@kryptosai/mcp-observatory 1.28.1 → 1.29.0

package/dist/src/risk-graph.js

@@ -0,0 +1,452 @@
+import { createHash } from "node:crypto";
+import { existsSync } from "node:fs";
+import { readdir, readFile, stat } from "node:fs/promises";
+import path from "node:path";
+import { buildActionReceipt } from "./action-receipt.js";
+import { extractObservatoryFindings } from "./findings.js";
+import { TOOL_VERSION } from "./version.js";
+const ALL_ACTIONS = ["allow", "gate", "rerun", "quarantine", "escalate"];
+const ALL_BOUNDARIES = ["filesystem", "browser", "command-execution", "infra-cloud", "memory", "data-api", "identity-auth", "unknown"];
+function stableId(prefix, value) {
+    return `${prefix}:${createHash("sha256").update(value).digest("hex").slice(0, 16)}`;
+}
+function sha256Text(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+async function sha256File(filePath) {
+    if (!existsSync(filePath))
+        return undefined;
+    return sha256Text(await readFile(filePath, "utf8"));
+}
+function isObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function asRunArtifact(value) {
+    if (!isObject(value))
+        return undefined;
+    if (value["artifactType"] === "run" && isObject(value["target"]) && Array.isArray(value["checks"]))
+        return value;
+    if (isObject(value["artifact"]) && value["artifact"]["artifactType"] === "run")
+        return value["artifact"];
+    return undefined;
+}
+function asMcpReceipt(value) {
+    if (!isObject(value))
+        return undefined;
+    return value["receipt_type"] === "mcp-observatory-receipt" && isObject(value["subject"]) && isObject(value["verdict"])
+        ? value
+        : undefined;
+}
+async function collectJsonFiles(inputPath) {
+    const info = await stat(inputPath);
+    if (info.isFile())
+        return [inputPath];
+    if (!info.isDirectory())
+        return [];
+    const entries = await readdir(inputPath, { withFileTypes: true });
+    const nested = await Promise.all(entries.map(async (entry) => {
+        const fullPath = path.join(inputPath, entry.name);
+        if (entry.isDirectory())
+            return collectJsonFiles(fullPath);
+        return entry.isFile() && entry.name.endsWith(".json") ? [fullPath] : [];
+    }));
+    return nested.flat();
+}
+export async function loadRiskGraphInputs(inputPaths) {
+    const warnings = [];
+    const inputs = [];
+    for (const inputPath of inputPaths) {
+        try {
+            const files = await collectJsonFiles(inputPath);
+            if (files.length === 0)
+                warnings.push(`No JSON artifacts found at ${inputPath}.`);
+            for (const filePath of files) {
+                try {
+                    inputs.push({ path: filePath, data: JSON.parse(await readFile(filePath, "utf8")) });
+                }
+                catch (error) {
+                    const message = error instanceof Error ? error.message : String(error);
+                    warnings.push(`Skipped invalid artifact ${filePath}: ${message}`);
+                }
+            }
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            warnings.push(`Skipped missing or unreadable input ${inputPath}: ${message}`);
+        }
+    }
+    return { inputs, warnings };
+}
+function inputKind(input) {
+    const receipt = asMcpReceipt(input.data);
+    if (receipt)
+        return { kind: "receipt", receipt, path: input.path };
+    const artifact = asRunArtifact(input.data);
+    if (artifact)
+        return { kind: "run", artifact, path: input.path };
+    return undefined;
+}
+function receiptIdentity(receipt) {
+    return [
+        receipt.subject.package_or_repo,
+        receipt.subject.resolved_identity,
+        receipt.subject.mcp_server_name,
+        receipt.subject.startup_command,
+        receipt.subject.target_path_or_url,
+    ].filter(Boolean).join("|");
+}
+function runIdentity(artifact) {
+    const metadata = artifact.target.metadata ?? {};
+    const strongIdentity = metadata["package"] ?? metadata["repo"] ?? metadata["repository"] ?? metadata["source"];
+    if (strongIdentity)
+        return strongIdentity;
+    const packageArg = packageFromCommandArgs(artifact.target.command, artifact.target.args);
+    if (packageArg)
+        return packageArg;
+    return [
+        artifact.target.serverName,
+        artifact.target.targetId,
+        artifact.target.command ? [artifact.target.command, ...artifact.target.args].join(" ") : artifact.target.url,
+    ].filter(Boolean).join("|");
+}
+function packageFromCommandArgs(command, args) {
+    if (command !== "npx")
+        return undefined;
+    return args.find((arg) => !arg.startsWith("-") && arg !== "latest");
+}
+function packageOrRepoFromRun(artifact) {
+    const metadata = artifact.target.metadata ?? {};
+    return metadata["package"] ?? metadata["repo"] ?? metadata["repository"] ?? metadata["source"] ?? packageFromCommandArgs(artifact.target.command, artifact.target.args) ?? null;
+}
+function ciCommandFromRun(artifact) {
+    if (artifact.target.adapter === "local-process" && artifact.target.command) {
+        return `mcp-observatory setup-ci --all --command ${JSON.stringify([artifact.target.command, ...artifact.target.args].join(" "))} --sarif --schedule weekly`;
+    }
+    if (artifact.target.adapter === "http" && artifact.target.url) {
+        return `mcp-observatory setup-ci --all --command ${artifact.target.url} --sarif --schedule weekly`;
+    }
+    return null;
+}
+function riskLevelForAction(action) {
+    if (action === "escalate")
+        return "critical";
+    if (action === "quarantine")
+        return "high";
+    if (action === "gate")
+        return "medium";
+    if (action === "rerun")
+        return "medium";
+    return "low";
+}
+function strongerRisk(a, b) {
+    const rank = { unknown: 0, low: 1, medium: 2, high: 3, critical: 4 };
+    return rank[a] >= rank[b] ? a : b;
+}
+function strongestAction(a, b) {
+    const rank = { allow: 0, rerun: 1, gate: 2, quarantine: 3, escalate: 4 };
+    return rank[a] >= rank[b] ? a : b;
+}
+function textForClassification(parts) {
+    return parts.filter(Boolean).join(" ").toLowerCase();
+}
+export function classifyCapabilityBoundary(input) {
+    const findingText = input.findings?.map((finding) => textForClassification([
+        finding.ruleId,
+        finding.title,
+        finding.message,
+        finding.category,
+        finding.subject.name,
+        finding.recommendation,
+    ])).join(" ") ?? "";
+    const metadataText = Object.values(input.metadata ?? {}).join(" ");
+    const text = textForClassification([...(input.names ?? []), findingText, metadataText, input.fallbackText]);
+    if (/\b(browser|browsermcp|playwright|puppeteer|chrome|page|dom|screenshot|navigate)\b/.test(text))
+        return "browser";
+    if (/\b(kube|kubernetes|kubectl|helm|terraform|opentofu|aws|gcp|azure|cloud|cluster|pod|namespace|deploy|manifest|infra)\b/.test(text))
+        return "infra-cloud";
+    if (/\b(command|shell|exec|spawn|process|terminal|bash|script|subprocess)\b/.test(text) || text.includes("run_shell"))
+        return "command-execution";
+    if (/\b(file|filesystem|directory|path|delete|mkdir|cwd|workspace)\b/.test(text) || text.includes("read_file") || text.includes("write_file"))
+        return "filesystem";
+    if (/\b(memory|vector|embedding|store|recall|remember|knowledge)\b/.test(text) || text.includes("memory_"))
+        return "memory";
+    if (/\b(api|database|sql|http|graphql|request|fetch|webhook|email|slack|notion|jira|linear|crm)\b/.test(text) || text.includes("_api"))
+        return "data-api";
+    if (/\b(auth|oauth|token|credential|secret|identity|permission|role|scope|session)\b/.test(text) || text.includes("oauth_"))
+        return "identity-auth";
+    return "unknown";
+}
+function evidenceRefsForRun(artifact, inputPath) {
+    const refs = [{ type: "run-artifact", path: inputPath }];
+    if (artifact.checks.some((check) => check.id === "attack-sim"))
+        refs.push({ type: "attack-sim", path: inputPath });
+    return refs;
+}
+function receiptEvidenceRefs(receipt, inputPath) {
+    const refs = [{ type: "receipt", path: inputPath }];
+    if (receipt.evidence.json_report_path)
+        refs.push({ type: "run-artifact", path: receipt.evidence.json_report_path, sha256: receipt.evidence.json_report_sha256 ?? undefined });
+    if (receipt.evidence.markdown_report_path)
+        refs.push({ type: "markdown", path: receipt.evidence.markdown_report_path, sha256: receipt.evidence.markdown_report_sha256 ?? undefined });
+    if (receipt.evidence.sarif_path)
+        refs.push({ type: "sarif", path: receipt.evidence.sarif_path, sha256: receipt.evidence.sarif_sha256 ?? undefined });
+    return refs;
+}
+function mergeNode(existing, next) {
+    const refs = new Map();
+    for (const ref of [...existing.evidenceRefs, ...next.evidenceRefs])
+        refs.set(`${ref.type}:${ref.path}`, ref);
+    return {
+        ...existing,
+        name: existing.name || next.name,
+        serverPackageOrRepo: existing.serverPackageOrRepo ?? next.serverPackageOrRepo,
+        capabilityBoundary: existing.capabilityBoundary === "unknown" ? next.capabilityBoundary : existing.capabilityBoundary,
+        receiptState: existing.receiptState === "not_generated" ? next.receiptState : existing.receiptState,
+        recommendedAction: strongestAction(existing.recommendedAction, next.recommendedAction),
+        riskLevel: strongerRisk(existing.riskLevel, next.riskLevel),
+        evidenceRefs: [...refs.values()],
+        ciCommand: existing.ciCommand ?? next.ciCommand,
+    };
+}
+function actionText(action) {
+    if (action === "allow")
+        return "Allow with routine monitoring.";
+    if (action === "rerun")
+        return "Rerun with a corrected startup command or fresh baseline.";
+    if (action === "gate")
+        return "Gate adoption until maintainers review the finding.";
+    if (action === "quarantine")
+        return "Quarantine from production agents until the boundary is reduced or accepted.";
+    return "Escalate to security before agents depend on this toolchain.";
+}
+function boundaryNode(boundary) {
+    return {
+        id: `boundary:${boundary}`,
+        name: boundary,
+        source: "capability-boundary",
+        serverPackageOrRepo: null,
+        capabilityBoundary: boundary,
+        receiptState: "not_generated",
+        recommendedAction: boundary === "unknown" ? "allow" : "gate",
+        riskLevel: boundary === "unknown" ? "unknown" : "medium",
+        evidenceRefs: [],
+        ciCommand: null,
+    };
+}
+export async function buildRiskGraph(inputs) {
+    const warnings = [];
+    const serverNodes = new Map();
+    const edges = new Map();
+    const boundaries = new Set();
+    for (const input of inputs) {
+        const known = inputKind(input);
+        if (!known) {
+            warnings.push(`Skipped unsupported artifact ${input.path}.`);
+            continue;
+        }
+        if (known.kind === "receipt") {
+            const boundary = classifyCapabilityBoundary({
+                fallbackText: `${known.receipt.subject.mcp_server_name} ${known.receipt.subject.package_or_repo ?? ""} ${known.receipt.evidence.tool_surface_summary} ${known.receipt.evidence.attack_simulation_summary}`,
+            });
+            const node = {
+                id: stableId("server", receiptIdentity(known.receipt)),
+                name: known.receipt.subject.mcp_server_name,
+                source: "receipt",
+                serverPackageOrRepo: known.receipt.subject.package_or_repo,
+                capabilityBoundary: boundary,
+                receiptState: known.receipt.verdict.state,
+                recommendedAction: known.receipt.verdict.action,
+                riskLevel: riskLevelForAction(known.receipt.verdict.action),
+                evidenceRefs: receiptEvidenceRefs(known.receipt, known.path),
+                ciCommand: known.receipt.reproduction.ci_command,
+            };
+            const hash = await sha256File(known.path);
+            node.evidenceRefs[0] = { ...node.evidenceRefs[0], sha256: hash };
+            serverNodes.set(node.id, serverNodes.has(node.id) ? mergeNode(serverNodes.get(node.id), node) : node);
+            boundaries.add(boundary);
+            edges.set(`${node.id}->boundary:${boundary}`, { from: node.id, to: `boundary:${boundary}`, type: "has-capability-boundary", reason: `Receipt classifies this server as ${boundary}.` });
+            if (node.recommendedAction !== "allow")
+                edges.set(`${node.id}->action:${node.recommendedAction}`, { from: node.id, to: `boundary:${boundary}`, type: "requires-action", reason: actionText(node.recommendedAction) });
+            continue;
+        }
+        const findings = extractObservatoryFindings(known.artifact);
+        const toolNames = known.artifact.checks.flatMap((check) => check.evidence.flatMap((evidence) => evidence.identifiers ?? []));
+        const actionReceipt = buildActionReceipt(known.artifact);
+        const boundary = classifyCapabilityBoundary({
+            names: toolNames,
+            findings,
+            metadata: known.artifact.target.metadata,
+            fallbackText: known.artifact.target.targetId,
+        });
+        const node = {
+            id: stableId("server", runIdentity(known.artifact)),
+            name: known.artifact.target.serverName ?? known.artifact.target.targetId,
+            source: "run-artifact",
+            serverPackageOrRepo: packageOrRepoFromRun(known.artifact),
+            capabilityBoundary: boundary,
+            receiptState: "not_generated",
+            recommendedAction: actionReceipt.action,
+            riskLevel: riskLevelForAction(actionReceipt.action),
+            evidenceRefs: evidenceRefsForRun(known.artifact, known.path),
+            ciCommand: ciCommandFromRun(known.artifact),
+        };
+        const hash = await sha256File(known.path);
+        node.evidenceRefs[0] = { ...node.evidenceRefs[0], sha256: hash };
+        serverNodes.set(node.id, serverNodes.has(node.id) ? mergeNode(serverNodes.get(node.id), node) : node);
+        boundaries.add(boundary);
+        edges.set(`${node.id}->boundary:${boundary}`, { from: node.id, to: `boundary:${boundary}`, type: "has-capability-boundary", reason: `Observed tools/findings classify this server as ${boundary}.` });
+        if (node.evidenceRefs.some((ref) => ref.type === "attack-sim"))
+            edges.set(`${node.id}->attack-sim`, { from: node.id, to: `boundary:${boundary}`, type: "has-evidence", reason: "Safe attack-sim evidence is present." });
+        if (node.recommendedAction !== "allow")
+            edges.set(`${node.id}->action:${node.recommendedAction}`, { from: node.id, to: `boundary:${boundary}`, type: "requires-action", reason: actionText(node.recommendedAction) });
+    }
+    const boundaryNodes = [...boundaries].sort().map(boundaryNode);
+    const nodes = [...boundaryNodes, ...serverNodes.values()].sort((a, b) => a.source.localeCompare(b.source) || a.name.localeCompare(b.name));
+    const serverOnlyNodes = nodes.filter((node) => node.source !== "capability-boundary");
+    const actionCounts = Object.fromEntries(ALL_ACTIONS.map((action) => [action, 0]));
+    const boundaryCounts = Object.fromEntries(ALL_BOUNDARIES.map((boundary) => [boundary, 0]));
+    let highestRiskLevel = "unknown";
+    for (const node of serverOnlyNodes) {
+        actionCounts[node.recommendedAction] += 1;
+        boundaryCounts[node.capabilityBoundary] += 1;
+        highestRiskLevel = strongerRisk(highestRiskLevel, node.riskLevel);
+    }
+    const recommendedActions = serverOnlyNodes
+        .filter((node) => node.recommendedAction !== "allow")
+        .sort((a, b) => b.riskLevel.localeCompare(a.riskLevel) || a.name.localeCompare(b.name))
+        .slice(0, 10)
+        .map((node) => `${node.name}: ${actionText(node.recommendedAction)}`);
+    return {
+        schemaVersion: "1.0.0",
+        generatedAt: new Date().toISOString(),
+        toolVersion: TOOL_VERSION,
+        nodes,
+        edges: [...edges.values()].sort((a, b) => a.from.localeCompare(b.from) || a.to.localeCompare(b.to)),
+        summary: {
+            totalServers: serverOnlyNodes.length,
+            totalBoundaries: boundaries.size,
+            highestRiskLevel,
+            actionCounts,
+            boundaryCounts,
+        },
+        recommendedActions,
+        warnings,
+    };
+}
+function cell(value) {
+    const text = value == null ? "" : typeof value === "string" ? value : JSON.stringify(value);
+    return text.replaceAll("|", "\\|").replaceAll("\n", " ");
+}
+export function renderRiskGraphMarkdown(graph) {
+    const serverNodes = graph.nodes.filter((node) => node.source !== "capability-boundary");
+    const lines = [
+        "# MCP Risk Graph",
+        "",
+        "MCP Observatory maps the risk graph of agent toolchains before agents depend on them.",
+        "",
+        "This graph is evidence-based and safe-mode only. It links MCP servers to receipts, attack-sim output, capability boundaries, recommended actions, and CI/SARIF next steps.",
+        "",
+        "## Summary",
+        "",
+        `- Servers: ${graph.summary.totalServers}`,
+        `- Capability boundaries: ${graph.summary.totalBoundaries}`,
+        `- Highest risk: ${graph.summary.highestRiskLevel}`,
+        `- Generated at: ${graph.generatedAt}`,
+        "",
+        "## Servers",
+        "",
+        "| Server | Boundary | Risk | Action | Receipt | CI command | Evidence |",
+        "| --- | --- | --- | --- | --- | --- | --- |",
+        ...serverNodes.map((node) => [
+            `| ${cell(node.name)}`,
+            cell(node.capabilityBoundary),
+            cell(node.riskLevel),
+            cell(node.recommendedAction),
+            cell(node.receiptState),
+            cell(node.ciCommand),
+            `${node.evidenceRefs.map((ref) => `${ref.type}:${ref.path}`).join("<br>")} |`,
+        ].join(" | ")),
+        "",
+        "## Recommended Actions",
+        "",
+        ...(graph.recommendedActions.length > 0 ? graph.recommendedActions.map((action) => `- ${action}`) : ["- No blocking MCP risk-graph actions were detected."]),
+        "",
+        "## Maintainer Note Template",
+        "",
+        "We generated a safe MCP Observatory receipt for your MCP server. It includes the exact evidence artifact, recommended action, and CI/SARIF command. If this startup command is not the safest public mode, reply with the preferred no-secret command and we will update the receipt.",
+    ];
+    if (graph.warnings.length > 0) {
+        lines.push("", "## Warnings", "", ...graph.warnings.map((warning) => `- ${warning}`));
+    }
+    return lines.join("\n");
+}
+function escapeHtml(value) {
+    const text = typeof value === "string" || typeof value === "number" || typeof value === "boolean" ? String(value) : "";
+    return text
+        .replaceAll("&", "&amp;")
+        .replaceAll("<", "&lt;")
+        .replaceAll(">", "&gt;")
+        .replaceAll("\"", "&quot;");
+}
+export function renderRiskGraphHtml(graph) {
+    const serverNodes = graph.nodes.filter((node) => node.source !== "capability-boundary");
+    return `<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>MCP Risk Graph</title>
+  <style>
+    body { margin: 0; font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; color: #172033; background: #f7f9fc; }
+    header { padding: 28px 32px 18px; background: #ffffff; border-bottom: 1px solid #d8e0ea; }
+    h1 { margin: 0 0 8px; font-size: 32px; letter-spacing: 0; }
+    main { padding: 24px 32px 40px; }
+    .summary { display: grid; grid-template-columns: repeat(auto-fit, minmax(180px, 1fr)); gap: 12px; margin-bottom: 20px; }
+    .card, table { background: #ffffff; border: 1px solid #d8e0ea; border-radius: 8px; }
+    .card { padding: 16px; }
+    .card span { display: block; color: #667085; font-size: 13px; }
+    .card strong { display: block; margin-top: 6px; font-size: 24px; }
+    table { width: 100%; border-collapse: collapse; overflow: hidden; }
+    th, td { padding: 11px 12px; border-bottom: 1px solid #e5ebf2; text-align: left; vertical-align: top; font-size: 14px; }
+    th { color: #475467; background: #f0f4f8; font-size: 12px; text-transform: uppercase; }
+    code { font-size: 12px; white-space: normal; }
+    .pill { display: inline-block; padding: 3px 8px; border-radius: 999px; background: #e8eef6; font-size: 12px; }
+    .critical, .high { background: #fee2e2; color: #991b1b; }
+    .medium { background: #fef3c7; color: #92400e; }
+    .low { background: #dcfce7; color: #166534; }
+  </style>
+</head>
+<body>
+  <header>
+    <h1>MCP Risk Graph</h1>
+    <p>MCP Observatory maps the risk graph of agent toolchains before agents depend on them.</p>
+  </header>
+  <main>
+    <section class="summary">
+      <article class="card"><span>Servers</span><strong>${graph.summary.totalServers}</strong></article>
+      <article class="card"><span>Capability boundaries</span><strong>${graph.summary.totalBoundaries}</strong></article>
+      <article class="card"><span>Highest risk</span><strong>${escapeHtml(graph.summary.highestRiskLevel)}</strong></article>
+      <article class="card"><span>Generated</span><strong>${escapeHtml(graph.generatedAt.slice(0, 10))}</strong></article>
+    </section>
+    <table>
+      <thead><tr><th>Server</th><th>Boundary</th><th>Risk</th><th>Action</th><th>Receipt</th><th>CI command</th><th>Evidence</th></tr></thead>
+      <tbody>
+        ${serverNodes.map((node) => `<tr>
+          <td><strong>${escapeHtml(node.name)}</strong><br><small>${escapeHtml(node.serverPackageOrRepo ?? "")}</small></td>
+          <td><span class="pill">${escapeHtml(node.capabilityBoundary)}</span></td>
+          <td><span class="pill ${escapeHtml(node.riskLevel)}">${escapeHtml(node.riskLevel)}</span></td>
+          <td>${escapeHtml(node.recommendedAction)}</td>
+          <td>${escapeHtml(node.receiptState)}</td>
+          <td><code>${escapeHtml(node.ciCommand ?? "")}</code></td>
+          <td>${node.evidenceRefs.map((ref) => `<code>${escapeHtml(`${ref.type}:${ref.path}`)}</code>`).join("<br>")}</td>
+        </tr>`).join("")}
+      </tbody>
+    </table>
+  </main>
+</body>
+</html>`;
+}
+export function renderRiskGraphJson(graph) {
+    return JSON.stringify(graph, null, 2);
+}
+//# sourceMappingURL=risk-graph.js.map

package/dist/src/risk-graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-graph.js","sourceRoot":"","sources":["../../src/risk-graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAsB,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAA2B,MAAM,eAAe,CAAC;AAGpF,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAyE5C,MAAM,WAAW,GAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;AAC1F,MAAM,cAAc,GAAyB,CAAC,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;AAE7J,SAAS,QAAQ,CAAC,MAAc,EAAE,KAAa;IAC7C,OAAO,GAAG,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,UAAU,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,KAA+B,CAAC;IAC3I,IAAI,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,cAAc,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,UAAU,CAA2B,CAAC;IACnI,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO,KAAK,CAAC,cAAc,CAAC,KAAK,yBAAyB,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpH,CAAC,CAAC,KAA8B;QAChC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC,CAAC;IACJ,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAAoB;IAC5D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,8BAA8B,SAAS,GAAG,CAAC,CAAC;YAClF,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBACH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACvE,QAAQ,CAAC,IAAI,CAAC,4BAA4B,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,QAAQ,CAAC,IAAI,CAAC,uCAAuC,SAAS,KAAK,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,SAAS,CAAC,KAAqB;IACtC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACjE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,OAAmB;IAC1C,OAAO;QACL,OAAO,CAAC,OAAO,CAAC,eAAe;QAC/B,OAAO,CAAC,OAAO,CAAC,iBAAiB;QACjC,OAAO,CAAC,OAAO,CAAC,eAAe;QAC/B,OAAO,CAAC,OAAO,CAAC,eAAe;QAC/B,OAAO,CAAC,OAAO,CAAC,kBAAkB;KACnC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,QAAqB;IACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IAChD,MAAM,cAAc,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/G,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,MAAM,UAAU,GAAG,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzF,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,OAAO;QACL,QAAQ,CAAC,MAAM,CAAC,UAAU;QAC1B,QAAQ,CAAC,MAAM,CAAC,QAAQ;QACxB,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG;KAC7G,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA2B,EAAE,IAAc;IACzE,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,QAAQ,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAqB;IACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IAChD,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAClL,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAqB;IAC7C,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,KAAK,eAAe,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC3E,OAAO,4CAA4C,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,4BAA4B,CAAC;IAC9J,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC9D,OAAO,4CAA4C,QAAQ,CAAC,MAAM,CAAC,GAAG,4BAA4B,CAAC;IACrG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAqB;IAC/C,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC7C,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC;IAC3C,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IACvC,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,CAAY,EAAE,CAAY;IAC9C,MAAM,IAAI,GAA8B,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAChG,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,CAAgB,EAAE,CAAgB;IACzD,MAAM,IAAI,GAAkC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACxG,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAgC;IAC7D,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAK1C;IACC,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC;QACzE,OAAO,CAAC,MAAM;QACd,OAAO,CAAC,KAAK;QACb,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,QAAQ;QAChB,OAAO,CAAC,OAAO,CAAC,IAAI;QACpB,OAAO,CAAC,cAAc;KACvB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,qBAAqB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5G,IAAI,mFAAmF,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACrH,IAAI,uHAAuH,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC;IAC7J,IAAI,wEAAwE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,mBAAmB,CAAC;IAClJ,IAAI,iEAAiE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,YAAY,CAAC;IACnK,IAAI,+DAA+D,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC5H,IAAI,8FAA8F,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC;IAC1J,IAAI,iFAAiF,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,eAAe,CAAC;IACpJ,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAqB,EAAE,SAAiB;IAClE,MAAM,IAAI,GAA2B,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACjF,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,YAAY,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACnH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAmB,EAAE,SAAiB;IACjE,MAAM,IAAI,GAA2B,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,IAAI,SAAS,EAAE,CAAC,CAAC;IAC9K,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,IAAI,SAAS,EAAE,CAAC,CAAC;IACtL,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,IAAI,SAAS,EAAE,CAAC,CAAC;IACrJ,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,QAAuB,EAAE,IAAmB;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAgC,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC;QAAE,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7G,OAAO;QACL,GAAG,QAAQ;QACX,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI;QAChC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC,mBAAmB;QAC7E,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB;QACrH,YAAY,EAAE,QAAQ,CAAC,YAAY,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY;QACnG,iBAAiB,EAAE,eAAe,CAAC,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC;QACtF,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC;QAC3D,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAqB;IACvC,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,gCAAgC,CAAC;IAChE,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,2DAA2D,CAAC;IAC3F,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,qDAAqD,CAAC;IACpF,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,8EAA8E,CAAC;IACnH,OAAO,8DAA8D,CAAC;AACxE,CAAC;AAED,SAAS,YAAY,CAAC,QAA4B;IAChD,OAAO;QACL,EAAE,EAAE,YAAY,QAAQ,EAAE;QAC1B,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,qBAAqB;QAC7B,mBAAmB,EAAE,IAAI;QACzB,kBAAkB,EAAE,QAAQ;QAC5B,YAAY,EAAE,eAAe;QAC7B,iBAAiB,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;QAC5D,SAAS,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;QACxD,YAAY,EAAE,EAAE;QAChB,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAwB;IAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAyB,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEjD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,IAAI,CAAC,gCAAgC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,0BAA0B,CAAC;gBAC1C,YAAY,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,yBAAyB,EAAE;aAC3M,CAAC,CAAC;YACH,MAAM,IAAI,GAAkB;gBAC1B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACtD,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe;gBAC3C,MAAM,EAAE,SAAS;gBACjB,mBAAmB,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe;gBAC1D,kBAAkB,EAAE,QAAQ;gBAC5B,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK;gBACzC,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM;gBAC/C,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC3D,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC;gBAC5D,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU;aACjD,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAClE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACvG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,cAAc,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,YAAY,QAAQ,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,qCAAqC,QAAQ,GAAG,EAAE,CAAC,CAAC;YACxL,IAAI,IAAI,CAAC,iBAAiB,KAAK,OAAO;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,YAAY,IAAI,CAAC,iBAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,YAAY,QAAQ,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;YACtN,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7H,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,0BAA0B,CAAC;YAC1C,KAAK,EAAE,SAAS;YAChB,QAAQ;YACR,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ;YACxC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ;SAC7C,CAAC,CAAC;QACH,MAAM,IAAI,GAAkB;YAC1B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ;YACxE,MAAM,EAAE,cAAc;YACtB,mBAAmB,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;YACzD,kBAAkB,EAAE,QAAQ;YAC5B,YAAY,EAAE,eAAe;YAC7B,iBAAiB,EAAE,aAAa,CAAC,MAAM;YACvC,SAAS,EAAE,kBAAkB,CAAC,aAAa,CAAC,MAAM,CAAC;YACnD,YAAY,EAAE,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;YAC5D,SAAS,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;SAC5C,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAClE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,cAAc,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,YAAY,QAAQ,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,mDAAmD,QAAQ,GAAG,EAAE,CAAC,CAAC;QACtM,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,YAAY,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC,CAAC;QACzN,IAAI,IAAI,CAAC,iBAAiB,KAAK,OAAO;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,YAAY,IAAI,CAAC,iBAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,YAAY,QAAQ,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACxN,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3I,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,qBAAqB,CAAC,CAAC;IACtF,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAkC,CAAC;IACnH,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAuC,CAAC;IACjI,IAAI,gBAAgB,GAAc,SAAS,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC1C,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC7C,gBAAgB,GAAG,YAAY,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,kBAAkB,GAAG,eAAe;SACvC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,KAAK,OAAO,CAAC;SACpD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACtF,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAExE,OAAO;QACL,aAAa,EAAE,OAAO;QACtB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,WAAW,EAAE,YAAY;QACzB,KAAK;QACL,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnG,OAAO,EAAE;YACP,YAAY,EAAE,eAAe,CAAC,MAAM;YACpC,eAAe,EAAE,UAAU,CAAC,IAAI;YAChC,gBAAgB;YAChB,YAAY;YACZ,cAAc;SACf;QACD,kBAAkB;QAClB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,MAAM,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAgB;IACtD,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,qBAAqB,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG;QACZ,kBAAkB;QAClB,EAAE;QACF,uFAAuF;QACvF,EAAE;QACF,4KAA4K;QAC5K,EAAE;QACF,YAAY;QACZ,EAAE;QACF,cAAc,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE;QAC1C,4BAA4B,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE;QAC3D,mBAAmB,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE;QACnD,mBAAmB,KAAK,CAAC,WAAW,EAAE;QACtC,EAAE;QACF,YAAY;QACZ,EAAE;QACF,yEAAyE;QACzE,6CAA6C;QAC7C,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3B,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACtB,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YACpB,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI;SAC9E,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,EAAE;QACF,wBAAwB;QACxB,EAAE;QACF,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC;QAC5J,EAAE;QACF,6BAA6B;QAC7B,EAAE;QACF,uRAAuR;KACxR,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvH,OAAO,IAAI;SACR,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAgB;IAClD,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,qBAAqB,CAAC,CAAC;IACxF,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0DAiCiD,KAAK,CAAC,OAAO,CAAC,YAAY;wEACZ,KAAK,CAAC,OAAO,CAAC,eAAe;+DACtC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;4DAC7C,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;;;;;UAK5F,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;wBACZ,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,UAAU,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC;mCAC3E,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC;kCACpC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3E,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBAClC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;sBACvB,UAAU,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;gBACtC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,UAAU,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;cACtG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;;;;;QAKhB,CAAC;AACT,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAgB;IAClD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC"}

package/dist/src/server.d.ts

@@ -1,5 +1,3 @@
 #!/usr/bin/env node
-export declare function validateArgs(args: string[]): void;
-export declare function validateCommand(command: string): void;
-export declare function validatePath(filePath: string, allowedRoot: string): string;
+export { validateArgs, validateCommand, validatePath } from "./utils/security.js";
 export declare function startServer(): Promise<void>;