@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/core/mcp/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../src/core/mcp/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAGtH,OAAO,EACN,2BAA2B,EAE3B,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,GACvB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAkC7D,SAAS,UAAU,CAAC,KAAa,EAAU;IAC1C,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAAA,CACzC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,SAAS,GAAG,GAAG,EAAU;IACxE,MAAM,UAAU,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC;AAAA,CAChG;AAED,SAAS,cAAc,CAAC,KAAsB,EAA2B;IACxE,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC,SAAS,CAAC;IACxB,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAY,CAAC;QAC1D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,MAAiC,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,CAAC;AAAA,CACV;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,KAAa,EAAU;IACxE,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,SAAS,UAAU,GAAW;IAC7B,OAAO,WAAW,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;AAAA,CACnD;AAED,SAAS,gBAAgB,CAAC,GAA+B,EAAoB;IAC5E,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACzC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACvC,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5E;AAED,SAAS,eAAe,CAAC,QAAuC,EAAE,QAAgB,EAAW;IAC5F,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,QAAQ,CAAC;AAAA,CAC1C;AAED,SAAS,mBAAmB,CAC3B,iBAAqC,EACrC,mBAA4B,EAC5B,QAAgB,EACN;IACV,IAAI,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtC,OAAO,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,iBAAiB,IAAI,mBAAmB,CAAC;AAAA,CAChD;AAED,SAAS,aAAa,CACrB,QAAgB,EAChB,QAA2B,EAC3B,MAA+B,EAC/B,mBAA4B,EAC5B,KAAc,EACK;IACnB,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,KAAK;QACL,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,WAAW,EAAE,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC;KAC/E,CAAC,CAAC,CAAC;AAAA,CACJ;AAED,SAAS,iBAAiB,CAAC,IAAa,EAAsB;IAC7D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC,IAAI,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC;QACrF,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,eAAe,QAAQ,KAAK,IAAI,CAAC,MAAM,gBAAgB,CAAC;IAChE,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC;QACrF,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,eAAe,QAAQ,KAAK,IAAI,CAAC,MAAM,gBAAgB,CAAC;IAChE,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;QACzE,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvC,OAAO,iBAAiB,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClD,CAAC;QACD,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvC,OAAO,wBAAwB,GAAG,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM,gBAAgB,CAAC;QAC7E,CAAC;IACF,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;QACpE,OAAO,uBAAuB,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;IAC9D,CAAC;IACD,OAAO,6BAA6B,IAAI,CAAC,IAAI,GAAG,CAAC;AAAA,CACjD;AAED,SAAS,oBAAoB,CAAC,MAAsB,EAAU;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACzG,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,sBAAsB,CAAC;AAAA,CAC3D;AAED,SAAS,wBAAwB,CAAC,MAA0B,EAAU;IACrE,OAAO,MAAM,CAAC,QAAQ;SACpB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACjB,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;YACvB,OAAO,IAAI,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,GAAG,YAAY,OAAO,CAAC,IAAI,CAAC,MAAM,eAAe,CAAC;IAAA,CACrE,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,CAAC;AAAA,CACf;AAED,SAAS,qBAAqB,CAAC,MAAuB,EAAU;IAC/D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AAAA,CACjC;AAED,MAAM,OAAO,UAAU;IACd,MAAM,CAAoB;IAC1B,WAAW,CAAmC;IAC9C,aAAa,CAAmB;IAChC,WAAW,CAAiB;IAC5B,WAAW,CAA6B;IACxC,YAAY,CAA8B;IAC1C,UAAU,CAA4B;IACtC,iBAAiB,GAA2C,IAAI,GAAG,EAAE,CAAC;IACtE,SAAS,CAAqB;IAC9B,WAAW,CAAqB;IAChC,cAAc,GAAiC,IAAI,GAAG,EAAE,CAAC;IAEjE,YAAY,OAA0B,EAAE;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAClD,MAAM,CAAC,EAAE;YACT,IAAI,mBAAmB,CAAC;gBACvB,MAAM;gBACN,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,cAAc,EAAE,CAAC,UAAU,EAAE,EAAE,CAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC;aAClF,CAAC;SACF,CAAC,CACF,CAAC;IAAA,CACF;IAED,0EAA0E;IAC1E,SAAS,CAAC,QAAiC,EAAc;QACxD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,OAAO,GAAG,EAAE,CAAC;YACZ,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAA,CACrC,CAAC;IAAA,CACF;IAEO,IAAI,CAAC,KAAsB,EAAQ;QAC1C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACJ,QAAQ,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACR,qDAAqD;YACtD,CAAC;QACF,CAAC;IAAA,CACD;IAEO,cAAc,CAAC,QAAgB,EAAE,MAAc,EAAE,OAAgB,EAAQ;QAChF,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,iBAAiB;YACvB,QAAQ;YACR,MAAM;YACN,SAAS,EAAE,UAAU,EAAE,SAAS,IAAI,MAAM;YAC1C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC,CAAC;IAAA,CACH;IAED,SAAS,GAAY;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAAA,CACnF;IAED,cAAc,GAAG;QAChB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAAA,CACpC;IAED,WAAW,GAAuB;QACjC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;IAAA,CACtF;IAED,SAAS,CAAC,EAAU,EAAoB;QACvC,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IAAA,CAC3C;IAED,uBAAuB,GAA6B;QACnD,MAAM,UAAU,GAA6B,EAAE,CAAC;QAChD,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAChC,SAAS;YACV,CAAC;YACD,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,CAAC;YAC3C,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACvE,SAAS;YACV,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACnC,IACC,CAAC,wBAAwB,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;oBACvD,CAAC,mBAAmB,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,EAC/F,CAAC;oBACF,SAAS;gBACV,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC;oBACf,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE;oBAC5B,IAAI;oBACJ,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC;oBAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;oBACnC,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,cAAc,EAAE,oBAAoB,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;iBACrE,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QACD,OAAO,UAAU,CAAC;IAAA,CAClB;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAoB,EAAiB;QAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACzD,CAAC,UAAU,EAAE,EAAE,CACd,UAAU,CAAC,MAAM,CAAC,OAAO;YACzB,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,SAAS,KAAK,YAAY,CAAC,CAC1F,CAAC;QACF,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAAA,CACxF;IAED,KAAK,CAAC,OAAO,GAAkB;QAC9B,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAAA,CACzG;IAED,KAAK,CAAC,kBAAkB,CACvB,KAAsB,EACtB,OAAmC,EACnC,MAAoB,EACD;QACnB,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,QAAQ;gBACZ,OAAO;oBACN,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE;oBACzB,WAAW,EAAE,IAAI,CAAC,cAAc,EAAE;oBAClC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE;iBAC3B,CAAC;YACH,KAAK,cAAc;gBAClB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAChE,KAAK,QAAQ;gBACZ,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACpD,KAAK,UAAU;gBACd,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;YACxG,KAAK,SAAS;gBACb,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1E,KAAK,YAAY;gBAChB,OAAO,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YACrE,KAAK,aAAa;gBACjB,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACpD,CAAC;gBACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACpF,KAAK,MAAM;gBACV,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;oBAChB,OAAO,IAAI,CAAC,yBAAyB,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;wBAC5E,WAAW,EAAE,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC;wBAC5D,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;qBAClB,CAAC,CAAC;gBACJ,CAAC;gBACD,OAAO,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;oBAClE,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;iBAC9B,CAAC,CAAC;YACJ,KAAK,WAAW;gBACf,OAAO,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YACnE,KAAK,aAAa;gBACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YACrE,KAAK,QAAQ;gBACZ,OAAO,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YACjE,KAAK,YAAY;gBAChB,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;YACtE,KAAK,MAAM;gBACV,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC9C,KAAK,gBAAgB;gBACpB,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACxF,KAAK,eAAe;gBACnB,OAAO,IAAI,CAAC,YAAY,CACvB,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EACrC,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,EAC/C,OAAO,EACP,MAAM,CACN,CAAC;YACH,KAAK,cAAc;gBAClB,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACtF,KAAK,YAAY;gBAChB,OAAO,IAAI,CAAC,SAAS,CACpB,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EACrC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EACrC,KAAK,EACL,OAAO,EACP,MAAM,CACN,CAAC;YACH,KAAK,YAAY;gBAChB,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACjF,CAAC;IAAA,CACD;IAED,KAAK,CAAC,aAAa,CAClB,QAAgB,EAChB,MAAoB,EACuC;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC;IAAA,CAC9D;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAA+D;QACrG,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC;IAAA,CACjE;IAED,KAAK,CAAC,gBAAgB,CACrB,QAAgB,EAChB,OAAgB,EAC4F;QAC5G,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjF,MAAM,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC;IAAA,CAC7E;IAED,KAAK,CAAC,eAAe,CACpB,QAAgB,EAChB,OAAO,GAA0D,EAAE,EAChD;QACnB,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,SAAS,CAAC;QACvE,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,uBAAuB,CAAC;gBACzD,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,KAAK,EAAE,IAAI,CAAC,UAAU;aACtB,CAAC,CAAC;YACH,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,UAAU,CAAC,gBAAgB,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,kBAAkB;gBACxB,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE;gBAC9B,IAAI,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,eAAe,EAAE,MAAM,CAAC,eAAe;oBACvC,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtG,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;iBACvB;aACD,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QACf,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC;YAC7C,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,IAAI,CAAC,UAAU;YACtB,WAAW;SACX,CAAC,CAAC;QACH,UAAU,CAAC,gBAAgB,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,kBAAkB;gBACxB,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE;gBAC9B,IAAI,EAAE;oBACL,IAAI,EAAE,SAAS;oBACf,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjF,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;iBACvB;aACD,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,MAAM,CAAC;IAAA,CACd;IAED,KAAK,CAAC,yBAAyB,CAC9B,QAAgB,EAChB,OAA8D,EAC3C;QACnB,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC;YAChD,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,IAAI,CAAC,UAAU;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;SACpB,CAAC,CAAC;QACH,UAAU,CAAC,gBAAgB,EAAE,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC;IAAA,CACd;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAoB;QACxD,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,sBAAsB,CAAC;YACrE,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,IAAI,CAAC,UAAU;YACtB,OAAO;SACP,CAAC,CAAC;QACH,IAAI,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QACD,UAAU,CAAC,gBAAgB,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,MAAM,CAAC;IAAA,CACd;IAED,gBAAgB,CAAC,QAAgB,EAA4E;QAC5G,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,EAAE,2BAA2B,CAAC,CAAC;QACxE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IAAA,CACvG;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB,EAKhC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxC,UAAU,CAAC,gBAAgB,EAAE,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QACxD,OAAO;YACN,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,UAAU,CAAC,UAAU,EAAE;SACtC,CAAC;IAAA,CACF;IAED,KAAK,CAAC,SAAS,CACd,QAAgB,EAChB,MAAoB,EAOlB;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QACxG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACvF,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACnE,OAAO;YACN,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE;YAC5B,KAAK,EAAE,aAAa,CACnB,UAAU,CAAC,MAAM,CAAC,EAAE,EACpB,QAAQ,EACR,UAAU,CAAC,MAAM,EACjB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAChC,KAAK,CACL;YACD,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,KAAK;SACL,CAAC;IAAA,CACF;IAED,MAAM,CACL,KAAa,EACb,KAAc,EACuE;QACrF,MAAM,aAAa,GAAwB,EAAE,CAAC;QAC9C,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,CAAC;YAC3C,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACvE,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC1C,SAAS;YACV,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,OAAO,GAAG,iBAAiB,CAAC;YACjC,KAAK;YACL,KAAK;YACL,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,QAAQ,EAAE,aAAa;SACvB,CAAC,CAAC;QACH,OAAO;YACN,MAAM,EAAE,QAAQ;YAChB,KAAK;YACL,OAAO;YACP,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;gBAC5B,CAAC,CAAC;oBACA,OAAO,EAAE;wBACR,iCAAiC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,kCAAkC;qBAC5F;iBACD;gBACF,CAAC,CAAC,EAAE,CAAC;SACN,CAAC;IAAA,CACF;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,QAAgB,EAAE,MAAoB,EAAoB;QAC1F,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QACxG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO;gBACN,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,kBAAkB;gBAC1B,OAAO,EAAE,0BAA0B,QAAQ,2CAA2C,QAAQ,YAAY;aAC1G,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,0CAA0C,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO;YACN,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;YACnC,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;YACnC,YAAY,EAAE,QAAQ,CAAC,YAAY;SACnC,CAAC;IAAA,CACF;IAED,KAAK,CAAC,aAAa,CAClB,QAAgB,EAChB,MAA0B,EAC1B,MAAoB,EAC0F;QAC9G,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChF,OAAO;YACN,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC9C,MAAM,EAAE,QAAQ;gBAChB,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW,EAAE,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC9C,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;aACnB,CAAC,CAAC;YACH,UAAU,EAAE,MAAM,CAAC,UAAU;SAC7B,CAAC;IAAA,CACF;IAED,KAAK,CAAC,YAAY,CACjB,QAAgB,EAChB,GAAW,EACX,OAAmC,EACnC,MAAoB,EACD;QACnB,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC5E,MAAM,IAAI,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,IAAI,CAAC,UAAU,CAAC;gBACrB,aAAa,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACxC,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC;gBAC5B,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE;aACzB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACnF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,UAAU,CAAC;gBACrB,aAAa,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACxC,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;gBAChD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACb,CAAC;IAAA,CACD;IAED,KAAK,CAAC,WAAW,CAChB,QAAgB,EAChB,MAA0B,EAC1B,MAAoB,EACoF;QACxG,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9E,OAAO;YACN,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACxC,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC5C,SAAS,EAAE,MAAM,CAAC,SAAS;aAC3B,CAAC,CAAC;YACH,UAAU,EAAE,MAAM,CAAC,UAAU;SAC7B,CAAC;IAAA,CACF;IAED,KAAK,CAAC,SAAS,CACd,QAAgB,EAChB,IAAY,EACZ,KAAsB,EACtB,OAAmC,EACnC,MAAoB,EACD;QACnB,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAChF,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,IAAI,CAAC,UAAU,CAAC;gBACrB,aAAa,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACxC,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC;gBAC5B,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE;gBACzB,SAAS,EAAE,IAAI;aACf,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,UAAU,CAAC;gBACrB,aAAa,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACxC,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;gBAChD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACb,CAAC;IAAA,CACD;IAED,KAAK,CAAC,SAAS,CACd,OAAe,EACf,KAAgD,EAChD,OAAmC,EAChB;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpD,MAAM,IAAI,CAAC,UAAU,CAAC;gBACrB,aAAa,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACxC,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;gBACrC,OAAO;aACP,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,KAAK,EAAE,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,UAAU,CAAC;gBACrB,aAAa,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACxC,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,OAAO;gBACP,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACb,CAAC;IAAA,CACD;IAED,KAAK,CAAC,QAAQ,CACb,KAAsB,EACtB,OAAmC,EACnC,MAAoB,EACY;QAChC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,MAAM,GAAwB,WAAW,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE;gBACL,EAAE,EAAE,MAAM;gBACV,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;gBAC5C,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,MAAM,EAAE,SAAS;aACjB;SACD,CAAC,CAAC;QACH,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC7E,IAAI,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACtD,QAAQ;aACR,CAAC,CACF,CAAC;YACF,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;YACjD,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG;gBACd,EAAE,EAAE,MAAM;gBACV,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;gBAC5C,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,MAAM;gBACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,WAAW;gBACX,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,IAAI,KAAK;aAChD,CAAC;YACF,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,MAAM;gBACZ,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrD,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC;gBACrB,aAAa,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACxC,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,MAAM;gBACZ,IAAI;gBACJ,MAAM;gBACN,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,WAAW;gBACvB,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE;gBACzB,SAAS,EAAE,IAAI;aACf,CAAC,CAAC;YACH,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW;gBAC/C,IAAI;gBACJ,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;YAClD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,MAAM,MAAM,GAAG;gBACd,EAAE,EAAE,MAAM;gBACV,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;gBAC5C,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,MAAM;gBACN,UAAU;aACV,CAAC;YACF,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,MAAM,IAAI,CAAC,UAAU,CAAC;gBACrB,aAAa,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACxC,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,MAAM;gBACZ,IAAI;gBACJ,MAAM;gBACN,UAAU;gBACV,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACb,CAAC;IAAA,CACD;IAEO,yBAAyB,CAChC,UAA+B,EAC/B,QAAuC,EAC7B;QACV,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,mBAAmB,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAChF,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,eAAe,CAAC,QAAQ,EAAE,kBAAkB,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IAAA,CACzG;IAEO,KAAK,CAAC,gBAAgB,CAAC,UAA+B,EAAE,MAAoB,EAA8B;QACjH,MAAM,MAAM,GAAG,UAAU,CAAC,cAAc,CAAC;QACzC,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,MAAM,CAAC;QACf,CAAC;QACD,OAAO,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAAA,CAC1C;IAEO,aAAa,CAAC,QAAgB,EAAuB;QAC5D,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtF,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,UAAU,CAAC;IAAA,CAClB;IAEO,sBAAsB,CAAC,QAAgB,EAAuB;QACrE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,UAAU,CAAC;IAAA,CAClB;IAEO,KAAK,CAAC,UAAU,CAAC,KAYxB,EAAiB;QACjB,MAAM,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC;YAC7B,GAAG,KAAK;YACR,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;SACzB,CAAC,CAAC;IAAA,CACH;CACD","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport type { CallToolResult, GetPromptResult, ReadResourceResult } from \"@modelcontextprotocol/sdk/types.js\";\nimport type { McpAuditLogger } from \"./audit.ts\";\nimport { getMcpDirectToolName, getServerTimeoutMs, hashMcpServerConfig, serverMatchesToolFilters } from \"./config.ts\";\nimport type { McpConfigWriter } from \"./config-writer.ts\";\nimport type { McpMetadataCache } from \"./metadata-cache.ts\";\nimport {\n\tcompleteMcpOAuthBrowserAuth,\n\ttype McpOAuthPendingDeviceFlow,\n\tpollMcpOAuthDeviceAuth,\n\tstartMcpOAuthBrowserAuth,\n\tstartMcpOAuthDeviceAuth,\n} from \"./oauth-flow.ts\";\nimport type { McpOAuthStore } from \"./oauth-store.ts\";\nimport type { McpOutputStore } from \"./output-store.ts\";\nimport { classifyMcpToolRisk } from \"./safety.ts\";\nimport { searchMcpMetadata } from \"./search.ts\";\nimport { McpServerSupervisor } from \"./server-supervisor.ts\";\nimport type {\n\tMcpCallerSurface,\n\tMcpClientFactory,\n\tMcpDirectToolCandidate,\n\tMcpGatewayCallResult,\n\tMcpGatewayExecutionContext,\n\tMcpGatewayInput,\n\tMcpManagerEvent,\n\tMcpManagerEventListener,\n\tMcpPromptSummary,\n\tMcpRecentCallStatus,\n\tMcpResolvedConfig,\n\tMcpResolvedServerConfig,\n\tMcpResourceSummary,\n\tMcpRisk,\n\tMcpSearchMatch,\n\tMcpServerMetadata,\n\tMcpServerSummary,\n\tMcpToolSummary,\n} from \"./types.ts\";\n\nexport interface McpManagerOptions {\n\tconfig: McpResolvedConfig;\n\tclientFactory: McpClientFactory;\n\tmetadataCache: McpMetadataCache;\n\toutputStore: McpOutputStore;\n\tauditLogger?: McpAuditLogger;\n\tconfigWriter?: McpConfigWriter;\n\toauthStore?: McpOAuthStore;\n\tsessionId?: string;\n\tworkspaceId?: string;\n}\n\nfunction byteLength(value: string): number {\n\treturn Buffer.byteLength(value, \"utf-8\");\n}\n\nfunction compactText(value: string | undefined, maxLength = 220): string {\n\tconst normalized = (value ?? \"\").replace(/\\s+/g, \" \").trim();\n\tif (!normalized) {\n\t\treturn \"\";\n\t}\n\treturn normalized.length <= maxLength ? normalized : `${normalized.slice(0, maxLength - 3)}...`;\n}\n\nfunction parseArguments(input: McpGatewayInput): Record<string, unknown> {\n\tif (input.arguments !== undefined) {\n\t\treturn input.arguments;\n\t}\n\tif (input.argumentsJson !== undefined) {\n\t\tconst parsed = JSON.parse(input.argumentsJson) as unknown;\n\t\tif (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n\t\t\tthrow new Error(\"MCP argumentsJson must parse to an object\");\n\t\t}\n\t\treturn parsed as Record<string, unknown>;\n\t}\n\treturn {};\n}\n\nfunction requireString(value: string | undefined, label: string): string {\n\tconst trimmed = value?.trim();\n\tif (!trimmed) {\n\t\tthrow new Error(`MCP ${label} is required`);\n\t}\n\treturn trimmed;\n}\n\nfunction makeCallId(): string {\n\treturn `mcpcall_${randomUUID().replace(/-/g, \"\")}`;\n}\n\nfunction getCallerSurface(ctx: McpGatewayExecutionContext): McpCallerSurface {\n\tif (ctx.mode === \"tui\") return \"tui\";\n\tif (ctx.mode === \"rpc\") return \"rpc\";\n\tif (ctx.mode === \"print\") return \"print\";\n\tif (ctx.mode === \"json\") return \"json\";\n\treturn \"unknown\";\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isMetadataStale(metadata: McpServerMetadata | undefined, maxAgeMs: number): boolean {\n\tif (!metadata) {\n\t\treturn true;\n\t}\n\tconst lastSeenAt = Date.parse(metadata.lastSeenAt);\n\tif (!Number.isFinite(lastSeenAt)) {\n\t\treturn true;\n\t}\n\treturn Date.now() - lastSeenAt > maxAgeMs;\n}\n\nfunction isDirectToolEnabled(\n\tserverDirectTools: boolean | string[],\n\tsettingsDirectTools: boolean,\n\ttoolName: string,\n): boolean {\n\tif (Array.isArray(serverDirectTools)) {\n\t\treturn serverDirectTools.includes(toolName);\n\t}\n\treturn serverDirectTools || settingsDirectTools;\n}\n\nfunction toToolSummary(\n\tserverId: string,\n\tmetadata: McpServerMetadata,\n\tserver: McpResolvedServerConfig,\n\tsettingsDirectTools: boolean,\n\tstale: boolean,\n): McpToolSummary[] {\n\treturn metadata.tools.map((tool) => ({\n\t\tserver: serverId,\n\t\tname: tool.name,\n\t\t...(tool.title ? { title: tool.title } : {}),\n\t\t...(tool.description ? { description: compactText(tool.description, 800) } : {}),\n\t\trisk: classifyMcpToolRisk(tool),\n\t\tinputSchema: tool.inputSchema,\n\t\t...(tool.outputSchema ? { outputSchema: tool.outputSchema } : {}),\n\t\t...(tool.annotations ? { annotations: tool.annotations } : {}),\n\t\tmetadataHash: metadata.metadataHash,\n\t\tlastSeenAt: metadata.lastSeenAt,\n\t\tstale,\n\t\tdirect: isDirectToolEnabled(server.directTools, settingsDirectTools, tool.name),\n\t}));\n}\n\nfunction contentPartToText(part: unknown): string | undefined {\n\tif (!isRecord(part) || typeof part.type !== \"string\") {\n\t\treturn undefined;\n\t}\n\tif (part.type === \"text\" && typeof part.text === \"string\") {\n\t\treturn part.text;\n\t}\n\tif (part.type === \"image\") {\n\t\tconst mimeType = typeof part.mimeType === \"string\" ? part.mimeType : \"image/unknown\";\n\t\tconst data = typeof part.data === \"string\" ? part.data : \"\";\n\t\treturn `[MCP image: ${mimeType}, ${data.length} base64 chars]`;\n\t}\n\tif (part.type === \"audio\") {\n\t\tconst mimeType = typeof part.mimeType === \"string\" ? part.mimeType : \"audio/unknown\";\n\t\tconst data = typeof part.data === \"string\" ? part.data : \"\";\n\t\treturn `[MCP audio: ${mimeType}, ${data.length} base64 chars]`;\n\t}\n\tif (part.type === \"resource\" && isRecord(part.resource)) {\n\t\tconst resource = part.resource;\n\t\tconst uri = typeof resource.uri === \"string\" ? resource.uri : \"resource\";\n\t\tif (typeof resource.text === \"string\") {\n\t\t\treturn `[MCP resource ${uri}]\\n${resource.text}`;\n\t\t}\n\t\tif (typeof resource.blob === \"string\") {\n\t\t\treturn `[MCP binary resource ${uri}: ${resource.blob.length} base64 chars]`;\n\t\t}\n\t}\n\tif (part.type === \"resource_link\") {\n\t\tconst uri = typeof part.uri === \"string\" ? part.uri : \"\";\n\t\tconst name = typeof part.name === \"string\" ? part.name : \"resource\";\n\t\treturn `[MCP resource link: ${name}${uri ? ` ${uri}` : \"\"}]`;\n\t}\n\treturn `[Unsupported MCP content: ${part.type}]`;\n}\n\nfunction callToolResultToText(result: CallToolResult): string {\n\tconst parts = result.content.map(contentPartToText).filter((part): part is string => part !== undefined);\n\tif (result.structuredContent !== undefined) {\n\t\tparts.push(`Structured content:\\n${JSON.stringify(result.structuredContent, null, 2)}`);\n\t}\n\treturn parts.join(\"\\n\\n\").trim() || \"(no MCP tool output)\";\n}\n\nfunction readResourceResultToText(result: ReadResourceResult): string {\n\treturn result.contents\n\t\t.map((content) => {\n\t\t\tif (\"text\" in content) {\n\t\t\t\treturn `[${content.uri}]\\n${content.text}`;\n\t\t\t}\n\t\t\treturn `[${content.uri}] binary ${content.blob.length} base64 chars`;\n\t\t})\n\t\t.join(\"\\n\\n\");\n}\n\nfunction getPromptResultToText(result: GetPromptResult): string {\n\tconst lines: string[] = [];\n\tif (result.description) {\n\t\tlines.push(result.description);\n\t}\n\tfor (const message of result.messages) {\n\t\tlines.push(`## ${message.role}`);\n\t\tconst content = message.content;\n\t\tconst text = contentPartToText(content);\n\t\tlines.push(text ?? JSON.stringify(content));\n\t}\n\treturn lines.join(\"\\n\\n\").trim();\n}\n\nexport class McpManager {\n\tprivate config: McpResolvedConfig;\n\tprivate supervisors: Map<string, McpServerSupervisor>;\n\tprivate metadataCache: McpMetadataCache;\n\tprivate outputStore: McpOutputStore;\n\tprivate auditLogger: McpAuditLogger | undefined;\n\tprivate configWriter: McpConfigWriter | undefined;\n\tprivate oauthStore: McpOAuthStore | undefined;\n\tprivate pendingDeviceAuth: Map<string, McpOAuthPendingDeviceFlow> = new Map();\n\tprivate sessionId: string | undefined;\n\tprivate workspaceId: string | undefined;\n\tprivate eventListeners: Set<McpManagerEventListener> = new Set();\n\n\tconstructor(options: McpManagerOptions) {\n\t\tthis.config = options.config;\n\t\tthis.metadataCache = options.metadataCache;\n\t\tthis.outputStore = options.outputStore;\n\t\tthis.auditLogger = options.auditLogger;\n\t\tthis.configWriter = options.configWriter;\n\t\tthis.oauthStore = options.oauthStore;\n\t\tthis.sessionId = options.sessionId;\n\t\tthis.workspaceId = options.workspaceId;\n\t\tthis.supervisors = new Map(\n\t\t\tObject.values(this.config.servers).map((server) => [\n\t\t\t\tserver.id,\n\t\t\t\tnew McpServerSupervisor({\n\t\t\t\t\tserver,\n\t\t\t\t\tsettings: this.config.settings,\n\t\t\t\t\tclientFactory: options.clientFactory,\n\t\t\t\t\tmetadataCache: this.metadataCache,\n\t\t\t\t\toauthStore: this.oauthStore,\n\t\t\t\t\tonStateChanged: (supervisor) =>\n\t\t\t\t\t\tthis.emit({ type: \"mcp_server_status_changed\", server: supervisor.getSummary() }),\n\t\t\t\t}),\n\t\t\t]),\n\t\t);\n\t}\n\n\t/** Subscribe to MCP lifecycle events. Returns an unsubscribe function. */\n\tsubscribe(listener: McpManagerEventListener): () => void {\n\t\tthis.eventListeners.add(listener);\n\t\treturn () => {\n\t\t\tthis.eventListeners.delete(listener);\n\t\t};\n\t}\n\n\tprivate emit(event: McpManagerEvent): void {\n\t\tfor (const listener of this.eventListeners) {\n\t\t\ttry {\n\t\t\t\tlistener(event);\n\t\t\t} catch {\n\t\t\t\t// Listener failures must never break MCP operations.\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate emitAuthUpdate(serverId: string, status: string, message?: string): void {\n\t\tconst supervisor = this.supervisors.get(serverId);\n\t\tthis.emit({\n\t\t\ttype: \"mcp_auth_update\",\n\t\t\tserverId,\n\t\t\tstatus,\n\t\t\tauthState: supervisor?.authState ?? \"none\",\n\t\t\t...(message ? { message } : {}),\n\t\t\t...(supervisor ? { server: supervisor.getSummary() } : {}),\n\t\t});\n\t}\n\n\tisEnabled(): boolean {\n\t\treturn this.config.settings.enabled && Object.keys(this.config.servers).length > 0;\n\t}\n\n\tgetDiagnostics() {\n\t\treturn [...this.config.diagnostics];\n\t}\n\n\tlistServers(): McpServerSummary[] {\n\t\treturn Array.from(this.supervisors.values(), (supervisor) => supervisor.getSummary());\n\t}\n\n\tgetServer(id: string): McpServerSummary {\n\t\treturn this.getSupervisor(id).getSummary();\n\t}\n\n\tgetDirectToolCandidates(): McpDirectToolCandidate[] {\n\t\tconst candidates: McpDirectToolCandidate[] = [];\n\t\tfor (const supervisor of this.supervisors.values()) {\n\t\t\tif (!supervisor.server.enabled) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst metadata = supervisor.cachedMetadata;\n\t\t\tif (!metadata || this.isSupervisorMetadataStale(supervisor, metadata)) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tfor (const tool of metadata.tools) {\n\t\t\t\tif (\n\t\t\t\t\t!serverMatchesToolFilters(supervisor.server, tool.name) ||\n\t\t\t\t\t!isDirectToolEnabled(supervisor.server.directTools, this.config.settings.directTools, tool.name)\n\t\t\t\t) {\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tcandidates.push({\n\t\t\t\t\tserver: supervisor.server.id,\n\t\t\t\t\ttool,\n\t\t\t\t\trisk: classifyMcpToolRisk(tool),\n\t\t\t\t\tmetadataHash: metadata.metadataHash,\n\t\t\t\t\tlastSeenAt: metadata.lastSeenAt,\n\t\t\t\t\tdirectToolName: getMcpDirectToolName(supervisor.server.id, tool.name),\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t\treturn candidates;\n\t}\n\n\tasync startEagerServers(signal?: AbortSignal): Promise<void> {\n\t\tconst eager = Array.from(this.supervisors.values()).filter(\n\t\t\t(supervisor) =>\n\t\t\t\tsupervisor.server.enabled &&\n\t\t\t\t(supervisor.server.lifecycle === \"eager\" || supervisor.server.lifecycle === \"keep-alive\"),\n\t\t);\n\t\tawait Promise.allSettled(eager.map((supervisor) => supervisor.refreshMetadata(signal)));\n\t}\n\n\tasync dispose(): Promise<void> {\n\t\tawait Promise.allSettled(Array.from(this.supervisors.values(), (supervisor) => supervisor.disconnect()));\n\t}\n\n\tasync handleGatewayInput(\n\t\tinput: McpGatewayInput,\n\t\tcontext: McpGatewayExecutionContext,\n\t\tsignal?: AbortSignal,\n\t): Promise<unknown> {\n\t\tswitch (input.action) {\n\t\t\tcase \"status\":\n\t\t\t\treturn {\n\t\t\t\t\taction: \"status\",\n\t\t\t\t\tenabled: this.isEnabled(),\n\t\t\t\t\tdiagnostics: this.getDiagnostics(),\n\t\t\t\t\tservers: this.listServers(),\n\t\t\t\t};\n\t\t\tcase \"list_servers\":\n\t\t\t\treturn { action: \"list_servers\", servers: this.listServers() };\n\t\t\tcase \"search\":\n\t\t\t\treturn this.search(input.query ?? \"\", input.limit);\n\t\t\tcase \"describe\":\n\t\t\t\treturn this.describe(requireString(input.server, \"server\"), requireString(input.tool, \"tool\"), signal);\n\t\t\tcase \"connect\":\n\t\t\t\treturn this.connectServer(requireString(input.server, \"server\"), signal);\n\t\t\tcase \"disconnect\":\n\t\t\t\treturn this.disconnectServer(requireString(input.server, \"server\"));\n\t\t\tcase \"set_enabled\":\n\t\t\t\tif (typeof input.enabled !== \"boolean\") {\n\t\t\t\t\tthrow new Error(\"MCP enabled boolean is required\");\n\t\t\t\t}\n\t\t\t\treturn this.setServerEnabled(requireString(input.server, \"server\"), input.enabled);\n\t\t\tcase \"auth\":\n\t\t\t\tif (input.code) {\n\t\t\t\t\treturn this.completeServerBrowserAuth(requireString(input.server, \"server\"), {\n\t\t\t\t\t\tredirectUrl: requireString(input.redirectUrl, \"redirectUrl\"),\n\t\t\t\t\t\tcode: input.code,\n\t\t\t\t\t\tstate: input.state,\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\treturn this.startServerAuth(requireString(input.server, \"server\"), {\n\t\t\t\t\tflow: input.flow,\n\t\t\t\t\tredirectUrl: input.redirectUrl,\n\t\t\t\t});\n\t\t\tcase \"poll_auth\":\n\t\t\t\treturn this.pollServerAuth(requireString(input.server, \"server\"));\n\t\t\tcase \"cancel_auth\":\n\t\t\t\treturn this.cancelServerAuth(requireString(input.server, \"server\"));\n\t\t\tcase \"logout\":\n\t\t\t\treturn this.logoutServer(requireString(input.server, \"server\"));\n\t\t\tcase \"list_tools\":\n\t\t\t\treturn this.listTools(requireString(input.server, \"server\"), signal);\n\t\t\tcase \"call\":\n\t\t\t\treturn this.callTool(input, context, signal);\n\t\t\tcase \"list_resources\":\n\t\t\t\treturn this.listResources(requireString(input.server, \"server\"), input.cursor, signal);\n\t\t\tcase \"read_resource\":\n\t\t\t\treturn this.readResource(\n\t\t\t\t\trequireString(input.server, \"server\"),\n\t\t\t\t\trequireString(input.resourceUri, \"resourceUri\"),\n\t\t\t\t\tcontext,\n\t\t\t\t\tsignal,\n\t\t\t\t);\n\t\t\tcase \"list_prompts\":\n\t\t\t\treturn this.listPrompts(requireString(input.server, \"server\"), input.cursor, signal);\n\t\t\tcase \"get_prompt\":\n\t\t\t\treturn this.getPrompt(\n\t\t\t\t\trequireString(input.server, \"server\"),\n\t\t\t\t\trequireString(input.prompt, \"prompt\"),\n\t\t\t\t\tinput,\n\t\t\t\t\tcontext,\n\t\t\t\t\tsignal,\n\t\t\t\t);\n\t\t\tcase \"read_cache\":\n\t\t\t\treturn this.readCache(requireString(input.cacheId, \"cacheId\"), input, context);\n\t\t}\n\t}\n\n\tasync connectServer(\n\t\tserverId: string,\n\t\tsignal?: AbortSignal,\n\t): Promise<{ action: \"connect\"; server: McpServerSummary }> {\n\t\tconst supervisor = this.getSupervisor(serverId);\n\t\tawait supervisor.refreshMetadata(signal);\n\t\treturn { action: \"connect\", server: supervisor.getSummary() };\n\t}\n\n\tasync disconnectServer(serverId: string): Promise<{ action: \"disconnect\"; server: McpServerSummary }> {\n\t\tconst supervisor = this.getSupervisor(serverId);\n\t\tawait supervisor.disconnect();\n\t\treturn { action: \"disconnect\", server: supervisor.getSummary() };\n\t}\n\n\tasync setServerEnabled(\n\t\tserverId: string,\n\t\tenabled: boolean,\n\t): Promise<{ action: \"set_enabled\"; server: McpServerSummary; persisted?: { path: string; scope: string } }> {\n\t\tconst supervisor = this.getSupervisor(serverId);\n\t\tif (!this.configWriter) {\n\t\t\tthrow new Error(\"MCP config persistence is not available\");\n\t\t}\n\t\tconst persisted = this.configWriter.setServerEnabled(supervisor.server, enabled);\n\t\tawait supervisor.setEnabled(enabled);\n\t\tthis.emit({ type: \"mcp_servers_changed\", servers: this.listServers() });\n\t\treturn { action: \"set_enabled\", server: supervisor.getSummary(), persisted };\n\t}\n\n\tasync startServerAuth(\n\t\tserverId: string,\n\t\toptions: { flow?: \"browser\" | \"device\"; redirectUrl?: string } = {},\n\t): Promise<unknown> {\n\t\tconst supervisor = this.requireOAuthSupervisor(serverId);\n\t\tif (!this.oauthStore) {\n\t\t\tthrow new Error(\"MCP OAuth storage is not available\");\n\t\t}\n\t\tconst flow = options.flow ?? supervisor.server.auth?.flow ?? \"browser\";\n\t\tif (flow === \"auto\") {\n\t\t\treturn this.startServerAuth(serverId, { ...options, flow: \"browser\" });\n\t\t}\n\t\tif (flow === \"device\") {\n\t\t\tconst { result, pending } = await startMcpOAuthDeviceAuth({\n\t\t\t\tserver: supervisor.server,\n\t\t\t\tstore: this.oauthStore,\n\t\t\t});\n\t\t\tthis.pendingDeviceAuth.set(serverId, pending);\n\t\t\tsupervisor.refreshAuthState();\n\t\t\tthis.emit({\n\t\t\t\ttype: \"mcp_auth_request\",\n\t\t\t\tserverId: supervisor.server.id,\n\t\t\t\tauth: {\n\t\t\t\t\tflow: \"device\",\n\t\t\t\t\tverificationUri: result.verificationUri,\n\t\t\t\t\t...(result.verificationUriComplete ? { verificationUriComplete: result.verificationUriComplete } : {}),\n\t\t\t\t\tuserCode: result.userCode,\n\t\t\t\t\texpiresAt: result.expiresAt,\n\t\t\t\t\tintervalMs: result.intervalMs,\n\t\t\t\t\tmessage: result.message,\n\t\t\t\t},\n\t\t\t});\n\t\t\treturn result;\n\t\t}\n\t\tconst redirectUrl = options.redirectUrl?.trim();\n\t\tif (!redirectUrl) {\n\t\t\tthrow new Error(\"MCP OAuth browser flow requires a redirectUrl\");\n\t\t}\n\t\tconst result = await startMcpOAuthBrowserAuth({\n\t\t\tserver: supervisor.server,\n\t\t\tstore: this.oauthStore,\n\t\t\tredirectUrl,\n\t\t});\n\t\tsupervisor.refreshAuthState();\n\t\tif (result.status === \"pending\") {\n\t\t\tthis.emit({\n\t\t\t\ttype: \"mcp_auth_request\",\n\t\t\t\tserverId: supervisor.server.id,\n\t\t\t\tauth: {\n\t\t\t\t\tflow: \"browser\",\n\t\t\t\t\t...(result.authorizationUrl ? { authorizationUrl: result.authorizationUrl } : {}),\n\t\t\t\t\tredirectUrl: result.redirectUrl,\n\t\t\t\t\tmessage: result.message,\n\t\t\t\t},\n\t\t\t});\n\t\t} else {\n\t\t\tthis.emitAuthUpdate(supervisor.server.id, result.status, result.message);\n\t\t}\n\t\treturn result;\n\t}\n\n\tasync completeServerBrowserAuth(\n\t\tserverId: string,\n\t\toptions: { redirectUrl: string; code: string; state?: string },\n\t): Promise<unknown> {\n\t\tconst supervisor = this.requireOAuthSupervisor(serverId);\n\t\tif (!this.oauthStore) {\n\t\t\tthrow new Error(\"MCP OAuth storage is not available\");\n\t\t}\n\t\tconst result = await completeMcpOAuthBrowserAuth({\n\t\t\tserver: supervisor.server,\n\t\t\tstore: this.oauthStore,\n\t\t\tredirectUrl: options.redirectUrl,\n\t\t\tcode: options.code,\n\t\t\tstate: options.state,\n\t\t});\n\t\tsupervisor.refreshAuthState();\n\t\tthis.emitAuthUpdate(supervisor.server.id, result.status, result.message);\n\t\treturn result;\n\t}\n\n\tasync pollServerAuth(serverId: string): Promise<unknown> {\n\t\tconst supervisor = this.requireOAuthSupervisor(serverId);\n\t\tif (!this.oauthStore) {\n\t\t\tthrow new Error(\"MCP OAuth storage is not available\");\n\t\t}\n\t\tconst pending = this.pendingDeviceAuth.get(serverId);\n\t\tif (!pending) {\n\t\t\tthrow new Error(`No pending MCP OAuth device flow for ${serverId}`);\n\t\t}\n\t\tconst { result, pending: nextPending } = await pollMcpOAuthDeviceAuth({\n\t\t\tserver: supervisor.server,\n\t\t\tstore: this.oauthStore,\n\t\t\tpending,\n\t\t});\n\t\tif (nextPending) {\n\t\t\tthis.pendingDeviceAuth.set(serverId, nextPending);\n\t\t} else {\n\t\t\tthis.pendingDeviceAuth.delete(serverId);\n\t\t}\n\t\tsupervisor.refreshAuthState();\n\t\tif (result.status !== \"pending\") {\n\t\t\tthis.emitAuthUpdate(supervisor.server.id, result.status, result.message);\n\t\t}\n\t\treturn result;\n\t}\n\n\tcancelServerAuth(serverId: string): { action: \"auth\"; server: string; status: \"cancelled\"; message: string } {\n\t\tthis.pendingDeviceAuth.delete(serverId);\n\t\tthis.emitAuthUpdate(serverId, \"cancelled\", \"MCP OAuth flow cancelled.\");\n\t\treturn { action: \"auth\", server: serverId, status: \"cancelled\", message: \"MCP OAuth flow cancelled.\" };\n\t}\n\n\tasync logoutServer(serverId: string): Promise<{\n\t\taction: \"auth\";\n\t\tserver: string;\n\t\tstatus: \"logged_out\";\n\t\tserverSummary: McpServerSummary;\n\t}> {\n\t\tconst supervisor = this.requireOAuthSupervisor(serverId);\n\t\tif (!this.oauthStore) {\n\t\t\tthrow new Error(\"MCP OAuth storage is not available\");\n\t\t}\n\t\tawait supervisor.disconnect();\n\t\tthis.oauthStore.clear(supervisor.server, \"all\");\n\t\tthis.pendingDeviceAuth.delete(serverId);\n\t\tsupervisor.refreshAuthState();\n\t\tthis.emitAuthUpdate(supervisor.server.id, \"logged_out\");\n\t\treturn {\n\t\t\taction: \"auth\",\n\t\t\tserver: serverId,\n\t\t\tstatus: \"logged_out\",\n\t\t\tserverSummary: supervisor.getSummary(),\n\t\t};\n\t}\n\n\tasync listTools(\n\t\tserverId: string,\n\t\tsignal?: AbortSignal,\n\t): Promise<{\n\t\taction: \"list_tools\";\n\t\tserver: string;\n\t\ttools: McpToolSummary[];\n\t\tmetadataHash?: string;\n\t\tstale: boolean;\n\t}> {\n\t\tconst supervisor = this.getSupervisor(serverId);\n\t\tconst metadata = await this.getFreshMetadata(supervisor, signal).catch(() => supervisor.cachedMetadata);\n\t\tif (!metadata) {\n\t\t\treturn { action: \"list_tools\", server: supervisor.server.id, tools: [], stale: true };\n\t\t}\n\t\tconst stale = this.isSupervisorMetadataStale(supervisor, metadata);\n\t\treturn {\n\t\t\taction: \"list_tools\",\n\t\t\tserver: supervisor.server.id,\n\t\t\ttools: toToolSummary(\n\t\t\t\tsupervisor.server.id,\n\t\t\t\tmetadata,\n\t\t\t\tsupervisor.server,\n\t\t\t\tthis.config.settings.directTools,\n\t\t\t\tstale,\n\t\t\t),\n\t\t\tmetadataHash: metadata.metadataHash,\n\t\t\tstale,\n\t\t};\n\t}\n\n\tsearch(\n\t\tquery: string,\n\t\tlimit?: number,\n\t): { action: \"search\"; query: string; matches: McpSearchMatch[]; notices?: string[] } {\n\t\tconst freshMetadata: McpServerMetadata[] = [];\n\t\tconst missingOrStale: string[] = [];\n\t\tfor (const supervisor of this.supervisors.values()) {\n\t\t\tconst metadata = supervisor.cachedMetadata;\n\t\t\tif (!metadata || this.isSupervisorMetadataStale(supervisor, metadata)) {\n\t\t\t\tmissingOrStale.push(supervisor.server.id);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tfreshMetadata.push(metadata);\n\t\t}\n\t\tconst matches = searchMcpMetadata({\n\t\t\tquery,\n\t\t\tlimit,\n\t\t\tservers: this.config.servers,\n\t\t\tmetadata: freshMetadata,\n\t\t});\n\t\treturn {\n\t\t\taction: \"search\",\n\t\t\tquery,\n\t\t\tmatches,\n\t\t\t...(missingOrStale.length > 0\n\t\t\t\t? {\n\t\t\t\t\t\tnotices: [\n\t\t\t\t\t\t\t`Metadata missing or stale for ${missingOrStale.join(\", \")}; use action=connect to refresh.`,\n\t\t\t\t\t\t],\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t};\n\t}\n\n\tasync describe(serverId: string, toolName: string, signal?: AbortSignal): Promise<unknown> {\n\t\tconst supervisor = this.getSupervisor(serverId);\n\t\tconst metadata = await this.getFreshMetadata(supervisor, signal).catch(() => supervisor.cachedMetadata);\n\t\tif (!metadata) {\n\t\t\treturn {\n\t\t\t\taction: \"describe\",\n\t\t\t\tserver: serverId,\n\t\t\t\ttool: toolName,\n\t\t\t\tstatus: \"metadata_missing\",\n\t\t\t\tmessage: `No cached metadata for ${serverId}. Use mcp({\"action\":\"connect\",\"server\":\"${serverId}\"}) first.`,\n\t\t\t};\n\t\t}\n\t\tconst tool = metadata.tools.find((entry) => entry.name === toolName);\n\t\tif (!tool) {\n\t\t\tthrow new Error(`MCP tool not found in cached metadata: ${serverId}.${toolName}`);\n\t\t}\n\t\treturn {\n\t\t\tserver: serverId,\n\t\t\ttool: tool.name,\n\t\t\tdescription: tool.description ?? \"\",\n\t\t\trisk: classifyMcpToolRisk(tool),\n\t\t\tinputSchema: tool.inputSchema,\n\t\t\tannotations: tool.annotations ?? {},\n\t\t\tmetadataHash: metadata.metadataHash,\n\t\t};\n\t}\n\n\tasync listResources(\n\t\tserverId: string,\n\t\tcursor: string | undefined,\n\t\tsignal?: AbortSignal,\n\t): Promise<{ action: \"list_resources\"; server: string; resources: McpResourceSummary[]; nextCursor?: string }> {\n\t\tif (this.config.settings.resources === \"disabled\") {\n\t\t\tthrow new Error(\"MCP resources are disabled by config\");\n\t\t}\n\t\tconst result = await this.getSupervisor(serverId).listResources(cursor, signal);\n\t\treturn {\n\t\t\taction: \"list_resources\",\n\t\t\tserver: serverId,\n\t\t\tresources: result.resources.map((resource) => ({\n\t\t\t\tserver: serverId,\n\t\t\t\turi: resource.uri,\n\t\t\t\tname: resource.name,\n\t\t\t\tdescription: compactText(resource.description),\n\t\t\t\tmimeType: resource.mimeType,\n\t\t\t\tsize: resource.size,\n\t\t\t})),\n\t\t\tnextCursor: result.nextCursor,\n\t\t};\n\t}\n\n\tasync readResource(\n\t\tserverId: string,\n\t\turi: string,\n\t\tcontext: McpGatewayExecutionContext,\n\t\tsignal?: AbortSignal,\n\t): Promise<unknown> {\n\t\tif (this.config.settings.resources === \"disabled\") {\n\t\t\tthrow new Error(\"MCP resources are disabled by config\");\n\t\t}\n\t\tconst startedAt = Date.now();\n\t\ttry {\n\t\t\tconst result = await this.getSupervisor(serverId).readResource(uri, signal);\n\t\t\tconst text = readResourceResultToText(result);\n\t\t\tconst shaped = this.outputStore.shapeOutput(text);\n\t\t\tawait this.writeAudit({\n\t\t\t\tcallerSurface: getCallerSurface(context),\n\t\t\t\tserver: serverId,\n\t\t\t\titem: uri,\n\t\t\t\tkind: \"resource\",\n\t\t\t\trisk: \"read\",\n\t\t\t\tstatus: \"completed\",\n\t\t\t\tdurationMs: Date.now() - startedAt,\n\t\t\t\tresultSize: byteLength(text),\n\t\t\t\tcacheId: shaped.cache?.id,\n\t\t\t});\n\t\t\treturn { action: \"read_resource\", server: serverId, resourceUri: uri, ...shaped };\n\t\t} catch (error) {\n\t\t\tawait this.writeAudit({\n\t\t\t\tcallerSurface: getCallerSurface(context),\n\t\t\t\tserver: serverId,\n\t\t\t\titem: uri,\n\t\t\t\tkind: \"resource\",\n\t\t\t\trisk: \"read\",\n\t\t\t\tstatus: signal?.aborted ? \"cancelled\" : \"failed\",\n\t\t\t\tdurationMs: Date.now() - startedAt,\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t});\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tasync listPrompts(\n\t\tserverId: string,\n\t\tcursor: string | undefined,\n\t\tsignal?: AbortSignal,\n\t): Promise<{ action: \"list_prompts\"; server: string; prompts: McpPromptSummary[]; nextCursor?: string }> {\n\t\tif (this.config.settings.prompts === \"disabled\") {\n\t\t\tthrow new Error(\"MCP prompts are disabled by config\");\n\t\t}\n\t\tconst result = await this.getSupervisor(serverId).listPrompts(cursor, signal);\n\t\treturn {\n\t\t\taction: \"list_prompts\",\n\t\t\tserver: serverId,\n\t\t\tprompts: result.prompts.map((prompt) => ({\n\t\t\t\tserver: serverId,\n\t\t\t\tname: prompt.name,\n\t\t\t\ttitle: prompt.title,\n\t\t\t\tdescription: compactText(prompt.description),\n\t\t\t\targuments: prompt.arguments,\n\t\t\t})),\n\t\t\tnextCursor: result.nextCursor,\n\t\t};\n\t}\n\n\tasync getPrompt(\n\t\tserverId: string,\n\t\tname: string,\n\t\tinput: McpGatewayInput,\n\t\tcontext: McpGatewayExecutionContext,\n\t\tsignal?: AbortSignal,\n\t): Promise<unknown> {\n\t\tif (this.config.settings.prompts === \"disabled\") {\n\t\t\tthrow new Error(\"MCP prompts are disabled by config\");\n\t\t}\n\t\tif (context.caller !== \"user\" && this.config.settings.prompts !== \"model\") {\n\t\t\tthrow new Error('MCP prompt content is not exposed to the model unless settings.prompts is \"model\"');\n\t\t}\n\t\tconst args = parseArguments(input);\n\t\tconst startedAt = Date.now();\n\t\ttry {\n\t\t\tconst result = await this.getSupervisor(serverId).getPrompt(name, args, signal);\n\t\t\tconst text = getPromptResultToText(result);\n\t\t\tconst shaped = this.outputStore.shapeOutput(text);\n\t\t\tawait this.writeAudit({\n\t\t\t\tcallerSurface: getCallerSurface(context),\n\t\t\t\tserver: serverId,\n\t\t\t\titem: name,\n\t\t\t\tkind: \"prompt\",\n\t\t\t\trisk: \"read\",\n\t\t\t\tstatus: \"completed\",\n\t\t\t\tdurationMs: Date.now() - startedAt,\n\t\t\t\tresultSize: byteLength(text),\n\t\t\t\tcacheId: shaped.cache?.id,\n\t\t\t\targuments: args,\n\t\t\t});\n\t\t\treturn { action: \"get_prompt\", server: serverId, prompt: name, ...shaped };\n\t\t} catch (error) {\n\t\t\tawait this.writeAudit({\n\t\t\t\tcallerSurface: getCallerSurface(context),\n\t\t\t\tserver: serverId,\n\t\t\t\titem: name,\n\t\t\t\tkind: \"prompt\",\n\t\t\t\trisk: \"read\",\n\t\t\t\tstatus: signal?.aborted ? \"cancelled\" : \"failed\",\n\t\t\t\tdurationMs: Date.now() - startedAt,\n\t\t\t\targuments: args,\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t});\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tasync readCache(\n\t\tcacheId: string,\n\t\tinput: Pick<McpGatewayInput, \"cursor\" | \"limit\">,\n\t\tcontext: McpGatewayExecutionContext,\n\t): Promise<unknown> {\n\t\tconst startedAt = Date.now();\n\t\ttry {\n\t\t\tconst chunk = this.outputStore.read(cacheId, input);\n\t\t\tawait this.writeAudit({\n\t\t\t\tcallerSurface: getCallerSurface(context),\n\t\t\t\tserver: \"cache\",\n\t\t\t\titem: cacheId,\n\t\t\t\tkind: \"cache\",\n\t\t\t\trisk: \"read\",\n\t\t\t\tstatus: \"completed\",\n\t\t\t\tdurationMs: Date.now() - startedAt,\n\t\t\t\tresultSize: byteLength(chunk.content),\n\t\t\t\tcacheId,\n\t\t\t});\n\t\t\treturn { action: \"read_cache\", ...chunk };\n\t\t} catch (error) {\n\t\t\tawait this.writeAudit({\n\t\t\t\tcallerSurface: getCallerSurface(context),\n\t\t\t\tserver: \"cache\",\n\t\t\t\titem: cacheId,\n\t\t\t\tkind: \"cache\",\n\t\t\t\trisk: \"read\",\n\t\t\t\tstatus: \"failed\",\n\t\t\t\tdurationMs: Date.now() - startedAt,\n\t\t\t\tcacheId,\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t});\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tasync callTool(\n\t\tinput: McpGatewayInput,\n\t\tcontext: McpGatewayExecutionContext,\n\t\tsignal?: AbortSignal,\n\t): Promise<McpGatewayCallResult> {\n\t\tconst serverId = requireString(input.server, \"server\");\n\t\tconst toolName = requireString(input.tool, \"tool\");\n\t\tconst args = parseArguments(input);\n\t\tconst supervisor = this.getSupervisor(serverId);\n\t\tconst metadata = await this.getFreshMetadata(supervisor, signal);\n\t\tconst tool = metadata.tools.find((entry) => entry.name === toolName);\n\t\tif (!tool || !serverMatchesToolFilters(supervisor.server, tool.name)) {\n\t\t\tthrow new Error(`MCP tool not available: ${serverId}.${toolName}`);\n\t\t}\n\t\tconst risk = classifyMcpToolRisk(tool);\n\t\tconst callId = makeCallId();\n\t\tconst startedAt = Date.now();\n\t\tlet status: McpRecentCallStatus = \"completed\";\n\t\tthis.emit({\n\t\t\ttype: \"mcp_call_start\",\n\t\t\tcall: {\n\t\t\t\tid: callId,\n\t\t\t\ttimestamp: new Date(startedAt).toISOString(),\n\t\t\t\tserver: serverId,\n\t\t\t\ttool: toolName,\n\t\t\t\trisk,\n\t\t\t\tstatus: \"started\",\n\t\t\t},\n\t\t});\n\t\ttry {\n\t\t\tconst result = await supervisor.callTool(toolName, args, signal, (progress) =>\n\t\t\t\tthis.emit({\n\t\t\t\t\ttype: \"mcp_call_update\",\n\t\t\t\t\tcall: { id: callId, server: serverId, tool: toolName },\n\t\t\t\t\tprogress,\n\t\t\t\t}),\n\t\t\t);\n\t\t\tconst text = callToolResultToText(result);\n\t\t\tconst shaped = this.outputStore.shapeOutput(text);\n\t\t\tstatus = result.isError ? \"failed\" : \"completed\";\n\t\t\tconst outputBytes = byteLength(text);\n\t\t\tconst recent = {\n\t\t\t\tid: callId,\n\t\t\t\ttimestamp: new Date(startedAt).toISOString(),\n\t\t\t\tserver: serverId,\n\t\t\t\ttool: toolName,\n\t\t\t\trisk,\n\t\t\t\tstatus,\n\t\t\t\tdurationMs: Date.now() - startedAt,\n\t\t\t\toutputBytes,\n\t\t\t\ttruncated: shaped.truncation?.truncated ?? false,\n\t\t\t};\n\t\t\tsupervisor.recordCall(recent);\n\t\t\tthis.emit({\n\t\t\t\ttype: \"mcp_call_end\",\n\t\t\t\tcall: recent,\n\t\t\t\t...(shaped.cache ? { cacheId: shaped.cache.id } : {}),\n\t\t\t});\n\t\t\tawait this.writeAudit({\n\t\t\t\tcallerSurface: getCallerSurface(context),\n\t\t\t\tserver: serverId,\n\t\t\t\titem: toolName,\n\t\t\t\tkind: \"tool\",\n\t\t\t\trisk,\n\t\t\t\tstatus,\n\t\t\t\tdurationMs: recent.durationMs,\n\t\t\t\tresultSize: outputBytes,\n\t\t\t\tcacheId: shaped.cache?.id,\n\t\t\t\targuments: args,\n\t\t\t});\n\t\t\treturn {\n\t\t\t\taction: \"call\",\n\t\t\t\tserver: serverId,\n\t\t\t\ttool: toolName,\n\t\t\t\tstatus: result.isError ? \"failed\" : \"completed\",\n\t\t\t\trisk,\n\t\t\t\tcontent: shaped.content,\n\t\t\t\t...(result.isError ? { isError: true } : {}),\n\t\t\t\t...(shaped.truncation ? { truncation: shaped.truncation } : {}),\n\t\t\t\t...(shaped.cache ? { cache: shaped.cache } : {}),\n\t\t\t};\n\t\t} catch (error) {\n\t\t\tstatus = signal?.aborted ? \"cancelled\" : \"failed\";\n\t\t\tconst durationMs = Date.now() - startedAt;\n\t\t\tconst recent = {\n\t\t\t\tid: callId,\n\t\t\t\ttimestamp: new Date(startedAt).toISOString(),\n\t\t\t\tserver: serverId,\n\t\t\t\ttool: toolName,\n\t\t\t\trisk,\n\t\t\t\tstatus,\n\t\t\t\tdurationMs,\n\t\t\t};\n\t\t\tsupervisor.recordCall(recent);\n\t\t\tthis.emit({ type: \"mcp_call_end\", call: recent });\n\t\t\tawait this.writeAudit({\n\t\t\t\tcallerSurface: getCallerSurface(context),\n\t\t\t\tserver: serverId,\n\t\t\t\titem: toolName,\n\t\t\t\tkind: \"tool\",\n\t\t\t\trisk,\n\t\t\t\tstatus,\n\t\t\t\tdurationMs,\n\t\t\t\targuments: args,\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t});\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tprivate isSupervisorMetadataStale(\n\t\tsupervisor: McpServerSupervisor,\n\t\tmetadata: McpServerMetadata | undefined,\n\t): boolean {\n\t\tif (metadata && metadata.configHash !== hashMcpServerConfig(supervisor.server)) {\n\t\t\treturn true;\n\t\t}\n\t\treturn isMetadataStale(metadata, getServerTimeoutMs(supervisor.server, this.config.settings, \"refresh\"));\n\t}\n\n\tprivate async getFreshMetadata(supervisor: McpServerSupervisor, signal?: AbortSignal): Promise<McpServerMetadata> {\n\t\tconst cached = supervisor.cachedMetadata;\n\t\tif (cached && !this.isSupervisorMetadataStale(supervisor, cached)) {\n\t\t\treturn cached;\n\t\t}\n\t\treturn supervisor.refreshMetadata(signal);\n\t}\n\n\tprivate getSupervisor(serverId: string): McpServerSupervisor {\n\t\tconst normalized = serverId.trim().toLowerCase();\n\t\tconst supervisor = this.supervisors.get(normalized) ?? this.supervisors.get(serverId);\n\t\tif (!supervisor) {\n\t\t\tthrow new Error(`MCP server not found: ${serverId}`);\n\t\t}\n\t\treturn supervisor;\n\t}\n\n\tprivate requireOAuthSupervisor(serverId: string): McpServerSupervisor {\n\t\tconst supervisor = this.getSupervisor(serverId);\n\t\tif (supervisor.server.auth?.type !== \"oauth\") {\n\t\t\tthrow new Error(`MCP server does not use OAuth: ${serverId}`);\n\t\t}\n\t\tif (supervisor.server.transport === \"stdio\") {\n\t\t\tthrow new Error(`MCP OAuth is only available for HTTP/SSE servers: ${serverId}`);\n\t\t}\n\t\treturn supervisor;\n\t}\n\n\tprivate async writeAudit(input: {\n\t\tcallerSurface: McpCallerSurface;\n\t\tserver: string;\n\t\titem: string;\n\t\tkind: \"tool\" | \"resource\" | \"prompt\" | \"cache\";\n\t\trisk: McpRisk;\n\t\tstatus: McpRecentCallStatus;\n\t\tdurationMs?: number;\n\t\tresultSize?: number;\n\t\tcacheId?: string;\n\t\targuments?: Record<string, unknown>;\n\t\terror?: string;\n\t}): Promise<void> {\n\t\tawait this.auditLogger?.write({\n\t\t\t...input,\n\t\t\tworkspaceId: this.workspaceId,\n\t\t\tsessionId: this.sessionId,\n\t\t});\n\t}\n}\n"]}

package/dist/core/mcp/metadata-cache.d.ts

@@ -0,0 +1,27 @@
+import type { McpServerMetadata } from "./types.ts";
+export interface McpMetadataCacheOptions {
+    agentDir: string;
+    maxBytes?: number;
+    maxServers?: number;
+    maxAgeMs?: number;
+    now?: () => number;
+}
+export declare class McpMetadataCache {
+    private path;
+    private servers;
+    private maxBytes;
+    private maxServers;
+    private maxAgeMs;
+    private now;
+    constructor(options: McpMetadataCacheOptions);
+    get(server: string): McpServerMetadata | undefined;
+    getAll(): McpServerMetadata[];
+    set(server: string, metadata: Omit<McpServerMetadata, "metadataHash" | "lastSeenAt">): McpServerMetadata;
+    delete(server: string): void;
+    private load;
+    private save;
+    private prune;
+    private serializedBytes;
+    private serialize;
+}
+//# sourceMappingURL=metadata-cache.d.ts.map

package/dist/core/mcp/metadata-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata-cache.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/metadata-cache.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAWpD,MAAM,WAAW,uBAAuB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AA8CD,qBAAa,gBAAgB;IAC5B,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,OAAO,CAAiC;IAChD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,GAAG,CAAe;IAE1B,YAAY,OAAO,EAAE,uBAAuB,EAQ3C;IAED,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAGjD;IAED,MAAM,IAAI,iBAAiB,EAAE,CAE5B;IAED,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,cAAc,GAAG,YAAY,CAAC,GAAG,iBAAiB,CAgBvG;IAED,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAG3B;IAED,OAAO,CAAC,IAAI;IAmBZ,OAAO,CAAC,IAAI;IASZ,OAAO,CAAC,KAAK;IA0Bb,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,SAAS;CAGjB","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport { existsSync, lstatSync, readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport type { Prompt, Resource, Tool as SdkTool } from \"@modelcontextprotocol/sdk/types.js\";\nimport { writeDurableAtomicFileSync } from \"../../utils/durable-atomic-write.ts\";\nimport { ensurePrivateDirectorySync, hardenPrivateRegularFileSync } from \"../../utils/private-files.ts\";\nimport { hashMcpMetadata } from \"./config.ts\";\nimport type { McpServerMetadata } from \"./types.ts\";\n\nconst DEFAULT_METADATA_CACHE_MAX_BYTES = 8 * 1024 * 1024;\nconst DEFAULT_METADATA_CACHE_MAX_SERVERS = 64;\nconst DEFAULT_METADATA_CACHE_MAX_AGE_MS = 30 * 24 * 60 * 60 * 1000;\n\ninterface MetadataCacheFile {\n\tversion: 1;\n\tservers: Record<string, McpServerMetadata>;\n}\n\nexport interface McpMetadataCacheOptions {\n\tagentDir: string;\n\tmaxBytes?: number;\n\tmaxServers?: number;\n\tmaxAgeMs?: number;\n\tnow?: () => number;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction parseMetadata(value: unknown): McpServerMetadata | undefined {\n\tif (!isRecord(value)) {\n\t\treturn undefined;\n\t}\n\tif (\n\t\ttypeof value.server !== \"string\" ||\n\t\ttypeof value.metadataHash !== \"string\" ||\n\t\ttypeof value.lastSeenAt !== \"string\"\n\t) {\n\t\treturn undefined;\n\t}\n\tif (!Array.isArray(value.tools) || !Array.isArray(value.resources) || !Array.isArray(value.prompts)) {\n\t\treturn undefined;\n\t}\n\treturn {\n\t\tserver: value.server,\n\t\tmetadataHash: value.metadataHash,\n\t\tlastSeenAt: value.lastSeenAt,\n\t\t...(typeof value.serverVersion === \"string\" ? { serverVersion: value.serverVersion } : {}),\n\t\t...(typeof value.configHash === \"string\" ? { configHash: value.configHash } : {}),\n\t\ttools: value.tools as SdkTool[],\n\t\tresources: value.resources as Resource[],\n\t\tprompts: value.prompts as Prompt[],\n\t};\n}\n\nfunction parseCacheFile(value: unknown): MetadataCacheFile {\n\tif (!isRecord(value) || value.version !== 1 || !isRecord(value.servers)) {\n\t\treturn { version: 1, servers: {} };\n\t}\n\tconst servers: Record<string, McpServerMetadata> = {};\n\tfor (const [server, entry] of Object.entries(value.servers)) {\n\t\tconst parsed = parseMetadata(entry);\n\t\tif (parsed) {\n\t\t\tservers[server] = parsed;\n\t\t}\n\t}\n\treturn { version: 1, servers };\n}\n\nexport class McpMetadataCache {\n\tprivate path: string;\n\tprivate servers: Map<string, McpServerMetadata>;\n\tprivate maxBytes: number;\n\tprivate maxServers: number;\n\tprivate maxAgeMs: number;\n\tprivate now: () => number;\n\n\tconstructor(options: McpMetadataCacheOptions) {\n\t\tthis.path = join(options.agentDir, \"mcp\", \"metadata-cache.json\");\n\t\tthis.servers = new Map();\n\t\tthis.maxBytes = Math.max(1, options.maxBytes ?? DEFAULT_METADATA_CACHE_MAX_BYTES);\n\t\tthis.maxServers = Math.max(1, options.maxServers ?? DEFAULT_METADATA_CACHE_MAX_SERVERS);\n\t\tthis.maxAgeMs = Math.max(1, options.maxAgeMs ?? DEFAULT_METADATA_CACHE_MAX_AGE_MS);\n\t\tthis.now = options.now ?? Date.now;\n\t\tthis.load();\n\t}\n\n\tget(server: string): McpServerMetadata | undefined {\n\t\tconst metadata = this.servers.get(server);\n\t\treturn metadata ? structuredClone(metadata) : undefined;\n\t}\n\n\tgetAll(): McpServerMetadata[] {\n\t\treturn Array.from(this.servers.values(), (metadata) => structuredClone(metadata));\n\t}\n\n\tset(server: string, metadata: Omit<McpServerMetadata, \"metadataHash\" | \"lastSeenAt\">): McpServerMetadata {\n\t\tconst next: McpServerMetadata = {\n\t\t\t...metadata,\n\t\t\tserver,\n\t\t\tmetadataHash: hashMcpMetadata({\n\t\t\t\ttools: metadata.tools,\n\t\t\t\tresources: metadata.resources,\n\t\t\t\tprompts: metadata.prompts,\n\t\t\t\tserverVersion: metadata.serverVersion,\n\t\t\t\tconfigHash: metadata.configHash,\n\t\t\t}),\n\t\t\tlastSeenAt: new Date(this.now()).toISOString(),\n\t\t};\n\t\tthis.servers.set(server, next);\n\t\tthis.save();\n\t\treturn structuredClone(next);\n\t}\n\n\tdelete(server: string): void {\n\t\tthis.servers.delete(server);\n\t\tthis.save();\n\t}\n\n\tprivate load(): void {\n\t\tif (!existsSync(this.path)) {\n\t\t\treturn;\n\t\t}\n\t\ttry {\n\t\t\thardenPrivateRegularFileSync(this.path);\n\t\t\tif (lstatSync(this.path).size > this.maxBytes) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst parsed = parseCacheFile(JSON.parse(readFileSync(this.path, \"utf-8\")) as unknown);\n\t\t\tthis.servers = new Map(\n\t\t\t\tObject.entries(parsed.servers).filter(([server, metadata]) => server === metadata.server),\n\t\t\t);\n\t\t\tthis.prune();\n\t\t} catch {\n\t\t\tthis.servers = new Map();\n\t\t}\n\t}\n\n\tprivate save(): void {\n\t\tthis.prune();\n\t\tconst serialized = this.serialize();\n\t\tif (Buffer.byteLength(serialized, \"utf8\") > this.maxBytes) return;\n\t\tconst dir = dirname(this.path);\n\t\tensurePrivateDirectorySync(dir);\n\t\twriteDurableAtomicFileSync(this.path, serialized);\n\t}\n\n\tprivate prune(): void {\n\t\tconst cutoff = this.now() - this.maxAgeMs;\n\t\tconst sorted = () =>\n\t\t\tArray.from(this.servers.entries()).sort((left, right) => {\n\t\t\t\tconst leftTime = Date.parse(left[1].lastSeenAt);\n\t\t\t\tconst rightTime = Date.parse(right[1].lastSeenAt);\n\t\t\t\treturn (Number.isFinite(leftTime) ? leftTime : 0) - (Number.isFinite(rightTime) ? rightTime : 0);\n\t\t\t});\n\t\tfor (const [server, metadata] of sorted()) {\n\t\t\tconst lastSeenAt = Date.parse(metadata.lastSeenAt);\n\t\t\tif (!Number.isFinite(lastSeenAt) || lastSeenAt < cutoff) {\n\t\t\t\tthis.servers.delete(server);\n\t\t\t}\n\t\t}\n\t\twhile (this.servers.size > this.maxServers) {\n\t\t\tconst oldest = sorted()[0];\n\t\t\tif (!oldest) break;\n\t\t\tthis.servers.delete(oldest[0]);\n\t\t}\n\t\twhile (this.serializedBytes() > this.maxBytes) {\n\t\t\tconst oldest = sorted()[0];\n\t\t\tif (!oldest) break;\n\t\t\tthis.servers.delete(oldest[0]);\n\t\t}\n\t}\n\n\tprivate serializedBytes(): number {\n\t\treturn Buffer.byteLength(this.serialize(), \"utf8\");\n\t}\n\n\tprivate serialize(): string {\n\t\treturn `${JSON.stringify({ version: 1, servers: Object.fromEntries(this.servers.entries()) }, null, 2)}\\n`;\n\t}\n}\n"]}

package/dist/core/mcp/metadata-cache.js

@@ -0,0 +1,152 @@
+import { Buffer } from "node:buffer";
+import { existsSync, lstatSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { writeDurableAtomicFileSync } from "../../utils/durable-atomic-write.js";
+import { ensurePrivateDirectorySync, hardenPrivateRegularFileSync } from "../../utils/private-files.js";
+import { hashMcpMetadata } from "./config.js";
+const DEFAULT_METADATA_CACHE_MAX_BYTES = 8 * 1024 * 1024;
+const DEFAULT_METADATA_CACHE_MAX_SERVERS = 64;
+const DEFAULT_METADATA_CACHE_MAX_AGE_MS = 30 * 24 * 60 * 60 * 1000;
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseMetadata(value) {
+    if (!isRecord(value)) {
+        return undefined;
+    }
+    if (typeof value.server !== "string" ||
+        typeof value.metadataHash !== "string" ||
+        typeof value.lastSeenAt !== "string") {
+        return undefined;
+    }
+    if (!Array.isArray(value.tools) || !Array.isArray(value.resources) || !Array.isArray(value.prompts)) {
+        return undefined;
+    }
+    return {
+        server: value.server,
+        metadataHash: value.metadataHash,
+        lastSeenAt: value.lastSeenAt,
+        ...(typeof value.serverVersion === "string" ? { serverVersion: value.serverVersion } : {}),
+        ...(typeof value.configHash === "string" ? { configHash: value.configHash } : {}),
+        tools: value.tools,
+        resources: value.resources,
+        prompts: value.prompts,
+    };
+}
+function parseCacheFile(value) {
+    if (!isRecord(value) || value.version !== 1 || !isRecord(value.servers)) {
+        return { version: 1, servers: {} };
+    }
+    const servers = {};
+    for (const [server, entry] of Object.entries(value.servers)) {
+        const parsed = parseMetadata(entry);
+        if (parsed) {
+            servers[server] = parsed;
+        }
+    }
+    return { version: 1, servers };
+}
+export class McpMetadataCache {
+    path;
+    servers;
+    maxBytes;
+    maxServers;
+    maxAgeMs;
+    now;
+    constructor(options) {
+        this.path = join(options.agentDir, "mcp", "metadata-cache.json");
+        this.servers = new Map();
+        this.maxBytes = Math.max(1, options.maxBytes ?? DEFAULT_METADATA_CACHE_MAX_BYTES);
+        this.maxServers = Math.max(1, options.maxServers ?? DEFAULT_METADATA_CACHE_MAX_SERVERS);
+        this.maxAgeMs = Math.max(1, options.maxAgeMs ?? DEFAULT_METADATA_CACHE_MAX_AGE_MS);
+        this.now = options.now ?? Date.now;
+        this.load();
+    }
+    get(server) {
+        const metadata = this.servers.get(server);
+        return metadata ? structuredClone(metadata) : undefined;
+    }
+    getAll() {
+        return Array.from(this.servers.values(), (metadata) => structuredClone(metadata));
+    }
+    set(server, metadata) {
+        const next = {
+            ...metadata,
+            server,
+            metadataHash: hashMcpMetadata({
+                tools: metadata.tools,
+                resources: metadata.resources,
+                prompts: metadata.prompts,
+                serverVersion: metadata.serverVersion,
+                configHash: metadata.configHash,
+            }),
+            lastSeenAt: new Date(this.now()).toISOString(),
+        };
+        this.servers.set(server, next);
+        this.save();
+        return structuredClone(next);
+    }
+    delete(server) {
+        this.servers.delete(server);
+        this.save();
+    }
+    load() {
+        if (!existsSync(this.path)) {
+            return;
+        }
+        try {
+            hardenPrivateRegularFileSync(this.path);
+            if (lstatSync(this.path).size > this.maxBytes) {
+                return;
+            }
+            const parsed = parseCacheFile(JSON.parse(readFileSync(this.path, "utf-8")));
+            this.servers = new Map(Object.entries(parsed.servers).filter(([server, metadata]) => server === metadata.server));
+            this.prune();
+        }
+        catch {
+            this.servers = new Map();
+        }
+    }
+    save() {
+        this.prune();
+        const serialized = this.serialize();
+        if (Buffer.byteLength(serialized, "utf8") > this.maxBytes)
+            return;
+        const dir = dirname(this.path);
+        ensurePrivateDirectorySync(dir);
+        writeDurableAtomicFileSync(this.path, serialized);
+    }
+    prune() {
+        const cutoff = this.now() - this.maxAgeMs;
+        const sorted = () => Array.from(this.servers.entries()).sort((left, right) => {
+            const leftTime = Date.parse(left[1].lastSeenAt);
+            const rightTime = Date.parse(right[1].lastSeenAt);
+            return (Number.isFinite(leftTime) ? leftTime : 0) - (Number.isFinite(rightTime) ? rightTime : 0);
+        });
+        for (const [server, metadata] of sorted()) {
+            const lastSeenAt = Date.parse(metadata.lastSeenAt);
+            if (!Number.isFinite(lastSeenAt) || lastSeenAt < cutoff) {
+                this.servers.delete(server);
+            }
+        }
+        while (this.servers.size > this.maxServers) {
+            const oldest = sorted()[0];
+            if (!oldest)
+                break;
+            this.servers.delete(oldest[0]);
+        }
+        while (this.serializedBytes() > this.maxBytes) {
+            const oldest = sorted()[0];
+            if (!oldest)
+                break;
+            this.servers.delete(oldest[0]);
+        }
+    }
+    serializedBytes() {
+        return Buffer.byteLength(this.serialize(), "utf8");
+    }
+    serialize() {
+        return `${JSON.stringify({ version: 1, servers: Object.fromEntries(this.servers.entries()) }, null, 2)}\n`;
+    }
+}
+//# sourceMappingURL=metadata-cache.js.map

package/dist/core/mcp/metadata-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata-cache.js","sourceRoot":"","sources":["../../../src/core/mcp/metadata-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AACxG,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C,MAAM,gCAAgC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACzD,MAAM,kCAAkC,GAAG,EAAE,CAAC;AAC9C,MAAM,iCAAiC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAenE,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5E;AAED,SAAS,aAAa,CAAC,KAAc,EAAiC;IACrE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IACC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EACnC,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACrG,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO;QACN,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,CAAC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,GAAG,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,KAAK,EAAE,KAAK,CAAC,KAAkB;QAC/B,SAAS,EAAE,KAAK,CAAC,SAAuB;QACxC,OAAO,EAAE,KAAK,CAAC,OAAmB;KAClC,CAAC;AAAA,CACF;AAED,SAAS,cAAc,CAAC,KAAc,EAAqB;IAC1D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC;IACD,MAAM,OAAO,GAAsC,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;QAC1B,CAAC;IACF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AAAA,CAC/B;AAED,MAAM,OAAO,gBAAgB;IACpB,IAAI,CAAS;IACb,OAAO,CAAiC;IACxC,QAAQ,CAAS;IACjB,UAAU,CAAS;IACnB,QAAQ,CAAS;IACjB,GAAG,CAAe;IAE1B,YAAY,OAAgC,EAAE;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,IAAI,gCAAgC,CAAC,CAAC;QAClF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,IAAI,kCAAkC,CAAC,CAAC;QACxF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,IAAI,iCAAiC,CAAC,CAAC;QACnF,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,IAAI,EAAE,CAAC;IAAA,CACZ;IAED,GAAG,CAAC,MAAc,EAAiC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,OAAO,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAAA,CACxD;IAED,MAAM,GAAwB;QAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;IAAA,CAClF;IAED,GAAG,CAAC,MAAc,EAAE,QAAgE,EAAqB;QACxG,MAAM,IAAI,GAAsB;YAC/B,GAAG,QAAQ;YACX,MAAM;YACN,YAAY,EAAE,eAAe,CAAC;gBAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,UAAU,EAAE,QAAQ,CAAC,UAAU;aAC/B,CAAC;YACF,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;SAC9C,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IAAA,CAC7B;IAED,MAAM,CAAC,MAAc,EAAQ;QAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;IAAA,CACZ;IAEO,IAAI,GAAS;QACpB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO;QACR,CAAC;QACD,IAAI,CAAC;YACJ,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC/C,OAAO;YACR,CAAC;YACD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAY,CAAC,CAAC;YACvF,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CACrB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CACzF,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;QAC1B,CAAC;IAAA,CACD;IAEO,IAAI,GAAS;QACpB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ;YAAE,OAAO;QAClE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,0BAA0B,CAAC,GAAG,CAAC,CAAC;QAChC,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAAA,CAClD;IAEO,KAAK,GAAS;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1C,MAAM,MAAM,GAAG,GAAG,EAAE,CACnB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAChD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAAA,CACjG,CAAC,CAAC;QACJ,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,MAAM,EAAE,CAAC;gBACzD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,MAAM;gBAAE,MAAM;YACnB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,MAAM;gBAAE,MAAM;YACnB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC;IAAA,CACD;IAEO,eAAe,GAAW;QACjC,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;IAAA,CACnD;IAEO,SAAS,GAAW;QAC3B,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAAA,CAC3G;CACD","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport { existsSync, lstatSync, readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport type { Prompt, Resource, Tool as SdkTool } from \"@modelcontextprotocol/sdk/types.js\";\nimport { writeDurableAtomicFileSync } from \"../../utils/durable-atomic-write.ts\";\nimport { ensurePrivateDirectorySync, hardenPrivateRegularFileSync } from \"../../utils/private-files.ts\";\nimport { hashMcpMetadata } from \"./config.ts\";\nimport type { McpServerMetadata } from \"./types.ts\";\n\nconst DEFAULT_METADATA_CACHE_MAX_BYTES = 8 * 1024 * 1024;\nconst DEFAULT_METADATA_CACHE_MAX_SERVERS = 64;\nconst DEFAULT_METADATA_CACHE_MAX_AGE_MS = 30 * 24 * 60 * 60 * 1000;\n\ninterface MetadataCacheFile {\n\tversion: 1;\n\tservers: Record<string, McpServerMetadata>;\n}\n\nexport interface McpMetadataCacheOptions {\n\tagentDir: string;\n\tmaxBytes?: number;\n\tmaxServers?: number;\n\tmaxAgeMs?: number;\n\tnow?: () => number;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction parseMetadata(value: unknown): McpServerMetadata | undefined {\n\tif (!isRecord(value)) {\n\t\treturn undefined;\n\t}\n\tif (\n\t\ttypeof value.server !== \"string\" ||\n\t\ttypeof value.metadataHash !== \"string\" ||\n\t\ttypeof value.lastSeenAt !== \"string\"\n\t) {\n\t\treturn undefined;\n\t}\n\tif (!Array.isArray(value.tools) || !Array.isArray(value.resources) || !Array.isArray(value.prompts)) {\n\t\treturn undefined;\n\t}\n\treturn {\n\t\tserver: value.server,\n\t\tmetadataHash: value.metadataHash,\n\t\tlastSeenAt: value.lastSeenAt,\n\t\t...(typeof value.serverVersion === \"string\" ? { serverVersion: value.serverVersion } : {}),\n\t\t...(typeof value.configHash === \"string\" ? { configHash: value.configHash } : {}),\n\t\ttools: value.tools as SdkTool[],\n\t\tresources: value.resources as Resource[],\n\t\tprompts: value.prompts as Prompt[],\n\t};\n}\n\nfunction parseCacheFile(value: unknown): MetadataCacheFile {\n\tif (!isRecord(value) || value.version !== 1 || !isRecord(value.servers)) {\n\t\treturn { version: 1, servers: {} };\n\t}\n\tconst servers: Record<string, McpServerMetadata> = {};\n\tfor (const [server, entry] of Object.entries(value.servers)) {\n\t\tconst parsed = parseMetadata(entry);\n\t\tif (parsed) {\n\t\t\tservers[server] = parsed;\n\t\t}\n\t}\n\treturn { version: 1, servers };\n}\n\nexport class McpMetadataCache {\n\tprivate path: string;\n\tprivate servers: Map<string, McpServerMetadata>;\n\tprivate maxBytes: number;\n\tprivate maxServers: number;\n\tprivate maxAgeMs: number;\n\tprivate now: () => number;\n\n\tconstructor(options: McpMetadataCacheOptions) {\n\t\tthis.path = join(options.agentDir, \"mcp\", \"metadata-cache.json\");\n\t\tthis.servers = new Map();\n\t\tthis.maxBytes = Math.max(1, options.maxBytes ?? DEFAULT_METADATA_CACHE_MAX_BYTES);\n\t\tthis.maxServers = Math.max(1, options.maxServers ?? DEFAULT_METADATA_CACHE_MAX_SERVERS);\n\t\tthis.maxAgeMs = Math.max(1, options.maxAgeMs ?? DEFAULT_METADATA_CACHE_MAX_AGE_MS);\n\t\tthis.now = options.now ?? Date.now;\n\t\tthis.load();\n\t}\n\n\tget(server: string): McpServerMetadata | undefined {\n\t\tconst metadata = this.servers.get(server);\n\t\treturn metadata ? structuredClone(metadata) : undefined;\n\t}\n\n\tgetAll(): McpServerMetadata[] {\n\t\treturn Array.from(this.servers.values(), (metadata) => structuredClone(metadata));\n\t}\n\n\tset(server: string, metadata: Omit<McpServerMetadata, \"metadataHash\" | \"lastSeenAt\">): McpServerMetadata {\n\t\tconst next: McpServerMetadata = {\n\t\t\t...metadata,\n\t\t\tserver,\n\t\t\tmetadataHash: hashMcpMetadata({\n\t\t\t\ttools: metadata.tools,\n\t\t\t\tresources: metadata.resources,\n\t\t\t\tprompts: metadata.prompts,\n\t\t\t\tserverVersion: metadata.serverVersion,\n\t\t\t\tconfigHash: metadata.configHash,\n\t\t\t}),\n\t\t\tlastSeenAt: new Date(this.now()).toISOString(),\n\t\t};\n\t\tthis.servers.set(server, next);\n\t\tthis.save();\n\t\treturn structuredClone(next);\n\t}\n\n\tdelete(server: string): void {\n\t\tthis.servers.delete(server);\n\t\tthis.save();\n\t}\n\n\tprivate load(): void {\n\t\tif (!existsSync(this.path)) {\n\t\t\treturn;\n\t\t}\n\t\ttry {\n\t\t\thardenPrivateRegularFileSync(this.path);\n\t\t\tif (lstatSync(this.path).size > this.maxBytes) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst parsed = parseCacheFile(JSON.parse(readFileSync(this.path, \"utf-8\")) as unknown);\n\t\t\tthis.servers = new Map(\n\t\t\t\tObject.entries(parsed.servers).filter(([server, metadata]) => server === metadata.server),\n\t\t\t);\n\t\t\tthis.prune();\n\t\t} catch {\n\t\t\tthis.servers = new Map();\n\t\t}\n\t}\n\n\tprivate save(): void {\n\t\tthis.prune();\n\t\tconst serialized = this.serialize();\n\t\tif (Buffer.byteLength(serialized, \"utf8\") > this.maxBytes) return;\n\t\tconst dir = dirname(this.path);\n\t\tensurePrivateDirectorySync(dir);\n\t\twriteDurableAtomicFileSync(this.path, serialized);\n\t}\n\n\tprivate prune(): void {\n\t\tconst cutoff = this.now() - this.maxAgeMs;\n\t\tconst sorted = () =>\n\t\t\tArray.from(this.servers.entries()).sort((left, right) => {\n\t\t\t\tconst leftTime = Date.parse(left[1].lastSeenAt);\n\t\t\t\tconst rightTime = Date.parse(right[1].lastSeenAt);\n\t\t\t\treturn (Number.isFinite(leftTime) ? leftTime : 0) - (Number.isFinite(rightTime) ? rightTime : 0);\n\t\t\t});\n\t\tfor (const [server, metadata] of sorted()) {\n\t\t\tconst lastSeenAt = Date.parse(metadata.lastSeenAt);\n\t\t\tif (!Number.isFinite(lastSeenAt) || lastSeenAt < cutoff) {\n\t\t\t\tthis.servers.delete(server);\n\t\t\t}\n\t\t}\n\t\twhile (this.servers.size > this.maxServers) {\n\t\t\tconst oldest = sorted()[0];\n\t\t\tif (!oldest) break;\n\t\t\tthis.servers.delete(oldest[0]);\n\t\t}\n\t\twhile (this.serializedBytes() > this.maxBytes) {\n\t\t\tconst oldest = sorted()[0];\n\t\t\tif (!oldest) break;\n\t\t\tthis.servers.delete(oldest[0]);\n\t\t}\n\t}\n\n\tprivate serializedBytes(): number {\n\t\treturn Buffer.byteLength(this.serialize(), \"utf8\");\n\t}\n\n\tprivate serialize(): string {\n\t\treturn `${JSON.stringify({ version: 1, servers: Object.fromEntries(this.servers.entries()) }, null, 2)}\\n`;\n\t}\n}\n"]}

package/dist/core/mcp/oauth-flow.d.ts

@@ -0,0 +1,94 @@
+import { type AuthorizationServerMetadata, type OAuthClientInformationMixed } from "@modelcontextprotocol/sdk/shared/auth.js";
+import type { McpOAuthStore } from "./oauth-store.ts";
+import type { McpResolvedServerConfig } from "./types.ts";
+export interface McpOAuthBrowserStartResult {
+    action: "auth";
+    server: string;
+    flow: "browser";
+    status: "pending" | "authenticated";
+    authorizationUrl?: string;
+    redirectUrl: string;
+    state?: string;
+    message: string;
+}
+export interface McpOAuthBrowserCompleteResult {
+    action: "auth";
+    server: string;
+    flow: "browser";
+    status: "authenticated";
+    message: string;
+}
+export interface McpOAuthDeviceStartResult {
+    action: "auth";
+    server: string;
+    flow: "device";
+    status: "pending";
+    verificationUri: string;
+    verificationUriComplete?: string;
+    userCode: string;
+    expiresAt: string;
+    intervalMs: number;
+    message: string;
+}
+export interface McpOAuthDevicePollResult {
+    action: "auth";
+    server: string;
+    flow: "device";
+    status: "pending" | "authenticated" | "failed";
+    nextPollMs?: number;
+    message: string;
+}
+export interface McpOAuthPendingDeviceFlow {
+    serverId: string;
+    deviceCode: string;
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete?: string;
+    expiresAtMs: number;
+    intervalMs: number;
+    nextPollAtMs: number;
+    authorizationServerUrl: string;
+    metadata: AuthorizationServerMetadata;
+    clientInformation: OAuthClientInformationMixed;
+    resource?: URL;
+}
+/**
+ * OAuth requests never follow redirects. Endpoint metadata is validated before
+ * credential-bearing requests, and rejecting redirects prevents an HTTPS token
+ * endpoint from forwarding codes, verifiers, or client secrets to plaintext or
+ * a different origin. Loopback HTTP remains available for MCP resource
+ * discovery; OAuth authorization-server endpoints themselves must be HTTPS.
+ */
+export declare function createSafeMcpOAuthFetch(fetchFn?: typeof fetch): typeof fetch;
+export declare function startMcpOAuthBrowserAuth(options: {
+    server: McpResolvedServerConfig;
+    store: McpOAuthStore;
+    redirectUrl: string | URL;
+    fetchFn?: typeof fetch;
+}): Promise<McpOAuthBrowserStartResult>;
+export declare function completeMcpOAuthBrowserAuth(options: {
+    server: McpResolvedServerConfig;
+    store: McpOAuthStore;
+    redirectUrl: string | URL;
+    code: string;
+    state?: string;
+    fetchFn?: typeof fetch;
+}): Promise<McpOAuthBrowserCompleteResult>;
+export declare function startMcpOAuthDeviceAuth(options: {
+    server: McpResolvedServerConfig;
+    store: McpOAuthStore;
+    fetchFn?: typeof fetch;
+}): Promise<{
+    result: McpOAuthDeviceStartResult;
+    pending: McpOAuthPendingDeviceFlow;
+}>;
+export declare function pollMcpOAuthDeviceAuth(options: {
+    server: McpResolvedServerConfig;
+    store: McpOAuthStore;
+    pending: McpOAuthPendingDeviceFlow;
+    fetchFn?: typeof fetch;
+}): Promise<{
+    result: McpOAuthDevicePollResult;
+    pending?: McpOAuthPendingDeviceFlow;
+}>;
+//# sourceMappingURL=oauth-flow.d.ts.map

package/dist/core/mcp/oauth-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-flow.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/oauth-flow.ts"],"names":[],"mappings":"AASA,OAAO,EACN,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAGhC,MAAM,0CAA0C,CAAC;AAGlD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAM1D,MAAM,WAAW,0BAA0B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,eAAe,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,6BAA6B;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,SAAS,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,eAAe,GAAG,QAAQ,CAAC;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,QAAQ,EAAE,2BAA2B,CAAC;IACtC,iBAAiB,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,EAAE,GAAG,CAAC;CACf;AAyCD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,OAAO,KAAa,GAAG,OAAO,KAAK,CAwBnF;AAwND,wBAAsB,wBAAwB,CAAC,OAAO,EAAE;IACvD,MAAM,EAAE,uBAAuB,CAAC;IAChC,KAAK,EAAE,aAAa,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,GAAG,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACvB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA0CtC;AAED,wBAAsB,2BAA2B,CAAC,OAAO,EAAE;IAC1D,MAAM,EAAE,uBAAuB,CAAC;IAChC,KAAK,EAAE,aAAa,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,GAAG,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACvB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CA6BzC;AAED,wBAAsB,uBAAuB,CAAC,OAAO,EAAE;IACtD,MAAM,EAAE,uBAAuB,CAAC;IAChC,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACvB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,yBAAyB,CAAC;IAAC,OAAO,EAAE,yBAAyB,CAAA;CAAE,CAAC,CA4ErF;AAED,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACrD,MAAM,EAAE,uBAAuB,CAAC;IAChC,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,yBAAyB,CAAC;IACnC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACvB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,wBAAwB,CAAC;IAAC,OAAO,CAAC,EAAE,yBAAyB,CAAA;CAAE,CAAC,CA2FrF","sourcesContent":["import {\n\tauth,\n\tdiscoverOAuthServerInfo,\n\tisHttpsUrl,\n\ttype OAuthServerInfo,\n\tregisterClient,\n\tselectClientAuthMethod,\n\tselectResourceURL,\n} from \"@modelcontextprotocol/sdk/client/auth.js\";\nimport {\n\ttype AuthorizationServerMetadata,\n\ttype OAuthClientInformationMixed,\n\ttype OAuthTokens,\n\tOAuthTokensSchema,\n} from \"@modelcontextprotocol/sdk/shared/auth.js\";\nimport { VERSION } from \"../../config.ts\";\nimport { VoltMcpOAuthProvider } from \"./oauth-provider.ts\";\nimport type { McpOAuthStore } from \"./oauth-store.ts\";\nimport { redactMcpText } from \"./safety.ts\";\nimport type { McpResolvedServerConfig } from \"./types.ts\";\n\nconst DEVICE_CODE_GRANT = \"urn:ietf:params:oauth:grant-type:device_code\";\nconst DEFAULT_DEVICE_INTERVAL_MS = 5000;\nconst SLOW_DOWN_INCREMENT_MS = 5000;\n\nexport interface McpOAuthBrowserStartResult {\n\taction: \"auth\";\n\tserver: string;\n\tflow: \"browser\";\n\tstatus: \"pending\" | \"authenticated\";\n\tauthorizationUrl?: string;\n\tredirectUrl: string;\n\tstate?: string;\n\tmessage: string;\n}\n\nexport interface McpOAuthBrowserCompleteResult {\n\taction: \"auth\";\n\tserver: string;\n\tflow: \"browser\";\n\tstatus: \"authenticated\";\n\tmessage: string;\n}\n\nexport interface McpOAuthDeviceStartResult {\n\taction: \"auth\";\n\tserver: string;\n\tflow: \"device\";\n\tstatus: \"pending\";\n\tverificationUri: string;\n\tverificationUriComplete?: string;\n\tuserCode: string;\n\texpiresAt: string;\n\tintervalMs: number;\n\tmessage: string;\n}\n\nexport interface McpOAuthDevicePollResult {\n\taction: \"auth\";\n\tserver: string;\n\tflow: \"device\";\n\tstatus: \"pending\" | \"authenticated\" | \"failed\";\n\tnextPollMs?: number;\n\tmessage: string;\n}\n\nexport interface McpOAuthPendingDeviceFlow {\n\tserverId: string;\n\tdeviceCode: string;\n\tuserCode: string;\n\tverificationUri: string;\n\tverificationUriComplete?: string;\n\texpiresAtMs: number;\n\tintervalMs: number;\n\tnextPollAtMs: number;\n\tauthorizationServerUrl: string;\n\tmetadata: AuthorizationServerMetadata;\n\tclientInformation: OAuthClientInformationMixed;\n\tresource?: URL;\n}\n\ninterface DeviceAuthorizationResponse {\n\tdevice_code: string;\n\tuser_code: string;\n\tverification_uri?: string;\n\tverification_url?: string;\n\tverification_uri_complete?: string;\n\texpires_in: number;\n\tinterval?: number;\n\tmessage?: string;\n}\n\nfunction isLoopbackHostname(hostname: string): boolean {\n\treturn hostname === \"localhost\" || hostname === \"127.0.0.1\" || hostname === \"::1\" || hostname === \"[::1]\";\n}\n\nfunction assertLoopbackRedirectUrl(value: string | URL): void {\n\tconst url = new URL(String(value));\n\tif (url.protocol !== \"http:\" || !isLoopbackHostname(url.hostname) || url.hostname === \"localhost\") {\n\t\tthrow new Error(\"MCP OAuth redirect URL must use HTTP on a numeric loopback address\");\n\t}\n\tif (url.username || url.password || url.hash) {\n\t\tthrow new Error(\"MCP OAuth redirect URL must not include userinfo or fragments\");\n\t}\n}\n\nfunction assertBrowserTargetUrl(value: string, label: string): void {\n\tassertHttpsEndpoint(value, label);\n}\n\nfunction getOAuthFetchUrl(input: Parameters<typeof fetch>[0]): URL {\n\tif (typeof input === \"string\") {\n\t\treturn new URL(input);\n\t}\n\tif (input instanceof URL) {\n\t\treturn input;\n\t}\n\treturn new URL(input.url);\n}\n\n/**\n * OAuth requests never follow redirects. Endpoint metadata is validated before\n * credential-bearing requests, and rejecting redirects prevents an HTTPS token\n * endpoint from forwarding codes, verifiers, or client secrets to plaintext or\n * a different origin. Loopback HTTP remains available for MCP resource\n * discovery; OAuth authorization-server endpoints themselves must be HTTPS.\n */\nexport function createSafeMcpOAuthFetch(fetchFn: typeof fetch = fetch): typeof fetch {\n\treturn async (input, init) => {\n\t\tconst requestUrl = getOAuthFetchUrl(input);\n\t\tif (\n\t\t\trequestUrl.protocol !== \"https:\" &&\n\t\t\t!(requestUrl.protocol === \"http:\" && isLoopbackHostname(requestUrl.hostname))\n\t\t) {\n\t\t\tthrow new Error(\"MCP OAuth network requests must use HTTPS unless the MCP resource is loopback HTTP\");\n\t\t}\n\t\tconst response = await fetchFn(input, { ...init, redirect: \"error\" });\n\t\tif (response.redirected || (response.status >= 300 && response.status < 400)) {\n\t\t\tthrow new Error(\"MCP OAuth network redirects are not allowed\");\n\t\t}\n\t\tif (response.url) {\n\t\t\tconst responseUrl = new URL(response.url);\n\t\t\tif (\n\t\t\t\tresponseUrl.protocol !== \"https:\" &&\n\t\t\t\t!(responseUrl.protocol === \"http:\" && isLoopbackHostname(responseUrl.hostname))\n\t\t\t) {\n\t\t\t\tthrow new Error(\"MCP OAuth response URL must use HTTPS unless the MCP resource is loopback HTTP\");\n\t\t\t}\n\t\t}\n\t\treturn response;\n\t};\n}\n\nfunction assertHttpsEndpoint(value: string | undefined, label: string): void {\n\tif (!value) {\n\t\tthrow new Error(`MCP OAuth ${label} is missing`);\n\t}\n\tconst url = new URL(value);\n\tif (url.protocol !== \"https:\") {\n\t\tthrow new Error(`MCP OAuth ${label} must use HTTPS`);\n\t}\n\tif (url.username || url.password || url.hash) {\n\t\tthrow new Error(`MCP OAuth ${label} must not include userinfo or fragments`);\n\t}\n}\n\nfunction assertOAuthServerUrlAllowed(server: McpResolvedServerConfig): void {\n\tif (!server.url) {\n\t\tthrow new Error(`MCP OAuth server ${server.id} is missing URL`);\n\t}\n\tconst url = new URL(server.url);\n\tif (url.protocol === \"https:\") {\n\t\treturn;\n\t}\n\tif (url.protocol === \"http:\" && isLoopbackHostname(url.hostname)) {\n\t\treturn;\n\t}\n\tthrow new Error(`MCP OAuth server ${server.id} must use HTTPS unless it is loopback HTTP`);\n}\n\nfunction getDeviceAuthorizationEndpoint(metadata: AuthorizationServerMetadata): string | undefined {\n\tconst value = (metadata as { device_authorization_endpoint?: unknown }).device_authorization_endpoint;\n\treturn typeof value === \"string\" ? value : undefined;\n}\n\nfunction validateBrowserServerInfo(serverInfo: OAuthServerInfo): void {\n\tassertHttpsEndpoint(serverInfo.authorizationServerUrl, \"authorization server URL\");\n\tconst metadata = serverInfo.authorizationServerMetadata;\n\tif (!metadata) {\n\t\tthrow new Error(\"MCP OAuth browser flow requires authorization server metadata\");\n\t}\n\tassertHttpsEndpoint(metadata.authorization_endpoint, \"authorization endpoint\");\n\tassertHttpsEndpoint(metadata.token_endpoint, \"token endpoint\");\n\tif (metadata.registration_endpoint) {\n\t\tassertHttpsEndpoint(metadata.registration_endpoint, \"registration endpoint\");\n\t}\n\tif (!metadata.code_challenge_methods_supported?.includes(\"S256\")) {\n\t\tthrow new Error(\"MCP OAuth authorization server must support PKCE S256\");\n\t}\n}\n\nfunction validateDeviceServerInfo(serverInfo: OAuthServerInfo): AuthorizationServerMetadata {\n\tassertHttpsEndpoint(serverInfo.authorizationServerUrl, \"authorization server URL\");\n\tconst metadata = serverInfo.authorizationServerMetadata;\n\tif (!metadata) {\n\t\tthrow new Error(\"MCP OAuth device flow requires authorization server metadata\");\n\t}\n\tassertHttpsEndpoint(metadata.token_endpoint, \"token endpoint\");\n\tassertHttpsEndpoint(getDeviceAuthorizationEndpoint(metadata), \"device authorization endpoint\");\n\tif (metadata.registration_endpoint) {\n\t\tassertHttpsEndpoint(metadata.registration_endpoint, \"registration endpoint\");\n\t}\n\tconst grants = metadata.grant_types_supported;\n\tif (grants && !grants.includes(DEVICE_CODE_GRANT)) {\n\t\tthrow new Error(\"MCP OAuth authorization server does not advertise device-code grant support\");\n\t}\n\treturn metadata;\n}\n\nfunction providerFor(\n\tserver: McpResolvedServerConfig,\n\tstore: McpOAuthStore,\n\tredirectUrl?: string | URL,\n): VoltMcpOAuthProvider {\n\treturn new VoltMcpOAuthProvider({\n\t\tserver,\n\t\tstore,\n\t\tredirectUrl,\n\t\tclientName: \"Volt\",\n\t\tclientVersion: VERSION,\n\t});\n}\n\nasync function discoverOAuthForServer(\n\tserver: McpResolvedServerConfig,\n\tfetchFn: typeof fetch = fetch,\n): Promise<OAuthServerInfo> {\n\tassertOAuthServerUrlAllowed(server);\n\tif (!server.url) {\n\t\tthrow new Error(`MCP OAuth server ${server.id} is missing URL`);\n\t}\n\tconst resourceMetadataUrl = server.auth?.resourceMetadataUrl ? new URL(server.auth.resourceMetadataUrl) : undefined;\n\tif (resourceMetadataUrl) {\n\t\tassertHttpsEndpoint(resourceMetadataUrl.toString(), \"resource metadata URL\");\n\t}\n\treturn discoverOAuthServerInfo(server.url, {\n\t\tresourceMetadataUrl,\n\t\tfetchFn,\n\t});\n}\n\nfunction saveDiscoveryState(\n\tserver: McpResolvedServerConfig,\n\tprovider: VoltMcpOAuthProvider,\n\tserverInfo: OAuthServerInfo,\n): void {\n\tprovider.saveDiscoveryState({\n\t\tauthorizationServerUrl: serverInfo.authorizationServerUrl,\n\t\tresourceMetadata: serverInfo.resourceMetadata,\n\t\tauthorizationServerMetadata: serverInfo.authorizationServerMetadata,\n\t\t...(server.auth?.resourceMetadataUrl ? { resourceMetadataUrl: server.auth.resourceMetadataUrl } : {}),\n\t});\n}\n\nasync function ensureClientInformation(\n\t_server: McpResolvedServerConfig,\n\tprovider: VoltMcpOAuthProvider,\n\tauthorizationServerUrl: string,\n\tmetadata: AuthorizationServerMetadata | undefined,\n\tscope: string | undefined,\n\tfetchFn: typeof fetch = fetch,\n): Promise<OAuthClientInformationMixed> {\n\tconst existing = provider.clientInformation();\n\tif (existing) {\n\t\treturn existing;\n\t}\n\tif (metadata?.client_id_metadata_document_supported && provider.clientMetadataUrl) {\n\t\tif (!isHttpsUrl(provider.clientMetadataUrl)) {\n\t\t\tthrow new Error(\"MCP OAuth client metadata URL must be an HTTPS URL with a path\");\n\t\t}\n\t\tconst clientInformation: OAuthClientInformationMixed = { client_id: provider.clientMetadataUrl };\n\t\tprovider.saveClientInformation(clientInformation);\n\t\treturn clientInformation;\n\t}\n\tif (!metadata?.registration_endpoint) {\n\t\tthrow new Error(\"MCP OAuth dynamic client registration is not available; configure auth.clientId\");\n\t}\n\tconst registered = await registerClient(authorizationServerUrl, {\n\t\tmetadata,\n\t\tclientMetadata: provider.clientMetadata,\n\t\tscope,\n\t\tfetchFn,\n\t});\n\tprovider.saveClientInformation(registered);\n\treturn registered;\n}\n\nfunction addClientAuthentication(\n\tparams: URLSearchParams,\n\theaders: Headers,\n\tclientInformation: OAuthClientInformationMixed,\n\tmetadata: AuthorizationServerMetadata,\n): void {\n\tconst supported = metadata.token_endpoint_auth_methods_supported ?? [];\n\tconst method = selectClientAuthMethod(clientInformation, supported);\n\tif (method === \"client_secret_basic\") {\n\t\tif (!clientInformation.client_secret) {\n\t\t\tparams.set(\"client_id\", clientInformation.client_id);\n\t\t\treturn;\n\t\t}\n\t\tconst credentials = Buffer.from(`${clientInformation.client_id}:${clientInformation.client_secret}`).toString(\n\t\t\t\"base64\",\n\t\t);\n\t\theaders.set(\"authorization\", `Basic ${credentials}`);\n\t\treturn;\n\t}\n\tparams.set(\"client_id\", clientInformation.client_id);\n\tif (method === \"client_secret_post\" && clientInformation.client_secret) {\n\t\tparams.set(\"client_secret\", clientInformation.client_secret);\n\t}\n}\n\nfunction parseDeviceAuthorizationResponse(value: unknown): DeviceAuthorizationResponse {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n\t\tthrow new Error(\"MCP OAuth device authorization response must be an object\");\n\t}\n\tconst record = value as Record<string, unknown>;\n\tconst verificationUri = record.verification_uri ?? record.verification_url;\n\tif (\n\t\ttypeof record.device_code !== \"string\" ||\n\t\ttypeof record.user_code !== \"string\" ||\n\t\ttypeof verificationUri !== \"string\" ||\n\t\ttypeof record.expires_in !== \"number\"\n\t) {\n\t\tthrow new Error(\"MCP OAuth device authorization response is missing required fields\");\n\t}\n\treturn {\n\t\tdevice_code: record.device_code,\n\t\tuser_code: record.user_code,\n\t\tverification_uri: verificationUri,\n\t\tverification_url: typeof record.verification_url === \"string\" ? record.verification_url : undefined,\n\t\tverification_uri_complete:\n\t\t\ttypeof record.verification_uri_complete === \"string\" ? record.verification_uri_complete : undefined,\n\t\texpires_in: record.expires_in,\n\t\tinterval: typeof record.interval === \"number\" ? record.interval : undefined,\n\t\tmessage: typeof record.message === \"string\" ? record.message : undefined,\n\t};\n}\n\nasync function parseOAuthTokenResponse(response: Response): Promise<OAuthTokens> {\n\tconst parsed = (await response.json()) as unknown;\n\treturn OAuthTokensSchema.parse(parsed);\n}\n\nasync function parseOAuthErrorCode(response: Response): Promise<string> {\n\ttry {\n\t\tconst parsed = (await response.json()) as unknown;\n\t\tif (typeof parsed === \"object\" && parsed !== null && !Array.isArray(parsed)) {\n\t\t\tconst error = (parsed as { error?: unknown }).error;\n\t\t\treturn typeof error === \"string\" ? error : `http_${response.status}`;\n\t\t}\n\t} catch {\n\t\t// Fall through to status-based error.\n\t}\n\treturn `http_${response.status}`;\n}\n\nexport async function startMcpOAuthBrowserAuth(options: {\n\tserver: McpResolvedServerConfig;\n\tstore: McpOAuthStore;\n\tredirectUrl: string | URL;\n\tfetchFn?: typeof fetch;\n}): Promise<McpOAuthBrowserStartResult> {\n\tassertLoopbackRedirectUrl(options.redirectUrl);\n\tconst fetchFn = createSafeMcpOAuthFetch(options.fetchFn);\n\tconst provider = providerFor(options.server, options.store, options.redirectUrl);\n\ttry {\n\t\tconst serverInfo = await discoverOAuthForServer(options.server, fetchFn);\n\t\tvalidateBrowserServerInfo(serverInfo);\n\t\tsaveDiscoveryState(options.server, provider, serverInfo);\n\t\tconst result = await auth(provider, {\n\t\t\tserverUrl: options.server.url ?? \"\",\n\t\t\tscope: options.server.auth?.scope,\n\t\t\tresourceMetadataUrl: options.server.auth?.resourceMetadataUrl\n\t\t\t\t? new URL(options.server.auth.resourceMetadataUrl)\n\t\t\t\t: undefined,\n\t\t\tfetchFn,\n\t\t});\n\t\tif (result === \"AUTHORIZED\") {\n\t\t\treturn {\n\t\t\t\taction: \"auth\",\n\t\t\t\tserver: options.server.id,\n\t\t\t\tflow: \"browser\",\n\t\t\t\tstatus: \"authenticated\",\n\t\t\t\tredirectUrl: String(options.redirectUrl),\n\t\t\t\tmessage: \"MCP server is already authenticated.\",\n\t\t\t};\n\t\t}\n\t\tif (!provider.authorizationUrl) {\n\t\t\tthrow new Error(\"MCP OAuth authorization URL was not produced\");\n\t\t}\n\t\treturn {\n\t\t\taction: \"auth\",\n\t\t\tserver: options.server.id,\n\t\t\tflow: \"browser\",\n\t\t\tstatus: \"pending\",\n\t\t\tauthorizationUrl: provider.authorizationUrl.toString(),\n\t\t\tredirectUrl: String(options.redirectUrl),\n\t\t\tstate: provider.expectedState,\n\t\t\tmessage: \"Open the authorization URL and complete the browser flow.\",\n\t\t};\n\t} catch (error) {\n\t\tthrow new Error(redactMcpText(error instanceof Error ? error.message : String(error)));\n\t}\n}\n\nexport async function completeMcpOAuthBrowserAuth(options: {\n\tserver: McpResolvedServerConfig;\n\tstore: McpOAuthStore;\n\tredirectUrl: string | URL;\n\tcode: string;\n\tstate?: string;\n\tfetchFn?: typeof fetch;\n}): Promise<McpOAuthBrowserCompleteResult> {\n\tassertLoopbackRedirectUrl(options.redirectUrl);\n\tconst record = options.store.getRecord(options.server);\n\tif (typeof record?.state !== \"string\" || record.state.length === 0 || options.state !== record.state) {\n\t\tthrow new Error(\"MCP OAuth state mismatch\");\n\t}\n\tconst fetchFn = createSafeMcpOAuthFetch(options.fetchFn);\n\tconst provider = providerFor(options.server, options.store, options.redirectUrl);\n\ttry {\n\t\tawait auth(provider, {\n\t\t\tserverUrl: options.server.url ?? \"\",\n\t\t\tauthorizationCode: options.code,\n\t\t\tscope: options.server.auth?.scope,\n\t\t\tresourceMetadataUrl: options.server.auth?.resourceMetadataUrl\n\t\t\t\t? new URL(options.server.auth.resourceMetadataUrl)\n\t\t\t\t: undefined,\n\t\t\tfetchFn,\n\t\t});\n\t\toptions.store.clear(options.server, \"verifier\");\n\t\treturn {\n\t\t\taction: \"auth\",\n\t\t\tserver: options.server.id,\n\t\t\tflow: \"browser\",\n\t\t\tstatus: \"authenticated\",\n\t\t\tmessage: \"MCP server authenticated.\",\n\t\t};\n\t} catch (error) {\n\t\tthrow new Error(redactMcpText(error instanceof Error ? error.message : String(error)));\n\t}\n}\n\nexport async function startMcpOAuthDeviceAuth(options: {\n\tserver: McpResolvedServerConfig;\n\tstore: McpOAuthStore;\n\tfetchFn?: typeof fetch;\n}): Promise<{ result: McpOAuthDeviceStartResult; pending: McpOAuthPendingDeviceFlow }> {\n\tconst fetchFn = createSafeMcpOAuthFetch(options.fetchFn);\n\tconst provider = providerFor(options.server, options.store);\n\ttry {\n\t\tconst serverInfo = await discoverOAuthForServer(options.server, fetchFn);\n\t\tconst metadata = validateDeviceServerInfo(serverInfo);\n\t\tsaveDiscoveryState(options.server, provider, serverInfo);\n\t\tconst resource = options.server.url\n\t\t\t? await selectResourceURL(options.server.url, provider, serverInfo.resourceMetadata)\n\t\t\t: undefined;\n\t\tconst scope = options.server.auth?.scope ?? serverInfo.resourceMetadata?.scopes_supported?.join(\" \");\n\t\tconst clientInformation = await ensureClientInformation(\n\t\t\toptions.server,\n\t\t\tprovider,\n\t\t\tserverInfo.authorizationServerUrl,\n\t\t\tmetadata,\n\t\t\tscope,\n\t\t\tfetchFn,\n\t\t);\n\t\tconst endpoint = getDeviceAuthorizationEndpoint(metadata);\n\t\tif (!endpoint) {\n\t\t\tthrow new Error(\"MCP OAuth device authorization endpoint is missing\");\n\t\t}\n\t\tassertHttpsEndpoint(endpoint, \"device authorization endpoint\");\n\t\tconst params = new URLSearchParams();\n\t\tconst headers = new Headers({ \"content-type\": \"application/x-www-form-urlencoded\" });\n\t\taddClientAuthentication(params, headers, clientInformation, metadata);\n\t\tif (scope) {\n\t\t\tparams.set(\"scope\", scope);\n\t\t}\n\t\tif (resource) {\n\t\t\tparams.set(\"resource\", resource.toString());\n\t\t}\n\t\tconst response = await fetchFn(endpoint, { method: \"POST\", headers, body: params });\n\t\tif (!response.ok) {\n\t\t\tthrow new Error(`MCP OAuth device authorization failed: ${await parseOAuthErrorCode(response)}`);\n\t\t}\n\t\tconst device = parseDeviceAuthorizationResponse((await response.json()) as unknown);\n\t\tassertBrowserTargetUrl(device.verification_uri ?? device.verification_url ?? \"\", \"verification URL\");\n\t\tif (device.verification_uri_complete) {\n\t\t\tassertBrowserTargetUrl(device.verification_uri_complete, \"complete verification URL\");\n\t\t}\n\t\tconst intervalMs = Math.max(1, device.interval ?? DEFAULT_DEVICE_INTERVAL_MS / 1000) * 1000;\n\t\tconst expiresAtMs = Date.now() + Math.max(1, device.expires_in) * 1000;\n\t\tconst pending: McpOAuthPendingDeviceFlow = {\n\t\t\tserverId: options.server.id,\n\t\t\tdeviceCode: device.device_code,\n\t\t\tuserCode: device.user_code,\n\t\t\tverificationUri: device.verification_uri ?? device.verification_url ?? \"\",\n\t\t\t...(device.verification_uri_complete ? { verificationUriComplete: device.verification_uri_complete } : {}),\n\t\t\texpiresAtMs,\n\t\t\tintervalMs,\n\t\t\tnextPollAtMs: Date.now() + intervalMs,\n\t\t\tauthorizationServerUrl: serverInfo.authorizationServerUrl,\n\t\t\tmetadata,\n\t\t\tclientInformation,\n\t\t\tresource,\n\t\t};\n\t\treturn {\n\t\t\tpending,\n\t\t\tresult: {\n\t\t\t\taction: \"auth\",\n\t\t\t\tserver: options.server.id,\n\t\t\t\tflow: \"device\",\n\t\t\t\tstatus: \"pending\",\n\t\t\t\tverificationUri: pending.verificationUri,\n\t\t\t\t...(pending.verificationUriComplete ? { verificationUriComplete: pending.verificationUriComplete } : {}),\n\t\t\t\tuserCode: pending.userCode,\n\t\t\t\texpiresAt: new Date(expiresAtMs).toISOString(),\n\t\t\t\tintervalMs,\n\t\t\t\tmessage: device.message ?? \"Open the verification URL and enter the user code.\",\n\t\t\t},\n\t\t};\n\t} catch (error) {\n\t\tthrow new Error(redactMcpText(error instanceof Error ? error.message : String(error)));\n\t}\n}\n\nexport async function pollMcpOAuthDeviceAuth(options: {\n\tserver: McpResolvedServerConfig;\n\tstore: McpOAuthStore;\n\tpending: McpOAuthPendingDeviceFlow;\n\tfetchFn?: typeof fetch;\n}): Promise<{ result: McpOAuthDevicePollResult; pending?: McpOAuthPendingDeviceFlow }> {\n\tif (Date.now() >= options.pending.expiresAtMs) {\n\t\treturn {\n\t\t\tresult: {\n\t\t\t\taction: \"auth\",\n\t\t\t\tserver: options.server.id,\n\t\t\t\tflow: \"device\",\n\t\t\t\tstatus: \"failed\",\n\t\t\t\tmessage: \"MCP OAuth device code expired.\",\n\t\t\t},\n\t\t};\n\t}\n\tconst waitMs = options.pending.nextPollAtMs - Date.now();\n\tif (waitMs > 0) {\n\t\treturn {\n\t\t\tpending: options.pending,\n\t\t\tresult: {\n\t\t\t\taction: \"auth\",\n\t\t\t\tserver: options.server.id,\n\t\t\t\tflow: \"device\",\n\t\t\t\tstatus: \"pending\",\n\t\t\t\tnextPollMs: waitMs,\n\t\t\t\tmessage: \"MCP OAuth device authorization is still pending.\",\n\t\t\t},\n\t\t};\n\t}\n\tconst params = new URLSearchParams({ grant_type: DEVICE_CODE_GRANT, device_code: options.pending.deviceCode });\n\tconst headers = new Headers({ \"content-type\": \"application/x-www-form-urlencoded\" });\n\taddClientAuthentication(params, headers, options.pending.clientInformation, options.pending.metadata);\n\tif (options.pending.resource) {\n\t\tparams.set(\"resource\", options.pending.resource.toString());\n\t}\n\tassertHttpsEndpoint(options.pending.metadata.token_endpoint, \"token endpoint\");\n\tconst fetchFn = createSafeMcpOAuthFetch(options.fetchFn);\n\tconst response = await fetchFn(options.pending.metadata.token_endpoint, {\n\t\tmethod: \"POST\",\n\t\theaders,\n\t\tbody: params,\n\t});\n\tif (response.ok) {\n\t\tconst tokens = await parseOAuthTokenResponse(response);\n\t\toptions.store.patchRecord(options.server, { tokens });\n\t\treturn {\n\t\t\tresult: {\n\t\t\t\taction: \"auth\",\n\t\t\t\tserver: options.server.id,\n\t\t\t\tflow: \"device\",\n\t\t\t\tstatus: \"authenticated\",\n\t\t\t\tmessage: \"MCP server authenticated.\",\n\t\t\t},\n\t\t};\n\t}\n\tconst error = await parseOAuthErrorCode(response);\n\tif (error === \"authorization_pending\") {\n\t\tconst next = { ...options.pending, nextPollAtMs: Date.now() + options.pending.intervalMs };\n\t\treturn {\n\t\t\tpending: next,\n\t\t\tresult: {\n\t\t\t\taction: \"auth\",\n\t\t\t\tserver: options.server.id,\n\t\t\t\tflow: \"device\",\n\t\t\t\tstatus: \"pending\",\n\t\t\t\tnextPollMs: options.pending.intervalMs,\n\t\t\t\tmessage: \"MCP OAuth device authorization is still pending.\",\n\t\t\t},\n\t\t};\n\t}\n\tif (error === \"slow_down\") {\n\t\tconst intervalMs = options.pending.intervalMs + SLOW_DOWN_INCREMENT_MS;\n\t\tconst next = { ...options.pending, intervalMs, nextPollAtMs: Date.now() + intervalMs };\n\t\treturn {\n\t\t\tpending: next,\n\t\t\tresult: {\n\t\t\t\taction: \"auth\",\n\t\t\t\tserver: options.server.id,\n\t\t\t\tflow: \"device\",\n\t\t\t\tstatus: \"pending\",\n\t\t\t\tnextPollMs: intervalMs,\n\t\t\t\tmessage: \"MCP OAuth authorization server asked Volt to slow down polling.\",\n\t\t\t},\n\t\t};\n\t}\n\treturn {\n\t\tresult: {\n\t\t\taction: \"auth\",\n\t\t\tserver: options.server.id,\n\t\t\tflow: \"device\",\n\t\t\tstatus: \"failed\",\n\t\t\tmessage: `MCP OAuth device authorization failed: ${redactMcpText(error)}`,\n\t\t},\n\t};\n}\n"]}