@inkog-io/mcp 1.0.0

package/dist/tools/mlbom.js

@@ -0,0 +1,344 @@
+/**
+ * inkog_generate_mlbom Tool
+ *
+ * P1 - Machine Learning Bill of Materials (MLBOM) Generation
+ *
+ * Generates a comprehensive inventory of all ML/AI components in an agent system:
+ * - Models (OpenAI, Anthropic, local models, etc.)
+ * - Tools (function calls, APIs, integrations)
+ * - Data sources (databases, vector stores, file systems)
+ * - Frameworks (LangChain, CrewAI, LangGraph, etc.)
+ * - Dependencies (pip, npm packages)
+ *
+ * Output formats: CycloneDX (recommended), SPDX, JSON
+ * Gartner-recommended capability for AI supply chain visibility.
+ */
+import { z } from 'zod';
+import { getClient, InkogAuthError, InkogNetworkError } from '../api/client.js';
+import { getRelativePaths, readDirectory } from '../utils/file-reader.js';
+// =============================================================================
+// Schema
+// =============================================================================
+const MlbomArgsSchema = z.object({
+    path: z.string().describe('Path to agent codebase to analyze'),
+    format: z
+        .enum(['cyclonedx', 'spdx', 'json'])
+        .optional()
+        .default('cyclonedx')
+        .describe('Output format: cyclonedx (recommended), spdx, or json'),
+    include_vulnerabilities: z
+        .boolean()
+        .optional()
+        .default(true)
+        .describe('Include known vulnerabilities for detected components'),
+});
+// =============================================================================
+// Helpers
+// =============================================================================
+function formatComponentType(type) {
+    switch (type) {
+        case 'model':
+            return '🧠 Model';
+        case 'tool':
+            return '🔧 Tool';
+        case 'data-source':
+            return '💾 Data Source';
+        case 'framework':
+            return '📦 Framework';
+        case 'dependency':
+            return '📚 Dependency';
+        default:
+            return type;
+    }
+}
+function formatSeverityIcon(severity) {
+    switch (severity) {
+        case 'CRITICAL':
+            return '🔴';
+        case 'HIGH':
+            return '🟠';
+        case 'MEDIUM':
+            return '🟡';
+        case 'LOW':
+            return '🟢';
+        default:
+            return '⚪';
+    }
+}
+function formatRiskScore(score) {
+    if (score >= 90) {
+        return `✅ ${score}/100 (Low Risk)`;
+    }
+    else if (score >= 70) {
+        return `🟢 ${score}/100 (Moderate Risk)`;
+    }
+    else if (score >= 50) {
+        return `🟡 ${score}/100 (Elevated Risk)`;
+    }
+    else if (score >= 30) {
+        return `🟠 ${score}/100 (High Risk)`;
+    }
+    else {
+        return `🔴 ${score}/100 (Critical Risk)`;
+    }
+}
+function formatComponent(component, detailed) {
+    const typeLabel = formatComponentType(component.type);
+    let output = `${typeLabel}: ${component.name}`;
+    if (component.version !== undefined) {
+        output += ` v${component.version}`;
+    }
+    output += '\n';
+    if (component.provider !== undefined) {
+        output += `   Provider: ${component.provider}\n`;
+    }
+    if (component.license !== undefined) {
+        output += `   License: ${component.license}\n`;
+    }
+    output += `   📍 ${component.location}`;
+    if (component.line !== undefined) {
+        output += `:${component.line}`;
+    }
+    output += '\n';
+    if (detailed && component.properties !== undefined && Object.keys(component.properties).length > 0) {
+        output += '   Properties:\n';
+        for (const [key, value] of Object.entries(component.properties)) {
+            output += `     • ${key}: ${value}\n`;
+        }
+    }
+    if (component.vulnerabilities !== undefined && component.vulnerabilities.length > 0) {
+        output += '   ⚠️  Vulnerabilities:\n';
+        for (const vuln of component.vulnerabilities) {
+            const icon = formatSeverityIcon(vuln.severity);
+            output += `     ${icon} ${vuln.id}: ${vuln.description}\n`;
+            if (vuln.cve !== undefined) {
+                output += `        CVE: ${vuln.cve}\n`;
+            }
+        }
+    }
+    return output;
+}
+function groupComponentsByType(components) {
+    const groups = {};
+    for (const component of components) {
+        const existing = groups[component.type];
+        if (existing === undefined) {
+            groups[component.type] = [component];
+        }
+        else {
+            existing.push(component);
+        }
+    }
+    return groups;
+}
+// =============================================================================
+// Handler
+// =============================================================================
+async function mlbomHandler(rawArgs) {
+    // Validate arguments
+    const parseResult = MlbomArgsSchema.safeParse(rawArgs);
+    if (!parseResult.success) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Invalid arguments: ${parseResult.error.message}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    const args = parseResult.data;
+    try {
+        // Read files from path
+        const readResult = readDirectory(args.path);
+        if (readResult.files.length === 0) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `No files found in: ${args.path}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        // Get relative paths
+        const files = getRelativePaths(readResult.files, args.path);
+        // Call Inkog API
+        const client = getClient();
+        const response = await client.generateMlbom(files, {
+            format: args.format,
+            includeVulnerabilities: args.include_vulnerabilities,
+        });
+        // If format is CycloneDX or SPDX, return the pre-formatted content
+        if (args.format !== 'json' && response.bomContent !== undefined) {
+            let output = '╔══════════════════════════════════════════════════════╗\n';
+            output += '║           📋 ML Bill of Materials (MLBOM)             ║\n';
+            output += '╚══════════════════════════════════════════════════════╝\n\n';
+            output += `📦 Format: ${args.format.toUpperCase()}\n`;
+            output += `📅 Generated: ${response.generatedAt}\n`;
+            output += `📊 Components: ${response.components.length}\n`;
+            output += `⚠️  Vulnerabilities: ${response.vulnerabilityCount}\n`;
+            output += `🔒 Risk Score: ${formatRiskScore(response.riskScore)}\n\n`;
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += `${args.format.toUpperCase()} Output:\n\n`;
+            output += '```' + (args.format === 'cyclonedx' ? 'json' : 'xml') + '\n';
+            output += response.bomContent + '\n';
+            output += '```\n';
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: output,
+                    },
+                ],
+            };
+        }
+        // Build human-readable output for JSON format
+        let output = '╔══════════════════════════════════════════════════════╗\n';
+        output += '║           📋 ML Bill of Materials (MLBOM)             ║\n';
+        output += '╚══════════════════════════════════════════════════════╝\n\n';
+        output += `📦 Version: ${response.version}\n`;
+        output += `📅 Generated: ${response.generatedAt}\n`;
+        output += `📊 Total Components: ${response.components.length}\n`;
+        output += `⚠️  Total Vulnerabilities: ${response.vulnerabilityCount}\n`;
+        output += `🔒 Supply Chain Risk Score: ${formatRiskScore(response.riskScore)}\n\n`;
+        // Component summary by type
+        const groups = groupComponentsByType(response.components);
+        output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+        output += '📊 COMPONENT SUMMARY\n\n';
+        const typeOrder = ['model', 'tool', 'data-source', 'framework', 'dependency'];
+        for (const type of typeOrder) {
+            const components = groups[type];
+            if (components !== undefined && components.length > 0) {
+                output += `${formatComponentType(type)}: ${components.length}\n`;
+            }
+        }
+        output += '\n';
+        // Detailed component list
+        if (response.components.length > 0) {
+            // Models first (most important)
+            if (groups.model !== undefined && groups.model.length > 0) {
+                output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+                output += '🧠 MODELS\n\n';
+                for (const component of groups.model) {
+                    output += formatComponent(component, true) + '\n';
+                }
+            }
+            // Tools
+            if (groups.tool !== undefined && groups.tool.length > 0) {
+                output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+                output += '🔧 TOOLS\n\n';
+                for (const component of groups.tool) {
+                    output += formatComponent(component, true) + '\n';
+                }
+            }
+            // Data sources
+            if (groups['data-source'] !== undefined && groups['data-source'].length > 0) {
+                output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+                output += '💾 DATA SOURCES\n\n';
+                for (const component of groups['data-source']) {
+                    output += formatComponent(component, true) + '\n';
+                }
+            }
+            // Frameworks
+            if (groups.framework !== undefined && groups.framework.length > 0) {
+                output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+                output += '📦 FRAMEWORKS\n\n';
+                for (const component of groups.framework) {
+                    output += formatComponent(component, false) + '\n';
+                }
+            }
+            // Dependencies (less detailed)
+            if (groups.dependency !== undefined && groups.dependency.length > 0) {
+                output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+                output += '📚 DEPENDENCIES\n\n';
+                // Only show vulnerable dependencies in detail
+                const vulnerableDeps = groups.dependency.filter((d) => d.vulnerabilities !== undefined && d.vulnerabilities.length > 0);
+                const safeDeps = groups.dependency.filter((d) => d.vulnerabilities === undefined || d.vulnerabilities.length === 0);
+                if (vulnerableDeps.length > 0) {
+                    output += '⚠️  Vulnerable Dependencies:\n\n';
+                    for (const component of vulnerableDeps) {
+                        output += formatComponent(component, true) + '\n';
+                    }
+                }
+                if (safeDeps.length > 0) {
+                    output += 'Other Dependencies: ';
+                    output += safeDeps.map((d) => `${d.name}${d.version !== undefined ? `@${d.version}` : ''}`).join(', ');
+                    output += '\n';
+                }
+            }
+        }
+        // Footer with export hint
+        output += '\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n';
+        output += '💡 TIP: Use format="cyclonedx" or format="spdx" for standard export\n';
+        output += 'MLBOM generation powered by Inkog AI Security Platform\n';
+        output += 'Learn more: https://inkog.io/mlbom\n';
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: output,
+                },
+            ],
+        };
+    }
+    catch (error) {
+        if (error instanceof InkogAuthError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: '🔐 API Key Required\n\nGet your free key at https://app.inkog.io',
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (error instanceof InkogNetworkError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Network error: ${error.message}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        throw error;
+    }
+}
+// =============================================================================
+// Tool Definition
+// =============================================================================
+export const mlbomTool = {
+    tool: {
+        name: 'inkog_generate_mlbom',
+        description: 'Generate a Machine Learning Bill of Materials (MLBOM) for AI agents. Lists all models, tools, data sources, frameworks, and dependencies with known vulnerabilities. Supports CycloneDX and SPDX formats for supply chain compliance.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                path: {
+                    type: 'string',
+                    description: 'Path to agent codebase to analyze',
+                },
+                format: {
+                    type: 'string',
+                    enum: ['cyclonedx', 'spdx', 'json'],
+                    default: 'cyclonedx',
+                    description: 'Output format: cyclonedx (recommended), spdx, or json',
+                },
+                include_vulnerabilities: {
+                    type: 'boolean',
+                    default: true,
+                    description: 'Include known vulnerabilities for detected components',
+                },
+            },
+            required: ['path'],
+        },
+    },
+    handler: mlbomHandler,
+};
+//# sourceMappingURL=mlbom.js.map

package/dist/tools/mlbom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mlbom.js","sourceRoot":"","sources":["../../src/tools/mlbom.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAG1E,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAEhF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC9D,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;SACnC,QAAQ,EAAE;SACV,OAAO,CAAC,WAAW,CAAC;SACpB,QAAQ,CAAC,uDAAuD,CAAC;IACpE,uBAAuB,EAAE,CAAC;SACvB,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,uDAAuD,CAAC;CACrE,CAAC,CAAC;AAIH,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,mBAAmB,CAAC,IAAyB;IACpD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO,UAAU,CAAC;QACpB,KAAK,MAAM;YACT,OAAO,SAAS,CAAC;QACnB,KAAK,aAAa;YAChB,OAAO,gBAAgB,CAAC;QAC1B,KAAK,WAAW;YACd,OAAO,cAAc,CAAC;QACxB,KAAK,YAAY;YACf,OAAO,eAAe,CAAC;QACzB;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAkB;IAC5C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,IAAI,CAAC;QACd,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC;QACd,KAAK,KAAK;YACR,OAAO,IAAI,CAAC;QACd;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAChB,OAAO,KAAK,KAAK,iBAAiB,CAAC;IACrC,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,OAAO,MAAM,KAAK,sBAAsB,CAAC;IAC3C,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,OAAO,MAAM,KAAK,sBAAsB,CAAC;IAC3C,CAAC;SAAM,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACvB,OAAO,MAAM,KAAK,kBAAkB,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,OAAO,MAAM,KAAK,sBAAsB,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,SAAsB,EAAE,QAAiB;IAChE,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,MAAM,GAAG,GAAG,SAAS,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;IAE/C,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,IAAI,IAAI,CAAC;IAEf,IAAI,SAAS,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,gBAAgB,SAAS,CAAC,QAAQ,IAAI,CAAC;IACnD,CAAC;IAED,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,SAAS,CAAC,OAAO,IAAI,CAAC;IACjD,CAAC;IAED,MAAM,IAAI,SAAS,SAAS,CAAC,QAAQ,EAAE,CAAC;IACxC,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,IAAI,CAAC;IAEf,IAAI,QAAQ,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,kBAAkB,CAAC;QAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,UAAU,GAAG,KAAK,KAAK,IAAI,CAAC;QACxC,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,eAAe,KAAK,SAAS,IAAI,SAAS,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,2BAA2B,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/C,MAAM,IAAI,QAAQ,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC;YAC3D,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,IAAI,gBAAgB,IAAI,CAAC,GAAG,IAAI,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAyB;IACtD,MAAM,MAAM,GAAkC,EAAE,CAAC;IAEjD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,KAAK,UAAU,YAAY,CAAC,OAAgC;IAC1D,qBAAqB;IACrB,MAAM,WAAW,GAAG,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,sBAAsB,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE;iBACxD;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAc,WAAW,CAAC,IAAI,CAAC;IAEzC,IAAI,CAAC;QACH,uBAAuB;QACvB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5C,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE;qBACxC;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5D,iBAAiB;QACjB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE;YACjD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,sBAAsB,EAAE,IAAI,CAAC,uBAAuB;SACrD,CAAC,CAAC;QAEH,mEAAmE;QACnE,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAChE,IAAI,MAAM,GAAG,4DAA4D,CAAC;YAC1E,MAAM,IAAI,6DAA6D,CAAC;YACxE,MAAM,IAAI,8DAA8D,CAAC;YAEzE,MAAM,IAAI,cAAc,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC;YACtD,MAAM,IAAI,iBAAiB,QAAQ,CAAC,WAAW,IAAI,CAAC;YACpD,MAAM,IAAI,kBAAkB,QAAQ,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC;YAC3D,MAAM,IAAI,wBAAwB,QAAQ,CAAC,kBAAkB,IAAI,CAAC;YAClE,MAAM,IAAI,kBAAkB,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;YAEtE,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC;YACrD,MAAM,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;YACxE,MAAM,IAAI,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;YACrC,MAAM,IAAI,OAAO,CAAC;YAElB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,MAAM;qBACb;iBACF;aACF,CAAC;QACJ,CAAC;QAED,8CAA8C;QAC9C,IAAI,MAAM,GAAG,4DAA4D,CAAC;QAC1E,MAAM,IAAI,6DAA6D,CAAC;QACxE,MAAM,IAAI,8DAA8D,CAAC;QAEzE,MAAM,IAAI,eAAe,QAAQ,CAAC,OAAO,IAAI,CAAC;QAC9C,MAAM,IAAI,iBAAiB,QAAQ,CAAC,WAAW,IAAI,CAAC;QACpD,MAAM,IAAI,wBAAwB,QAAQ,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC;QACjE,MAAM,IAAI,8BAA8B,QAAQ,CAAC,kBAAkB,IAAI,CAAC;QACxE,MAAM,IAAI,+BAA+B,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;QAEnF,4BAA4B;QAC5B,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,IAAI,6CAA6C,CAAC;QACxD,MAAM,IAAI,0BAA0B,CAAC;QAErC,MAAM,SAAS,GAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QACrG,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,MAAM,IAAI,CAAC;YACnE,CAAC;QACH,CAAC;QACD,MAAM,IAAI,IAAI,CAAC;QAEf,0BAA0B;QAC1B,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,gCAAgC;YAChC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,6CAA6C,CAAC;gBACxD,MAAM,IAAI,eAAe,CAAC;gBAC1B,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBACrC,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC;gBACpD,CAAC;YACH,CAAC;YAED,QAAQ;YACR,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,6CAA6C,CAAC;gBACxD,MAAM,IAAI,cAAc,CAAC;gBACzB,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBACpC,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC;gBACpD,CAAC;YACH,CAAC;YAED,eAAe;YACf,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5E,MAAM,IAAI,6CAA6C,CAAC;gBACxD,MAAM,IAAI,qBAAqB,CAAC;gBAChC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC9C,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC;gBACpD,CAAC;YACH,CAAC;YAED,aAAa;YACb,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,6CAA6C,CAAC;gBACxD,MAAM,IAAI,mBAAmB,CAAC;gBAC9B,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACzC,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,+BAA+B;YAC/B,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,6CAA6C,CAAC;gBACxD,MAAM,IAAI,qBAAqB,CAAC;gBAEhC,8CAA8C;gBAC9C,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CACvE,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,CACzE,CAAC;gBAEF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,kCAAkC,CAAC;oBAC7C,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;wBACvC,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC;oBACpD,CAAC;gBACH,CAAC;gBAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,MAAM,IAAI,sBAAsB,CAAC;oBACjC,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACvG,MAAM,IAAI,IAAI,CAAC;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,IAAI,6CAA6C,CAAC;QACxD,MAAM,IAAI,uEAAuE,CAAC;QAClF,MAAM,IAAI,0DAA0D,CAAC;QACrE,MAAM,IAAI,sCAAsC,CAAC;QAEjD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM;iBACb;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kEAAkE;qBACzE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kBAAkB,KAAK,CAAC,OAAO,EAAE;qBACxC;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,SAAS,GAAmB;IACvC,IAAI,EAAE;QACJ,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EACT,uOAAuO;QACzO,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mCAAmC;iBACjD;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC;oBACnC,OAAO,EAAE,WAAW;oBACpB,WAAW,EAAE,uDAAuD;iBACrE;gBACD,uBAAuB,EAAE;oBACvB,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,IAAI;oBACb,WAAW,EAAE,uDAAuD;iBACrE;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF;IACD,OAAO,EAAE,YAAY;CACtB,CAAC"}

package/dist/tools/scan.d.ts

@@ -0,0 +1,15 @@
+/**
+ * inkog_scan Tool
+ *
+ * P0 - Core vulnerability scanning tool
+ *
+ * Scans AI agent code for security vulnerabilities including:
+ * - Prompt injection
+ * - Infinite loops / token bombing
+ * - SQL injection via LLM
+ * - Hardcoded credentials
+ * - Missing governance controls
+ */
+import type { ToolDefinition } from './index.js';
+export declare const scanTool: ToolDefinition;
+//# sourceMappingURL=scan.d.ts.map

package/dist/tools/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/tools/scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AAyR7D,eAAO,MAAM,QAAQ,EAAE,cA+BtB,CAAC"}

package/dist/tools/scan.js

@@ -0,0 +1,270 @@
+/**
+ * inkog_scan Tool
+ *
+ * P0 - Core vulnerability scanning tool
+ *
+ * Scans AI agent code for security vulnerabilities including:
+ * - Prompt injection
+ * - Infinite loops / token bombing
+ * - SQL injection via LLM
+ * - Hardcoded credentials
+ * - Missing governance controls
+ */
+import { z } from 'zod';
+import { getClient, InkogAuthError, InkogNetworkError } from '../api/client.js';
+import { getRelativePaths, readDirectory } from '../utils/file-reader.js';
+// =============================================================================
+// Schema
+// =============================================================================
+const ScanArgsSchema = z.object({
+    path: z.string().describe('File or directory path to scan'),
+    policy: z
+        .enum(['low-noise', 'balanced', 'comprehensive', 'governance', 'eu-ai-act'])
+        .optional()
+        .default('balanced')
+        .describe('Security policy: low-noise (proven vulnerabilities only), balanced (default), comprehensive (all findings), governance (Article 14 focused), eu-ai-act (compliance mode)'),
+    output: z
+        .enum(['summary', 'detailed', 'sarif'])
+        .optional()
+        .default('summary')
+        .describe('Output format: summary (default), detailed (full findings), sarif (for CI/CD)'),
+});
+// =============================================================================
+// Helpers
+// =============================================================================
+function formatSeverityIcon(severity) {
+    switch (severity) {
+        case 'CRITICAL':
+            return '🔴';
+        case 'HIGH':
+            return '🟠';
+        case 'MEDIUM':
+            return '🟡';
+        case 'LOW':
+            return '🟢';
+        default:
+            return '⚪';
+    }
+}
+function formatRiskTier(tier) {
+    switch (tier) {
+        case 'vulnerability':
+            return 'Exploitable Vulnerability';
+        case 'risk_pattern':
+            return 'Risk Pattern';
+        case 'hardening':
+            return 'Hardening Recommendation';
+        default:
+            return tier;
+    }
+}
+function formatFinding(finding, detailed) {
+    const icon = formatSeverityIcon(finding.severity);
+    const tierLabel = formatRiskTier(finding.riskTier);
+    const location = `${finding.file}:${finding.line}`;
+    let output = `${icon} [${finding.severity}] ${finding.message}\n`;
+    output += `   📍 ${location}\n`;
+    output += `   📊 ${tierLabel}`;
+    if (finding.cwe !== undefined) {
+        output += ` | ${finding.cwe}`;
+    }
+    if (finding.inputTainted && finding.taintSource !== undefined) {
+        output += `\n   ⚠️  Taint source: ${finding.taintSource}`;
+    }
+    if (detailed && finding.remediation !== undefined) {
+        output += `\n   💡 ${finding.remediation}`;
+    }
+    if (detailed && finding.codeSnippet !== undefined) {
+        output += `\n   \`\`\`\n   ${finding.codeSnippet}\n   \`\`\``;
+    }
+    return output;
+}
+function formatSummary(findings, riskScore, filesScanned, policy) {
+    const critical = findings.filter((f) => f.severity === 'CRITICAL').length;
+    const high = findings.filter((f) => f.severity === 'HIGH').length;
+    const medium = findings.filter((f) => f.severity === 'MEDIUM').length;
+    const low = findings.filter((f) => f.severity === 'LOW').length;
+    const vulnerabilities = findings.filter((f) => f.riskTier === 'vulnerability').length;
+    const riskPatterns = findings.filter((f) => f.riskTier === 'risk_pattern').length;
+    const hardening = findings.filter((f) => f.riskTier === 'hardening').length;
+    let output = '╔══════════════════════════════════════════════════════╗\n';
+    output += '║           🔍 AI Agent Risk Assessment                ║\n';
+    output += '╚══════════════════════════════════════════════════════╝\n\n';
+    output += `📁 Files scanned: ${filesScanned}\n`;
+    output += `📊 Risk score: ${riskScore}/100\n`;
+    output += `🔒 Policy: ${policy}\n\n`;
+    if (findings.length === 0) {
+        output += '✅ No security findings detected!\n';
+        return output;
+    }
+    output += `📋 Total findings: ${findings.length}\n`;
+    output += `   🔴 Critical: ${critical} | 🟠 High: ${high} | 🟡 Medium: ${medium} | 🟢 Low: ${low}\n\n`;
+    if (vulnerabilities > 0) {
+        output += `🔴 EXPLOITABLE VULNERABILITIES (${vulnerabilities})\n`;
+        output +=
+            '   Require immediate attention - proven attack paths\n\n';
+    }
+    if (riskPatterns > 0) {
+        output += `🟠 RISK PATTERNS (${riskPatterns})\n`;
+        output += '   Structural issues that could become vulnerabilities\n\n';
+    }
+    if (hardening > 0) {
+        output += `🟡 HARDENING RECOMMENDATIONS (${hardening})\n`;
+        output += '   Best practices for improved security posture\n\n';
+    }
+    return output;
+}
+// =============================================================================
+// Handler
+// =============================================================================
+async function scanHandler(rawArgs) {
+    // Validate arguments
+    const parseResult = ScanArgsSchema.safeParse(rawArgs);
+    if (!parseResult.success) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Invalid arguments: ${parseResult.error.message}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+    const args = parseResult.data;
+    try {
+        // Read files from path
+        const readResult = readDirectory(args.path);
+        if (readResult.files.length === 0) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `No scannable files found in: ${args.path}\n\nSupported file types: .py, .js, .ts, .go, .java, .rb, .yaml, .json, .md`,
+                    },
+                ],
+            };
+        }
+        // Get relative paths for cleaner output
+        const files = getRelativePaths(readResult.files, args.path);
+        // Call Inkog API
+        const client = getClient();
+        const response = await client.scan(files, {
+            policy: args.policy,
+            output: args.output,
+        });
+        // Format output based on requested format
+        if (args.output === 'sarif') {
+            // Return raw SARIF for CI/CD integration
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify(response, null, 2),
+                    },
+                ],
+            };
+        }
+        // Build human-readable output
+        let output = formatSummary(response.findings, response.riskScore, response.filesScanned, args.policy);
+        // Add findings
+        if (response.findings.length > 0) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            // Group by tier
+            const vulnerabilities = response.findings.filter((f) => f.riskTier === 'vulnerability');
+            const riskPatterns = response.findings.filter((f) => f.riskTier === 'risk_pattern');
+            const hardening = response.findings.filter((f) => f.riskTier === 'hardening');
+            if (vulnerabilities.length > 0) {
+                output += '🔴 EXPLOITABLE VULNERABILITIES:\n\n';
+                for (const finding of vulnerabilities) {
+                    output += formatFinding(finding, args.output === 'detailed') + '\n\n';
+                }
+            }
+            if (riskPatterns.length > 0) {
+                output += '🟠 RISK PATTERNS:\n\n';
+                for (const finding of riskPatterns) {
+                    output += formatFinding(finding, args.output === 'detailed') + '\n\n';
+                }
+            }
+            if (hardening.length > 0 && args.policy === 'comprehensive') {
+                output += '🟡 HARDENING RECOMMENDATIONS:\n\n';
+                for (const finding of hardening) {
+                    output += formatFinding(finding, args.output === 'detailed') + '\n\n';
+                }
+            }
+        }
+        // Add governance summary if available
+        if (response.governance !== undefined) {
+            output += '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n\n';
+            output += '🏛️  GOVERNANCE STATUS\n\n';
+            output += `   Governance Score: ${response.governance.governanceScore}/100\n`;
+            output += `   EU AI Act Readiness: ${response.governance.euAiActReadiness}\n`;
+        }
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: output,
+                },
+            ],
+        };
+    }
+    catch (error) {
+        if (error instanceof InkogAuthError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: '🔐 API Key Required\n\nTo use Inkog, you need an API key.\n\n1. Sign up for free at https://app.inkog.io\n2. Set your API key: export INKOG_API_KEY=sk_live_...\n3. Try again!',
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (error instanceof InkogNetworkError) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Network error: ${error.message}\n\nPlease check your internet connection and try again.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        throw error;
+    }
+}
+// =============================================================================
+// Tool Definition
+// =============================================================================
+export const scanTool = {
+    tool: {
+        name: 'inkog_scan',
+        description: 'Scan AI agent code for security vulnerabilities including prompt injection, infinite loops, token bombing, SQL injection via LLM, and governance gaps. Supports LangChain, CrewAI, LangGraph, n8n, and other agent frameworks.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                path: {
+                    type: 'string',
+                    description: 'File or directory path to scan',
+                },
+                policy: {
+                    type: 'string',
+                    enum: ['low-noise', 'balanced', 'comprehensive', 'governance', 'eu-ai-act'],
+                    default: 'balanced',
+                    description: 'Security policy: low-noise (proven vulnerabilities only), balanced (default), comprehensive (all findings), governance (Article 14 focused), eu-ai-act (compliance mode)',
+                },
+                output: {
+                    type: 'string',
+                    enum: ['summary', 'detailed', 'sarif'],
+                    default: 'summary',
+                    description: 'Output format: summary (default), detailed (full findings), sarif (for CI/CD)',
+                },
+            },
+            required: ['path'],
+        },
+    },
+    handler: scanHandler,
+};
+//# sourceMappingURL=scan.js.map

package/dist/tools/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/tools/scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAG1E,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAEhF,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAC3D,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;SAC3E,QAAQ,EAAE;SACV,OAAO,CAAC,UAAU,CAAC;SACnB,QAAQ,CACP,0KAA0K,CAC3K;IACH,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;SACtC,QAAQ,EAAE;SACV,OAAO,CAAC,SAAS,CAAC;SAClB,QAAQ,CAAC,+EAA+E,CAAC;CAC7F,CAAC,CAAC;AAIH,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,IAAI,CAAC;QACd,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC;QACd,KAAK,KAAK;YACR,OAAO,IAAI,CAAC;QACd;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,eAAe;YAClB,OAAO,2BAA2B,CAAC;QACrC,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC;QACxB,KAAK,WAAW;YACd,OAAO,0BAA0B,CAAC;QACpC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB,EAAE,QAAiB;IACxD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAEnD,IAAI,MAAM,GAAG,GAAG,IAAI,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,OAAO,IAAI,CAAC;IAClE,MAAM,IAAI,SAAS,QAAQ,IAAI,CAAC;IAChC,MAAM,IAAI,SAAS,SAAS,EAAE,CAAC;IAE/B,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;IAChC,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9D,MAAM,IAAI,0BAA0B,OAAO,CAAC,WAAW,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,QAAQ,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,WAAW,OAAO,CAAC,WAAW,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,QAAQ,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,mBAAmB,OAAO,CAAC,WAAW,aAAa,CAAC;IAChE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CACpB,QAAmB,EACnB,SAAiB,EACjB,YAAoB,EACpB,MAAsB;IAEtB,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAC1E,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAClE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACtE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC;IAEhE,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,MAAM,CAAC;IACtF,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC,MAAM,CAAC;IAClF,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;IAE5E,IAAI,MAAM,GAAG,4DAA4D,CAAC;IAC1E,MAAM,IAAI,4DAA4D,CAAC;IACvE,MAAM,IAAI,8DAA8D,CAAC;IAEzE,MAAM,IAAI,qBAAqB,YAAY,IAAI,CAAC;IAChD,MAAM,IAAI,kBAAkB,SAAS,QAAQ,CAAC;IAC9C,MAAM,IAAI,cAAc,MAAM,MAAM,CAAC;IAErC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,oCAAoC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,sBAAsB,QAAQ,CAAC,MAAM,IAAI,CAAC;IACpD,MAAM,IAAI,mBAAmB,QAAQ,eAAe,IAAI,iBAAiB,MAAM,cAAc,GAAG,MAAM,CAAC;IAEvG,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,mCAAmC,eAAe,KAAK,CAAC;QAClE,MAAM;YACJ,0DAA0D,CAAC;IAC/D,CAAC;IAED,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,qBAAqB,YAAY,KAAK,CAAC;QACjD,MAAM,IAAI,4DAA4D,CAAC;IACzE,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,iCAAiC,SAAS,KAAK,CAAC;QAC1D,MAAM,IAAI,qDAAqD,CAAC;IAClE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,KAAK,UAAU,WAAW,CAAC,OAAgC;IACzD,qBAAqB;IACrB,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,sBAAsB,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE;iBACxD;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAa,WAAW,CAAC,IAAI,CAAC;IAExC,IAAI,CAAC;QACH,uBAAuB;QACvB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5C,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,gCAAgC,IAAI,CAAC,IAAI,6EAA6E;qBAC7H;iBACF;aACF,CAAC;QACJ,CAAC;QAED,wCAAwC;QACxC,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5D,iBAAiB;QACjB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;YACxC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,0CAA0C;QAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,yCAAyC;YACzC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;qBACxC;iBACF;aACF,CAAC;QACJ,CAAC;QAED,8BAA8B;QAC9B,IAAI,MAAM,GAAG,aAAa,CACxB,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,YAAY,EACrB,IAAI,CAAC,MAAM,CACZ,CAAC;QAEF,eAAe;QACf,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,6CAA6C,CAAC;YAExD,gBAAgB;YAChB,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC;YACxF,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC;YACpF,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;YAE9E,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,qCAAqC,CAAC;gBAChD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;oBACtC,MAAM,IAAI,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG,MAAM,CAAC;gBACxE,CAAC;YACH,CAAC;YAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,uBAAuB,CAAC;gBAClC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;oBACnC,MAAM,IAAI,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG,MAAM,CAAC;gBACxE,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC5D,MAAM,IAAI,mCAAmC,CAAC;gBAC9C,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;oBAChC,MAAM,IAAI,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG,MAAM,CAAC;gBACxE,CAAC;YACH,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,6CAA6C,CAAC;YACxD,MAAM,IAAI,4BAA4B,CAAC;YACvC,MAAM,IAAI,wBAAwB,QAAQ,CAAC,UAAU,CAAC,eAAe,QAAQ,CAAC;YAC9E,MAAM,IAAI,2BAA2B,QAAQ,CAAC,UAAU,CAAC,gBAAgB,IAAI,CAAC;QAChF,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM;iBACb;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,gLAAgL;qBACvL;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kBAAkB,KAAK,CAAC,OAAO,0DAA0D;qBAChG;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,QAAQ,GAAmB;IACtC,IAAI,EAAE;QACJ,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,gOAAgO;QAClO,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,gCAAgC;iBAC9C;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,CAAC;oBAC3E,OAAO,EAAE,UAAU;oBACnB,WAAW,EACT,0KAA0K;iBAC7K;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC;oBACtC,OAAO,EAAE,SAAS;oBAClB,WAAW,EACT,+EAA+E;iBAClF;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF;IACD,OAAO,EAAE,WAAW;CACrB,CAAC"}