@mgsoftwarebv/mg-dashboard-mcp 1.0.0

package/dist/index.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/index.js

@@ -0,0 +1,784 @@
+#!/usr/bin/env node
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { ListToolsRequestSchema, CallToolRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+import { createClient } from '@supabase/supabase-js';
+import { createHash, randomBytes, createCipheriv, createDecipheriv } from 'crypto';
+import { Client } from 'ssh2';
+
+var args = process.argv.slice(2);
+function getArg(name) {
+  return args.find((a) => a.startsWith(`--${name}=`))?.split("=").slice(1).join("=");
+}
+var apiKey = getArg("api-key") || process.env.MG_DASHBOARD_API_KEY;
+var supabaseUrl = getArg("supabase-url") || process.env.SUPABASE_URL;
+var supabaseKey = getArg("supabase-key") || process.env.SUPABASE_SERVICE_ROLE_KEY;
+var encryptionKey = getArg("encryption-key") || process.env.ENCRYPTION_KEY;
+if (!apiKey) {
+  console.error("API key is required. Use --api-key=dk_xxx or set MG_DASHBOARD_API_KEY");
+  process.exit(1);
+}
+if (!supabaseUrl || !supabaseKey) {
+  console.error("Supabase credentials required. Use --supabase-url and --supabase-key or set SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY");
+  process.exit(1);
+}
+var supabase = createClient(supabaseUrl, supabaseKey);
+var authContext = null;
+async function validateApiKey(key) {
+  if (!key.startsWith("dk_") || key.length !== 67) {
+    console.error("Invalid API key format (expected dk_ + 64 hex chars)");
+    return null;
+  }
+  const keyHash = createHash("sha256").update(key).digest("hex");
+  const { data, error } = await supabase.from("dashboard_mcp_api_key").select("id, created_by, allowed_server_ids, is_active, expires_at").eq("api_key_hash", keyHash).eq("is_active", true).single();
+  if (error || !data) {
+    console.error("API key not found or inactive");
+    return null;
+  }
+  if (data.expires_at && new Date(data.expires_at) < /* @__PURE__ */ new Date()) {
+    console.error("API key has expired");
+    return null;
+  }
+  await supabase.from("dashboard_mcp_api_key").update({ last_used_at: (/* @__PURE__ */ new Date()).toISOString() }).eq("id", data.id);
+  console.error(`Authenticated as user ${data.created_by}`);
+  return {
+    userId: data.created_by,
+    allowedServerIds: data.allowed_server_ids
+  };
+}
+function assertServerAccess(serverId) {
+  if (!authContext) throw new Error("Not authenticated");
+  if (authContext.allowedServerIds === null) return;
+  if (!authContext.allowedServerIds.includes(serverId)) {
+    throw new Error(`Access denied: you do not have permission for server ${serverId}`);
+  }
+}
+var ENC_ALGORITHM = "aes-256-gcm";
+var ENC_IV_LENGTH = 16;
+var ENC_TAG_LENGTH = 16;
+function getEncryptionKey() {
+  if (!encryptionKey) throw new Error("ENCRYPTION_KEY is required for env operations");
+  const buf = Buffer.from(encryptionKey, "hex");
+  if (buf.length !== 32) throw new Error("ENCRYPTION_KEY must be a 64-character hex string");
+  return buf;
+}
+function encrypt(text) {
+  const key = getEncryptionKey();
+  const iv = randomBytes(ENC_IV_LENGTH);
+  const cipher = createCipheriv(ENC_ALGORITHM, new Uint8Array(key), new Uint8Array(iv));
+  let encrypted = cipher.update(text, "utf8", "hex");
+  encrypted += cipher.final("hex");
+  const authTag = cipher.getAuthTag();
+  return Buffer.concat([
+    new Uint8Array(iv),
+    new Uint8Array(authTag),
+    new Uint8Array(Buffer.from(encrypted, "hex"))
+  ]).toString("base64");
+}
+function decrypt(payload) {
+  const key = getEncryptionKey();
+  const buf = Buffer.from(payload, "base64");
+  const iv = buf.subarray(0, ENC_IV_LENGTH);
+  const authTag = buf.subarray(ENC_IV_LENGTH, ENC_IV_LENGTH + ENC_TAG_LENGTH);
+  const encrypted = buf.subarray(ENC_IV_LENGTH + ENC_TAG_LENGTH);
+  const decipher = createDecipheriv(ENC_ALGORITHM, new Uint8Array(key), new Uint8Array(iv));
+  decipher.setAuthTag(new Uint8Array(authTag));
+  let decrypted = decipher.update(encrypted.toString("hex"), "hex", "utf8");
+  decrypted += decipher.final("utf8");
+  return decrypted;
+}
+async function getServerConnection(serverId) {
+  assertServerAccess(serverId);
+  const { data, error } = await supabase.from("ssh_server").select("hostname, port, username, password_encrypted, ssh_key_encrypted, ssh_key_passphrase_encrypted").eq("id", serverId).single();
+  if (error || !data) throw new Error(`Server not found: ${serverId}`);
+  if (!encryptionKey) throw new Error("ENCRYPTION_KEY required to decrypt server credentials");
+  return {
+    hostname: data.hostname,
+    port: data.port || 22,
+    username: data.username,
+    password: data.password_encrypted ? decrypt(data.password_encrypted) : void 0,
+    privateKey: data.ssh_key_encrypted ? decrypt(data.ssh_key_encrypted) : void 0,
+    passphrase: data.ssh_key_passphrase_encrypted ? decrypt(data.ssh_key_passphrase_encrypted) : void 0
+  };
+}
+async function sshExec(opts, command) {
+  return new Promise((resolve) => {
+    const ssh = new Client();
+    let stdout = "";
+    let stderr = "";
+    let done = false;
+    const timeout = opts.timeout || 6e4;
+    const timer = setTimeout(() => {
+      if (!done) {
+        done = true;
+        ssh.end();
+        resolve({ stdout, stderr, exitCode: -1 });
+      }
+    }, timeout);
+    ssh.on("ready", () => {
+      ssh.exec(command, (err, stream) => {
+        if (err) {
+          if (!done) {
+            done = true;
+            clearTimeout(timer);
+            ssh.end();
+            resolve({ stdout, stderr, exitCode: -1 });
+          }
+          return;
+        }
+        stream.on("data", (d) => {
+          stdout += d.toString();
+        });
+        stream.stderr.on("data", (d) => {
+          stderr += d.toString();
+        });
+        stream.on("close", (code) => {
+          if (!done) {
+            done = true;
+            clearTimeout(timer);
+            ssh.end();
+            resolve({ stdout, stderr, exitCode: code ?? 0 });
+          }
+        });
+      });
+    });
+    ssh.on("error", (err) => {
+      if (!done) {
+        done = true;
+        clearTimeout(timer);
+        resolve({ stdout, stderr: err.message, exitCode: -1 });
+      }
+    });
+    ssh.connect({
+      host: opts.hostname,
+      port: opts.port,
+      username: opts.username,
+      password: opts.password,
+      privateKey: opts.privateKey,
+      passphrase: opts.passphrase,
+      readyTimeout: timeout
+    });
+  });
+}
+function sanitizePath(path) {
+  let normalized = path.replace(/\\/g, "/").replace(/\0/g, "");
+  const parts = normalized.split("/");
+  const resolved = [];
+  for (const part of parts) {
+    if (part === "..") {
+      if (resolved.length > 0 && resolved[resolved.length - 1] !== "") resolved.pop();
+    } else if (part !== "." && part !== "") resolved.push(part);
+  }
+  return "/" + resolved.join("/");
+}
+var PROTECTED_PATHS = ["/etc/", "/boot/", "/usr/", "/bin/", "/sbin/", "/lib/", "/lib64/"];
+function assertWritablePath(path) {
+  const safe = sanitizePath(path);
+  for (const p of PROTECTED_PATHS) {
+    if (safe === p.slice(0, -1) || safe.startsWith(p)) {
+      throw new Error(`Write access denied to protected path: ${safe}`);
+    }
+  }
+}
+async function sftpReaddir(opts, dirPath) {
+  const safe = sanitizePath(dirPath);
+  return new Promise((resolve) => {
+    const ssh = new Client();
+    let done = false;
+    const timer = setTimeout(() => {
+      if (!done) {
+        done = true;
+        ssh.end();
+        resolve("Error: timeout");
+      }
+    }, 3e4);
+    ssh.on("ready", () => {
+      ssh.sftp((err, sftp) => {
+        if (err) {
+          if (!done) {
+            done = true;
+            clearTimeout(timer);
+            ssh.end();
+            resolve(`Error: ${err.message}`);
+          }
+          return;
+        }
+        sftp.readdir(safe, (err2, list) => {
+          done = true;
+          clearTimeout(timer);
+          if (err2) {
+            ssh.end();
+            resolve(`Error: ${err2.message}`);
+            return;
+          }
+          const entries = list.map((item) => {
+            const mode = item.attrs.mode || 0;
+            const isDir = (mode & 61440) === 16384;
+            const size = item.attrs.size || 0;
+            const mtime = item.attrs.mtime ? new Date(item.attrs.mtime * 1e3).toISOString() : "";
+            return `${isDir ? "d" : "-"} ${String(size).padStart(10)} ${mtime} ${item.filename}`;
+          });
+          ssh.end();
+          resolve(entries.join("\n"));
+        });
+      });
+    });
+    ssh.on("error", (e) => {
+      if (!done) {
+        done = true;
+        clearTimeout(timer);
+        resolve(`Error: ${e.message}`);
+      }
+    });
+    ssh.connect({ host: opts.hostname, port: opts.port, username: opts.username, password: opts.password, privateKey: opts.privateKey, passphrase: opts.passphrase, readyTimeout: 3e4 });
+  });
+}
+async function sftpRead(opts, filePath) {
+  const safe = sanitizePath(filePath);
+  return new Promise((resolve) => {
+    const ssh = new Client();
+    let done = false;
+    const timer = setTimeout(() => {
+      if (!done) {
+        done = true;
+        ssh.end();
+        resolve("Error: timeout");
+      }
+    }, 6e4);
+    ssh.on("ready", () => {
+      ssh.sftp((err, sftp) => {
+        if (err) {
+          if (!done) {
+            done = true;
+            clearTimeout(timer);
+            ssh.end();
+            resolve(`Error: ${err.message}`);
+          }
+          return;
+        }
+        sftp.stat(safe, (err2, stats) => {
+          if (err2) {
+            if (!done) {
+              done = true;
+              clearTimeout(timer);
+              ssh.end();
+              resolve(`Error: ${err2.message}`);
+            }
+            return;
+          }
+          if ((stats.size || 0) > 1048576) {
+            if (!done) {
+              done = true;
+              clearTimeout(timer);
+              ssh.end();
+              resolve(`Error: file too large (${stats.size} bytes, max 1MB)`);
+            }
+            return;
+          }
+          const chunks = [];
+          const rs = sftp.createReadStream(safe);
+          rs.on("data", (c) => chunks.push(c));
+          rs.on("end", () => {
+            if (!done) {
+              done = true;
+              clearTimeout(timer);
+              ssh.end();
+              resolve(Buffer.concat(chunks.map((c) => new Uint8Array(c))).toString("utf-8"));
+            }
+          });
+          rs.on("error", (e) => {
+            if (!done) {
+              done = true;
+              clearTimeout(timer);
+              ssh.end();
+              resolve(`Error: ${e.message}`);
+            }
+          });
+        });
+      });
+    });
+    ssh.on("error", (e) => {
+      if (!done) {
+        done = true;
+        clearTimeout(timer);
+        resolve(`Error: ${e.message}`);
+      }
+    });
+    ssh.connect({ host: opts.hostname, port: opts.port, username: opts.username, password: opts.password, privateKey: opts.privateKey, passphrase: opts.passphrase, readyTimeout: 6e4 });
+  });
+}
+async function sftpWrite(opts, filePath, content) {
+  const safe = sanitizePath(filePath);
+  assertWritablePath(safe);
+  return new Promise((resolve) => {
+    const ssh = new Client();
+    let done = false;
+    const timer = setTimeout(() => {
+      if (!done) {
+        done = true;
+        ssh.end();
+        resolve("Error: timeout");
+      }
+    }, 6e4);
+    ssh.on("ready", () => {
+      ssh.sftp((err, sftp) => {
+        if (err) {
+          if (!done) {
+            done = true;
+            clearTimeout(timer);
+            ssh.end();
+            resolve(`Error: ${err.message}`);
+          }
+          return;
+        }
+        const ws = sftp.createWriteStream(safe, { mode: 420 });
+        ws.on("close", () => {
+          if (!done) {
+            done = true;
+            clearTimeout(timer);
+            ssh.end();
+            resolve(`Written ${content.length} bytes to ${safe}`);
+          }
+        });
+        ws.on("error", (e) => {
+          if (!done) {
+            done = true;
+            clearTimeout(timer);
+            ssh.end();
+            resolve(`Error: ${e.message}`);
+          }
+        });
+        ws.end(Buffer.from(content, "utf-8"));
+      });
+    });
+    ssh.on("error", (e) => {
+      if (!done) {
+        done = true;
+        clearTimeout(timer);
+        resolve(`Error: ${e.message}`);
+      }
+    });
+    ssh.connect({ host: opts.hostname, port: opts.port, username: opts.username, password: opts.password, privateKey: opts.privateKey, passphrase: opts.passphrase, readyTimeout: 6e4 });
+  });
+}
+async function sftpDelete(opts, filePath) {
+  const safe = sanitizePath(filePath);
+  assertWritablePath(safe);
+  return new Promise((resolve) => {
+    const ssh = new Client();
+    let done = false;
+    const timer = setTimeout(() => {
+      if (!done) {
+        done = true;
+        ssh.end();
+        resolve("Error: timeout");
+      }
+    }, 3e4);
+    ssh.on("ready", () => {
+      ssh.sftp((err, sftp) => {
+        if (err) {
+          if (!done) {
+            done = true;
+            clearTimeout(timer);
+            ssh.end();
+            resolve(`Error: ${err.message}`);
+          }
+          return;
+        }
+        sftp.unlink(safe, (err2) => {
+          if (err2) {
+            sftp.rmdir(safe, (err22) => {
+              done = true;
+              clearTimeout(timer);
+              ssh.end();
+              resolve(err22 ? `Error: ${err2.message}` : `Deleted directory ${safe}`);
+            });
+          } else {
+            done = true;
+            clearTimeout(timer);
+            ssh.end();
+            resolve(`Deleted file ${safe}`);
+          }
+        });
+      });
+    });
+    ssh.on("error", (e) => {
+      if (!done) {
+        done = true;
+        clearTimeout(timer);
+        resolve(`Error: ${e.message}`);
+      }
+    });
+    ssh.connect({ host: opts.hostname, port: opts.port, username: opts.username, password: opts.password, privateKey: opts.privateKey, passphrase: opts.passphrase, readyTimeout: 3e4 });
+  });
+}
+var BLOCKED_COMMANDS = [
+  "rm -rf /",
+  "rm -fr /",
+  "mkfs",
+  "dd if=",
+  ":(){ :|:& };:",
+  "shutdown",
+  "halt",
+  "init 0",
+  "init 6",
+  "> /dev/sda",
+  "mv /* /dev/null",
+  "chmod -R 000 /"
+];
+function assertSafeCommand(command) {
+  const lower = command.toLowerCase().trim();
+  for (const blocked of BLOCKED_COMMANDS) {
+    if (lower.includes(blocked)) {
+      throw new Error(`Blocked dangerous command pattern: "${blocked}"`);
+    }
+  }
+}
+var TOOLS = [
+  {
+    name: "list-servers",
+    description: "List all SSH servers you have access to. Returns id, name, hostname, and tags for each server.",
+    inputSchema: { type: "object", properties: {}, required: [] }
+  },
+  {
+    name: "server-status",
+    description: "Get server status including uptime, disk usage, memory, and load average.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        serverId: { type: "string", description: "UUID of the SSH server" }
+      },
+      required: ["serverId"]
+    }
+  },
+  {
+    name: "ssh-execute",
+    description: "Execute a shell command on a remote server via SSH. Some dangerous commands are blocked for safety.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        serverId: { type: "string", description: "UUID of the SSH server" },
+        command: { type: "string", description: "Shell command to execute" },
+        timeout: { type: "number", description: "Timeout in milliseconds (default: 60000)" }
+      },
+      required: ["serverId", "command"]
+    }
+  },
+  {
+    name: "server-reboot",
+    description: "Reboot a remote server. This will cause downtime. The server will be unavailable until it restarts.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        serverId: { type: "string", description: "UUID of the SSH server to reboot" }
+      },
+      required: ["serverId"]
+    }
+  },
+  {
+    name: "server-restart-service",
+    description: "Restart a systemd service on a remote server using systemctl restart.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        serverId: { type: "string", description: "UUID of the SSH server" },
+        serviceName: { type: "string", description: "Name of the systemd service (e.g. nginx, docker, lsws)" }
+      },
+      required: ["serverId", "serviceName"]
+    }
+  },
+  {
+    name: "sftp-list",
+    description: "List files and directories at a given path on a remote server via SFTP.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        serverId: { type: "string", description: "UUID of the SSH server" },
+        path: { type: "string", description: "Directory path to list (default: /)" }
+      },
+      required: ["serverId"]
+    }
+  },
+  {
+    name: "sftp-read",
+    description: "Read the contents of a text file on a remote server via SFTP (max 1MB).",
+    inputSchema: {
+      type: "object",
+      properties: {
+        serverId: { type: "string", description: "UUID of the SSH server" },
+        path: { type: "string", description: "File path to read" }
+      },
+      required: ["serverId", "path"]
+    }
+  },
+  {
+    name: "sftp-write",
+    description: "Write content to a file on a remote server via SFTP. Protected system paths are blocked.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        serverId: { type: "string", description: "UUID of the SSH server" },
+        path: { type: "string", description: "File path to write" },
+        content: { type: "string", description: "File content to write" }
+      },
+      required: ["serverId", "path", "content"]
+    }
+  },
+  {
+    name: "sftp-delete",
+    description: "Delete a file or empty directory on a remote server via SFTP. Protected system paths are blocked.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        serverId: { type: "string", description: "UUID of the SSH server" },
+        path: { type: "string", description: "File or directory path to delete" }
+      },
+      required: ["serverId", "path"]
+    }
+  },
+  {
+    name: "docker-list",
+    description: "List all Docker containers on a remote server (running and stopped).",
+    inputSchema: {
+      type: "object",
+      properties: {
+        serverId: { type: "string", description: "UUID of the SSH server" }
+      },
+      required: ["serverId"]
+    }
+  },
+  {
+    name: "docker-action",
+    description: "Perform an action on a Docker container: start, stop, restart, or remove.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        serverId: { type: "string", description: "UUID of the SSH server" },
+        containerName: { type: "string", description: "Container name or ID" },
+        action: { type: "string", enum: ["start", "stop", "restart", "remove"], description: "Action to perform" }
+      },
+      required: ["serverId", "containerName", "action"]
+    }
+  },
+  {
+    name: "docker-logs",
+    description: "Get recent logs from a Docker container.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        serverId: { type: "string", description: "UUID of the SSH server" },
+        containerName: { type: "string", description: "Container name or ID" },
+        lines: { type: "number", description: "Number of log lines to retrieve (default: 100)" }
+      },
+      required: ["serverId", "containerName"]
+    }
+  },
+  {
+    name: "env-list",
+    description: "List all stored environment configurations (app name, environment, description).",
+    inputSchema: { type: "object", properties: {}, required: [] }
+  },
+  {
+    name: "env-get",
+    description: "Retrieve the decrypted .env content for a specific app and environment.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        appName: { type: "string", description: "Application name (e.g. backoffice, api, web)" },
+        environment: { type: "string", description: "Environment name (e.g. production, staging, development)" }
+      },
+      required: ["appName", "environment"]
+    }
+  },
+  {
+    name: "env-store",
+    description: "Store or update an encrypted .env configuration for an app and environment.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        appName: { type: "string", description: "Application name (e.g. backoffice, api, web)" },
+        environment: { type: "string", description: "Environment name (e.g. production, staging, development)" },
+        content: { type: "string", description: "The .env file content to store" },
+        description: { type: "string", description: "Optional description" }
+      },
+      required: ["appName", "environment", "content"]
+    }
+  }
+];
+var server = new Server(
+  { name: "mg-dashboard-mcp", version: "1.0.0" },
+  { capabilities: { tools: {} } }
+);
+server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+  if (!authContext) {
+    return { content: [{ type: "text", text: "Error: not authenticated" }] };
+  }
+  const { name, arguments: toolArgs } = request.params;
+  const a = toolArgs || {};
+  try {
+    switch (name) {
+      // ----- Servers -----
+      case "list-servers": {
+        let query = supabase.from("ssh_server").select("id, name, hostname, port, username, tags, hosted_by, created_at").order("name");
+        if (authContext.allowedServerIds !== null) {
+          query = query.in("id", authContext.allowedServerIds);
+        }
+        const { data, error } = await query;
+        if (error) throw new Error(error.message);
+        const lines = (data || []).map((s) => {
+          const tags = Array.isArray(s.tags) ? s.tags.join(", ") : "";
+          return `${s.id}  ${s.name}  ${s.hostname}:${s.port}  ${s.username}  [${tags}]  ${s.hosted_by || ""}`;
+        });
+        return { content: [{ type: "text", text: lines.length ? lines.join("\n") : "No servers found" }] };
+      }
+      case "server-status": {
+        const conn = await getServerConnection(String(a.serverId));
+        const cmd = 'echo "=== UPTIME ===" && uptime && echo "=== DISK ===" && df -h --total && echo "=== MEMORY ===" && free -h && echo "=== LOAD ===" && cat /proc/loadavg';
+        const result = await sshExec(conn, cmd);
+        const output = result.exitCode === 0 ? result.stdout : `Exit ${result.exitCode}
+${result.stdout}
+${result.stderr}`;
+        return { content: [{ type: "text", text: output }] };
+      }
+      // ----- SSH -----
+      case "ssh-execute": {
+        const command = String(a.command);
+        assertSafeCommand(command);
+        const conn = await getServerConnection(String(a.serverId));
+        if (a.timeout) conn.timeout = Number(a.timeout);
+        const result = await sshExec(conn, command);
+        const output = [`Exit code: ${result.exitCode}`];
+        if (result.stdout) output.push(`--- stdout ---
+${result.stdout}`);
+        if (result.stderr) output.push(`--- stderr ---
+${result.stderr}`);
+        return { content: [{ type: "text", text: output.join("\n") }] };
+      }
+      case "server-reboot": {
+        const conn = await getServerConnection(String(a.serverId));
+        const result = await sshExec(conn, "sudo reboot");
+        return { content: [{ type: "text", text: result.exitCode === 0 ? "Reboot command sent. Server will be unavailable shortly." : `Reboot failed: ${result.stderr}` }] };
+      }
+      case "server-restart-service": {
+        const service = String(a.serviceName).replace(/[^a-zA-Z0-9._@-]/g, "");
+        const conn = await getServerConnection(String(a.serverId));
+        const result = await sshExec(conn, `sudo systemctl restart ${service}`);
+        if (result.exitCode === 0) {
+          const status = await sshExec(conn, `sudo systemctl is-active ${service}`);
+          return { content: [{ type: "text", text: `Service "${service}" restarted. Status: ${status.stdout.trim()}` }] };
+        }
+        return { content: [{ type: "text", text: `Failed to restart "${service}": ${result.stderr}` }] };
+      }
+      // ----- SFTP -----
+      case "sftp-list": {
+        const conn = await getServerConnection(String(a.serverId));
+        const listing = await sftpReaddir(conn, String(a.path || "/"));
+        return { content: [{ type: "text", text: listing }] };
+      }
+      case "sftp-read": {
+        const conn = await getServerConnection(String(a.serverId));
+        const content = await sftpRead(conn, String(a.path));
+        return { content: [{ type: "text", text: content }] };
+      }
+      case "sftp-write": {
+        const conn = await getServerConnection(String(a.serverId));
+        const result = await sftpWrite(conn, String(a.path), String(a.content));
+        return { content: [{ type: "text", text: result }] };
+      }
+      case "sftp-delete": {
+        const conn = await getServerConnection(String(a.serverId));
+        const result = await sftpDelete(conn, String(a.path));
+        return { content: [{ type: "text", text: result }] };
+      }
+      // ----- Docker -----
+      case "docker-list": {
+        const conn = await getServerConnection(String(a.serverId));
+        const result = await sshExec(conn, 'docker ps -a --format "table {{.Names}}	{{.Image}}	{{.Status}}	{{.Ports}}"');
+        return { content: [{ type: "text", text: result.exitCode === 0 ? result.stdout : `Error: ${result.stderr}` }] };
+      }
+      case "docker-action": {
+        const container = String(a.containerName).replace(/[^a-zA-Z0-9._-]/g, "");
+        const action = String(a.action);
+        if (!["start", "stop", "restart", "remove"].includes(action)) {
+          throw new Error(`Invalid action: ${action}. Use start, stop, restart, or remove.`);
+        }
+        const conn = await getServerConnection(String(a.serverId));
+        const dockerCmd = action === "remove" ? `docker rm -f ${container}` : `docker ${action} ${container}`;
+        const result = await sshExec(conn, dockerCmd);
+        return { content: [{ type: "text", text: result.exitCode === 0 ? `Container "${container}" ${action}ed successfully` : `Error: ${result.stderr}` }] };
+      }
+      case "docker-logs": {
+        const container = String(a.containerName).replace(/[^a-zA-Z0-9._-]/g, "");
+        const lines = Number(a.lines) || 100;
+        const conn = await getServerConnection(String(a.serverId));
+        const result = await sshExec(conn, `docker logs --tail ${lines} ${container} 2>&1`);
+        return { content: [{ type: "text", text: result.exitCode === 0 ? result.stdout : `Error: ${result.stderr}` }] };
+      }
+      // ----- Env Config -----
+      case "env-list": {
+        const { data, error } = await supabase.from("env_config").select("id, app_name, environment, description, updated_at").order("app_name").order("environment");
+        if (error) throw new Error(error.message);
+        const lines = (data || []).map(
+          (e) => `${e.app_name}/${e.environment}  ${e.description || ""}  (updated: ${e.updated_at})`
+        );
+        return { content: [{ type: "text", text: lines.length ? lines.join("\n") : "No environment configs stored" }] };
+      }
+      case "env-get": {
+        const { data, error } = await supabase.from("env_config").select("env_data_encrypted").eq("app_name", String(a.appName)).eq("environment", String(a.environment)).single();
+        if (error || !data) throw new Error(`Env config not found: ${a.appName}/${a.environment}`);
+        const decrypted = decrypt(data.env_data_encrypted);
+        return { content: [{ type: "text", text: decrypted }] };
+      }
+      case "env-store": {
+        const appName = String(a.appName);
+        const environment = String(a.environment);
+        const encrypted = encrypt(String(a.content));
+        const { data: existing } = await supabase.from("env_config").select("id").eq("app_name", appName).eq("environment", environment).single();
+        if (existing) {
+          const { error: error2 } = await supabase.from("env_config").update({
+            env_data_encrypted: encrypted,
+            description: a.description ? String(a.description) : void 0,
+            updated_by: authContext.userId,
+            updated_at: (/* @__PURE__ */ new Date()).toISOString()
+          }).eq("id", existing.id);
+          if (error2) throw new Error(error2.message);
+          return { content: [{ type: "text", text: `Updated env config: ${appName}/${environment}` }] };
+        }
+        const { error } = await supabase.from("env_config").insert({
+          app_name: appName,
+          environment,
+          env_data_encrypted: encrypted,
+          description: a.description ? String(a.description) : null,
+          created_by: authContext.userId,
+          updated_by: authContext.userId
+        });
+        if (error) throw new Error(error.message);
+        return { content: [{ type: "text", text: `Stored env config: ${appName}/${environment}` }] };
+      }
+      default:
+        return { content: [{ type: "text", text: `Unknown tool: ${name}` }] };
+    }
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    return { content: [{ type: "text", text: `Error: ${message}` }] };
+  }
+});
+async function main() {
+  console.error("Starting MG Dashboard MCP Server...");
+  authContext = await validateApiKey(apiKey);
+  if (!authContext) {
+    console.error("API key validation failed");
+    process.exit(1);
+  }
+  console.error("API key validated. Starting stdio transport...");
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+  console.error("MCP Server ready. Tools available: " + TOOLS.map((t) => t.name).join(", "));
+}
+main().catch((err) => {
+  console.error("Fatal error:", err);
+  process.exit(1);
+});
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":["SshClient","err","err2","error"],"mappings":";;;;;;;;AAaA,IAAM,IAAA,GAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AAEjC,SAAS,OAAO,IAAA,EAAkC;AAChD,EAAA,OAAO,KAAK,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,UAAA,CAAW,KAAK,IAAI,CAAA,CAAA,CAAG,CAAC,CAAA,EAAG,MAAM,GAAG,CAAA,CAAE,MAAM,CAAC,CAAA,CAAE,KAAK,GAAG,CAAA;AACjF;AAEA,IAAM,MAAA,GAAS,MAAA,CAAO,SAAS,CAAA,IAAK,QAAQ,GAAA,CAAI,oBAAA;AAChD,IAAM,WAAA,GAAc,MAAA,CAAO,cAAc,CAAA,IAAK,QAAQ,GAAA,CAAI,YAAA;AAC1D,IAAM,WAAA,GAAc,MAAA,CAAO,cAAc,CAAA,IAAK,QAAQ,GAAA,CAAI,yBAAA;AAC1D,IAAM,aAAA,GAAgB,MAAA,CAAO,gBAAgB,CAAA,IAAK,QAAQ,GAAA,CAAI,cAAA;AAE9D,IAAI,CAAC,MAAA,EAAQ;AACX,EAAA,OAAA,CAAQ,MAAM,uEAAuE,CAAA;AACrF,EAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAChB;AAEA,IAAI,CAAC,WAAA,IAAe,CAAC,WAAA,EAAa;AAChC,EAAA,OAAA,CAAQ,MAAM,wHAAwH,CAAA;AACtI,EAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAChB;AAEA,IAAM,QAAA,GAAW,YAAA,CAAa,WAAA,EAAa,WAAW,CAAA;AAWtD,IAAI,WAAA,GAAkC,IAAA;AAEtC,eAAe,eAAe,GAAA,EAA0C;AACtE,EAAA,IAAI,CAAC,GAAA,CAAI,UAAA,CAAW,KAAK,CAAA,IAAK,GAAA,CAAI,WAAW,EAAA,EAAI;AAC/C,IAAA,OAAA,CAAQ,MAAM,sDAAsD,CAAA;AACpE,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,OAAA,GAAU,WAAW,QAAQ,CAAA,CAAE,OAAO,GAAG,CAAA,CAAE,OAAO,KAAK,CAAA;AAE7D,EAAA,MAAM,EAAE,MAAM,KAAA,EAAM,GAAI,MAAM,QAAA,CAC3B,IAAA,CAAK,uBAAuB,CAAA,CAC5B,MAAA,CAAO,2DAA2D,CAAA,CAClE,EAAA,CAAG,gBAAgB,OAAO,CAAA,CAC1B,GAAG,WAAA,EAAa,IAAI,EACpB,MAAA,EAAO;AAEV,EAAA,IAAI,KAAA,IAAS,CAAC,IAAA,EAAM;AAClB,IAAA,OAAA,CAAQ,MAAM,+BAA+B,CAAA;AAC7C,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,IAAA,CAAK,cAAc,IAAI,IAAA,CAAK,KAAK,UAAU,CAAA,mBAAI,IAAI,IAAA,EAAK,EAAG;AAC7D,IAAA,OAAA,CAAQ,MAAM,qBAAqB,CAAA;AACnC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,SACH,IAAA,CAAK,uBAAuB,CAAA,CAC5B,MAAA,CAAO,EAAE,YAAA,EAAA,iBAAc,IAAI,IAAA,EAAK,EAAE,aAAY,EAAG,EACjD,EAAA,CAAG,IAAA,EAAM,KAAK,EAAE,CAAA;AAEnB,EAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,sBAAA,EAAyB,IAAA,CAAK,UAAU,CAAA,CAAE,CAAA;AAExD,EAAA,OAAO;AAAA,IACL,QAAQ,IAAA,CAAK,UAAA;AAAA,IACb,kBAAkB,IAAA,CAAK;AAAA,GACzB;AACF;AAMA,SAAS,mBAAmB,QAAA,EAAwB;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa,MAAM,IAAI,MAAM,mBAAmB,CAAA;AACrD,EAAA,IAAI,WAAA,CAAY,qBAAqB,IAAA,EAAM;AAC3C,EAAA,IAAI,CAAC,WAAA,CAAY,gBAAA,CAAiB,QAAA,CAAS,QAAQ,CAAA,EAAG;AACpD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,qDAAA,EAAwD,QAAQ,CAAA,CAAE,CAAA;AAAA,EACpF;AACF;AAMA,IAAM,aAAA,GAAgB,aAAA;AACtB,IAAM,aAAA,GAAgB,EAAA;AACtB,IAAM,cAAA,GAAiB,EAAA;AAEvB,SAAS,gBAAA,GAA2B;AAClC,EAAA,IAAI,CAAC,aAAA,EAAe,MAAM,IAAI,MAAM,+CAA+C,CAAA;AACnF,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,IAAA,CAAK,aAAA,EAAe,KAAK,CAAA;AAC5C,EAAA,IAAI,IAAI,MAAA,KAAW,EAAA,EAAI,MAAM,IAAI,MAAM,kDAAkD,CAAA;AACzF,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,QAAQ,IAAA,EAAsB;AACrC,EAAA,MAAM,MAAM,gBAAA,EAAiB;AAC7B,EAAA,MAAM,EAAA,GAAK,YAAY,aAAa,CAAA;AACpC,EAAA,MAAM,MAAA,GAAS,cAAA,CAAe,aAAA,EAAe,IAAI,UAAA,CAAW,GAAG,CAAA,EAAG,IAAI,UAAA,CAAW,EAAE,CAAC,CAAA;AACpF,EAAA,IAAI,SAAA,GAAY,MAAA,CAAO,MAAA,CAAO,IAAA,EAAM,QAAQ,KAAK,CAAA;AACjD,EAAA,SAAA,IAAa,MAAA,CAAO,MAAM,KAAK,CAAA;AAC/B,EAAA,MAAM,OAAA,GAAU,OAAO,UAAA,EAAW;AAClC,EAAA,OAAO,OAAO,MAAA,CAAO;AAAA,IACnB,IAAI,WAAW,EAAE,CAAA;AAAA,IACjB,IAAI,WAAW,OAAO,CAAA;AAAA,IACtB,IAAI,UAAA,CAAW,MAAA,CAAO,IAAA,CAAK,SAAA,EAAW,KAAK,CAAC;AAAA,GAC7C,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA;AACtB;AAEA,SAAS,QAAQ,OAAA,EAAyB;AACxC,EAAA,MAAM,MAAM,gBAAA,EAAiB;AAC7B,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,IAAA,CAAK,OAAA,EAAS,QAAQ,CAAA;AACzC,EAAA,MAAM,EAAA,GAAK,GAAA,CAAI,QAAA,CAAS,CAAA,EAAG,aAAa,CAAA;AACxC,EAAA,MAAM,OAAA,GAAU,GAAA,CAAI,QAAA,CAAS,aAAA,EAAe,gBAAgB,cAAc,CAAA;AAC1E,EAAA,MAAM,SAAA,GAAY,GAAA,CAAI,QAAA,CAAS,aAAA,GAAgB,cAAc,CAAA;AAC7D,EAAA,MAAM,QAAA,GAAW,gBAAA,CAAiB,aAAA,EAAe,IAAI,UAAA,CAAW,GAAG,CAAA,EAAG,IAAI,UAAA,CAAW,EAAE,CAAC,CAAA;AACxF,EAAA,QAAA,CAAS,UAAA,CAAW,IAAI,UAAA,CAAW,OAAO,CAAC,CAAA;AAC3C,EAAA,IAAI,SAAA,GAAY,SAAS,MAAA,CAAO,SAAA,CAAU,SAAS,KAAK,CAAA,EAAG,OAAO,MAAM,CAAA;AACxE,EAAA,SAAA,IAAa,QAAA,CAAS,MAAM,MAAM,CAAA;AAClC,EAAA,OAAO,SAAA;AACT;AAsBA,eAAe,oBAAoB,QAAA,EAAiD;AAClF,EAAA,kBAAA,CAAmB,QAAQ,CAAA;AAE3B,EAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,SAC3B,IAAA,CAAK,YAAY,CAAA,CACjB,MAAA,CAAO,+FAA+F,CAAA,CACtG,EAAA,CAAG,IAAA,EAAM,QAAQ,EACjB,MAAA,EAAO;AAEV,EAAA,IAAI,KAAA,IAAS,CAAC,IAAA,EAAM,MAAM,IAAI,KAAA,CAAM,CAAA,kBAAA,EAAqB,QAAQ,CAAA,CAAE,CAAA;AACnE,EAAA,IAAI,CAAC,aAAA,EAAe,MAAM,IAAI,MAAM,uDAAuD,CAAA;AAE3F,EAAA,OAAO;AAAA,IACL,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,IAAA,EAAM,KAAK,IAAA,IAAQ,EAAA;AAAA,IACnB,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,UAAU,IAAA,CAAK,kBAAA,GAAqB,OAAA,CAAQ,IAAA,CAAK,kBAAkB,CAAA,GAAI,MAAA;AAAA,IACvE,YAAY,IAAA,CAAK,iBAAA,GAAoB,OAAA,CAAQ,IAAA,CAAK,iBAAiB,CAAA,GAAI,MAAA;AAAA,IACvE,YAAY,IAAA,CAAK,4BAAA,GAA+B,OAAA,CAAQ,IAAA,CAAK,4BAA4B,CAAA,GAAI;AAAA,GAC/F;AACF;AAEA,eAAe,OAAA,CAAQ,MAA4B,OAAA,EAAqC;AACtF,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC9B,IAAA,MAAM,GAAA,GAAM,IAAIA,MAAA,EAAU;AAC1B,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,IAAA,GAAO,KAAA;AACX,IAAA,MAAM,OAAA,GAAU,KAAK,OAAA,IAAW,GAAA;AAEhC,IAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAC7B,MAAA,IAAI,CAAC,IAAA,EAAM;AAAE,QAAA,IAAA,GAAO,IAAA;AAAM,QAAA,GAAA,CAAI,GAAA,EAAI;AAAG,QAAA,OAAA,CAAQ,EAAE,MAAA,EAAQ,MAAA,EAAQ,QAAA,EAAU,IAAI,CAAA;AAAA,MAAG;AAAA,IAClF,GAAG,OAAO,CAAA;AAEV,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,MAAA,GAAA,CAAI,IAAA,CAAK,OAAA,EAAS,CAAC,GAAA,EAAK,MAAA,KAAW;AACjC,QAAA,IAAI,GAAA,EAAK;AACP,UAAA,IAAI,CAAC,IAAA,EAAM;AAAE,YAAA,IAAA,GAAO,IAAA;AAAM,YAAA,YAAA,CAAa,KAAK,CAAA;AAAG,YAAA,GAAA,CAAI,GAAA,EAAI;AAAG,YAAA,OAAA,CAAQ,EAAE,MAAA,EAAQ,MAAA,EAAQ,QAAA,EAAU,IAAI,CAAA;AAAA,UAAG;AACrG,UAAA;AAAA,QACF;AACA,QAAA,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AAAE,UAAA,MAAA,IAAU,EAAE,QAAA,EAAS;AAAA,QAAG,CAAC,CAAA;AAC5D,QAAA,MAAA,CAAO,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,CAAA,KAAc;AAAE,UAAA,MAAA,IAAU,EAAE,QAAA,EAAS;AAAA,QAAG,CAAC,CAAA;AACnE,QAAA,MAAA,CAAO,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAwB;AAC1C,UAAA,IAAI,CAAC,IAAA,EAAM;AAAE,YAAA,IAAA,GAAO,IAAA;AAAM,YAAA,YAAA,CAAa,KAAK,CAAA;AAAG,YAAA,GAAA,CAAI,GAAA,EAAI;AAAG,YAAA,OAAA,CAAQ,EAAE,MAAA,EAAQ,MAAA,EAAQ,QAAA,EAAU,IAAA,IAAQ,GAAG,CAAA;AAAA,UAAG;AAAA,QAC9G,CAAC,CAAA;AAAA,MACH,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAED,IAAA,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,CAAC,GAAA,KAAQ;AACvB,MAAA,IAAI,CAAC,IAAA,EAAM;AAAE,QAAA,IAAA,GAAO,IAAA;AAAM,QAAA,YAAA,CAAa,KAAK,CAAA;AAAG,QAAA,OAAA,CAAQ,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAI,OAAA,EAAS,QAAA,EAAU,IAAI,CAAA;AAAA,MAAG;AAAA,IACzG,CAAC,CAAA;AAED,IAAA,GAAA,CAAI,OAAA,CAAQ;AAAA,MACV,MAAM,IAAA,CAAK,QAAA;AAAA,MAAU,MAAM,IAAA,CAAK,IAAA;AAAA,MAAM,UAAU,IAAA,CAAK,QAAA;AAAA,MACrD,UAAU,IAAA,CAAK,QAAA;AAAA,MAAU,YAAY,IAAA,CAAK,UAAA;AAAA,MAAY,YAAY,IAAA,CAAK,UAAA;AAAA,MACvE,YAAA,EAAc;AAAA,KACf,CAAA;AAAA,EACH,CAAC,CAAA;AACH;AAMA,SAAS,aAAa,IAAA,EAAsB;AAC1C,EAAA,IAAI,UAAA,GAAa,KAAK,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC3D,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,KAAA,CAAM,GAAG,CAAA;AAClC,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI,SAAS,IAAA,EAAM;AAAE,MAAA,IAAI,QAAA,CAAS,MAAA,GAAS,CAAA,IAAK,QAAA,CAAS,QAAA,CAAS,SAAS,CAAC,CAAA,KAAM,EAAA,EAAI,QAAA,CAAS,GAAA,EAAI;AAAA,IAAG,WAC7F,IAAA,KAAS,GAAA,IAAO,SAAS,EAAA,EAAI,QAAA,CAAS,KAAK,IAAI,CAAA;AAAA,EAC1D;AACA,EAAA,OAAO,GAAA,GAAM,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA;AAChC;AAEA,IAAM,eAAA,GAAkB,CAAC,OAAA,EAAS,QAAA,EAAU,SAAS,OAAA,EAAS,QAAA,EAAU,SAAS,SAAS,CAAA;AAE1F,SAAS,mBAAmB,IAAA,EAAoB;AAC9C,EAAA,MAAM,IAAA,GAAO,aAAa,IAAI,CAAA;AAC9B,EAAA,KAAA,MAAW,KAAK,eAAA,EAAiB;AAC/B,IAAA,IAAI,IAAA,KAAS,EAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,IAAK,IAAA,CAAK,UAAA,CAAW,CAAC,CAAA,EAAG;AACjD,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,uCAAA,EAA0C,IAAI,CAAA,CAAE,CAAA;AAAA,IAClE;AAAA,EACF;AACF;AAEA,eAAe,WAAA,CAAY,MAA4B,OAAA,EAAkC;AACvF,EAAA,MAAM,IAAA,GAAO,aAAa,OAAO,CAAA;AACjC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC9B,IAAA,MAAM,GAAA,GAAM,IAAIA,MAAA,EAAU;AAC1B,IAAA,IAAI,IAAA,GAAO,KAAA;AACX,IAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAAE,MAAA,IAAI,CAAC,IAAA,EAAM;AAAE,QAAA,IAAA,GAAO,IAAA;AAAM,QAAA,GAAA,CAAI,GAAA,EAAI;AAAG,QAAA,OAAA,CAAQ,gBAAgB,CAAA;AAAA,MAAG;AAAA,IAAE,GAAG,GAAM,CAAA;AAE5G,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,MAAA,GAAA,CAAI,IAAA,CAAK,CAAC,GAAA,EAAK,IAAA,KAAS;AACtB,QAAA,IAAI,GAAA,EAAK;AAAE,UAAA,IAAI,CAAC,IAAA,EAAM;AAAE,YAAA,IAAA,GAAO,IAAA;AAAM,YAAA,YAAA,CAAa,KAAK,CAAA;AAAG,YAAA,GAAA,CAAI,GAAA,EAAI;AAAG,YAAA,OAAA,CAAQ,CAAA,OAAA,EAAU,GAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AAAA,UAAG;AAAE,UAAA;AAAA,QAAQ;AACjH,QAAA,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAM,CAACC,IAAAA,EAAK,IAAA,KAAS;AAChC,UAAA,IAAA,GAAO,IAAA;AAAM,UAAA,YAAA,CAAa,KAAK,CAAA;AAC/B,UAAA,IAAIA,IAAAA,EAAK;AAAE,YAAA,GAAA,CAAI,GAAA,EAAI;AAAG,YAAA,OAAA,CAAQ,CAAA,OAAA,EAAUA,IAAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AAAG,YAAA;AAAA,UAAQ;AAChE,UAAA,MAAM,OAAA,GAAU,IAAA,CAAK,GAAA,CAAI,CAAA,IAAA,KAAQ;AAC/B,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAA,IAAQ,CAAA;AAChC,YAAA,MAAM,KAAA,GAAA,CAAS,OAAO,KAAA,MAAc,KAAA;AACpC,YAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAA,IAAQ,CAAA;AAChC,YAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,IAAI,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,GAAI,CAAA,CAAE,WAAA,EAAY,GAAI,EAAA;AACnF,YAAA,OAAO,CAAA,EAAG,KAAA,GAAQ,GAAA,GAAM,GAAG,IAAI,MAAA,CAAO,IAAI,CAAA,CAAE,QAAA,CAAS,EAAE,CAAC,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA,EAAI,KAAK,QAAQ,CAAA,CAAA;AAAA,UACpF,CAAC,CAAA;AACD,UAAA,GAAA,CAAI,GAAA,EAAI;AACR,UAAA,OAAA,CAAQ,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,QAC5B,CAAC,CAAA;AAAA,MACH,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AACD,IAAA,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAM;AAAE,MAAA,IAAI,CAAC,IAAA,EAAM;AAAE,QAAA,IAAA,GAAO,IAAA;AAAM,QAAA,YAAA,CAAa,KAAK,CAAA;AAAG,QAAA,OAAA,CAAQ,CAAA,OAAA,EAAU,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAAA,MAAG;AAAA,IAAE,CAAC,CAAA;AAC3G,IAAA,GAAA,CAAI,OAAA,CAAQ,EAAE,IAAA,EAAM,IAAA,CAAK,UAAU,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU,UAAU,IAAA,CAAK,QAAA,EAAU,YAAY,IAAA,CAAK,UAAA,EAAY,YAAY,IAAA,CAAK,UAAA,EAAY,YAAA,EAAc,GAAA,EAAQ,CAAA;AAAA,EACxL,CAAC,CAAA;AACH;AAEA,eAAe,QAAA,CAAS,MAA4B,QAAA,EAAmC;AACrF,EAAA,MAAM,IAAA,GAAO,aAAa,QAAQ,CAAA;AAClC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC9B,IAAA,MAAM,GAAA,GAAM,IAAID,MAAA,EAAU;AAC1B,IAAA,IAAI,IAAA,GAAO,KAAA;AACX,IAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAAE,MAAA,IAAI,CAAC,IAAA,EAAM;AAAE,QAAA,IAAA,GAAO,IAAA;AAAM,QAAA,GAAA,CAAI,GAAA,EAAI;AAAG,QAAA,OAAA,CAAQ,gBAAgB,CAAA;AAAA,MAAG;AAAA,IAAE,GAAG,GAAM,CAAA;AAE5G,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,MAAA,GAAA,CAAI,IAAA,CAAK,CAAC,GAAA,EAAK,IAAA,KAAS;AACtB,QAAA,IAAI,GAAA,EAAK;AAAE,UAAA,IAAI,CAAC,IAAA,EAAM;AAAE,YAAA,IAAA,GAAO,IAAA;AAAM,YAAA,YAAA,CAAa,KAAK,CAAA;AAAG,YAAA,GAAA,CAAI,GAAA,EAAI;AAAG,YAAA,OAAA,CAAQ,CAAA,OAAA,EAAU,GAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AAAA,UAAG;AAAE,UAAA;AAAA,QAAQ;AACjH,QAAA,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,CAACC,IAAAA,EAAK,KAAA,KAAU;AAC9B,UAAA,IAAIA,IAAAA,EAAK;AAAE,YAAA,IAAI,CAAC,IAAA,EAAM;AAAE,cAAA,IAAA,GAAO,IAAA;AAAM,cAAA,YAAA,CAAa,KAAK,CAAA;AAAG,cAAA,GAAA,CAAI,GAAA,EAAI;AAAG,cAAA,OAAA,CAAQ,CAAA,OAAA,EAAUA,IAAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AAAA,YAAG;AAAE,YAAA;AAAA,UAAQ;AACjH,UAAA,IAAA,CAAK,KAAA,CAAM,IAAA,IAAQ,CAAA,IAAK,OAAA,EAAW;AACjC,YAAA,IAAI,CAAC,IAAA,EAAM;AAAE,cAAA,IAAA,GAAO,IAAA;AAAM,cAAA,YAAA,CAAa,KAAK,CAAA;AAAG,cAAA,GAAA,CAAI,GAAA,EAAI;AAAG,cAAA,OAAA,CAAQ,CAAA,uBAAA,EAA0B,KAAA,CAAM,IAAI,CAAA,gBAAA,CAAkB,CAAA;AAAA,YAAG;AAC3H,YAAA;AAAA,UACF;AACA,UAAA,MAAM,SAAmB,EAAC;AAC1B,UAAA,MAAM,EAAA,GAAK,IAAA,CAAK,gBAAA,CAAiB,IAAI,CAAA;AACrC,UAAA,EAAA,CAAG,GAAG,MAAA,EAAQ,CAAC,MAAc,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAA;AAC3C,UAAA,EAAA,CAAG,EAAA,CAAG,OAAO,MAAM;AAAE,YAAA,IAAI,CAAC,IAAA,EAAM;AAAE,cAAA,IAAA,GAAO,IAAA;AAAM,cAAA,YAAA,CAAa,KAAK,CAAA;AAAG,cAAA,GAAA,CAAI,GAAA,EAAI;AAAG,cAAA,OAAA,CAAQ,MAAA,CAAO,MAAA,CAAO,MAAA,CAAO,GAAA,CAAI,CAAA,CAAA,KAAK,IAAI,UAAA,CAAW,CAAC,CAAC,CAAC,CAAA,CAAE,QAAA,CAAS,OAAO,CAAC,CAAA;AAAA,YAAG;AAAA,UAAE,CAAC,CAAA;AAChK,UAAA,EAAA,CAAG,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAa;AAAE,YAAA,IAAI,CAAC,IAAA,EAAM;AAAE,cAAA,IAAA,GAAO,IAAA;AAAM,cAAA,YAAA,CAAa,KAAK,CAAA;AAAG,cAAA,GAAA,CAAI,GAAA,EAAI;AAAG,cAAA,OAAA,CAAQ,CAAA,OAAA,EAAU,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAAA,YAAG;AAAA,UAAE,CAAC,CAAA;AAAA,QAC9H,CAAC,CAAA;AAAA,MACH,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AACD,IAAA,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAM;AAAE,MAAA,IAAI,CAAC,IAAA,EAAM;AAAE,QAAA,IAAA,GAAO,IAAA;AAAM,QAAA,YAAA,CAAa,KAAK,CAAA;AAAG,QAAA,OAAA,CAAQ,CAAA,OAAA,EAAU,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAAA,MAAG;AAAA,IAAE,CAAC,CAAA;AAC3G,IAAA,GAAA,CAAI,OAAA,CAAQ,EAAE,IAAA,EAAM,IAAA,CAAK,UAAU,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU,UAAU,IAAA,CAAK,QAAA,EAAU,YAAY,IAAA,CAAK,UAAA,EAAY,YAAY,IAAA,CAAK,UAAA,EAAY,YAAA,EAAc,GAAA,EAAQ,CAAA;AAAA,EACxL,CAAC,CAAA;AACH;AAEA,eAAe,SAAA,CAAU,IAAA,EAA4B,QAAA,EAAkB,OAAA,EAAkC;AACvG,EAAA,MAAM,IAAA,GAAO,aAAa,QAAQ,CAAA;AAClC,EAAA,kBAAA,CAAmB,IAAI,CAAA;AACvB,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC9B,IAAA,MAAM,GAAA,GAAM,IAAID,MAAA,EAAU;AAC1B,IAAA,IAAI,IAAA,GAAO,KAAA;AACX,IAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAAE,MAAA,IAAI,CAAC,IAAA,EAAM;AAAE,QAAA,IAAA,GAAO,IAAA;AAAM,QAAA,GAAA,CAAI,GAAA,EAAI;AAAG,QAAA,OAAA,CAAQ,gBAAgB,CAAA;AAAA,MAAG;AAAA,IAAE,GAAG,GAAM,CAAA;AAE5G,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,MAAA,GAAA,CAAI,IAAA,CAAK,CAAC,GAAA,EAAK,IAAA,KAAS;AACtB,QAAA,IAAI,GAAA,EAAK;AAAE,UAAA,IAAI,CAAC,IAAA,EAAM;AAAE,YAAA,IAAA,GAAO,IAAA;AAAM,YAAA,YAAA,CAAa,KAAK,CAAA;AAAG,YAAA,GAAA,CAAI,GAAA,EAAI;AAAG,YAAA,OAAA,CAAQ,CAAA,OAAA,EAAU,GAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AAAA,UAAG;AAAE,UAAA;AAAA,QAAQ;AACjH,QAAA,MAAM,KAAK,IAAA,CAAK,iBAAA,CAAkB,MAAM,EAAE,IAAA,EAAM,KAAO,CAAA;AACvD,QAAA,EAAA,CAAG,EAAA,CAAG,SAAS,MAAM;AAAE,UAAA,IAAI,CAAC,IAAA,EAAM;AAAE,YAAA,IAAA,GAAO,IAAA;AAAM,YAAA,YAAA,CAAa,KAAK,CAAA;AAAG,YAAA,GAAA,CAAI,GAAA,EAAI;AAAG,YAAA,OAAA,CAAQ,CAAA,QAAA,EAAW,OAAA,CAAQ,MAAM,CAAA,UAAA,EAAa,IAAI,CAAA,CAAE,CAAA;AAAA,UAAG;AAAA,QAAE,CAAC,CAAA;AAC3I,QAAA,EAAA,CAAG,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAa;AAAE,UAAA,IAAI,CAAC,IAAA,EAAM;AAAE,YAAA,IAAA,GAAO,IAAA;AAAM,YAAA,YAAA,CAAa,KAAK,CAAA;AAAG,YAAA,GAAA,CAAI,GAAA,EAAI;AAAG,YAAA,OAAA,CAAQ,CAAA,OAAA,EAAU,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAAA,UAAG;AAAA,QAAE,CAAC,CAAA;AAC5H,QAAA,EAAA,CAAG,GAAA,CAAI,MAAA,CAAO,IAAA,CAAK,OAAA,EAAS,OAAO,CAAC,CAAA;AAAA,MACtC,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AACD,IAAA,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAM;AAAE,MAAA,IAAI,CAAC,IAAA,EAAM;AAAE,QAAA,IAAA,GAAO,IAAA;AAAM,QAAA,YAAA,CAAa,KAAK,CAAA;AAAG,QAAA,OAAA,CAAQ,CAAA,OAAA,EAAU,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAAA,MAAG;AAAA,IAAE,CAAC,CAAA;AAC3G,IAAA,GAAA,CAAI,OAAA,CAAQ,EAAE,IAAA,EAAM,IAAA,CAAK,UAAU,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU,UAAU,IAAA,CAAK,QAAA,EAAU,YAAY,IAAA,CAAK,UAAA,EAAY,YAAY,IAAA,CAAK,UAAA,EAAY,YAAA,EAAc,GAAA,EAAQ,CAAA;AAAA,EACxL,CAAC,CAAA;AACH;AAEA,eAAe,UAAA,CAAW,MAA4B,QAAA,EAAmC;AACvF,EAAA,MAAM,IAAA,GAAO,aAAa,QAAQ,CAAA;AAClC,EAAA,kBAAA,CAAmB,IAAI,CAAA;AACvB,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC9B,IAAA,MAAM,GAAA,GAAM,IAAIA,MAAA,EAAU;AAC1B,IAAA,IAAI,IAAA,GAAO,KAAA;AACX,IAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAAE,MAAA,IAAI,CAAC,IAAA,EAAM;AAAE,QAAA,IAAA,GAAO,IAAA;AAAM,QAAA,GAAA,CAAI,GAAA,EAAI;AAAG,QAAA,OAAA,CAAQ,gBAAgB,CAAA;AAAA,MAAG;AAAA,IAAE,GAAG,GAAM,CAAA;AAE5G,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,MAAA,GAAA,CAAI,IAAA,CAAK,CAAC,GAAA,EAAK,IAAA,KAAS;AACtB,QAAA,IAAI,GAAA,EAAK;AAAE,UAAA,IAAI,CAAC,IAAA,EAAM;AAAE,YAAA,IAAA,GAAO,IAAA;AAAM,YAAA,YAAA,CAAa,KAAK,CAAA;AAAG,YAAA,GAAA,CAAI,GAAA,EAAI;AAAG,YAAA,OAAA,CAAQ,CAAA,OAAA,EAAU,GAAA,CAAI,OAAO,CAAA,CAAE,CAAA;AAAA,UAAG;AAAE,UAAA;AAAA,QAAQ;AACjH,QAAA,IAAA,CAAK,MAAA,CAAO,IAAA,EAAM,CAACC,IAAAA,KAAQ;AACzB,UAAA,IAAIA,IAAAA,EAAK;AACP,YAAA,IAAA,CAAK,KAAA,CAAM,IAAA,EAAM,CAACC,KAAAA,KAAS;AACzB,cAAA,IAAA,GAAO,IAAA;AAAM,cAAA,YAAA,CAAa,KAAK,CAAA;AAAG,cAAA,GAAA,CAAI,GAAA,EAAI;AAC1C,cAAA,OAAA,CAAQA,QAAO,CAAA,OAAA,EAAUD,IAAAA,CAAI,OAAO,CAAA,CAAA,GAAK,CAAA,kBAAA,EAAqB,IAAI,CAAA,CAAE,CAAA;AAAA,YACtE,CAAC,CAAA;AAAA,UACH,CAAA,MAAO;AACL,YAAA,IAAA,GAAO,IAAA;AAAM,YAAA,YAAA,CAAa,KAAK,CAAA;AAAG,YAAA,GAAA,CAAI,GAAA,EAAI;AAC1C,YAAA,OAAA,CAAQ,CAAA,aAAA,EAAgB,IAAI,CAAA,CAAE,CAAA;AAAA,UAChC;AAAA,QACF,CAAC,CAAA;AAAA,MACH,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AACD,IAAA,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAM;AAAE,MAAA,IAAI,CAAC,IAAA,EAAM;AAAE,QAAA,IAAA,GAAO,IAAA;AAAM,QAAA,YAAA,CAAa,KAAK,CAAA;AAAG,QAAA,OAAA,CAAQ,CAAA,OAAA,EAAU,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAAA,MAAG;AAAA,IAAE,CAAC,CAAA;AAC3G,IAAA,GAAA,CAAI,OAAA,CAAQ,EAAE,IAAA,EAAM,IAAA,CAAK,UAAU,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU,UAAU,IAAA,CAAK,QAAA,EAAU,YAAY,IAAA,CAAK,UAAA,EAAY,YAAY,IAAA,CAAK,UAAA,EAAY,YAAA,EAAc,GAAA,EAAQ,CAAA;AAAA,EACxL,CAAC,CAAA;AACH;AAMA,IAAM,gBAAA,GAAmB;AAAA,EACvB,UAAA;AAAA,EAAY,UAAA;AAAA,EAAY,MAAA;AAAA,EAAQ,QAAA;AAAA,EAAU,eAAA;AAAA,EAC1C,UAAA;AAAA,EAAY,MAAA;AAAA,EAAQ,QAAA;AAAA,EAAU,QAAA;AAAA,EAC9B,YAAA;AAAA,EAAc,iBAAA;AAAA,EAAmB;AACnC,CAAA;AAEA,SAAS,kBAAkB,OAAA,EAAuB;AAChD,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,WAAA,EAAY,CAAE,IAAA,EAAK;AACzC,EAAA,KAAA,MAAW,WAAW,gBAAA,EAAkB;AACtC,IAAA,IAAI,KAAA,CAAM,QAAA,CAAS,OAAO,CAAA,EAAG;AAC3B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oCAAA,EAAuC,OAAO,CAAA,CAAA,CAAG,CAAA;AAAA,IACnE;AAAA,EACF;AACF;AAMA,IAAM,KAAA,GAAQ;AAAA,EACZ;AAAA,IACE,IAAA,EAAM,cAAA;AAAA,IACN,WAAA,EAAa,gGAAA;AAAA,IACb,WAAA,EAAa,EAAE,IAAA,EAAM,QAAA,EAAmB,YAAY,EAAC,EAAG,QAAA,EAAU,EAAC;AAAE,GACvE;AAAA,EACA;AAAA,IACE,IAAA,EAAM,eAAA;AAAA,IACN,WAAA,EAAa,2EAAA;AAAA,IACb,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,wBAAA;AAAyB,OACpE;AAAA,MACA,QAAA,EAAU,CAAC,UAAU;AAAA;AACvB,GACF;AAAA,EACA;AAAA,IACE,IAAA,EAAM,aAAA;AAAA,IACN,WAAA,EAAa,qGAAA;AAAA,IACb,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,wBAAA,EAAyB;AAAA,QAClE,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,0BAAA,EAA2B;AAAA,QACnE,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,0CAAA;AAA2C,OACrF;AAAA,MACA,QAAA,EAAU,CAAC,UAAA,EAAY,SAAS;AAAA;AAClC,GACF;AAAA,EACA;AAAA,IACE,IAAA,EAAM,eAAA;AAAA,IACN,WAAA,EAAa,qGAAA;AAAA,IACb,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,kCAAA;AAAmC,OAC9E;AAAA,MACA,QAAA,EAAU,CAAC,UAAU;AAAA;AACvB,GACF;AAAA,EACA;AAAA,IACE,IAAA,EAAM,wBAAA;AAAA,IACN,WAAA,EAAa,uEAAA;AAAA,IACb,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,wBAAA,EAAyB;AAAA,QAClE,WAAA,EAAa,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,wDAAA;AAAyD,OACvG;AAAA,MACA,QAAA,EAAU,CAAC,UAAA,EAAY,aAAa;AAAA;AACtC,GACF;AAAA,EACA;AAAA,IACE,IAAA,EAAM,WAAA;AAAA,IACN,WAAA,EAAa,yEAAA;AAAA,IACb,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,wBAAA,EAAyB;AAAA,QAClE,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,qCAAA;AAAsC,OAC7E;AAAA,MACA,QAAA,EAAU,CAAC,UAAU;AAAA;AACvB,GACF;AAAA,EACA;AAAA,IACE,IAAA,EAAM,WAAA;AAAA,IACN,WAAA,EAAa,yEAAA;AAAA,IACb,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,wBAAA,EAAyB;AAAA,QAClE,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,mBAAA;AAAoB,OAC3D;AAAA,MACA,QAAA,EAAU,CAAC,UAAA,EAAY,MAAM;AAAA;AAC/B,GACF;AAAA,EACA;AAAA,IACE,IAAA,EAAM,YAAA;AAAA,IACN,WAAA,EAAa,0FAAA;AAAA,IACb,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,wBAAA,EAAyB;AAAA,QAClE,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,oBAAA,EAAqB;AAAA,QAC1D,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,uBAAA;AAAwB,OAClE;AAAA,MACA,QAAA,EAAU,CAAC,UAAA,EAAY,MAAA,EAAQ,SAAS;AAAA;AAC1C,GACF;AAAA,EACA;AAAA,IACE,IAAA,EAAM,aAAA;AAAA,IACN,WAAA,EAAa,mGAAA;AAAA,IACb,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,wBAAA,EAAyB;AAAA,QAClE,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,kCAAA;AAAmC,OAC1E;AAAA,MACA,QAAA,EAAU,CAAC,UAAA,EAAY,MAAM;AAAA;AAC/B,GACF;AAAA,EACA;AAAA,IACE,IAAA,EAAM,aAAA;AAAA,IACN,WAAA,EAAa,sEAAA;AAAA,IACb,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,wBAAA;AAAyB,OACpE;AAAA,MACA,QAAA,EAAU,CAAC,UAAU;AAAA;AACvB,GACF;AAAA,EACA;AAAA,IACE,IAAA,EAAM,eAAA;AAAA,IACN,WAAA,EAAa,2EAAA;AAAA,IACb,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,wBAAA,EAAyB;AAAA,QAClE,aAAA,EAAe,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,sBAAA,EAAuB;AAAA,QACrE,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,CAAC,OAAA,EAAS,MAAA,EAAQ,SAAA,EAAW,QAAQ,CAAA,EAAG,WAAA,EAAa,mBAAA;AAAoB,OAC3G;AAAA,MACA,QAAA,EAAU,CAAC,UAAA,EAAY,eAAA,EAAiB,QAAQ;AAAA;AAClD,GACF;AAAA,EACA;AAAA,IACE,IAAA,EAAM,aAAA;AAAA,IACN,WAAA,EAAa,0CAAA;AAAA,IACb,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,wBAAA,EAAyB;AAAA,QAClE,aAAA,EAAe,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,sBAAA,EAAuB;AAAA,QACrE,KAAA,EAAO,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,gDAAA;AAAiD,OACzF;AAAA,MACA,QAAA,EAAU,CAAC,UAAA,EAAY,eAAe;AAAA;AACxC,GACF;AAAA,EACA;AAAA,IACE,IAAA,EAAM,UAAA;AAAA,IACN,WAAA,EAAa,kFAAA;AAAA,IACb,WAAA,EAAa,EAAE,IAAA,EAAM,QAAA,EAAmB,YAAY,EAAC,EAAG,QAAA,EAAU,EAAC;AAAE,GACvE;AAAA,EACA;AAAA,IACE,IAAA,EAAM,SAAA;AAAA,IACN,WAAA,EAAa,yEAAA;AAAA,IACb,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,8CAAA,EAA+C;AAAA,QACvF,WAAA,EAAa,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,0DAAA;AAA2D,OACzG;AAAA,MACA,QAAA,EAAU,CAAC,SAAA,EAAW,aAAa;AAAA;AACrC,GACF;AAAA,EACA;AAAA,IACE,IAAA,EAAM,WAAA;AAAA,IACN,WAAA,EAAa,6EAAA;AAAA,IACb,WAAA,EAAa;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,UAAA,EAAY;AAAA,QACV,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,8CAAA,EAA+C;AAAA,QACvF,WAAA,EAAa,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,0DAAA,EAA2D;AAAA,QACvG,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,gCAAA,EAAiC;AAAA,QACzE,WAAA,EAAa,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,sBAAA;AAAuB,OACrE;AAAA,MACA,QAAA,EAAU,CAAC,SAAA,EAAW,aAAA,EAAe,SAAS;AAAA;AAChD;AAEJ,CAAA;AAMA,IAAM,SAAS,IAAI,MAAA;AAAA,EACjB,EAAE,IAAA,EAAM,kBAAA,EAAoB,OAAA,EAAS,OAAA,EAAQ;AAAA,EAC7C,EAAE,YAAA,EAAc,EAAE,KAAA,EAAO,IAAG;AAC9B,CAAA;AAEA,MAAA,CAAO,kBAAkB,sBAAA,EAAwB,aAAa,EAAE,KAAA,EAAO,OAAM,CAAE,CAAA;AAE/E,MAAA,CAAO,iBAAA,CAAkB,qBAAA,EAAuB,OAAO,OAAA,KAAY;AACjE,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,0BAAA,EAA4B,CAAA,EAAE;AAAA,EACzE;AAEA,EAAA,MAAM,EAAE,IAAA,EAAM,SAAA,EAAW,QAAA,KAAa,OAAA,CAAQ,MAAA;AAC9C,EAAA,MAAM,CAAA,GAAK,YAAY,EAAC;AAExB,EAAA,IAAI;AACF,IAAA,QAAQ,IAAA;AAAM;AAAA,MAEZ,KAAK,cAAA,EAAgB;AACnB,QAAA,IAAI,KAAA,GAAQ,SACT,IAAA,CAAK,YAAY,EACjB,MAAA,CAAO,iEAAiE,CAAA,CACxE,KAAA,CAAM,MAAM,CAAA;AAEf,QAAA,IAAI,WAAA,CAAY,qBAAqB,IAAA,EAAM;AACzC,UAAA,KAAA,GAAQ,KAAA,CAAM,EAAA,CAAG,IAAA,EAAM,WAAA,CAAY,gBAAgB,CAAA;AAAA,QACrD;AAEA,QAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,KAAA;AAC9B,QAAA,IAAI,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,MAAM,OAAO,CAAA;AAExC,QAAA,MAAM,KAAA,GAAA,CAAS,IAAA,IAAQ,EAAC,EAAG,IAAI,CAAA,CAAA,KAAK;AAClC,UAAA,MAAM,IAAA,GAAO,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,IAAI,IAAK,CAAA,CAAE,IAAA,CAAkB,IAAA,CAAK,IAAI,CAAA,GAAI,EAAA;AACvE,UAAA,OAAO,CAAA,EAAG,EAAE,EAAE,CAAA,EAAA,EAAK,EAAE,IAAI,CAAA,EAAA,EAAK,EAAE,QAAQ,CAAA,CAAA,EAAI,EAAE,IAAI,CAAA,EAAA,EAAK,EAAE,QAAQ,CAAA,GAAA,EAAM,IAAI,CAAA,GAAA,EAAM,CAAA,CAAE,aAAa,EAAE,CAAA,CAAA;AAAA,QACpG,CAAC,CAAA;AAED,QAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,KAAA,CAAM,MAAA,GAAS,MAAM,IAAA,CAAK,IAAI,CAAA,GAAI,kBAAA,EAAoB,CAAA,EAAE;AAAA,MACnG;AAAA,MAEA,KAAK,eAAA,EAAiB;AACpB,QAAA,MAAM,OAAO,MAAM,mBAAA,CAAoB,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAC,CAAA;AACzD,QAAA,MAAM,GAAA,GAAM,yJAAA;AACZ,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA;AACtC,QAAA,MAAM,MAAA,GAAS,OAAO,QAAA,KAAa,CAAA,GAAI,OAAO,MAAA,GAAS,CAAA,KAAA,EAAQ,OAAO,QAAQ;AAAA,EAAK,OAAO,MAAM;AAAA,EAAK,OAAO,MAAM,CAAA,CAAA;AAClH,QAAA,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAQ,CAAA,EAAE;AAAA,MACrD;AAAA;AAAA,MAGA,KAAK,aAAA,EAAe;AAClB,QAAA,MAAM,OAAA,GAAU,MAAA,CAAO,CAAA,CAAE,OAAO,CAAA;AAChC,QAAA,iBAAA,CAAkB,OAAO,CAAA;AACzB,QAAA,MAAM,OAAO,MAAM,mBAAA,CAAoB,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAC,CAAA;AACzD,QAAA,IAAI,EAAE,OAAA,EAAS,IAAA,CAAK,OAAA,GAAU,MAAA,CAAO,EAAE,OAAO,CAAA;AAC9C,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAC1C,QAAA,MAAM,MAAA,GAAS,CAAC,CAAA,WAAA,EAAc,MAAA,CAAO,QAAQ,CAAA,CAAE,CAAA;AAC/C,QAAA,IAAI,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,CAAK,CAAA;AAAA,EAAmB,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA;AACjE,QAAA,IAAI,MAAA,CAAO,MAAA,EAAQ,MAAA,CAAO,IAAA,CAAK,CAAA;AAAA,EAAmB,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA;AACjE,QAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,EAAG,CAAA,EAAE;AAAA,MAChE;AAAA,MAEA,KAAK,eAAA,EAAiB;AACpB,QAAA,MAAM,OAAO,MAAM,mBAAA,CAAoB,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAC,CAAA;AACzD,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,IAAA,EAAM,aAAa,CAAA;AAChD,QAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,MAAA,CAAO,QAAA,KAAa,CAAA,GAAI,6DAA6D,CAAA,eAAA,EAAkB,MAAA,CAAO,MAAM,CAAA,CAAA,EAAI,CAAA,EAAE;AAAA,MACrK;AAAA,MAEA,KAAK,wBAAA,EAA0B;AAC7B,QAAA,MAAM,UAAU,MAAA,CAAO,CAAA,CAAE,WAAW,CAAA,CAAE,OAAA,CAAQ,qBAAqB,EAAE,CAAA;AACrE,QAAA,MAAM,OAAO,MAAM,mBAAA,CAAoB,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAC,CAAA;AACzD,QAAA,MAAM,SAAS,MAAM,OAAA,CAAQ,IAAA,EAAM,CAAA,uBAAA,EAA0B,OAAO,CAAA,CAAE,CAAA;AACtE,QAAA,IAAI,MAAA,CAAO,aAAa,CAAA,EAAG;AACzB,UAAA,MAAM,SAAS,MAAM,OAAA,CAAQ,IAAA,EAAM,CAAA,yBAAA,EAA4B,OAAO,CAAA,CAAE,CAAA;AACxE,UAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,CAAA,SAAA,EAAY,OAAO,CAAA,qBAAA,EAAwB,OAAO,MAAA,CAAO,IAAA,EAAM,CAAA,CAAA,EAAI,CAAA,EAAE;AAAA,QAChH;AACA,QAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,CAAA,mBAAA,EAAsB,OAAO,CAAA,GAAA,EAAM,MAAA,CAAO,MAAM,CAAA,CAAA,EAAI,CAAA,EAAE;AAAA,MACjG;AAAA;AAAA,MAGA,KAAK,WAAA,EAAa;AAChB,QAAA,MAAM,OAAO,MAAM,mBAAA,CAAoB,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAC,CAAA;AACzD,QAAA,MAAM,OAAA,GAAU,MAAM,WAAA,CAAY,IAAA,EAAM,OAAO,CAAA,CAAE,IAAA,IAAQ,GAAG,CAAC,CAAA;AAC7D,QAAA,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,CAAA,EAAE;AAAA,MACtD;AAAA,MAEA,KAAK,WAAA,EAAa;AAChB,QAAA,MAAM,OAAO,MAAM,mBAAA,CAAoB,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAC,CAAA;AACzD,QAAA,MAAM,UAAU,MAAM,QAAA,CAAS,MAAM,MAAA,CAAO,CAAA,CAAE,IAAI,CAAC,CAAA;AACnD,QAAA,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,CAAA,EAAE;AAAA,MACtD;AAAA,MAEA,KAAK,YAAA,EAAc;AACjB,QAAA,MAAM,OAAO,MAAM,mBAAA,CAAoB,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAC,CAAA;AACzD,QAAA,MAAM,MAAA,GAAS,MAAM,SAAA,CAAU,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAI,CAAA,EAAG,MAAA,CAAO,CAAA,CAAE,OAAO,CAAC,CAAA;AACtE,QAAA,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAQ,CAAA,EAAE;AAAA,MACrD;AAAA,MAEA,KAAK,aAAA,EAAe;AAClB,QAAA,MAAM,OAAO,MAAM,mBAAA,CAAoB,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAC,CAAA;AACzD,QAAA,MAAM,SAAS,MAAM,UAAA,CAAW,MAAM,MAAA,CAAO,CAAA,CAAE,IAAI,CAAC,CAAA;AACpD,QAAA,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAQ,CAAA,EAAE;AAAA,MACrD;AAAA;AAAA,MAGA,KAAK,aAAA,EAAe;AAClB,QAAA,MAAM,OAAO,MAAM,mBAAA,CAAoB,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAC,CAAA;AACzD,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,IAAA,EAAM,4EAA+E,CAAA;AAClH,QAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,MAAA,CAAO,QAAA,KAAa,CAAA,GAAI,OAAO,MAAA,GAAS,CAAA,OAAA,EAAU,OAAO,MAAM,CAAA,CAAA,EAAI,CAAA,EAAE;AAAA,MAChH;AAAA,MAEA,KAAK,eAAA,EAAiB;AACpB,QAAA,MAAM,YAAY,MAAA,CAAO,CAAA,CAAE,aAAa,CAAA,CAAE,OAAA,CAAQ,oBAAoB,EAAE,CAAA;AACxE,QAAA,MAAM,MAAA,GAAS,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA;AAC9B,QAAA,IAAI,CAAC,CAAC,OAAA,EAAS,MAAA,EAAQ,WAAW,QAAQ,CAAA,CAAE,QAAA,CAAS,MAAM,CAAA,EAAG;AAC5D,UAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,MAAM,CAAA,sCAAA,CAAwC,CAAA;AAAA,QACnF;AACA,QAAA,MAAM,OAAO,MAAM,mBAAA,CAAoB,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAC,CAAA;AACzD,QAAA,MAAM,SAAA,GAAY,WAAW,QAAA,GAAW,CAAA,aAAA,EAAgB,SAAS,CAAA,CAAA,GAAK,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA;AACnG,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,IAAA,EAAM,SAAS,CAAA;AAC5C,QAAA,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,OAAO,QAAA,KAAa,CAAA,GAAI,cAAc,SAAS,CAAA,EAAA,EAAK,MAAM,CAAA,eAAA,CAAA,GAAoB,CAAA,OAAA,EAAU,OAAO,MAAM,CAAA,CAAA,EAAI,CAAA,EAAE;AAAA,MACtJ;AAAA,MAEA,KAAK,aAAA,EAAe;AAClB,QAAA,MAAM,YAAY,MAAA,CAAO,CAAA,CAAE,aAAa,CAAA,CAAE,OAAA,CAAQ,oBAAoB,EAAE,CAAA;AACxE,QAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,CAAA,CAAE,KAAK,CAAA,IAAK,GAAA;AACjC,QAAA,MAAM,OAAO,MAAM,mBAAA,CAAoB,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAC,CAAA;AACzD,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,IAAA,EAAM,sBAAsB,KAAK,CAAA,CAAA,EAAI,SAAS,CAAA,KAAA,CAAO,CAAA;AAClF,QAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,MAAA,CAAO,QAAA,KAAa,CAAA,GAAI,OAAO,MAAA,GAAS,CAAA,OAAA,EAAU,OAAO,MAAM,CAAA,CAAA,EAAI,CAAA,EAAE;AAAA,MAChH;AAAA;AAAA,MAGA,KAAK,UAAA,EAAY;AACf,QAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,SAC3B,IAAA,CAAK,YAAY,CAAA,CACjB,MAAA,CAAO,oDAAoD,CAAA,CAC3D,KAAA,CAAM,UAAU,CAAA,CAChB,MAAM,aAAa,CAAA;AAEtB,QAAA,IAAI,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,MAAM,OAAO,CAAA;AACxC,QAAA,MAAM,KAAA,GAAA,CAAS,IAAA,IAAQ,EAAC,EAAG,GAAA;AAAA,UAAI,CAAA,CAAA,KAC7B,CAAA,EAAG,CAAA,CAAE,QAAQ,CAAA,CAAA,EAAI,CAAA,CAAE,WAAW,CAAA,EAAA,EAAK,CAAA,CAAE,WAAA,IAAe,EAAE,CAAA,YAAA,EAAe,EAAE,UAAU,CAAA,CAAA;AAAA,SACnF;AACA,QAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,KAAA,CAAM,MAAA,GAAS,MAAM,IAAA,CAAK,IAAI,CAAA,GAAI,+BAAA,EAAiC,CAAA,EAAE;AAAA,MAChH;AAAA,MAEA,KAAK,SAAA,EAAW;AACd,QAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,QAAA,CAC3B,IAAA,CAAK,YAAY,CAAA,CACjB,MAAA,CAAO,oBAAoB,CAAA,CAC3B,EAAA,CAAG,YAAY,MAAA,CAAO,CAAA,CAAE,OAAO,CAAC,CAAA,CAChC,EAAA,CAAG,aAAA,EAAe,MAAA,CAAO,CAAA,CAAE,WAAW,CAAC,CAAA,CACvC,MAAA,EAAO;AAEV,QAAA,IAAI,KAAA,IAAS,CAAC,IAAA,EAAM,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyB,CAAA,CAAE,OAAO,CAAA,CAAA,EAAI,CAAA,CAAE,WAAW,CAAA,CAAE,CAAA;AACzF,QAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,IAAA,CAAK,kBAAkB,CAAA;AACjD,QAAA,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAW,CAAA,EAAE;AAAA,MACxD;AAAA,MAEA,KAAK,WAAA,EAAa;AAChB,QAAA,MAAM,OAAA,GAAU,MAAA,CAAO,CAAA,CAAE,OAAO,CAAA;AAChC,QAAA,MAAM,WAAA,GAAc,MAAA,CAAO,CAAA,CAAE,WAAW,CAAA;AACxC,QAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,MAAA,CAAO,CAAA,CAAE,OAAO,CAAC,CAAA;AAE3C,QAAA,MAAM,EAAE,MAAM,QAAA,EAAS,GAAI,MAAM,QAAA,CAC9B,IAAA,CAAK,YAAY,CAAA,CACjB,MAAA,CAAO,IAAI,CAAA,CACX,EAAA,CAAG,YAAY,OAAO,CAAA,CACtB,GAAG,aAAA,EAAe,WAAW,EAC7B,MAAA,EAAO;AAEV,QAAA,IAAI,QAAA,EAAU;AACZ,UAAA,MAAM,EAAE,OAAAE,MAAAA,EAAM,GAAI,MAAM,QAAA,CACrB,IAAA,CAAK,YAAY,CAAA,CACjB,MAAA,CAAO;AAAA,YACN,kBAAA,EAAoB,SAAA;AAAA,YACpB,aAAa,CAAA,CAAE,WAAA,GAAc,MAAA,CAAO,CAAA,CAAE,WAAW,CAAA,GAAI,KAAA,CAAA;AAAA,YACrD,YAAY,WAAA,CAAY,MAAA;AAAA,YACxB,UAAA,EAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,WACpC,CAAA,CACA,EAAA,CAAG,IAAA,EAAM,SAAS,EAAE,CAAA;AACvB,UAAA,IAAIA,MAAAA,EAAO,MAAM,IAAI,KAAA,CAAMA,OAAM,OAAO,CAAA;AACxC,UAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,CAAA,oBAAA,EAAuB,OAAO,CAAA,CAAA,EAAI,WAAW,CAAA,CAAA,EAAI,CAAA,EAAE;AAAA,QAC9F;AAEA,QAAA,MAAM,EAAE,OAAM,GAAI,MAAM,SAAS,IAAA,CAAK,YAAY,EAAE,MAAA,CAAO;AAAA,UACzD,QAAA,EAAU,OAAA;AAAA,UACV,WAAA;AAAA,UACA,kBAAA,EAAoB,SAAA;AAAA,UACpB,aAAa,CAAA,CAAE,WAAA,GAAc,MAAA,CAAO,CAAA,CAAE,WAAW,CAAA,GAAI,IAAA;AAAA,UACrD,YAAY,WAAA,CAAY,MAAA;AAAA,UACxB,YAAY,WAAA,CAAY;AAAA,SACzB,CAAA;AACD,QAAA,IAAI,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,MAAM,OAAO,CAAA;AACxC,QAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,CAAA,mBAAA,EAAsB,OAAO,CAAA,CAAA,EAAI,WAAW,CAAA,CAAA,EAAI,CAAA,EAAE;AAAA,MAC7F;AAAA,MAEA;AACE,QAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,CAAA,cAAA,EAAiB,IAAI,CAAA,CAAA,EAAI,CAAA,EAAE;AAAA;AACxE,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,UAAU,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC/D,IAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,CAAA,OAAA,EAAU,OAAO,CAAA,CAAA,EAAI,CAAA,EAAE;AAAA,EAClE;AACF,CAAC,CAAA;AAMD,eAAe,IAAA,GAAO;AACpB,EAAA,OAAA,CAAQ,MAAM,qCAAqC,CAAA;AAEnD,EAAA,WAAA,GAAc,MAAM,eAAe,MAAO,CAAA;AAC1C,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAA,CAAQ,MAAM,2BAA2B,CAAA;AACzC,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAEA,EAAA,OAAA,CAAQ,MAAM,gDAAgD,CAAA;AAE9D,EAAA,MAAM,SAAA,GAAY,IAAI,oBAAA,EAAqB;AAC3C,EAAA,MAAM,MAAA,CAAO,QAAQ,SAAS,CAAA;AAE9B,EAAA,OAAA,CAAQ,KAAA,CAAM,qCAAA,GAAwC,KAAA,CAAM,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,IAAI,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA;AACzF;AAEA,IAAA,EAAK,CAAE,KAAA,CAAM,CAAC,GAAA,KAAQ;AACpB,EAAA,OAAA,CAAQ,KAAA,CAAM,gBAAgB,GAAG,CAAA;AACjC,EAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAChB,CAAC,CAAA","file":"index.js","sourcesContent":["#!/usr/bin/env node\r\n\r\nimport { Server } from '@modelcontextprotocol/sdk/server/index.js';\r\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\r\nimport { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';\r\nimport { createClient } from '@supabase/supabase-js';\r\nimport { createHash, randomBytes, createCipheriv, createDecipheriv } from 'crypto';\r\nimport { Client as SshClient } from 'ssh2';\r\n\r\n// ---------------------------------------------------------------------------\r\n// CLI argument parsing\r\n// ---------------------------------------------------------------------------\r\n\r\nconst args = process.argv.slice(2);\r\n\r\nfunction getArg(name: string): string | undefined {\r\n  return args.find(a => a.startsWith(`--${name}=`))?.split('=').slice(1).join('=');\r\n}\r\n\r\nconst apiKey = getArg('api-key') || process.env.MG_DASHBOARD_API_KEY;\r\nconst supabaseUrl = getArg('supabase-url') || process.env.SUPABASE_URL;\r\nconst supabaseKey = getArg('supabase-key') || process.env.SUPABASE_SERVICE_ROLE_KEY;\r\nconst encryptionKey = getArg('encryption-key') || process.env.ENCRYPTION_KEY;\r\n\r\nif (!apiKey) {\r\n  console.error('API key is required. Use --api-key=dk_xxx or set MG_DASHBOARD_API_KEY');\r\n  process.exit(1);\r\n}\r\n\r\nif (!supabaseUrl || !supabaseKey) {\r\n  console.error('Supabase credentials required. Use --supabase-url and --supabase-key or set SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY');\r\n  process.exit(1);\r\n}\r\n\r\nconst supabase = createClient(supabaseUrl, supabaseKey);\r\n\r\n// ---------------------------------------------------------------------------\r\n// Auth context\r\n// ---------------------------------------------------------------------------\r\n\r\ninterface AuthContext {\r\n  userId: string;\r\n  allowedServerIds: string[] | null;\r\n}\r\n\r\nlet authContext: AuthContext | null = null;\r\n\r\nasync function validateApiKey(key: string): Promise<AuthContext | null> {\r\n  if (!key.startsWith('dk_') || key.length !== 67) {\r\n    console.error('Invalid API key format (expected dk_ + 64 hex chars)');\r\n    return null;\r\n  }\r\n\r\n  const keyHash = createHash('sha256').update(key).digest('hex');\r\n\r\n  const { data, error } = await supabase\r\n    .from('dashboard_mcp_api_key')\r\n    .select('id, created_by, allowed_server_ids, is_active, expires_at')\r\n    .eq('api_key_hash', keyHash)\r\n    .eq('is_active', true)\r\n    .single();\r\n\r\n  if (error || !data) {\r\n    console.error('API key not found or inactive');\r\n    return null;\r\n  }\r\n\r\n  if (data.expires_at && new Date(data.expires_at) < new Date()) {\r\n    console.error('API key has expired');\r\n    return null;\r\n  }\r\n\r\n  await supabase\r\n    .from('dashboard_mcp_api_key')\r\n    .update({ last_used_at: new Date().toISOString() })\r\n    .eq('id', data.id);\r\n\r\n  console.error(`Authenticated as user ${data.created_by}`);\r\n\r\n  return {\r\n    userId: data.created_by,\r\n    allowedServerIds: data.allowed_server_ids,\r\n  };\r\n}\r\n\r\n// ---------------------------------------------------------------------------\r\n// Server access helper\r\n// ---------------------------------------------------------------------------\r\n\r\nfunction assertServerAccess(serverId: string): void {\r\n  if (!authContext) throw new Error('Not authenticated');\r\n  if (authContext.allowedServerIds === null) return;\r\n  if (!authContext.allowedServerIds.includes(serverId)) {\r\n    throw new Error(`Access denied: you do not have permission for server ${serverId}`);\r\n  }\r\n}\r\n\r\n// ---------------------------------------------------------------------------\r\n// Encryption helpers (AES-256-GCM, compatible with dashboard encryption.ts)\r\n// ---------------------------------------------------------------------------\r\n\r\nconst ENC_ALGORITHM = 'aes-256-gcm';\r\nconst ENC_IV_LENGTH = 16;\r\nconst ENC_TAG_LENGTH = 16;\r\n\r\nfunction getEncryptionKey(): Buffer {\r\n  if (!encryptionKey) throw new Error('ENCRYPTION_KEY is required for env operations');\r\n  const buf = Buffer.from(encryptionKey, 'hex');\r\n  if (buf.length !== 32) throw new Error('ENCRYPTION_KEY must be a 64-character hex string');\r\n  return buf;\r\n}\r\n\r\nfunction encrypt(text: string): string {\r\n  const key = getEncryptionKey();\r\n  const iv = randomBytes(ENC_IV_LENGTH);\r\n  const cipher = createCipheriv(ENC_ALGORITHM, new Uint8Array(key), new Uint8Array(iv));\r\n  let encrypted = cipher.update(text, 'utf8', 'hex');\r\n  encrypted += cipher.final('hex');\r\n  const authTag = cipher.getAuthTag();\r\n  return Buffer.concat([\r\n    new Uint8Array(iv),\r\n    new Uint8Array(authTag),\r\n    new Uint8Array(Buffer.from(encrypted, 'hex')),\r\n  ]).toString('base64');\r\n}\r\n\r\nfunction decrypt(payload: string): string {\r\n  const key = getEncryptionKey();\r\n  const buf = Buffer.from(payload, 'base64');\r\n  const iv = buf.subarray(0, ENC_IV_LENGTH);\r\n  const authTag = buf.subarray(ENC_IV_LENGTH, ENC_IV_LENGTH + ENC_TAG_LENGTH);\r\n  const encrypted = buf.subarray(ENC_IV_LENGTH + ENC_TAG_LENGTH);\r\n  const decipher = createDecipheriv(ENC_ALGORITHM, new Uint8Array(key), new Uint8Array(iv));\r\n  decipher.setAuthTag(new Uint8Array(authTag));\r\n  let decrypted = decipher.update(encrypted.toString('hex'), 'hex', 'utf8');\r\n  decrypted += decipher.final('utf8');\r\n  return decrypted;\r\n}\r\n\r\n// ---------------------------------------------------------------------------\r\n// SSH helpers\r\n// ---------------------------------------------------------------------------\r\n\r\ninterface SshConnectionOptions {\r\n  hostname: string;\r\n  port: number;\r\n  username: string;\r\n  password?: string;\r\n  privateKey?: string;\r\n  passphrase?: string;\r\n  timeout?: number;\r\n}\r\n\r\ninterface SshResult {\r\n  stdout: string;\r\n  stderr: string;\r\n  exitCode: number;\r\n}\r\n\r\nasync function getServerConnection(serverId: string): Promise<SshConnectionOptions> {\r\n  assertServerAccess(serverId);\r\n\r\n  const { data, error } = await supabase\r\n    .from('ssh_server')\r\n    .select('hostname, port, username, password_encrypted, ssh_key_encrypted, ssh_key_passphrase_encrypted')\r\n    .eq('id', serverId)\r\n    .single();\r\n\r\n  if (error || !data) throw new Error(`Server not found: ${serverId}`);\r\n  if (!encryptionKey) throw new Error('ENCRYPTION_KEY required to decrypt server credentials');\r\n\r\n  return {\r\n    hostname: data.hostname,\r\n    port: data.port || 22,\r\n    username: data.username,\r\n    password: data.password_encrypted ? decrypt(data.password_encrypted) : undefined,\r\n    privateKey: data.ssh_key_encrypted ? decrypt(data.ssh_key_encrypted) : undefined,\r\n    passphrase: data.ssh_key_passphrase_encrypted ? decrypt(data.ssh_key_passphrase_encrypted) : undefined,\r\n  };\r\n}\r\n\r\nasync function sshExec(opts: SshConnectionOptions, command: string): Promise<SshResult> {\r\n  return new Promise((resolve) => {\r\n    const ssh = new SshClient();\r\n    let stdout = '';\r\n    let stderr = '';\r\n    let done = false;\r\n    const timeout = opts.timeout || 60_000;\r\n\r\n    const timer = setTimeout(() => {\r\n      if (!done) { done = true; ssh.end(); resolve({ stdout, stderr, exitCode: -1 }); }\r\n    }, timeout);\r\n\r\n    ssh.on('ready', () => {\r\n      ssh.exec(command, (err, stream) => {\r\n        if (err) {\r\n          if (!done) { done = true; clearTimeout(timer); ssh.end(); resolve({ stdout, stderr, exitCode: -1 }); }\r\n          return;\r\n        }\r\n        stream.on('data', (d: Buffer) => { stdout += d.toString(); });\r\n        stream.stderr.on('data', (d: Buffer) => { stderr += d.toString(); });\r\n        stream.on('close', (code: number | null) => {\r\n          if (!done) { done = true; clearTimeout(timer); ssh.end(); resolve({ stdout, stderr, exitCode: code ?? 0 }); }\r\n        });\r\n      });\r\n    });\r\n\r\n    ssh.on('error', (err) => {\r\n      if (!done) { done = true; clearTimeout(timer); resolve({ stdout, stderr: err.message, exitCode: -1 }); }\r\n    });\r\n\r\n    ssh.connect({\r\n      host: opts.hostname, port: opts.port, username: opts.username,\r\n      password: opts.password, privateKey: opts.privateKey, passphrase: opts.passphrase,\r\n      readyTimeout: timeout,\r\n    });\r\n  });\r\n}\r\n\r\n// ---------------------------------------------------------------------------\r\n// SFTP helpers\r\n// ---------------------------------------------------------------------------\r\n\r\nfunction sanitizePath(path: string): string {\r\n  let normalized = path.replace(/\\\\/g, '/').replace(/\\0/g, '');\r\n  const parts = normalized.split('/');\r\n  const resolved: string[] = [];\r\n  for (const part of parts) {\r\n    if (part === '..') { if (resolved.length > 0 && resolved[resolved.length - 1] !== '') resolved.pop(); }\r\n    else if (part !== '.' && part !== '') resolved.push(part);\r\n  }\r\n  return '/' + resolved.join('/');\r\n}\r\n\r\nconst PROTECTED_PATHS = ['/etc/', '/boot/', '/usr/', '/bin/', '/sbin/', '/lib/', '/lib64/'];\r\n\r\nfunction assertWritablePath(path: string): void {\r\n  const safe = sanitizePath(path);\r\n  for (const p of PROTECTED_PATHS) {\r\n    if (safe === p.slice(0, -1) || safe.startsWith(p)) {\r\n      throw new Error(`Write access denied to protected path: ${safe}`);\r\n    }\r\n  }\r\n}\r\n\r\nasync function sftpReaddir(opts: SshConnectionOptions, dirPath: string): Promise<string> {\r\n  const safe = sanitizePath(dirPath);\r\n  return new Promise((resolve) => {\r\n    const ssh = new SshClient();\r\n    let done = false;\r\n    const timer = setTimeout(() => { if (!done) { done = true; ssh.end(); resolve('Error: timeout'); } }, 30_000);\r\n\r\n    ssh.on('ready', () => {\r\n      ssh.sftp((err, sftp) => {\r\n        if (err) { if (!done) { done = true; clearTimeout(timer); ssh.end(); resolve(`Error: ${err.message}`); } return; }\r\n        sftp.readdir(safe, (err, list) => {\r\n          done = true; clearTimeout(timer);\r\n          if (err) { ssh.end(); resolve(`Error: ${err.message}`); return; }\r\n          const entries = list.map(item => {\r\n            const mode = item.attrs.mode || 0;\r\n            const isDir = (mode & 0o170000) === 0o040000;\r\n            const size = item.attrs.size || 0;\r\n            const mtime = item.attrs.mtime ? new Date(item.attrs.mtime * 1000).toISOString() : '';\r\n            return `${isDir ? 'd' : '-'} ${String(size).padStart(10)} ${mtime} ${item.filename}`;\r\n          });\r\n          ssh.end();\r\n          resolve(entries.join('\\n'));\r\n        });\r\n      });\r\n    });\r\n    ssh.on('error', (e) => { if (!done) { done = true; clearTimeout(timer); resolve(`Error: ${e.message}`); } });\r\n    ssh.connect({ host: opts.hostname, port: opts.port, username: opts.username, password: opts.password, privateKey: opts.privateKey, passphrase: opts.passphrase, readyTimeout: 30_000 });\r\n  });\r\n}\r\n\r\nasync function sftpRead(opts: SshConnectionOptions, filePath: string): Promise<string> {\r\n  const safe = sanitizePath(filePath);\r\n  return new Promise((resolve) => {\r\n    const ssh = new SshClient();\r\n    let done = false;\r\n    const timer = setTimeout(() => { if (!done) { done = true; ssh.end(); resolve('Error: timeout'); } }, 60_000);\r\n\r\n    ssh.on('ready', () => {\r\n      ssh.sftp((err, sftp) => {\r\n        if (err) { if (!done) { done = true; clearTimeout(timer); ssh.end(); resolve(`Error: ${err.message}`); } return; }\r\n        sftp.stat(safe, (err, stats) => {\r\n          if (err) { if (!done) { done = true; clearTimeout(timer); ssh.end(); resolve(`Error: ${err.message}`); } return; }\r\n          if ((stats.size || 0) > 1_048_576) {\r\n            if (!done) { done = true; clearTimeout(timer); ssh.end(); resolve(`Error: file too large (${stats.size} bytes, max 1MB)`); }\r\n            return;\r\n          }\r\n          const chunks: Buffer[] = [];\r\n          const rs = sftp.createReadStream(safe);\r\n          rs.on('data', (c: Buffer) => chunks.push(c));\r\n          rs.on('end', () => { if (!done) { done = true; clearTimeout(timer); ssh.end(); resolve(Buffer.concat(chunks.map(c => new Uint8Array(c))).toString('utf-8')); } });\r\n          rs.on('error', (e: Error) => { if (!done) { done = true; clearTimeout(timer); ssh.end(); resolve(`Error: ${e.message}`); } });\r\n        });\r\n      });\r\n    });\r\n    ssh.on('error', (e) => { if (!done) { done = true; clearTimeout(timer); resolve(`Error: ${e.message}`); } });\r\n    ssh.connect({ host: opts.hostname, port: opts.port, username: opts.username, password: opts.password, privateKey: opts.privateKey, passphrase: opts.passphrase, readyTimeout: 60_000 });\r\n  });\r\n}\r\n\r\nasync function sftpWrite(opts: SshConnectionOptions, filePath: string, content: string): Promise<string> {\r\n  const safe = sanitizePath(filePath);\r\n  assertWritablePath(safe);\r\n  return new Promise((resolve) => {\r\n    const ssh = new SshClient();\r\n    let done = false;\r\n    const timer = setTimeout(() => { if (!done) { done = true; ssh.end(); resolve('Error: timeout'); } }, 60_000);\r\n\r\n    ssh.on('ready', () => {\r\n      ssh.sftp((err, sftp) => {\r\n        if (err) { if (!done) { done = true; clearTimeout(timer); ssh.end(); resolve(`Error: ${err.message}`); } return; }\r\n        const ws = sftp.createWriteStream(safe, { mode: 0o644 });\r\n        ws.on('close', () => { if (!done) { done = true; clearTimeout(timer); ssh.end(); resolve(`Written ${content.length} bytes to ${safe}`); } });\r\n        ws.on('error', (e: Error) => { if (!done) { done = true; clearTimeout(timer); ssh.end(); resolve(`Error: ${e.message}`); } });\r\n        ws.end(Buffer.from(content, 'utf-8'));\r\n      });\r\n    });\r\n    ssh.on('error', (e) => { if (!done) { done = true; clearTimeout(timer); resolve(`Error: ${e.message}`); } });\r\n    ssh.connect({ host: opts.hostname, port: opts.port, username: opts.username, password: opts.password, privateKey: opts.privateKey, passphrase: opts.passphrase, readyTimeout: 60_000 });\r\n  });\r\n}\r\n\r\nasync function sftpDelete(opts: SshConnectionOptions, filePath: string): Promise<string> {\r\n  const safe = sanitizePath(filePath);\r\n  assertWritablePath(safe);\r\n  return new Promise((resolve) => {\r\n    const ssh = new SshClient();\r\n    let done = false;\r\n    const timer = setTimeout(() => { if (!done) { done = true; ssh.end(); resolve('Error: timeout'); } }, 30_000);\r\n\r\n    ssh.on('ready', () => {\r\n      ssh.sftp((err, sftp) => {\r\n        if (err) { if (!done) { done = true; clearTimeout(timer); ssh.end(); resolve(`Error: ${err.message}`); } return; }\r\n        sftp.unlink(safe, (err) => {\r\n          if (err) {\r\n            sftp.rmdir(safe, (err2) => {\r\n              done = true; clearTimeout(timer); ssh.end();\r\n              resolve(err2 ? `Error: ${err.message}` : `Deleted directory ${safe}`);\r\n            });\r\n          } else {\r\n            done = true; clearTimeout(timer); ssh.end();\r\n            resolve(`Deleted file ${safe}`);\r\n          }\r\n        });\r\n      });\r\n    });\r\n    ssh.on('error', (e) => { if (!done) { done = true; clearTimeout(timer); resolve(`Error: ${e.message}`); } });\r\n    ssh.connect({ host: opts.hostname, port: opts.port, username: opts.username, password: opts.password, privateKey: opts.privateKey, passphrase: opts.passphrase, readyTimeout: 30_000 });\r\n  });\r\n}\r\n\r\n// ---------------------------------------------------------------------------\r\n// Safety: dangerous command blocklist\r\n// ---------------------------------------------------------------------------\r\n\r\nconst BLOCKED_COMMANDS = [\r\n  'rm -rf /', 'rm -fr /', 'mkfs', 'dd if=', ':(){ :|:& };:',\r\n  'shutdown', 'halt', 'init 0', 'init 6',\r\n  '> /dev/sda', 'mv /* /dev/null', 'chmod -R 000 /',\r\n];\r\n\r\nfunction assertSafeCommand(command: string): void {\r\n  const lower = command.toLowerCase().trim();\r\n  for (const blocked of BLOCKED_COMMANDS) {\r\n    if (lower.includes(blocked)) {\r\n      throw new Error(`Blocked dangerous command pattern: \"${blocked}\"`);\r\n    }\r\n  }\r\n}\r\n\r\n// ---------------------------------------------------------------------------\r\n// Tool definitions\r\n// ---------------------------------------------------------------------------\r\n\r\nconst TOOLS = [\r\n  {\r\n    name: 'list-servers',\r\n    description: 'List all SSH servers you have access to. Returns id, name, hostname, and tags for each server.',\r\n    inputSchema: { type: 'object' as const, properties: {}, required: [] },\r\n  },\r\n  {\r\n    name: 'server-status',\r\n    description: 'Get server status including uptime, disk usage, memory, and load average.',\r\n    inputSchema: {\r\n      type: 'object' as const,\r\n      properties: {\r\n        serverId: { type: 'string', description: 'UUID of the SSH server' },\r\n      },\r\n      required: ['serverId'],\r\n    },\r\n  },\r\n  {\r\n    name: 'ssh-execute',\r\n    description: 'Execute a shell command on a remote server via SSH. Some dangerous commands are blocked for safety.',\r\n    inputSchema: {\r\n      type: 'object' as const,\r\n      properties: {\r\n        serverId: { type: 'string', description: 'UUID of the SSH server' },\r\n        command: { type: 'string', description: 'Shell command to execute' },\r\n        timeout: { type: 'number', description: 'Timeout in milliseconds (default: 60000)' },\r\n      },\r\n      required: ['serverId', 'command'],\r\n    },\r\n  },\r\n  {\r\n    name: 'server-reboot',\r\n    description: 'Reboot a remote server. This will cause downtime. The server will be unavailable until it restarts.',\r\n    inputSchema: {\r\n      type: 'object' as const,\r\n      properties: {\r\n        serverId: { type: 'string', description: 'UUID of the SSH server to reboot' },\r\n      },\r\n      required: ['serverId'],\r\n    },\r\n  },\r\n  {\r\n    name: 'server-restart-service',\r\n    description: 'Restart a systemd service on a remote server using systemctl restart.',\r\n    inputSchema: {\r\n      type: 'object' as const,\r\n      properties: {\r\n        serverId: { type: 'string', description: 'UUID of the SSH server' },\r\n        serviceName: { type: 'string', description: 'Name of the systemd service (e.g. nginx, docker, lsws)' },\r\n      },\r\n      required: ['serverId', 'serviceName'],\r\n    },\r\n  },\r\n  {\r\n    name: 'sftp-list',\r\n    description: 'List files and directories at a given path on a remote server via SFTP.',\r\n    inputSchema: {\r\n      type: 'object' as const,\r\n      properties: {\r\n        serverId: { type: 'string', description: 'UUID of the SSH server' },\r\n        path: { type: 'string', description: 'Directory path to list (default: /)' },\r\n      },\r\n      required: ['serverId'],\r\n    },\r\n  },\r\n  {\r\n    name: 'sftp-read',\r\n    description: 'Read the contents of a text file on a remote server via SFTP (max 1MB).',\r\n    inputSchema: {\r\n      type: 'object' as const,\r\n      properties: {\r\n        serverId: { type: 'string', description: 'UUID of the SSH server' },\r\n        path: { type: 'string', description: 'File path to read' },\r\n      },\r\n      required: ['serverId', 'path'],\r\n    },\r\n  },\r\n  {\r\n    name: 'sftp-write',\r\n    description: 'Write content to a file on a remote server via SFTP. Protected system paths are blocked.',\r\n    inputSchema: {\r\n      type: 'object' as const,\r\n      properties: {\r\n        serverId: { type: 'string', description: 'UUID of the SSH server' },\r\n        path: { type: 'string', description: 'File path to write' },\r\n        content: { type: 'string', description: 'File content to write' },\r\n      },\r\n      required: ['serverId', 'path', 'content'],\r\n    },\r\n  },\r\n  {\r\n    name: 'sftp-delete',\r\n    description: 'Delete a file or empty directory on a remote server via SFTP. Protected system paths are blocked.',\r\n    inputSchema: {\r\n      type: 'object' as const,\r\n      properties: {\r\n        serverId: { type: 'string', description: 'UUID of the SSH server' },\r\n        path: { type: 'string', description: 'File or directory path to delete' },\r\n      },\r\n      required: ['serverId', 'path'],\r\n    },\r\n  },\r\n  {\r\n    name: 'docker-list',\r\n    description: 'List all Docker containers on a remote server (running and stopped).',\r\n    inputSchema: {\r\n      type: 'object' as const,\r\n      properties: {\r\n        serverId: { type: 'string', description: 'UUID of the SSH server' },\r\n      },\r\n      required: ['serverId'],\r\n    },\r\n  },\r\n  {\r\n    name: 'docker-action',\r\n    description: 'Perform an action on a Docker container: start, stop, restart, or remove.',\r\n    inputSchema: {\r\n      type: 'object' as const,\r\n      properties: {\r\n        serverId: { type: 'string', description: 'UUID of the SSH server' },\r\n        containerName: { type: 'string', description: 'Container name or ID' },\r\n        action: { type: 'string', enum: ['start', 'stop', 'restart', 'remove'], description: 'Action to perform' },\r\n      },\r\n      required: ['serverId', 'containerName', 'action'],\r\n    },\r\n  },\r\n  {\r\n    name: 'docker-logs',\r\n    description: 'Get recent logs from a Docker container.',\r\n    inputSchema: {\r\n      type: 'object' as const,\r\n      properties: {\r\n        serverId: { type: 'string', description: 'UUID of the SSH server' },\r\n        containerName: { type: 'string', description: 'Container name or ID' },\r\n        lines: { type: 'number', description: 'Number of log lines to retrieve (default: 100)' },\r\n      },\r\n      required: ['serverId', 'containerName'],\r\n    },\r\n  },\r\n  {\r\n    name: 'env-list',\r\n    description: 'List all stored environment configurations (app name, environment, description).',\r\n    inputSchema: { type: 'object' as const, properties: {}, required: [] },\r\n  },\r\n  {\r\n    name: 'env-get',\r\n    description: 'Retrieve the decrypted .env content for a specific app and environment.',\r\n    inputSchema: {\r\n      type: 'object' as const,\r\n      properties: {\r\n        appName: { type: 'string', description: 'Application name (e.g. backoffice, api, web)' },\r\n        environment: { type: 'string', description: 'Environment name (e.g. production, staging, development)' },\r\n      },\r\n      required: ['appName', 'environment'],\r\n    },\r\n  },\r\n  {\r\n    name: 'env-store',\r\n    description: 'Store or update an encrypted .env configuration for an app and environment.',\r\n    inputSchema: {\r\n      type: 'object' as const,\r\n      properties: {\r\n        appName: { type: 'string', description: 'Application name (e.g. backoffice, api, web)' },\r\n        environment: { type: 'string', description: 'Environment name (e.g. production, staging, development)' },\r\n        content: { type: 'string', description: 'The .env file content to store' },\r\n        description: { type: 'string', description: 'Optional description' },\r\n      },\r\n      required: ['appName', 'environment', 'content'],\r\n    },\r\n  },\r\n];\r\n\r\n// ---------------------------------------------------------------------------\r\n// MCP Server\r\n// ---------------------------------------------------------------------------\r\n\r\nconst server = new Server(\r\n  { name: 'mg-dashboard-mcp', version: '1.0.0' },\r\n  { capabilities: { tools: {} } },\r\n);\r\n\r\nserver.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));\r\n\r\nserver.setRequestHandler(CallToolRequestSchema, async (request) => {\r\n  if (!authContext) {\r\n    return { content: [{ type: 'text', text: 'Error: not authenticated' }] };\r\n  }\r\n\r\n  const { name, arguments: toolArgs } = request.params;\r\n  const a = (toolArgs || {}) as Record<string, unknown>;\r\n\r\n  try {\r\n    switch (name) {\r\n      // ----- Servers -----\r\n      case 'list-servers': {\r\n        let query = supabase\r\n          .from('ssh_server')\r\n          .select('id, name, hostname, port, username, tags, hosted_by, created_at')\r\n          .order('name');\r\n\r\n        if (authContext.allowedServerIds !== null) {\r\n          query = query.in('id', authContext.allowedServerIds);\r\n        }\r\n\r\n        const { data, error } = await query;\r\n        if (error) throw new Error(error.message);\r\n\r\n        const lines = (data || []).map(s => {\r\n          const tags = Array.isArray(s.tags) ? (s.tags as string[]).join(', ') : '';\r\n          return `${s.id}  ${s.name}  ${s.hostname}:${s.port}  ${s.username}  [${tags}]  ${s.hosted_by || ''}`;\r\n        });\r\n\r\n        return { content: [{ type: 'text', text: lines.length ? lines.join('\\n') : 'No servers found' }] };\r\n      }\r\n\r\n      case 'server-status': {\r\n        const conn = await getServerConnection(String(a.serverId));\r\n        const cmd = 'echo \"=== UPTIME ===\" && uptime && echo \"=== DISK ===\" && df -h --total && echo \"=== MEMORY ===\" && free -h && echo \"=== LOAD ===\" && cat /proc/loadavg';\r\n        const result = await sshExec(conn, cmd);\r\n        const output = result.exitCode === 0 ? result.stdout : `Exit ${result.exitCode}\\n${result.stdout}\\n${result.stderr}`;\r\n        return { content: [{ type: 'text', text: output }] };\r\n      }\r\n\r\n      // ----- SSH -----\r\n      case 'ssh-execute': {\r\n        const command = String(a.command);\r\n        assertSafeCommand(command);\r\n        const conn = await getServerConnection(String(a.serverId));\r\n        if (a.timeout) conn.timeout = Number(a.timeout);\r\n        const result = await sshExec(conn, command);\r\n        const output = [`Exit code: ${result.exitCode}`];\r\n        if (result.stdout) output.push(`--- stdout ---\\n${result.stdout}`);\r\n        if (result.stderr) output.push(`--- stderr ---\\n${result.stderr}`);\r\n        return { content: [{ type: 'text', text: output.join('\\n') }] };\r\n      }\r\n\r\n      case 'server-reboot': {\r\n        const conn = await getServerConnection(String(a.serverId));\r\n        const result = await sshExec(conn, 'sudo reboot');\r\n        return { content: [{ type: 'text', text: result.exitCode === 0 ? 'Reboot command sent. Server will be unavailable shortly.' : `Reboot failed: ${result.stderr}` }] };\r\n      }\r\n\r\n      case 'server-restart-service': {\r\n        const service = String(a.serviceName).replace(/[^a-zA-Z0-9._@-]/g, '');\r\n        const conn = await getServerConnection(String(a.serverId));\r\n        const result = await sshExec(conn, `sudo systemctl restart ${service}`);\r\n        if (result.exitCode === 0) {\r\n          const status = await sshExec(conn, `sudo systemctl is-active ${service}`);\r\n          return { content: [{ type: 'text', text: `Service \"${service}\" restarted. Status: ${status.stdout.trim()}` }] };\r\n        }\r\n        return { content: [{ type: 'text', text: `Failed to restart \"${service}\": ${result.stderr}` }] };\r\n      }\r\n\r\n      // ----- SFTP -----\r\n      case 'sftp-list': {\r\n        const conn = await getServerConnection(String(a.serverId));\r\n        const listing = await sftpReaddir(conn, String(a.path || '/'));\r\n        return { content: [{ type: 'text', text: listing }] };\r\n      }\r\n\r\n      case 'sftp-read': {\r\n        const conn = await getServerConnection(String(a.serverId));\r\n        const content = await sftpRead(conn, String(a.path));\r\n        return { content: [{ type: 'text', text: content }] };\r\n      }\r\n\r\n      case 'sftp-write': {\r\n        const conn = await getServerConnection(String(a.serverId));\r\n        const result = await sftpWrite(conn, String(a.path), String(a.content));\r\n        return { content: [{ type: 'text', text: result }] };\r\n      }\r\n\r\n      case 'sftp-delete': {\r\n        const conn = await getServerConnection(String(a.serverId));\r\n        const result = await sftpDelete(conn, String(a.path));\r\n        return { content: [{ type: 'text', text: result }] };\r\n      }\r\n\r\n      // ----- Docker -----\r\n      case 'docker-list': {\r\n        const conn = await getServerConnection(String(a.serverId));\r\n        const result = await sshExec(conn, 'docker ps -a --format \"table {{.Names}}\\t{{.Image}}\\t{{.Status}}\\t{{.Ports}}\"');\r\n        return { content: [{ type: 'text', text: result.exitCode === 0 ? result.stdout : `Error: ${result.stderr}` }] };\r\n      }\r\n\r\n      case 'docker-action': {\r\n        const container = String(a.containerName).replace(/[^a-zA-Z0-9._-]/g, '');\r\n        const action = String(a.action);\r\n        if (!['start', 'stop', 'restart', 'remove'].includes(action)) {\r\n          throw new Error(`Invalid action: ${action}. Use start, stop, restart, or remove.`);\r\n        }\r\n        const conn = await getServerConnection(String(a.serverId));\r\n        const dockerCmd = action === 'remove' ? `docker rm -f ${container}` : `docker ${action} ${container}`;\r\n        const result = await sshExec(conn, dockerCmd);\r\n        return { content: [{ type: 'text', text: result.exitCode === 0 ? `Container \"${container}\" ${action}ed successfully` : `Error: ${result.stderr}` }] };\r\n      }\r\n\r\n      case 'docker-logs': {\r\n        const container = String(a.containerName).replace(/[^a-zA-Z0-9._-]/g, '');\r\n        const lines = Number(a.lines) || 100;\r\n        const conn = await getServerConnection(String(a.serverId));\r\n        const result = await sshExec(conn, `docker logs --tail ${lines} ${container} 2>&1`);\r\n        return { content: [{ type: 'text', text: result.exitCode === 0 ? result.stdout : `Error: ${result.stderr}` }] };\r\n      }\r\n\r\n      // ----- Env Config -----\r\n      case 'env-list': {\r\n        const { data, error } = await supabase\r\n          .from('env_config')\r\n          .select('id, app_name, environment, description, updated_at')\r\n          .order('app_name')\r\n          .order('environment');\r\n\r\n        if (error) throw new Error(error.message);\r\n        const lines = (data || []).map(e =>\r\n          `${e.app_name}/${e.environment}  ${e.description || ''}  (updated: ${e.updated_at})`\r\n        );\r\n        return { content: [{ type: 'text', text: lines.length ? lines.join('\\n') : 'No environment configs stored' }] };\r\n      }\r\n\r\n      case 'env-get': {\r\n        const { data, error } = await supabase\r\n          .from('env_config')\r\n          .select('env_data_encrypted')\r\n          .eq('app_name', String(a.appName))\r\n          .eq('environment', String(a.environment))\r\n          .single();\r\n\r\n        if (error || !data) throw new Error(`Env config not found: ${a.appName}/${a.environment}`);\r\n        const decrypted = decrypt(data.env_data_encrypted);\r\n        return { content: [{ type: 'text', text: decrypted }] };\r\n      }\r\n\r\n      case 'env-store': {\r\n        const appName = String(a.appName);\r\n        const environment = String(a.environment);\r\n        const encrypted = encrypt(String(a.content));\r\n\r\n        const { data: existing } = await supabase\r\n          .from('env_config')\r\n          .select('id')\r\n          .eq('app_name', appName)\r\n          .eq('environment', environment)\r\n          .single();\r\n\r\n        if (existing) {\r\n          const { error } = await supabase\r\n            .from('env_config')\r\n            .update({\r\n              env_data_encrypted: encrypted,\r\n              description: a.description ? String(a.description) : undefined,\r\n              updated_by: authContext.userId,\r\n              updated_at: new Date().toISOString(),\r\n            })\r\n            .eq('id', existing.id);\r\n          if (error) throw new Error(error.message);\r\n          return { content: [{ type: 'text', text: `Updated env config: ${appName}/${environment}` }] };\r\n        }\r\n\r\n        const { error } = await supabase.from('env_config').insert({\r\n          app_name: appName,\r\n          environment,\r\n          env_data_encrypted: encrypted,\r\n          description: a.description ? String(a.description) : null,\r\n          created_by: authContext.userId,\r\n          updated_by: authContext.userId,\r\n        });\r\n        if (error) throw new Error(error.message);\r\n        return { content: [{ type: 'text', text: `Stored env config: ${appName}/${environment}` }] };\r\n      }\r\n\r\n      default:\r\n        return { content: [{ type: 'text', text: `Unknown tool: ${name}` }] };\r\n    }\r\n  } catch (err) {\r\n    const message = err instanceof Error ? err.message : String(err);\r\n    return { content: [{ type: 'text', text: `Error: ${message}` }] };\r\n  }\r\n});\r\n\r\n// ---------------------------------------------------------------------------\r\n// Main\r\n// ---------------------------------------------------------------------------\r\n\r\nasync function main() {\r\n  console.error('Starting MG Dashboard MCP Server...');\r\n\r\n  authContext = await validateApiKey(apiKey!);\r\n  if (!authContext) {\r\n    console.error('API key validation failed');\r\n    process.exit(1);\r\n  }\r\n\r\n  console.error('API key validated. Starting stdio transport...');\r\n\r\n  const transport = new StdioServerTransport();\r\n  await server.connect(transport);\r\n\r\n  console.error('MCP Server ready. Tools available: ' + TOOLS.map(t => t.name).join(', '));\r\n}\r\n\r\nmain().catch((err) => {\r\n  console.error('Fatal error:', err);\r\n  process.exit(1);\r\n});\r\n"]}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@mgsoftwarebv/mg-dashboard-mcp",
+  "version": "1.0.0",
+  "description": "MCP Server for MG Dashboard - SSH, SFTP, Docker, and environment config tools for Cursor",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "mg-dashboard-mcp": "dist/index.js"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "start": "node dist/index.js",
+    "typecheck": "tsc --noEmit"
+  },
+  "keywords": [
+    "mcp",
+    "dashboard",
+    "ssh",
+    "sftp",
+    "docker",
+    "cursor",
+    "mg-software"
+  ],
+  "author": "MG Software B.V. <info@mgsoftware.nl> (https://www.mgsoftware.nl)",
+  "license": "MIT",
+  "homepage": "https://www.mgsoftware.nl",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.4",
+    "@supabase/supabase-js": "^2.50.0",
+    "ssh2": "^1.15.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "@types/ssh2": "^1.15.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.0.0"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  }
+}