@musnows/scriverse 0.9.5 → 0.9.7

package/dist/remote-mcp.js

@@ -0,0 +1,496 @@
+import { createHash } from "node:crypto";
+import { Client, SSEClientTransport, StreamableHTTPClientTransport } from "@modelcontextprotocol/client";
+import { z } from "zod";
+import { AppError } from "./errors.js";
+import { logger } from "./logger.js";
+import { fetchSafeAiEndpoint } from "./security.js";
+import { APP_VERSION } from "./version.js";
+export const MCP_SECRET_MASK = "********";
+const MAXIMUM_MCP_SERVERS = 20;
+const MAXIMUM_MCP_HEADERS = 64;
+const MAXIMUM_MCP_TOOLS = 200;
+const MAXIMUM_MCP_TOOLS_PER_SERVER = 100;
+const MAXIMUM_MCP_TOOL_PAGES = 20;
+const MAXIMUM_MCP_CONFIG_CHARS = 256_000;
+const MAXIMUM_MCP_TOOL_SCHEMA_CHARS = 64_000;
+const MCP_CONNECT_TIMEOUT_MS = 12_000;
+const MCP_TOOL_CALL_TIMEOUT_MS = 60_000;
+const forbiddenLocalServerFields = ["command", "args", "env", "cwd"];
+const forbiddenHeaderNames = new Set([
+    "accept",
+    "connection",
+    "content-length",
+    "content-type",
+    "host",
+    "mcp-protocol-version",
+    "mcp-session-id",
+    "te",
+    "trailer",
+    "transfer-encoding",
+    "upgrade"
+]);
+const mcpTransportSchema = z.enum(["auto", "sse", "streamable-http", "streamableHttp", "stream-http", "http"]);
+const mcpServerSchema = z.object({
+    url: z.string().trim().min(1).max(2_048),
+    type: mcpTransportSchema.optional(),
+    transport: mcpTransportSchema.optional(),
+    headers: z.record(z.string().min(1).max(200), z.string().max(4_096)).optional()
+}).strict();
+const mcpConfigurationSchema = z.object({
+    mcpServers: z.record(z.string().trim().min(1).max(100), mcpServerSchema)
+}).strict();
+const mcpToolCatalogEntrySchema = z.object({
+    serverName: z.string().min(1).max(100),
+    serverToolName: z.string().min(1).max(300),
+    modelToolName: z.string().min(1).max(64),
+    description: z.string().max(4_000),
+    inputSchema: z.record(z.string(), z.unknown()),
+    transport: z.enum(["sse", "streamable-http"]),
+    serverVersion: z.string().max(300)
+}).strict();
+const mcpToolCatalogSchema = z.array(mcpToolCatalogEntrySchema).max(MAXIMUM_MCP_TOOLS);
+function recordValue(value) {
+    return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function normalizedTransport(value) {
+    if (!value || value === "auto")
+        return "auto";
+    return value === "sse" ? "sse" : "streamable-http";
+}
+function isSensitiveHeader(name) {
+    const normalized = name.toLocaleLowerCase("en-US");
+    return normalized === "authorization"
+        || normalized === "proxy-authorization"
+        || normalized === "cookie"
+        || normalized.includes("token")
+        || normalized.includes("secret")
+        || /(?:^|[-_])api[-_]?key$/u.test(normalized)
+        || /(?:^|[-_])key$/u.test(normalized);
+}
+function configurationForStorage(configuration) {
+    return {
+        mcpServers: Object.fromEntries(Object.entries(configuration.mcpServers).map(([serverName, server]) => [
+            serverName,
+            {
+                ...(server.transport === "auto" ? {} : { type: server.transport }),
+                url: server.url,
+                ...(Object.keys(server.headers).length > 0 ? { headers: server.headers } : {})
+            }
+        ]))
+    };
+}
+function redactedConfiguration(configuration) {
+    return {
+        mcpServers: Object.fromEntries(Object.entries(configuration.mcpServers).map(([serverName, server]) => [
+            serverName,
+            {
+                ...(server.transport === "auto" ? {} : { type: server.transport }),
+                url: server.url,
+                ...(Object.keys(server.headers).length > 0
+                    ? {
+                        headers: Object.fromEntries(Object.entries(server.headers).map(([name, value]) => [
+                            name,
+                            isSensitiveHeader(name) && value ? MCP_SECRET_MASK : value
+                        ]))
+                    }
+                    : {})
+            }
+        ]))
+    };
+}
+function configurationIssueMessage(error) {
+    return error.issues
+        .slice(0, 6)
+        .map((issue) => `${issue.path.join(".") || "配置"}：${issue.message}`)
+        .join("；");
+}
+export function parseRemoteMcpConfiguration(input, previous, allowLiteralSecretMask = false) {
+    const root = recordValue(input);
+    const rawServers = recordValue(root?.mcpServers);
+    if (rawServers) {
+        for (const [serverName, rawServer] of Object.entries(rawServers)) {
+            const server = recordValue(rawServer);
+            if (!server)
+                continue;
+            const localField = forbiddenLocalServerFields.find((field) => Object.hasOwn(server, field));
+            if (localField) {
+                throw new AppError(400, "MCP_LOCAL_TRANSPORT_FORBIDDEN", `MCP Server“${serverName}”包含本地 ${localField} 配置；叙界只支持远程 SSE 或 Streamable HTTP MCP Server`);
+            }
+        }
+    }
+    const parsed = mcpConfigurationSchema.safeParse(input);
+    if (!parsed.success) {
+        throw new AppError(400, "MCP_CONFIG_INVALID", `MCP 配置不符合 mcpServers 规范：${configurationIssueMessage(parsed.error)}`);
+    }
+    const entries = Object.entries(parsed.data.mcpServers);
+    if (entries.length > MAXIMUM_MCP_SERVERS) {
+        throw new AppError(400, "MCP_SERVER_LIMIT_EXCEEDED", `每部作品最多配置 ${MAXIMUM_MCP_SERVERS} 个 MCP Server`);
+    }
+    const normalizedServers = {};
+    for (const [serverName, server] of entries) {
+        if (server.type && server.transport && normalizedTransport(server.type) !== normalizedTransport(server.transport)) {
+            throw new AppError(400, "MCP_TRANSPORT_CONFLICT", `MCP Server“${serverName}”的 type 与 transport 配置冲突`);
+        }
+        let endpoint;
+        try {
+            endpoint = new URL(server.url);
+        }
+        catch {
+            throw new AppError(400, "MCP_SERVER_URL_INVALID", `MCP Server“${serverName}”的 url 不是有效地址`);
+        }
+        if (!["http:", "https:"].includes(endpoint.protocol) || endpoint.username || endpoint.password) {
+            throw new AppError(400, "MCP_REMOTE_TRANSPORT_REQUIRED", `MCP Server“${serverName}”必须使用无内嵌凭据的 HTTP(S) 远程地址`);
+        }
+        const headers = server.headers ?? {};
+        if (Object.keys(headers).length > MAXIMUM_MCP_HEADERS) {
+            throw new AppError(400, "MCP_HEADER_LIMIT_EXCEEDED", `MCP Server“${serverName}”的 header 数量不能超过 ${MAXIMUM_MCP_HEADERS}`);
+        }
+        const normalizedHeaderNames = new Set();
+        const resolvedHeaders = {};
+        for (const [name, configuredValue] of Object.entries(headers)) {
+            const normalizedName = name.toLocaleLowerCase("en-US");
+            if (normalizedHeaderNames.has(normalizedName)) {
+                throw new AppError(400, "MCP_HEADER_DUPLICATED", `MCP Server“${serverName}”包含重复 header“${name}”`);
+            }
+            normalizedHeaderNames.add(normalizedName);
+            if (forbiddenHeaderNames.has(normalizedName)) {
+                throw new AppError(400, "MCP_HEADER_FORBIDDEN", `MCP Server“${serverName}”不能覆盖协议 header“${name}”`);
+            }
+            try {
+                new Headers([[name, configuredValue]]);
+            }
+            catch {
+                throw new AppError(400, "MCP_HEADER_INVALID", `MCP Server“${serverName}”的 header“${name}”无效`);
+            }
+            if (configuredValue === MCP_SECRET_MASK && isSensitiveHeader(name) && !allowLiteralSecretMask) {
+                const previousHeader = Object.entries(previous?.mcpServers[serverName]?.headers ?? {})
+                    .find(([candidate]) => candidate.toLocaleLowerCase("en-US") === normalizedName);
+                if (!previousHeader) {
+                    throw new AppError(400, "MCP_SECRET_REQUIRED", `MCP Server“${serverName}”的敏感 header“${name}”需要填写真实值`);
+                }
+                resolvedHeaders[name] = previousHeader[1];
+            }
+            else {
+                resolvedHeaders[name] = configuredValue;
+            }
+        }
+        normalizedServers[serverName] = {
+            url: endpoint.toString(),
+            transport: normalizedTransport(server.type ?? server.transport),
+            headers: resolvedHeaders
+        };
+    }
+    const configuration = { mcpServers: normalizedServers };
+    if (JSON.stringify(configurationForStorage(configuration)).length > MAXIMUM_MCP_CONFIG_CHARS) {
+        throw new AppError(400, "MCP_CONFIG_TOO_LARGE", "MCP 配置内容过大");
+    }
+    return configuration;
+}
+function modelToolName(serverName, toolName) {
+    const suffix = toolName
+        .normalize("NFKC")
+        .replace(/[^a-zA-Z0-9_-]+/gu, "_")
+        .replace(/^_+|_+$/gu, "")
+        .slice(0, 35) || "tool";
+    const digest = createHash("sha256").update(`${serverName}\0${toolName}`).digest("hex").slice(0, 12);
+    return `mcp_${digest}_${suffix}`.slice(0, 64);
+}
+function safeErrorMessage(error, server) {
+    let message = error instanceof Error ? error.message : "连接失败";
+    if (/origin does not match|cross[- ]origin/iu.test(message)) {
+        return "MCP Server 尝试把消息端点指向其他来源，已阻止连接";
+    }
+    for (const value of Object.values(server.headers)) {
+        if (value)
+            message = message.split(value).join(MCP_SECRET_MASK);
+    }
+    return message.replace(/[\r\n]+/gu, " ").slice(0, 300) || "连接失败";
+}
+function normalizedInputSchema(serverName, toolName, value) {
+    const schema = recordValue(value);
+    if (!schema || schema.type !== "object") {
+        throw new AppError(400, "MCP_TOOL_SCHEMA_INVALID", `MCP Server“${serverName}”的工具“${toolName}”没有有效的 object inputSchema`);
+    }
+    if (JSON.stringify(schema).length > MAXIMUM_MCP_TOOL_SCHEMA_CHARS) {
+        throw new AppError(400, "MCP_TOOL_SCHEMA_TOO_LARGE", `MCP Server“${serverName}”的工具“${toolName}”输入规范过大`);
+    }
+    return schema;
+}
+function parseCatalog(value) {
+    const parsed = mcpToolCatalogSchema.safeParse(value);
+    return parsed.success ? parsed.data : [];
+}
+function parseStoredCatalog(value) {
+    try {
+        return parseCatalog(JSON.parse(value));
+    }
+    catch {
+        return [];
+    }
+}
+export class RemoteMcpManager {
+    database;
+    vault;
+    fetchImpl;
+    validateOutboundUrl;
+    constructor(database, vault, fetchImpl = fetch, validateOutboundUrl) {
+        this.database = database;
+        this.vault = vault;
+        this.fetchImpl = fetchImpl;
+        this.validateOutboundUrl = validateOutboundUrl;
+    }
+    settingsRow(workId) {
+        return this.database.get("SELECT * FROM work_mcp_settings WHERE work_id = ?", workId);
+    }
+    decryptConfiguration(row) {
+        try {
+            const plaintext = this.vault.decrypt({
+                encrypted: row.config_encrypted,
+                iv: row.config_iv,
+                tag: row.config_tag
+            });
+            return parseRemoteMcpConfiguration(JSON.parse(plaintext), undefined, true);
+        }
+        catch (error) {
+            logger.error("mcp.configuration.decrypt_failed", {
+                error: error instanceof Error ? error.name : "UnknownError"
+            });
+            throw new AppError(500, "MCP_CONFIG_UNREADABLE", "当前作品的 MCP 配置无法读取，请重新保存配置");
+        }
+    }
+    loadConfiguration(workId) {
+        const row = this.settingsRow(workId);
+        return row ? this.decryptConfiguration(row) : { mcpServers: {} };
+    }
+    getSettings(workId) {
+        const row = this.settingsRow(workId);
+        if (!row) {
+            return {
+                config: { mcpServers: {} },
+                servers: [],
+                totalToolCount: 0,
+                updatedAt: null
+            };
+        }
+        const configuration = this.decryptConfiguration(row);
+        const catalog = parseStoredCatalog(row.tool_catalog_json);
+        return {
+            config: redactedConfiguration(configuration),
+            servers: Object.entries(configuration.mcpServers).map(([serverName, server]) => {
+                const tools = catalog.filter((tool) => tool.serverName === serverName);
+                return {
+                    name: serverName,
+                    url: server.url,
+                    configuredTransport: server.transport,
+                    transport: tools[0]?.transport ?? server.transport,
+                    toolCount: tools.length,
+                    serverVersion: tools[0]?.serverVersion ?? ""
+                };
+            }),
+            totalToolCount: catalog.length,
+            updatedAt: row.updated_at
+        };
+    }
+    secureFetch(server) {
+        return async (input, init) => {
+            const url = typeof input === "string" ? input : input.toString();
+            if (new URL(url).origin !== new URL(server.url).origin) {
+                throw new AppError(502, "MCP_CROSS_ORIGIN_REQUEST_BLOCKED", "MCP Server 尝试把请求或认证信息发送到其他来源，已阻止连接");
+            }
+            const headers = new Headers();
+            new Headers(init?.headers).forEach((value, name) => headers.set(name, value));
+            Object.entries(server.headers).forEach(([name, value]) => headers.set(name, value));
+            const method = init?.method ?? "GET";
+            const requestInit = {
+                ...init,
+                method,
+                headers,
+                body: ["GET", "HEAD"].includes(method.toUpperCase()) ? undefined : init?.body
+            };
+            return fetchSafeAiEndpoint(this.fetchImpl, url, requestInit, this.validateOutboundUrl);
+        };
+    }
+    async connect(server, preferredTransport, signal) {
+        const candidates = preferredTransport
+            ? [preferredTransport]
+            : server.transport === "auto"
+                ? ["streamable-http", "sse"]
+                : [server.transport];
+        let lastError;
+        for (const transportType of candidates) {
+            const client = new Client({ name: "scriverse", version: APP_VERSION }, { versionNegotiation: { mode: "auto" } });
+            const secureFetch = this.secureFetch(server);
+            const requestInit = { headers: server.headers };
+            const transport = transportType === "sse"
+                ? new SSEClientTransport(new URL(server.url), {
+                    fetch: secureFetch,
+                    eventSourceInit: { fetch: secureFetch },
+                    requestInit
+                })
+                : new StreamableHTTPClientTransport(new URL(server.url), {
+                    fetch: secureFetch,
+                    requestInit,
+                    reconnectionOptions: {
+                        initialReconnectionDelay: 250,
+                        maxReconnectionDelay: 1_000,
+                        reconnectionDelayGrowFactor: 1.5,
+                        maxRetries: 1
+                    }
+                });
+            try {
+                await client.connect(transport, { timeout: MCP_CONNECT_TIMEOUT_MS, signal });
+                return { client, transport: transportType };
+            }
+            catch (error) {
+                lastError = error;
+                await client.close().catch(() => undefined);
+            }
+        }
+        throw lastError instanceof Error ? lastError : new Error("MCP connection failed");
+    }
+    async discoverServerTools(serverName, server) {
+        if (this.validateOutboundUrl) {
+            try {
+                await this.validateOutboundUrl(server.url);
+            }
+            catch (error) {
+                throw new AppError(400, "MCP_SERVER_ENDPOINT_UNSAFE", `MCP Server“${serverName}”地址不安全：${safeErrorMessage(error, server)}`);
+            }
+        }
+        let connected;
+        try {
+            connected = await this.connect(server);
+        }
+        catch (error) {
+            throw new AppError(400, "MCP_SERVER_UNREACHABLE", `MCP Server“${serverName}”无法连接或未通过 MCP 协议校验：${safeErrorMessage(error, server)}`);
+        }
+        try {
+            const tools = [];
+            let cursor;
+            let pageCount = 0;
+            do {
+                pageCount += 1;
+                if (pageCount > MAXIMUM_MCP_TOOL_PAGES) {
+                    throw new AppError(400, "MCP_TOOL_PAGE_LIMIT_EXCEEDED", `MCP Server“${serverName}”返回了过多工具分页`);
+                }
+                const page = await connected.client.listTools(cursor ? { cursor } : undefined, { timeout: MCP_CONNECT_TIMEOUT_MS });
+                for (const tool of page.tools) {
+                    if (!tool.name || tool.name.length > 300) {
+                        throw new AppError(400, "MCP_TOOL_NAME_INVALID", `MCP Server“${serverName}”返回了无效工具名称`);
+                    }
+                    if (tools.length >= MAXIMUM_MCP_TOOLS_PER_SERVER) {
+                        throw new AppError(400, "MCP_TOOL_LIMIT_EXCEEDED", `MCP Server“${serverName}”最多可暴露 ${MAXIMUM_MCP_TOOLS_PER_SERVER} 个工具`);
+                    }
+                    tools.push({
+                        serverName,
+                        serverToolName: tool.name,
+                        modelToolName: modelToolName(serverName, tool.name),
+                        description: String(tool.description ?? "").slice(0, 4_000),
+                        inputSchema: normalizedInputSchema(serverName, tool.name, tool.inputSchema),
+                        transport: connected.transport,
+                        serverVersion: [connected.client.getServerVersion()?.name, connected.client.getServerVersion()?.version]
+                            .filter(Boolean)
+                            .join(" ")
+                            .slice(0, 300)
+                    });
+                }
+                cursor = page.nextCursor;
+            } while (cursor);
+            if (tools.length === 0) {
+                throw new AppError(400, "MCP_SERVER_NO_TOOLS", `MCP Server“${serverName}”连接成功，但没有提供可调用工具`);
+            }
+            return tools;
+        }
+        catch (error) {
+            if (error instanceof AppError)
+                throw error;
+            throw new AppError(400, "MCP_SERVER_TOOL_DISCOVERY_FAILED", `MCP Server“${serverName}”无法读取工具列表：${safeErrorMessage(error, server)}`);
+        }
+        finally {
+            await connected.client.close().catch(() => undefined);
+        }
+    }
+    async prepareSettings(workId, input) {
+        const previous = this.settingsRow(workId) ? this.loadConfiguration(workId) : undefined;
+        const configuration = parseRemoteMcpConfiguration(input, previous);
+        const catalog = [];
+        for (const [serverName, server] of Object.entries(configuration.mcpServers)) {
+            const discovered = await this.discoverServerTools(serverName, server);
+            if (catalog.length + discovered.length > MAXIMUM_MCP_TOOLS) {
+                throw new AppError(400, "MCP_TOOL_LIMIT_EXCEEDED", `每部作品最多可暴露 ${MAXIMUM_MCP_TOOLS} 个远程 MCP 工具`);
+            }
+            catalog.push(...discovered);
+        }
+        return { configuration, catalog };
+    }
+    persistSettings(workId, prepared, updatedAt) {
+        if (Object.keys(prepared.configuration.mcpServers).length === 0) {
+            this.database.run("DELETE FROM work_mcp_settings WHERE work_id = ?", workId);
+            return;
+        }
+        const encrypted = this.vault.encrypt(JSON.stringify(configurationForStorage(prepared.configuration)));
+        this.database.run(`INSERT INTO work_mcp_settings (
+         work_id, config_encrypted, config_iv, config_tag, tool_catalog_json, updated_at
+       ) VALUES (?, ?, ?, ?, ?, ?)
+       ON CONFLICT(work_id) DO UPDATE SET
+         config_encrypted = excluded.config_encrypted,
+         config_iv = excluded.config_iv,
+         config_tag = excluded.config_tag,
+         tool_catalog_json = excluded.tool_catalog_json,
+         updated_at = excluded.updated_at`, workId, encrypted.encrypted, encrypted.iv, encrypted.tag, JSON.stringify(prepared.catalog), updatedAt);
+    }
+    getAgentToolDefinitions(workId) {
+        const row = this.settingsRow(workId);
+        if (!row)
+            return [];
+        const catalog = parseStoredCatalog(row.tool_catalog_json);
+        return catalog.map((tool) => ({
+            type: "function",
+            function: {
+                name: tool.modelToolName,
+                description: [
+                    `远程 MCP Server“${tool.serverName}”的工具“${tool.serverToolName}”。`,
+                    tool.description
+                ].filter(Boolean).join(" ").slice(0, 4_000),
+                parameters: tool.inputSchema
+            }
+        }));
+    }
+    getAgentToolNames(workId) {
+        return this.getAgentToolDefinitions(workId).flatMap((definition) => {
+            const fn = recordValue(definition.function);
+            return typeof fn?.name === "string" ? [fn.name] : [];
+        });
+    }
+    async callTool(workId, modelToolNameValue, args, signal) {
+        const row = this.settingsRow(workId);
+        if (!row)
+            throw new AppError(409, "MCP_TOOL_NOT_CONFIGURED", "当前作品没有配置远程 MCP 工具");
+        const catalog = parseStoredCatalog(row.tool_catalog_json);
+        const tool = catalog.find((item) => item.modelToolName === modelToolNameValue);
+        if (!tool)
+            throw new AppError(409, "MCP_TOOL_NOT_CONFIGURED", "远程 MCP 工具已经不可用，请重新打开对话");
+        const configuration = this.decryptConfiguration(row);
+        const server = configuration.mcpServers[tool.serverName];
+        if (!server)
+            throw new AppError(409, "MCP_SERVER_NOT_CONFIGURED", "远程 MCP Server 已从作品配置中移除");
+        let connected;
+        try {
+            connected = await this.connect(server, tool.transport, signal);
+        }
+        catch (error) {
+            throw new AppError(502, "MCP_SERVER_UNREACHABLE", `MCP Server“${tool.serverName}”无法连接：${safeErrorMessage(error, server)}`);
+        }
+        try {
+            const result = await connected.client.callTool({ name: tool.serverToolName, arguments: args }, { timeout: MCP_TOOL_CALL_TIMEOUT_MS, signal });
+            return { catalog: tool, result };
+        }
+        catch (error) {
+            throw new AppError(502, "MCP_TOOL_CALL_FAILED", `MCP 工具“${tool.serverName}/${tool.serverToolName}”调用失败：${safeErrorMessage(error, server)}`);
+        }
+        finally {
+            await connected.client.close().catch(() => undefined);
+        }
+    }
+}
+//# sourceMappingURL=remote-mcp.js.map

package/dist/remote-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-mcp.js","sourceRoot":"","sources":["../src/remote-mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,MAAM,EACN,kBAAkB,EAClB,6BAA6B,EAI9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC;AAE1C,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,4BAA4B,GAAG,GAAG,CAAC;AACzC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAClC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AACzC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAC7C,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAExC,MAAM,0BAA0B,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAU,CAAC;AAC9E,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,QAAQ;IACR,YAAY;IACZ,gBAAgB;IAChB,cAAc;IACd,MAAM;IACN,sBAAsB;IACtB,gBAAgB;IAChB,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/G,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACxC,IAAI,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;CAChF,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC;CACzE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAkCvF,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/G,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB;IACpD,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAC9C,OAAO,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC;AACrD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,UAAU,KAAK,eAAe;WAChC,UAAU,KAAK,qBAAqB;WACpC,UAAU,KAAK,QAAQ;WACvB,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;WAC5B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;WAC7B,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC;WAC1C,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,uBAAuB,CAAC,aAAqC;IACpE,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YACpG,UAAU;YACV;gBACE,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;gBAClE,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/E;SACF,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,aAAqC;IAClE,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YACpG,UAAU;YACV;gBACE,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;gBAClE,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;oBACxC,CAAC,CAAC;wBACE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;4BAChF,IAAI;4BACJ,iBAAiB,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK;yBAC3D,CAAC,CAAC;qBACJ;oBACH,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAiB;IAClD,OAAO,KAAK,CAAC,MAAM;SAChB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;SAClE,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAc,EACd,QAAiC,EACjC,sBAAsB,GAAG,KAAK;IAE9B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,UAAU,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YAC5F,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,IAAI,QAAQ,CAChB,GAAG,EACH,+BAA+B,EAC/B,cAAc,UAAU,SAAS,UAAU,8CAA8C,CAC1F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,QAAQ,CAChB,GAAG,EACH,oBAAoB,EACpB,2BAA2B,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACzC,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,2BAA2B,EAAE,YAAY,mBAAmB,eAAe,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,iBAAiB,GAAiD,EAAE,CAAC;IAC3E,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAClH,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,wBAAwB,EAAE,cAAc,UAAU,0BAA0B,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,QAAa,CAAC;QAClB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,wBAAwB,EAAE,cAAc,UAAU,eAAe,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC/F,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,EAAE,cAAc,UAAU,0BAA0B,CAAC,CAAC;QAC/G,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACtD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,2BAA2B,EAAE,cAAc,UAAU,oBAAoB,mBAAmB,EAAE,CAAC,CAAC;QAC1H,CAAC;QACD,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAU,CAAC;QAChD,MAAM,eAAe,GAA2B,EAAE,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACvD,IAAI,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uBAAuB,EAAE,cAAc,UAAU,gBAAgB,IAAI,GAAG,CAAC,CAAC;YACpG,CAAC;YACD,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC1C,IAAI,oBAAoB,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sBAAsB,EAAE,cAAc,UAAU,kBAAkB,IAAI,GAAG,CAAC,CAAC;YACrG,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,oBAAoB,EAAE,cAAc,UAAU,aAAa,IAAI,KAAK,CAAC,CAAC;YAChG,CAAC;YACD,IAAI,eAAe,KAAK,eAAe,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAC9F,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;qBACnF,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,cAAc,CAAC,CAAC;gBAClF,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,qBAAqB,EAAE,cAAc,UAAU,eAAe,IAAI,UAAU,CAAC,CAAC;gBACxG,CAAC;gBACD,eAAe,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,eAAe,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,iBAAiB,CAAC,UAAU,CAAC,GAAG;YAC9B,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE;YACxB,SAAS,EAAE,mBAAmB,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC;YAC/D,OAAO,EAAE,eAAe;SACzB,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC;IACxD,IAAI,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;QAC7F,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sBAAsB,EAAE,YAAY,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,aAAa,CAAC,UAAkB,EAAE,QAAgB;IACzD,MAAM,MAAM,GAAG,QAAQ;SACpB,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;SACjC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;SACxB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,UAAU,KAAK,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpG,OAAO,OAAO,MAAM,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,MAAoC;IAC5E,IAAI,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9D,IAAI,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,OAAO,gCAAgC,CAAC;IAC1C,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK;YAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC;AACnE,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB,EAAE,QAAgB,EAAE,KAAc;IACjF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,QAAQ,CAChB,GAAG,EACH,yBAAyB,EACzB,cAAc,UAAU,QAAQ,QAAQ,2BAA2B,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,6BAA6B,EAAE,CAAC;QAClE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,2BAA2B,EAAE,cAAc,UAAU,QAAQ,QAAQ,SAAS,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,OAAO,gBAAgB;IAER;IACA;IACA;IACA;IAJnB,YACmB,QAAkB,EAClB,KAAsB,EACtB,YAA0B,KAAK,EAC/B,mBAAoG;QAHpG,aAAQ,GAAR,QAAQ,CAAU;QAClB,UAAK,GAAL,KAAK,CAAiB;QACtB,cAAS,GAAT,SAAS,CAAsB;QAC/B,wBAAmB,GAAnB,mBAAmB,CAAiF;IACpH,CAAC;IAEI,WAAW,CAAC,MAAc;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAuB,mDAAmD,EAAE,MAAM,CAAC,CAAC;IAC9G,CAAC;IAEO,oBAAoB,CAAC,GAAyB;QACpD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;gBACnC,SAAS,EAAE,GAAG,CAAC,gBAAgB;gBAC/B,EAAE,EAAE,GAAG,CAAC,SAAS;gBACjB,GAAG,EAAE,GAAG,CAAC,UAAU;aACpB,CAAC,CAAC;YACH,OAAO,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAY,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACxF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE;gBAC/C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc;aAC5D,CAAC,CAAC;YACH,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uBAAuB,EAAE,0BAA0B,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,MAAc;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACnE,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO;gBACL,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;gBAC1B,OAAO,EAAE,EAAE;gBACX,cAAc,EAAE,CAAC;gBACjB,SAAS,EAAE,IAAI;aAChB,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC1D,OAAO;YACL,MAAM,EAAE,qBAAqB,CAAC,aAAa,CAAC;YAC5C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE;gBAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;gBACvE,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,mBAAmB,EAAE,MAAM,CAAC,SAAS;oBACrC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,MAAM,CAAC,SAAS;oBAClD,SAAS,EAAE,KAAK,CAAC,MAAM;oBACvB,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,IAAI,EAAE;iBAC7C,CAAC;YACJ,CAAC,CAAC;YACF,cAAc,EAAE,OAAO,CAAC,MAAM;YAC9B,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,MAAoC;QACtD,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjE,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBACvD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,kCAAkC,EAAE,oCAAoC,CAAC,CAAC;YACpG,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;YAC9B,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC9E,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC;YACrC,MAAM,WAAW,GAAgB;gBAC/B,GAAG,IAAI;gBACP,MAAM;gBACN,OAAO;gBACP,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI;aAC9E,CAAC;YACF,OAAO,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACzF,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAoC,EACpC,kBAAkD,EAClD,MAAoB;QAEpB,MAAM,UAAU,GAAyC,kBAAkB;YACzE,CAAC,CAAC,CAAC,kBAAkB,CAAC;YACtB,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM;gBAC3B,CAAC,CAAC,CAAC,iBAAiB,EAAE,KAAK,CAAC;gBAC5B,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzB,IAAI,SAAkB,CAAC;QACvB,KAAK,MAAM,aAAa,IAAI,UAAU,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,EAC3C,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CACzC,CAAC;YACF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,WAAW,GAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YAC7D,MAAM,SAAS,GAAc,aAAa,KAAK,KAAK;gBAClD,CAAC,CAAC,IAAI,kBAAkB,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;oBAC1C,KAAK,EAAE,WAAW;oBAClB,eAAe,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE;oBACvC,WAAW;iBACZ,CAAC;gBACJ,CAAC,CAAC,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;oBACrD,KAAK,EAAE,WAAW;oBAClB,WAAW;oBACX,mBAAmB,EAAE;wBACnB,wBAAwB,EAAE,GAAG;wBAC7B,oBAAoB,EAAE,KAAK;wBAC3B,2BAA2B,EAAE,GAAG;wBAChC,UAAU,EAAE,CAAC;qBACd;iBACF,CAAC,CAAC;YACP,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC7E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;gBAClB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,MAAM,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACpF,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,UAAkB,EAClB,MAAoC;QAEpC,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,QAAQ,CAChB,GAAG,EACH,4BAA4B,EAC5B,cAAc,UAAU,UAAU,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,SAA2D,CAAC;QAChE,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,QAAQ,CAChB,GAAG,EACH,wBAAwB,EACxB,cAAc,UAAU,sBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAgC,EAAE,CAAC;YAC9C,IAAI,MAA0B,CAAC;YAC/B,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,GAAG,CAAC;gBACF,SAAS,IAAI,CAAC,CAAC;gBACf,IAAI,SAAS,GAAG,sBAAsB,EAAE,CAAC;oBACvC,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,8BAA8B,EAAE,cAAc,UAAU,YAAY,CAAC,CAAC;gBAChG,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACpH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;wBACzC,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uBAAuB,EAAE,cAAc,UAAU,YAAY,CAAC,CAAC;oBACzF,CAAC;oBACD,IAAI,KAAK,CAAC,MAAM,IAAI,4BAA4B,EAAE,CAAC;wBACjD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,yBAAyB,EAAE,cAAc,UAAU,UAAU,4BAA4B,MAAM,CAAC,CAAC;oBAC3H,CAAC;oBACD,KAAK,CAAC,IAAI,CAAC;wBACT,UAAU;wBACV,cAAc,EAAE,IAAI,CAAC,IAAI;wBACzB,aAAa,EAAE,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC;wBACnD,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;wBAC3D,WAAW,EAAE,qBAAqB,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC;wBAC3E,SAAS,EAAE,SAAS,CAAC,SAAS;wBAC9B,aAAa,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,OAAO,CAAC;6BACrG,MAAM,CAAC,OAAO,CAAC;6BACf,IAAI,CAAC,GAAG,CAAC;6BACT,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;qBACjB,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;YAC3B,CAAC,QAAQ,MAAM,EAAE;YACjB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,qBAAqB,EAAE,cAAc,UAAU,kBAAkB,CAAC,CAAC;YAC7F,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,QAAQ;gBAAE,MAAM,KAAK,CAAC;YAC3C,MAAM,IAAI,QAAQ,CAChB,GAAG,EACH,kCAAkC,EAClC,cAAc,UAAU,aAAa,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CACvE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,KAAc;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,MAAM,aAAa,GAAG,2BAA2B,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACnE,MAAM,OAAO,GAAgC,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACtE,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBAC3D,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,yBAAyB,EAAE,aAAa,iBAAiB,aAAa,CAAC,CAAC;YAClG,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;IACpC,CAAC;IAED,eAAe,CAAC,MAAc,EAAE,QAAmC,EAAE,SAAiB;QACpF,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,iDAAiD,EAAE,MAAM,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACtG,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf;;;;;;;;0CAQoC,EACpC,MAAM,EACN,SAAS,CAAC,SAAS,EACnB,SAAS,CAAC,EAAE,EACZ,SAAS,CAAC,GAAG,EACb,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAChC,SAAS,CACV,CAAC;IACJ,CAAC;IAED,uBAAuB,CAAC,MAAc;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5B,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,aAAa;gBACxB,WAAW,EAAE;oBACX,iBAAiB,IAAI,CAAC,UAAU,QAAQ,IAAI,CAAC,cAAc,IAAI;oBAC/D,IAAI,CAAC,WAAW;iBACjB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;gBAC3C,UAAU,EAAE,IAAI,CAAC,WAAW;aAC7B;SACF,CAAC,CAAC,CAAC;IACN,CAAC;IAED,iBAAiB,CAAC,MAAc;QAC9B,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;YACjE,MAAM,EAAE,GAAG,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC5C,OAAO,OAAO,EAAE,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,MAAc,EACd,kBAA0B,EAC1B,IAA6B,EAC7B,MAAoB;QAEpB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,yBAAyB,EAAE,mBAAmB,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,KAAK,kBAAkB,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,yBAAyB,EAAE,wBAAwB,CAAC,CAAC;QACxF,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,2BAA2B,EAAE,yBAAyB,CAAC,CAAC;QAC7F,IAAI,SAA2D,CAAC;QAChE,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,QAAQ,CAChB,GAAG,EACH,wBAAwB,EACxB,cAAc,IAAI,CAAC,UAAU,SAAS,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CACxE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,QAAQ,CAC5C,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,EAC9C,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,CAC9C,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,QAAQ,CAChB,GAAG,EACH,sBAAsB,EACtB,UAAU,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,cAAc,SAAS,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAC3F,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;CACF"}

package/dist/security.js

@@ -239,9 +239,13 @@ function expensiveApiKind(method, path) {
         return "export";
     if (method === "GET" && /^\/api\/works\/[^/]+\/search$/u.test(path))
         return "search";
+    if (method === "PUT" && /^\/api\/works\/[^/]+\/ai-settings\/mcp-servers$/u.test(path))
+        return "ai";
     if (method !== "POST")
         return null;
     if (/^\/api\/works\/[^/]+\/(?:suggestions|chat\/stream|tasks)(?:\/|$)/u.test(path)
+        || /^\/api\/works\/[^/]+\/semantic-search$/u.test(path)
+        || /^\/api\/works\/[^/]+\/ai-settings\/semantic-search-index\/(?:sync|rebuild)$/u.test(path)
         || /^\/api\/suggestions\/[^/]+\/guard$/u.test(path)
         || /^\/api\/ai-conversations\/[^/]+\/(?:compact|context\/prepare)$/u.test(path)
         || /^\/api\/tasks\/[^/]+\/(?:run|rerun|cancel|relationship-changes\/apply|character-extraction\/apply)$/u.test(path)