@finctl/mcp 0.1.0

package/dist/tools/catalog.js

@@ -0,0 +1,417 @@
+import { z } from "zod";
+import { currentAuth } from "../auth/context.js";
+import { FinCtlApiError } from "../client/finctl-client.js";
+/**
+ * Wrap a JSON-serializable payload as a text result, scoped to the authenticated
+ * customer. Every response carries the resolved customer ID and account scope —
+ * data belongs only to the caller.
+ */
+function json(payload) {
+    const auth = currentAuth();
+    const scoped = {
+        customer_id: auth.customerId,
+        scoped_account_ids: auth.accountIds,
+        ...payload,
+    };
+    return { content: [{ type: "text", text: JSON.stringify(scoped, null, 2) }] };
+}
+/** A human-readable error result (no stack traces) flagged for the LLM. */
+function errorResult(message) {
+    return { content: [{ type: "text", text: message }], isError: true };
+}
+const PERIOD = z
+    .enum(["7d", "30d", "mtd", "ytd"])
+    .describe("Reporting window: last 7 days, last 30 days, month-to-date, or year-to-date.");
+/**
+ * Run a backend-backed handler: require a configured client, then translate
+ * FinCtl/network errors into clean, human-readable tool errors.
+ */
+async function withCost(cost, run) {
+    if (!cost) {
+        return errorResult("FinCtl backend is not configured. Set FINCTL_ENDPOINT (and FINCTL_BACKEND_TOKEN) to enable cost data.");
+    }
+    const { customerId } = currentAuth();
+    try {
+        return await run(cost, customerId);
+    }
+    catch (err) {
+        if (err instanceof FinCtlApiError)
+            return errorResult(err.message);
+        return errorResult(`Unexpected error fetching FinCtl data: ${err.message}`);
+    }
+}
+/** Severity ordering for filtering/sorting anomalies (higher = more severe). */
+const SEVERITY_RANK = { LOW: 1, MEDIUM: 2, HIGH: 3, CRITICAL: 4 };
+/** Map a day window to the backend's anomaly timeRange buckets. */
+function timeRangeForDays(days) {
+    if (days <= 1)
+        return "1d";
+    if (days <= 7)
+        return "7d";
+    return "30d";
+}
+/** Action types that correspond to each recommendation category filter. */
+const RECOMMENDATION_CATEGORY = {
+    rightsizing: (a) => /resize|scale|modify|rightsiz/i.test(a),
+    idle: (a) => /terminate|stop|delete|idle/i.test(a),
+};
+export function buildTools(deps) {
+    const tools = [
+        {
+            name: "get_cost_summary",
+            title: "Cost summary",
+            description: "Total AWS spend for the current month, with the top spending accounts and top services by cost.",
+            inputSchema: {
+                period: PERIOD.optional().default("mtd"),
+            },
+            handler: async ({ period }) => withCost(deps.cost, async (cost, customerId) => {
+                const [spend, top] = await Promise.all([
+                    cost.spendSummary(customerId),
+                    cost.topCost(customerId, 3),
+                ]);
+                return json({
+                    period,
+                    period_note: "Spend is month-to-date (the backend spend summary covers the current billing month).",
+                    period_start: spend.periodStart,
+                    period_end: spend.periodEnd,
+                    total_spend: round2(spend.total),
+                    currency: spend.currency,
+                    as_of: spend.asOf,
+                    top_accounts: [...spend.accounts]
+                        .sort((a, b) => b.mtdSpend - a.mtdSpend)
+                        .slice(0, 3)
+                        .map((a) => ({ account_id: a.accountId, name: a.accountName, spend: round2(a.mtdSpend) })),
+                    top_services: aggregateByService(top.resources).slice(0, 3),
+                });
+            }),
+        },
+        {
+            name: "list_top_services",
+            title: "Top services by cost",
+            description: "Ranked AWS services by cost, each with its share of the listed total.",
+            inputSchema: {
+                limit: z.number().int().positive().max(50).optional().default(10)
+                    .describe("Maximum number of services to return."),
+                period: PERIOD.optional().default("mtd"),
+            },
+            handler: async ({ limit, period }) => withCost(deps.cost, async (cost, customerId) => {
+                // Fetch the widest resource set the backend allows, then group by service.
+                const { resources } = await cost.topCost(customerId, 50);
+                const services = aggregateByService(resources);
+                const total = services.reduce((sum, s) => sum + s.cost, 0);
+                return json({
+                    period,
+                    listed_total_cost: round2(total),
+                    services: services.slice(0, limit).map((s) => ({
+                        ...s,
+                        pct_of_listed: total > 0 ? round2((s.cost / total) * 100) : 0,
+                    })),
+                });
+            }),
+        },
+        {
+            name: "get_recommendations",
+            title: "Savings recommendations",
+            description: "Active cost-savings recommendations with projected monthly savings, confidence, and the recommended action.",
+            inputSchema: {
+                type: z.enum(["all", "rightsizing", "idle", "ri", "savings_plans"]).optional().default("all")
+                    .describe("Filter by category. 'ri'/'savings_plans' coverage lives in get_savings_plans_coverage."),
+                limit: z.number().int().positive().max(50).optional().default(20)
+                    .describe("Maximum number of recommendations to return."),
+            },
+            handler: async ({ type, limit }) => withCost(deps.cost, async (cost, customerId) => {
+                if (type === "ri" || type === "savings_plans") {
+                    return json({
+                        type,
+                        recommendations: [],
+                        note: "Reserved Instance / Savings Plans guidance is reported by get_savings_plans_coverage.",
+                    });
+                }
+                // Fetch a margin above `limit` so category filtering still fills the page.
+                const { recommendations } = await cost.recommendations(customerId, {
+                    limit: Math.min(limit * 3, 100),
+                });
+                const match = RECOMMENDATION_CATEGORY[type];
+                const filtered = (match ? recommendations.filter((r) => match(r.actionType)) : recommendations)
+                    .slice(0, limit);
+                return json({
+                    type,
+                    count: filtered.length,
+                    total_projected_monthly_savings: round2(filtered.reduce((sum, r) => sum + (r.estimatedMonthlySavings ?? 0), 0)),
+                    recommendations: filtered.map((r) => ({
+                        resource_id: r.resourceId,
+                        service: r.resourceType,
+                        account_id: r.accountId ?? null,
+                        projected_monthly_savings: round2(r.estimatedMonthlySavings ?? 0),
+                        confidence: r.confidence,
+                        action: r.actionType,
+                        recommendation: configSummary(r.recommendedConfiguration),
+                        reasoning: r.reasoning,
+                    })),
+                });
+            }),
+        },
+        {
+            name: "get_savings_plans_coverage",
+            title: "Savings Plans / RI coverage",
+            description: "Reserved Instance and Savings Plans utilization, including unused (wasted) commitment.",
+            inputSchema: {
+                period: PERIOD.optional().default("30d"),
+            },
+            handler: async ({ period }) => withCost(deps.cost, async (cost, customerId) => {
+                const [sp, ri] = await Promise.all([
+                    cost.spUtilization(customerId),
+                    cost.riUtilization(customerId),
+                ]);
+                return json({
+                    period,
+                    period_note: "Utilization is reported over the backend's default window (~last month).",
+                    savings_plans: {
+                        utilization_pct: round2(sp.orgWideUtilizationPct),
+                        commitment: round2(sp.totalSPCommitment),
+                        unused_commitment: round2(sp.unusedCommitment),
+                    },
+                    reserved_instances: {
+                        utilization_pct: round2(ri.orgWideUtilizationPct),
+                        total_ri_cost: round2(ri.totalRICost),
+                        unused_ri_cost: round2(ri.unusedRICost),
+                    },
+                    total_wasted_commitment: round2(sp.unusedCommitment + ri.unusedRICost),
+                });
+            }),
+        },
+        {
+            name: "get_rightsizing",
+            title: "Rightsizing opportunities",
+            description: "EC2/RDS rightsizing opportunities: over-provisioned resources with the recommended configuration and savings.",
+            inputSchema: {
+                account_id: z.string().optional().describe("Limit to a single linked AWS account ID."),
+                service: z.enum(["ec2", "rds", "all"]).optional().default("all")
+                    .describe("Limit to a specific compute service."),
+                limit: z.number().int().positive().max(100).optional().default(20)
+                    .describe("Maximum number of opportunities to return."),
+            },
+            handler: async ({ account_id, service, limit }) => withCost(deps.cost, async (cost, customerId) => {
+                // EC2/RDS map to backend resourceType; "all" fetches both.
+                const resourceType = service === "ec2" ? "EC2" : service === "rds" ? "RDS" : undefined;
+                const { recommendations } = await cost.recommendations(customerId, {
+                    limit: Math.min(limit * 3, 100),
+                    resourceType,
+                    accountId: account_id,
+                });
+                // Filter to the requested service client-side too — don't rely on the
+                // backend honoring resourceType.
+                const wanted = resourceType ? [resourceType] : ["EC2", "RDS"];
+                const opportunities = recommendations
+                    .filter((r) => RECOMMENDATION_CATEGORY.rightsizing(r.actionType))
+                    .filter((r) => wanted.includes(r.resourceType))
+                    .slice(0, limit)
+                    .map((r) => ({
+                    resource_id: r.resourceId,
+                    service: r.resourceType,
+                    account_id: r.accountId ?? null,
+                    // Backend rightsizing configs carry a summary/value, not an
+                    // instanceType field — prefer the type when present, else the
+                    // human-readable summary (matches get_resource_details).
+                    current: instanceType(r.currentConfiguration) ?? configSummary(r.currentConfiguration) ?? null,
+                    recommended: instanceType(r.recommendedConfiguration) ?? configSummary(r.recommendedConfiguration) ?? null,
+                    projected_monthly_savings: round2(r.estimatedMonthlySavings ?? 0),
+                    confidence: r.confidence,
+                }));
+                return json({
+                    account_id: account_id ?? null,
+                    service,
+                    count: opportunities.length,
+                    total_projected_monthly_savings: round2(opportunities.reduce((sum, o) => sum + o.projected_monthly_savings, 0)),
+                    opportunities,
+                });
+            }),
+        },
+        {
+            name: "get_resource_details",
+            title: "Resource details",
+            description: "Details for one AWS resource by ID: type, account, and any active savings recommendations.",
+            inputSchema: {
+                resource_id: z.string().min(1).describe("The AWS resource ID (e.g. i-0abc123, an RDS identifier)."),
+                account_id: z.string().optional().describe("Limit to a single linked AWS account ID."),
+            },
+            handler: async ({ resource_id, account_id }) => withCost(deps.cost, async (cost, customerId) => {
+                // No single-resource endpoint; pull recommendations and match by ID.
+                const { recommendations } = await cost.recommendations(customerId, {
+                    limit: 5000,
+                    accountId: account_id,
+                });
+                const matches = recommendations.filter((r) => r.resourceId === resource_id);
+                if (matches.length === 0) {
+                    return errorResult(`No data found for resource "${resource_id}"${account_id ? ` in account ${account_id}` : ""}.`);
+                }
+                return json({
+                    resource_id,
+                    service: matches[0].resourceType,
+                    account_id: matches[0].accountId ?? account_id ?? null,
+                    active_recommendations: matches.map((r) => ({
+                        action: r.actionType,
+                        projected_monthly_savings: round2(r.estimatedMonthlySavings ?? 0),
+                        confidence: r.confidence,
+                        current: instanceType(r.currentConfiguration) ?? configSummary(r.currentConfiguration),
+                        recommended: instanceType(r.recommendedConfiguration) ?? configSummary(r.recommendedConfiguration),
+                        reasoning: r.reasoning,
+                    })),
+                });
+            }),
+        },
+        {
+            name: "get_forecast",
+            title: "Cost forecast",
+            description: "Projected AWS spend with confidence, growth vs the current period, and budget variance.",
+            inputSchema: {
+                horizon: z.enum(["30d", "60d", "90d"]).optional().default("30d")
+                    .describe("Requested horizon (informational; the backend forecast covers its own period)."),
+                account_id: z.string().optional().describe("Account hint (the forecast is currently org-wide)."),
+            },
+            handler: async ({ horizon }) => withCost(deps.cost, async (cost, customerId) => {
+                const { forecast, isEmpty, message } = await cost.forecast(customerId);
+                if (isEmpty || !forecast) {
+                    return json({
+                        horizon,
+                        insufficient_history: true,
+                        message: message ??
+                            "Not enough cost history yet to forecast (need ~14 days). Check back once more scans have run.",
+                    });
+                }
+                return json({
+                    horizon,
+                    current_period_cost: round2(forecast.totalCurrentCost),
+                    projected_spend: round2(forecast.totalForecastCost),
+                    projected_growth: {
+                        absolute: round2(forecast.projectedGrowth.absolute),
+                        percentage: round2(forecast.projectedGrowth.percentage),
+                    },
+                    confidence: round2(forecast.confidence),
+                    period: forecast.period,
+                    vs_budget: forecast.budgetStatus
+                        ? {
+                            budget_amount: forecast.budgetStatus.budgetAmount ?? null,
+                            projected_spend: round2(forecast.budgetStatus.projectedSpend),
+                            variance: round2(forecast.budgetStatus.variance),
+                            over_budget: forecast.budgetStatus.warningTriggered,
+                        }
+                        : null,
+                });
+            }),
+        },
+        {
+            name: "get_anomalies",
+            title: "Cost anomalies",
+            description: "Recent cost anomalies (service, account, deviation, date), sorted by severity.",
+            inputSchema: {
+                days: z.number().int().positive().max(365).optional().default(30).describe("Lookback window in days."),
+                min_severity: z.enum(["low", "medium", "high"]).optional().default("low").describe("Minimum severity to include."),
+            },
+            handler: async ({ days, min_severity }) => withCost(deps.cost, async (cost, customerId) => {
+                const { anomalies } = await cost.anomalies(customerId, {
+                    limit: 50,
+                    timeRange: timeRangeForDays(days),
+                });
+                const minRank = SEVERITY_RANK[min_severity.toUpperCase()] ?? 1;
+                const filtered = anomalies
+                    .filter((a) => (SEVERITY_RANK[a.severity] ?? 0) >= minRank)
+                    .sort((a, b) => (SEVERITY_RANK[b.severity] ?? 0) - (SEVERITY_RANK[a.severity] ?? 0));
+                return json({
+                    days,
+                    min_severity,
+                    count: filtered.length,
+                    anomalies: filtered.map((a) => ({
+                        service: a.service,
+                        account_id: a.accountId ?? null,
+                        severity: a.severity,
+                        type: a.anomalyType,
+                        detected_at: a.detectedAt,
+                        expected: round2(a.expectedValue),
+                        actual: round2(a.currentValue),
+                        delta: round2(a.currentValue - a.expectedValue),
+                        spike_pct: a.expectedValue > 0
+                            ? round2(((a.currentValue - a.expectedValue) / a.expectedValue) * 100)
+                            : null,
+                    })),
+                });
+            }),
+        },
+        {
+            name: "get_budget_status",
+            title: "Budget status",
+            description: "Budgets with current spend, % consumed, projected end-of-period spend, and on-track status.",
+            inputSchema: {
+                account_id: z.string().optional().describe("Limit to budgets scoped to a single AWS account ID."),
+            },
+            handler: async ({ account_id }) => withCost(deps.cost, async (cost, customerId) => {
+                const { budgets } = await cost.budgets(customerId);
+                const scoped = account_id
+                    ? budgets.filter((b) => b.scope?.value === account_id || b.filters?.accounts?.includes(account_id))
+                    : budgets;
+                return json({
+                    account_id: account_id ?? null,
+                    count: scoped.length,
+                    budgets: scoped.map((b) => ({
+                        name: b.name,
+                        limit: round2(b.amount),
+                        current_spend: round2(b.currentSpend),
+                        pct_consumed: b.amount > 0 ? round2((b.currentSpend / b.amount) * 100) : null,
+                        projected_spend: round2(b.forecastedSpend),
+                        status: b.status,
+                        on_track: b.status !== "EXCEEDED" && b.forecastedSpend <= b.amount,
+                    })),
+                });
+            }),
+        },
+        {
+            name: "list_accounts",
+            title: "Linked AWS accounts",
+            description: "List the AWS accounts linked to this customer (account ID and name).",
+            inputSchema: {},
+            handler: async () => withCost(deps.cost, async (cost, customerId) => {
+                const { accounts } = await cost.accounts(customerId);
+                return json({
+                    count: accounts.length,
+                    accounts: accounts.map((a) => ({
+                        account_id: a.accountId,
+                        name: a.accountName ?? a.accountId,
+                    })),
+                });
+            }),
+        },
+    ];
+    return tools;
+}
+/** Group top-cost resources by AWS service, summing cost, sorted desc. */
+function aggregateByService(resources) {
+    const byService = new Map();
+    for (const r of resources) {
+        const entry = byService.get(r.service) ?? { service: r.service, cost: 0, resource_count: 0 };
+        entry.cost += r.cost;
+        entry.resource_count += 1;
+        byService.set(r.service, entry);
+    }
+    return [...byService.values()]
+        .map((s) => ({ ...s, cost: round2(s.cost) }))
+        .sort((a, b) => b.cost - a.cost);
+}
+function configSummary(config) {
+    if (!config)
+        return undefined;
+    if ("summary" in config)
+        return config.summary;
+    if ("value" in config)
+        return config.value;
+    return undefined;
+}
+/** Extract the instance type from a recommendation config, if present. */
+function instanceType(config) {
+    if (config && "instanceType" in config)
+        return config.instanceType;
+    return undefined;
+}
+function round2(n) {
+    return Math.round(n * 100) / 100;
+}
+//# sourceMappingURL=catalog.js.map

package/dist/tools/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/tools/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAoB,MAAM,KAAK,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAwC,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAoClG;;;;GAIG;AACH,SAAS,IAAI,CAAC,OAAgC;IAC5C,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG;QACb,WAAW,EAAE,IAAI,CAAC,UAAU;QAC5B,kBAAkB,EAAE,IAAI,CAAC,UAAU;QACnC,GAAG,OAAO;KACX,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,2EAA2E;AAC3E,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,MAAM,GAAG,CAAC;KACb,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;KACjC,QAAQ,CAAC,8EAA8E,CAAC,CAAC;AAE5F;;;GAGG;AACH,KAAK,UAAU,QAAQ,CACrB,IAAuB,EACvB,GAAkE;IAElE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,WAAW,CAChB,uGAAuG,CACxG,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,cAAc;YAAE,OAAO,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnE,OAAO,WAAW,CAAC,0CAA2C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,aAAa,GAA2B,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAE1F,mEAAmE;AACnE,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2EAA2E;AAC3E,MAAM,uBAAuB,GAAgD;IAC3E,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC;CACnD,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,IAAc;IACvC,MAAM,KAAK,GAAqB;QAC9B;YACE,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,cAAc;YACrB,WAAW,EAAE,iGAAiG;YAC9G,WAAW,EAAE;gBACX,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;aACzC;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAC5B,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;gBAC7C,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBACrC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;oBAC7B,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;iBAC5B,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;oBACV,MAAM;oBACN,WAAW,EACT,sFAAsF;oBACxF,YAAY,EAAE,KAAK,CAAC,WAAW;oBAC/B,UAAU,EAAE,KAAK,CAAC,SAAS;oBAC3B,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;oBAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,IAAI;oBACjB,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;yBAC9B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;yBACvC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;yBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBAC5F,YAAY,EAAE,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;iBAC5D,CAAC,CAAC;YACL,CAAC,CAAC;SACL;QACD;YACE,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,uEAAuE;YACpF,WAAW,EAAE;gBACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;qBAC9D,QAAQ,CAAC,uCAAuC,CAAC;gBACpD,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;aACzC;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CACnC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;gBAC7C,2EAA2E;gBAC3E,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACzD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC3D,OAAO,IAAI,CAAC;oBACV,MAAM;oBACN,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC;oBAChC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC7C,GAAG,CAAC;wBACJ,aAAa,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;qBAC9D,CAAC,CAAC;iBACJ,CAAC,CAAC;YACL,CAAC,CAAC;SACL;QACD;YACE,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,yBAAyB;YAChC,WAAW,EAAE,6GAA6G;YAC1H,WAAW,EAAE;gBACX,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;qBAC1F,QAAQ,CAAC,wFAAwF,CAAC;gBACrG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;qBAC9D,QAAQ,CAAC,8CAA8C,CAAC;aAC5D;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CACjC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;gBAC7C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;oBAC9C,OAAO,IAAI,CAAC;wBACV,IAAI;wBACJ,eAAe,EAAE,EAAE;wBACnB,IAAI,EAAE,uFAAuF;qBAC9F,CAAC,CAAC;gBACL,CAAC;gBACD,2EAA2E;gBAC3E,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE;oBACjE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC;iBAChC,CAAC,CAAC;gBACH,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBAC5C,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;qBAC5F,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBACnB,OAAO,IAAI,CAAC;oBACV,IAAI;oBACJ,KAAK,EAAE,QAAQ,CAAC,MAAM;oBACtB,+BAA+B,EAAE,MAAM,CACrC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,uBAAuB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CACvE;oBACD,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACpC,WAAW,EAAE,CAAC,CAAC,UAAU;wBACzB,OAAO,EAAE,CAAC,CAAC,YAAY;wBACvB,UAAU,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;wBAC/B,yBAAyB,EAAE,MAAM,CAAC,CAAC,CAAC,uBAAuB,IAAI,CAAC,CAAC;wBACjE,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,MAAM,EAAE,CAAC,CAAC,UAAU;wBACpB,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,wBAAwB,CAAC;wBACzD,SAAS,EAAE,CAAC,CAAC,SAAS;qBACvB,CAAC,CAAC;iBACJ,CAAC,CAAC;YACL,CAAC,CAAC;SACL;QACD;YACE,IAAI,EAAE,4BAA4B;YAClC,KAAK,EAAE,6BAA6B;YACpC,WAAW,EAAE,wFAAwF;YACrG,WAAW,EAAE;gBACX,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;aACzC;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAC5B,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;gBAC7C,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBACjC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;oBAC9B,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;iBAC/B,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;oBACV,MAAM;oBACN,WAAW,EAAE,0EAA0E;oBACvF,aAAa,EAAE;wBACb,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC;wBACjD,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC;wBACxC,iBAAiB,EAAE,MAAM,CAAC,EAAE,CAAC,gBAAgB,CAAC;qBAC/C;oBACD,kBAAkB,EAAE;wBAClB,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC;wBACjD,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC;wBACrC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC;qBACxC;oBACD,uBAAuB,EAAE,MAAM,CAAC,EAAE,CAAC,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC;iBACvE,CAAC,CAAC;YACL,CAAC,CAAC;SACL;QAED;YACE,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,2BAA2B;YAClC,WAAW,EAAE,+GAA+G;YAC5H,WAAW,EAAE;gBACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;gBACtF,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;qBAC7D,QAAQ,CAAC,sCAAsC,CAAC;gBACnD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;qBAC/D,QAAQ,CAAC,4CAA4C,CAAC;aAC1D;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAChD,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;gBAC7C,2DAA2D;gBAC3D,MAAM,YAAY,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvF,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE;oBACjE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC;oBAC/B,YAAY;oBACZ,SAAS,EAAE,UAAU;iBACtB,CAAC,CAAC;gBACH,sEAAsE;gBACtE,iCAAiC;gBACjC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC9D,MAAM,aAAa,GAAG,eAAe;qBAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;qBAChE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;qBAC9C,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;qBACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACX,WAAW,EAAE,CAAC,CAAC,UAAU;oBACzB,OAAO,EAAE,CAAC,CAAC,YAAY;oBACvB,UAAU,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;oBAC/B,4DAA4D;oBAC5D,8DAA8D;oBAC9D,yDAAyD;oBACzD,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,IAAI;oBAC9F,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,wBAAwB,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,wBAAwB,CAAC,IAAI,IAAI;oBAC1G,yBAAyB,EAAE,MAAM,CAAC,CAAC,CAAC,uBAAuB,IAAI,CAAC,CAAC;oBACjE,UAAU,EAAE,CAAC,CAAC,UAAU;iBACzB,CAAC,CAAC,CAAC;gBACN,OAAO,IAAI,CAAC;oBACV,UAAU,EAAE,UAAU,IAAI,IAAI;oBAC9B,OAAO;oBACP,KAAK,EAAE,aAAa,CAAC,MAAM;oBAC3B,+BAA+B,EAAE,MAAM,CACrC,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,yBAAyB,EAAE,CAAC,CAAC,CACvE;oBACD,aAAa;iBACd,CAAC,CAAC;YACL,CAAC,CAAC;SACL;QACD;YACE,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,4FAA4F;YACzG,WAAW,EAAE;gBACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC;gBACnG,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;aACvF;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;gBAC7C,qEAAqE;gBACrE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE;oBACjE,KAAK,EAAE,IAAI;oBACX,SAAS,EAAE,UAAU;iBACtB,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,WAAW,CAAC,CAAC;gBAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,WAAW,CAChB,+BAA+B,WAAW,IAAI,UAAU,CAAC,CAAC,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAC/F,CAAC;gBACJ,CAAC;gBACD,OAAO,IAAI,CAAC;oBACV,WAAW;oBACX,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY;oBAChC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,UAAU,IAAI,IAAI;oBACtD,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC1C,MAAM,EAAE,CAAC,CAAC,UAAU;wBACpB,yBAAyB,EAAE,MAAM,CAAC,CAAC,CAAC,uBAAuB,IAAI,CAAC,CAAC;wBACjE,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC;wBACtF,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,wBAAwB,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,wBAAwB,CAAC;wBAClG,SAAS,EAAE,CAAC,CAAC,SAAS;qBACvB,CAAC,CAAC;iBACJ,CAAC,CAAC;YACL,CAAC,CAAC;SACL;QAED;YACE,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,yFAAyF;YACtG,WAAW,EAAE;gBACX,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;qBAC7D,QAAQ,CAAC,gFAAgF,CAAC;gBAC7F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;aACjG;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAC7B,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;gBAC7C,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACvE,IAAI,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACzB,OAAO,IAAI,CAAC;wBACV,OAAO;wBACP,oBAAoB,EAAE,IAAI;wBAC1B,OAAO,EACL,OAAO;4BACP,+FAA+F;qBAClG,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,IAAI,CAAC;oBACV,OAAO;oBACP,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;oBACtD,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC;oBACnD,gBAAgB,EAAE;wBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC;wBACnD,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC;qBACxD;oBACD,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;oBACvC,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,SAAS,EAAE,QAAQ,CAAC,YAAY;wBAC9B,CAAC,CAAC;4BACE,aAAa,EAAE,QAAQ,CAAC,YAAY,CAAC,YAAY,IAAI,IAAI;4BACzD,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAAC;4BAC7D,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC;4BAChD,WAAW,EAAE,QAAQ,CAAC,YAAY,CAAC,gBAAgB;yBACpD;wBACH,CAAC,CAAC,IAAI;iBACT,CAAC,CAAC;YACL,CAAC,CAAC;SACL;QACD;YACE,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,gFAAgF;YAC7F,WAAW,EAAE;gBACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;gBACtG,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;aACnH;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CACxC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;gBAC7C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE;oBACrD,KAAK,EAAE,EAAE;oBACT,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC/D,MAAM,QAAQ,GAAG,SAAS;qBACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC;qBAC1D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACvF,OAAO,IAAI,CAAC;oBACV,IAAI;oBACJ,YAAY;oBACZ,KAAK,EAAE,QAAQ,CAAC,MAAM;oBACtB,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC9B,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,UAAU,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;wBAC/B,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,IAAI,EAAE,CAAC,CAAC,WAAW;wBACnB,WAAW,EAAE,CAAC,CAAC,UAAU;wBACzB,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;wBACjC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;wBAC9B,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,aAAa,CAAC;wBAC/C,SAAS,EACP,CAAC,CAAC,aAAa,GAAG,CAAC;4BACjB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC;4BACtE,CAAC,CAAC,IAAI;qBACX,CAAC,CAAC;iBACJ,CAAC,CAAC;YACL,CAAC,CAAC;SACL;QACD;YACE,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,6FAA6F;YAC1G,WAAW,EAAE;gBACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;aAClG;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAChC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;gBAC7C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAG,UAAU;oBACvB,CAAC,CAAC,OAAO,CAAC,MAAM,CACZ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAClF;oBACH,CAAC,CAAC,OAAO,CAAC;gBACZ,OAAO,IAAI,CAAC;oBACV,UAAU,EAAE,UAAU,IAAI,IAAI;oBAC9B,KAAK,EAAE,MAAM,CAAC,MAAM;oBACpB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;wBACvB,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;wBACrC,YAAY,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;wBAC7E,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC;wBAC1C,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,MAAM;qBACnE,CAAC,CAAC;iBACJ,CAAC,CAAC;YACL,CAAC,CAAC;SACL;QACD;YACE,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,qBAAqB;YAC5B,WAAW,EAAE,sEAAsE;YACnF,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;gBAC7C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACrD,OAAO,IAAI,CAAC;oBACV,KAAK,EAAE,QAAQ,CAAC,MAAM;oBACtB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC7B,UAAU,EAAE,CAAC,CAAC,SAAS;wBACvB,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS;qBACnC,CAAC,CAAC;iBACJ,CAAC,CAAC;YACL,CAAC,CAAC;SACL;KACF,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC;AAUD,0EAA0E;AAC1E,SAAS,kBAAkB,CACzB,SAA8C;IAE9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QAC7F,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC;QACrB,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;QAC1B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SAC5C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,aAAa,CAAC,MAAkD;IACvE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,IAAI,SAAS,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IAC/C,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IAC3C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0EAA0E;AAC1E,SAAS,YAAY,CAAC,MAAkD;IACtE,IAAI,MAAM,IAAI,cAAc,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,YAAY,CAAC;IACnE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AACnC,CAAC"}

package/dist/transports/http.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Run the MCP server over HTTP using the Streamable HTTP transport (the current
+ * MCP spec transport — it carries server-to-client messages as Server-Sent
+ * Events, superseding the standalone SSE transport). This is for hosted/remote
+ * connections and web-based MCP clients.
+ *
+ * Auth: each request carries the API key in `Authorization: Bearer <key>`. The
+ * key is validated and rate-limited per request, and the resolved customer scope
+ * wraps the entire dispatch via runWithAuth so tool handlers see only that
+ * customer. Invalid/missing keys are rejected before reaching the MCP layer.
+ *
+ * Stateless mode: a fresh server + transport is created per request. This keeps
+ * the scaffold simple and horizontally scalable; session-stickiness and the
+ * GET/DELETE session endpoints can be added with HTTP/SSE deployment in
+ * FIN-1474.
+ */
+export declare function runHttp(port: number): Promise<void>;

package/dist/transports/http.js

@@ -0,0 +1,99 @@
+import express, {} from "express";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { createServer } from "../server.js";
+import { createAuthenticator, AuthError } from "../auth/authenticator.js";
+import { runWithAuth } from "../auth/context.js";
+/**
+ * Run the MCP server over HTTP using the Streamable HTTP transport (the current
+ * MCP spec transport — it carries server-to-client messages as Server-Sent
+ * Events, superseding the standalone SSE transport). This is for hosted/remote
+ * connections and web-based MCP clients.
+ *
+ * Auth: each request carries the API key in `Authorization: Bearer <key>`. The
+ * key is validated and rate-limited per request, and the resolved customer scope
+ * wraps the entire dispatch via runWithAuth so tool handlers see only that
+ * customer. Invalid/missing keys are rejected before reaching the MCP layer.
+ *
+ * Stateless mode: a fresh server + transport is created per request. This keeps
+ * the scaffold simple and horizontally scalable; session-stickiness and the
+ * GET/DELETE session endpoints can be added with HTTP/SSE deployment in
+ * FIN-1474.
+ */
+export async function runHttp(port) {
+    const { authenticator } = createAuthenticator();
+    const app = express();
+    app.use(express.json());
+    app.get("/health", (_req, res) => {
+        res.json({ status: "ok", server: "finctl-mcp" });
+    });
+    app.post("/mcp", async (req, res) => {
+        // Authenticate + rate-limit before touching the MCP layer.
+        let auth;
+        try {
+            auth = await authenticator.authenticate(bearerToken(req));
+        }
+        catch (err) {
+            if (err instanceof AuthError) {
+                const httpStatus = err.code === "rate_limited" ? 429 : 401;
+                // JSON-RPC error codes: -32001 unauthorized, -32002 rate limited.
+                const rpcCode = err.code === "rate_limited" ? -32002 : -32001;
+                res.status(httpStatus).json({
+                    jsonrpc: "2.0",
+                    error: { code: rpcCode, message: err.message },
+                    id: null,
+                });
+                return;
+            }
+            throw err;
+        }
+        const server = createServer();
+        const transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: undefined, // stateless
+        });
+        res.on("close", () => {
+            void transport.close();
+            void server.close();
+        });
+        try {
+            await runWithAuth(auth, async () => {
+                await server.connect(transport);
+                await transport.handleRequest(req, res, req.body);
+            });
+        }
+        catch (err) {
+            console.error("[finctl-mcp] request error:", err);
+            if (!res.headersSent) {
+                res.status(500).json({
+                    jsonrpc: "2.0",
+                    error: { code: -32603, message: "Internal server error" },
+                    id: null,
+                });
+            }
+        }
+    });
+    // Method-not-allowed for the session endpoints in stateless mode.
+    const notAllowed = (_req, res) => {
+        res.status(405).json({
+            jsonrpc: "2.0",
+            error: { code: -32000, message: "Method not allowed (stateless mode)" },
+            id: null,
+        });
+    };
+    app.get("/mcp", notAllowed);
+    app.delete("/mcp", notAllowed);
+    await new Promise((resolve) => {
+        app.listen(port, () => {
+            console.error(`[finctl-mcp] HTTP transport ready on :${port} (POST /mcp)`);
+            resolve();
+        });
+    });
+}
+/** Extract the bearer token from the Authorization header, if present. */
+function bearerToken(req) {
+    const header = req.get("authorization");
+    if (!header)
+        return undefined;
+    const match = /^Bearer\s+(.+)$/i.exec(header.trim());
+    return match?.[1];
+}
+//# sourceMappingURL=http.js.map

package/dist/transports/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transports/http.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAA+B,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAY;IACxC,MAAM,EAAE,aAAa,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAExB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAClD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACrD,2DAA2D;QAC3D,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;gBAC7B,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC3D,kEAAkE;gBAClE,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAC9D,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;oBAC1B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;oBAC9C,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,kBAAkB,EAAE,SAAS,EAAE,YAAY;SAC5C,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;gBACjC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,uBAAuB,EAAE;oBACzD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,MAAM,UAAU,GAAG,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,qCAAqC,EAAE;YACvE,EAAE,EAAE,IAAI;SACT,CAAC,CAAC;IACL,CAAC,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5B,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE/B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACpB,OAAO,CAAC,KAAK,CAAC,yCAAyC,IAAI,cAAc,CAAC,CAAC;YAC3E,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAC1E,SAAS,WAAW,CAAC,GAAY;IAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/transports/stdio.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Run the MCP server over stdio. This is the transport local IDE integrations
+ * (Cursor, VS Code, Claude Code, Kiro, ...) use: the client spawns the process
+ * and speaks JSON-RPC over stdin/stdout.
+ *
+ * Auth: the API key is passed via the FINCTL_API_KEY environment variable. A
+ * stdio process serves exactly one customer, so we authenticate once at startup
+ * and install the resolved scope as the process-wide auth context. A missing or
+ * invalid key fails fast — we never start an unauthenticated server.
+ *
+ * Nothing may be written to stdout except protocol traffic — all logging goes
+ * to stderr.
+ */
+export declare function runStdio(): Promise<void>;

package/dist/transports/stdio.js

@@ -0,0 +1,37 @@
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { createServer } from "../server.js";
+import { createAuthenticator, AuthError } from "../auth/authenticator.js";
+import { setProcessAuth } from "../auth/context.js";
+/**
+ * Run the MCP server over stdio. This is the transport local IDE integrations
+ * (Cursor, VS Code, Claude Code, Kiro, ...) use: the client spawns the process
+ * and speaks JSON-RPC over stdin/stdout.
+ *
+ * Auth: the API key is passed via the FINCTL_API_KEY environment variable. A
+ * stdio process serves exactly one customer, so we authenticate once at startup
+ * and install the resolved scope as the process-wide auth context. A missing or
+ * invalid key fails fast — we never start an unauthenticated server.
+ *
+ * Nothing may be written to stdout except protocol traffic — all logging goes
+ * to stderr.
+ */
+export async function runStdio() {
+    const { authenticator } = createAuthenticator();
+    try {
+        const auth = await authenticator.authenticate(process.env.FINCTL_API_KEY);
+        setProcessAuth(auth);
+        console.error(`[finctl-mcp] authenticated customer=${auth.customerId} key=${auth.keyId}`);
+    }
+    catch (err) {
+        if (err instanceof AuthError) {
+            console.error(`[finctl-mcp] authentication failed: ${err.message}. Set FINCTL_API_KEY.`);
+            process.exit(1);
+        }
+        throw err;
+    }
+    const server = createServer();
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error("[finctl-mcp] stdio transport ready");
+}
+//# sourceMappingURL=stdio.js.map

package/dist/transports/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../src/transports/stdio.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,EAAE,aAAa,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC1E,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,CAAC,KAAK,CAAC,uCAAuC,IAAI,CAAC,UAAU,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,uCAAuC,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC;YACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;AACtD,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1 @@
+export declare function getVersion(): string;