@defai.digital/ax-cli 4.4.7 → 4.4.11

package/dist/mcp/type-safety.js

@@ -1,237 +0,0 @@
-/**
- * Smart constructor for ServerName
- * Validates server name format at runtime
- */
-export function createServerName(name) {
-    // Server names must be alphanumeric with hyphens/underscores
-    if (!/^[a-z0-9-_]+$/i.test(name)) {
-        return null;
-    }
-    if (name.length < 1 || name.length > 64) {
-        return null;
-    }
-    return name;
-}
-/**
- * Smart constructor for ConfigFilePath
- */
-export function createConfigFilePath(path) {
-    if (!path || path.trim().length === 0) {
-        return null;
-    }
-    // Must be absolute path or relative starting with .
-    if (!path.startsWith('/') && !path.startsWith('.')) {
-        return null;
-    }
-    return path;
-}
-/**
- * Smart constructor for ToolName
- * Validates tool name format at runtime
- */
-export function createToolName(name) {
-    // Tool names can have underscores (for MCP prefix like mcp__server__tool)
-    if (!/^[a-zA-Z0-9_-]+$/.test(name)) {
-        return null;
-    }
-    if (name.length < 1 || name.length > 128) {
-        return null;
-    }
-    return name;
-}
-/**
- * Type-safe state transition
- * PREVENTS: Invalid state transitions at compile time
- */
-export function transition(_from, to) {
-    return to;
-}
-/**
- * TECHNIQUE 3: Exhaustiveness Checking
- * Ensures all cases are handled (prevents forgotten branches)
- */
-export function assertNever(value) {
-    throw new Error(`Unexpected value: ${JSON.stringify(value)}`);
-}
-/**
- * Example: Handle all connection states
- */
-export function handleConnectionState(state) {
-    switch (state.status) {
-        case 'idle':
-            return `Server ${state.serverName} is idle`;
-        case 'connecting':
-            return `Connecting to ${state.serverName} (started ${Date.now() - state.startedAt}ms ago)`;
-        case 'connected':
-            return `Connected to ${state.serverName} (uptime: ${Date.now() - state.connectedAt}ms)`;
-        case 'disconnecting':
-            return `Disconnecting from ${state.serverName}`;
-        case 'failed':
-            return `Connection to ${state.serverName} failed: ${state.error.message}`;
-        default:
-            // If we add a new state and forget to handle it, TypeScript error here!
-            return assertNever(state);
-    }
-}
-/**
- * Smart constructor that proves array is non-empty
- */
-export function asNonEmpty(arr) {
-    if (arr.length === 0) {
-        return null;
-    }
-    return arr;
-}
-/**
- * Functions that require non-empty arrays can enforce it at compile time
- */
-export function getFirstServer(servers) {
-    return servers[0]; // TypeScript knows this is safe!
-}
-/**
- * Helper to create success result
- */
-export function Ok(value) {
-    return { success: true, value };
-}
-/**
- * Helper to create error result
- */
-export function Err(error) {
-    return { success: false, error };
-}
-/**
- * Map over result (only if success)
- */
-export function mapResult(result, fn) {
-    if (result.success) {
-        return Ok(fn(result.value));
-    }
-    return result;
-}
-/**
- * Chain results (flatMap)
- */
-export function andThen(result, fn) {
-    if (result.success) {
-        return fn(result.value);
-    }
-    return result;
-}
-// Resource handle that can only be used once
-export class LinearResource {
-    resource;
-    _used = false;
-    constructor(resource) {
-        this.resource = resource;
-    }
-    /**
-     * Use the resource exactly once
-     * Compile-time: Can't call use() twice on same instance
-     * Runtime: Throws if called twice
-     */
-    use(fn) {
-        if (this._used) {
-            throw new Error('Resource already used! Linear type violation.');
-        }
-        this._used = true;
-        try {
-            return fn(this.resource);
-        }
-        finally {
-            this.resource.dispose();
-        }
-    }
-}
-/**
- * TECHNIQUE 7: Opaque Types for Mutex Tokens
- * Prove at compile-time that caller has acquired the lock
- */
-// Opaque token that proves lock is held
-export class MutexToken {
-    serverName;
-    // @ts-expect-error - Brand field is intentionally unused (for type safety only)
-    __brand;
-    // Private constructor - can only be created by Mutex
-    constructor(serverName) {
-        this.serverName = serverName;
-    }
-    // Only Mutex can create tokens
-    static create(serverName) {
-        return new MutexToken(serverName);
-    }
-}
-/**
- * Operations that require a lock must receive a token
- * This proves at compile-time that the caller holds the lock!
- */
-export function performCriticalOperation(serverName, token, operation) {
-    // Verify token matches server (runtime check)
-    if (token.serverName !== serverName) {
-        throw new Error('Token is for wrong server!');
-    }
-    // Proceed with operation - we KNOW we have the lock
-    operation();
-}
-/**
- * TECHNIQUE 8: Const Assertions for Immutability
- * Prevent accidental mutations
- */
-export const MCP_STATES = {
-    IDLE: 'idle',
-    CONNECTING: 'connecting',
-    CONNECTED: 'connected',
-    DISCONNECTING: 'disconnecting',
-    FAILED: 'failed'
-};
-/**
- * TECHNIQUE 11: Recursive Type Guards
- * Deep validation of nested structures
- */
-export function isValidConnectionState(value) {
-    if (typeof value !== 'object' || value === null) {
-        return false;
-    }
-    const state = value;
-    if (typeof state.status !== 'string') {
-        return false;
-    }
-    if (typeof state.serverName !== 'string') {
-        return false;
-    }
-    switch (state.status) {
-        case 'idle':
-            return true;
-        case 'connecting':
-            return typeof state.startedAt === 'number';
-        case 'connected':
-            return typeof state.connectedAt === 'number' && state.client !== undefined;
-        case 'disconnecting':
-            return state.client !== undefined;
-        case 'failed':
-            return state.error instanceof Error && typeof state.failedAt === 'number';
-        default:
-            return false;
-    }
-}
-/**
- * Convert unknown error to Error instance
- * Utility to reduce repeated error instanceof checks throughout the codebase
- */
-export function toError(error) {
-    return error instanceof Error ? error : new Error(String(error));
-}
-/**
- * Wrap async function to return Result
- */
-export async function tryCatch(fn) {
-    try {
-        const value = await fn();
-        return Ok(value);
-    }
-    catch (error) {
-        return Err(toError(error));
-    }
-}
-// Usage examples moved to tests/mcp/type-safety.test.ts
-//# sourceMappingURL=type-safety.js.map

package/dist/mcp/type-safety.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"type-safety.js","sourceRoot":"","sources":["../../src/mcp/type-safety.ts"],"names":[],"mappings":"AAuBA;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,6DAA6D;IAC7D,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAkB,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oDAAoD;IACpD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAsB,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,0EAA0E;IAC1E,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAgB,CAAC;AAC1B,CAAC;AAyBD;;;GAGG;AACH,MAAM,UAAU,UAAU,CACxB,KAAQ,EACR,EAAsB;IAEtB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AAEH,MAAM,UAAU,WAAW,CAAC,KAAY;IACtC,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAsB;IAC1D,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,UAAU,KAAK,CAAC,UAAU,UAAU,CAAC;QAE9C,KAAK,YAAY;YACf,OAAO,iBAAiB,KAAK,CAAC,UAAU,aAAa,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,SAAS,CAAC;QAE7F,KAAK,WAAW;YACd,OAAO,gBAAgB,KAAK,CAAC,UAAU,aAAa,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,KAAK,CAAC;QAE1F,KAAK,eAAe;YAClB,OAAO,sBAAsB,KAAK,CAAC,UAAU,EAAE,CAAC;QAElD,KAAK,QAAQ;YACX,OAAO,iBAAiB,KAAK,CAAC,UAAU,YAAY,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAE5E;YACE,wEAAwE;YACxE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAUD;;GAEG;AACH,MAAM,UAAU,UAAU,CAAI,GAAQ;IACpC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAuB,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAkC;IAC/D,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,iCAAiC;AACtD,CAAC;AAWD;;GAEG;AACH,MAAM,UAAU,EAAE,CAAI,KAAQ;IAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,GAAG,CAAI,KAAQ;IAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CACvB,MAAoB,EACpB,EAAmB;IAEnB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CACrB,MAAoB,EACpB,EAA8B;IAE9B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAaD,6CAA6C;AAC7C,MAAM,OAAO,cAAc;IAGL;IAFZ,KAAK,GAAG,KAAK,CAAC;IAEtB,YAAoB,QAAW;QAAX,aAAQ,GAAR,QAAQ,CAAG;IAAG,CAAC;IAEnC;;;;OAIG;IACH,GAAG,CAAI,EAAsB;QAC3B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAElB,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AAEH,wCAAwC;AACxC,MAAM,OAAO,UAAU;IAKe;IAJpC,gFAAgF;IAC/D,OAAO,CAAgB;IAExC,qDAAqD;IACrD,YAAoC,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAE9D,+BAA+B;IAC/B,MAAM,CAAC,MAAM,CAAC,UAAsB;QAClC,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAsB,EACtB,KAAiB,EACjB,SAAqB;IAErB,8CAA8C;IAC9C,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IAED,oDAAoD;IACpD,SAAS,EAAE,CAAC;AACd,CAAC;AAED;;;GAGG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,eAAe;IAC9B,MAAM,EAAE,QAAQ;CACR,CAAC;AA0BX;;;GAGG;AAEH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,KAAiC,CAAC;IAEhD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;QAEd,KAAK,YAAY;YACf,OAAO,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC;QAE7C,KAAK,WAAW;YACd,OAAO,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;QAE7E,KAAK,eAAe;YAClB,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;QAEpC,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC,KAAK,YAAY,KAAK,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAE5E;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,KAAc;IACpC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,EAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,wDAAwD"}

package/dist/mcp/validation.d.ts

@@ -1,29 +0,0 @@
-/**
- * MCP Server Configuration Validation (Phase 4)
- *
- * Provides pre-flight checks to validate MCP server configurations
- * before attempting connection, improving error messages and UX.
- */
-import type { MCPServerConfig } from '../schemas/settings-schemas.js';
-export interface ValidationResult {
-    valid: boolean;
-    warnings: string[];
-    errors: string[];
-}
-export interface ValidationIssue {
-    type: 'error' | 'warning';
-    message: string;
-    field?: string;
-}
-/**
- * Validate an MCP server configuration with pre-flight checks
- */
-export declare function validateServerConfig(config: MCPServerConfig): Promise<ValidationResult>;
-/**
- * Format validation result for display
- */
-export declare function formatValidationResult(result: ValidationResult): string;
-/**
- * Get the list of safe MCP commands (for documentation/testing)
- */
-export declare function getSafeMCPCommands(): readonly string[];

package/dist/mcp/validation.js

@@ -1,339 +0,0 @@
-/**
- * MCP Server Configuration Validation (Phase 4)
- *
- * Provides pre-flight checks to validate MCP server configurations
- * before attempting connection, improving error messages and UX.
- */
-import { execFile } from 'child_process';
-import { promisify } from 'util';
-import { getTemplate } from './templates.js';
-import { getAuditLogger, AuditCategory } from '../utils/audit-logger.js';
-const execFileAsync = promisify(execFile);
-/**
- * Safe commands whitelist for MCP stdio transport
- * Only these commands are allowed to prevent command injection
- */
-const SAFE_MCP_COMMANDS = [
-    // Node.js package managers
-    'node',
-    'npm',
-    'npx',
-    'bun',
-    'deno',
-    'pnpm',
-    'yarn',
-    // Python
-    'python',
-    'python3',
-    'pip',
-    'pip3',
-    'uvx',
-    // Docker
-    'docker',
-    // Common shell commands (for legitimate MCP servers)
-    'bash',
-    'sh',
-    'zsh',
-    // Full paths allowed (validated separately)
-];
-/**
- * Validate an MCP server configuration with pre-flight checks
- */
-export async function validateServerConfig(config) {
-    const warnings = [];
-    const errors = [];
-    // 1. Validate transport configuration exists
-    if (!config.transport) {
-        errors.push('Transport configuration is required');
-        return { valid: false, warnings, errors };
-    }
-    // 2. Transport-specific validation
-    switch (config.transport.type) {
-        case 'stdio':
-            await validateStdioTransport(config, errors, warnings);
-            break;
-        case 'http':
-        case 'sse':
-            await validateHttpTransport(config, errors, warnings);
-            break;
-        case 'streamable_http':
-            await validateStreamableHttpTransport(config, errors, warnings);
-            break;
-    }
-    // 3. Validate required environment variables from template
-    validateRequiredEnvVars(config, errors, warnings);
-    // 4. Validate server name
-    if (!config.name || config.name.trim() === '') {
-        errors.push('Server name cannot be empty');
-    }
-    else if (!/^[a-z0-9-_]+$/i.test(config.name)) {
-        warnings.push(`Server name "${config.name}" contains special characters. Recommended: alphanumeric, hyphens, underscores only`);
-    }
-    return {
-        valid: errors.length === 0,
-        warnings,
-        errors
-    };
-}
-/**
- * Validate command against whitelist
- * Prevents command injection by only allowing safe commands
- */
-function validateCommandWhitelist(command) {
-    // BUG FIX: Handle empty or whitespace-only commands
-    const trimmedCommand = command.trim();
-    if (!trimmedCommand) {
-        return {
-            valid: false,
-            error: 'Command cannot be empty'
-        };
-    }
-    // Allow full paths (they will be validated separately)
-    if (trimmedCommand.includes('/') || trimmedCommand.includes('\\')) {
-        // Validate path doesn't contain shell metacharacters
-        const dangerousChars = /[;&|`$()<>]/;
-        if (dangerousChars.test(trimmedCommand)) {
-            return {
-                valid: false,
-                error: `Command path contains dangerous characters: ${trimmedCommand}`
-            };
-        }
-        return { valid: true };
-    }
-    // Check against whitelist
-    // BUG FIX: Use trimmed command and handle empty result from split
-    const baseCommand = trimmedCommand.split(/\s+/)[0] || '';
-    if (!baseCommand || !SAFE_MCP_COMMANDS.includes(baseCommand)) {
-        return {
-            valid: false,
-            error: `Command "${baseCommand || '(empty)'}" is not in the safe commands whitelist. ` +
-                `Allowed: ${SAFE_MCP_COMMANDS.join(', ')}. ` +
-                `Use full path for custom commands.`
-        };
-    }
-    return { valid: true };
-}
-/**
- * Validate command arguments for injection attempts
- */
-function validateCommandArgs(args) {
-    const dangerousPatterns = /[;&|`$()<>]/;
-    for (let i = 0; i < args.length; i++) {
-        const arg = args[i];
-        // Check for shell metacharacters
-        if (dangerousPatterns.test(arg)) {
-            return {
-                valid: false,
-                error: `Argument ${i} contains dangerous shell metacharacters: "${arg}"`
-            };
-        }
-        // Check for null bytes
-        if (arg.includes('\0')) {
-            return {
-                valid: false,
-                error: `Argument ${i} contains null byte`
-            };
-        }
-    }
-    return { valid: true };
-}
-/**
- * Validate stdio transport configuration
- */
-async function validateStdioTransport(config, errors, warnings) {
-    if (!config.transport || config.transport.type !== 'stdio')
-        return;
-    const { command, args } = config.transport;
-    // Check if command exists
-    if (!command || command.trim() === '') {
-        errors.push('Command is required for stdio transport');
-        return;
-    }
-    // SECURITY: Validate command against whitelist (REQ-SEC-004)
-    const whitelistResult = validateCommandWhitelist(command);
-    if (!whitelistResult.valid) {
-        // REQ-SEC-008: Audit log command injection attempt
-        const auditLogger = getAuditLogger();
-        auditLogger.logCritical({
-            category: AuditCategory.COMMAND_EXECUTION,
-            action: 'mcp_command_injection_attempt',
-            resource: config.name,
-            outcome: 'failure',
-            error: whitelistResult.error,
-            details: { command, configName: config.name },
-        });
-        errors.push(whitelistResult.error || 'Command not allowed');
-        return; // Don't continue if command is not allowed
-    }
-    // Validate args
-    if (args && !Array.isArray(args)) {
-        errors.push('Arguments must be an array');
-        return;
-    }
-    // SECURITY: Validate arguments for injection attempts (REQ-SEC-004)
-    if (args && args.length > 0) {
-        const argsResult = validateCommandArgs(args);
-        if (!argsResult.valid) {
-            errors.push(argsResult.error || 'Invalid arguments');
-            return;
-        }
-    }
-    // Commands that require at least one argument (script/module to run)
-    // Without args, these commands start a REPL and wait for input, causing MCP timeout
-    const commandsRequiringArgs = ['node', 'python', 'python3', 'deno', 'bun'];
-    const baseCommand = command.split(/\s+/)[0].split('/').pop() || command;
-    if (commandsRequiringArgs.includes(baseCommand) && (!args || args.length === 0)) {
-        errors.push(`Command "${command}" requires at least one argument (e.g., a script file). ` +
-            `Empty args will cause the process to hang waiting for input.`);
-        return;
-    }
-    // Check if command is executable (after whitelist check)
-    const commandExists = await checkCommandExists(command);
-    if (!commandExists) {
-        warnings.push(`Command "${command}" not found in PATH. Please install it or provide full path.`);
-    }
-    // Check for common npm package patterns
-    if (command === 'npx' && args && args.length > 0) {
-        const packageName = args[0];
-        if (packageName.startsWith('@modelcontextprotocol/')) {
-            // This is an official MCP server package - good!
-            warnings.push(`Ensure "${packageName}" is installed: npm install -g ${packageName}`);
-        }
-    }
-}
-/**
- * Validate HTTP/SSE transport configuration
- */
-async function validateHttpTransport(config, errors, warnings) {
-    if (!config.transport || (config.transport.type !== 'http' && config.transport.type !== 'sse'))
-        return;
-    const { url } = config.transport;
-    // Check if URL exists
-    if (!url || url.trim() === '') {
-        errors.push(`URL is required for ${config.transport.type} transport`);
-        return;
-    }
-    // Validate URL format
-    try {
-        const parsedUrl = new URL(url);
-        // Check protocol
-        if (parsedUrl.protocol !== 'http:' && parsedUrl.protocol !== 'https:') {
-            errors.push(`Invalid protocol "${parsedUrl.protocol}". Expected http: or https:`);
-        }
-        // Warn about http (not https)
-        if (parsedUrl.protocol === 'http:' && !parsedUrl.hostname.includes('localhost') && !parsedUrl.hostname.includes('127.0.0.1')) {
-            warnings.push('Using http:// instead of https:// for remote server. Consider using encrypted connection.');
-        }
-        // Check if URL is accessible (non-blocking)
-        const accessible = await checkUrlAccessible(url);
-        if (!accessible) {
-            warnings.push(`Unable to reach "${url}". Server may not be running or URL may be incorrect.`);
-        }
-    }
-    catch {
-        errors.push(`Invalid URL format: ${url}`);
-    }
-}
-/**
- * Validate streamable HTTP transport configuration
- */
-async function validateStreamableHttpTransport(config, errors, _warnings) {
-    if (!config.transport || config.transport.type !== 'streamable_http')
-        return;
-    const { url } = config.transport;
-    if (!url || url.trim() === '') {
-        errors.push('URL is required for streamable_http transport');
-        return;
-    }
-    try {
-        new URL(url);
-    }
-    catch {
-        errors.push(`Invalid URL format: ${url}`);
-    }
-}
-/**
- * Validate required environment variables based on template
- */
-function validateRequiredEnvVars(config, errors, _warnings) {
-    // Try to get template for this server
-    const template = getTemplate(config.name);
-    if (!template || !template.requiredEnv)
-        return;
-    // Check each required environment variable
-    for (const envVar of template.requiredEnv) {
-        const hasInConfig = config.transport?.env && envVar.name in config.transport.env;
-        const hasInProcess = envVar.name in process.env;
-        if (!hasInConfig && !hasInProcess) {
-            errors.push(`Missing required environment variable: ${envVar.name} - ${envVar.description}`);
-        }
-    }
-}
-/**
- * Check if a command exists in PATH
- * Uses execFile to prevent command injection vulnerabilities
- */
-async function checkCommandExists(command) {
-    try {
-        // Handle full paths
-        if (command.includes('/') || command.includes('\\')) {
-            return true; // Assume full paths are valid
-        }
-        // Check if command exists in PATH using execFile (prevents command injection)
-        const checkCommand = process.platform === 'win32' ? 'where' : 'which';
-        await execFileAsync(checkCommand, [command]);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Check if a URL is accessible (with timeout)
- */
-async function checkUrlAccessible(url) {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), 3000);
-    try {
-        const response = await fetch(url, {
-            method: 'HEAD',
-            signal: controller.signal
-        });
-        return response.ok || response.status === 404; // 404 means server exists
-    }
-    catch {
-        return false;
-    }
-    finally {
-        clearTimeout(timeout);
-    }
-}
-/**
- * Format validation result for display
- */
-export function formatValidationResult(result) {
-    const lines = [];
-    if (result.errors.length > 0) {
-        lines.push('❌ Validation Failed\n');
-        result.errors.forEach(error => {
-            lines.push(`  • ${error}`);
-        });
-    }
-    if (result.warnings.length > 0) {
-        lines.push(result.errors.length > 0 ? '\n⚠️  Warnings\n' : '⚠️  Warnings\n');
-        result.warnings.forEach(warning => {
-            lines.push(`  • ${warning}`);
-        });
-    }
-    if (result.valid && result.warnings.length === 0) {
-        lines.push('✅ Configuration is valid');
-    }
-    return lines.join('\n');
-}
-/**
- * Get the list of safe MCP commands (for documentation/testing)
- */
-export function getSafeMCPCommands() {
-    return SAFE_MCP_COMMANDS;
-}
-//# sourceMappingURL=validation.js.map

package/dist/mcp/validation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/mcp/validation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzE,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAc1C;;;GAGG;AACH,MAAM,iBAAiB,GAAG;IACxB,2BAA2B;IAC3B,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,QAAQ;IACR,SAAS;IACT,KAAK;IACL,MAAM;IACN,KAAK;IACL,SAAS;IACT,QAAQ;IACR,qDAAqD;IACrD,MAAM;IACN,IAAI;IACJ,KAAK;IACL,4CAA4C;CACpC,CAAC;AAIX;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAuB;IAChE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,6CAA6C;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC5C,CAAC;IAED,mCAAmC;IACnC,QAAQ,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC9B,KAAK,OAAO;YACV,MAAM,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YACvD,MAAM;QACR,KAAK,MAAM,CAAC;QACZ,KAAK,KAAK;YACR,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YACtD,MAAM;QACR,KAAK,iBAAiB;YACpB,MAAM,+BAA+B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAChE,MAAM;IACV,CAAC;IAED,2DAA2D;IAC3D,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAElD,0BAA0B;IAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,IAAI,qFAAqF,CAAC,CAAC;IAClI,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,QAAQ;QACR,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAAC,OAAe;IAC/C,oDAAoD;IACpD,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,yBAAyB;SACjC,CAAC;IACJ,CAAC;IAED,uDAAuD;IACvD,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,qDAAqD;QACrD,MAAM,cAAc,GAAG,aAAa,CAAC;QACrC,IAAI,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACxC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,+CAA+C,cAAc,EAAE;aACvE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,0BAA0B;IAC1B,kEAAkE;IAClE,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,CAAC,WAAW,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,WAA6B,CAAC,EAAE,CAAC;QAC/E,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,YAAY,WAAW,IAAI,SAAS,2CAA2C;gBAC/E,YAAY,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAC5C,oCAAoC;SAC5C,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,IAAc;IACzC,MAAM,iBAAiB,GAAG,aAAa,CAAC;IAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpB,iCAAiC;QACjC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,YAAY,CAAC,8CAA8C,GAAG,GAAG;aACzE,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,YAAY,CAAC,qBAAqB;aAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,sBAAsB,CACnC,MAAuB,EACvB,MAAgB,EAChB,QAAkB;IAElB,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO;IAEnE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC;IAE3C,0BAA0B;IAC1B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAED,6DAA6D;IAC7D,MAAM,eAAe,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC3B,mDAAmD;QACnD,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,WAAW,CAAC,WAAW,CAAC;YACtB,QAAQ,EAAE,aAAa,CAAC,iBAAiB;YACzC,MAAM,EAAE,+BAA+B;YACvC,QAAQ,EAAE,MAAM,CAAC,IAAI;YACrB,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,eAAe,CAAC,KAAK;YAC5B,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE;SAC9C,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,IAAI,qBAAqB,CAAC,CAAC;QAC5D,OAAO,CAAC,2CAA2C;IACrD,CAAC;IAED,gBAAgB;IAChB,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,oEAAoE;IACpE,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,oFAAoF;IACpF,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC;IAExE,IAAI,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,CAAC,IAAI,CACT,YAAY,OAAO,0DAA0D;YAC7E,8DAA8D,CAC/D,CAAC;QACF,OAAO;IACT,CAAC;IAED,yDAAyD;IACzD,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,YAAY,OAAO,8DAA8D,CAAC,CAAC;IACnG,CAAC;IAED,wCAAwC;IACxC,IAAI,OAAO,KAAK,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,WAAW,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;YACrD,iDAAiD;YACjD,QAAQ,CAAC,IAAI,CAAC,WAAW,WAAW,kCAAkC,WAAW,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,qBAAqB,CAClC,MAAuB,EACvB,MAAgB,EAChB,QAAkB;IAElB,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO;IAEvG,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC;IAEjC,sBAAsB;IACtB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAE/B,iBAAiB;QACjB,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC,qBAAqB,SAAS,CAAC,QAAQ,6BAA6B,CAAC,CAAC;QACpF,CAAC;QAED,8BAA8B;QAC9B,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7H,QAAQ,CAAC,IAAI,CAAC,2FAA2F,CAAC,CAAC;QAC7G,CAAC;QAED,4CAA4C;QAC5C,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC,oBAAoB,GAAG,uDAAuD,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,+BAA+B,CAC5C,MAAuB,EACvB,MAAgB,EAChB,SAAmB;IAEnB,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO;IAE7E,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC;IAEjC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,MAAuB,EACvB,MAAgB,EAChB,SAAmB;IAEnB,sCAAsC;IACtC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,WAAW;QAAE,OAAO;IAE/C,2CAA2C;IAC3C,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;QACjF,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC;QAEhD,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,0CAA0C,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAAe;IAC/C,IAAI,CAAC;QACH,oBAAoB;QACpB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,CAAC,8BAA8B;QAC7C,CAAC;QAED,8EAA8E;QAC9E,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAEtE,MAAM,aAAa,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAC3C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;IAE3D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,0BAA0B;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC7D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAC7E,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YAChC,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}