@ibm/ibmi-mcp-server 0.1.0

package/dist/ibmi-mcp-server/utils/security/sqlSecurityValidator.js

@@ -0,0 +1,426 @@
+/**
+ * @fileoverview SQL Security Validator for validating SQL queries against security policies
+ * Provides both AST-based and regex-based validation with comprehensive security checks
+ *
+ * @module src/utils/security/sqlSecurityValidator
+ */
+import pkg from "node-sql-parser";
+const { Parser } = pkg;
+import { logger } from "../../../utils/internal/logger.js";
+import { JsonRpcErrorCode, McpError } from "../../../types-global/errors.js";
+/**
+ * Dangerous SQL operations that should be blocked in read-only mode
+ */
+export const DANGEROUS_OPERATIONS = [
+    // Data manipulation
+    "INSERT",
+    "UPDATE",
+    "DELETE",
+    "REPLACE",
+    "MERGE",
+    "TRUNCATE",
+    // Schema operations
+    "DROP",
+    "CREATE",
+    "ALTER",
+    "RENAME",
+    // System operations
+    "CALL",
+    "EXEC",
+    "EXECUTE",
+    "SET",
+    "DECLARE",
+    // Security operations
+    "GRANT",
+    "REVOKE",
+    "DENY",
+    // Data transfer
+    "LOAD",
+    "IMPORT",
+    "EXPORT",
+    "BULK",
+    // System control
+    "SHUTDOWN",
+    "RESTART",
+    "KILL",
+    "STOP",
+    "START",
+    // Backup/restore
+    "BACKUP",
+    "RESTORE",
+    "DUMP",
+    // Locking
+    "LOCK",
+    "UNLOCK",
+    // Transaction control (in some contexts dangerous)
+    "COMMIT",
+    "ROLLBACK",
+    "SAVEPOINT",
+    // IBM i specific
+    "QCMDEXC",
+    "SQL_EXECUTE_IMMEDIATE",
+];
+/**
+ * Dangerous SQL functions that should be monitored/blocked
+ */
+export const DANGEROUS_FUNCTIONS = [
+    "SYSTEM",
+    "QCMDEXC",
+    "SQL_EXECUTE_IMMEDIATE",
+    "SQLCMD",
+    "LOAD_EXTENSION",
+    "EXEC",
+    "EXECUTE_IMMEDIATE",
+    "EVAL",
+    "CONCAT",
+    "CHAR",
+    "VARCHAR", // Can be used for dynamic SQL construction
+];
+/**
+ * Dangerous SQL patterns that should be detected
+ */
+export const DANGEROUS_PATTERNS = [
+    // Dynamic SQL patterns
+    /\bCONCAT\s*\(/i,
+    /\b(CHAR|VARCHAR|CLOB)\s*\(/i,
+    // System function patterns
+    /\bSYSTEM\s*\(/i,
+    /\bLOAD_EXTENSION\s*\(/i,
+    /\bQCMDEXC\s*\(/i,
+    // Comment-based bypass attempts
+    /\/\*.*?(DROP|DELETE|INSERT|UPDATE).*?\*\//i,
+    // Multiple statement patterns
+    /;\s*(DROP|DELETE|INSERT|UPDATE|CREATE|ALTER)/i,
+    // Union-based attacks
+    /\bUNION\s+(ALL\s+)?\s*\(\s*(DROP|DELETE|INSERT|UPDATE)/i,
+];
+/**
+ * SQL Security Validator class for comprehensive SQL security validation
+ */
+export class SqlSecurityValidator {
+    static parser = new Parser();
+    /**
+     * Validate SQL query against security configuration
+     * @param query - SQL query to validate
+     * @param securityConfig - Security configuration
+     * @param context - Request context for logging
+     * @throws {McpError} If validation fails
+     */
+    static validateQuery(query, securityConfig, context) {
+        logger.debug({
+            ...context,
+            queryLength: query.length,
+            readOnly: securityConfig.readOnly,
+            maxQueryLength: securityConfig.maxQueryLength,
+        }, "Starting SQL security validation");
+        // 1. Check query length limit
+        this.validateQueryLength(query, securityConfig);
+        // 2. Always validate forbidden keywords (regardless of read-only setting)
+        this.validateForbiddenKeywords(query, securityConfig, context);
+        // 3. If in read-only mode, perform comprehensive write operation validation
+        if (securityConfig.readOnly !== false) {
+            this.validateReadOnlyRestrictions(query, context);
+        }
+        logger.debug({
+            ...context,
+        }, "SQL security validation passed");
+    }
+    /**
+     * Validate query length against configured limits
+     * @param query - SQL query to validate
+     * @param securityConfig - Security configuration
+     * @private
+     */
+    static validateQueryLength(query, securityConfig) {
+        const maxLength = securityConfig.maxQueryLength ?? 10000;
+        if (query.length > maxLength) {
+            throw new McpError(JsonRpcErrorCode.ValidationError, `Query exceeds maximum length of ${maxLength} characters`, {
+                queryLength: query.length,
+                maxLength,
+                query: query.substring(0, 100) + (query.length > 100 ? "..." : ""),
+            });
+        }
+    }
+    /**
+     * Validate forbidden keywords using both AST and regex approaches
+     * @param query - SQL query to validate
+     * @param securityConfig - Security configuration
+     * @param context - Request context for logging
+     * @private
+     */
+    static validateForbiddenKeywords(query, securityConfig, context) {
+        if (!securityConfig.forbiddenKeywords ||
+            securityConfig.forbiddenKeywords.length === 0) {
+            return;
+        }
+        // Try AST-based validation first
+        const astResult = this.validateForbiddenKeywordsAST(query, securityConfig.forbiddenKeywords, context);
+        if (!astResult.isValid) {
+            throw new McpError(JsonRpcErrorCode.ValidationError, `Forbidden keywords detected: ${astResult.violations.join(", ")}`, {
+                violations: astResult.violations,
+                forbiddenKeywords: securityConfig.forbiddenKeywords,
+                query: query.substring(0, 100) + (query.length > 100 ? "..." : ""),
+            });
+        }
+        // Fallback to regex validation
+        const regexResult = this.validateForbiddenKeywordsRegex(query, securityConfig.forbiddenKeywords);
+        if (!regexResult.isValid) {
+            throw new McpError(JsonRpcErrorCode.ValidationError, `Forbidden keywords detected: ${regexResult.violations.join(", ")}`, {
+                violations: regexResult.violations,
+                forbiddenKeywords: securityConfig.forbiddenKeywords,
+                query: query.substring(0, 100) + (query.length > 100 ? "..." : ""),
+            });
+        }
+    }
+    /**
+     * Validate read-only restrictions using comprehensive validation
+     * @param query - SQL query to validate
+     * @param context - Request context for logging
+     * @private
+     */
+    static validateReadOnlyRestrictions(query, context) {
+        // Try AST-based validation first (more reliable)
+        const astResult = this.validateQueryAST(query, context);
+        if (!astResult.isValid) {
+            throw new McpError(JsonRpcErrorCode.ValidationError, `Write operations detected: ${astResult.violations.join(", ")}`, {
+                violations: astResult.violations,
+                readOnly: true,
+                query: query.substring(0, 100) + (query.length > 100 ? "..." : ""),
+            });
+        }
+        // Fallback to regex validation for additional coverage
+        const regexResult = this.validateQueryRegex(query, context);
+        if (!regexResult.isValid) {
+            throw new McpError(JsonRpcErrorCode.ValidationError, `Write operations detected: ${regexResult.violations.join(", ")}`, {
+                violations: regexResult.violations,
+                readOnly: true,
+                query: query.substring(0, 100) + (query.length > 100 ? "..." : ""),
+            });
+        }
+    }
+    /**
+     * Validate SQL query using AST parsing
+     * @param query - SQL query to validate
+     * @param context - Request context for logging
+     * @private
+     */
+    static validateQueryAST(query, context) {
+        const violations = [];
+        try {
+            const ast = this.parser.astify(query, { database: "mysql" });
+            logger.debug({
+                ...context,
+                astType: Array.isArray(ast) ? "multiple" : "single",
+                statementCount: Array.isArray(ast) ? ast.length : 1,
+            }, "SQL AST parsed successfully");
+            const statements = Array.isArray(ast) ? ast : [ast];
+            for (const statement of statements) {
+                if (!statement || typeof statement !== "object")
+                    continue;
+                const objStmt = statement;
+                const stmtType = String(objStmt.type || "").toUpperCase();
+                // 1. Check top-level statement type
+                if (stmtType &&
+                    DANGEROUS_OPERATIONS.includes(stmtType)) {
+                    violations.push(`Dangerous statement type: ${stmtType}`);
+                }
+                // 2. Check for dangerous functions anywhere in the AST
+                const dangerousFunctions = this.findDangerousFunctionsInAST(statement);
+                if (dangerousFunctions.length > 0) {
+                    violations.push(...dangerousFunctions.map((f) => `Dangerous function: ${f}`));
+                }
+                // 3. Check for UNION-based attacks
+                if (this.hasUnionWithDangerousStatements(statement)) {
+                    violations.push("UNION with dangerous statements detected");
+                }
+            }
+            return {
+                isValid: violations.length === 0,
+                violations,
+                validationMethod: "ast",
+            };
+        }
+        catch (parseError) {
+            logger.warning({
+                ...context,
+                error: parseError instanceof Error
+                    ? parseError.message
+                    : String(parseError),
+                queryLength: query.length,
+            }, "SQL AST parsing failed, will use regex validation only");
+            return {
+                isValid: true, // Let regex validation handle it
+                violations: [],
+                validationMethod: "ast",
+            };
+        }
+    }
+    /**
+     * Validate SQL query using regex patterns
+     * @param query - SQL query to validate
+     * @param _context - Request context for logging (unused but kept for consistency)
+     * @private
+     */
+    static validateQueryRegex(query, _context) {
+        const violations = [];
+        // Check for dangerous operations
+        for (const operation of DANGEROUS_OPERATIONS) {
+            const pattern = new RegExp(`\\b${operation}\\b`, "i");
+            if (pattern.test(query)) {
+                violations.push(`Write operation '${operation}' detected`);
+            }
+        }
+        // Check for dangerous patterns
+        for (const pattern of DANGEROUS_PATTERNS) {
+            if (pattern.test(query)) {
+                violations.push(`Dangerous pattern detected: ${pattern.source}`);
+            }
+        }
+        // Check for suspicious function calls
+        for (const func of DANGEROUS_FUNCTIONS) {
+            const pattern = new RegExp(`\\b${func}\\s*\\(`, "i");
+            if (pattern.test(query)) {
+                violations.push(`Suspicious function '${func}' detected`);
+            }
+        }
+        return {
+            isValid: violations.length === 0,
+            violations,
+            validationMethod: "regex",
+        };
+    }
+    /**
+     * Validate forbidden keywords using AST parsing
+     * @param query - SQL query to validate
+     * @param forbiddenKeywords - List of forbidden keywords
+     * @param context - Request context for logging
+     * @private
+     */
+    static validateForbiddenKeywordsAST(query, forbiddenKeywords, context) {
+        const violations = [];
+        try {
+            const ast = this.parser.astify(query, { database: "mysql" });
+            const statements = Array.isArray(ast) ? ast : [ast];
+            for (const statement of statements) {
+                const foundKeywords = this.findForbiddenKeywordsInAST(statement, forbiddenKeywords);
+                violations.push(...foundKeywords.map((k) => `Forbidden keyword: ${k}`));
+            }
+        }
+        catch (parseError) {
+            logger.debug({
+                ...context,
+                error: parseError instanceof Error
+                    ? parseError.message
+                    : String(parseError),
+            }, "AST parsing failed for forbidden keyword validation");
+        }
+        return {
+            isValid: violations.length === 0,
+            violations,
+            validationMethod: "ast",
+        };
+    }
+    /**
+     * Validate forbidden keywords using regex patterns
+     * @param query - SQL query to validate
+     * @param forbiddenKeywords - List of forbidden keywords
+     * @private
+     */
+    static validateForbiddenKeywordsRegex(query, forbiddenKeywords) {
+        const violations = [];
+        for (const keyword of forbiddenKeywords) {
+            const pattern = new RegExp(`\\b${keyword.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\b`, "i");
+            if (pattern.test(query)) {
+                violations.push(`Forbidden keyword: ${keyword}`);
+            }
+        }
+        return {
+            isValid: violations.length === 0,
+            violations,
+            validationMethod: "regex",
+        };
+    }
+    /**
+     * Find dangerous functions anywhere in the AST
+     * @param node - AST node to analyze
+     * @private
+     */
+    static findDangerousFunctionsInAST(node) {
+        const violations = [];
+        if (!node || typeof node !== "object")
+            return violations;
+        const objNode = node;
+        // Check if this node is a function call
+        if (objNode.type === "function" && objNode.name) {
+            const funcName = String(objNode.name).toUpperCase();
+            if (DANGEROUS_FUNCTIONS.includes(funcName)) {
+                violations.push(funcName);
+            }
+        }
+        // Recursively check all properties
+        for (const key in objNode) {
+            const value = objNode[key];
+            if (Array.isArray(value)) {
+                value.forEach((item) => violations.push(...this.findDangerousFunctionsInAST(item)));
+            }
+            else if (typeof value === "object") {
+                violations.push(...this.findDangerousFunctionsInAST(value));
+            }
+        }
+        return violations;
+    }
+    /**
+     * Find forbidden keywords anywhere in the AST
+     * @param node - AST node to analyze
+     * @param forbiddenKeywords - List of forbidden keywords
+     * @private
+     */
+    static findForbiddenKeywordsInAST(node, forbiddenKeywords) {
+        const violations = [];
+        if (!node || typeof node !== "object")
+            return violations;
+        const objNode = node;
+        // Check string values for forbidden keywords
+        for (const key in objNode) {
+            const value = objNode[key];
+            if (typeof value === "string") {
+                for (const keyword of forbiddenKeywords) {
+                    const pattern = new RegExp(`\\b${keyword.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\b`, "i");
+                    if (pattern.test(value)) {
+                        violations.push(keyword);
+                    }
+                }
+            }
+            else if (Array.isArray(value)) {
+                value.forEach((item) => violations.push(...this.findForbiddenKeywordsInAST(item, forbiddenKeywords)));
+            }
+            else if (typeof value === "object") {
+                violations.push(...this.findForbiddenKeywordsInAST(value, forbiddenKeywords));
+            }
+        }
+        return violations;
+    }
+    /**
+     * Check for UNION with dangerous statements
+     * @param statement - AST statement to check
+     * @private
+     */
+    static hasUnionWithDangerousStatements(statement) {
+        if (!statement || typeof statement !== "object")
+            return false;
+        const stmt = statement;
+        // Check if this is a UNION statement
+        if (stmt.type === "select" && stmt.union) {
+            // Check each part of the union
+            const unionParts = Array.isArray(stmt.union) ? stmt.union : [stmt.union];
+            for (const part of unionParts) {
+                const partObj = part;
+                if (partObj.type && String(partObj.type).toUpperCase() !== "SELECT") {
+                    return true;
+                }
+            }
+        }
+        return false;
+    }
+}
+//# sourceMappingURL=sqlSecurityValidator.js.map

package/dist/ibmi-mcp-server/utils/security/sqlSecurityValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlSecurityValidator.js","sourceRoot":"","sources":["../../../../src/ibmi-mcp-server/utils/security/sqlSecurityValidator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,GAAG,MAAM,iBAAiB,CAAC;AAClC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;AACvB,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEpD,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAetE;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,oBAAoB;IACpB,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,OAAO;IACP,UAAU;IACV,oBAAoB;IACpB,MAAM;IACN,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,oBAAoB;IACpB,MAAM;IACN,MAAM;IACN,SAAS;IACT,KAAK;IACL,SAAS;IACT,sBAAsB;IACtB,OAAO;IACP,QAAQ;IACR,MAAM;IACN,gBAAgB;IAChB,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,iBAAiB;IACjB,UAAU;IACV,SAAS;IACT,MAAM;IACN,MAAM;IACN,OAAO;IACP,iBAAiB;IACjB,QAAQ;IACR,SAAS;IACT,MAAM;IACN,UAAU;IACV,MAAM;IACN,QAAQ;IACR,mDAAmD;IACnD,QAAQ;IACR,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,SAAS;IACT,uBAAuB;CACf,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,QAAQ;IACR,SAAS;IACT,uBAAuB;IACvB,QAAQ;IACR,gBAAgB;IAChB,MAAM;IACN,mBAAmB;IACnB,MAAM;IACN,QAAQ;IACR,MAAM;IACN,SAAS,EAAE,2CAA2C;CAC9C,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,uBAAuB;IACvB,gBAAgB;IAChB,6BAA6B;IAC7B,2BAA2B;IAC3B,gBAAgB;IAChB,wBAAwB;IACxB,iBAAiB;IACjB,gCAAgC;IAChC,4CAA4C;IAC5C,8BAA8B;IAC9B,+CAA+C;IAC/C,sBAAsB;IACtB,yDAAyD;CACjD,CAAC;AAEX;;GAEG;AACH,MAAM,OAAO,oBAAoB;IACvB,MAAM,CAAC,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;IAErC;;;;;;OAMG;IACH,MAAM,CAAC,aAAa,CAClB,KAAa,EACb,cAAqC,EACrC,OAAuB;QAEvB,MAAM,CAAC,KAAK,CACV;YACE,GAAG,OAAO;YACV,WAAW,EAAE,KAAK,CAAC,MAAM;YACzB,QAAQ,EAAE,cAAc,CAAC,QAAQ;YACjC,cAAc,EAAE,cAAc,CAAC,cAAc;SAC9C,EACD,kCAAkC,CACnC,CAAC;QAEF,8BAA8B;QAC9B,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAEhD,0EAA0E;QAC1E,IAAI,CAAC,yBAAyB,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QAE/D,4EAA4E;QAC5E,IAAI,cAAc,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YACtC,IAAI,CAAC,4BAA4B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,CAAC,KAAK,CACV;YACE,GAAG,OAAO;SACX,EACD,gCAAgC,CACjC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,mBAAmB,CAChC,KAAa,EACb,cAAqC;QAErC,MAAM,SAAS,GAAG,cAAc,CAAC,cAAc,IAAI,KAAK,CAAC;QACzD,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,QAAQ,CAChB,gBAAgB,CAAC,eAAe,EAChC,mCAAmC,SAAS,aAAa,EACzD;gBACE,WAAW,EAAE,KAAK,CAAC,MAAM;gBACzB,SAAS;gBACT,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,yBAAyB,CACtC,KAAa,EACb,cAAqC,EACrC,OAAuB;QAEvB,IACE,CAAC,cAAc,CAAC,iBAAiB;YACjC,cAAc,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAC7C,CAAC;YACD,OAAO;QACT,CAAC;QAED,iCAAiC;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,4BAA4B,CACjD,KAAK,EACL,cAAc,CAAC,iBAAiB,EAChC,OAAO,CACR,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAChB,gBAAgB,CAAC,eAAe,EAChC,gCAAgC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACjE;gBACE,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,iBAAiB,EAAE,cAAc,CAAC,iBAAiB;gBACnD,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE,CACF,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,8BAA8B,CACrD,KAAK,EACL,cAAc,CAAC,iBAAiB,CACjC,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,QAAQ,CAChB,gBAAgB,CAAC,eAAe,EAChC,gCAAgC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACnE;gBACE,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,iBAAiB,EAAE,cAAc,CAAC,iBAAiB;gBACnD,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,4BAA4B,CACzC,KAAa,EACb,OAAuB;QAEvB,iDAAiD;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAChB,gBAAgB,CAAC,eAAe,EAChC,8BAA8B,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC/D;gBACE,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE,CACF,CAAC;QACJ,CAAC;QAED,uDAAuD;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,QAAQ,CAChB,gBAAgB,CAAC,eAAe,EAChC,8BAA8B,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACjE;gBACE,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,gBAAgB,CAC7B,KAAa,EACb,OAAuB;QAEvB,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAE7D,MAAM,CAAC,KAAK,CACV;gBACE,GAAG,OAAO;gBACV,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;gBACnD,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;aACpD,EACD,6BAA6B,CAC9B,CAAC;YAEF,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAEpD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;oBAAE,SAAS;gBAE1D,MAAM,OAAO,GAAG,SAA+C,CAAC;gBAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBAE1D,oCAAoC;gBACpC,IACE,QAAQ;oBACP,oBAA0C,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC9D,CAAC;oBACD,UAAU,CAAC,IAAI,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;gBAC3D,CAAC;gBAED,uDAAuD;gBACvD,MAAM,kBAAkB,GAAG,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC;gBACvE,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAClC,UAAU,CAAC,IAAI,CACb,GAAG,kBAAkB,CAAC,GAAG,CACvB,CAAC,CAAS,EAAE,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAC1C,CACF,CAAC;gBACJ,CAAC;gBAED,mCAAmC;gBACnC,IAAI,IAAI,CAAC,+BAA+B,CAAC,SAAS,CAAC,EAAE,CAAC;oBACpD,UAAU,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;gBAChC,UAAU;gBACV,gBAAgB,EAAE,KAAK;aACxB,CAAC;QACJ,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,MAAM,CAAC,OAAO,CACZ;gBACE,GAAG,OAAO;gBACV,KAAK,EACH,UAAU,YAAY,KAAK;oBACzB,CAAC,CAAC,UAAU,CAAC,OAAO;oBACpB,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACxB,WAAW,EAAE,KAAK,CAAC,MAAM;aAC1B,EACD,wDAAwD,CACzD,CAAC;YAEF,OAAO;gBACL,OAAO,EAAE,IAAI,EAAE,iCAAiC;gBAChD,UAAU,EAAE,EAAE;gBACd,gBAAgB,EAAE,KAAK;aACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,kBAAkB,CAC/B,KAAa,EACb,QAAwB;QAExB,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,iCAAiC;QACjC,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,SAAS,KAAK,EAAE,GAAG,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,UAAU,CAAC,IAAI,CAAC,oBAAoB,SAAS,YAAY,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,UAAU,CAAC,IAAI,CAAC,+BAA+B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,GAAG,CAAC,CAAC;YACrD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,UAAU,CAAC,IAAI,CAAC,wBAAwB,IAAI,YAAY,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YAChC,UAAU;YACV,gBAAgB,EAAE,OAAO;SAC1B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,4BAA4B,CACzC,KAAa,EACb,iBAA2B,EAC3B,OAAuB;QAEvB,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAEpD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,aAAa,GAAG,IAAI,CAAC,0BAA0B,CACnD,SAAS,EACT,iBAAiB,CAClB,CAAC;gBACF,UAAU,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CACV;gBACE,GAAG,OAAO;gBACV,KAAK,EACH,UAAU,YAAY,KAAK;oBACzB,CAAC,CAAC,UAAU,CAAC,OAAO;oBACpB,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;aACzB,EACD,qDAAqD,CACtD,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YAChC,UAAU;YACV,gBAAgB,EAAE,KAAK;SACxB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,8BAA8B,CAC3C,KAAa,EACb,iBAA2B;QAE3B,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,IAAI,MAAM,CACxB,MAAM,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,KAAK,EACzD,GAAG,CACJ,CAAC;YACF,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,UAAU,CAAC,IAAI,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YAChC,UAAU;YACV,gBAAgB,EAAE,OAAO;SAC1B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,2BAA2B,CAAC,IAAa;QACtD,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC;QAEzD,MAAM,OAAO,GAAG,IAA+B,CAAC;QAEhD,wCAAwC;QACxC,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAEpD,IAAK,mBAAyC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACrB,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAC3D,CAAC;YACJ,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,0BAA0B,CACvC,IAAa,EACb,iBAA2B;QAE3B,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC;QAEzD,MAAM,OAAO,GAAG,IAA+B,CAAC;QAEhD,6CAA6C;QAC7C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;oBACxC,MAAM,OAAO,GAAG,IAAI,MAAM,CACxB,MAAM,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,KAAK,EACzD,GAAG,CACJ,CAAC;oBACF,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;wBACxB,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAC3B,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACrB,UAAU,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAC5D,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrC,UAAU,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAC7D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,+BAA+B,CAAC,SAAkB;QAC/D,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAE9D,MAAM,IAAI,GAAG,SAAoC,CAAC;QAElD,qCAAqC;QACrC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACzC,+BAA+B;YAC/B,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,IAA+B,CAAC;gBAChD,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;oBACpE,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC"}

package/dist/ibmi-mcp-server/utils/sql/parameterProcessor.d.ts

@@ -0,0 +1,182 @@
+/**
+ * @fileoverview Unified parameter processor for SQL parameter validation and binding
+ * Combines validation, type conversion, and SQL parameter binding in a single streamlined interface
+ *
+ * @module src/utils/sql/parameterProcessor
+ */
+import { BindingValue } from "@ibm/mapepire-js";
+import { RequestContext } from "../../../utils/internal/requestContext.js";
+import { SqlToolParameter } from "../../schemas/index.js";
+/**
+ * Parameter processing mode
+ */
+export type ParameterMode = "named" | "positional" | "template" | "hybrid";
+/**
+ * Parameter processing options
+ */
+export interface ParameterProcessingOptions {
+    /** Whether to include detailed logging */
+    detailedLogging?: boolean;
+    /** Whether to validate parameter syntax */
+    validateSyntax?: boolean;
+    /** Custom context for logging */
+    context?: RequestContext;
+    /** Strict type validation */
+    strictTypeValidation?: boolean;
+}
+/**
+ * Parameter processing result
+ */
+export interface ParameterProcessingResult {
+    /** Processed SQL string with ? placeholders */
+    sql: string;
+    /** Parameters in order for binding */
+    parameters: BindingValue[];
+    /** Parameter names that were found */
+    parameterNames: string[];
+    /** Parameters that were missing */
+    missingParameters: string[];
+    /** Detected parameter mode */
+    mode: ParameterMode;
+    /** Processing statistics */
+    stats: {
+        originalLength: number;
+        processedLength: number;
+        namedParametersFound: number;
+        positionalParametersFound: number;
+        parametersConverted: number;
+    };
+}
+/**
+ * Parameter validation result
+ */
+export interface ValidationResult {
+    /** Whether validation passed */
+    valid: boolean;
+    /** Converted value (if valid) */
+    value?: BindingValue;
+    /** Validation errors */
+    errors: string[];
+    /** Validation warnings */
+    warnings: string[];
+}
+/**
+ * Unified parameter processor for SQL parameter validation and binding
+ * Handles validation, type conversion, and SQL parameter binding in one streamlined interface
+ */
+export declare class ParameterProcessor {
+    /**
+     * Process SQL statement with parameter validation and binding
+     * @param sql - SQL statement with parameter placeholders
+     * @param parameterValues - Parameter values by name
+     * @param parameterDefinitions - YAML parameter definitions for validation
+     * @param options - Processing options
+     * @returns Processed SQL and parameter array with validation results
+     */
+    static process(sql: string, parameterValues: Record<string, unknown>, parameterDefinitions?: SqlToolParameter[], options?: ParameterProcessingOptions): Promise<ParameterProcessingResult>;
+    /**
+     * Validate parameters and apply defaults according to YAML definitions
+     * @param parameterValues - Raw parameter values
+     * @param parameterDefinitions - YAML parameter definitions
+     * @param context - Request context
+     * @returns Validated and processed parameters
+     */
+    private static validateAndProcessParameters;
+    /**
+     * Validate and convert parameter value according to YAML definition
+     * @param value - Input value to validate
+     * @param definition - YAML parameter definition
+     * @returns Validation result with converted value
+     */
+    private static validateParameter;
+    /**
+     * Validate string parameter
+     */
+    private static validateStringParameter;
+    /**
+     * Validate integer parameter
+     */
+    private static validateIntegerParameter;
+    /**
+     * Validate float parameter
+     */
+    private static validateFloatParameter;
+    /**
+     * Validate boolean parameter
+     */
+    private static validateBooleanParameter;
+    /**
+     * Validate array parameter
+     */
+    private static validateArrayParameter;
+    /**
+     * Validate enum constraint
+     */
+    private static validateEnumConstraint;
+    /**
+     * Detect the parameter mode used in the SQL statement
+     * @param sql - SQL statement to analyze
+     * @returns Detected parameter mode
+     */
+    private static detectParameterMode;
+    /**
+     * Process named parameters (:param)
+     * @param sql - SQL statement with named parameters
+     * @param parameterValues - Parameter values by name
+     * @param context - Request context
+     * @param strictTypeValidation - Whether to enforce strict type validation
+     * @returns Processing result
+     */
+    private static processNamedParameters;
+    /**
+     * Process positional parameters (?)
+     * @param sql - SQL statement with positional parameters
+     * @param parameterValues - Parameter values by name or index
+     * @param context - Request context
+     * @param strictTypeValidation - Whether to enforce strict type validation
+     * @returns Processing result
+     */
+    private static processPositionalParameters;
+    /**
+     * Process hybrid parameters (mix of named and positional)
+     * @param sql - SQL statement with mixed parameters
+     * @param parameterValues - Parameter values by name
+     * @param context - Request context
+     * @param strictTypeValidation - Whether to enforce strict type validation
+     * @returns Processing result
+     */
+    private static processHybridParameters;
+    /**
+     * Convert a parameter value to BindingValue
+     * @param value - Parameter value to convert
+     * @param paramName - Parameter name for error messages
+     * @param strictTypeValidation - Whether to enforce strict type validation
+     * @returns Converted BindingValue
+     */
+    private static convertToBindingValue;
+    /**
+     * Validate SQL statement syntax for parameter processing
+     * @param sql - SQL statement to validate
+     * @throws McpError if syntax is invalid
+     */
+    private static validateSqlSyntax;
+    /**
+     * Extract parameter names from SQL statement
+     * @param sql - SQL statement to analyze
+     * @returns Array of unique parameter names
+     */
+    static extractParameterNames(sql: string): string[];
+    /**
+     * Count positional parameters in SQL statement
+     * @param sql - SQL statement to analyze
+     * @returns Number of ? placeholders
+     */
+    static countPositionalParameters(sql: string): number;
+    /**
+     * Check if SQL statement has any parameters
+     * @param sql - SQL statement to check
+     * @returns True if statement contains parameters
+     */
+    static hasParameters(sql: string): boolean;
+}
+//# sourceMappingURL=parameterProcessor.d.ts.map

package/dist/ibmi-mcp-server/utils/sql/parameterProcessor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parameterProcessor.d.ts","sourceRoot":"","sources":["../../../../src/ibmi-mcp-server/utils/sql/parameterProcessor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EACL,cAAc,EAEf,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,YAAY,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE3E;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,0CAA0C;IAC1C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,2CAA2C;IAC3C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iCAAiC;IACjC,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,6BAA6B;IAC7B,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,sCAAsC;IACtC,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,sCAAsC;IACtC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,mCAAmC;IACnC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,8BAA8B;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,4BAA4B;IAC5B,KAAK,EAAE;QACL,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;QACxB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,yBAAyB,EAAE,MAAM,CAAC;QAClC,mBAAmB,EAAE,MAAM,CAAC;KAC7B,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gCAAgC;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,iCAAiC;IACjC,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,wBAAwB;IACxB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAWD;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B;;;;;;;OAOG;WACU,OAAO,CAClB,GAAG,EAAE,MAAM,EACX,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACxC,oBAAoB,GAAE,gBAAgB,EAAO,EAC7C,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,yBAAyB,CAAC;IAwHrC;;;;;;OAMG;mBACkB,4BAA4B;IAqDjD;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAiFhC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,uBAAuB;IA2DtC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,wBAAwB;IAuDvC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAgDrC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,wBAAwB;IAkDvC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAsDrC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IA2BrC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAoBlC;;;;;;;OAOG;mBACkB,sBAAsB;IAsH3C;;;;;;;OAOG;mBACkB,2BAA2B;IA4EhD;;;;;;;OAOG;mBACkB,uBAAuB;IA6C5C;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,qBAAqB;IA2DpC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAgChC;;;;OAIG;IACH,MAAM,CAAC,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAcnD;;;;OAIG;IACH,MAAM,CAAC,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAIrD;;;;OAIG;IACH,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;CAM3C"}