles || policyRoleNames()).join(",");
+            const enabled = tool.mcpPublishDefault === false ? 0 : 1;
+            insert.run(tool.name, enabled, roles, tool.requiredScope);
+        }
+    };
+    if (db.transaction)
+        db.transaction(seedFn)();
+    else
+        seedFn();
+    pruneMcpAuditLogs();
+    schemaEnsured = true;
+}
+/**
+ * Seed permissif (INSERT OR IGNORE) de policies pour des tools hors registre
+ * adapters — ex. tools de `facade.listTools()` quand la garde M2 est activée
+ * sur une façade marque. Ne modifie JAMAIS une policy existante.
+ */
+function seedMcpToolPolicies(tools) {
+    ensureMcpAdminSchema();
+    const db = getWriteDb();
+    const insert = db.prepare(`INSERT OR IGNORE INTO mcp_tool_policies
+       (tool_name, enabled, allowed_roles, allowed_scopes)
+     VALUES (?, ?, ?, ?)`);
+    const run = () => {
+        for (const tool of tools) {
+            if (!tool?.name)
+                continue;
+            const roles = (tool.defaultRoles || policyRoleNames()).join(",");
+            const enabled = tool.mcpPublishDefault === false ? 0 : 1;
+            insert.run(tool.name, enabled, roles, tool.requiredScope || "");
+        }
+    };
+    if (db.transaction)
+        db.transaction(run)();
+    else
+        run();
+}
+function listMcpToolPolicies() {
+    ensureMcpAdminSchema();
+    const rows = getDb()
+        .prepare(`SELECT tool_name, enabled, allowed_roles, allowed_scopes, updated_at
+       FROM mcp_tool_policies`)
+        .all();
+    const policy = new Map(rows.map((row) => [row.tool_name, row]));
+    return MCP_TOOL_REGISTRY().map((tool) => {
+        const row = policy.get(tool.name);
+        const defaultEnabled = tool.mcpPublishDefault !== false;
+        return {
+            ...tool,
+            enabled: row ? row.enabled !== 0 : defaultEnabled,
+            allowedRoles: (row?.allowed_roles || policyRoleNames().join(","))
+                .split(",")
+                .filter(Boolean),
+            allowedScopes: (row?.allowed_scopes || tool.requiredScope).split(/[\s,]+/).filter(Boolean),
+            updatedAt: row?.updated_at || null,
+        };
+    });
+}
+function getMcpToolPolicy(name) {
+    return listMcpToolPolicies().find((tool) => tool.name === name) || null;
+}
+/**
+ * Noms désactivés PAR L'ADMIN (`enabled=0` ET `admin_override=1`).
+ *
+ * Les lignes `enabled=0` seedées par défaut (`mcpPublishDefault=false` —
+ * ex. toute op module sans opt-in publish, cf.
+ * `generateModuleToolsFromOperations`) ne comptent PAS : elles signifient
+ * « non publié par défaut aux clients MCP externes », pas « désactivé » —
+ * les masquer vidait `listTools`/`GET /mcp` des tools métier (régression
+ * 0.17.1, vue par les gates module des marques). Admin non câblé / erreur
+ * DB → ensemble vide (pas de filtre).
+ */
+function disabledMcpToolPolicyNames() {
+    try {
+        ensureMcpAdminSchema();
+        const rows = getDb()
+            .prepare(`SELECT tool_name FROM mcp_tool_policies
+         WHERE enabled = 0 AND admin_override = 1`)
+            .all();
+        return new Set(rows.map((row) => row.tool_name));
+    }
+    catch {
+        return new Set();
+    }
+}
+/** Retire de `listTools` les tools (et alias) désactivés en admin MCP. */
+function filterListedToolsByEnabledPolicy(tools, aliases = {}) {
+    const disabled = disabledMcpToolPolicyNames();
+    if (disabled.size === 0)
+        return tools;
+    for (const [alias, canonical] of Object.entries(aliases)) {
+        if (disabled.has(alias))
+            disabled.add(canonical);
+        if (disabled.has(canonical))
+            disabled.add(alias);
+    }
+    return tools.filter((tool) => !disabled.has(tool.name) &&
+        !(tool.aliasOf && disabled.has(tool.aliasOf)));
+}
+function updateMcpToolPolicy(name, input) {
+    ensureMcpAdminSchema();
+    if (!MCP_TOOL_REGISTRY().some((tool) => tool.name === name))
+        return null;
+    const current = getMcpToolPolicy(name);
+    // Rôles/scopes acceptés : injectés par la marque via les adapters
+    // (défauts = comportement historique TempoFlow, zéro breaking change).
+    const roles = (input.allowedRoles || current.allowedRoles).filter((role) => policyRoleNames().includes(role));
+    const scopes = (input.allowedScopes || current.allowedScopes).filter((scope) => policyScopeNames().includes(scope));
+    // `admin_override` ne se pose QUE sur une action explicite sur `enabled`
+    // (une édition rôles/scopes ne requalifie pas un seed par défaut en
+    // désactivation admin) — consommé par disabledMcpToolPolicyNames().
+    getWriteDb()
+        .prepare(`UPDATE mcp_tool_policies
+       SET enabled = ?, allowed_roles = ?, allowed_scopes = ?,
+           admin_override = MAX(admin_override, ?),
+           updated_at = datetime('now')
+       WHERE tool_name = ?`)
+        .run((input.enabled ?? current.enabled) ? 1 : 0, roles.join(","), scopes.join(","), input.enabled === undefined ? 0 : 1, name);
+    auditMcpAdmin("tool_policy_updated", {
+        toolName: name,
+        detail: { enabled: input.enabled ?? current.enabled, roles, scopes },
+    });
+    return getMcpToolPolicy(name);
+}
+function listMcpClients() {
+    ensureMcpAdminSchema();
+    if (!mcpOauthReady())
+        return [];
+    const rows = getDb()
+        .prepare(`SELECT c.client_id, c.client_name, c.redirect_uris,
+              c.token_endpoint_auth_method, c.scope, c.created_at,
+              c.enabled, c.revoked_at, c.last_used_at,
+              SUM(CASE WHEN r.revoked_at IS NULL AND r.expires_at > unixepoch() THEN 1 ELSE 0 END)
+                AS active_refresh_tokens
+       FROM mcp_oauth_clients c
+       LEFT JOIN mcp_oauth_refresh_tokens r ON r.client_id = c.client_id
+       GROUP BY c.client_id
+       ORDER BY c.created_at DESC`)
+        .all();
+    return rows.map((row) => ({
+        ...row,
+        enabled: row.enabled !== 0 && !row.revoked_at,
+        redirect_uris: safeStringArray(row.redirect_uris),
+        active_refresh_tokens: Number(row.active_refresh_tokens || 0),
+    }));
+}
+function safeStringArray(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        return Array.isArray(parsed) ? parsed.map(String) : [];
+    }
+    catch {
+        return [];
+    }
+}
+function setMcpClientEnabled(clientId, enabled) {
+    ensureMcpAdminSchema();
+    const result = getWriteDb()
+        .prepare(`UPDATE mcp_oauth_clients SET enabled = ? WHERE client_id = ? AND revoked_at IS NULL`)
+        .run(enabled ? 1 : 0, clientId);
+    if (result.changes) {
+        if (!enabled)
+            revokeClientTokens(clientId);
+        auditMcpAdmin(enabled ? "client_enabled" : "client_disabled", { clientId });
+    }
+    return result.changes > 0;
+}
+function revokeMcpClient(clientId) {
+    ensureMcpAdminSchema();
+    const result = getWriteDb()
+        .prepare(`UPDATE mcp_oauth_clients
+       SET enabled = 0, revoked_at = COALESCE(revoked_at, datetime('now'))
+       WHERE client_id = ?`)
+        .run(clientId);
+    revokeClientTokens(clientId);
+    if (result.changes)
+        auditMcpAdmin("client_revoked", { clientId });
+    return result.changes > 0;
+}
+function rotateMcpClientSecret(clientId) {
+    ensureMcpAdminSchema();
+    const client = getDb()
+        .prepare(`SELECT token_endpoint_auth_method, revoked_at
+       FROM mcp_oauth_clients WHERE client_id = ?`)
+        .get(clientId);
+    if (!client || client.revoked_at || client.token_endpoint_auth_method === "none")
+        return null;
+    const clientSecret = (0, node_crypto_1.randomBytes)(32).toString("base64url");
+    const hash = (0, node_crypto_1.createHash)("sha256").update(clientSecret, "utf8").digest("hex");
+    getWriteDb()
+        .prepare(`UPDATE mcp_oauth_clients SET client_secret_hash = ? WHERE client_id = ?`)
+        .run(hash, clientId);
+    revokeClientTokens(clientId);
+    auditMcpAdmin("client_secret_rotated", { clientId });
+    return { clientSecret };
+}
+function revokeClientTokens(clientId) {
+    getWriteDb()
+        .prepare(`UPDATE mcp_oauth_refresh_tokens
+       SET revoked_at = COALESCE(revoked_at, unixepoch())
+       WHERE client_id = ?`)
+        .run(clientId);
+}
+function clientCanAuthenticate(clientId) {
+    ensureMcpAdminSchema();
+    const row = getDb()
+        .prepare(`SELECT enabled, revoked_at FROM mcp_oauth_clients WHERE client_id = ?`)
+        .get(clientId);
+    return Boolean(row && row.enabled !== 0 && !row.revoked_at);
+}
+function touchMcpClient(clientId) {
+    ensureMcpAdminSchema();
+    getWriteDb()
+        .prepare(`UPDATE mcp_oauth_clients SET last_used_at = datetime('now') WHERE client_id = ?`)
+        .run(clientId);
+}
+function mcpAdminStatus() {
+    const publicUrl = resolveMcpPublicUrl();
+    const clients = listMcpClients();
+    const tools = listMcpToolPolicies();
+    return {
+        ready: mcpOauthReady(),
+        publicUrl,
+        mcpUrl: publicUrl ? `${publicUrl}/mcp` : null,
+        oauthReady: mcpOauthReady(),
+        jwtConfigured: Boolean(process.env.MCP_JWT_SECRET),
+        toolCount: tools.length,
+        enabledToolCount: tools.filter((tool) => tool.enabled).length,
+        clientCount: clients.length,
+        enabledClientCount: clients.filter((client) => client.enabled).length,
+    };
+}
+function mcpDiagnostics() {
+    const status = mcpAdminStatus();
+    const checks = [
+        { id: "oauth_schema", ok: status.oauthReady, message: "Tables OAuth MCP" },
+        { id: "jwt_secret", ok: status.jwtConfigured, message: "Secret JWT MCP configuré" },
+        { id: "public_url", ok: Boolean(status.publicUrl), message: "URL publique / tunnel" },
+        { id: "tools", ok: status.enabledToolCount > 0, message: "Au moins un tool actif" },
+    ];
+    return { status, checks, healthy: checks.every((check) => check.ok) };
+}
+function mcpMetrics() {
+    const logs = listRequestLogs({ source: "mcp", limit: 1000 }).logs;
+    const errors = logs.filter((log) => log.status >= 400 || log.detail.ok === false);
+    const durations = logs.map((log) => log.durationMs).sort((a, b) => a - b);
+    return {
+        window: "process",
+        requests: logs.length,
+        errors: errors.length,
+        errorRate: logs.length ? errors.length / logs.length : 0,
+        averageDurationMs: logs.length
+            ? Math.round(logs.reduce((sum, log) => sum + log.durationMs, 0) / logs.length)
+            : 0,
+        p95DurationMs: durations.length
+            ? durations[Math.min(durations.length - 1, Math.floor(durations.length * 0.95))]
+            : 0,
+        byTool: Object.fromEntries(MCP_TOOL_REGISTRY().map((tool) => [
+            tool.name,
+            logs.filter((log) => log.detail.tool === tool.name).length,
+        ])),
+    };
+}
+function auditMcpAdmin(event, options = {}) {
+    ensureMcpAdminSchema();
+    getWriteDb()
+        .prepare(`INSERT INTO mcp_audit_logs
+       (event, actor, client_id, tool_name, outcome, detail_json)
+       VALUES (?, ?, ?, ?, ?, ?)`)
+        .run(event, options.actor || null, options.clientId || null, options.toolName || null, options.outcome || "ok", options.detail == null ? null : JSON.stringify(options.detail));
+}
+function listMcpAuditLogs(limit = 200) {
+    ensureMcpAdminSchema();
+    return getDb()
+        .prepare(`SELECT id, created_at, event, actor, client_id, tool_name, outcome, detail_json
+       FROM mcp_audit_logs ORDER BY id DESC LIMIT ?`)
+        .all(Math.min(1000, Math.max(1, limit)));
+}
+function pruneMcpAuditLogs(retentionDays = Number(process.env.MCP_AUDIT_RETENTION_DAYS || 30)) {
+    if (!tableExists("mcp_audit_logs"))
+        return 0;
+    const days = Number.isFinite(retentionDays)
+        ? Math.min(365, Math.max(1, Math.floor(retentionDays)))
+        : 30;
+    return getWriteDb()
+        .prepare(`DELETE FROM mcp_audit_logs WHERE created_at < datetime('now', ?)`)
+        .run(`-${days} days`).changes;
+}
+function exportMcpDiagnostics() {
+    const clients = listMcpClients().map((client) => ({
+        idPrefix: client.client_id.slice(0, 12),
+        name: client.client_name,
+        redirectHosts: client.redirect_uris.map((uri) => {
+            try {
+                return new URL(uri).host;
+            }
+            catch {
+                return "invalid";
+            }
+        }),
+        scope: client.scope,
+        enabled: client.enabled,
+        revoked: Boolean(client.revoked_at),
+        lastUsedAt: client.last_used_at,
+    }));
+    return {
+        generatedAt: new Date().toISOString(),
+        diagnostics: mcpDiagnostics(),
+        metrics: mcpMetrics(),
+        tools: listMcpToolPolicies().map((tool) => ({
+            name: tool.name,
+            enabled: tool.enabled,
+            requiredScope: tool.requiredScope,
+            allowedRoles: tool.allowedRoles,
+            allowedScopes: tool.allowedScopes,
+        })),
+        clients,
+        auditRetentionDays: Number(process.env.MCP_AUDIT_RETENTION_DAYS || 30),
+        configuration: {
+            corsConfigured: Boolean(process.env.MCP_CORS_ORIGINS?.trim()),
+            publicUrlConfigured: Boolean(resolveMcpPublicUrl()),
+            jwtConfigured: Boolean(process.env.MCP_JWT_SECRET),
+        },
+    };
+}
+//# sourceMappingURL=mcp-admin.js.map

package/dist-cjs/admin/mcp-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-admin.js","sourceRoot":"","sources":["../../src/admin/mcp-admin.ts"],"names":[],"mappings":";;AAyDA,oDA8DC;AAOD,kDA4BC;AASD,kDA4BC;AAED,4CAEC;AAaD,gEAaC;AAGD,4EAcC;AAED,kDAsCC;AAeD,wCAyBC;AAWD,kDAUC;AAED,0CAYC;AAED,sDAqBC;AAYD,sDAQC;AAED,wCAKC;AAED,wCAeC;AAED,wCASC;AAED,gCAsBC;AAED,sCAyBC;AAED,4CAQC;AAED,8CAUC;AAED,oDAmCC;AA7hBD,6CAAsD;AACtD,+CAAoD;AAKpD,SAAS,KAAK;IACZ,OAAO,IAAA,iCAAmB,GAAE,CAAC,KAAK,EAAE,CAAC;AACvC,CAAC;AACD,SAAS,UAAU;IACjB,OAAO,IAAA,iCAAmB,GAAE,CAAC,UAAU,EAAE,CAAC;AAC5C,CAAC;AACD,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAA,iCAAmB,GAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AACD,SAAS,iBAAiB;IACxB,OAAO,IAAA,iCAAmB,GAAE,CAAC,SAAS,EAAE,CAAC;AAC3C,CAAC;AACD,SAAS,aAAa;IACpB,OAAO,IAAA,iCAAmB,GAAE,CAAC,aAAa,EAAE,CAAC;AAC/C,CAAC;AACD,SAAS,mBAAmB;IAC1B,OAAO,IAAA,iCAAmB,GAAE,CAAC,mBAAmB,EAAE,CAAC;AACrD,CAAC;AACD,SAAS,eAAe,CAAC,IAAuC;IAC9D,MAAM,EAAE,GAAG,IAAA,iCAAmB,GAAE,CAAC,eAAe,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAoF,EAAE,CAAC;AACxH,CAAC;AAED,IAAI,aAAa,GAAG,KAAK,CAAC;AAE1B,sEAAsE;AACtE,SAAS,eAAe;IACtB,OAAO,IAAA,iCAAmB,GAAE,CAAC,eAAe,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;AAC5E,CAAC;AAED,uEAAuE;AACvE,SAAS,gBAAgB;IACvB,OAAO,CACL,IAAA,iCAAmB,GAAE,CAAC,gBAAgB,IAAI;QACxC,KAAK;QACL,UAAU;QACV,WAAW;QACX,MAAM;KACP,CACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,MAAc;IAC9C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,OACE,KAAK,EAAE;SACJ,OAAO,CAAC,sBAAsB,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC;SAC9D,GAAG,EACP,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,SAAgB,oBAAoB;IAClC,IAAI,aAAa;QAAE,OAAO;IAC1B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,IAAI,WAAW,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,SAAS,CAAC,EAAE,CAAC;YAC/C,EAAE,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,YAAY,CAAC,EAAE,CAAC;YAClD,EAAE,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,cAAc,CAAC,EAAE,CAAC;YACpD,EAAE,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,IACE,WAAW,CAAC,mBAAmB,CAAC;QAChC,CAAC,SAAS,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,EACjD,CAAC;QACD,EAAE,CAAC,IAAI,CACL,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;GAuBP,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACvB;;yBAEqB,CACtB,CAAC;IACF,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC;IACF,IAAI,EAAE,CAAC,WAAW;QAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;;QACxC,MAAM,EAAE,CAAC;IACd,iBAAiB,EAAE,CAAC;IACpB,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,SAAgB,mBAAmB,CACjC,KAQC;IAED,oBAAoB,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACvB;;yBAEqB,CACtB,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,EAAE;QACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,EAAE,IAAI;gBAAE,SAAS;YAC1B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC;IACF,IAAI,EAAE,CAAC,WAAW;QAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;;QACrC,GAAG,EAAE,CAAC;AACb,CAAC;AASD,SAAgB,mBAAmB;IACjC,oBAAoB,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,KAAK,EAAE;SACjB,OAAO,CACN;8BACwB,CACzB;SACA,GAAG,EAMJ,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC;QACxD,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc;YACjD,YAAY,EAAE,CAAC,GAAG,EAAE,aAAa,IAAI,eAAe,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;iBAC9D,KAAK,CAAC,GAAG,CAAC;iBACV,MAAM,CAAC,OAAO,CAAC;YAClB,aAAa,EAAE,CAAC,GAAG,EAAE,cAAc,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAC1F,SAAS,EAAE,GAAG,EAAE,UAAU,IAAI,IAAI;SACnC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,OAAO,mBAAmB,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,0BAA0B;IACxC,IAAI,CAAC;QACH,oBAAoB,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,KAAK,EAAE;aACjB,OAAO,CACN;kDAC0C,CAC3C;aACA,GAAG,EAAkC,CAAC;QACzC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,SAAgB,gCAAgC,CAE9C,KAAU,EAAE,UAAkC,EAAE;IAChD,MAAM,QAAQ,GAAG,0BAA0B,EAAE,CAAC;IAC9C,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAChD,CAAC;AACJ,CAAC;AAED,SAAgB,mBAAmB,CACjC,IAAY,EACZ,KAA+E;IAE/E,oBAAoB,EAAE,CAAC;IACvB,IAAI,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAE,CAAC;IACxC,kEAAkE;IAClE,uEAAuE;IACvE,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACzE,eAAe,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7E,gBAAgB,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CACnC,CAAC;IACF,yEAAyE;IACzE,oEAAoE;IACpE,oEAAoE;IACpE,UAAU,EAAE;SACT,OAAO,CACN;;;;2BAIqB,CACtB;SACA,GAAG,CACF,CAAC,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC1C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EACf,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAChB,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACnC,IAAI,CACL,CAAC;IACJ,aAAa,CAAC,qBAAqB,EAAE;QACnC,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE;KACrE,CAAC,CAAC;IACH,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAeD,SAAgB,cAAc;IAC5B,oBAAoB,EAAE,CAAC;IACvB,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,KAAK,EAAE;SACjB,OAAO,CACN;;;;;;;;kCAQ4B,CAC7B;SACA,GAAG,EAGJ,CAAC;IACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxB,GAAG,GAAG;QACN,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU;QAC7C,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC;QACjD,qBAAqB,EAAE,MAAM,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,CAAC;KAC9D,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,OAAgB;IACpE,oBAAoB,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,UAAU,EAAE;SACxB,OAAO,CAAC,qFAAqF,CAAC;SAC9F,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO;YAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC3C,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAgB,eAAe,CAAC,QAAgB;IAC9C,oBAAoB,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,UAAU,EAAE;SACxB,OAAO,CACN;;2BAEqB,CACtB;SACA,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjB,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,OAAO;QAAE,aAAa,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAgB,qBAAqB,CACnC,QAAgB;IAEhB,oBAAoB,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,KAAK,EAAE;SACnB,OAAO,CACN;kDAC4C,CAC7C;SACA,GAAG,CAAC,QAAQ,CAEF,CAAC;IACd,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,0BAA0B,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9F,MAAM,YAAY,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7E,UAAU,EAAE;SACT,OAAO,CAAC,yEAAyE,CAAC;SAClF,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvB,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7B,aAAa,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,OAAO,EAAE,YAAY,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,UAAU,EAAE;SACT,OAAO,CACN;;2BAEqB,CACtB;SACA,GAAG,CAAC,QAAQ,CAAC,CAAC;AACnB,CAAC;AAED,SAAgB,qBAAqB,CAAC,QAAgB;IACpD,oBAAoB,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,KAAK,EAAE;SAChB,OAAO,CACN,uEAAuE,CACxE;SACA,GAAG,CAAC,QAAQ,CAA+D,CAAC;IAC/E,OAAO,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC9D,CAAC;AAED,SAAgB,cAAc,CAAC,QAAgB;IAC7C,oBAAoB,EAAE,CAAC;IACvB,UAAU,EAAE;SACT,OAAO,CAAC,iFAAiF,CAAC;SAC1F,GAAG,CAAC,QAAQ,CAAC,CAAC;AACnB,CAAC;AAED,SAAgB,cAAc;IAC5B,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,OAAO;QACL,KAAK,EAAE,aAAa,EAAE;QACtB,SAAS;QACT,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,MAAM,CAAC,CAAC,CAAC,IAAI;QAC7C,UAAU,EAAE,aAAa,EAAE;QAC3B,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAClD,SAAS,EAAE,KAAK,CAAC,MAAM;QACvB,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM;QAC7D,WAAW,EAAE,OAAO,CAAC,MAAM;QAC3B,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM;KACtE,CAAC;AACJ,CAAC;AAED,SAAgB,cAAc;IAC5B,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG;QACb,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE;QAC1E,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,0BAA0B,EAAE;QACnF,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE;QACrF,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,gBAAgB,GAAG,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE;KACpF,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,SAAgB,UAAU;IACxB,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxD,iBAAiB,EAAE,IAAI,CAAC,MAAM;YAC5B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;YAC9E,CAAC,CAAC,CAAC;QACL,aAAa,EAAE,SAAS,CAAC,MAAM;YAC7B,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;YAChF,CAAC,CAAC,CAAC;QACL,MAAM,EAAE,MAAM,CAAC,WAAW,CACxB,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;SAC3D,CAAC,CACH;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,aAAa,CAC3B,KAAa,EACb,UAMI,EAAE;IAEN,oBAAoB,EAAE,CAAC;IACvB,UAAU,EAAE;SACT,OAAO,CACN;;iCAE2B,CAC5B;SACA,GAAG,CACF,KAAK,EACL,OAAO,CAAC,KAAK,IAAI,IAAI,EACrB,OAAO,CAAC,QAAQ,IAAI,IAAI,EACxB,OAAO,CAAC,QAAQ,IAAI,IAAI,EACxB,OAAO,CAAC,OAAO,IAAI,IAAI,EACvB,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAC/D,CAAC;AACN,CAAC;AAED,SAAgB,gBAAgB,CAAC,KAAK,GAAG,GAAG;IAC1C,oBAAoB,EAAE,CAAC;IACvB,OAAO,KAAK,EAAE;SACX,OAAO,CACN;oDAC8C,CAC/C;SACA,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAgB,iBAAiB,CAC/B,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;IAElE,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC;QAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;QACzC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,UAAU,EAAE;SAChB,OAAO,CAAC,kEAAkE,CAAC;SAC3E,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC;AAClC,CAAC;AAED,SAAgB,oBAAoB;IAClC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChD,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,EAAE,MAAM,CAAC,WAAW;QACxB,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9C,IAAI,CAAC;gBACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC,CAAC;QACF,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QACnC,UAAU,EAAE,MAAM,CAAC,YAAY;KAChC,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,WAAW,EAAE,cAAc,EAAE;QAC7B,OAAO,EAAE,UAAU,EAAE;QACrB,KAAK,EAAE,mBAAmB,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;QACH,OAAO;QACP,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;QACtE,aAAa,EAAE;YACb,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;YAC7D,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC;YACnD,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;SACnD;KACF,CAAC;AACJ,CAAC"}