@mattral/collector 1.1.0 → 1.2.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mattral/collector",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Health checking and traffic-observing proxy collectors for MCP servers",
   "type": "module",
   "license": "MIT",
@@ -46,7 +46,7 @@
   "dependencies": {
     "@mattral/core": "^1.0.0",
     "@mattral/storage": "^1.0.0",
-    "@modelcontextprotocol/sdk": "^1.29.0"
+    "@modelcontextprotocol/sdk": "^1.32.2"
   },
   "devDependencies": {
     "typescript": "^5.7.3"

package/dist/error-message.d.ts

@@ -1,28 +0,0 @@
-import type { JsonRpcMessage } from "./json-rpc-framer.js";
-/**
- * Extracts a human-readable error message from a raw MCP `tools/call`
- * response, for both kinds of failure the protocol allows:
- *
- * - **Protocol-level failures**: the JSON-RPC response has an `error`
- *   object (e.g. a malformed request, a transport-level failure). Its
- *   `.message` is already the right text — nothing to unwrap.
- * - **Tool-level failures**: the JSON-RPC response is a normal `result`
- *   with `isError: true`, and the actual, tool-specific error description
- *   lives in `result.content` as ordinary text blocks — this is the MCP
- *   spec's convention for a tool reporting its *own* failure without it
- *   being treated as a transport-level protocol error (this project's own
- *   reference server's `flaky` tool does exactly this).
- *
- * Before this function existed, every tool-level failure's real error
- * text was discarded in favor of one generic placeholder string,
- * regardless of what the tool actually said — the same underlying mistake
- * as the pre-`extractOutputPayload` output-shape bug (see
- * docs/decisions/0015-statistical-drift-detection.md): treating MCP's
- * `content` array as opaque instead of reading what's actually inside it.
- * See docs/decisions/0016-error-classification.md.
- *
- * Falls back to a generic placeholder only when there's truly no error
- * object and no text content to describe the failure at all.
- */
-export declare function extractErrorMessage(message: JsonRpcMessage): string;
-//# sourceMappingURL=error-message.d.ts.map

package/dist/error-message.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"error-message.d.ts","sourceRoot":"","sources":["../src/error-message.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAkBnE"}

package/dist/error-message.js

@@ -1,42 +0,0 @@
-/**
- * Extracts a human-readable error message from a raw MCP `tools/call`
- * response, for both kinds of failure the protocol allows:
- *
- * - **Protocol-level failures**: the JSON-RPC response has an `error`
- *   object (e.g. a malformed request, a transport-level failure). Its
- *   `.message` is already the right text — nothing to unwrap.
- * - **Tool-level failures**: the JSON-RPC response is a normal `result`
- *   with `isError: true`, and the actual, tool-specific error description
- *   lives in `result.content` as ordinary text blocks — this is the MCP
- *   spec's convention for a tool reporting its *own* failure without it
- *   being treated as a transport-level protocol error (this project's own
- *   reference server's `flaky` tool does exactly this).
- *
- * Before this function existed, every tool-level failure's real error
- * text was discarded in favor of one generic placeholder string,
- * regardless of what the tool actually said — the same underlying mistake
- * as the pre-`extractOutputPayload` output-shape bug (see
- * docs/decisions/0015-statistical-drift-detection.md): treating MCP's
- * `content` array as opaque instead of reading what's actually inside it.
- * See docs/decisions/0016-error-classification.md.
- *
- * Falls back to a generic placeholder only when there's truly no error
- * object and no text content to describe the failure at all.
- */
-export function extractErrorMessage(message) {
-    if (message.error?.message)
-        return message.error.message;
-    const content = message.result?.content;
-    if (Array.isArray(content)) {
-        const texts = content
-            .filter((block) => typeof block === "object" &&
-            block !== null &&
-            block.type === "text" &&
-            typeof block.text === "string")
-            .map((block) => block.text);
-        if (texts.length > 0)
-            return texts.join(" ");
-    }
-    return "Tool call returned isError: true, with no error text or content to describe why.";
-}
-//# sourceMappingURL=error-message.js.map

package/dist/error-message.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"error-message.js","sourceRoot":"","sources":["../src/error-message.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAuB;IACzD,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAEzD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO;aAClB,MAAM,CACL,CAAC,KAAK,EAA2C,EAAE,CACjD,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACb,KAA4B,CAAC,IAAI,KAAK,MAAM;YAC7C,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ,CACzD;aACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,kFAAkF,CAAC;AAC5F,CAAC"}

package/dist/health-checker.d.ts

@@ -1,43 +0,0 @@
-import { type DriftEvent, type Server } from "@mattral/core";
-import type { ReliabilityStore } from "@mattral/storage";
-export interface HealthCheckResult {
-    serverId: string;
-    reachable: boolean;
-    latencyMs: number;
-    toolCount: number;
-    driftEvents: DriftEvent[];
-    error?: string;
-}
-export interface HealthCheckerOptions {
-    store: ReliabilityStore;
-    /** Client identity advertised to monitored servers during the MCP handshake. */
-    clientInfo?: {
-        name: string;
-        version: string;
-    };
-    /** Timeout for the initialize handshake and the tools/list round trip. Default 10s. */
-    timeoutMs?: number;
-}
-/** Reserved pseudo tool-name under which health-check round trips are recorded. */
-export declare const HEALTH_CHECK_TOOL_NAME = "__health_check__";
-/**
- * Performs a single, side-effect-free health check against a server:
- * connects, completes the MCP `initialize` handshake, calls `tools/list`,
- * and disconnects.
- *
- * This deliberately never calls a tool. Per the project's operational
- * principles (spec section 11 / docs/architecture.md#security), a
- * monitoring tool must not exercise side effects on a server it doesn't
- * have explicit consent to invoke. Observing *real* tool calls — the ones a
- * live agent chose to make — is the job of {@link StdioProxyCollector}
- * instead, where mcp-reliable never originates the call itself.
- */
-export declare class HealthChecker {
-    private readonly store;
-    private readonly clientInfo;
-    private readonly timeoutMs;
-    constructor(options: HealthCheckerOptions);
-    check(server: Server): Promise<HealthCheckResult>;
-    private recordHealthCheckExecution;
-}
-//# sourceMappingURL=health-checker.d.ts.map

package/dist/health-checker.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"health-checker.d.ts","sourceRoot":"","sources":["../src/health-checker.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,UAAU,EAEf,KAAK,MAAM,EAEZ,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGzD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,gBAAgB,CAAC;IACxB,gFAAgF;IAChF,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mFAAmF;AACnF,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AAEzD;;;;;;;;;;;GAWG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmB;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAC/D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,OAAO,EAAE,oBAAoB;IAMnC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAwDvD,OAAO,CAAC,0BAA0B;CAmBnC"}

package/dist/health-checker.js

@@ -1,93 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { Client } from "@modelcontextprotocol/sdk/client/index.js";
-import { computeSchemaFingerprint, detectSchemaDrift } from "@mattral/core";
-import { createClientTransport } from "./transport-factory.js";
-/** Reserved pseudo tool-name under which health-check round trips are recorded. */
-export const HEALTH_CHECK_TOOL_NAME = "__health_check__";
-/**
- * Performs a single, side-effect-free health check against a server:
- * connects, completes the MCP `initialize` handshake, calls `tools/list`,
- * and disconnects.
- *
- * This deliberately never calls a tool. Per the project's operational
- * principles (spec section 11 / docs/architecture.md#security), a
- * monitoring tool must not exercise side effects on a server it doesn't
- * have explicit consent to invoke. Observing *real* tool calls — the ones a
- * live agent chose to make — is the job of {@link StdioProxyCollector}
- * instead, where mcp-reliable never originates the call itself.
- */
-export class HealthChecker {
-    store;
-    clientInfo;
-    timeoutMs;
-    constructor(options) {
-        this.store = options.store;
-        this.clientInfo = options.clientInfo ?? { name: "mcp-reliable", version: "1.0.0" };
-        this.timeoutMs = options.timeoutMs ?? 10_000;
-    }
-    async check(server) {
-        const start = performance.now();
-        const now = Date.now();
-        const client = new Client(this.clientInfo, { capabilities: {} });
-        const transport = createClientTransport(server.transport);
-        const driftEvents = [];
-        try {
-            await client.connect(transport, { timeout: this.timeoutMs });
-            const { tools } = await client.listTools(undefined, { timeout: this.timeoutMs });
-            const latencyMs = performance.now() - start;
-            for (const tool of tools) {
-                const fingerprint = computeSchemaFingerprint(tool.inputSchema);
-                const existing = this.store.getTool(server.id, tool.name);
-                const drift = detectSchemaDrift({
-                    serverId: server.id,
-                    toolName: tool.name,
-                    previousFingerprint: existing?.schemaFingerprint,
-                    currentFingerprint: fingerprint,
-                    now
-                });
-                if (drift) {
-                    this.store.recordDriftEvent(drift);
-                    driftEvents.push(drift);
-                }
-                const toolRecord = {
-                    id: existing?.id ?? randomUUID(),
-                    serverId: server.id,
-                    name: tool.name,
-                    description: tool.description,
-                    schemaFingerprint: fingerprint,
-                    inputSchema: tool.inputSchema,
-                    firstSeenAt: existing?.firstSeenAt ?? now,
-                    lastSeenAt: now
-                };
-                this.store.upsertTool(toolRecord);
-            }
-            this.recordHealthCheckExecution(server.id, now, latencyMs, true);
-            return { serverId: server.id, reachable: true, latencyMs, toolCount: tools.length, driftEvents };
-        }
-        catch (error) {
-            const latencyMs = performance.now() - start;
-            const message = error instanceof Error ? error.message : String(error);
-            this.recordHealthCheckExecution(server.id, now, latencyMs, false, message);
-            return { serverId: server.id, reachable: false, latencyMs, toolCount: 0, driftEvents, error: message };
-        }
-        finally {
-            await client.close().catch(() => {
-                // Best-effort: the connection may already be dead if the check failed.
-            });
-        }
-    }
-    recordHealthCheckExecution(serverId, startedAt, durationMs, success, errorMessage) {
-        const execution = {
-            id: randomUUID(),
-            serverId,
-            toolName: HEALTH_CHECK_TOOL_NAME,
-            startedAt,
-            durationMs,
-            success,
-            errorMessage,
-            source: "health-check"
-        };
-        this.store.recordExecution(execution);
-    }
-}
-//# sourceMappingURL=health-checker.js.map

package/dist/health-checker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"health-checker.js","sourceRoot":"","sources":["../src/health-checker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EAKlB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAmB/D,mFAAmF;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAEzD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,aAAa;IACP,KAAK,CAAmB;IACxB,UAAU,CAAoC;IAC9C,SAAS,CAAS;IAEnC,YAAY,OAA6B;QACvC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACnF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAc;QACxB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC7D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YACjF,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAE5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBAE1D,MAAM,KAAK,GAAG,iBAAiB,CAAC;oBAC9B,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,mBAAmB,EAAE,QAAQ,EAAE,iBAAiB;oBAChD,kBAAkB,EAAE,WAAW;oBAC/B,GAAG;iBACJ,CAAC,CAAC;gBACH,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;oBACnC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;gBAED,MAAM,UAAU,GAAS;oBACvB,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,UAAU,EAAE;oBAChC,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,iBAAiB,EAAE,WAAW;oBAC9B,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,GAAG;oBACzC,UAAU,EAAE,GAAG;iBAChB,CAAC;gBACF,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACpC,CAAC;YAED,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAEjE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;QACnG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAC5C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACzG,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC9B,uEAAuE;YACzE,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,0BAA0B,CAChC,QAAgB,EAChB,SAAiB,EACjB,UAAkB,EAClB,OAAgB,EAChB,YAAqB;QAErB,MAAM,SAAS,GAAc;YAC3B,EAAE,EAAE,UAAU,EAAE;YAChB,QAAQ;YACR,QAAQ,EAAE,sBAAsB;YAChC,SAAS;YACT,UAAU;YACV,OAAO;YACP,YAAY;YACZ,MAAM,EAAE,cAAc;SACvB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/index.d.ts

@@ -1,5 +0,0 @@
-export * from "./json-rpc-framer.js";
-export * from "./transport-factory.js";
-export * from "./health-checker.js";
-export * from "./proxy-collector.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC"}

package/dist/index.js

@@ -1,5 +0,0 @@
-export * from "./json-rpc-framer.js";
-export * from "./transport-factory.js";
-export * from "./health-checker.js";
-export * from "./proxy-collector.js";
-//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC"}

package/dist/json-rpc-framer.d.ts

@@ -1,51 +0,0 @@
-/**
- * A minimal JSON-RPC 2.0 message shape, loosely typed on purpose: the proxy
- * only needs to inspect `id`, `method`, `result`, and `error` — it forwards
- * every other field verbatim without validating them against the full MCP
- * type definitions (that validation is the target server's job).
- */
-export interface JsonRpcMessage {
-    jsonrpc?: string;
-    id?: string | number;
-    method?: string;
-    params?: {
-        name?: string;
-        arguments?: unknown;
-        [key: string]: unknown;
-    };
-    result?: {
-        isError?: boolean;
-        content?: unknown;
-        [key: string]: unknown;
-    };
-    error?: {
-        code: number;
-        message: string;
-        [key: string]: unknown;
-    };
-    [key: string]: unknown;
-}
-/**
- * The MCP stdio transport frames JSON-RPC messages as one JSON object per
- * line (newline-delimited), per the MCP specification. This class buffers
- * partial reads from a stream and yields fully-parsed messages as they
- * become available — the same approach the official SDK's internal
- * ReadBuffer uses, reimplemented here so the proxy collector can stay a
- * thin, dependency-light pass-through rather than depending on SDK
- * internals that aren't part of its public API.
- *
- * Malformed lines are surfaced via the `onParseError` callback rather than
- * thrown, since a single bad line should not take down the whole proxy —
- * it is forwarded to the child/downstream as raw bytes regardless (the
- * proxy's job is to observe traffic, not to enforce protocol correctness).
- */
-export declare class JsonRpcFramer {
-    private readonly onMessage;
-    private readonly onParseError?;
-    private buffer;
-    constructor(onMessage: (message: JsonRpcMessage, raw: string) => void, onParseError?: ((raw: string, error: unknown) => void) | undefined);
-    push(chunk: Buffer | string): void;
-}
-/** Serializes a JSON-RPC message back to the newline-delimited wire format. */
-export declare function serializeJsonRpc(message: JsonRpcMessage): string;
-//# sourceMappingURL=json-rpc-framer.d.ts.map

package/dist/json-rpc-framer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"json-rpc-framer.d.ts","sourceRoot":"","sources":["../src/json-rpc-framer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACxE,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC1E,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAClE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,aAAa;IAItB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAJhC,OAAO,CAAC,MAAM,CAAM;gBAGD,SAAS,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,EACzD,YAAY,CAAC,GAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,aAAA;IAGvE,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;CAgBnC;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAEhE"}

package/dist/json-rpc-framer.js

@@ -1,46 +0,0 @@
-/**
- * The MCP stdio transport frames JSON-RPC messages as one JSON object per
- * line (newline-delimited), per the MCP specification. This class buffers
- * partial reads from a stream and yields fully-parsed messages as they
- * become available — the same approach the official SDK's internal
- * ReadBuffer uses, reimplemented here so the proxy collector can stay a
- * thin, dependency-light pass-through rather than depending on SDK
- * internals that aren't part of its public API.
- *
- * Malformed lines are surfaced via the `onParseError` callback rather than
- * thrown, since a single bad line should not take down the whole proxy —
- * it is forwarded to the child/downstream as raw bytes regardless (the
- * proxy's job is to observe traffic, not to enforce protocol correctness).
- */
-export class JsonRpcFramer {
-    onMessage;
-    onParseError;
-    buffer = "";
-    constructor(onMessage, onParseError) {
-        this.onMessage = onMessage;
-        this.onParseError = onParseError;
-    }
-    push(chunk) {
-        this.buffer += chunk.toString("utf8");
-        let newlineIndex;
-        while ((newlineIndex = this.buffer.indexOf("\n")) !== -1) {
-            const line = this.buffer.slice(0, newlineIndex);
-            this.buffer = this.buffer.slice(newlineIndex + 1);
-            const trimmed = line.trim();
-            if (trimmed.length === 0)
-                continue;
-            try {
-                const message = JSON.parse(trimmed);
-                this.onMessage(message, line);
-            }
-            catch (error) {
-                this.onParseError?.(line, error);
-            }
-        }
-    }
-}
-/** Serializes a JSON-RPC message back to the newline-delimited wire format. */
-export function serializeJsonRpc(message) {
-    return JSON.stringify(message) + "\n";
-}
-//# sourceMappingURL=json-rpc-framer.js.map

package/dist/json-rpc-framer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"json-rpc-framer.js","sourceRoot":"","sources":["../src/json-rpc-framer.ts"],"names":[],"mappings":"AAgBA;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,aAAa;IAIL;IACA;IAJX,MAAM,GAAG,EAAE,CAAC;IAEpB,YACmB,SAAyD,EACzD,YAAoD;QADpD,cAAS,GAAT,SAAS,CAAgD;QACzD,iBAAY,GAAZ,YAAY,CAAwC;IACpE,CAAC;IAEJ,IAAI,CAAC,KAAsB;QACzB,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,YAAoB,CAAC;QACzB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACnC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;gBACtD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,OAAuB;IACtD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;AACxC,CAAC"}

package/dist/output-payload.d.ts

@@ -1,32 +0,0 @@
-/**
- * Extracts the "meaningful" structured payload from a raw MCP
- * `tools/call` result, for output-shape drift detection to actually be
- * useful against it.
- *
- * Naively hashing `result.content` itself is close to useless for the
- * extremely common case where a tool returns its real structured data as
- * JSON text inside a single content block — `content: [{ type: "text",
- * text: "{...}" }]` has the exact same `[{type, text}]` shape whether the
- * embedded JSON is `{"message": "..."}` or `{"echoed": "...", "respondedAt":
- * "..."}`. A structural hash of the wrapper alone would never notice the
- * tool's actual output changed underneath it — this is exactly what this
- * project's own reference server does (see
- * `examples/reference-mcp-server/src/index.ts`), and what a great many
- * real-world MCP tools do too, for any tool that doesn't declare a formal
- * `outputSchema`. This function unwraps that, so what gets fingerprinted
- * is the real payload, not MCP's transport-level envelope around it.
- *
- * Precedence:
- * 1. `structuredContent`, if the tool declared an output schema and the
- *    SDK populated it — already a real object, nothing to unwrap.
- * 2. A single text content block that parses as JSON — the common
- *    "structured data serialized as text" convention.
- * 3. Otherwise, the raw `content` array as-is — still useful: catches a
- *    tool switching between text/image/resource blocks, or adding/
- *    removing blocks, even without parseable JSON inside them.
- * 4. If there's no `content` or `structuredContent` at all, the raw
- *    result object, matching how this was computed before this function
- *    existed (see docs/decisions/0015-statistical-drift-detection.md).
- */
-export declare function extractOutputPayload(result: unknown): unknown;
-//# sourceMappingURL=output-payload.d.ts.map

package/dist/output-payload.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"output-payload.d.ts","sourceRoot":"","sources":["../src/output-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAsB7D"}

package/dist/output-payload.js

@@ -1,54 +0,0 @@
-/**
- * Extracts the "meaningful" structured payload from a raw MCP
- * `tools/call` result, for output-shape drift detection to actually be
- * useful against it.
- *
- * Naively hashing `result.content` itself is close to useless for the
- * extremely common case where a tool returns its real structured data as
- * JSON text inside a single content block — `content: [{ type: "text",
- * text: "{...}" }]` has the exact same `[{type, text}]` shape whether the
- * embedded JSON is `{"message": "..."}` or `{"echoed": "...", "respondedAt":
- * "..."}`. A structural hash of the wrapper alone would never notice the
- * tool's actual output changed underneath it — this is exactly what this
- * project's own reference server does (see
- * `examples/reference-mcp-server/src/index.ts`), and what a great many
- * real-world MCP tools do too, for any tool that doesn't declare a formal
- * `outputSchema`. This function unwraps that, so what gets fingerprinted
- * is the real payload, not MCP's transport-level envelope around it.
- *
- * Precedence:
- * 1. `structuredContent`, if the tool declared an output schema and the
- *    SDK populated it — already a real object, nothing to unwrap.
- * 2. A single text content block that parses as JSON — the common
- *    "structured data serialized as text" convention.
- * 3. Otherwise, the raw `content` array as-is — still useful: catches a
- *    tool switching between text/image/resource blocks, or adding/
- *    removing blocks, even without parseable JSON inside them.
- * 4. If there's no `content` or `structuredContent` at all, the raw
- *    result object, matching how this was computed before this function
- *    existed (see docs/decisions/0015-statistical-drift-detection.md).
- */
-export function extractOutputPayload(result) {
-    if (result === null || typeof result !== "object")
-        return result;
-    const r = result;
-    if (r.structuredContent !== undefined)
-        return r.structuredContent;
-    if (Array.isArray(r.content)) {
-        if (r.content.length === 1) {
-            const block = r.content[0];
-            if (block?.type === "text" && typeof block.text === "string") {
-                try {
-                    return JSON.parse(block.text);
-                }
-                catch {
-                    // Not JSON - a genuine plain-text result. Fall through to
-                    // hashing the content array itself.
-                }
-            }
-        }
-        return r.content;
-    }
-    return result;
-}
-//# sourceMappingURL=output-payload.js.map

package/dist/output-payload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"output-payload.js","sourceRoot":"","sources":["../src/output-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAClD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IACjE,MAAM,CAAC,GAAG,MAA4D,CAAC;IAEvE,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,iBAAiB,CAAC;IAElE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAqC,CAAC;YAC/D,IAAI,KAAK,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7D,IAAI,CAAC;oBACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,CAAC;gBAAC,MAAM,CAAC;oBACP,0DAA0D;oBAC1D,oCAAoC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC,OAAO,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/proxy-collector.d.ts

@@ -1,83 +0,0 @@
-import { type DriftEvent, type Execution } from "@mattral/core";
-import type { ReliabilityStore } from "@mattral/storage";
-export interface StdioProxyCollectorOptions {
-    serverId: string;
-    store: ReliabilityStore;
-    command: string;
-    args?: string[];
-    env?: Record<string, string>;
-    cwd?: string;
-    /** Called for every recorded execution, in addition to persisting it to the store. */
-    onExecution?: (execution: Execution) => void;
-    /** Called whenever a drift event is detected and recorded. */
-    onDrift?: (event: DriftEvent) => void;
-    /** Stream carrying traffic FROM the real client (defaults to this process's stdin). */
-    input?: NodeJS.ReadableStream;
-    /** Stream carrying traffic TO the real client (defaults to this process's stdout). */
-    output?: NodeJS.WritableStream;
-    /**
-     * How many executions of the *same tool* to accumulate between
-     * window-based drift checks (output-shape and statistical/latency).
-     * Unlike schema drift (an O(1) fingerprint compare, checked on every
-     * `tools/list`), these compare whole windows of stored executions —
-     * running that on literally every single call would mean a store query
-     * plus a KS test per call on hot paths. Default 10: frequent enough that
-     * drift is caught within a handful of seconds of typical traffic, cheap
-     * enough not to matter. See docs/decisions/0015-statistical-drift-detection.md.
-     */
-    driftCheckIntervalCalls?: number;
-    /**
-     * Size of each of the two (baseline, recent) windows compared for
-     * window-based drift. Default 20, matching `detectLatencyDrift`'s own
-     * default `minSampleSize` — there's no point fetching a bigger window
-     * than the detector needs.
-     */
-    driftWindowSize?: number;
-}
-/**
- * A transparent stdio proxy that sits between an MCP client (an agent) and
- * a real MCP server: it spawns the target server as a child process and
- * forwards every JSON-RPC message between the client and the child
- * unmodified, while recording an `Execution` for every `tools/call`
- * request/response pair it observes, and a `Tool` (with schema drift
- * detection) for every `tools/list` response.
- *
- * Because it only ever forwards traffic a real client originated, it
- * requires no special consent model of its own for the calls it observes —
- * see docs/architecture.md#collection-model. From the client's point of
- * view, this proxy *is* the MCP server: point your agent's server command
- * at `mcp-reliable proxy <server-id> -- <original command>` instead of the
- * original command directly.
- */
-export declare class StdioProxyCollector {
-    private readonly options;
-    private readonly driftCheckIntervalCalls;
-    private readonly driftWindowSize;
-    private child;
-    private readonly pendingCalls;
-    private readonly pendingListRequests;
-    private readonly callCountByTool;
-    constructor(options: StdioProxyCollectorOptions);
-    /**
-     * Starts the child process and begins forwarding traffic. Resolves with
-     * the child's exit code once it terminates, or rejects if it could not
-     * be started at all (e.g. command not found).
-     */
-    start(): Promise<number | null>;
-    stop(): Promise<void>;
-    private handleDownstreamMessage;
-    private handleUpstreamMessage;
-    private recordCallExecution;
-    private recordDrift;
-    /**
-     * Every `driftCheckIntervalCalls` calls to a given tool, pulls its last
-     * two `driftWindowSize`-execution windows and runs the window-based
-     * drift detectors (output-shape, latency) against them. Schema drift is
-     * handled separately in `recordToolsListResult` — it's a per-fingerprint
-     * compare, not a window comparison, so it runs on every `tools/list`
-     * instead of being throttled here.
-     */
-    private maybeCheckWindowDrift;
-    private recordToolsListResult;
-}
-//# sourceMappingURL=proxy-collector.d.ts.map

package/dist/proxy-collector.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"proxy-collector.d.ts","sourceRoot":"","sources":["../src/proxy-collector.ts"],"names":[],"mappings":"AAEA,OAAO,EAML,KAAK,UAAU,EACf,KAAK,SAAS,EAEf,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAKzD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,KAAK,IAAI,CAAC;IAC7C,8DAA8D;IAC9D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACtC,uFAAuF;IACvF,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC9B,sFAAsF;IACtF,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC/B;;;;;;;;;OASG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAoBD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAS;IACjD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,KAAK,CAA2B;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2C;IACxE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA8B;IAClE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6B;gBAEjD,OAAO,EAAE,0BAA0B;IAM/C;;;;OAIG;IACH,KAAK,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA+CzB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,OAAO,CAAC,uBAAuB;IAW/B,OAAO,CAAC,qBAAqB;IAkB7B,OAAO,CAAC,mBAAmB;IA4B3B,OAAO,CAAC,WAAW;IAKnB;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAsC7B,OAAO,CAAC,qBAAqB;CAgC9B"}

package/dist/proxy-collector.js

@@ -1,214 +0,0 @@
-import { spawn } from "node:child_process";
-import { randomUUID } from "node:crypto";
-import { computeOutputSignature, computeSchemaFingerprint, detectLatencyDrift, detectOutputShapeDrift, detectSchemaDrift } from "@mattral/core";
-import { JsonRpcFramer } from "./json-rpc-framer.js";
-import { extractErrorMessage } from "./error-message.js";
-import { extractOutputPayload } from "./output-payload.js";
-function isToolsListResult(value) {
-    return (typeof value === "object" &&
-        value !== null &&
-        Array.isArray(value.tools));
-}
-/**
- * A transparent stdio proxy that sits between an MCP client (an agent) and
- * a real MCP server: it spawns the target server as a child process and
- * forwards every JSON-RPC message between the client and the child
- * unmodified, while recording an `Execution` for every `tools/call`
- * request/response pair it observes, and a `Tool` (with schema drift
- * detection) for every `tools/list` response.
- *
- * Because it only ever forwards traffic a real client originated, it
- * requires no special consent model of its own for the calls it observes —
- * see docs/architecture.md#collection-model. From the client's point of
- * view, this proxy *is* the MCP server: point your agent's server command
- * at `mcp-reliable proxy <server-id> -- <original command>` instead of the
- * original command directly.
- */
-export class StdioProxyCollector {
-    options;
-    driftCheckIntervalCalls;
-    driftWindowSize;
-    child;
-    pendingCalls = new Map();
-    pendingListRequests = new Set();
-    callCountByTool = new Map();
-    constructor(options) {
-        this.options = options;
-        this.driftCheckIntervalCalls = options.driftCheckIntervalCalls ?? 10;
-        this.driftWindowSize = options.driftWindowSize ?? 20;
-    }
-    /**
-     * Starts the child process and begins forwarding traffic. Resolves with
-     * the child's exit code once it terminates, or rejects if it could not
-     * be started at all (e.g. command not found).
-     */
-    start() {
-        const { command, args = [], env, cwd } = this.options;
-        return new Promise((resolve, reject) => {
-            const child = spawn(command, args, {
-                env: env ? { ...process.env, ...env } : process.env,
-                cwd,
-                stdio: ["pipe", "pipe", "inherit"]
-            });
-            this.child = child;
-            const childStdin = child.stdin;
-            const childStdout = child.stdout;
-            if (!childStdin || !childStdout) {
-                reject(new Error("Failed to open stdio pipes for the child MCP server process"));
-                return;
-            }
-            const input = this.options.input ?? process.stdin;
-            const output = this.options.output ?? process.stdout;
-            // Downstream: messages FROM the client TO the child (requests, notifications).
-            const downstreamFramer = new JsonRpcFramer((message, raw) => {
-                this.handleDownstreamMessage(message);
-                childStdin.write(raw + "\n");
-            }, (raw) => childStdin.write(raw + "\n") // forward unparseable lines verbatim; never drop traffic
-            );
-            input.on("data", (chunk) => downstreamFramer.push(chunk));
-            input.on("end", () => child.kill());
-            // Upstream: messages FROM the child TO the client (responses, notifications).
-            const upstreamFramer = new JsonRpcFramer((message, raw) => {
-                this.handleUpstreamMessage(message);
-                output.write(raw + "\n");
-            }, (raw) => output.write(raw + "\n"));
-            childStdout.on("data", (chunk) => upstreamFramer.push(chunk));
-            child.on("error", (error) => reject(error));
-            child.on("exit", (code) => resolve(code));
-        });
-    }
-    async stop() {
-        this.child?.kill();
-    }
-    handleDownstreamMessage(message) {
-        if (message.id === undefined)
-            return;
-        if (message.method === "tools/call") {
-            const toolName = message.params?.name ?? "unknown";
-            const inputBytes = Buffer.byteLength(JSON.stringify(message.params?.arguments ?? {}), "utf8");
-            this.pendingCalls.set(message.id, { toolName, startedAt: Date.now(), inputBytes });
-        }
-        else if (message.method === "tools/list") {
-            this.pendingListRequests.add(message.id);
-        }
-    }
-    handleUpstreamMessage(message) {
-        if (message.id === undefined)
-            return;
-        const pendingCall = this.pendingCalls.get(message.id);
-        if (pendingCall) {
-            this.pendingCalls.delete(message.id);
-            this.recordCallExecution(pendingCall, message);
-            return;
-        }
-        if (this.pendingListRequests.has(message.id)) {
-            this.pendingListRequests.delete(message.id);
-            if (isToolsListResult(message.result)) {
-                this.recordToolsListResult(message.result);
-            }
-        }
-    }
-    recordCallExecution(pending, message) {
-        const now = Date.now();
-        const durationMs = now - pending.startedAt;
-        const isError = Boolean(message.error) || Boolean(message.result?.isError);
-        const outputBytes = message.result !== undefined ? Buffer.byteLength(JSON.stringify(message.result), "utf8") : undefined;
-        const outputSignature = !isError && message.result !== undefined ? computeOutputSignature(extractOutputPayload(message.result)) : undefined;
-        const execution = {
-            id: randomUUID(),
-            serverId: this.options.serverId,
-            toolName: pending.toolName,
-            startedAt: pending.startedAt,
-            durationMs,
-            success: !isError,
-            errorMessage: isError ? extractErrorMessage(message) : undefined,
-            outputSignature,
-            inputBytes: pending.inputBytes,
-            outputBytes,
-            source: "proxy"
-        };
-        this.options.store.recordExecution(execution);
-        this.options.onExecution?.(execution);
-        this.maybeCheckWindowDrift(pending.toolName, now);
-    }
-    recordDrift(drift) {
-        this.options.store.recordDriftEvent(drift);
-        this.options.onDrift?.(drift);
-    }
-    /**
-     * Every `driftCheckIntervalCalls` calls to a given tool, pulls its last
-     * two `driftWindowSize`-execution windows and runs the window-based
-     * drift detectors (output-shape, latency) against them. Schema drift is
-     * handled separately in `recordToolsListResult` — it's a per-fingerprint
-     * compare, not a window comparison, so it runs on every `tools/list`
-     * instead of being throttled here.
-     */
-    maybeCheckWindowDrift(toolName, now) {
-        const count = (this.callCountByTool.get(toolName) ?? 0) + 1;
-        this.callCountByTool.set(toolName, count);
-        if (count % this.driftCheckIntervalCalls !== 0)
-            return;
-        const windowSize = this.driftWindowSize;
-        // Most-recent-first (see SqliteStore#listExecutions): the first half is
-        // the "recent" window, the second half the "baseline" it's compared
-        // against.
-        const executions = this.options.store.listExecutions({
-            serverId: this.options.serverId,
-            toolName,
-            limit: windowSize * 2
-        });
-        if (executions.length < windowSize * 2)
-            return;
-        const recent = executions.slice(0, windowSize);
-        const baseline = executions.slice(windowSize, windowSize * 2);
-        const shapeDrift = detectOutputShapeDrift({
-            serverId: this.options.serverId,
-            toolName,
-            baseline,
-            recent,
-            now
-        });
-        if (shapeDrift)
-            this.recordDrift(shapeDrift);
-        const latencyDrift = detectLatencyDrift({
-            serverId: this.options.serverId,
-            toolName,
-            baseline,
-            recent,
-            now
-        });
-        if (latencyDrift)
-            this.recordDrift(latencyDrift);
-    }
-    recordToolsListResult(result) {
-        const now = Date.now();
-        for (const tool of result.tools) {
-            if (typeof tool.name !== "string")
-                continue;
-            const fingerprint = computeSchemaFingerprint(tool.inputSchema);
-            const existing = this.options.store.getTool(this.options.serverId, tool.name);
-            const drift = detectSchemaDrift({
-                serverId: this.options.serverId,
-                toolName: tool.name,
-                previousFingerprint: existing?.schemaFingerprint,
-                currentFingerprint: fingerprint,
-                now
-            });
-            if (drift) {
-                this.recordDrift(drift);
-            }
-            const toolRecord = {
-                id: existing?.id ?? randomUUID(),
-                serverId: this.options.serverId,
-                name: tool.name,
-                description: tool.description,
-                schemaFingerprint: fingerprint,
-                inputSchema: tool.inputSchema,
-                firstSeenAt: existing?.firstSeenAt ?? now,
-                lastSeenAt: now
-            };
-            this.options.store.upsertTool(toolRecord);
-        }
-    }
-}
-//# sourceMappingURL=proxy-collector.js.map

package/dist/proxy-collector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"proxy-collector.js","sourceRoot":"","sources":["../src/proxy-collector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EAIlB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,aAAa,EAAuB,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AA+C3D,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,OAAO,CAAE,KAA6B,CAAC,KAAK,CAAC,CACpD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,mBAAmB;IACb,OAAO,CAA6B;IACpC,uBAAuB,CAAS;IAChC,eAAe,CAAS;IACjC,KAAK,CAA2B;IACvB,YAAY,GAAG,IAAI,GAAG,EAAgC,CAAC;IACvD,mBAAmB,GAAG,IAAI,GAAG,EAAmB,CAAC;IACjD,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE7D,YAAY,OAAmC;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,IAAI,EAAE,CAAC;QACrE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;IACvD,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;gBACjC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;gBACnD,GAAG;gBACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC;aACnC,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YAEnB,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;YAC/B,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC;YACjC,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC,CAAC;gBACjF,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;YAClD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;YAErD,+EAA+E;YAC/E,MAAM,gBAAgB,GAAG,IAAI,aAAa,CACxC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;gBACf,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACtC,UAAU,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;YAC/B,CAAC,EACD,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,yDAAyD;aAChG,CAAC;YACF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAClE,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAEpC,8EAA8E;YAC9E,MAAM,cAAc,GAAG,IAAI,aAAa,CACtC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;gBACf,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;gBACpC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;YAC3B,CAAC,EACD,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAClC,CAAC;YACF,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAEtE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5C,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACrB,CAAC;IAEO,uBAAuB,CAAC,OAAuB;QACrD,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO;QACrC,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,SAAS,CAAC;YACnD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YAC9F,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACrF,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAC3C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAEO,qBAAqB,CAAC,OAAuB;QACnD,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO;QAErC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5C,IAAI,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,OAAoB,EAAE,OAAuB;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,WAAW,GACf,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvG,MAAM,eAAe,GACnB,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEtH,MAAM,SAAS,GAAc;YAC3B,EAAE,EAAE,UAAU,EAAE;YAChB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU;YACV,OAAO,EAAE,CAAC,OAAO;YACjB,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAChE,eAAe;YACf,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,WAAW;YACX,MAAM,EAAE,OAAO;SAChB,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC;IAEO,WAAW,CAAC,KAAiB;QACnC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;;OAOG;IACK,qBAAqB,CAAC,QAAgB,EAAE,GAAW;QACzD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5D,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,KAAK,GAAG,IAAI,CAAC,uBAAuB,KAAK,CAAC;YAAE,OAAO;QAEvD,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC;QACxC,wEAAwE;QACxE,oEAAoE;QACpE,WAAW;QACX,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;YACnD,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC/B,QAAQ;YACR,KAAK,EAAE,UAAU,GAAG,CAAC;SACtB,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,GAAG,UAAU,GAAG,CAAC;YAAE,OAAO;QAE/C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QAE9D,MAAM,UAAU,GAAG,sBAAsB,CAAC;YACxC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC/B,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,UAAU;YAAE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,YAAY,GAAG,kBAAkB,CAAC;YACtC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC/B,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,YAAY;YAAE,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC;IAEO,qBAAqB,CAAC,MAAuB;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAE5C,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAE9E,MAAM,KAAK,GAAG,iBAAiB,CAAC;gBAC9B,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,mBAAmB,EAAE,QAAQ,EAAE,iBAAiB;gBAChD,kBAAkB,EAAE,WAAW;gBAC/B,GAAG;aACJ,CAAC,CAAC;YACH,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;YAED,MAAM,UAAU,GAAS;gBACvB,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,UAAU,EAAE;gBAChC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,iBAAiB,EAAE,WAAW;gBAC9B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,GAAG;gBACzC,UAAU,EAAE,GAAG;aAChB,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;CACF"}

package/dist/transport-factory.d.ts

@@ -1,11 +0,0 @@
-import type { Transport } from "@modelcontextprotocol/sdk/shared/transport.js";
-import type { TransportConfig } from "@mattral/core";
-/**
- * Builds the appropriate official SDK client transport for a server's
- * configured transport, used by {@link HealthChecker}. The stdio proxy
- * collector does *not* use this — it talks to the child process directly
- * (see docs/architecture.md#transport-adapters for why the two collection
- * modes have different transport-handling needs).
- */
-export declare function createClientTransport(config: TransportConfig): Transport;
-//# sourceMappingURL=transport-factory.d.ts.map

package/dist/transport-factory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"transport-factory.d.ts","sourceRoot":"","sources":["../src/transport-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAI/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CAsBxE"}

package/dist/transport-factory.js

@@ -1,34 +0,0 @@
-import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
-import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
-import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
-/**
- * Builds the appropriate official SDK client transport for a server's
- * configured transport, used by {@link HealthChecker}. The stdio proxy
- * collector does *not* use this — it talks to the child process directly
- * (see docs/architecture.md#transport-adapters for why the two collection
- * modes have different transport-handling needs).
- */
-export function createClientTransport(config) {
-    switch (config.type) {
-        case "stdio":
-            return new StdioClientTransport({
-                command: config.command,
-                args: config.args,
-                env: config.env,
-                cwd: config.cwd
-            });
-        case "sse":
-            return new SSEClientTransport(new URL(config.url), {
-                requestInit: config.headers ? { headers: config.headers } : undefined
-            });
-        case "http":
-            return new StreamableHTTPClientTransport(new URL(config.url), {
-                requestInit: config.headers ? { headers: config.headers } : undefined
-            });
-        default: {
-            const exhaustiveCheck = config;
-            throw new Error(`Unsupported transport config: ${JSON.stringify(exhaustiveCheck)}`);
-        }
-    }
-}
-//# sourceMappingURL=transport-factory.js.map

package/dist/transport-factory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"transport-factory.js","sourceRoot":"","sources":["../src/transport-factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAGnG;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAuB;IAC3D,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,OAAO;YACV,OAAO,IAAI,oBAAoB,CAAC;gBAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,EAAE,MAAM,CAAC,GAAG;aAChB,CAAC,CAAC;QACL,KAAK,KAAK;YACR,OAAO,IAAI,kBAAkB,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBACjD,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;aACtE,CAAC,CAAC;QACL,KAAK,MAAM;YACT,OAAO,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBAC5D,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;aACtE,CAAC,CAAC;QACL,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,eAAe,GAAU,MAAM,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;AACH,CAAC"}