@frontmcp/sdk 0.4.0 → 0.5.0

package/src/tool/flows/call-tool.flow.js

@@ -2,41 +2,73 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 // tools/flows/call-tool.flow.ts
+const crypto_1 = require("crypto");
 const common_1 = require("../../common");
 const zod_1 = require("zod");
 const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
 const errors_1 = require("../../errors");
+const ui_1 = require("../ui");
 const inputSchema = zod_1.z.object({
     request: types_js_1.CallToolRequestSchema,
+    // z.any() used because ctx is the MCP SDK's ToolCallExtra type which varies by SDK version
     ctx: zod_1.z.any(),
 });
 const outputSchema = types_js_1.CallToolResultSchema;
 const stateSchema = zod_1.z.object({
-    input: zod_1.z
-        .object({
+    input: zod_1.z.looseObject({
         name: zod_1.z.string().min(1).max(64),
-        arguments: zod_1.z.object({}).passthrough().optional(),
-    })
-        .passthrough(),
+        arguments: zod_1.z.looseObject({}).optional(),
+    }),
     authInfo: zod_1.z.any().optional(),
     tool: zod_1.z.instanceof(common_1.ToolEntry),
     toolContext: zod_1.z.instanceof(common_1.ToolContext),
     // Store the raw executed output for plugins to see
     rawOutput: zod_1.z.any().optional(),
     output: outputSchema,
+    // Tool owner ID for hook filtering (set during parseInput)
+    _toolOwnerId: zod_1.z.string().optional(),
 });
 const plan = {
-    pre: ['parseInput', 'findTool', 'createToolCallContext', 'acquireQuota', 'acquireSemaphore'],
+    pre: [
+        'parseInput',
+        'findTool',
+        'checkToolAuthorization',
+        'createToolCallContext',
+        'acquireQuota',
+        'acquireSemaphore',
+    ],
     execute: ['validateInput', 'execute', 'validateOutput'],
     finalize: ['releaseSemaphore', 'releaseQuota', 'finalize'],
 };
 const name = 'tools:call-tool';
 const { Stage } = (0, common_1.FlowHooksOf)(name);
+/**
+ * Safely stringify a value, handling circular references and other edge cases.
+ * This prevents tool calls from failing due to serialization errors.
+ */
+const safeStringify = (value, space) => {
+    const seen = new WeakSet();
+    try {
+        return JSON.stringify(value, (_key, val) => {
+            if (typeof val === 'object' && val !== null) {
+                if (seen.has(val))
+                    return '[Circular]';
+                seen.add(val);
+            }
+            return val;
+        }, space);
+    }
+    catch {
+        return JSON.stringify({ error: 'Output could not be serialized' });
+    }
+};
 let CallToolFlow = class CallToolFlow extends common_1.FlowBase {
     logger = this.scopeLogger.child('CallToolFlow');
     async parseInput() {
         this.logger.verbose('parseInput:start');
         let method;
+        // NOTE: `any` is intentional - Zod parsing validates these values
+        // Using unknown would require redundant type guards after schema validation
         let params;
         let ctx;
         try {
@@ -46,7 +78,7 @@ let CallToolFlow = class CallToolFlow extends common_1.FlowBase {
             ctx = inputData.ctx;
         }
         catch (e) {
-            throw new errors_1.InvalidInputError('Invalid Input', e instanceof zod_1.z.ZodError ? e.errors : undefined);
+            throw new errors_1.InvalidInputError('Invalid Input', e instanceof zod_1.z.ZodError ? e.issues : undefined);
         }
         if (method !== 'tools/call') {
             this.logger.warn(`parseInput: invalid method "${method}"`);
@@ -58,11 +90,9 @@ let CallToolFlow = class CallToolFlow extends common_1.FlowBase {
         const tool = activeTools.find((entry) => {
             return entry.fullName === name || entry.name === name;
         });
-        // Store tool owner ID in the flow input for hook filtering
-        if (tool?.owner) {
-            this.rawInput._toolOwnerId = tool.owner.id;
-        }
-        this.state.set({ input: params, authInfo: ctx.authInfo });
+        // Store tool owner ID in state for hook filtering
+        const toolOwnerId = tool?.owner?.id;
+        this.state.set({ input: params, authInfo: ctx.authInfo, _toolOwnerId: toolOwnerId });
         this.logger.verbose('parseInput:done');
     }
     async findTool() {
@@ -83,6 +113,78 @@ let CallToolFlow = class CallToolFlow extends common_1.FlowBase {
         this.logger.info(`findTool: tool "${name}" found`);
         this.logger.verbose('findTool:done');
     }
+    /**
+     * Check if the tool's parent app is authorized.
+     * For progressive authorization, tools from unauthorized apps
+     * return an AuthorizationRequiredError with an auth_url.
+     */
+    async checkToolAuthorization() {
+        this.logger.verbose('checkToolAuthorization:start');
+        const { tool, authInfo } = this.state;
+        // Get authorization from authInfo.extra if available
+        const authorization = authInfo?.extra?.['authorization'];
+        // No auth context = public mode, skip authorization check
+        if (!authorization) {
+            this.logger.verbose('checkToolAuthorization:skip (no auth context)');
+            return;
+        }
+        // Get app ID from tool owner (uses existing lineage system)
+        const appId = tool?.owner?.id;
+        if (!appId) {
+            // Tool has no owner = global tool, skip app-level authorization check
+            this.logger.verbose('checkToolAuthorization:skip (no owner)');
+            return;
+        }
+        // Check if app is authorized using existing session structure
+        const isAppAuthorized = authorization.authorizedAppIds?.includes(appId) || appId in (authorization.authorizedApps || {});
+        if (!isAppAuthorized) {
+            // Get incremental auth configuration from scope's auth options
+            const apps = this.scope.apps.getApps();
+            const app = apps.find((a) => a.metadata.id === appId);
+            const authOptions = this.scope.auth?.options;
+            // Determine skippedAppBehavior:
+            // 1. Only applies in orchestrated mode with incrementalAuth configured
+            // 2. Default to 'anonymous' if not configured (allow anonymous fallback)
+            let skippedBehavior = 'anonymous';
+            if (authOptions && (0, common_1.isOrchestratedMode)(authOptions)) {
+                // Orchestrated mode - check incrementalAuth config
+                const incrementalConfig = authOptions.incrementalAuth;
+                if (incrementalConfig) {
+                    // If incremental auth is disabled, always require auth
+                    if (incrementalConfig.enabled === false) {
+                        skippedBehavior = 'require-auth';
+                    }
+                    else {
+                        skippedBehavior = incrementalConfig.skippedAppBehavior || 'anonymous';
+                    }
+                }
+                // If incrementalAuth not configured, default is enabled with 'anonymous' behavior
+            }
+            // For public/transparent modes, default 'anonymous' behavior applies
+            if (skippedBehavior === 'anonymous' && app?.metadata?.auth?.mode === 'public') {
+                // App supports anonymous - continue with anonymous access
+                this.logger.verbose(`checkToolAuthorization: using anonymous for ${appId}`);
+                return;
+            }
+            // Require explicit authorization - build auth URL
+            const authUrl = this.buildProgressiveAuthUrl(appId, tool?.fullName || '');
+            this.logger.info(`checkToolAuthorization: authorization required for app "${appId}"`);
+            throw new errors_1.AuthorizationRequiredError({
+                appId,
+                toolId: tool?.fullName || tool?.name || 'unknown',
+                authUrl,
+                message: `Authorization required for ${appId}. Please authorize to use ${tool?.fullName || tool?.name}.`,
+            });
+        }
+        this.logger.verbose('checkToolAuthorization:done');
+    }
+    /**
+     * Build the URL for progressive/incremental authorization
+     */
+    buildProgressiveAuthUrl(appId, toolId) {
+        const baseUrl = this.scope.fullPath || '';
+        return `${baseUrl}/oauth/authorize?app=${encodeURIComponent(appId)}&tool=${encodeURIComponent(toolId)}`;
+    }
     async createToolCallContext() {
         this.logger.verbose('createToolCallContext:start');
         const { ctx } = this.input;
@@ -131,7 +233,7 @@ let CallToolFlow = class CallToolFlow extends common_1.FlowBase {
         }
         catch (err) {
             if (err instanceof zod_1.z.ZodError) {
-                throw new errors_1.InvalidInputError('Invalid tool input', err.errors);
+                throw new errors_1.InvalidInputError('Invalid tool input', err.issues);
             }
             this.logger.error('validateInput: failed to parse input', err);
             throw new errors_1.InvalidInputError('Unknown error occurred when trying to parse input');
@@ -178,7 +280,7 @@ let CallToolFlow = class CallToolFlow extends common_1.FlowBase {
     }
     async finalize() {
         this.logger.verbose('finalize:start');
-        const { tool, rawOutput } = this.state;
+        const { tool, rawOutput, input } = this.state;
         if (!tool) {
             this.logger.error('finalize: tool not found in state');
             throw new errors_1.ToolExecutionError('unknown', new Error('Tool not found in state'));
@@ -198,8 +300,188 @@ let CallToolFlow = class CallToolFlow extends common_1.FlowBase {
             // Use InvalidOutputError, which hides internal details in production
             throw new errors_1.InvalidOutputError();
         }
+        const result = parseResult.data;
+        // If tool has UI config, render and add to _meta
+        if ((0, ui_1.hasUIConfig)(tool.metadata)) {
+            try {
+                // Cast scope to Scope to access toolUI and notifications
+                const scope = this.scope;
+                // Get session info for platform detection from authInfo (already in state from parseInput)
+                const { authInfo } = this.state;
+                const sessionId = authInfo?.sessionId;
+                const requestId = (0, crypto_1.randomUUID)();
+                // Get platform type: first check sessionIdPayload (detected from user-agent),
+                // then fall back to notification service (detected from MCP clientInfo),
+                // finally default to 'openai'
+                const platformType = authInfo?.sessionIdPayload?.platformType ??
+                    (sessionId ? scope.notifications.getPlatformType(sessionId) : undefined) ??
+                    'openai';
+                // Get the serving mode (default to 'inline' for backward compatibility)
+                const servingMode = tool.metadata.ui.servingMode ?? 'inline';
+                if (servingMode === 'static') {
+                    // For static mode: return ONLY structured data
+                    // The static widget was already registered at server startup and advertised in tools/list
+                    // Widget reads tool output from platform context (e.g., window.openai.toolOutput)
+                    // NO UI _meta fields needed - the client uses the outputTemplate URI from tools/list
+                    // Return structured data as JSON text content
+                    result.content = [
+                        {
+                            type: 'text',
+                            text: safeStringify(rawOutput),
+                        },
+                    ];
+                    // Do NOT add any UI _meta fields - widget reads from platform context
+                    // The outputTemplate URI (ui://widget/{toolName}.html) was already provided in tools/list
+                    this.logger.verbose('finalize: UI using static mode (structured data only)', {
+                        tool: tool.metadata.name,
+                        platform: platformType,
+                        outputKeys: rawOutput && typeof rawOutput === 'object' && !Array.isArray(rawOutput) ? Object.keys(rawOutput) : [],
+                    });
+                }
+                else if (servingMode === 'hybrid') {
+                    // For hybrid mode: return structured data + transpiled component code
+                    // The hybrid shell (React runtime + renderer) was pre-compiled at server startup
+                    // and advertised via outputTemplate URI in tools/list.
+                    // The shell dynamically imports the component code from _meta['ui/component']
+                    // and renders it with toolOutput data from the platform context.
+                    // Build the component payload with transpiled code
+                    const componentPayload = scope.toolUI.buildHybridComponentPayload({
+                        toolName: tool.metadata.name,
+                        template: tool.metadata.ui.template,
+                        uiConfig: tool.metadata.ui,
+                    });
+                    // Return structured data as JSON text content
+                    result.content = [
+                        {
+                            type: 'text',
+                            text: safeStringify(rawOutput),
+                        },
+                    ];
+                    // Add component payload to _meta for the hybrid shell's dynamic renderer
+                    if (componentPayload) {
+                        result._meta = {
+                            ...result._meta,
+                            'ui/component': componentPayload,
+                            'ui/type': componentPayload.type,
+                        };
+                    }
+                    this.logger.verbose('finalize: UI using hybrid mode (structured data + component)', {
+                        tool: tool.metadata.name,
+                        platform: platformType,
+                        hasComponent: !!componentPayload,
+                        componentType: componentPayload?.type,
+                        componentHash: componentPayload?.hash,
+                        outputKeys: rawOutput && typeof rawOutput === 'object' && !Array.isArray(rawOutput) ? Object.keys(rawOutput) : [],
+                    });
+                }
+                else {
+                    // For inline mode (default): render HTML with data embedded in each response
+                    // Use async version to support React component templates via SSR
+                    const uiResult = await scope.toolUI.renderAndRegisterAsync({
+                        toolName: tool.metadata.name,
+                        requestId,
+                        input: input?.arguments && typeof input.arguments === 'object' && !Array.isArray(input.arguments)
+                            ? input.arguments
+                            : {},
+                        output: rawOutput,
+                        structuredContent: result.structuredContent,
+                        uiConfig: tool.metadata.ui,
+                        platformType,
+                    });
+                    // Merge UI metadata into result._meta
+                    result._meta = {
+                        ...result._meta,
+                        ...uiResult.meta,
+                    };
+                    // For platforms that support widgets (OpenAI, ext-apps), clear content since widget displays data
+                    // For Claude and other platforms, keep the text content as they don't support _meta UI fields
+                    const supportsWidgets = platformType === 'openai' || platformType === 'ext-apps';
+                    if (supportsWidgets) {
+                        // Clear content - widget will display from _meta['ui/html']
+                        result.content = [];
+                    }
+                    else {
+                        // For Claude and other platforms without widget support:
+                        // Return JSON data + HTML template as artifact hint
+                        const htmlContent = uiResult?.meta?.['ui/html'];
+                        if (htmlContent) {
+                            // Include HTML template as artifact hint for Claude
+                            // Claude can use this to create an HTML artifact for visual display
+                            result.content = [
+                                {
+                                    type: 'text',
+                                    text: `## Data\n\`\`\`json\n${safeStringify(rawOutput, 2)}\n\`\`\`\n\n## Visual Template (for artifact rendering)\n\`\`\`html\n${htmlContent}\n\`\`\``,
+                                },
+                            ];
+                        }
+                        else {
+                            // Fallback: JSON only
+                            result.content = [
+                                {
+                                    type: 'text',
+                                    text: safeStringify(rawOutput, 2),
+                                },
+                            ];
+                        }
+                    }
+                    this.logger.verbose('finalize: UI metadata added (inline mode)', {
+                        tool: tool.metadata.name,
+                        platform: platformType,
+                        supportsWidgets,
+                        contentCleared: supportsWidgets,
+                        htmlHintIncluded: !supportsWidgets && !!uiResult?.meta?.['ui/html'],
+                    });
+                }
+            }
+            catch (error) {
+                // UI rendering failure should not fail the tool call
+                // Log with full context to help debugging
+                const errorMessage = error instanceof Error ? error.message : String(error);
+                const errorStack = error instanceof Error ? error.stack : undefined;
+                const uiConfig = tool.metadata.ui;
+                this.logger.error('finalize: UI rendering failed', {
+                    tool: tool.metadata.name,
+                    error: errorMessage,
+                    stack: errorStack,
+                    templateType: uiConfig?.template
+                        ? typeof uiConfig.template === 'function'
+                            ? 'react-component'
+                            : typeof uiConfig.template === 'string'
+                                ? uiConfig.template.endsWith('.tsx') || uiConfig.template.endsWith('.jsx')
+                                    ? 'react-file'
+                                    : 'html-file'
+                                : 'unknown'
+                        : 'none',
+                    hasStructuredContent: result.structuredContent !== undefined,
+                    structuredContentKeys: result.structuredContent &&
+                        typeof result.structuredContent === 'object' &&
+                        result.structuredContent !== null &&
+                        !Array.isArray(result.structuredContent)
+                        ? Object.keys(result.structuredContent)
+                        : [],
+                });
+                // In debug mode, also log to console for immediate visibility
+                if (process.env['DEBUG'] || process.env['NODE_ENV'] === 'development') {
+                    console.error('[FrontMCP] UI Rendering Error:', {
+                        tool: tool.metadata.name,
+                        error: errorMessage,
+                        stack: errorStack,
+                    });
+                }
+            }
+        }
+        // Log the final result being sent
+        this.logger.info('finalize: sending response', {
+            tool: tool.metadata.name,
+            hasContent: Array.isArray(result.content) && result.content.length > 0,
+            contentLength: Array.isArray(result.content) ? result.content.length : 0,
+            hasStructuredContent: result.structuredContent !== undefined,
+            hasMeta: result._meta !== undefined,
+            metaKeys: result._meta ? Object.keys(result._meta) : [],
+            isError: result.isError,
+        });
         // Respond with the properly formatted MCP result
-        this.respond(parseResult.data);
+        this.respond(result);
         this.logger.verbose('finalize:done');
     }
 };
@@ -215,6 +497,12 @@ tslib_1.__decorate([
     tslib_1.__metadata("design:paramtypes", []),
     tslib_1.__metadata("design:returntype", Promise)
 ], CallToolFlow.prototype, "findTool", null);
+tslib_1.__decorate([
+    Stage('checkToolAuthorization'),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], CallToolFlow.prototype, "checkToolAuthorization", null);
 tslib_1.__decorate([
     Stage('createToolCallContext'),
     tslib_1.__metadata("design:type", Function),

package/src/tool/flows/call-tool.flow.js.map

@@ -1 +1 @@
-{"version":3,"file":"call-tool.flow.js","sourceRoot":"","sources":["../../../../src/tool/flows/call-tool.flow.ts"],"names":[],"mappings":";;;AAAA,gCAAgC;AAChC,yCAA6G;AAC7G,6BAAwB;AACxB,iEAAiG;AAEjG,yCAMsB;AAEtB,MAAM,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,gCAAqB;IAC9B,GAAG,EAAE,OAAC,CAAC,GAAG,EAAE;CACb,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,+BAAoB,CAAC;AAE1C,MAAM,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,OAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,SAAS,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;KACjD,CAAC;SACD,WAAW,EAAE;IAChB,QAAQ,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAyB;IACnD,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,kBAAS,CAAC;IAC7B,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,oBAAW,CAAC;IACtC,mDAAmD;IACnD,SAAS,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,YAAY;CACrB,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG;IACX,GAAG,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,uBAAuB,EAAE,cAAc,EAAE,kBAAkB,CAAC;IAC5F,OAAO,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,gBAAgB,CAAC;IACvD,QAAQ,EAAE,CAAC,kBAAkB,EAAE,cAAc,EAAE,UAAU,CAAC;CACvB,CAAC;AActC,MAAM,IAAI,GAAG,iBAA0B,CAAC;AACxC,MAAM,EAAE,KAAK,EAAE,GAAG,IAAA,oBAAW,EAAoB,IAAI,CAAC,CAAC;AASxC,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,iBAAqB;IAC7D,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAG1C,AAAN,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAExC,IAAI,MAAe,CAAC;QACpB,IAAI,MAAW,CAAC;QAChB,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;YAClC,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;YAClC,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC;QACtB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,0BAAiB,CAAC,eAAe,EAAE,CAAC,YAAY,OAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/F,CAAC;QAED,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,MAAM,GAAG,CAAC,CAAC;YAC3D,MAAM,IAAI,2BAAkB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACrD,CAAC;QAED,6DAA6D;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QACxB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACtC,OAAO,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,2DAA2D;QAC3D,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAgB,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzC,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtC,4CAA4C;QAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,WAAW,CAAC,MAAM,oCAAoC,CAAC,CAAC;QAEjG,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACtC,OAAO,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,IAAI,aAAa,CAAC,CAAC;YACvD,MAAM,IAAI,0BAAiB,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,IAAI,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC;IAGK,AAAN,KAAK,CAAC,qBAAqB;QACzB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC3B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAE5C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC/E,IAAI,CAAC,GAAG,GAAG,KAAK,IAAI,EAAE;oBACpB,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,CAAC,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAC;YAC5E,MAAM,IAAI,2BAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC1C,yBAAyB;QACzB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3C,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAC9C,+BAA+B;QAC/B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC3C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC5C,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACnC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAElC,IAAI,CAAC;YACH,WAAW,CAAC,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,OAAC,CAAC,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,0BAAiB,CAAC,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAChE,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;YAC/D,MAAM,IAAI,0BAAiB,CAAC,mDAAmD,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE5B,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,IAAI,2BAAkB,CAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,SAAS,EAC3C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC5C,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACnC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAEnC,iEAAiE;QACjE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAEhD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7C,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAC9C,8BAA8B;QAC9B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC1C,wBAAwB;QACxB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3C,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAEvC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,MAAM,IAAI,2BAAkB,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,MAAM,IAAI,2BAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACvF,CAAC;QAED,qEAAqE;QACrE,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,+CAA+C;YAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACtD,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;gBACxB,MAAM,EAAE,WAAW,CAAC,KAAK;aAC1B,CAAC,CAAC;YAEH,qEAAqE;YACrE,MAAM,IAAI,2BAAkB,EAAE,CAAC;QACjC,CAAC;QAED,iDAAiD;QACjD,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC;CACF,CAAA;AAhNO;IADL,KAAK,CAAC,YAAY,CAAC;;;;8CAmCnB;AAGK;IADL,KAAK,CAAC,UAAU,CAAC;;;;4CAqBjB;AAGK;IADL,KAAK,CAAC,uBAAuB,CAAC;;;;yDAuB9B;AAGK;IADL,KAAK,CAAC,cAAc,CAAC;;;;gDAMrB;AAGK;IADL,KAAK,CAAC,kBAAkB,CAAC;;;;oDAMzB;AAGK;IADL,KAAK,CAAC,eAAe,CAAC;;;;iDAqBtB;AAGK;IADL,KAAK,CAAC,SAAS,CAAC;;;;2CAmBhB;AAGK;IADL,KAAK,CAAC,gBAAgB,CAAC;;;;kDAavB;AAGK;IADL,KAAK,CAAC,kBAAkB,CAAC;;;;oDAMzB;AAGK;IADL,KAAK,CAAC,cAAc,CAAC;;;;gDAMrB;AAGK;IADL,KAAK,CAAC,UAAU,CAAC;;;;4CAgCjB;AAnNkB,YAAY;IAPhC,IAAA,aAAI,EAAC;QACJ,IAAI;QACJ,IAAI;QACJ,WAAW;QACX,YAAY;QACZ,MAAM,EAAE,YAAY;KACrB,CAAC;GACmB,YAAY,CAoNhC;kBApNoB,YAAY","sourcesContent":["// tools/flows/call-tool.flow.ts\nimport { Flow, FlowBase, FlowHooksOf, FlowPlan, FlowRunOptions, ToolContext, ToolEntry } from '../../common';\nimport { z } from 'zod';\nimport { CallToolRequestSchema, CallToolResultSchema } from '@modelcontextprotocol/sdk/types.js';\nimport { AuthInfo } from '@modelcontextprotocol/sdk/server/auth/types.js';\nimport {\n  InvalidMethodError,\n  ToolNotFoundError,\n  InvalidInputError,\n  InvalidOutputError,\n  ToolExecutionError,\n} from '../../errors';\n\nconst inputSchema = z.object({\n  request: CallToolRequestSchema,\n  ctx: z.any(),\n});\n\nconst outputSchema = CallToolResultSchema;\n\nconst stateSchema = z.object({\n  input: z\n    .object({\n      name: z.string().min(1).max(64),\n      arguments: z.object({}).passthrough().optional(),\n    })\n    .passthrough(),\n  authInfo: z.any().optional() as z.ZodType<AuthInfo>,\n  tool: z.instanceof(ToolEntry),\n  toolContext: z.instanceof(ToolContext),\n  // Store the raw executed output for plugins to see\n  rawOutput: z.any().optional(),\n  output: outputSchema,\n});\n\nconst plan = {\n  pre: ['parseInput', 'findTool', 'createToolCallContext', 'acquireQuota', 'acquireSemaphore'],\n  execute: ['validateInput', 'execute', 'validateOutput'],\n  finalize: ['releaseSemaphore', 'releaseQuota', 'finalize'],\n} as const satisfies FlowPlan<string>;\n\ndeclare global {\n  interface ExtendFlows {\n    'tools:call-tool': FlowRunOptions<\n      CallToolFlow,\n      typeof plan,\n      typeof inputSchema,\n      typeof outputSchema,\n      typeof stateSchema\n    >;\n  }\n}\n\nconst name = 'tools:call-tool' as const;\nconst { Stage } = FlowHooksOf<'tools:call-tool'>(name);\n\n@Flow({\n  name,\n  plan,\n  inputSchema,\n  outputSchema,\n  access: 'authorized',\n})\nexport default class CallToolFlow extends FlowBase<typeof name> {\n  logger = this.scopeLogger.child('CallToolFlow');\n\n  @Stage('parseInput')\n  async parseInput() {\n    this.logger.verbose('parseInput:start');\n\n    let method!: string;\n    let params: any;\n    let ctx: any;\n    try {\n      const inputData = inputSchema.parse(this.rawInput);\n      method = inputData.request.method;\n      params = inputData.request.params;\n      ctx = inputData.ctx;\n    } catch (e) {\n      throw new InvalidInputError('Invalid Input', e instanceof z.ZodError ? e.errors : undefined);\n    }\n\n    if (method !== 'tools/call') {\n      this.logger.warn(`parseInput: invalid method \"${method}\"`);\n      throw new InvalidMethodError(method, 'tools/call');\n    }\n\n    // Find the tool early to get its owner ID for hook filtering\n    const { name } = params;\n    const activeTools = this.scope.tools.getTools(true);\n    const tool = activeTools.find((entry) => {\n      return entry.fullName === name || entry.name === name;\n    });\n\n    // Store tool owner ID in the flow input for hook filtering\n    if (tool?.owner) {\n      (this.rawInput as any)._toolOwnerId = tool.owner.id;\n    }\n\n    this.state.set({ input: params, authInfo: ctx.authInfo });\n    this.logger.verbose('parseInput:done');\n  }\n\n  @Stage('findTool')\n  async findTool() {\n    this.logger.verbose('findTool:start');\n    // TODO: add support for session based tools\n    const activeTools = this.scope.tools.getTools(true);\n    this.logger.info(`findTool: discovered ${activeTools.length} active tool(s) (including hidden)`);\n\n    const { name } = this.state.required.input;\n    const tool = activeTools.find((entry) => {\n      return entry.fullName === name || entry.name === name;\n    });\n\n    if (!tool) {\n      this.logger.warn(`findTool: tool \"${name}\" not found`);\n      throw new ToolNotFoundError(name);\n    }\n\n    this.logger = this.logger.child(`CallToolFlow(${name})`);\n    this.state.set('tool', tool);\n    this.logger.info(`findTool: tool \"${name}\" found`);\n    this.logger.verbose('findTool:done');\n  }\n\n  @Stage('createToolCallContext')\n  async createToolCallContext() {\n    this.logger.verbose('createToolCallContext:start');\n    const { ctx } = this.input;\n    const { tool, input } = this.state.required;\n\n    try {\n      const context = tool.create(input.arguments, ctx);\n      const toolHooks = this.scope.hooks.getClsHooks(tool.record.provide).map((hook) => {\n        hook.run = async () => {\n          return context[hook.metadata.method]();\n        };\n        return hook;\n      });\n\n      this.appendContextHooks(toolHooks);\n      context.mark('createToolCallContext');\n      this.state.set('toolContext', context);\n      this.logger.verbose('createToolCallContext:done');\n    } catch (error) {\n      this.logger.error('createToolCallContext: failed to create context', error);\n      throw new ToolExecutionError(tool.metadata.name, error instanceof Error ? error : undefined);\n    }\n  }\n\n  @Stage('acquireQuota')\n  async acquireQuota() {\n    this.logger.verbose('acquireQuota:start');\n    // used for rate limiting\n    this.state.toolContext?.mark('acquireQuota');\n    this.logger.verbose('acquireQuota:done');\n  }\n\n  @Stage('acquireSemaphore')\n  async acquireSemaphore() {\n    this.logger.verbose('acquireSemaphore:start');\n    // used for concurrency control\n    this.state.toolContext?.mark('acquireSemaphore');\n    this.logger.verbose('acquireSemaphore:done');\n  }\n\n  @Stage('validateInput')\n  async validateInput() {\n    this.logger.verbose('validateInput:start');\n    const { tool, input } = this.state.required;\n    const { toolContext } = this.state;\n    if (!toolContext) {\n      return;\n    }\n    toolContext.mark('validateInput');\n\n    try {\n      toolContext.input = tool.parseInput(input);\n      this.logger.verbose('validateInput:done');\n    } catch (err) {\n      if (err instanceof z.ZodError) {\n        throw new InvalidInputError('Invalid tool input', err.errors);\n      }\n\n      this.logger.error('validateInput: failed to parse input', err);\n      throw new InvalidInputError('Unknown error occurred when trying to parse input');\n    }\n  }\n\n  @Stage('execute')\n  async execute() {\n    this.logger.verbose('execute:start');\n    const toolContext = this.state.toolContext;\n    if (!toolContext) {\n      return;\n    }\n    toolContext.mark('execute');\n\n    try {\n      toolContext.output = await toolContext.execute(toolContext.input);\n      this.logger.verbose('execute:done');\n    } catch (error) {\n      this.logger.error('execute: tool execution failed', error);\n      throw new ToolExecutionError(\n        this.state.tool?.metadata.name || 'unknown',\n        error instanceof Error ? error : undefined,\n      );\n    }\n  }\n\n  @Stage('validateOutput')\n  async validateOutput() {\n    this.logger.verbose('validateOutput:start');\n    const { toolContext } = this.state;\n    if (!toolContext) {\n      return;\n    }\n    toolContext.mark('validateOutput');\n\n    // Store the RAW output for plugins (cache, PII, etc.) to inspect\n    this.state.set('rawOutput', toolContext.output);\n\n    this.logger.verbose('validateOutput:done');\n  }\n\n  @Stage('releaseSemaphore')\n  async releaseSemaphore() {\n    this.logger.verbose('releaseSemaphore:start');\n    // release concurrency control\n    this.state.toolContext?.mark('releaseSemaphore');\n    this.logger.verbose('releaseSemaphore:done');\n  }\n\n  @Stage('releaseQuota')\n  async releaseQuota() {\n    this.logger.verbose('releaseQuota:start');\n    // release rate limiting\n    this.state.toolContext?.mark('releaseQuota');\n    this.logger.verbose('releaseQuota:done');\n  }\n\n  @Stage('finalize')\n  async finalize() {\n    this.logger.verbose('finalize:start');\n    const { tool, rawOutput } = this.state;\n\n    if (!tool) {\n      this.logger.error('finalize: tool not found in state');\n      throw new ToolExecutionError('unknown', new Error('Tool not found in state'));\n    }\n\n    if (rawOutput === undefined) {\n      this.logger.error('finalize: tool output not found in state');\n      throw new ToolExecutionError(tool.metadata.name, new Error('Tool output not found'));\n    }\n\n    // Parse and construct the MCP-compliant output using safeParseOutput\n    const parseResult = tool.safeParseOutput(rawOutput);\n\n    if (!parseResult.success) {\n      // add support for request id in error messages\n      this.logger.error('finalize: output validation failed', {\n        tool: tool.metadata.name,\n        errors: parseResult.error,\n      });\n\n      // Use InvalidOutputError, which hides internal details in production\n      throw new InvalidOutputError();\n    }\n\n    // Respond with the properly formatted MCP result\n    this.respond(parseResult.data);\n    this.logger.verbose('finalize:done');\n  }\n}\n"]}
+{"version":3,"file":"call-tool.flow.js","sourceRoot":"","sources":["../../../../src/tool/flows/call-tool.flow.ts"],"names":[],"mappings":";;;AAAA,gCAAgC;AAChC,mCAAoC;AACpC,yCASsB;AACtB,6BAAwB;AACxB,iEAAiG;AAEjG,yCAOsB;AACtB,8BAAoC;AAGpC,MAAM,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,gCAAqB;IAC9B,2FAA2F;IAC3F,GAAG,EAAE,OAAC,CAAC,GAAG,EAAE;CACb,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,+BAAoB,CAAC;AAE1C,MAAM,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,OAAC,CAAC,WAAW,CAAC;QACnB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,SAAS,EAAE,OAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;IACF,QAAQ,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAyB;IACnD,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,kBAAS,CAAC;IAC7B,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,oBAAW,CAAC;IACtC,mDAAmD;IACnD,SAAS,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,YAAY;IACpB,2DAA2D;IAC3D,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG;IACX,GAAG,EAAE;QACH,YAAY;QACZ,UAAU;QACV,wBAAwB;QACxB,uBAAuB;QACvB,cAAc;QACd,kBAAkB;KACnB;IACD,OAAO,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,gBAAgB,CAAC;IACvD,QAAQ,EAAE,CAAC,kBAAkB,EAAE,cAAc,EAAE,UAAU,CAAC;CACvB,CAAC;AActC,MAAM,IAAI,GAAG,iBAA0B,CAAC;AACxC,MAAM,EAAE,KAAK,EAAE,GAAG,IAAA,oBAAW,EAAoB,IAAI,CAAC,CAAC;AAEvD;;;GAGG;AACH,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,KAAc,EAAU,EAAE;IAC/D,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CACnB,KAAK,EACL,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACZ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,OAAO,YAAY,CAAC;gBACvC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,EACD,KAAK,CACN,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC,CAAC;AASa,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,iBAAqB;IAC7D,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAG1C,AAAN,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAExC,IAAI,MAAe,CAAC;QACpB,kEAAkE;QAClE,4EAA4E;QAC5E,IAAI,MAAW,CAAC;QAChB,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;YAClC,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;YAClC,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC;QACtB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,0BAAiB,CAAC,eAAe,EAAE,CAAC,YAAY,OAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/F,CAAC;QAED,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,MAAM,GAAG,CAAC,CAAC;YAC3D,MAAM,IAAI,2BAAkB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACrD,CAAC;QAED,6DAA6D;QAC7D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QACxB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACtC,OAAO,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,kDAAkD;QAClD,MAAM,WAAW,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAEpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzC,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtC,4CAA4C;QAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,WAAW,CAAC,MAAM,oCAAoC,CAAC,CAAC;QAEjG,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACtC,OAAO,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,IAAI,aAAa,CAAC,CAAC;YACvD,MAAM,IAAI,0BAAiB,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,IAAI,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC;IAED;;;;OAIG;IAEG,AAAN,KAAK,CAAC,sBAAsB;QAC1B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;QACpD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAEtC,qDAAqD;QACrD,MAAM,aAAa,GAAG,QAAQ,EAAE,KAAK,EAAE,CAAC,eAAe,CAK1C,CAAC;QAEd,0DAA0D;QAC1D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,4DAA4D;QAC5D,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,sEAAsE;YACtE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,8DAA8D;QAC9D,MAAM,eAAe,GACnB,aAAa,CAAC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,aAAa,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QAEnG,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,+DAA+D;YAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;YACtD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC;YAE7C,gCAAgC;YAChC,uEAAuE;YACvE,yEAAyE;YACzE,IAAI,eAAe,GAAiC,WAAW,CAAC;YAEhE,IAAI,WAAW,IAAI,IAAA,2BAAkB,EAAC,WAAW,CAAC,EAAE,CAAC;gBACnD,mDAAmD;gBACnD,MAAM,iBAAiB,GAAG,WAAW,CAAC,eAAe,CAAC;gBACtD,IAAI,iBAAiB,EAAE,CAAC;oBACtB,uDAAuD;oBACvD,IAAI,iBAAiB,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;wBACxC,eAAe,GAAG,cAAc,CAAC;oBACnC,CAAC;yBAAM,CAAC;wBACN,eAAe,GAAG,iBAAiB,CAAC,kBAAkB,IAAI,WAAW,CAAC;oBACxE,CAAC;gBACH,CAAC;gBACD,kFAAkF;YACpF,CAAC;YACD,qEAAqE;YAErE,IAAI,eAAe,KAAK,WAAW,IAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9E,0DAA0D;gBAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,+CAA+C,KAAK,EAAE,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YAED,kDAAkD;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;YAE1E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,KAAK,GAAG,CAAC,CAAC;YACtF,MAAM,IAAI,mCAA0B,CAAC;gBACnC,KAAK;gBACL,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,IAAI,EAAE,IAAI,IAAI,SAAS;gBACjD,OAAO;gBACP,OAAO,EAAE,8BAA8B,KAAK,6BAA6B,IAAI,EAAE,QAAQ,IAAI,IAAI,EAAE,IAAI,GAAG;aACzG,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,KAAa,EAAE,MAAc;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC1C,OAAO,GAAG,OAAO,wBAAwB,kBAAkB,CAAC,KAAK,CAAC,SAAS,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1G,CAAC;IAGK,AAAN,KAAK,CAAC,qBAAqB;QACzB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC3B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAE5C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC/E,IAAI,CAAC,GAAG,GAAG,KAAK,IAAI,EAAE;oBACpB,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,CAAC,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAC;YAC5E,MAAM,IAAI,2BAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC1C,yBAAyB;QACzB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3C,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAC9C,+BAA+B;QAC/B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC3C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC5C,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACnC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAElC,IAAI,CAAC;YACH,WAAW,CAAC,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,OAAC,CAAC,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,0BAAiB,CAAC,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAChE,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;YAC/D,MAAM,IAAI,0BAAiB,CAAC,mDAAmD,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE5B,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,IAAI,2BAAkB,CAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,SAAS,EAC3C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC5C,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACnC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAEnC,iEAAiE;QACjE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAEhD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7C,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAC9C,8BAA8B;QAC9B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC1C,wBAAwB;QACxB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3C,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAE9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,MAAM,IAAI,2BAAkB,CAAC,SAAS,EAAE,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,MAAM,IAAI,2BAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACvF,CAAC;QAED,qEAAqE;QACrE,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEpD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,+CAA+C;YAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACtD,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;gBACxB,MAAM,EAAE,WAAW,CAAC,KAAK;aAC1B,CAAC,CAAC;YAEH,qEAAqE;YACrE,MAAM,IAAI,2BAAkB,EAAE,CAAC;QACjC,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC;QAEhC,iDAAiD;QACjD,IAAI,IAAA,gBAAW,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,yDAAyD;gBACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAc,CAAC;gBAElC,2FAA2F;gBAC3F,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;gBAChC,MAAM,SAAS,GAAG,QAAQ,EAAE,SAAS,CAAC;gBACtC,MAAM,SAAS,GAAW,IAAA,mBAAU,GAAE,CAAC;gBAEvC,8EAA8E;gBAC9E,yEAAyE;gBACzE,8BAA8B;gBAC9B,MAAM,YAAY,GAChB,QAAQ,EAAE,gBAAgB,EAAE,YAAY;oBACxC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACxE,QAAQ,CAAC;gBAEX,wEAAwE;gBACxE,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,IAAI,QAAQ,CAAC;gBAE7D,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;oBAC7B,+CAA+C;oBAC/C,0FAA0F;oBAC1F,kFAAkF;oBAClF,qFAAqF;oBAErF,8CAA8C;oBAC9C,MAAM,CAAC,OAAO,GAAG;wBACf;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC;yBAC/B;qBACF,CAAC;oBAEF,sEAAsE;oBACtE,0FAA0F;oBAE1F,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,uDAAuD,EAAE;wBAC3E,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;wBACxB,QAAQ,EAAE,YAAY;wBACtB,UAAU,EACR,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE;qBACxG,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;oBACpC,sEAAsE;oBACtE,iFAAiF;oBACjF,uDAAuD;oBACvD,8EAA8E;oBAC9E,iEAAiE;oBAEjE,mDAAmD;oBACnD,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,2BAA2B,CAAC;wBAChE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;wBAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ;wBACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;qBAC3B,CAAC,CAAC;oBAEH,8CAA8C;oBAC9C,MAAM,CAAC,OAAO,GAAG;wBACf;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC;yBAC/B;qBACF,CAAC;oBAEF,yEAAyE;oBACzE,IAAI,gBAAgB,EAAE,CAAC;wBACrB,MAAM,CAAC,KAAK,GAAG;4BACb,GAAG,MAAM,CAAC,KAAK;4BACf,cAAc,EAAE,gBAAgB;4BAChC,SAAS,EAAE,gBAAgB,CAAC,IAAI;yBACjC,CAAC;oBACJ,CAAC;oBAED,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,8DAA8D,EAAE;wBAClF,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;wBACxB,QAAQ,EAAE,YAAY;wBACtB,YAAY,EAAE,CAAC,CAAC,gBAAgB;wBAChC,aAAa,EAAE,gBAAgB,EAAE,IAAI;wBACrC,aAAa,EAAE,gBAAgB,EAAE,IAAI;wBACrC,UAAU,EACR,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE;qBACxG,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,6EAA6E;oBAC7E,iEAAiE;oBACjE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC;wBACzD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;wBAC5B,SAAS;wBACT,KAAK,EACH,KAAK,EAAE,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;4BACxF,CAAC,CAAE,KAAK,CAAC,SAAqC;4BAC9C,CAAC,CAAC,EAAE;wBACR,MAAM,EAAE,SAAS;wBACjB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;wBAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;wBAC1B,YAAY;qBACb,CAAC,CAAC;oBAEH,sCAAsC;oBACtC,MAAM,CAAC,KAAK,GAAG;wBACb,GAAG,MAAM,CAAC,KAAK;wBACf,GAAG,QAAQ,CAAC,IAAI;qBACjB,CAAC;oBAEF,kGAAkG;oBAClG,8FAA8F;oBAC9F,MAAM,eAAe,GAAG,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,UAAU,CAAC;oBAEjF,IAAI,eAAe,EAAE,CAAC;wBACpB,4DAA4D;wBAC5D,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;oBACtB,CAAC;yBAAM,CAAC;wBACN,yDAAyD;wBACzD,oDAAoD;wBACpD,MAAM,WAAW,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;wBAEhD,IAAI,WAAW,EAAE,CAAC;4BAChB,oDAAoD;4BACpD,oEAAoE;4BACpE,MAAM,CAAC,OAAO,GAAG;gCACf;oCACE,IAAI,EAAE,MAAM;oCACZ,IAAI,EAAE,wBAAwB,aAAa,CACzC,SAAS,EACT,CAAC,CACF,wEAAwE,WAAW,UAAU;iCAC/F;6BACF,CAAC;wBACJ,CAAC;6BAAM,CAAC;4BACN,sBAAsB;4BACtB,MAAM,CAAC,OAAO,GAAG;gCACf;oCACE,IAAI,EAAE,MAAM;oCACZ,IAAI,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;iCAClC;6BACF,CAAC;wBACJ,CAAC;oBACH,CAAC;oBAED,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,2CAA2C,EAAE;wBAC/D,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;wBACxB,QAAQ,EAAE,YAAY;wBACtB,eAAe;wBACf,cAAc,EAAE,eAAe;wBAC/B,gBAAgB,EAAE,CAAC,eAAe,IAAI,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC;qBACpE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,qDAAqD;gBACrD,0CAA0C;gBAC1C,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5E,MAAM,UAAU,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAElC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;oBACjD,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;oBACxB,KAAK,EAAE,YAAY;oBACnB,KAAK,EAAE,UAAU;oBACjB,YAAY,EAAE,QAAQ,EAAE,QAAQ;wBAC9B,CAAC,CAAC,OAAO,QAAQ,CAAC,QAAQ,KAAK,UAAU;4BACvC,CAAC,CAAC,iBAAiB;4BACnB,CAAC,CAAC,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ;gCACvC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;oCACxE,CAAC,CAAC,YAAY;oCACd,CAAC,CAAC,WAAW;gCACf,CAAC,CAAC,SAAS;wBACb,CAAC,CAAC,MAAM;oBACV,oBAAoB,EAAE,MAAM,CAAC,iBAAiB,KAAK,SAAS;oBAC5D,qBAAqB,EACnB,MAAM,CAAC,iBAAiB;wBACxB,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ;wBAC5C,MAAM,CAAC,iBAAiB,KAAK,IAAI;wBACjC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC;wBACtC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;wBACvC,CAAC,CAAC,EAAE;iBACT,CAAC,CAAC;gBAEH,8DAA8D;gBAC9D,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,aAAa,EAAE,CAAC;oBACtE,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE;wBAC9C,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;wBACxB,KAAK,EAAE,YAAY;wBACnB,KAAK,EAAE,UAAU;qBAClB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;YAC7C,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACxB,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YACtE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxE,oBAAoB,EAAE,MAAM,CAAC,iBAAiB,KAAK,SAAS;YAC5D,OAAO,EAAE,MAAM,CAAC,KAAK,KAAK,SAAS;YACnC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;YACvD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QAEH,iDAAiD;QACjD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC;CACF,CAAA;AAvfO;IADL,KAAK,CAAC,YAAY,CAAC;;;;8CAmCnB;AAGK;IADL,KAAK,CAAC,UAAU,CAAC;;;;4CAqBjB;AAQK;IADL,KAAK,CAAC,wBAAwB,CAAC;;;;0DA4E/B;AAWK;IADL,KAAK,CAAC,uBAAuB,CAAC;;;;yDAuB9B;AAGK;IADL,KAAK,CAAC,cAAc,CAAC;;;;gDAMrB;AAGK;IADL,KAAK,CAAC,kBAAkB,CAAC;;;;oDAMzB;AAGK;IADL,KAAK,CAAC,eAAe,CAAC;;;;iDAqBtB;AAGK;IADL,KAAK,CAAC,SAAS,CAAC;;;;2CAmBhB;AAGK;IADL,KAAK,CAAC,gBAAgB,CAAC;;;;kDAavB;AAGK;IADL,KAAK,CAAC,kBAAkB,CAAC;;;;oDAMzB;AAGK;IADL,KAAK,CAAC,cAAc,CAAC;;;;gDAMrB;AAGK;IADL,KAAK,CAAC,UAAU,CAAC;;;;4CA4OjB;AA1fkB,YAAY;IAPhC,IAAA,aAAI,EAAC;QACJ,IAAI;QACJ,IAAI;QACJ,WAAW;QACX,YAAY;QACZ,MAAM,EAAE,YAAY;KACrB,CAAC;GACmB,YAAY,CA2fhC;kBA3foB,YAAY","sourcesContent":["// tools/flows/call-tool.flow.ts\nimport { randomUUID } from 'crypto';\nimport {\n  Flow,\n  FlowBase,\n  FlowHooksOf,\n  FlowPlan,\n  FlowRunOptions,\n  ToolContext,\n  ToolEntry,\n  isOrchestratedMode,\n} from '../../common';\nimport { z } from 'zod';\nimport { CallToolRequestSchema, CallToolResultSchema } from '@modelcontextprotocol/sdk/types.js';\nimport { AuthInfo } from '@modelcontextprotocol/sdk/server/auth/types.js';\nimport {\n  InvalidMethodError,\n  ToolNotFoundError,\n  InvalidInputError,\n  InvalidOutputError,\n  ToolExecutionError,\n  AuthorizationRequiredError,\n} from '../../errors';\nimport { hasUIConfig } from '../ui';\nimport { Scope } from '../../scope';\n\nconst inputSchema = z.object({\n  request: CallToolRequestSchema,\n  // z.any() used because ctx is the MCP SDK's ToolCallExtra type which varies by SDK version\n  ctx: z.any(),\n});\n\nconst outputSchema = CallToolResultSchema;\n\nconst stateSchema = z.object({\n  input: z.looseObject({\n    name: z.string().min(1).max(64),\n    arguments: z.looseObject({}).optional(),\n  }),\n  authInfo: z.any().optional() as z.ZodType<AuthInfo>,\n  tool: z.instanceof(ToolEntry),\n  toolContext: z.instanceof(ToolContext),\n  // Store the raw executed output for plugins to see\n  rawOutput: z.any().optional(),\n  output: outputSchema,\n  // Tool owner ID for hook filtering (set during parseInput)\n  _toolOwnerId: z.string().optional(),\n});\n\nconst plan = {\n  pre: [\n    'parseInput',\n    'findTool',\n    'checkToolAuthorization',\n    'createToolCallContext',\n    'acquireQuota',\n    'acquireSemaphore',\n  ],\n  execute: ['validateInput', 'execute', 'validateOutput'],\n  finalize: ['releaseSemaphore', 'releaseQuota', 'finalize'],\n} as const satisfies FlowPlan<string>;\n\ndeclare global {\n  interface ExtendFlows {\n    'tools:call-tool': FlowRunOptions<\n      CallToolFlow,\n      typeof plan,\n      typeof inputSchema,\n      typeof outputSchema,\n      typeof stateSchema\n    >;\n  }\n}\n\nconst name = 'tools:call-tool' as const;\nconst { Stage } = FlowHooksOf<'tools:call-tool'>(name);\n\n/**\n * Safely stringify a value, handling circular references and other edge cases.\n * This prevents tool calls from failing due to serialization errors.\n */\nconst safeStringify = (value: unknown, space?: number): string => {\n  const seen = new WeakSet<object>();\n  try {\n    return JSON.stringify(\n      value,\n      (_key, val) => {\n        if (typeof val === 'object' && val !== null) {\n          if (seen.has(val)) return '[Circular]';\n          seen.add(val);\n        }\n        return val;\n      },\n      space,\n    );\n  } catch {\n    return JSON.stringify({ error: 'Output could not be serialized' });\n  }\n};\n\n@Flow({\n  name,\n  plan,\n  inputSchema,\n  outputSchema,\n  access: 'authorized',\n})\nexport default class CallToolFlow extends FlowBase<typeof name> {\n  logger = this.scopeLogger.child('CallToolFlow');\n\n  @Stage('parseInput')\n  async parseInput() {\n    this.logger.verbose('parseInput:start');\n\n    let method!: string;\n    // NOTE: `any` is intentional - Zod parsing validates these values\n    // Using unknown would require redundant type guards after schema validation\n    let params: any;\n    let ctx: any;\n    try {\n      const inputData = inputSchema.parse(this.rawInput);\n      method = inputData.request.method;\n      params = inputData.request.params;\n      ctx = inputData.ctx;\n    } catch (e) {\n      throw new InvalidInputError('Invalid Input', e instanceof z.ZodError ? e.issues : undefined);\n    }\n\n    if (method !== 'tools/call') {\n      this.logger.warn(`parseInput: invalid method \"${method}\"`);\n      throw new InvalidMethodError(method, 'tools/call');\n    }\n\n    // Find the tool early to get its owner ID for hook filtering\n    const { name } = params;\n    const activeTools = this.scope.tools.getTools(true);\n    const tool = activeTools.find((entry) => {\n      return entry.fullName === name || entry.name === name;\n    });\n\n    // Store tool owner ID in state for hook filtering\n    const toolOwnerId = tool?.owner?.id;\n\n    this.state.set({ input: params, authInfo: ctx.authInfo, _toolOwnerId: toolOwnerId });\n    this.logger.verbose('parseInput:done');\n  }\n\n  @Stage('findTool')\n  async findTool() {\n    this.logger.verbose('findTool:start');\n    // TODO: add support for session based tools\n    const activeTools = this.scope.tools.getTools(true);\n    this.logger.info(`findTool: discovered ${activeTools.length} active tool(s) (including hidden)`);\n\n    const { name } = this.state.required.input;\n    const tool = activeTools.find((entry) => {\n      return entry.fullName === name || entry.name === name;\n    });\n\n    if (!tool) {\n      this.logger.warn(`findTool: tool \"${name}\" not found`);\n      throw new ToolNotFoundError(name);\n    }\n\n    this.logger = this.logger.child(`CallToolFlow(${name})`);\n    this.state.set('tool', tool);\n    this.logger.info(`findTool: tool \"${name}\" found`);\n    this.logger.verbose('findTool:done');\n  }\n\n  /**\n   * Check if the tool's parent app is authorized.\n   * For progressive authorization, tools from unauthorized apps\n   * return an AuthorizationRequiredError with an auth_url.\n   */\n  @Stage('checkToolAuthorization')\n  async checkToolAuthorization() {\n    this.logger.verbose('checkToolAuthorization:start');\n    const { tool, authInfo } = this.state;\n\n    // Get authorization from authInfo.extra if available\n    const authorization = authInfo?.extra?.['authorization'] as\n      | {\n          authorizedAppIds?: string[];\n          authorizedApps?: Record<string, unknown>;\n        }\n      | undefined;\n\n    // No auth context = public mode, skip authorization check\n    if (!authorization) {\n      this.logger.verbose('checkToolAuthorization:skip (no auth context)');\n      return;\n    }\n\n    // Get app ID from tool owner (uses existing lineage system)\n    const appId = tool?.owner?.id;\n    if (!appId) {\n      // Tool has no owner = global tool, skip app-level authorization check\n      this.logger.verbose('checkToolAuthorization:skip (no owner)');\n      return;\n    }\n\n    // Check if app is authorized using existing session structure\n    const isAppAuthorized =\n      authorization.authorizedAppIds?.includes(appId) || appId in (authorization.authorizedApps || {});\n\n    if (!isAppAuthorized) {\n      // Get incremental auth configuration from scope's auth options\n      const apps = this.scope.apps.getApps();\n      const app = apps.find((a) => a.metadata.id === appId);\n      const authOptions = this.scope.auth?.options;\n\n      // Determine skippedAppBehavior:\n      // 1. Only applies in orchestrated mode with incrementalAuth configured\n      // 2. Default to 'anonymous' if not configured (allow anonymous fallback)\n      let skippedBehavior: 'anonymous' | 'require-auth' = 'anonymous';\n\n      if (authOptions && isOrchestratedMode(authOptions)) {\n        // Orchestrated mode - check incrementalAuth config\n        const incrementalConfig = authOptions.incrementalAuth;\n        if (incrementalConfig) {\n          // If incremental auth is disabled, always require auth\n          if (incrementalConfig.enabled === false) {\n            skippedBehavior = 'require-auth';\n          } else {\n            skippedBehavior = incrementalConfig.skippedAppBehavior || 'anonymous';\n          }\n        }\n        // If incrementalAuth not configured, default is enabled with 'anonymous' behavior\n      }\n      // For public/transparent modes, default 'anonymous' behavior applies\n\n      if (skippedBehavior === 'anonymous' && app?.metadata?.auth?.mode === 'public') {\n        // App supports anonymous - continue with anonymous access\n        this.logger.verbose(`checkToolAuthorization: using anonymous for ${appId}`);\n        return;\n      }\n\n      // Require explicit authorization - build auth URL\n      const authUrl = this.buildProgressiveAuthUrl(appId, tool?.fullName || '');\n\n      this.logger.info(`checkToolAuthorization: authorization required for app \"${appId}\"`);\n      throw new AuthorizationRequiredError({\n        appId,\n        toolId: tool?.fullName || tool?.name || 'unknown',\n        authUrl,\n        message: `Authorization required for ${appId}. Please authorize to use ${tool?.fullName || tool?.name}.`,\n      });\n    }\n\n    this.logger.verbose('checkToolAuthorization:done');\n  }\n\n  /**\n   * Build the URL for progressive/incremental authorization\n   */\n  private buildProgressiveAuthUrl(appId: string, toolId: string): string {\n    const baseUrl = this.scope.fullPath || '';\n    return `${baseUrl}/oauth/authorize?app=${encodeURIComponent(appId)}&tool=${encodeURIComponent(toolId)}`;\n  }\n\n  @Stage('createToolCallContext')\n  async createToolCallContext() {\n    this.logger.verbose('createToolCallContext:start');\n    const { ctx } = this.input;\n    const { tool, input } = this.state.required;\n\n    try {\n      const context = tool.create(input.arguments, ctx);\n      const toolHooks = this.scope.hooks.getClsHooks(tool.record.provide).map((hook) => {\n        hook.run = async () => {\n          return context[hook.metadata.method]();\n        };\n        return hook;\n      });\n\n      this.appendContextHooks(toolHooks);\n      context.mark('createToolCallContext');\n      this.state.set('toolContext', context);\n      this.logger.verbose('createToolCallContext:done');\n    } catch (error) {\n      this.logger.error('createToolCallContext: failed to create context', error);\n      throw new ToolExecutionError(tool.metadata.name, error instanceof Error ? error : undefined);\n    }\n  }\n\n  @Stage('acquireQuota')\n  async acquireQuota() {\n    this.logger.verbose('acquireQuota:start');\n    // used for rate limiting\n    this.state.toolContext?.mark('acquireQuota');\n    this.logger.verbose('acquireQuota:done');\n  }\n\n  @Stage('acquireSemaphore')\n  async acquireSemaphore() {\n    this.logger.verbose('acquireSemaphore:start');\n    // used for concurrency control\n    this.state.toolContext?.mark('acquireSemaphore');\n    this.logger.verbose('acquireSemaphore:done');\n  }\n\n  @Stage('validateInput')\n  async validateInput() {\n    this.logger.verbose('validateInput:start');\n    const { tool, input } = this.state.required;\n    const { toolContext } = this.state;\n    if (!toolContext) {\n      return;\n    }\n    toolContext.mark('validateInput');\n\n    try {\n      toolContext.input = tool.parseInput(input);\n      this.logger.verbose('validateInput:done');\n    } catch (err) {\n      if (err instanceof z.ZodError) {\n        throw new InvalidInputError('Invalid tool input', err.issues);\n      }\n\n      this.logger.error('validateInput: failed to parse input', err);\n      throw new InvalidInputError('Unknown error occurred when trying to parse input');\n    }\n  }\n\n  @Stage('execute')\n  async execute() {\n    this.logger.verbose('execute:start');\n    const toolContext = this.state.toolContext;\n    if (!toolContext) {\n      return;\n    }\n    toolContext.mark('execute');\n\n    try {\n      toolContext.output = await toolContext.execute(toolContext.input);\n      this.logger.verbose('execute:done');\n    } catch (error) {\n      this.logger.error('execute: tool execution failed', error);\n      throw new ToolExecutionError(\n        this.state.tool?.metadata.name || 'unknown',\n        error instanceof Error ? error : undefined,\n      );\n    }\n  }\n\n  @Stage('validateOutput')\n  async validateOutput() {\n    this.logger.verbose('validateOutput:start');\n    const { toolContext } = this.state;\n    if (!toolContext) {\n      return;\n    }\n    toolContext.mark('validateOutput');\n\n    // Store the RAW output for plugins (cache, PII, etc.) to inspect\n    this.state.set('rawOutput', toolContext.output);\n\n    this.logger.verbose('validateOutput:done');\n  }\n\n  @Stage('releaseSemaphore')\n  async releaseSemaphore() {\n    this.logger.verbose('releaseSemaphore:start');\n    // release concurrency control\n    this.state.toolContext?.mark('releaseSemaphore');\n    this.logger.verbose('releaseSemaphore:done');\n  }\n\n  @Stage('releaseQuota')\n  async releaseQuota() {\n    this.logger.verbose('releaseQuota:start');\n    // release rate limiting\n    this.state.toolContext?.mark('releaseQuota');\n    this.logger.verbose('releaseQuota:done');\n  }\n\n  @Stage('finalize')\n  async finalize() {\n    this.logger.verbose('finalize:start');\n    const { tool, rawOutput, input } = this.state;\n\n    if (!tool) {\n      this.logger.error('finalize: tool not found in state');\n      throw new ToolExecutionError('unknown', new Error('Tool not found in state'));\n    }\n\n    if (rawOutput === undefined) {\n      this.logger.error('finalize: tool output not found in state');\n      throw new ToolExecutionError(tool.metadata.name, new Error('Tool output not found'));\n    }\n\n    // Parse and construct the MCP-compliant output using safeParseOutput\n    const parseResult = tool.safeParseOutput(rawOutput);\n\n    if (!parseResult.success) {\n      // add support for request id in error messages\n      this.logger.error('finalize: output validation failed', {\n        tool: tool.metadata.name,\n        errors: parseResult.error,\n      });\n\n      // Use InvalidOutputError, which hides internal details in production\n      throw new InvalidOutputError();\n    }\n\n    const result = parseResult.data;\n\n    // If tool has UI config, render and add to _meta\n    if (hasUIConfig(tool.metadata)) {\n      try {\n        // Cast scope to Scope to access toolUI and notifications\n        const scope = this.scope as Scope;\n\n        // Get session info for platform detection from authInfo (already in state from parseInput)\n        const { authInfo } = this.state;\n        const sessionId = authInfo?.sessionId;\n        const requestId: string = randomUUID();\n\n        // Get platform type: first check sessionIdPayload (detected from user-agent),\n        // then fall back to notification service (detected from MCP clientInfo),\n        // finally default to 'openai'\n        const platformType =\n          authInfo?.sessionIdPayload?.platformType ??\n          (sessionId ? scope.notifications.getPlatformType(sessionId) : undefined) ??\n          'openai';\n\n        // Get the serving mode (default to 'inline' for backward compatibility)\n        const servingMode = tool.metadata.ui.servingMode ?? 'inline';\n\n        if (servingMode === 'static') {\n          // For static mode: return ONLY structured data\n          // The static widget was already registered at server startup and advertised in tools/list\n          // Widget reads tool output from platform context (e.g., window.openai.toolOutput)\n          // NO UI _meta fields needed - the client uses the outputTemplate URI from tools/list\n\n          // Return structured data as JSON text content\n          result.content = [\n            {\n              type: 'text',\n              text: safeStringify(rawOutput),\n            },\n          ];\n\n          // Do NOT add any UI _meta fields - widget reads from platform context\n          // The outputTemplate URI (ui://widget/{toolName}.html) was already provided in tools/list\n\n          this.logger.verbose('finalize: UI using static mode (structured data only)', {\n            tool: tool.metadata.name,\n            platform: platformType,\n            outputKeys:\n              rawOutput && typeof rawOutput === 'object' && !Array.isArray(rawOutput) ? Object.keys(rawOutput) : [],\n          });\n        } else if (servingMode === 'hybrid') {\n          // For hybrid mode: return structured data + transpiled component code\n          // The hybrid shell (React runtime + renderer) was pre-compiled at server startup\n          // and advertised via outputTemplate URI in tools/list.\n          // The shell dynamically imports the component code from _meta['ui/component']\n          // and renders it with toolOutput data from the platform context.\n\n          // Build the component payload with transpiled code\n          const componentPayload = scope.toolUI.buildHybridComponentPayload({\n            toolName: tool.metadata.name,\n            template: tool.metadata.ui.template,\n            uiConfig: tool.metadata.ui,\n          });\n\n          // Return structured data as JSON text content\n          result.content = [\n            {\n              type: 'text',\n              text: safeStringify(rawOutput),\n            },\n          ];\n\n          // Add component payload to _meta for the hybrid shell's dynamic renderer\n          if (componentPayload) {\n            result._meta = {\n              ...result._meta,\n              'ui/component': componentPayload,\n              'ui/type': componentPayload.type,\n            };\n          }\n\n          this.logger.verbose('finalize: UI using hybrid mode (structured data + component)', {\n            tool: tool.metadata.name,\n            platform: platformType,\n            hasComponent: !!componentPayload,\n            componentType: componentPayload?.type,\n            componentHash: componentPayload?.hash,\n            outputKeys:\n              rawOutput && typeof rawOutput === 'object' && !Array.isArray(rawOutput) ? Object.keys(rawOutput) : [],\n          });\n        } else {\n          // For inline mode (default): render HTML with data embedded in each response\n          // Use async version to support React component templates via SSR\n          const uiResult = await scope.toolUI.renderAndRegisterAsync({\n            toolName: tool.metadata.name,\n            requestId,\n            input:\n              input?.arguments && typeof input.arguments === 'object' && !Array.isArray(input.arguments)\n                ? (input.arguments as Record<string, unknown>)\n                : {},\n            output: rawOutput,\n            structuredContent: result.structuredContent,\n            uiConfig: tool.metadata.ui,\n            platformType,\n          });\n\n          // Merge UI metadata into result._meta\n          result._meta = {\n            ...result._meta,\n            ...uiResult.meta,\n          };\n\n          // For platforms that support widgets (OpenAI, ext-apps), clear content since widget displays data\n          // For Claude and other platforms, keep the text content as they don't support _meta UI fields\n          const supportsWidgets = platformType === 'openai' || platformType === 'ext-apps';\n\n          if (supportsWidgets) {\n            // Clear content - widget will display from _meta['ui/html']\n            result.content = [];\n          } else {\n            // For Claude and other platforms without widget support:\n            // Return JSON data + HTML template as artifact hint\n            const htmlContent = uiResult?.meta?.['ui/html'];\n\n            if (htmlContent) {\n              // Include HTML template as artifact hint for Claude\n              // Claude can use this to create an HTML artifact for visual display\n              result.content = [\n                {\n                  type: 'text',\n                  text: `## Data\\n\\`\\`\\`json\\n${safeStringify(\n                    rawOutput,\n                    2,\n                  )}\\n\\`\\`\\`\\n\\n## Visual Template (for artifact rendering)\\n\\`\\`\\`html\\n${htmlContent}\\n\\`\\`\\``,\n                },\n              ];\n            } else {\n              // Fallback: JSON only\n              result.content = [\n                {\n                  type: 'text',\n                  text: safeStringify(rawOutput, 2),\n                },\n              ];\n            }\n          }\n\n          this.logger.verbose('finalize: UI metadata added (inline mode)', {\n            tool: tool.metadata.name,\n            platform: platformType,\n            supportsWidgets,\n            contentCleared: supportsWidgets,\n            htmlHintIncluded: !supportsWidgets && !!uiResult?.meta?.['ui/html'],\n          });\n        }\n      } catch (error) {\n        // UI rendering failure should not fail the tool call\n        // Log with full context to help debugging\n        const errorMessage = error instanceof Error ? error.message : String(error);\n        const errorStack = error instanceof Error ? error.stack : undefined;\n        const uiConfig = tool.metadata.ui;\n\n        this.logger.error('finalize: UI rendering failed', {\n          tool: tool.metadata.name,\n          error: errorMessage,\n          stack: errorStack,\n          templateType: uiConfig?.template\n            ? typeof uiConfig.template === 'function'\n              ? 'react-component'\n              : typeof uiConfig.template === 'string'\n              ? uiConfig.template.endsWith('.tsx') || uiConfig.template.endsWith('.jsx')\n                ? 'react-file'\n                : 'html-file'\n              : 'unknown'\n            : 'none',\n          hasStructuredContent: result.structuredContent !== undefined,\n          structuredContentKeys:\n            result.structuredContent &&\n            typeof result.structuredContent === 'object' &&\n            result.structuredContent !== null &&\n            !Array.isArray(result.structuredContent)\n              ? Object.keys(result.structuredContent)\n              : [],\n        });\n\n        // In debug mode, also log to console for immediate visibility\n        if (process.env['DEBUG'] || process.env['NODE_ENV'] === 'development') {\n          console.error('[FrontMCP] UI Rendering Error:', {\n            tool: tool.metadata.name,\n            error: errorMessage,\n            stack: errorStack,\n          });\n        }\n      }\n    }\n\n    // Log the final result being sent\n    this.logger.info('finalize: sending response', {\n      tool: tool.metadata.name,\n      hasContent: Array.isArray(result.content) && result.content.length > 0,\n      contentLength: Array.isArray(result.content) ? result.content.length : 0,\n      hasStructuredContent: result.structuredContent !== undefined,\n      hasMeta: result._meta !== undefined,\n      metaKeys: result._meta ? Object.keys(result._meta) : [],\n      isError: result.isError,\n    });\n\n    // Respond with the properly formatted MCP result\n    this.respond(result);\n    this.logger.verbose('finalize:done');\n  }\n}\n"]}