@evalops/maestro 0.10.18 → 0.10.20

package/dist/mcp/tool-bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-bridge.js","sourceRoot":"","sources":["../../src/mcp/tool-bridge.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EACN,yBAAyB,EACzB,gBAAgB,GAChB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA8B9C,SAAS,eAAe,CAAC,KAAc;IACtC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACjE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACT,CAAC;AAED,SAAS,WAAW,CACnB,KAA8B,EAC9B,GAAG,IAAc;IAEjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CACnB,KAA8B,EAC9B,GAAG,IAAc;IAEjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjE,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,OAAO,MAAM,CAAC;YACf,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK;SACnB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;SAC1D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,SAAS,qBAAqB,CAC7B,OAAqC;IAErC,MAAM,IAAI,GAAG,OAAO;SAClB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;SACvE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAc,CAAC;SAClC,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAC;IACT,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC;AAED,SAAS,uBAAuB,CAC/B,IAAwB;IAExB,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,SAAS,sBAAsB,CAC9B,MAAyB;IAEzB,OAAO,CACN,eAAe,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACzC,uBAAuB,CAAC,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAC9D,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC/B,OAAuC;IAEvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IACvE,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,iBAAiB,GAAG,WAAW,CACpC,OAAO,EACP,aAAa,EACb,YAAY,EACZ,qBAAqB,EACrB,mBAAmB,CACnB,CAAC;IACF,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,aAAa,CACjC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,YAAY,CAC7C,CAAC;IACF,MAAM,OAAO,GAA+C;QAC3D,QAAQ;QACR,SAAS,EAAE,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC;QAC1D,OAAO;QACP,iBAAiB;QACjB,YAAY;QACZ,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC;QAC3D,IAAI;QACJ,KAAK;QACL,YAAY,EAAE,WAAW,CAAC,OAAO,EAAE,gBAAgB,EAAE,cAAc,CAAC;QACpE,iBAAiB,EAAE,WAAW,CAC7B,OAAO,EACP,qBAAqB,EACrB,mBAAmB,CACnB;KACD,CAAC;IAEF,IAAI,QAAQ,KAAK,kBAAkB,IAAI,IAAI,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,GAAG,OAAO,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,iBAAiB,EAAE,CAAC;QAC9C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,CAAC;IAC3D,CAAC;IACD,IACC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC;QAC5B,IAAI,EAAE,QAAQ,CAAC,mBAAmB,CAAC;QACnC,MAAM,KAAK,GAAG,EACb,CAAC;QACF,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IACvD,CAAC;IACD,IACC,IAAI,EAAE,QAAQ,CAAC,yBAAyB,CAAC;QACzC,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC;QAC9B,MAAM,KAAK,GAAG,EACb,CAAC;QACF,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,GAAG,OAAO,EAAE,CAAC;IAClE,CAAC;IACD,IACC,QAAQ,KAAK,MAAM;QACnB,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC;QACxB,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC;QAC3B,MAAM,KAAK,GAAG,EACb,CAAC;QACF,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,4BAA4B,CACpC,OAAuC;IAEvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,QAAQ,OAAO,CAAC,cAAc,EAAE,CAAC;QAChC,KAAK,mBAAmB;YACvB,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACjC,MAAM;QACP,KAAK,kBAAkB;YACtB,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAChC,MAAM;QACP,KAAK,yBAAyB;YAC7B,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACvC,MAAM;QACP,KAAK,cAAc;YAClB,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAClC,MAAM;QACP,KAAK,QAAQ;YACZ,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC7B,MAAM;IACR,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,qBAAqB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,cAAc,KAAK,kBAAkB,EAAE,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,iBAAiB,UAAU,CAAC,CAAC;IACjE,CAAC;SAAM,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,4BAA4B,CACpC,QAAgB,EAChB,OAAuC;IAEvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO;IACR,CAAC;IAED,MAAM,MAAM,GACX,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;QAC3B,OAAO,CAAC,IAAI;QACZ,cAAc,CAAC;IAEhB,IACC,OAAO,CAAC,cAAc,KAAK,mBAAmB;QAC9C,OAAO,CAAC,cAAc,KAAK,kBAAkB,EAC5C,CAAC;QACF,yBAAyB,CAAC;YACzB,QAAQ;YACR,MAAM;YACN,MAAM,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IAED,gBAAgB,CAAC;QAChB,QAAQ;QACR,MAAM;QACN,MAAM,EAAE,QAAQ;QAChB,QAAQ,EACP,OAAO,CAAC,cAAc,KAAK,yBAAyB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;KACzE,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,MAAe;IAClD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,MAAM,IAAI,GAAG,CAAC,CAAC,IAA0B,CAAC;IAE1C,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,QAAQ;YACZ,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAiC,EAAE,CAAC,CAAC;QAC1E,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACb,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAiC,EAAE,CAAC,CAAC;QAC1E,KAAK,SAAS;YACb,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAiC,EAAE,CAAC,CAAC;QAC3E,KAAK,OAAO;YACX,OAAO,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;gBACtD,WAAW,EAAE,CAAC,CAAC,WAAiC;aAChD,CAAC,CAAC;QACJ,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,MAAM,UAAU,GAAG,CAAC,CAAC,UAAiD,CAAC;YACvE,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,QAAQ,GAAI,CAAC,CAAC,QAAqB,IAAI,EAAE,CAAC;YAChD,MAAM,KAAK,GAA4B,EAAE,CAAC;YAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACvD,MAAM,SAAS,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;gBACpD,KAAK,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAClC,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;gBACzB,WAAW,EAAE,CAAC,CAAC,WAAiC;aAChD,CAAC,CAAC;QACJ,CAAC;QACD;YACC,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAiC,EAAE,CAAC,CAAC;IAC5E,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,OAAgB;IACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW;QACjC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,WAAW,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAEnB,sDAAsD;IACtD,MAAM,cAAc,GAAG,OAAO,CAAC,WAOnB,CAAC;IAEb,OAAO,UAAU,CAAgC;QAChD,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,GAAG,UAAU,IAAI,OAAO,CAAC,IAAI,EAAE;QACtC,WAAW,EACV,OAAO,CAAC,WAAW,IAAI,iBAAiB,UAAU,KAAK,OAAO,CAAC,IAAI,EAAE;QACtE,MAAM;QACN,WAAW,EAAE,cAAc;YAC1B,CAAC,CAAC;gBACA,YAAY,EAAE,cAAc,CAAC,YAAY;gBACzC,eAAe,EAAE,cAAc,CAAC,eAAe;gBAC/C,cAAc,EAAE,cAAc,CAAC,cAAc;gBAC7C,aAAa,EAAE,cAAc,CAAC,aAAa;aAC3C;YACF,CAAC,CAAC,SAAS;QACZ,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;YAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CACvC,UAAU,EACV,OAAO,CAAC,IAAI,EACZ,MAAiC,CACjC,CAAC;YACF,MAAM,eAAe,GAAG,uBAAuB,CAC9C,sBAAsB,CAAC,MAAM,CAAC,CAC9B,CAAC;YACF,4BAA4B,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YAE5D,MAAM,MAAM,GACX,4BAA4B,CAAC,eAAe,CAAC;gBAC7C,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC;gBACrC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAErE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO;gBAC9B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;gBACvB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,OAAO,QAAQ,CAAC,MAAM,CAAC;gBACtB,MAAM,EAAE,UAAU;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,eAAe;aACf,CAAC,CAAC;QACJ,CAAC;KACD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc;IAC7B,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO;QACN,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzE,GAAG,iBAAiB,EAAE;KACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC5B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAqB,CAAC;IACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,EAAE,CAAC;QACxC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,GAAG,CAAC;AACZ,CAAC;AAaD,MAAM,sBAAsB,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,yFAAyF;KAC1F,CAAC,CACF;CACD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAG5C;IACD,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACV,gHAAgH;IACjH,MAAM,EAAE,sBAAsB;IAC9B,WAAW,EAAE;QACZ,YAAY,EAAE,IAAI;KAClB;IACD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;QAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,MAAM,GAAiD,EAAE,CAAC;QAEhE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBACpD,SAAS;YACV,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC3B,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,OAAO;iBACZ,IAAI,CACJ,6FAA6F,CAC7F;iBACA,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,KAAK,GAAa,CAAC,6BAA6B,CAAC,CAAC;QACxD,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;YACxB,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;CACD,CAAC,CAAC;AAYH,MAAM,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,gDAAgD;KAC7D,CAAC;IACF,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC;QAChB,WAAW,EAAE,6BAA6B;KAC1C,CAAC;CACF,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAG3C;IACD,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACV,4GAA4G;IAC7G,MAAM,EAAE,qBAAqB;IAC7B,WAAW,EAAE;QACZ,YAAY,EAAE,IAAI;KAClB;IACD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;QAC5B,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;QAE/B,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAE1D,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,OAAO,OAAO,CAAC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC,CAAC,MAAM,CAAC;oBACzD,MAAM;oBACN,GAAG;oBACH,QAAQ,EAAE,EAAE;iBACZ,CAAC,CAAC;YACJ,CAAC;YAED,sCAAsC;YACtC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ;iBAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;iBACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,CAAC,SAAS,CAAC,CAAC;YAElB,MAAM,MAAM,GAAG,YAAY,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAExE,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;gBAClC,MAAM;gBACN,GAAG;gBACH,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACrC,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;iBACpB,CAAC,CAAC;aACH,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,OAAO,CAAC,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;IACF,CAAC;CACD,CAAC,CAAC;AASH,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,qFAAqF;KACtF,CAAC,CACF;CACD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,CAG1C;IACD,IAAI,EAAE,kBAAkB;IACxB,WAAW,EACV,oGAAoG;IACrG,MAAM,EAAE,oBAAoB;IAC5B,WAAW,EAAE;QACZ,YAAY,EAAE,IAAI;KAClB;IACD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;QAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,MAAM,GAA+C,EAAE,CAAC;QAE9D,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBACpD,SAAS;YACV,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;iBACvB,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,OAAO;iBACZ,IAAI,CACJ,yFAAyF,CACzF;iBACA,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,KAAK,GAAa,CAAC,2BAA2B,CAAC,CAAC;QACtD,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAChC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;YAC3B,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;CACD,CAAC,CAAC;AASH,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,8CAA8C;KAC3D,CAAC;IACF,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QACjB,WAAW,EAAE,6BAA6B;KAC1C,CAAC;IACF,IAAI,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,MAAM,CACV,IAAI,CAAC,MAAM,EAAE,EACb,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EAAE,gDAAgD;KAC7D,CAAC,CACF,CACD;CACD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAGxC;IACD,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACV,wFAAwF;IACzF,MAAM,EAAE,kBAAkB;IAC1B,WAAW,EAAE;QACZ,YAAY,EAAE,IAAI;KAClB;IACD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;QAC5B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QAEtC,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAa,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YAE5C,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAClD,CAAC;YAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACvC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;oBAChC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChB,CAAC;YACF,CAAC;YAED,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;gBACtD,MAAM;gBACN,IAAI;gBACJ,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aACzB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,OAAO,CAAC,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACF,CAAC;CACD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,mBAAmB;IAClC,OAAO,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,iBAAiB;IACzB,OAAO;QACN,oBAAoB;QACpB,mBAAmB;QACnB,kBAAkB;QAClB,gBAAgB;KAChB,CAAC;AACH,CAAC","sourcesContent":["import type { Tool as McpTool } from \"@modelcontextprotocol/sdk/types.js\";\nimport { type TSchema, Type } from \"@sinclair/typebox\";\nimport type { AgentTool } from \"../agent/types.js\";\nimport {\n\ttrackToolApprovalRequired,\n\ttrackToolBlocked,\n} from \"../telemetry/security-events.js\";\nimport { createTool } from \"../tools/tool-dsl.js\";\nimport { mcpManager } from \"./manager.js\";\nimport type { McpToolCallResult } from \"./manager.js\";\nimport { buildMcpToolName } from \"./names.js\";\n\ninterface McpToolDetails {\n\tserver: string;\n\ttool: string;\n\tcontent: unknown[];\n\tstructuredContent?: unknown;\n\tisError?: boolean;\n\tgovernedOutcome?: McpGovernedOutcome;\n}\n\ninterface McpGovernedOutcome {\n\tclassification:\n\t\t| \"approval_required\"\n\t\t| \"approval_pending\"\n\t\t| \"authentication_required\"\n\t\t| \"denied\"\n\t\t| \"rate_limited\";\n\tdecision?: string;\n\triskLevel?: string;\n\treasons?: string[];\n\tapprovalRequestId?: string;\n\tmatchedRules?: string[];\n\tmessage?: string;\n\tcode?: string;\n\tstate?: string;\n\tretryAfterMs?: number;\n\tretryAfterSeconds?: number;\n}\n\nfunction normalizeObject(value: unknown): Record<string, unknown> | null {\n\treturn value && typeof value === \"object\" && !Array.isArray(value)\n\t\t? (value as Record<string, unknown>)\n\t\t: null;\n}\n\nfunction firstString(\n\tvalue: Record<string, unknown>,\n\t...keys: string[]\n): string | undefined {\n\tfor (const key of keys) {\n\t\tconst candidate = value[key];\n\t\tif (typeof candidate === \"string\" && candidate.trim().length > 0) {\n\t\t\treturn candidate.trim();\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction firstNumber(\n\tvalue: Record<string, unknown>,\n\t...keys: string[]\n): number | undefined {\n\tfor (const key of keys) {\n\t\tconst candidate = value[key];\n\t\tif (typeof candidate === \"number\" && Number.isFinite(candidate)) {\n\t\t\treturn candidate;\n\t\t}\n\t\tif (typeof candidate === \"string\" && candidate.trim().length > 0) {\n\t\t\tconst parsed = Number(candidate);\n\t\t\tif (Number.isFinite(parsed)) {\n\t\t\t\treturn parsed;\n\t\t\t}\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction toStringArray(value: unknown): string[] | undefined {\n\tif (!Array.isArray(value)) {\n\t\treturn undefined;\n\t}\n\tconst entries = value\n\t\t.filter((item): item is string => typeof item === \"string\")\n\t\t.map((item) => item.trim())\n\t\t.filter(Boolean);\n\treturn entries.length > 0 ? entries : undefined;\n}\n\nfunction extractMcpTextContent(\n\tcontent: McpToolCallResult[\"content\"],\n): string | undefined {\n\tconst text = content\n\t\t.filter((item) => item.type === \"text\" && typeof item.text === \"string\")\n\t\t.map((item) => item.text as string)\n\t\t.join(\"\\n\")\n\t\t.trim();\n\treturn text.length > 0 ? text : undefined;\n}\n\nfunction parseJsonObjectFromText(\n\ttext: string | undefined,\n): Record<string, unknown> | null {\n\tif (!text) {\n\t\treturn null;\n\t}\n\tconst trimmed = text.trim();\n\tif (!(trimmed.startsWith(\"{\") && trimmed.endsWith(\"}\"))) {\n\t\treturn null;\n\t}\n\ttry {\n\t\treturn normalizeObject(JSON.parse(trimmed));\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nfunction resolveGovernedPayload(\n\tresult: McpToolCallResult,\n): Record<string, unknown> | null {\n\treturn (\n\t\tnormalizeObject(result.structuredContent) ??\n\t\tparseJsonObjectFromText(extractMcpTextContent(result.content))\n\t);\n}\n\nfunction classifyGovernedOutcome(\n\tpayload: Record<string, unknown> | null,\n): McpGovernedOutcome | undefined {\n\tif (!payload) {\n\t\treturn undefined;\n\t}\n\n\tconst decision = firstString(payload, \"decision\")?.toLowerCase();\n\tconst code = firstString(payload, \"code\", \"error_code\")?.toLowerCase();\n\tconst state = firstString(payload, \"state\")?.toLowerCase();\n\tconst status = firstNumber(payload, \"status\", \"status_code\");\n\tconst approvalRequestId = firstString(\n\t\tpayload,\n\t\t\"approval_id\",\n\t\t\"approvalId\",\n\t\t\"approval_request_id\",\n\t\t\"approvalRequestId\",\n\t);\n\tconst reasons = toStringArray(payload.reasons);\n\tconst matchedRules = toStringArray(\n\t\tpayload.matched_rules ?? payload.matchedRules,\n\t);\n\tconst outcome: Omit<McpGovernedOutcome, \"classification\"> = {\n\t\tdecision,\n\t\triskLevel: firstString(payload, \"risk_level\", \"riskLevel\"),\n\t\treasons,\n\t\tapprovalRequestId,\n\t\tmatchedRules,\n\t\tmessage: firstString(payload, \"message\", \"detail\", \"error\"),\n\t\tcode,\n\t\tstate,\n\t\tretryAfterMs: firstNumber(payload, \"retry_after_ms\", \"retryAfterMs\"),\n\t\tretryAfterSeconds: firstNumber(\n\t\t\tpayload,\n\t\t\t\"retry_after_seconds\",\n\t\t\t\"retryAfterSeconds\",\n\t\t),\n\t};\n\n\tif (decision === \"require_approval\" || code?.includes(\"approval_required\")) {\n\t\treturn { classification: \"approval_required\", ...outcome };\n\t}\n\tif (state === \"pending\" && approvalRequestId) {\n\t\treturn { classification: \"approval_pending\", ...outcome };\n\t}\n\tif (\n\t\tcode?.includes(\"rate_limit\") ||\n\t\tcode?.includes(\"too_many_requests\") ||\n\t\tstatus === 429\n\t) {\n\t\treturn { classification: \"rate_limited\", ...outcome };\n\t}\n\tif (\n\t\tcode?.includes(\"authentication_required\") ||\n\t\tcode?.includes(\"unauthorized\") ||\n\t\tstatus === 401\n\t) {\n\t\treturn { classification: \"authentication_required\", ...outcome };\n\t}\n\tif (\n\t\tdecision === \"deny\" ||\n\t\tcode?.includes(\"denied\") ||\n\t\tcode?.includes(\"forbidden\") ||\n\t\tstatus === 403\n\t) {\n\t\treturn { classification: \"denied\", ...outcome };\n\t}\n\treturn undefined;\n}\n\nfunction formatGovernedOutcomeSummary(\n\toutcome: McpGovernedOutcome | undefined,\n): string | undefined {\n\tif (!outcome) {\n\t\treturn undefined;\n\t}\n\n\tconst lines: string[] = [];\n\tswitch (outcome.classification) {\n\t\tcase \"approval_required\":\n\t\t\tlines.push(\"Approval required.\");\n\t\t\tbreak;\n\t\tcase \"approval_pending\":\n\t\t\tlines.push(\"Approval pending.\");\n\t\t\tbreak;\n\t\tcase \"authentication_required\":\n\t\t\tlines.push(\"Authentication required.\");\n\t\t\tbreak;\n\t\tcase \"rate_limited\":\n\t\t\tlines.push(\"Rate limit reached.\");\n\t\t\tbreak;\n\t\tcase \"denied\":\n\t\t\tlines.push(\"Action denied.\");\n\t\t\tbreak;\n\t}\n\n\tif (outcome.message) {\n\t\tlines.push(outcome.message);\n\t}\n\tif (outcome.reasons?.length) {\n\t\tlines.push(`Reasons: ${outcome.reasons.join(\"; \")}`);\n\t}\n\tif (outcome.approvalRequestId) {\n\t\tlines.push(`Approval request: ${outcome.approvalRequestId}`);\n\t}\n\tif (outcome.state && outcome.classification !== \"approval_pending\") {\n\t\tlines.push(`State: ${outcome.state}`);\n\t}\n\tif (outcome.riskLevel) {\n\t\tlines.push(`Risk level: ${outcome.riskLevel}`);\n\t}\n\tif (typeof outcome.retryAfterSeconds === \"number\") {\n\t\tlines.push(`Retry after: ${outcome.retryAfterSeconds} seconds`);\n\t} else if (typeof outcome.retryAfterMs === \"number\") {\n\t\tlines.push(`Retry after: ${outcome.retryAfterMs} ms`);\n\t}\n\n\treturn lines.join(\"\\n\");\n}\n\nfunction emitGovernedOutcomeTelemetry(\n\ttoolName: string,\n\toutcome: McpGovernedOutcome | undefined,\n): void {\n\tif (!outcome) {\n\t\treturn;\n\t}\n\n\tconst reason =\n\t\toutcome.message ??\n\t\toutcome.reasons?.join(\"; \") ??\n\t\toutcome.code ??\n\t\t\"policy event\";\n\n\tif (\n\t\toutcome.classification === \"approval_required\" ||\n\t\toutcome.classification === \"approval_pending\"\n\t) {\n\t\ttrackToolApprovalRequired({\n\t\t\ttoolName,\n\t\t\treason,\n\t\t\tsource: \"policy\",\n\t\t});\n\t\treturn;\n\t}\n\n\ttrackToolBlocked({\n\t\ttoolName,\n\t\treason,\n\t\tsource: \"policy\",\n\t\tseverity:\n\t\t\toutcome.classification === \"authentication_required\" ? \"medium\" : \"high\",\n\t});\n}\n\nfunction convertJsonSchemaToTypebox(schema: unknown): TSchema {\n\tif (!schema || typeof schema !== \"object\") {\n\t\treturn Type.Unknown();\n\t}\n\n\tconst s = schema as Record<string, unknown>;\n\tconst type = s.type as string | undefined;\n\n\tswitch (type) {\n\t\tcase \"string\":\n\t\t\treturn Type.String({ description: s.description as string | undefined });\n\t\tcase \"number\":\n\t\tcase \"integer\":\n\t\t\treturn Type.Number({ description: s.description as string | undefined });\n\t\tcase \"boolean\":\n\t\t\treturn Type.Boolean({ description: s.description as string | undefined });\n\t\tcase \"array\":\n\t\t\treturn Type.Array(convertJsonSchemaToTypebox(s.items), {\n\t\t\t\tdescription: s.description as string | undefined,\n\t\t\t});\n\t\tcase \"object\": {\n\t\t\tconst properties = s.properties as Record<string, unknown> | undefined;\n\t\t\tif (!properties) {\n\t\t\t\treturn Type.Record(Type.String(), Type.Unknown());\n\t\t\t}\n\t\t\tconst required = (s.required as string[]) ?? [];\n\t\t\tconst props: Record<string, TSchema> = {};\n\t\t\tfor (const [key, value] of Object.entries(properties)) {\n\t\t\t\tconst converted = convertJsonSchemaToTypebox(value);\n\t\t\t\tprops[key] = required.includes(key)\n\t\t\t\t\t? converted\n\t\t\t\t\t: Type.Optional(converted);\n\t\t\t}\n\t\t\treturn Type.Object(props, {\n\t\t\t\tdescription: s.description as string | undefined,\n\t\t\t});\n\t\t}\n\t\tdefault:\n\t\t\treturn Type.Unknown({ description: s.description as string | undefined });\n\t}\n}\n\nexport function createMcpToolWrapper(serverName: string, mcpTool: McpTool) {\n\tconst toolName = buildMcpToolName(serverName, mcpTool.name);\n\tconst schema = mcpTool.inputSchema\n\t\t? convertJsonSchemaToTypebox(mcpTool.inputSchema)\n\t\t: Type.Object({});\n\n\t// Extract MCP tool annotations for approval decisions\n\tconst mcpAnnotations = mcpTool.annotations as\n\t\t| {\n\t\t\t\treadOnlyHint?: boolean;\n\t\t\t\tdestructiveHint?: boolean;\n\t\t\t\tidempotentHint?: boolean;\n\t\t\t\topenWorldHint?: boolean;\n\t\t  }\n\t\t| undefined;\n\n\treturn createTool<typeof schema, McpToolDetails>({\n\t\tname: toolName,\n\t\tlabel: `${serverName}/${mcpTool.name}`,\n\t\tdescription:\n\t\t\tmcpTool.description ?? `MCP tool from ${serverName}: ${mcpTool.name}`,\n\t\tschema,\n\t\tannotations: mcpAnnotations\n\t\t\t? {\n\t\t\t\t\treadOnlyHint: mcpAnnotations.readOnlyHint,\n\t\t\t\t\tdestructiveHint: mcpAnnotations.destructiveHint,\n\t\t\t\t\tidempotentHint: mcpAnnotations.idempotentHint,\n\t\t\t\t\topenWorldHint: mcpAnnotations.openWorldHint,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\tasync run(params, { respond }) {\n\t\t\tconst result = await mcpManager.callTool(\n\t\t\t\tserverName,\n\t\t\t\tmcpTool.name,\n\t\t\t\tparams as Record<string, unknown>,\n\t\t\t);\n\t\t\tconst governedOutcome = classifyGovernedOutcome(\n\t\t\t\tresolveGovernedPayload(result),\n\t\t\t);\n\t\t\temitGovernedOutcomeTelemetry(mcpTool.name, governedOutcome);\n\n\t\t\tconst output =\n\t\t\t\tformatGovernedOutcomeSummary(governedOutcome) ??\n\t\t\t\textractMcpTextContent(result.content) ??\n\t\t\t\tJSON.stringify(result.structuredContent ?? result.content, null, 2);\n\n\t\t\tconst response = result.isError\n\t\t\t\t? respond.error(output)\n\t\t\t\t: respond.text(output);\n\t\t\treturn response.detail({\n\t\t\t\tserver: serverName,\n\t\t\t\ttool: mcpTool.name,\n\t\t\t\tcontent: result.content,\n\t\t\t\tstructuredContent: result.structuredContent,\n\t\t\t\tisError: result.isError,\n\t\t\t\tgovernedOutcome,\n\t\t\t});\n\t\t},\n\t});\n}\n\nexport function getAllMcpTools(): AgentTool[] {\n\tconst mcpTools = mcpManager.getAllTools();\n\treturn [\n\t\t...mcpTools.map(({ server, tool }) => createMcpToolWrapper(server, tool)),\n\t\t...getMcpHelperTools(),\n\t];\n}\n\nexport function getMcpToolMap(): Map<string, AgentTool> {\n\tconst map = new Map<string, AgentTool>();\n\tconst mcpTools = mcpManager.getAllTools();\n\n\tfor (const tool of getMcpHelperTools()) {\n\t\tmap.set(tool.name, tool);\n\t}\n\n\tfor (const { server, tool } of mcpTools) {\n\t\tconst wrapper = createMcpToolWrapper(server, tool);\n\t\tmap.set(wrapper.name, wrapper);\n\t}\n\n\treturn map;\n}\n\n// ─────────────────────────────────────────────────────────────\n// MCP Resource Tools (inspired by Claude Code's ListMcpResources/ReadMcpResource)\n// ─────────────────────────────────────────────────────────────\n\ninterface McpResourceListDetails {\n\tservers: Array<{\n\t\tname: string;\n\t\tresources: string[];\n\t}>;\n}\n\nconst listMcpResourcesSchema = Type.Object({\n\tserver: Type.Optional(\n\t\tType.String({\n\t\t\tdescription:\n\t\t\t\t\"Optional server name to filter resources. If omitted, lists resources from all servers.\",\n\t\t}),\n\t),\n});\n\n/**\n * Tool to list available MCP resources across all connected servers.\n */\nexport const listMcpResourcesTool = createTool<\n\ttypeof listMcpResourcesSchema,\n\tMcpResourceListDetails\n>({\n\tname: \"mcp_list_resources\",\n\tdescription:\n\t\t\"List available resources from MCP servers. Resources are data sources that can be read (files, configs, etc.).\",\n\tschema: listMcpResourcesSchema,\n\tannotations: {\n\t\treadOnlyHint: true,\n\t},\n\tasync run(params, { respond }) {\n\t\tconst status = mcpManager.getStatus();\n\t\tconst result: Array<{ name: string; resources: string[] }> = [];\n\n\t\tfor (const server of status.servers) {\n\t\t\tif (params.server && server.name !== params.server) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (server.connected && server.resources.length > 0) {\n\t\t\t\tresult.push({\n\t\t\t\t\tname: server.name,\n\t\t\t\t\tresources: server.resources,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\tif (result.length === 0) {\n\t\t\treturn respond\n\t\t\t\t.text(\n\t\t\t\t\t\"No MCP resources available. Either no servers are connected or they don't expose resources.\",\n\t\t\t\t)\n\t\t\t\t.detail({ servers: [] });\n\t\t}\n\n\t\tconst lines: string[] = [\"# Available MCP Resources\\n\"];\n\t\tfor (const server of result) {\n\t\t\tlines.push(`## ${server.name}`);\n\t\t\tfor (const uri of server.resources) {\n\t\t\t\tlines.push(`- ${uri}`);\n\t\t\t}\n\t\t\tlines.push(\"\");\n\t\t}\n\n\t\treturn respond.text(lines.join(\"\\n\")).detail({ servers: result });\n\t},\n});\n\ninterface McpResourceReadDetails {\n\tserver: string;\n\turi: string;\n\tcontents: Array<{\n\t\turi: string;\n\t\ttext?: string;\n\t\tmimeType?: string;\n\t}>;\n}\n\nconst readMcpResourceSchema = Type.Object({\n\tserver: Type.String({\n\t\tdescription: \"Name of the MCP server that hosts the resource\",\n\t}),\n\turi: Type.String({\n\t\tdescription: \"URI of the resource to read\",\n\t}),\n});\n\n/**\n * Tool to read a specific MCP resource.\n */\nexport const readMcpResourceTool = createTool<\n\ttypeof readMcpResourceSchema,\n\tMcpResourceReadDetails\n>({\n\tname: \"mcp_read_resource\",\n\tdescription:\n\t\t\"Read the contents of an MCP resource by URI. Use mcp_list_resources first to discover available resources.\",\n\tschema: readMcpResourceSchema,\n\tannotations: {\n\t\treadOnlyHint: true,\n\t},\n\tasync run(params, { respond }) {\n\t\tconst { server, uri } = params;\n\n\t\ttry {\n\t\t\tconst result = await mcpManager.readResource(server, uri);\n\n\t\t\tif (result.contents.length === 0) {\n\t\t\t\treturn respond.text(`Resource '${uri}' is empty.`).detail({\n\t\t\t\t\tserver,\n\t\t\t\t\turi,\n\t\t\t\t\tcontents: [],\n\t\t\t\t});\n\t\t\t}\n\n\t\t\t// Format output based on content type\n\t\t\tconst textContents = result.contents\n\t\t\t\t.filter((c) => c.text !== undefined)\n\t\t\t\t.map((c) => c.text)\n\t\t\t\t.join(\"\\n---\\n\");\n\n\t\t\tconst output = textContents || JSON.stringify(result.contents, null, 2);\n\n\t\t\treturn respond.text(output).detail({\n\t\t\t\tserver,\n\t\t\t\turi,\n\t\t\t\tcontents: result.contents.map((c) => ({\n\t\t\t\t\turi: c.uri,\n\t\t\t\t\ttext: c.text,\n\t\t\t\t\tmimeType: c.mimeType,\n\t\t\t\t})),\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn respond.error(`Failed to read resource: ${message}`);\n\t\t}\n\t},\n});\n\ninterface McpPromptListDetails {\n\tservers: Array<{\n\t\tname: string;\n\t\tprompts: string[];\n\t}>;\n}\n\nconst listMcpPromptsSchema = Type.Object({\n\tserver: Type.Optional(\n\t\tType.String({\n\t\t\tdescription:\n\t\t\t\t\"Optional server name to filter prompts. If omitted, lists prompts from all servers.\",\n\t\t}),\n\t),\n});\n\n/**\n * Tool to list available MCP prompts across all connected servers.\n */\nexport const listMcpPromptsTool = createTool<\n\ttypeof listMcpPromptsSchema,\n\tMcpPromptListDetails\n>({\n\tname: \"mcp_list_prompts\",\n\tdescription:\n\t\t\"List available prompts from MCP servers. Prompts are reusable prompt templates exposed by servers.\",\n\tschema: listMcpPromptsSchema,\n\tannotations: {\n\t\treadOnlyHint: true,\n\t},\n\tasync run(params, { respond }) {\n\t\tconst status = mcpManager.getStatus();\n\t\tconst result: Array<{ name: string; prompts: string[] }> = [];\n\n\t\tfor (const server of status.servers) {\n\t\t\tif (params.server && server.name !== params.server) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (server.connected && server.prompts.length > 0) {\n\t\t\t\tresult.push({\n\t\t\t\t\tname: server.name,\n\t\t\t\t\tprompts: server.prompts,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\tif (result.length === 0) {\n\t\t\treturn respond\n\t\t\t\t.text(\n\t\t\t\t\t\"No MCP prompts available. Either no servers are connected or they don't expose prompts.\",\n\t\t\t\t)\n\t\t\t\t.detail({ servers: [] });\n\t\t}\n\n\t\tconst lines: string[] = [\"# Available MCP Prompts\\n\"];\n\t\tfor (const server of result) {\n\t\t\tlines.push(`## ${server.name}`);\n\t\t\tfor (const prompt of server.prompts) {\n\t\t\t\tlines.push(`- ${prompt}`);\n\t\t\t}\n\t\t\tlines.push(\"\");\n\t\t}\n\n\t\treturn respond.text(lines.join(\"\\n\")).detail({ servers: result });\n\t},\n});\n\ninterface McpPromptDetails {\n\tserver: string;\n\tname: string;\n\tdescription?: string;\n\tmessages: Array<{ role: string; content: string }>;\n}\n\nconst getMcpPromptSchema = Type.Object({\n\tserver: Type.String({\n\t\tdescription: \"Name of the MCP server that hosts the prompt\",\n\t}),\n\tname: Type.String({\n\t\tdescription: \"Name of the prompt to fetch\",\n\t}),\n\targs: Type.Optional(\n\t\tType.Record(\n\t\t\tType.String(),\n\t\t\tType.String({\n\t\t\t\tdescription: \"Optional string arguments passed to the prompt\",\n\t\t\t}),\n\t\t),\n\t),\n});\n\n/**\n * Tool to fetch a specific MCP prompt.\n */\nexport const getMcpPromptTool = createTool<\n\ttypeof getMcpPromptSchema,\n\tMcpPromptDetails\n>({\n\tname: \"mcp_get_prompt\",\n\tdescription:\n\t\t\"Fetch an MCP prompt by name. Use mcp_list_prompts first to discover available prompts.\",\n\tschema: getMcpPromptSchema,\n\tannotations: {\n\t\treadOnlyHint: true,\n\t},\n\tasync run(params, { respond }) {\n\t\tconst { server, name, args } = params;\n\n\t\ttry {\n\t\t\tconst result = await mcpManager.getPrompt(server, name, args);\n\t\t\tconst lines: string[] = [`Prompt: ${name}`];\n\n\t\t\tif (result.description) {\n\t\t\t\tlines.push(`Description: ${result.description}`);\n\t\t\t}\n\n\t\t\tif (result.messages.length === 0) {\n\t\t\t\tlines.push(\"\");\n\t\t\t\tlines.push(\"No prompt messages returned.\");\n\t\t\t} else {\n\t\t\t\tlines.push(\"\");\n\t\t\t\tfor (const message of result.messages) {\n\t\t\t\t\tlines.push(`[${message.role}]`);\n\t\t\t\t\tlines.push(message.content);\n\t\t\t\t\tlines.push(\"\");\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn respond.text(lines.join(\"\\n\").trimEnd()).detail({\n\t\t\t\tserver,\n\t\t\t\tname,\n\t\t\t\tdescription: result.description,\n\t\t\t\tmessages: result.messages,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn respond.error(`Failed to get prompt: ${message}`);\n\t\t}\n\t},\n});\n\n/**\n * Get all MCP resource tools.\n */\nexport function getMcpResourceTools() {\n\treturn [listMcpResourcesTool, readMcpResourceTool];\n}\n\nfunction getMcpHelperTools() {\n\treturn [\n\t\tlistMcpResourcesTool,\n\t\treadMcpResourceTool,\n\t\tlistMcpPromptsTool,\n\t\tgetMcpPromptTool,\n\t];\n}\n"]}
+{"version":3,"file":"tool-bridge.js","sourceRoot":"","sources":["../../src/mcp/tool-bridge.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAMvD,OAAO,EACN,yBAAyB,EACzB,gBAAgB,GAChB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAa9C,MAAM,CAAC,MAAM,kCAAkC,GAC9C,gDAAgD,CAAC;AAgDlD,MAAM,UAAU,iCAAiC,CAChD,OAAuC;IAEvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,KAAwC,CAAC;IAC7C,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,QAAQ,OAAO,CAAC,cAAc,EAAE,CAAC;QAChC,KAAK,mBAAmB,CAAC;QACzB,KAAK,kBAAkB;YACtB,KAAK,GAAG,kBAAkB,CAAC;YAC3B,QAAQ,GAAG,KAAK,CAAC;YACjB,MAAM;QACP,KAAK,yBAAyB;YAC7B,KAAK,GAAG,wBAAwB,CAAC;YACjC,MAAM;QACP,KAAK,cAAc;YAClB,KAAK,GAAG,qBAAqB,CAAC;YAC9B,MAAM;QACP,KAAK,QAAQ;YACZ,KAAK,GAAG,QAAQ,CAAC;YACjB,MAAM;IACR,CAAC;IACD,MAAM,YAAY,GACjB,OAAO,CAAC,YAAY;QACpB,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACvC,CAAC,CAAC,OAAO,CAAC,iBAAiB,GAAG,IAAI;YAClC,CAAC,CAAC,SAAS,CAAC,CAAC;IACf,OAAO;QACN,aAAa,EAAE,kCAAkC;QACjD,SAAS,EAAE,oBAAoB;QAC/B,KAAK;QACL,QAAQ;QACR,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,GAAG,CAAC,OAAO,CAAC,iBAAiB;YAC5B,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACtC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACjE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACT,CAAC;AAED,SAAS,WAAW,CACnB,KAA8B,EAC9B,GAAG,IAAc;IAEjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CACnB,KAA8B,EAC9B,GAAG,IAAc;IAEjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjE,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,OAAO,MAAM,CAAC;YACf,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK;SACnB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;SAC1D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,SAAS,qBAAqB,CAC7B,OAAqC;IAErC,MAAM,IAAI,GAAG,OAAO;SAClB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;SACvE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAc,CAAC;SAClC,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAC;IACT,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC;AAED,SAAS,uBAAuB,CAC/B,IAAwB;IAExB,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,SAAS,sBAAsB,CAC9B,MAAyB;IAEzB,OAAO,CACN,eAAe,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACzC,uBAAuB,CAAC,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAC9D,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC/B,OAAuC;IAEvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IACvE,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,iBAAiB,GAAG,WAAW,CACpC,OAAO,EACP,aAAa,EACb,YAAY,EACZ,qBAAqB,EACrB,mBAAmB,CACnB,CAAC;IACF,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,aAAa,CACjC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,YAAY,CAC7C,CAAC;IACF,MAAM,OAAO,GAA+C;QAC3D,QAAQ;QACR,SAAS,EAAE,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC;QAC1D,OAAO;QACP,iBAAiB;QACjB,YAAY;QACZ,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC;QAC3D,IAAI;QACJ,KAAK;QACL,YAAY,EAAE,WAAW,CAAC,OAAO,EAAE,gBAAgB,EAAE,cAAc,CAAC;QACpE,iBAAiB,EAAE,WAAW,CAC7B,OAAO,EACP,qBAAqB,EACrB,mBAAmB,CACnB;KACD,CAAC;IAEF,IAAI,QAAQ,KAAK,kBAAkB,IAAI,IAAI,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,GAAG,OAAO,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,iBAAiB,EAAE,CAAC;QAC9C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,CAAC;IAC3D,CAAC;IACD,IACC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC;QAC5B,IAAI,EAAE,QAAQ,CAAC,mBAAmB,CAAC;QACnC,MAAM,KAAK,GAAG,EACb,CAAC;QACF,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IACvD,CAAC;IACD,IACC,IAAI,EAAE,QAAQ,CAAC,yBAAyB,CAAC;QACzC,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC;QAC9B,MAAM,KAAK,GAAG,EACb,CAAC;QACF,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,GAAG,OAAO,EAAE,CAAC;IAClE,CAAC;IACD,IACC,QAAQ,KAAK,MAAM;QACnB,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC;QACxB,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC;QAC3B,MAAM,KAAK,GAAG,EACb,CAAC;QACF,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,4BAA4B,CACpC,OAAuC,EACvC,kBAA6D;IAE7D,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,QAAQ,OAAO,CAAC,cAAc,EAAE,CAAC;QAChC,KAAK,mBAAmB;YACvB,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACjC,MAAM;QACP,KAAK,kBAAkB;YACtB,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAChC,MAAM;QACP,KAAK,yBAAyB;YAC7B,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACvC,MAAM;QACP,KAAK,cAAc;YAClB,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAClC,MAAM;QACP,KAAK,QAAQ;YACZ,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC7B,MAAM;IACR,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,qBAAqB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,kBAAkB,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CACT,wBAAwB,kBAAkB,CAAC,KAAK,KAAK,kBAAkB,CAAC,SAAS,IAAI,CACrF,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,cAAc,KAAK,kBAAkB,EAAE,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,iBAAiB,UAAU,CAAC,CAAC;IACjE,CAAC;SAAM,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,4BAA4B,CACpC,QAAgB,EAChB,OAAuC;IAEvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO;IACR,CAAC;IAED,MAAM,MAAM,GACX,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;QAC3B,OAAO,CAAC,IAAI;QACZ,cAAc,CAAC;IAEhB,IACC,OAAO,CAAC,cAAc,KAAK,mBAAmB;QAC9C,OAAO,CAAC,cAAc,KAAK,kBAAkB,EAC5C,CAAC;QACF,yBAAyB,CAAC;YACzB,QAAQ;YACR,MAAM;YACN,MAAM,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IAED,gBAAgB,CAAC;QAChB,QAAQ;QACR,MAAM;QACN,MAAM,EAAE,QAAQ;QAChB,QAAQ,EACP,OAAO,CAAC,cAAc,KAAK,yBAAyB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;KACzE,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,MAAe;IAClD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,MAAM,IAAI,GAAG,CAAC,CAAC,IAA0B,CAAC;IAC1C,MAAM,WAAW,GAChB,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QAChC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;QAC9C,CAAC,CAAC,SAAS,CAAC;IAEd,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,QAAQ;YACZ,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QACrC,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACb,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QACrC,KAAK,SAAS;YACb,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QACtC,KAAK,OAAO;YACX,OAAO,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;gBACtD,WAAW;aACX,CAAC,CAAC;QACJ,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,MAAM,UAAU,GAAG,CAAC,CAAC,UAAiD,CAAC;YACvE,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,QAAQ,GAAI,CAAC,CAAC,QAAqB,IAAI,EAAE,CAAC;YAChD,MAAM,KAAK,GAA4B,EAAE,CAAC;YAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACvD,MAAM,SAAS,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;gBACpD,KAAK,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAClC,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;gBACzB,WAAW;aACX,CAAC,CAAC;QACJ,CAAC;QACD;YACC,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IACvC,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,UAAkB,EAClB,OAAgB,EAChB,OAGC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW;QACjC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,WAAW,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAEnB,sDAAsD;IACtD,MAAM,cAAc,GAAG,OAAO,CAAC,WAOnB,CAAC;IACb,MAAM,yBAAyB,GAC9B,OAAO,EAAE,cAAc,EAAE,yBAAyB,KAAK,IAAI;QAC3D,OAAO,EAAE,yBAAyB,KAAK,IAAI,CAAC;IAC7C,MAAM,wBAAwB,GAC7B,OAAO,EAAE,cAAc,EAAE,UAAU;QACnC,CAAC,OAAO,EAAE,yBAAyB,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1E,MAAM,sBAAsB,GAAG,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC;IACvE,MAAM,0BAA0B,GAC/B,yBAAyB,IAAI,OAAO,EAAE,cAAc,EAAE,YAAY,KAAK,IAAI,CAAC;IAC7E,MAAM,WAAW,GAChB,cAAc,IAAI,0BAA0B;QAC3C,CAAC,CAAC;YACA,YAAY,EACX,cAAc,EAAE,YAAY;gBAC5B,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,eAAe,EAAE,cAAc,EAAE,eAAe;YAChD,cAAc,EAAE,cAAc,EAAE,cAAc;YAC9C,aAAa,EAAE,cAAc,EAAE,aAAa;SAC5C;QACF,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GAAuB;QAClC,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,yBAAyB;QACzB,wBAAwB;QACxB,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC;IAEF,OAAO,UAAU,CAAgC;QAChD,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,GAAG,UAAU,IAAI,OAAO,CAAC,IAAI,EAAE;QACtC,WAAW,EACV,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC;YACnC,iBAAiB,UAAU,KAAK,OAAO,CAAC,IAAI,EAAE;QAC/C,MAAM;QACN,WAAW;QACX,MAAM;QACN,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;YAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CACvC,UAAU,EACV,OAAO,CAAC,IAAI,EACZ,MAAiC,CACjC,CAAC;YACF,MAAM,eAAe,GAAG,uBAAuB,CAC9C,sBAAsB,CAAC,MAAM,CAAC,CAC9B,CAAC;YACF,MAAM,kBAAkB,GACvB,iCAAiC,CAAC,eAAe,CAAC,CAAC;YACpD,4BAA4B,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YAE5D,MAAM,MAAM,GACX,4BAA4B,CAAC,eAAe,EAAE,kBAAkB,CAAC;gBACjE,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC;gBACrC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAErE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO;gBAC9B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;gBACvB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,OAAO,QAAQ,CAAC,MAAM,CAAC;gBACtB,MAAM,EAAE,UAAU;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,eAAe;gBACf,kBAAkB;aAClB,CAAC,CAAC;QACJ,CAAC;KACD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc;IAC7B,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO;QACN,GAAG,QAAQ,CAAC,GAAG,CACd,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,EAAE,cAAc,EAAE,EAAE,EAAE,CAC/D,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE;YAClC,yBAAyB;YACzB,cAAc;SACd,CAAC,CACH;QACD,GAAG,iBAAiB,EAAE;KACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC5B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAqB,CAAC;IACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,EAAE,CAAC;QACxC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,MAAM,EACV,MAAM,EACN,IAAI,EACJ,yBAAyB,EACzB,cAAc,GACd,IAAI,QAAQ,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE;YAClD,yBAAyB;YACzB,cAAc;SACd,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,GAAG,CAAC;AACZ,CAAC;AAaD,MAAM,sBAAsB,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,yFAAyF;KAC1F,CAAC,CACF;CACD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAG5C;IACD,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACV,gHAAgH;IACjH,MAAM,EAAE,sBAAsB;IAC9B,WAAW,EAAE;QACZ,YAAY,EAAE,IAAI;KAClB;IACD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;QAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,MAAM,GAAiD,EAAE,CAAC;QAEhE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBACpD,SAAS;YACV,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC3B,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,OAAO;iBACZ,IAAI,CACJ,6FAA6F,CAC7F;iBACA,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,KAAK,GAAa,CAAC,6BAA6B,CAAC,CAAC;QACxD,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;YACxB,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;CACD,CAAC,CAAC;AAYH,MAAM,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,gDAAgD;KAC7D,CAAC;IACF,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC;QAChB,WAAW,EAAE,6BAA6B;KAC1C,CAAC;CACF,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAG3C;IACD,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACV,4GAA4G;IAC7G,MAAM,EAAE,qBAAqB;IAC7B,WAAW,EAAE;QACZ,YAAY,EAAE,IAAI;KAClB;IACD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;QAC5B,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;QAE/B,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAE1D,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,OAAO,OAAO,CAAC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC,CAAC,MAAM,CAAC;oBACzD,MAAM;oBACN,GAAG;oBACH,QAAQ,EAAE,EAAE;iBACZ,CAAC,CAAC;YACJ,CAAC;YAED,sCAAsC;YACtC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ;iBAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;iBACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,CAAC,SAAS,CAAC,CAAC;YAElB,MAAM,MAAM,GAAG,YAAY,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAExE,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;gBAClC,MAAM;gBACN,GAAG;gBACH,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACrC,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;iBACpB,CAAC,CAAC;aACH,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,OAAO,CAAC,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;IACF,CAAC;CACD,CAAC,CAAC;AASH,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,qFAAqF;KACtF,CAAC,CACF;CACD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,CAG1C;IACD,IAAI,EAAE,kBAAkB;IACxB,WAAW,EACV,oGAAoG;IACrG,MAAM,EAAE,oBAAoB;IAC5B,WAAW,EAAE;QACZ,YAAY,EAAE,IAAI;KAClB;IACD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;QAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,MAAM,GAA+C,EAAE,CAAC;QAE9D,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;gBACpD,SAAS;YACV,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;iBACvB,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,OAAO;iBACZ,IAAI,CACJ,yFAAyF,CACzF;iBACA,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,KAAK,GAAa,CAAC,2BAA2B,CAAC,CAAC;QACtD,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAChC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;YAC3B,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;CACD,CAAC,CAAC;AASH,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,8CAA8C;KAC3D,CAAC;IACF,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QACjB,WAAW,EAAE,6BAA6B;KAC1C,CAAC;IACF,IAAI,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,MAAM,CACV,IAAI,CAAC,MAAM,EAAE,EACb,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EAAE,gDAAgD;KAC7D,CAAC,CACF,CACD;CACD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAGxC;IACD,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACV,wFAAwF;IACzF,MAAM,EAAE,kBAAkB;IAC1B,WAAW,EAAE;QACZ,YAAY,EAAE,IAAI;KAClB;IACD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;QAC5B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QAEtC,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAa,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YAC5C,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAEvD,IAAI,WAAW,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,gBAAgB,WAAW,EAAE,CAAC,CAAC;YAC3C,CAAC;YAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACvC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;oBAChC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChB,CAAC;YACF,CAAC;YAED,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;gBACtD,MAAM;gBACN,IAAI;gBACJ,WAAW,EAAE,WAAW,IAAI,SAAS;gBACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;aACzB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,OAAO,CAAC,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACF,CAAC;CACD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,mBAAmB;IAClC,OAAO,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,iBAAiB;IACzB,OAAO;QACN,oBAAoB;QACpB,mBAAmB;QACnB,kBAAkB;QAClB,gBAAgB;KAChB,CAAC;AACH,CAAC","sourcesContent":["import type { Tool as McpTool } from \"@modelcontextprotocol/sdk/types.js\";\nimport { type TSchema, Type } from \"@sinclair/typebox\";\nimport type {\n\tAgentTool,\n\tToolAnnotations,\n\tToolSourceMetadata,\n} from \"../agent/types.js\";\nimport {\n\ttrackToolApprovalRequired,\n\ttrackToolBlocked,\n} from \"../telemetry/security-events.js\";\nimport { createTool } from \"../tools/tool-dsl.js\";\nimport { promptSafeText } from \"../utils/prompt-safe-text.js\";\nimport { mcpManager } from \"./manager.js\";\nimport type { McpToolCallResult } from \"./manager.js\";\nimport { buildMcpToolName } from \"./names.js\";\nimport type { McpToolParallelSafety } from \"./types.js\";\n\ninterface McpToolDetails {\n\tserver: string;\n\ttool: string;\n\tcontent: unknown[];\n\tstructuredContent?: unknown;\n\tisError?: boolean;\n\tgovernedOutcome?: McpGovernedOutcome;\n\ttoolExecutionState?: McpGovernedToolExecutionState;\n}\n\nexport const MCP_GOVERNED_TOOL_EXECUTION_SCHEMA =\n\t\"evalops.maestro.mcp-governed-tool-execution.v1\";\n\nexport type McpGovernedClassification =\n\t| \"approval_required\"\n\t| \"approval_pending\"\n\t| \"authentication_required\"\n\t| \"denied\"\n\t| \"rate_limited\";\n\nexport type McpGovernedToolExecutionStateKind =\n\t| \"waiting_approval\"\n\t| \"blocked_authentication\"\n\t| \"blocked_retry_later\"\n\t| \"denied\";\n\nexport interface McpGovernedToolExecutionState {\n\tschemaVersion: typeof MCP_GOVERNED_TOOL_EXECUTION_SCHEMA;\n\tauthority: \"mcp_result_adapter\";\n\tstate: McpGovernedToolExecutionStateKind;\n\tterminal: boolean;\n\tclassification: McpGovernedClassification;\n\tapprovalRequestId?: string;\n\tretryAfterMs?: number;\n\tmessage?: string;\n\treasons?: string[];\n\tcode?: string;\n\triskLevel?: string;\n}\n\nexport interface McpGovernedOutcome {\n\tclassification:\n\t\t| \"approval_required\"\n\t\t| \"approval_pending\"\n\t\t| \"authentication_required\"\n\t\t| \"denied\"\n\t\t| \"rate_limited\";\n\tdecision?: string;\n\triskLevel?: string;\n\treasons?: string[];\n\tapprovalRequestId?: string;\n\tmatchedRules?: string[];\n\tmessage?: string;\n\tcode?: string;\n\tstate?: string;\n\tretryAfterMs?: number;\n\tretryAfterSeconds?: number;\n}\n\nexport function normalizeMcpGovernedToolExecution(\n\toutcome: McpGovernedOutcome | undefined,\n): McpGovernedToolExecutionState | undefined {\n\tif (!outcome) {\n\t\treturn undefined;\n\t}\n\tlet state: McpGovernedToolExecutionStateKind;\n\tlet terminal = true;\n\tswitch (outcome.classification) {\n\t\tcase \"approval_required\":\n\t\tcase \"approval_pending\":\n\t\t\tstate = \"waiting_approval\";\n\t\t\tterminal = false;\n\t\t\tbreak;\n\t\tcase \"authentication_required\":\n\t\t\tstate = \"blocked_authentication\";\n\t\t\tbreak;\n\t\tcase \"rate_limited\":\n\t\t\tstate = \"blocked_retry_later\";\n\t\t\tbreak;\n\t\tcase \"denied\":\n\t\t\tstate = \"denied\";\n\t\t\tbreak;\n\t}\n\tconst retryAfterMs =\n\t\toutcome.retryAfterMs ??\n\t\t(outcome.retryAfterSeconds !== undefined\n\t\t\t? outcome.retryAfterSeconds * 1000\n\t\t\t: undefined);\n\treturn {\n\t\tschemaVersion: MCP_GOVERNED_TOOL_EXECUTION_SCHEMA,\n\t\tauthority: \"mcp_result_adapter\",\n\t\tstate,\n\t\tterminal,\n\t\tclassification: outcome.classification,\n\t\t...(outcome.approvalRequestId\n\t\t\t? { approvalRequestId: outcome.approvalRequestId }\n\t\t\t: {}),\n\t\t...(retryAfterMs !== undefined ? { retryAfterMs } : {}),\n\t\t...(outcome.message ? { message: outcome.message } : {}),\n\t\t...(outcome.reasons ? { reasons: outcome.reasons } : {}),\n\t\t...(outcome.code ? { code: outcome.code } : {}),\n\t\t...(outcome.riskLevel ? { riskLevel: outcome.riskLevel } : {}),\n\t};\n}\n\nfunction normalizeObject(value: unknown): Record<string, unknown> | null {\n\treturn value && typeof value === \"object\" && !Array.isArray(value)\n\t\t? (value as Record<string, unknown>)\n\t\t: null;\n}\n\nfunction firstString(\n\tvalue: Record<string, unknown>,\n\t...keys: string[]\n): string | undefined {\n\tfor (const key of keys) {\n\t\tconst candidate = value[key];\n\t\tif (typeof candidate === \"string\" && candidate.trim().length > 0) {\n\t\t\treturn candidate.trim();\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction firstNumber(\n\tvalue: Record<string, unknown>,\n\t...keys: string[]\n): number | undefined {\n\tfor (const key of keys) {\n\t\tconst candidate = value[key];\n\t\tif (typeof candidate === \"number\" && Number.isFinite(candidate)) {\n\t\t\treturn candidate;\n\t\t}\n\t\tif (typeof candidate === \"string\" && candidate.trim().length > 0) {\n\t\t\tconst parsed = Number(candidate);\n\t\t\tif (Number.isFinite(parsed)) {\n\t\t\t\treturn parsed;\n\t\t\t}\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction toStringArray(value: unknown): string[] | undefined {\n\tif (!Array.isArray(value)) {\n\t\treturn undefined;\n\t}\n\tconst entries = value\n\t\t.filter((item): item is string => typeof item === \"string\")\n\t\t.map((item) => item.trim())\n\t\t.filter(Boolean);\n\treturn entries.length > 0 ? entries : undefined;\n}\n\nfunction extractMcpTextContent(\n\tcontent: McpToolCallResult[\"content\"],\n): string | undefined {\n\tconst text = content\n\t\t.filter((item) => item.type === \"text\" && typeof item.text === \"string\")\n\t\t.map((item) => item.text as string)\n\t\t.join(\"\\n\")\n\t\t.trim();\n\treturn text.length > 0 ? text : undefined;\n}\n\nfunction parseJsonObjectFromText(\n\ttext: string | undefined,\n): Record<string, unknown> | null {\n\tif (!text) {\n\t\treturn null;\n\t}\n\tconst trimmed = text.trim();\n\tif (!(trimmed.startsWith(\"{\") && trimmed.endsWith(\"}\"))) {\n\t\treturn null;\n\t}\n\ttry {\n\t\treturn normalizeObject(JSON.parse(trimmed));\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nfunction resolveGovernedPayload(\n\tresult: McpToolCallResult,\n): Record<string, unknown> | null {\n\treturn (\n\t\tnormalizeObject(result.structuredContent) ??\n\t\tparseJsonObjectFromText(extractMcpTextContent(result.content))\n\t);\n}\n\nfunction classifyGovernedOutcome(\n\tpayload: Record<string, unknown> | null,\n): McpGovernedOutcome | undefined {\n\tif (!payload) {\n\t\treturn undefined;\n\t}\n\n\tconst decision = firstString(payload, \"decision\")?.toLowerCase();\n\tconst code = firstString(payload, \"code\", \"error_code\")?.toLowerCase();\n\tconst state = firstString(payload, \"state\")?.toLowerCase();\n\tconst status = firstNumber(payload, \"status\", \"status_code\");\n\tconst approvalRequestId = firstString(\n\t\tpayload,\n\t\t\"approval_id\",\n\t\t\"approvalId\",\n\t\t\"approval_request_id\",\n\t\t\"approvalRequestId\",\n\t);\n\tconst reasons = toStringArray(payload.reasons);\n\tconst matchedRules = toStringArray(\n\t\tpayload.matched_rules ?? payload.matchedRules,\n\t);\n\tconst outcome: Omit<McpGovernedOutcome, \"classification\"> = {\n\t\tdecision,\n\t\triskLevel: firstString(payload, \"risk_level\", \"riskLevel\"),\n\t\treasons,\n\t\tapprovalRequestId,\n\t\tmatchedRules,\n\t\tmessage: firstString(payload, \"message\", \"detail\", \"error\"),\n\t\tcode,\n\t\tstate,\n\t\tretryAfterMs: firstNumber(payload, \"retry_after_ms\", \"retryAfterMs\"),\n\t\tretryAfterSeconds: firstNumber(\n\t\t\tpayload,\n\t\t\t\"retry_after_seconds\",\n\t\t\t\"retryAfterSeconds\",\n\t\t),\n\t};\n\n\tif (decision === \"require_approval\" || code?.includes(\"approval_required\")) {\n\t\treturn { classification: \"approval_required\", ...outcome };\n\t}\n\tif (state === \"pending\" && approvalRequestId) {\n\t\treturn { classification: \"approval_pending\", ...outcome };\n\t}\n\tif (\n\t\tcode?.includes(\"rate_limit\") ||\n\t\tcode?.includes(\"too_many_requests\") ||\n\t\tstatus === 429\n\t) {\n\t\treturn { classification: \"rate_limited\", ...outcome };\n\t}\n\tif (\n\t\tcode?.includes(\"authentication_required\") ||\n\t\tcode?.includes(\"unauthorized\") ||\n\t\tstatus === 401\n\t) {\n\t\treturn { classification: \"authentication_required\", ...outcome };\n\t}\n\tif (\n\t\tdecision === \"deny\" ||\n\t\tcode?.includes(\"denied\") ||\n\t\tcode?.includes(\"forbidden\") ||\n\t\tstatus === 403\n\t) {\n\t\treturn { classification: \"denied\", ...outcome };\n\t}\n\treturn undefined;\n}\n\nfunction formatGovernedOutcomeSummary(\n\toutcome: McpGovernedOutcome | undefined,\n\ttoolExecutionState: McpGovernedToolExecutionState | undefined,\n): string | undefined {\n\tif (!outcome) {\n\t\treturn undefined;\n\t}\n\n\tconst lines: string[] = [];\n\tswitch (outcome.classification) {\n\t\tcase \"approval_required\":\n\t\t\tlines.push(\"Approval required.\");\n\t\t\tbreak;\n\t\tcase \"approval_pending\":\n\t\t\tlines.push(\"Approval pending.\");\n\t\t\tbreak;\n\t\tcase \"authentication_required\":\n\t\t\tlines.push(\"Authentication required.\");\n\t\t\tbreak;\n\t\tcase \"rate_limited\":\n\t\t\tlines.push(\"Rate limit reached.\");\n\t\t\tbreak;\n\t\tcase \"denied\":\n\t\t\tlines.push(\"Action denied.\");\n\t\t\tbreak;\n\t}\n\n\tif (outcome.message) {\n\t\tlines.push(outcome.message);\n\t}\n\tif (outcome.reasons?.length) {\n\t\tlines.push(`Reasons: ${outcome.reasons.join(\"; \")}`);\n\t}\n\tif (outcome.approvalRequestId) {\n\t\tlines.push(`Approval request: ${outcome.approvalRequestId}`);\n\t}\n\tif (toolExecutionState) {\n\t\tlines.push(\n\t\t\t`ToolExecution state: ${toolExecutionState.state} (${toolExecutionState.authority}).`,\n\t\t);\n\t}\n\tif (outcome.state && outcome.classification !== \"approval_pending\") {\n\t\tlines.push(`State: ${outcome.state}`);\n\t}\n\tif (outcome.riskLevel) {\n\t\tlines.push(`Risk level: ${outcome.riskLevel}`);\n\t}\n\tif (typeof outcome.retryAfterSeconds === \"number\") {\n\t\tlines.push(`Retry after: ${outcome.retryAfterSeconds} seconds`);\n\t} else if (typeof outcome.retryAfterMs === \"number\") {\n\t\tlines.push(`Retry after: ${outcome.retryAfterMs} ms`);\n\t}\n\n\treturn lines.join(\"\\n\");\n}\n\nfunction emitGovernedOutcomeTelemetry(\n\ttoolName: string,\n\toutcome: McpGovernedOutcome | undefined,\n): void {\n\tif (!outcome) {\n\t\treturn;\n\t}\n\n\tconst reason =\n\t\toutcome.message ??\n\t\toutcome.reasons?.join(\"; \") ??\n\t\toutcome.code ??\n\t\t\"policy event\";\n\n\tif (\n\t\toutcome.classification === \"approval_required\" ||\n\t\toutcome.classification === \"approval_pending\"\n\t) {\n\t\ttrackToolApprovalRequired({\n\t\t\ttoolName,\n\t\t\treason,\n\t\t\tsource: \"policy\",\n\t\t});\n\t\treturn;\n\t}\n\n\ttrackToolBlocked({\n\t\ttoolName,\n\t\treason,\n\t\tsource: \"policy\",\n\t\tseverity:\n\t\t\toutcome.classification === \"authentication_required\" ? \"medium\" : \"high\",\n\t});\n}\n\nfunction convertJsonSchemaToTypebox(schema: unknown): TSchema {\n\tif (!schema || typeof schema !== \"object\") {\n\t\treturn Type.Unknown();\n\t}\n\n\tconst s = schema as Record<string, unknown>;\n\tconst type = s.type as string | undefined;\n\tconst description =\n\t\ttypeof s.description === \"string\"\n\t\t\t? (promptSafeText(s.description) ?? undefined)\n\t\t\t: undefined;\n\n\tswitch (type) {\n\t\tcase \"string\":\n\t\t\treturn Type.String({ description });\n\t\tcase \"number\":\n\t\tcase \"integer\":\n\t\t\treturn Type.Number({ description });\n\t\tcase \"boolean\":\n\t\t\treturn Type.Boolean({ description });\n\t\tcase \"array\":\n\t\t\treturn Type.Array(convertJsonSchemaToTypebox(s.items), {\n\t\t\t\tdescription,\n\t\t\t});\n\t\tcase \"object\": {\n\t\t\tconst properties = s.properties as Record<string, unknown> | undefined;\n\t\t\tif (!properties) {\n\t\t\t\treturn Type.Record(Type.String(), Type.Unknown());\n\t\t\t}\n\t\t\tconst required = (s.required as string[]) ?? [];\n\t\t\tconst props: Record<string, TSchema> = {};\n\t\t\tfor (const [key, value] of Object.entries(properties)) {\n\t\t\t\tconst converted = convertJsonSchemaToTypebox(value);\n\t\t\t\tprops[key] = required.includes(key)\n\t\t\t\t\t? converted\n\t\t\t\t\t: Type.Optional(converted);\n\t\t\t}\n\t\t\treturn Type.Object(props, {\n\t\t\t\tdescription,\n\t\t\t});\n\t\t}\n\t\tdefault:\n\t\t\treturn Type.Unknown({ description });\n\t}\n}\n\nexport function createMcpToolWrapper(\n\tserverName: string,\n\tmcpTool: McpTool,\n\toptions?: {\n\t\tsupportsParallelToolCalls?: boolean;\n\t\tparallelSafety?: McpToolParallelSafety;\n\t},\n) {\n\tconst toolName = buildMcpToolName(serverName, mcpTool.name);\n\tconst schema = mcpTool.inputSchema\n\t\t? convertJsonSchemaToTypebox(mcpTool.inputSchema)\n\t\t: Type.Object({});\n\n\t// Extract MCP tool annotations for approval decisions\n\tconst mcpAnnotations = mcpTool.annotations as\n\t\t| {\n\t\t\t\treadOnlyHint?: boolean;\n\t\t\t\tdestructiveHint?: boolean;\n\t\t\t\tidempotentHint?: boolean;\n\t\t\t\topenWorldHint?: boolean;\n\t\t  }\n\t\t| undefined;\n\tconst supportsParallelToolCalls =\n\t\toptions?.parallelSafety?.supportsParallelToolCalls === true ||\n\t\toptions?.supportsParallelToolCalls === true;\n\tconst parallelSafetyProvenance =\n\t\toptions?.parallelSafety?.provenance ??\n\t\t(options?.supportsParallelToolCalls === true ? \"static_config\" : \"none\");\n\tconst parallelMaxConcurrency = options?.parallelSafety?.maxConcurrency;\n\tconst advertisedParallelReadOnly =\n\t\tsupportsParallelToolCalls && options?.parallelSafety?.readOnlyHint === true;\n\tconst annotations: ToolAnnotations | undefined =\n\t\tmcpAnnotations || advertisedParallelReadOnly\n\t\t\t? {\n\t\t\t\t\treadOnlyHint:\n\t\t\t\t\t\tmcpAnnotations?.readOnlyHint ??\n\t\t\t\t\t\t(advertisedParallelReadOnly ? true : undefined),\n\t\t\t\t\tdestructiveHint: mcpAnnotations?.destructiveHint,\n\t\t\t\t\tidempotentHint: mcpAnnotations?.idempotentHint,\n\t\t\t\t\topenWorldHint: mcpAnnotations?.openWorldHint,\n\t\t\t\t}\n\t\t\t: undefined;\n\tconst source: ToolSourceMetadata = {\n\t\ttype: \"mcp\",\n\t\tserver: serverName,\n\t\ttool: mcpTool.name,\n\t\tsupportsParallelToolCalls,\n\t\tparallelSafetyProvenance,\n\t\t...(parallelMaxConcurrency ? { parallelMaxConcurrency } : {}),\n\t};\n\n\treturn createTool<typeof schema, McpToolDetails>({\n\t\tname: toolName,\n\t\tlabel: `${serverName}/${mcpTool.name}`,\n\t\tdescription:\n\t\t\tpromptSafeText(mcpTool.description) ??\n\t\t\t`MCP tool from ${serverName}: ${mcpTool.name}`,\n\t\tschema,\n\t\tannotations,\n\t\tsource,\n\t\tasync run(params, { respond }) {\n\t\t\tconst result = await mcpManager.callTool(\n\t\t\t\tserverName,\n\t\t\t\tmcpTool.name,\n\t\t\t\tparams as Record<string, unknown>,\n\t\t\t);\n\t\t\tconst governedOutcome = classifyGovernedOutcome(\n\t\t\t\tresolveGovernedPayload(result),\n\t\t\t);\n\t\t\tconst toolExecutionState =\n\t\t\t\tnormalizeMcpGovernedToolExecution(governedOutcome);\n\t\t\temitGovernedOutcomeTelemetry(mcpTool.name, governedOutcome);\n\n\t\t\tconst output =\n\t\t\t\tformatGovernedOutcomeSummary(governedOutcome, toolExecutionState) ??\n\t\t\t\textractMcpTextContent(result.content) ??\n\t\t\t\tJSON.stringify(result.structuredContent ?? result.content, null, 2);\n\n\t\t\tconst response = result.isError\n\t\t\t\t? respond.error(output)\n\t\t\t\t: respond.text(output);\n\t\t\treturn response.detail({\n\t\t\t\tserver: serverName,\n\t\t\t\ttool: mcpTool.name,\n\t\t\t\tcontent: result.content,\n\t\t\t\tstructuredContent: result.structuredContent,\n\t\t\t\tisError: result.isError,\n\t\t\t\tgovernedOutcome,\n\t\t\t\ttoolExecutionState,\n\t\t\t});\n\t\t},\n\t});\n}\n\nexport function getAllMcpTools(): AgentTool[] {\n\tconst mcpTools = mcpManager.getAllTools();\n\treturn [\n\t\t...mcpTools.map(\n\t\t\t({ server, tool, supportsParallelToolCalls, parallelSafety }) =>\n\t\t\t\tcreateMcpToolWrapper(server, tool, {\n\t\t\t\t\tsupportsParallelToolCalls,\n\t\t\t\t\tparallelSafety,\n\t\t\t\t}),\n\t\t),\n\t\t...getMcpHelperTools(),\n\t];\n}\n\nexport function getMcpToolMap(): Map<string, AgentTool> {\n\tconst map = new Map<string, AgentTool>();\n\tconst mcpTools = mcpManager.getAllTools();\n\n\tfor (const tool of getMcpHelperTools()) {\n\t\tmap.set(tool.name, tool);\n\t}\n\n\tfor (const {\n\t\tserver,\n\t\ttool,\n\t\tsupportsParallelToolCalls,\n\t\tparallelSafety,\n\t} of mcpTools) {\n\t\tconst wrapper = createMcpToolWrapper(server, tool, {\n\t\t\tsupportsParallelToolCalls,\n\t\t\tparallelSafety,\n\t\t});\n\t\tmap.set(wrapper.name, wrapper);\n\t}\n\n\treturn map;\n}\n\n// ─────────────────────────────────────────────────────────────\n// MCP Resource Tools (inspired by Claude Code's ListMcpResources/ReadMcpResource)\n// ─────────────────────────────────────────────────────────────\n\ninterface McpResourceListDetails {\n\tservers: Array<{\n\t\tname: string;\n\t\tresources: string[];\n\t}>;\n}\n\nconst listMcpResourcesSchema = Type.Object({\n\tserver: Type.Optional(\n\t\tType.String({\n\t\t\tdescription:\n\t\t\t\t\"Optional server name to filter resources. If omitted, lists resources from all servers.\",\n\t\t}),\n\t),\n});\n\n/**\n * Tool to list available MCP resources across all connected servers.\n */\nexport const listMcpResourcesTool = createTool<\n\ttypeof listMcpResourcesSchema,\n\tMcpResourceListDetails\n>({\n\tname: \"mcp_list_resources\",\n\tdescription:\n\t\t\"List available resources from MCP servers. Resources are data sources that can be read (files, configs, etc.).\",\n\tschema: listMcpResourcesSchema,\n\tannotations: {\n\t\treadOnlyHint: true,\n\t},\n\tasync run(params, { respond }) {\n\t\tconst status = mcpManager.getStatus();\n\t\tconst result: Array<{ name: string; resources: string[] }> = [];\n\n\t\tfor (const server of status.servers) {\n\t\t\tif (params.server && server.name !== params.server) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (server.connected && server.resources.length > 0) {\n\t\t\t\tresult.push({\n\t\t\t\t\tname: server.name,\n\t\t\t\t\tresources: server.resources,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\tif (result.length === 0) {\n\t\t\treturn respond\n\t\t\t\t.text(\n\t\t\t\t\t\"No MCP resources available. Either no servers are connected or they don't expose resources.\",\n\t\t\t\t)\n\t\t\t\t.detail({ servers: [] });\n\t\t}\n\n\t\tconst lines: string[] = [\"# Available MCP Resources\\n\"];\n\t\tfor (const server of result) {\n\t\t\tlines.push(`## ${server.name}`);\n\t\t\tfor (const uri of server.resources) {\n\t\t\t\tlines.push(`- ${uri}`);\n\t\t\t}\n\t\t\tlines.push(\"\");\n\t\t}\n\n\t\treturn respond.text(lines.join(\"\\n\")).detail({ servers: result });\n\t},\n});\n\ninterface McpResourceReadDetails {\n\tserver: string;\n\turi: string;\n\tcontents: Array<{\n\t\turi: string;\n\t\ttext?: string;\n\t\tmimeType?: string;\n\t}>;\n}\n\nconst readMcpResourceSchema = Type.Object({\n\tserver: Type.String({\n\t\tdescription: \"Name of the MCP server that hosts the resource\",\n\t}),\n\turi: Type.String({\n\t\tdescription: \"URI of the resource to read\",\n\t}),\n});\n\n/**\n * Tool to read a specific MCP resource.\n */\nexport const readMcpResourceTool = createTool<\n\ttypeof readMcpResourceSchema,\n\tMcpResourceReadDetails\n>({\n\tname: \"mcp_read_resource\",\n\tdescription:\n\t\t\"Read the contents of an MCP resource by URI. Use mcp_list_resources first to discover available resources.\",\n\tschema: readMcpResourceSchema,\n\tannotations: {\n\t\treadOnlyHint: true,\n\t},\n\tasync run(params, { respond }) {\n\t\tconst { server, uri } = params;\n\n\t\ttry {\n\t\t\tconst result = await mcpManager.readResource(server, uri);\n\n\t\t\tif (result.contents.length === 0) {\n\t\t\t\treturn respond.text(`Resource '${uri}' is empty.`).detail({\n\t\t\t\t\tserver,\n\t\t\t\t\turi,\n\t\t\t\t\tcontents: [],\n\t\t\t\t});\n\t\t\t}\n\n\t\t\t// Format output based on content type\n\t\t\tconst textContents = result.contents\n\t\t\t\t.filter((c) => c.text !== undefined)\n\t\t\t\t.map((c) => c.text)\n\t\t\t\t.join(\"\\n---\\n\");\n\n\t\t\tconst output = textContents || JSON.stringify(result.contents, null, 2);\n\n\t\t\treturn respond.text(output).detail({\n\t\t\t\tserver,\n\t\t\t\turi,\n\t\t\t\tcontents: result.contents.map((c) => ({\n\t\t\t\t\turi: c.uri,\n\t\t\t\t\ttext: c.text,\n\t\t\t\t\tmimeType: c.mimeType,\n\t\t\t\t})),\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn respond.error(`Failed to read resource: ${message}`);\n\t\t}\n\t},\n});\n\ninterface McpPromptListDetails {\n\tservers: Array<{\n\t\tname: string;\n\t\tprompts: string[];\n\t}>;\n}\n\nconst listMcpPromptsSchema = Type.Object({\n\tserver: Type.Optional(\n\t\tType.String({\n\t\t\tdescription:\n\t\t\t\t\"Optional server name to filter prompts. If omitted, lists prompts from all servers.\",\n\t\t}),\n\t),\n});\n\n/**\n * Tool to list available MCP prompts across all connected servers.\n */\nexport const listMcpPromptsTool = createTool<\n\ttypeof listMcpPromptsSchema,\n\tMcpPromptListDetails\n>({\n\tname: \"mcp_list_prompts\",\n\tdescription:\n\t\t\"List available prompts from MCP servers. Prompts are reusable prompt templates exposed by servers.\",\n\tschema: listMcpPromptsSchema,\n\tannotations: {\n\t\treadOnlyHint: true,\n\t},\n\tasync run(params, { respond }) {\n\t\tconst status = mcpManager.getStatus();\n\t\tconst result: Array<{ name: string; prompts: string[] }> = [];\n\n\t\tfor (const server of status.servers) {\n\t\t\tif (params.server && server.name !== params.server) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (server.connected && server.prompts.length > 0) {\n\t\t\t\tresult.push({\n\t\t\t\t\tname: server.name,\n\t\t\t\t\tprompts: server.prompts,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\tif (result.length === 0) {\n\t\t\treturn respond\n\t\t\t\t.text(\n\t\t\t\t\t\"No MCP prompts available. Either no servers are connected or they don't expose prompts.\",\n\t\t\t\t)\n\t\t\t\t.detail({ servers: [] });\n\t\t}\n\n\t\tconst lines: string[] = [\"# Available MCP Prompts\\n\"];\n\t\tfor (const server of result) {\n\t\t\tlines.push(`## ${server.name}`);\n\t\t\tfor (const prompt of server.prompts) {\n\t\t\t\tlines.push(`- ${prompt}`);\n\t\t\t}\n\t\t\tlines.push(\"\");\n\t\t}\n\n\t\treturn respond.text(lines.join(\"\\n\")).detail({ servers: result });\n\t},\n});\n\ninterface McpPromptDetails {\n\tserver: string;\n\tname: string;\n\tdescription?: string;\n\tmessages: Array<{ role: string; content: string }>;\n}\n\nconst getMcpPromptSchema = Type.Object({\n\tserver: Type.String({\n\t\tdescription: \"Name of the MCP server that hosts the prompt\",\n\t}),\n\tname: Type.String({\n\t\tdescription: \"Name of the prompt to fetch\",\n\t}),\n\targs: Type.Optional(\n\t\tType.Record(\n\t\t\tType.String(),\n\t\t\tType.String({\n\t\t\t\tdescription: \"Optional string arguments passed to the prompt\",\n\t\t\t}),\n\t\t),\n\t),\n});\n\n/**\n * Tool to fetch a specific MCP prompt.\n */\nexport const getMcpPromptTool = createTool<\n\ttypeof getMcpPromptSchema,\n\tMcpPromptDetails\n>({\n\tname: \"mcp_get_prompt\",\n\tdescription:\n\t\t\"Fetch an MCP prompt by name. Use mcp_list_prompts first to discover available prompts.\",\n\tschema: getMcpPromptSchema,\n\tannotations: {\n\t\treadOnlyHint: true,\n\t},\n\tasync run(params, { respond }) {\n\t\tconst { server, name, args } = params;\n\n\t\ttry {\n\t\t\tconst result = await mcpManager.getPrompt(server, name, args);\n\t\t\tconst lines: string[] = [`Prompt: ${name}`];\n\t\t\tconst description = promptSafeText(result.description);\n\n\t\t\tif (description) {\n\t\t\t\tlines.push(`Description: ${description}`);\n\t\t\t}\n\n\t\t\tif (result.messages.length === 0) {\n\t\t\t\tlines.push(\"\");\n\t\t\t\tlines.push(\"No prompt messages returned.\");\n\t\t\t} else {\n\t\t\t\tlines.push(\"\");\n\t\t\t\tfor (const message of result.messages) {\n\t\t\t\t\tlines.push(`[${message.role}]`);\n\t\t\t\t\tlines.push(message.content);\n\t\t\t\t\tlines.push(\"\");\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn respond.text(lines.join(\"\\n\").trimEnd()).detail({\n\t\t\t\tserver,\n\t\t\t\tname,\n\t\t\t\tdescription: description ?? undefined,\n\t\t\t\tmessages: result.messages,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\treturn respond.error(`Failed to get prompt: ${message}`);\n\t\t}\n\t},\n});\n\n/**\n * Get all MCP resource tools.\n */\nexport function getMcpResourceTools() {\n\treturn [listMcpResourcesTool, readMcpResourceTool];\n}\n\nfunction getMcpHelperTools() {\n\treturn [\n\t\tlistMcpResourcesTool,\n\t\treadMcpResourceTool,\n\t\tlistMcpPromptsTool,\n\t\tgetMcpPromptTool,\n\t];\n}\n"]}

package/dist/mcp/types.d.ts

@@ -38,6 +38,17 @@ export type McpScope = "enterprise" | "plugin" | "project" | "local" | "user";
 export type McpRemoteTrust = "official" | "custom" | "unknown";
 export type McpProjectApprovalDecision = "approved" | "denied";
 export type McpProjectApprovalStatus = "pending" | McpProjectApprovalDecision;
+export type McpWorkspaceTrustMode = "trusted" | "ask" | "blocked" | "untrusted";
+export type McpWorkspaceTrustDefault = "trusted" | "ask" | "untrusted";
+export interface McpWorkspaceTrustEntry {
+    workspaceUri: string;
+    mode: Exclude<McpWorkspaceTrustMode, "untrusted">;
+    serverFingerprint?: string;
+    grantedBy?: string;
+    grantedAt?: string;
+    expiresAt?: string;
+    reason?: string;
+}
 export interface McpOfficialRegistryInfo {
     displayName?: string;
     directoryUrl?: string;
@@ -92,12 +103,22 @@ export interface McpServerConfig {
     enabled?: boolean;
     disabled?: boolean;
     timeout?: number;
+    supportsParallelToolCalls?: boolean;
     scope?: McpScope;
 }
+export type McpParallelSafetyProvenance = "static_config" | "server_capability" | "none";
+export interface McpToolParallelSafety {
+    supportsParallelToolCalls: boolean;
+    provenance: McpParallelSafetyProvenance;
+    maxConcurrency?: number;
+    readOnlyHint?: boolean;
+}
 export interface McpConfig {
     servers: McpServerConfig[];
     authPresets: McpAuthPresetConfig[];
     projectRoot?: string;
+    trustedWorkspaces?: Record<string, McpWorkspaceTrustEntry[]>;
+    workspaceTrustDefault?: McpWorkspaceTrustDefault;
     envLimits?: Record<string, {
         effective: number;
         status: string;
@@ -124,6 +145,12 @@ export interface McpServerStatus {
     headersHelper?: string;
     authPreset?: string;
     timeout?: number;
+    supportsParallelToolCalls?: boolean;
+    parallelSafety?: {
+        supportsParallelToolCalls: boolean;
+        provenance: McpParallelSafetyProvenance;
+        maxConcurrency?: number;
+    };
     remoteTrust?: McpRemoteTrust;
     officialRegistry?: McpOfficialRegistryInfo;
     projectApproval?: McpProjectApprovalStatus;

package/dist/mcp/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/mcp/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,EAAE,IAAI,IAAI,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAE1E,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AACpD,MAAM,MAAM,QAAQ,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;AAC9E,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAC/D,MAAM,MAAM,0BAA0B,GAAG,UAAU,GAAG,QAAQ,CAAC;AAC/D,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,0BAA0B,CAAC;AAE9E,MAAM,WAAW,uBAAuB;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,4BAA4B;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAyB,SAAQ,uBAAuB;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,UAAU,CAAC,EAAE,4BAA4B,EAAE,CAAC;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,YAAY,CAAC;IAExB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACzB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CACjB,MAAM,EACN;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CACvD,CAAC;CACF;AAED,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,SAAS,EAAE,YAAY,CAAC;IACxB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,eAAe,CAAC,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAChC,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,WAAW,EAAE,mBAAmB,EAAE,CAAC;CACnC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/mcp/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,EAAE,IAAI,IAAI,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAE1E,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AACpD,MAAM,MAAM,QAAQ,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;AAC9E,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAC/D,MAAM,MAAM,0BAA0B,GAAG,UAAU,GAAG,QAAQ,CAAC;AAC/D,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,0BAA0B,CAAC;AAC9E,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,GAAG,WAAW,CAAC;AAChF,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,KAAK,GAAG,WAAW,CAAC;AAEvE,MAAM,WAAW,sBAAsB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC;IAClD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,4BAA4B;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAyB,SAAQ,uBAAuB;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,UAAU,CAAC,EAAE,4BAA4B,EAAE,CAAC;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,YAAY,CAAC;IAExB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,KAAK,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,MAAM,2BAA2B,GACpC,eAAe,GACf,mBAAmB,GACnB,MAAM,CAAC;AAEV,MAAM,WAAW,qBAAqB;IACrC,yBAAyB,EAAE,OAAO,CAAC;IACnC,UAAU,EAAE,2BAA2B,CAAC;IACxC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACzB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAC7D,qBAAqB,CAAC,EAAE,wBAAwB,CAAC;IACjD,SAAS,CAAC,EAAE,MAAM,CACjB,MAAM,EACN;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CACvD,CAAC;CACF;AAED,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,SAAS,EAAE,YAAY,CAAC;IACxB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,cAAc,CAAC,EAAE;QAChB,yBAAyB,EAAE,OAAO,CAAC;QACnC,UAAU,EAAE,2BAA2B,CAAC;QACxC,cAAc,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,eAAe,CAAC,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAChC,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,WAAW,EAAE,mBAAmB,EAAE,CAAC;CACnC"}

package/dist/mcp/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/mcp/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG","sourcesContent":["/**\n * MCP Types - Model Context Protocol Type Definitions\n *\n * This module defines the core types used throughout the MCP (Model Context\n * Protocol) integration. These types represent server configurations, connection\n * states, and status information.\n *\n * ## Transport Types\n *\n * | Transport | Description                              |\n * |-----------|------------------------------------------|\n * | stdio     | Subprocess communication via stdin/stdout|\n * | http      | HTTP-based REST transport                |\n * | sse       | Server-Sent Events for streaming         |\n *\n * ## Configuration Scopes\n *\n * | Scope      | Precedence | Description                        |\n * |------------|------------|------------------------------------|\n * | enterprise | Highest    | Organization-wide settings         |\n * | plugin     | High       | Programmatically provided          |\n * | project    | Medium     | Per-project .maestro/mcp.json     |\n * | local      | Low        | Local overrides (git-ignored)      |\n * | user       | Lowest     | User's global settings             |\n *\n * ## Server Status\n *\n * The `McpServerStatus` interface tracks:\n * - Connection state (connected/disconnected)\n * - Available tools, resources, and prompts\n * - Error messages if connection failed\n *\n * @module mcp/types\n */\n\nimport type { Tool as McpTool } from \"@modelcontextprotocol/sdk/types.js\";\n\nexport type McpTransport = \"stdio\" | \"http\" | \"sse\";\nexport type McpScope = \"enterprise\" | \"plugin\" | \"project\" | \"local\" | \"user\";\nexport type McpRemoteTrust = \"official\" | \"custom\" | \"unknown\";\nexport type McpProjectApprovalDecision = \"approved\" | \"denied\";\nexport type McpProjectApprovalStatus = \"pending\" | McpProjectApprovalDecision;\n\nexport interface McpOfficialRegistryInfo {\n\tdisplayName?: string;\n\tdirectoryUrl?: string;\n\tdocumentationUrl?: string;\n\tpermissions?: string;\n\tauthorName?: string;\n\turl?: string;\n}\n\nexport interface McpOfficialRegistryUrlOption {\n\turl: string;\n\tlabel?: string;\n\tdescription?: string;\n}\n\nexport interface McpOfficialRegistryEntry extends McpOfficialRegistryInfo {\n\tslug?: string;\n\tserverName?: string;\n\toneLiner?: string;\n\ttransport?: McpTransport;\n\turlOptions?: McpOfficialRegistryUrlOption[];\n\turlRegex?: string;\n\ttoolCount?: number;\n\tpromptCount?: number;\n}\n\nexport interface McpPromptArgument {\n\tname: string;\n\tdescription?: string;\n\trequired?: boolean;\n}\n\nexport interface McpPromptDefinition {\n\tname: string;\n\ttitle?: string;\n\tdescription?: string;\n\targuments?: McpPromptArgument[];\n}\n\nexport interface McpAuthPresetConfig {\n\tname: string;\n\theaders?: Record<string, string>;\n\theadersHelper?: string;\n\tscope?: McpScope;\n}\n\nexport interface McpServerConfig {\n\tname: string;\n\ttransport: McpTransport;\n\t// For stdio transport\n\tcommand?: string;\n\targs?: string[];\n\tenv?: Record<string, string>;\n\tcwd?: string;\n\t// For http/sse transport\n\turl?: string;\n\theaders?: Record<string, string>;\n\theadersHelper?: string;\n\tauthPreset?: string;\n\t// Common options\n\tenabled?: boolean;\n\tdisabled?: boolean;\n\ttimeout?: number;\n\tscope?: McpScope;\n}\n\nexport interface McpConfig {\n\tservers: McpServerConfig[];\n\tauthPresets: McpAuthPresetConfig[];\n\tprojectRoot?: string;\n\tenvLimits?: Record<\n\t\tstring,\n\t\t{ effective: number; status: string; message?: string }\n\t>;\n}\n\nexport interface McpServerStatus {\n\tname: string;\n\tconnected: boolean;\n\terror?: string;\n\tscope?: McpScope;\n\ttransport: McpTransport;\n\ttools: McpTool[];\n\tresources: string[];\n\tprompts: string[];\n\tpromptDetails?: McpPromptDefinition[];\n\tcommand?: string;\n\targs?: string[];\n\tcwd?: string;\n\tenvKeys?: string[];\n\tremoteUrl?: string;\n\tremoteHost?: string;\n\theaderKeys?: string[];\n\theadersHelper?: string;\n\tauthPreset?: string;\n\ttimeout?: number;\n\tremoteTrust?: McpRemoteTrust;\n\tofficialRegistry?: McpOfficialRegistryInfo;\n\tprojectApproval?: McpProjectApprovalStatus;\n}\n\nexport interface McpAuthPresetStatus {\n\tname: string;\n\tscope?: McpScope;\n\theaderKeys: string[];\n\theadersHelper?: string;\n}\n\nexport interface McpManagerStatus {\n\tservers: McpServerStatus[];\n\tauthPresets: McpAuthPresetStatus[];\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/mcp/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG","sourcesContent":["/**\n * MCP Types - Model Context Protocol Type Definitions\n *\n * This module defines the core types used throughout the MCP (Model Context\n * Protocol) integration. These types represent server configurations, connection\n * states, and status information.\n *\n * ## Transport Types\n *\n * | Transport | Description                              |\n * |-----------|------------------------------------------|\n * | stdio     | Subprocess communication via stdin/stdout|\n * | http      | HTTP-based REST transport                |\n * | sse       | Server-Sent Events for streaming         |\n *\n * ## Configuration Scopes\n *\n * | Scope      | Precedence | Description                        |\n * |------------|------------|------------------------------------|\n * | enterprise | Highest    | Organization-wide settings         |\n * | plugin     | High       | Programmatically provided          |\n * | project    | Medium     | Per-project .maestro/mcp.json     |\n * | local      | Low        | Local overrides (git-ignored)      |\n * | user       | Lowest     | User's global settings             |\n *\n * ## Server Status\n *\n * The `McpServerStatus` interface tracks:\n * - Connection state (connected/disconnected)\n * - Available tools, resources, and prompts\n * - Error messages if connection failed\n *\n * @module mcp/types\n */\n\nimport type { Tool as McpTool } from \"@modelcontextprotocol/sdk/types.js\";\n\nexport type McpTransport = \"stdio\" | \"http\" | \"sse\";\nexport type McpScope = \"enterprise\" | \"plugin\" | \"project\" | \"local\" | \"user\";\nexport type McpRemoteTrust = \"official\" | \"custom\" | \"unknown\";\nexport type McpProjectApprovalDecision = \"approved\" | \"denied\";\nexport type McpProjectApprovalStatus = \"pending\" | McpProjectApprovalDecision;\nexport type McpWorkspaceTrustMode = \"trusted\" | \"ask\" | \"blocked\" | \"untrusted\";\nexport type McpWorkspaceTrustDefault = \"trusted\" | \"ask\" | \"untrusted\";\n\nexport interface McpWorkspaceTrustEntry {\n\tworkspaceUri: string;\n\tmode: Exclude<McpWorkspaceTrustMode, \"untrusted\">;\n\tserverFingerprint?: string;\n\tgrantedBy?: string;\n\tgrantedAt?: string;\n\texpiresAt?: string;\n\treason?: string;\n}\n\nexport interface McpOfficialRegistryInfo {\n\tdisplayName?: string;\n\tdirectoryUrl?: string;\n\tdocumentationUrl?: string;\n\tpermissions?: string;\n\tauthorName?: string;\n\turl?: string;\n}\n\nexport interface McpOfficialRegistryUrlOption {\n\turl: string;\n\tlabel?: string;\n\tdescription?: string;\n}\n\nexport interface McpOfficialRegistryEntry extends McpOfficialRegistryInfo {\n\tslug?: string;\n\tserverName?: string;\n\toneLiner?: string;\n\ttransport?: McpTransport;\n\turlOptions?: McpOfficialRegistryUrlOption[];\n\turlRegex?: string;\n\ttoolCount?: number;\n\tpromptCount?: number;\n}\n\nexport interface McpPromptArgument {\n\tname: string;\n\tdescription?: string;\n\trequired?: boolean;\n}\n\nexport interface McpPromptDefinition {\n\tname: string;\n\ttitle?: string;\n\tdescription?: string;\n\targuments?: McpPromptArgument[];\n}\n\nexport interface McpAuthPresetConfig {\n\tname: string;\n\theaders?: Record<string, string>;\n\theadersHelper?: string;\n\tscope?: McpScope;\n}\n\nexport interface McpServerConfig {\n\tname: string;\n\ttransport: McpTransport;\n\t// For stdio transport\n\tcommand?: string;\n\targs?: string[];\n\tenv?: Record<string, string>;\n\tcwd?: string;\n\t// For http/sse transport\n\turl?: string;\n\theaders?: Record<string, string>;\n\theadersHelper?: string;\n\tauthPreset?: string;\n\t// Common options\n\tenabled?: boolean;\n\tdisabled?: boolean;\n\ttimeout?: number;\n\tsupportsParallelToolCalls?: boolean;\n\tscope?: McpScope;\n}\n\nexport type McpParallelSafetyProvenance =\n\t| \"static_config\"\n\t| \"server_capability\"\n\t| \"none\";\n\nexport interface McpToolParallelSafety {\n\tsupportsParallelToolCalls: boolean;\n\tprovenance: McpParallelSafetyProvenance;\n\tmaxConcurrency?: number;\n\treadOnlyHint?: boolean;\n}\n\nexport interface McpConfig {\n\tservers: McpServerConfig[];\n\tauthPresets: McpAuthPresetConfig[];\n\tprojectRoot?: string;\n\ttrustedWorkspaces?: Record<string, McpWorkspaceTrustEntry[]>;\n\tworkspaceTrustDefault?: McpWorkspaceTrustDefault;\n\tenvLimits?: Record<\n\t\tstring,\n\t\t{ effective: number; status: string; message?: string }\n\t>;\n}\n\nexport interface McpServerStatus {\n\tname: string;\n\tconnected: boolean;\n\terror?: string;\n\tscope?: McpScope;\n\ttransport: McpTransport;\n\ttools: McpTool[];\n\tresources: string[];\n\tprompts: string[];\n\tpromptDetails?: McpPromptDefinition[];\n\tcommand?: string;\n\targs?: string[];\n\tcwd?: string;\n\tenvKeys?: string[];\n\tremoteUrl?: string;\n\tremoteHost?: string;\n\theaderKeys?: string[];\n\theadersHelper?: string;\n\tauthPreset?: string;\n\ttimeout?: number;\n\tsupportsParallelToolCalls?: boolean;\n\tparallelSafety?: {\n\t\tsupportsParallelToolCalls: boolean;\n\t\tprovenance: McpParallelSafetyProvenance;\n\t\tmaxConcurrency?: number;\n\t};\n\tremoteTrust?: McpRemoteTrust;\n\tofficialRegistry?: McpOfficialRegistryInfo;\n\tprojectApproval?: McpProjectApprovalStatus;\n}\n\nexport interface McpAuthPresetStatus {\n\tname: string;\n\tscope?: McpScope;\n\theaderKeys: string[];\n\theadersHelper?: string;\n}\n\nexport interface McpManagerStatus {\n\tservers: McpServerStatus[];\n\tauthPresets: McpAuthPresetStatus[];\n}\n"]}

package/dist/mcp/workspace-trust.d.ts

@@ -0,0 +1,10 @@
+import type { ClientToolExecutionService } from "../agent/transport.js";
+import type { McpConfig, McpServerConfig } from "./types.js";
+export declare function resolveMcpWorkspaceUri(workspaceRoot?: string): Promise<string>;
+export declare function ensureMcpWorkspaceTrusted(options: {
+    config: McpConfig;
+    server: McpServerConfig;
+    toolName: string;
+    clientToolService?: ClientToolExecutionService;
+}): Promise<void>;
+//# sourceMappingURL=workspace-trust.d.ts.map

package/dist/mcp/workspace-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-trust.d.ts","sourceRoot":"","sources":["../../src/mcp/workspace-trust.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAIxE,OAAO,KAAK,EACX,SAAS,EACT,eAAe,EAGf,MAAM,YAAY,CAAC;AAgNpB,wBAAsB,sBAAsB,CAC3C,aAAa,SAAgB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAoBjB;AA6DD,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACxD,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,0BAA0B,CAAC;CAC/C,GAAG,OAAO,CAAC,IAAI,CAAC,CA0FhB"}

package/dist/mcp/workspace-trust.js

@@ -0,0 +1,295 @@
+import { execFile } from "node:child_process";
+import { createHash, randomUUID } from "node:crypto";
+import { resolve } from "node:path";
+import { promisify } from "node:util";
+import { PATHS } from "../config/constants.js";
+import { readJsonFile, writeJsonFile } from "../utils/fs.js";
+const execFileAsync = promisify(execFile);
+function emptyStore() {
+    return {
+        version: 1,
+        servers: {},
+    };
+}
+function isRecord(value) {
+    return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function normalizeTrustEntry(value) {
+    if (!isRecord(value)) {
+        return null;
+    }
+    const workspaceUri = value.workspaceUri;
+    const mode = value.mode;
+    if (typeof workspaceUri !== "string" ||
+        workspaceUri.trim().length === 0 ||
+        (mode !== "trusted" && mode !== "ask" && mode !== "blocked")) {
+        return null;
+    }
+    return {
+        workspaceUri: canonicalizeWorkspaceUri(workspaceUri),
+        mode,
+        serverFingerprint: typeof value.serverFingerprint === "string"
+            ? value.serverFingerprint
+            : undefined,
+        grantedBy: typeof value.grantedBy === "string" ? value.grantedBy : undefined,
+        grantedAt: typeof value.grantedAt === "string" ? value.grantedAt : undefined,
+        expiresAt: typeof value.expiresAt === "string" ? value.expiresAt : undefined,
+        reason: typeof value.reason === "string" ? value.reason : undefined,
+    };
+}
+function normalizeStore(value) {
+    if (!isRecord(value) || value.version !== 1 || !isRecord(value.servers)) {
+        return emptyStore();
+    }
+    const servers = {};
+    for (const [serverName, entries] of Object.entries(value.servers)) {
+        if (!Array.isArray(entries)) {
+            continue;
+        }
+        const normalized = entries
+            .map(normalizeTrustEntry)
+            .filter((entry) => !!entry);
+        if (normalized.length > 0) {
+            servers[serverName] = normalized;
+        }
+    }
+    return { version: 1, servers };
+}
+function readStore() {
+    return normalizeStore(readJsonFile(PATHS.MCP_WORKSPACE_TRUST_FILE, {
+        fallback: emptyStore(),
+    }));
+}
+function writeStore(store) {
+    writeJsonFile(PATHS.MCP_WORKSPACE_TRUST_FILE, store);
+}
+function isExpired(entry, now = Date.now()) {
+    if (!entry.expiresAt) {
+        return false;
+    }
+    const expiresAt = Date.parse(entry.expiresAt);
+    return !Number.isFinite(expiresAt) || expiresAt <= now;
+}
+function latestMatchingEntry(entries, workspaceUri, options = {}) {
+    if (!entries) {
+        return undefined;
+    }
+    const canonicalWorkspaceUri = canonicalizeWorkspaceUri(workspaceUri);
+    for (let index = entries.length - 1; index >= 0; index -= 1) {
+        const entry = entries[index];
+        if (!entry || isExpired(entry)) {
+            continue;
+        }
+        if (canonicalizeWorkspaceUri(entry.workspaceUri) !== canonicalWorkspaceUri) {
+            continue;
+        }
+        if (options.serverFingerprint &&
+            entry.serverFingerprint !== options.serverFingerprint) {
+            if (entry.serverFingerprint || entry.mode === "trusted") {
+                continue;
+            }
+        }
+        return entry;
+    }
+    return undefined;
+}
+function resolveConfiguredMcpWorkspaceTrust(options) {
+    const configuredEntries = options.config.trustedWorkspaces?.[options.serverName];
+    const configured = latestMatchingEntry(configuredEntries, options.workspaceUri);
+    if (configured) {
+        return configured.mode;
+    }
+    if (options.config.workspaceTrustDefault === "untrusted") {
+        return "untrusted";
+    }
+    const stored = latestMatchingEntry(options.storedTrust?.[options.serverName], options.workspaceUri, { serverFingerprint: options.serverFingerprint });
+    if (stored) {
+        return stored.mode;
+    }
+    if (!options.config.workspaceTrustDefault && !configuredEntries?.length) {
+        return "trusted";
+    }
+    return options.config.workspaceTrustDefault ?? "ask";
+}
+function canonicalizeWorkspaceUri(workspaceUri) {
+    const trimmed = workspaceUri.trim();
+    if (trimmed.startsWith("git:")) {
+        return `git:${sanitizeGitRemote(trimmed.slice("git:".length))}`;
+    }
+    return trimmed;
+}
+function sanitizeGitRemote(remote) {
+    const trimmed = remote.trim();
+    try {
+        const url = new URL(trimmed);
+        url.username = "";
+        url.password = "";
+        url.search = "";
+        url.hash = "";
+        return url.toString();
+    }
+    catch {
+        return trimmed
+            .replace(/^[^/@\s]+@(?=[^/:]+[:/])/, "")
+            .replace(/[?#].*$/, "");
+    }
+}
+function normalizeFingerprintValue(value) {
+    if (Array.isArray(value)) {
+        return value.map(normalizeFingerprintValue);
+    }
+    if (isRecord(value)) {
+        return Object.fromEntries(Object.entries(value)
+            .filter(([, entryValue]) => entryValue !== undefined)
+            .sort(([left], [right]) => left.localeCompare(right))
+            .map(([key, entryValue]) => [
+            key,
+            normalizeFingerprintValue(entryValue),
+        ]));
+    }
+    return value;
+}
+function fingerprintMcpServer(server) {
+    const identity = { ...server };
+    delete identity.disabled;
+    delete identity.enabled;
+    delete identity.scope;
+    return createHash("sha256")
+        .update(JSON.stringify(normalizeFingerprintValue(identity)))
+        .digest("hex");
+}
+export async function resolveMcpWorkspaceUri(workspaceRoot = process.cwd()) {
+    const root = resolve(workspaceRoot);
+    try {
+        const { stdout } = await execFileAsync("git", ["-C", root, "config", "--get", "remote.origin.url"], {
+            timeout: 1000,
+            windowsHide: true,
+            encoding: "utf8",
+        });
+        const remote = stdout.trim();
+        if (remote.length > 0) {
+            return `git:${sanitizeGitRemote(remote)}`;
+        }
+    }
+    catch {
+        // Non-git workspaces fall back to a canonical local path.
+    }
+    return `file:${root}`;
+}
+function setMcpWorkspaceTrust(options) {
+    const store = readStore();
+    const workspaceUri = canonicalizeWorkspaceUri(options.workspaceUri);
+    const entries = (store.servers[options.serverName] ?? []).filter((entry) => canonicalizeWorkspaceUri(entry.workspaceUri) !== workspaceUri ||
+        entry.serverFingerprint !== options.serverFingerprint);
+    entries.push({
+        workspaceUri,
+        mode: options.mode,
+        serverFingerprint: options.serverFingerprint,
+        grantedBy: options.grantedBy,
+        grantedAt: new Date().toISOString(),
+        reason: options.reason,
+    });
+    store.servers[options.serverName] = entries;
+    writeStore(store);
+}
+function getDecision(content) {
+    const text = content.find((item) => item.type === "text" && typeof item.text === "string")?.text;
+    if (!text) {
+        return "cancel";
+    }
+    try {
+        const parsed = JSON.parse(text);
+        if (!isRecord(parsed)) {
+            return "cancel";
+        }
+        if (parsed.action === "decline" || parsed.action === "cancel") {
+            return "cancel";
+        }
+        const payload = isRecord(parsed.content) ? parsed.content : parsed;
+        const candidate = payload.decision ?? payload.choice ?? payload.action;
+        if (candidate === "trust_once" ||
+            candidate === "trust_always" ||
+            candidate === "block" ||
+            candidate === "cancel") {
+            return candidate;
+        }
+    }
+    catch {
+        return "cancel";
+    }
+    return "cancel";
+}
+export async function ensureMcpWorkspaceTrusted(options) {
+    const storedTrust = readStore().servers;
+    if (!options.config.workspaceTrustDefault &&
+        !options.config.trustedWorkspaces?.[options.server.name]?.length &&
+        !storedTrust[options.server.name]?.length) {
+        return;
+    }
+    const workspaceUri = await resolveMcpWorkspaceUri(options.config.projectRoot);
+    const serverFingerprint = fingerprintMcpServer(options.server);
+    const mode = resolveConfiguredMcpWorkspaceTrust({
+        config: options.config,
+        serverName: options.server.name,
+        workspaceUri,
+        serverFingerprint,
+        storedTrust,
+    });
+    if (mode === "trusted") {
+        return;
+    }
+    if (mode === "blocked" || mode === "untrusted") {
+        throw new Error(`MCP server "${options.server.name}" is not trusted for workspace ${workspaceUri}.`);
+    }
+    if (!options.clientToolService) {
+        throw new Error(`MCP server "${options.server.name}" requires workspace trust before invoking "${options.toolName}", but no MCP elicitation client is connected.`);
+    }
+    const requestId = `mcp_trust:${options.server.name}:${options.toolName}:${randomUUID()}`;
+    const result = await options.clientToolService.requestExecution(requestId, "mcp_elicitation", {
+        serverName: options.server.name,
+        requestId,
+        mode: "form",
+        message: `Trust MCP server "${options.server.name}" for workspace ${workspaceUri} before calling tool "${options.toolName}"?`,
+        requestedSchema: {
+            type: "object",
+            properties: {
+                decision: {
+                    type: "string",
+                    title: "Decision",
+                    enum: ["trust_once", "trust_always", "block", "cancel"],
+                },
+            },
+            required: ["decision"],
+        },
+    });
+    if (result.isError) {
+        throw new Error(`MCP trust prompt failed for server "${options.server.name}".`);
+    }
+    const decision = getDecision(result.content);
+    if (decision === "trust_once") {
+        return;
+    }
+    if (decision === "trust_always") {
+        setMcpWorkspaceTrust({
+            serverName: options.server.name,
+            workspaceUri,
+            mode: "trusted",
+            serverFingerprint,
+            grantedBy: "user",
+            reason: `Accepted MCP tool invocation for ${options.toolName}`,
+        });
+        return;
+    }
+    if (decision === "block") {
+        setMcpWorkspaceTrust({
+            serverName: options.server.name,
+            workspaceUri,
+            mode: "blocked",
+            serverFingerprint,
+            grantedBy: "user",
+            reason: `Blocked MCP tool invocation for ${options.toolName}`,
+        });
+    }
+    throw new Error(`MCP server "${options.server.name}" was not trusted for workspace ${workspaceUri}.`);
+}
+//# sourceMappingURL=workspace-trust.js.map