@dotsetlabs/tollgate 0.1.0

package/dist/proxy/bridge.js

@@ -0,0 +1,217 @@
+/**
+ * Tollgate Bridge
+ *
+ * Orchestrates the proxy components: policy engine, session manager,
+ * audit logger, approval handler, and upstream client.
+ *
+ * Resilience features:
+ * - Graceful shutdown with configurable timeout
+ * - Force exit after graceful shutdown timeout
+ * - Health status monitoring
+ */
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { PolicyEngine } from '../policy/engine.js';
+import { AuditLogger } from '../audit/logger.js';
+import { TerminalApprovalHandler } from '../approval/terminal.js';
+import { InteractiveApprovalHandler } from '../approval/interactive.js';
+import { TollgateServer } from './server.js';
+import { UpstreamClient } from './client.js';
+import { SessionManager } from '../session/manager.js';
+import { SqliteSessionStore } from '../session/sqlite-store.js';
+import { ConfigError } from '../utils/errors.js';
+import { getServerConfig, validateConfig } from '../policy/parser.js';
+import { proxyLogger as logger } from '../utils/logger.js';
+import { DEFAULT_RESILIENCE } from '../constants.js';
+export class TollgateBridge {
+    server = null;
+    options;
+    resilience;
+    isShuttingDown = false;
+    forceExitTimeout = null;
+    constructor(options) {
+        this.options = options;
+        // Merge resilience configuration with defaults
+        const configResilience = options.config.resilience ?? {};
+        this.resilience = {
+            failureMode: options.failureMode ?? configResilience.failureMode ?? DEFAULT_RESILIENCE.failureMode,
+            upstreamTimeoutMs: configResilience.upstreamTimeoutMs ?? DEFAULT_RESILIENCE.upstreamTimeoutMs,
+            healthCheck: {
+                enabled: configResilience.healthCheck?.enabled ?? DEFAULT_RESILIENCE.healthCheck.enabled,
+                intervalMs: configResilience.healthCheck?.intervalMs ?? DEFAULT_RESILIENCE.healthCheck.intervalMs,
+                timeoutMs: configResilience.healthCheck?.timeoutMs ?? DEFAULT_RESILIENCE.healthCheck.timeoutMs,
+                failureThreshold: configResilience.healthCheck?.failureThreshold ?? DEFAULT_RESILIENCE.healthCheck.failureThreshold,
+            },
+            shutdown: {
+                timeoutMs: configResilience.shutdown?.timeoutMs ?? DEFAULT_RESILIENCE.shutdown.timeoutMs,
+                drainTimeoutMs: configResilience.shutdown?.drainTimeoutMs ?? DEFAULT_RESILIENCE.shutdown.drainTimeoutMs,
+            },
+        };
+    }
+    async start() {
+        const { config, serverName } = this.options;
+        // Validate configuration
+        validateConfig(config);
+        // Get server configuration
+        const serverConfig = getServerConfig(config, serverName);
+        if (!serverConfig) {
+            throw new ConfigError(`Server "${serverName}" not found in configuration`, {
+                availableServers: Object.keys(config.servers ?? {}),
+            });
+        }
+        // Initialize components
+        const policyEngine = new PolicyEngine(config);
+        const auditLogger = new AuditLogger(this.options.auditPath);
+        const approvalHandler = this.createApprovalHandler(config);
+        // Create upstream client with resilience configuration
+        const upstreamClient = new UpstreamClient({
+            config: serverConfig,
+            callTimeoutMs: this.resilience.upstreamTimeoutMs,
+            healthCheck: this.resilience.healthCheck,
+            onHealthChange: this.handleHealthChange.bind(this),
+        });
+        // Create session manager unless disabled
+        const sessionManager = this.options.disableSessions
+            ? undefined
+            : new SessionManager(this.createSessionStore(config));
+        // Create and start the server
+        this.server = new TollgateServer({
+            serverName,
+            policyEngine,
+            auditLogger,
+            approvalHandler,
+            upstreamClient,
+            sessionManager,
+            dryRun: this.options.dryRun,
+            failureMode: this.resilience.failureMode,
+        });
+        // Handle shutdown signals
+        const shutdown = async (signal) => {
+            if (this.isShuttingDown) {
+                logger.warn('Force exit requested');
+                process.exit(1);
+            }
+            this.isShuttingDown = true;
+            logger.info('Shutting down gracefully', { signal });
+            // Set up force exit timeout
+            this.forceExitTimeout = setTimeout(() => {
+                logger.error('Graceful shutdown timeout - forcing exit');
+                process.exit(1);
+            }, this.resilience.shutdown.timeoutMs);
+            // Unref so it doesn't prevent exit if we finish early
+            this.forceExitTimeout.unref();
+            try {
+                await this.stop();
+                if (this.forceExitTimeout) {
+                    clearTimeout(this.forceExitTimeout);
+                }
+                logger.info('Shutdown complete');
+                process.exit(0);
+            }
+            catch (error) {
+                logger.error('Error during shutdown', {
+                    error: error instanceof Error ? error.message : String(error),
+                });
+                process.exit(1);
+            }
+        };
+        process.on('SIGINT', () => shutdown('SIGINT'));
+        process.on('SIGTERM', () => shutdown('SIGTERM'));
+        await this.server.start();
+    }
+    /**
+     * Stop the bridge and all components.
+     * Waits for in-flight requests to complete before closing.
+     */
+    async stop() {
+        if (this.server) {
+            await this.server.close(this.resilience.shutdown.drainTimeoutMs);
+            this.server = null;
+        }
+    }
+    /**
+     * Handle upstream health status changes.
+     */
+    handleHealthChange(status, previousStatus) {
+        if (status === 'unhealthy') {
+            logger.warn('Upstream server became unhealthy', {
+                previousStatus,
+                failureMode: this.resilience.failureMode,
+            });
+        }
+        else if (status === 'healthy' && previousStatus === 'unhealthy') {
+            logger.info('Upstream server recovered and is now healthy');
+        }
+    }
+    /**
+     * Creates the appropriate approval handler based on configuration.
+     */
+    createApprovalHandler(config) {
+        const method = config.approval?.method ?? 'terminal';
+        const timeoutMs = this.options.approvalTimeout ?? config.approval?.timeout ?? 60000;
+        switch (method) {
+            case 'interactive':
+                return new InteractiveApprovalHandler({
+                    port: config.approval?.port,
+                    timeoutMs,
+                });
+            case 'webhook':
+                // Webhook not yet implemented - fall back to terminal with warning
+                logger.warn('Webhook approval method not yet implemented, using terminal');
+                return new TerminalApprovalHandler(timeoutMs);
+            case 'terminal':
+            default:
+                return new TerminalApprovalHandler(timeoutMs);
+        }
+    }
+    /**
+     * Creates the appropriate session store based on configuration.
+     */
+    createSessionStore(config) {
+        const persist = config.session?.persist ?? false;
+        if (!persist) {
+            // Use in-memory store (default)
+            return undefined;
+        }
+        // Use SQLite persistent store
+        const defaultPath = join(homedir(), '.tollgate', 'sessions.db');
+        const dbPath = config.session?.path ?? defaultPath;
+        logger.info('Using persistent session store', { path: dbPath });
+        return new SqliteSessionStore(dbPath);
+    }
+}
+export async function startWrapMode(options) {
+    // Create an inline config for wrap mode
+    const config = {
+        version: '1',
+        defaults: {
+            action: options.defaultAction ?? 'prompt',
+        },
+        servers: {
+            wrapped: {
+                command: options.command,
+                args: options.args,
+                env: options.env,
+            },
+        },
+        approval: {
+            method: options.approvalMethod ?? 'terminal',
+            port: options.approvalPort,
+            timeout: options.approvalTimeout,
+        },
+        session: {
+            persist: options.persistSessions ?? false,
+            path: options.sessionPath,
+        },
+    };
+    const bridge = new TollgateBridge({
+        config,
+        serverName: 'wrapped',
+        auditPath: options.auditPath,
+        approvalTimeout: options.approvalTimeout,
+        dryRun: options.dryRun,
+        failureMode: options.failureMode,
+    });
+    await bridge.start();
+}
+//# sourceMappingURL=bridge.js.map

package/dist/proxy/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/proxy/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAExE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAqB,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,WAAW,IAAI,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AA2BrD,MAAM,OAAO,cAAc;IACjB,MAAM,GAA0B,IAAI,CAAC;IACrC,OAAO,CAAgB;IACvB,UAAU,CAA6B;IACvC,cAAc,GAAG,KAAK,CAAC;IACvB,gBAAgB,GAA0B,IAAI,CAAC;IAEvD,YAAY,OAAsB;QAChC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,+CAA+C;QAC/C,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;QACzD,IAAI,CAAC,UAAU,GAAG;YAChB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,gBAAgB,CAAC,WAAW,IAAI,kBAAkB,CAAC,WAAW;YAClG,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB,IAAI,kBAAkB,CAAC,iBAAiB;YAC7F,WAAW,EAAE;gBACX,OAAO,EAAE,gBAAgB,CAAC,WAAW,EAAE,OAAO,IAAI,kBAAkB,CAAC,WAAW,CAAC,OAAO;gBACxF,UAAU,EAAE,gBAAgB,CAAC,WAAW,EAAE,UAAU,IAAI,kBAAkB,CAAC,WAAW,CAAC,UAAU;gBACjG,SAAS,EAAE,gBAAgB,CAAC,WAAW,EAAE,SAAS,IAAI,kBAAkB,CAAC,WAAW,CAAC,SAAS;gBAC9F,gBAAgB,EAAE,gBAAgB,CAAC,WAAW,EAAE,gBAAgB,IAAI,kBAAkB,CAAC,WAAW,CAAC,gBAAgB;aACpH;YACD,QAAQ,EAAE;gBACR,SAAS,EAAE,gBAAgB,CAAC,QAAQ,EAAE,SAAS,IAAI,kBAAkB,CAAC,QAAQ,CAAC,SAAS;gBACxF,cAAc,EAAE,gBAAgB,CAAC,QAAQ,EAAE,cAAc,IAAI,kBAAkB,CAAC,QAAQ,CAAC,cAAc;aACxG;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAE5C,yBAAyB;QACzB,cAAc,CAAC,MAAM,CAAC,CAAC;QAEvB,2BAA2B;QAC3B,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,WAAW,CAAC,WAAW,UAAU,8BAA8B,EAAE;gBACzE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;aACpD,CAAC,CAAC;QACL,CAAC;QAED,wBAAwB;QACxB,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,eAAe,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAE3D,uDAAuD;QACvD,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;YACxC,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,iBAAiB;YAChD,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW;YACxC,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;SACnD,CAAC,CAAC;QAEH,yCAAyC;QACzC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe;YACjD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QAExD,8BAA8B;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC;YAC/B,UAAU;YACV,YAAY;YACZ,WAAW;YACX,eAAe;YACf,cAAc;YACd,cAAc;YACd,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW;SACzC,CAAC,CAAC;QAEH,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;YACxC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAEpD,4BAA4B;YAC5B,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE;gBACtC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAEvC,sDAAsD;YACtD,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAE9B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAClB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBAC1B,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;oBACpC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAEjD,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,MAAoB,EAAE,cAA4B;QAC3E,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBAC9C,cAAc;gBACd,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW;aACzC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,MAAM,KAAK,SAAS,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,MAAsB;QAClD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,UAAU,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,KAAK,CAAC;QAEpF,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,aAAa;gBAChB,OAAO,IAAI,0BAA0B,CAAC;oBACpC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI;oBAC3B,SAAS;iBACV,CAAC,CAAC;YAEL,KAAK,SAAS;gBACZ,mEAAmE;gBACnE,MAAM,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;gBAC3E,OAAO,IAAI,uBAAuB,CAAC,SAAS,CAAC,CAAC;YAEhD,KAAK,UAAU,CAAC;YAChB;gBACE,OAAO,IAAI,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,MAAsB;QAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,IAAI,KAAK,CAAC;QAEjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,gCAAgC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,8BAA8B;QAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,WAAW,CAAC;QAEnD,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;CACF;AAuBD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAoB;IACtD,wCAAwC;IACxC,MAAM,MAAM,GAAmB;QAC7B,OAAO,EAAE,GAAG;QACZ,QAAQ,EAAE;YACR,MAAM,EAAE,OAAO,CAAC,aAAa,IAAI,QAAQ;SAC1C;QACD,OAAO,EAAE;YACP,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,GAAG,EAAE,OAAO,CAAC,GAAG;aACjB;SACF;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,OAAO,CAAC,cAAc,IAAI,UAAU;YAC5C,IAAI,EAAE,OAAO,CAAC,YAAY;YAC1B,OAAO,EAAE,OAAO,CAAC,eAAe;SACjC;QACD,OAAO,EAAE;YACP,OAAO,EAAE,OAAO,CAAC,eAAe,IAAI,KAAK;YACzC,IAAI,EAAE,OAAO,CAAC,WAAW;SAC1B;KACF,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;QAChC,MAAM;QACN,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC"}

package/dist/proxy/client.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Upstream MCP Client
+ *
+ * Manages connection to the upstream MCP server with:
+ * - Health checking and status monitoring
+ * - Timeout support for tool calls
+ * - Connection state tracking
+ */
+import type { CallToolResult, ListToolsResult } from '@modelcontextprotocol/sdk/types.js';
+import type { ServerConfig, HealthCheckConfig } from '../policy/types.js';
+/**
+ * Health status of the upstream server.
+ */
+export type HealthStatus = 'healthy' | 'unhealthy' | 'unknown';
+/**
+ * Result of a health check operation.
+ */
+export interface HealthCheckResult {
+    status: HealthStatus;
+    lastCheck: Date;
+    consecutiveFailures: number;
+    error?: string;
+}
+/**
+ * Options for the upstream client.
+ */
+export interface UpstreamClientOptions {
+    /** Server configuration */
+    config: ServerConfig;
+    /** Timeout for tool calls in ms (default: 30000) */
+    callTimeoutMs?: number;
+    /** Health check configuration */
+    healthCheck?: HealthCheckConfig;
+    /** Callback when health status changes */
+    onHealthChange?: (status: HealthStatus, previousStatus: HealthStatus) => void;
+}
+/**
+ * Upstream MCP client with health monitoring and resilience features.
+ */
+export declare class UpstreamClient {
+    private client;
+    private transport;
+    private config;
+    private initialized;
+    private callTimeoutMs;
+    private healthCheckConfig;
+    private healthCheckInterval;
+    private healthStatus;
+    private lastHealthCheck;
+    private consecutiveFailures;
+    private lastHealthError?;
+    private onHealthChange?;
+    private isClosing;
+    /** Mutex to prevent concurrent initialization */
+    private initializePromise;
+    constructor(options: UpstreamClientOptions | ServerConfig);
+    /**
+     * Initialize the upstream connection.
+     * Spawns the upstream MCP server process and establishes connection.
+     * Thread-safe: concurrent calls will wait for the first initialization to complete.
+     */
+    initialize(): Promise<void>;
+    /**
+     * Internal initialization logic.
+     */
+    private doInitialize;
+    /**
+     * List available tools from the upstream server.
+     */
+    listTools(): Promise<ListToolsResult>;
+    /**
+     * Call a tool on the upstream server with timeout support.
+     *
+     * @param name - Tool name
+     * @param args - Tool arguments
+     * @returns Tool call result
+     * @throws UpstreamError if timeout or upstream error occurs
+     */
+    callTool(name: string, args?: Record<string, unknown>): Promise<CallToolResult>;
+    /**
+     * Perform a health check on the upstream server.
+     * Tests connectivity by calling listTools().
+     *
+     * @returns Health check result
+     */
+    healthCheck(): Promise<HealthCheckResult>;
+    /**
+     * Get the current health status.
+     */
+    getHealthStatus(): HealthCheckResult;
+    /**
+     * Check if the upstream server is healthy.
+     */
+    isHealthy(): boolean;
+    /**
+     * Check if the client is initialized and connected.
+     */
+    isConnected(): boolean;
+    /**
+     * Close the upstream connection and stop health checks.
+     */
+    close(): Promise<void>;
+    /**
+     * Start periodic health checks.
+     */
+    private startHealthChecks;
+    /**
+     * Stop periodic health checks.
+     */
+    private stopHealthChecks;
+    /**
+     * Update health status and notify listeners.
+     */
+    private updateHealthStatus;
+    /**
+     * Ensure the client is initialized before operations.
+     */
+    private ensureInitialized;
+    /**
+     * Wrap a promise with a timeout.
+     *
+     * @param promise - Promise to wrap
+     * @param timeoutMs - Timeout in milliseconds
+     * @param operation - Description for error message
+     * @returns Promise result
+     * @throws UpstreamError on timeout
+     */
+    private withTimeout;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/proxy/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/proxy/client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAE1F,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAI1E;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,2BAA2B;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,0CAA0C;IAC1C,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,KAAK,IAAI,CAAC;CAC/E;AAeD;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAqC;IACtD,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,aAAa,CAAS;IAG9B,OAAO,CAAC,iBAAiB,CAA8B;IACvD,OAAO,CAAC,mBAAmB,CAA+B;IAC1D,OAAO,CAAC,YAAY,CAA2B;IAC/C,OAAO,CAAC,eAAe,CAAqB;IAC5C,OAAO,CAAC,mBAAmB,CAAK;IAChC,OAAO,CAAC,eAAe,CAAC,CAAS;IACjC,OAAO,CAAC,cAAc,CAAC,CAA+D;IAGtF,OAAO,CAAC,SAAS,CAAS;IAC1B,iDAAiD;IACjD,OAAO,CAAC,iBAAiB,CAA8B;gBAE3C,OAAO,EAAE,qBAAqB,GAAG,YAAY;IA6BzD;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAWjC;;OAEG;YACW,YAAY;IA0B1B;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IAK3C;;;;;;;OAOG;IACG,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,cAAc,CAAC;IAU1B;;;;;OAKG;IACG,WAAW,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAgD/C;;OAEG;IACH,eAAe,IAAI,iBAAiB;IASpC;;OAEG;IACH,SAAS,IAAI,OAAO;IAIpB;;OAEG;IACH,WAAW,IAAI,OAAO;IAItB;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAY5B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAoBzB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAS1B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IASzB;;;;;;;;OAQG;YACW,WAAW;CAsB1B"}

package/dist/proxy/client.js

@@ -0,0 +1,290 @@
+/**
+ * Upstream MCP Client
+ *
+ * Manages connection to the upstream MCP server with:
+ * - Health checking and status monitoring
+ * - Timeout support for tool calls
+ * - Connection state tracking
+ */
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
+import { UpstreamError } from '../utils/errors.js';
+import { resolveServerEnv } from '../policy/parser.js';
+import { upstreamLogger as logger } from '../utils/logger.js';
+/**
+ * Default configuration values.
+ */
+const DEFAULTS = {
+    callTimeoutMs: 30000,
+    healthCheck: {
+        enabled: true,
+        intervalMs: 30000,
+        timeoutMs: 5000,
+        failureThreshold: 3,
+    },
+};
+/**
+ * Upstream MCP client with health monitoring and resilience features.
+ */
+export class UpstreamClient {
+    client;
+    transport = null;
+    config;
+    initialized = false;
+    callTimeoutMs;
+    // Health monitoring state
+    healthCheckConfig;
+    healthCheckInterval = null;
+    healthStatus = 'unknown';
+    lastHealthCheck = null;
+    consecutiveFailures = 0;
+    lastHealthError;
+    onHealthChange;
+    // Connection state tracking
+    isClosing = false;
+    /** Mutex to prevent concurrent initialization */
+    initializePromise = null;
+    constructor(options) {
+        // Support legacy constructor signature
+        if ('command' in options) {
+            this.config = options;
+            this.callTimeoutMs = DEFAULTS.callTimeoutMs;
+            this.healthCheckConfig = { ...DEFAULTS.healthCheck };
+        }
+        else {
+            this.config = options.config;
+            this.callTimeoutMs = options.callTimeoutMs ?? DEFAULTS.callTimeoutMs;
+            this.healthCheckConfig = {
+                enabled: options.healthCheck?.enabled ?? DEFAULTS.healthCheck.enabled,
+                intervalMs: options.healthCheck?.intervalMs ?? DEFAULTS.healthCheck.intervalMs,
+                timeoutMs: options.healthCheck?.timeoutMs ?? DEFAULTS.healthCheck.timeoutMs,
+                failureThreshold: options.healthCheck?.failureThreshold ?? DEFAULTS.healthCheck.failureThreshold,
+            };
+            this.onHealthChange = options.onHealthChange;
+        }
+        this.client = new Client({
+            name: 'tollgate-client',
+            version: '0.1.0',
+        }, {
+            capabilities: {},
+        });
+    }
+    /**
+     * Initialize the upstream connection.
+     * Spawns the upstream MCP server process and establishes connection.
+     * Thread-safe: concurrent calls will wait for the first initialization to complete.
+     */
+    async initialize() {
+        // Already initialized
+        if (this.initialized)
+            return;
+        // Use mutex pattern to prevent concurrent initialization
+        if (!this.initializePromise) {
+            this.initializePromise = this.doInitialize();
+        }
+        return this.initializePromise;
+    }
+    /**
+     * Internal initialization logic.
+     */
+    async doInitialize() {
+        if (this.initialized)
+            return;
+        const resolvedEnv = resolveServerEnv(this.config.env);
+        // StdioClientTransport spawns the process internally
+        this.transport = new StdioClientTransport({
+            command: this.config.command,
+            args: this.config.args,
+            env: resolvedEnv,
+            cwd: this.config.cwd,
+        });
+        // Connect the client
+        await this.client.connect(this.transport);
+        this.initialized = true;
+        // Start health checking if enabled
+        if (this.healthCheckConfig.enabled) {
+            this.startHealthChecks();
+        }
+        // Mark as healthy after successful initialization
+        this.updateHealthStatus('healthy');
+    }
+    /**
+     * List available tools from the upstream server.
+     */
+    async listTools() {
+        this.ensureInitialized();
+        return await this.client.listTools();
+    }
+    /**
+     * Call a tool on the upstream server with timeout support.
+     *
+     * @param name - Tool name
+     * @param args - Tool arguments
+     * @returns Tool call result
+     * @throws UpstreamError if timeout or upstream error occurs
+     */
+    async callTool(name, args) {
+        this.ensureInitialized();
+        return await this.withTimeout(this.client.callTool({ name, arguments: args }), this.callTimeoutMs, `Tool call '${name}'`);
+    }
+    /**
+     * Perform a health check on the upstream server.
+     * Tests connectivity by calling listTools().
+     *
+     * @returns Health check result
+     */
+    async healthCheck() {
+        if (!this.initialized) {
+            return {
+                status: 'unknown',
+                lastCheck: new Date(),
+                consecutiveFailures: 0,
+                error: 'Client not initialized',
+            };
+        }
+        try {
+            // Use listTools as a ping - it's lightweight and always available
+            await this.withTimeout(this.client.listTools(), this.healthCheckConfig.timeoutMs, 'Health check');
+            // Success - reset failure count
+            this.consecutiveFailures = 0;
+            this.lastHealthError = undefined;
+            this.updateHealthStatus('healthy');
+            return {
+                status: 'healthy',
+                lastCheck: new Date(),
+                consecutiveFailures: 0,
+            };
+        }
+        catch (error) {
+            this.consecutiveFailures++;
+            this.lastHealthError = error instanceof Error ? error.message : String(error);
+            const isUnhealthy = this.consecutiveFailures >= this.healthCheckConfig.failureThreshold;
+            if (isUnhealthy) {
+                this.updateHealthStatus('unhealthy');
+            }
+            return {
+                status: isUnhealthy ? 'unhealthy' : this.healthStatus,
+                lastCheck: new Date(),
+                consecutiveFailures: this.consecutiveFailures,
+                error: this.lastHealthError,
+            };
+        }
+        finally {
+            this.lastHealthCheck = new Date();
+        }
+    }
+    /**
+     * Get the current health status.
+     */
+    getHealthStatus() {
+        return {
+            status: this.healthStatus,
+            lastCheck: this.lastHealthCheck ?? new Date(),
+            consecutiveFailures: this.consecutiveFailures,
+            error: this.lastHealthError,
+        };
+    }
+    /**
+     * Check if the upstream server is healthy.
+     */
+    isHealthy() {
+        return this.healthStatus === 'healthy';
+    }
+    /**
+     * Check if the client is initialized and connected.
+     */
+    isConnected() {
+        return this.initialized && !this.isClosing;
+    }
+    /**
+     * Close the upstream connection and stop health checks.
+     */
+    async close() {
+        this.isClosing = true;
+        this.stopHealthChecks();
+        if (this.transport) {
+            await this.transport.close();
+            this.transport = null;
+        }
+        this.initialized = false;
+    }
+    /**
+     * Start periodic health checks.
+     */
+    startHealthChecks() {
+        if (this.healthCheckInterval)
+            return;
+        this.healthCheckInterval = setInterval(async () => {
+            if (this.initialized && !this.isClosing) {
+                try {
+                    await this.healthCheck();
+                }
+                catch (error) {
+                    // Log health check errors but don't crash
+                    logger.error('Health check error', {
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                }
+            }
+        }, this.healthCheckConfig.intervalMs);
+        // Don't prevent process exit
+        this.healthCheckInterval.unref();
+    }
+    /**
+     * Stop periodic health checks.
+     */
+    stopHealthChecks() {
+        if (this.healthCheckInterval) {
+            clearInterval(this.healthCheckInterval);
+            this.healthCheckInterval = null;
+        }
+    }
+    /**
+     * Update health status and notify listeners.
+     */
+    updateHealthStatus(newStatus) {
+        const previousStatus = this.healthStatus;
+        this.healthStatus = newStatus;
+        if (previousStatus !== newStatus && this.onHealthChange) {
+            this.onHealthChange(newStatus, previousStatus);
+        }
+    }
+    /**
+     * Ensure the client is initialized before operations.
+     */
+    ensureInitialized() {
+        if (!this.initialized) {
+            throw new UpstreamError('Client not initialized');
+        }
+        if (this.isClosing) {
+            throw new UpstreamError('Client is closing');
+        }
+    }
+    /**
+     * Wrap a promise with a timeout.
+     *
+     * @param promise - Promise to wrap
+     * @param timeoutMs - Timeout in milliseconds
+     * @param operation - Description for error message
+     * @returns Promise result
+     * @throws UpstreamError on timeout
+     */
+    async withTimeout(promise, timeoutMs, operation) {
+        let timeoutId;
+        const timeoutPromise = new Promise((_, reject) => {
+            timeoutId = setTimeout(() => {
+                reject(new UpstreamError(`${operation} timed out after ${timeoutMs}ms`));
+            }, timeoutMs);
+        });
+        try {
+            const result = await Promise.race([promise, timeoutPromise]);
+            return result;
+        }
+        finally {
+            if (timeoutId) {
+                clearTimeout(timeoutId);
+            }
+        }
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/proxy/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/proxy/client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,cAAc,IAAI,MAAM,EAAE,MAAM,oBAAoB,CAAC;AA+B9D;;GAEG;AACH,MAAM,QAAQ,GAAG;IACf,aAAa,EAAE,KAAK;IACpB,WAAW,EAAE;QACX,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,IAAI;QACf,gBAAgB,EAAE,CAAC;KACpB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,cAAc;IACjB,MAAM,CAAS;IACf,SAAS,GAAgC,IAAI,CAAC;IAC9C,MAAM,CAAe;IACrB,WAAW,GAAG,KAAK,CAAC;IACpB,aAAa,CAAS;IAE9B,0BAA0B;IAClB,iBAAiB,CAA8B;IAC/C,mBAAmB,GAA0B,IAAI,CAAC;IAClD,YAAY,GAAiB,SAAS,CAAC;IACvC,eAAe,GAAgB,IAAI,CAAC;IACpC,mBAAmB,GAAG,CAAC,CAAC;IACxB,eAAe,CAAU;IACzB,cAAc,CAAgE;IAEtF,4BAA4B;IACpB,SAAS,GAAG,KAAK,CAAC;IAC1B,iDAAiD;IACzC,iBAAiB,GAAyB,IAAI,CAAC;IAEvD,YAAY,OAA6C;QACvD,uCAAuC;QACvC,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;YACtB,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;YAC5C,IAAI,CAAC,iBAAiB,GAAG,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAC7B,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,CAAC;YACrE,IAAI,CAAC,iBAAiB,GAAG;gBACvB,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,IAAI,QAAQ,CAAC,WAAW,CAAC,OAAO;gBACrE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE,UAAU,IAAI,QAAQ,CAAC,WAAW,CAAC,UAAU;gBAC9E,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,IAAI,QAAQ,CAAC,WAAW,CAAC,SAAS;gBAC3E,gBAAgB,EAAE,OAAO,CAAC,WAAW,EAAE,gBAAgB,IAAI,QAAQ,CAAC,WAAW,CAAC,gBAAgB;aACjG,CAAC;YACF,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CACtB;YACE,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,OAAO;SACjB,EACD;YACE,YAAY,EAAE,EAAE;SACjB,CACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,sBAAsB;QACtB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,yDAAyD;QACzD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY;QACxB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAEtD,qDAAqD;QACrD,IAAI,CAAC,SAAS,GAAG,IAAI,oBAAoB,CAAC;YACxC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,GAAG,EAAE,WAAW;YAChB,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;SACrB,CAAC,CAAC;QAEH,qBAAqB;QACrB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,mCAAmC;QACnC,IAAI,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,CAAC;QAED,kDAAkD;QAClD,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;IACvC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CACZ,IAAY,EACZ,IAA8B;QAE9B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,OAAO,MAAM,IAAI,CAAC,WAAW,CAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAC/C,IAAI,CAAC,aAAa,EAClB,cAAc,IAAI,GAAG,CACJ,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,mBAAmB,EAAE,CAAC;gBACtB,KAAK,EAAE,wBAAwB;aAChC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,kEAAkE;YAClE,MAAM,IAAI,CAAC,WAAW,CACpB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EACvB,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAChC,cAAc,CACf,CAAC;YAEF,gCAAgC;YAChC,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACjC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;YAEnC,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,mBAAmB,EAAE,CAAC;aACvB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,IAAI,CAAC,eAAe,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE9E,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC;YACxF,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;YACvC,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY;gBACrD,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;gBAC7C,KAAK,EAAE,IAAI,CAAC,eAAe;aAC5B,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,YAAY;YACzB,SAAS,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI,IAAI,EAAE;YAC7C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,KAAK,EAAE,IAAI,CAAC,eAAe;SAC5B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,IAAI,CAAC,mBAAmB;YAAE,OAAO;QAErC,IAAI,CAAC,mBAAmB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YAChD,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACxC,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC3B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,0CAA0C;oBAC1C,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;wBACjC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAEtC,6BAA6B;QAC7B,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;IACnC,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACxC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,SAAuB;QAChD,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAE9B,IAAI,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxD,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,aAAa,CAAC,wBAAwB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,aAAa,CAAC,mBAAmB,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,WAAW,CACvB,OAAmB,EACnB,SAAiB,EACjB,SAAiB;QAEjB,IAAI,SAAqC,CAAC;QAE1C,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YACtD,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,MAAM,CAAC,IAAI,aAAa,CAAC,GAAG,SAAS,oBAAoB,SAAS,IAAI,CAAC,CAAC,CAAC;YAC3E,CAAC,EAAE,SAAS,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;YAC7D,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS,EAAE,CAAC;gBACd,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;CACF"}