@numa-tech/numa 1.16.1 → 1.17.0

package/dist/mcp-gateway/install.d.ts

@@ -0,0 +1,22 @@
+import { type McpInstallOptions, type McpInstallerDependencies } from "../ai-registry/mcp-installer.js";
+import { type GatewayBinding, type GatewayOptions } from "./profile.js";
+export interface GatewayInstallOptions extends GatewayOptions {
+    agent: string;
+    scope?: string;
+    transport?: string;
+    customConfig?: string;
+    force?: boolean;
+    name?: string;
+}
+export declare function gatewayInstallPlan(binding: GatewayBinding, service: string, options: GatewayInstallOptions): {
+    name: string;
+    endpoint: string;
+    profileRevision: number;
+    definition: {
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+    };
+    options: McpInstallOptions;
+};
+export declare function installGatewayPlan(plan: ReturnType<typeof gatewayInstallPlan>, dependencies?: McpInstallerDependencies): Promise<import("../ai-registry/mcp-installer.js").McpInstallResult>;

package/dist/mcp-gateway/install.js

@@ -0,0 +1,36 @@
+import { resolve } from "node:path";
+import { installMcpClientDefinition } from "../ai-registry/mcp-installer.js";
+import { gatewayError } from "./profile.js";
+import { serviceEndpoint } from "./runtime.js";
+export function gatewayInstallPlan(binding, service, options) {
+    serviceEndpoint(binding, service);
+    if (binding.metadata.publishedEndpoints?.find(e => e.serviceId === service)?.transport === "sse")
+        throw gatewayError("Direct SSE providers require a Streamable HTTP Router endpoint before installation.");
+    const agent = options.agent;
+    if (!["chatgpt", "codex", "claude", "cursor", "workbuddy", "openclaw", "custom"].includes(agent))
+        throw gatewayError("Unsupported Agent adapter.");
+    if (agent === "chatgpt" || options.transport === "remote")
+        throw gatewayError("This gateway profile uses a stdio authentication bridge. Remote OAuth installation is not available for this MCP gateway.", "mcp_gateway_remote_oauth_unavailable");
+    if (options.transport && !["auto", "bridge"].includes(options.transport))
+        throw gatewayError("Transport must be auto or bridge.");
+    const scope = options.scope ?? (["codex", "openclaw"].includes(agent) ? "user" : "project");
+    if (scope !== "user" && scope !== "project")
+        throw gatewayError("Scope must be project or user.");
+    if (["codex", "openclaw"].includes(agent) && scope !== "user")
+        throw gatewayError(`${agent} MCP registration requires user scope.`);
+    const name = options.name ?? `${binding.metadata.namespaceKey}-${service}`;
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,119}$/u.test(name))
+        throw gatewayError("Choose a valid Agent registration alias with --name (maximum 120 characters).");
+    const env = { NUMA_PROFILE_URL: binding.profileUrl };
+    const credentialFile = options.credentialFile || process.env.NUMA_MCP_CREDENTIAL_FILE;
+    if (credentialFile)
+        env.NUMA_MCP_CREDENTIAL_FILE = resolve(credentialFile);
+    return { name, endpoint: serviceEndpoint(binding, service), profileRevision: binding.profileRevision,
+        definition: { command: "numa", args: ["mcp", "bridge", service, "--namespace", binding.metadata.namespaceKey,
+                "--instance", binding.metadata.instanceCode, "--gateway", binding.serviceKey, "--profile-id", binding.profileId, "--env-id", binding.metadata.envId, "--gateway-id", binding.metadata.gatewayId, "--endpoint", serviceEndpoint(binding, service)], env },
+        options: { agent, scope, workspace: options.workspace, customConfig: options.customConfig, force: options.force } };
+}
+export async function installGatewayPlan(plan, dependencies = {}) {
+    return installMcpClientDefinition(plan.name, plan.definition, plan.options, dependencies);
+}
+//# sourceMappingURL=install.js.map

package/dist/mcp-gateway/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/mcp-gateway/install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,0BAA0B,EAA8E,MAAM,iCAAiC,CAAC;AACzJ,OAAO,EAAE,YAAY,EAA4C,MAAM,cAAc,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAK/C,MAAM,UAAU,kBAAkB,CAAC,OAAuB,EAAE,OAAe,EAAE,OAA8B;IACzG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClC,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,SAAS,KAAK,KAAK;QAAE,MAAM,YAAY,CAAC,qFAAqF,CAAC,CAAC;IAC5M,MAAM,KAAK,GAAG,OAAO,CAAC,KAAuB,CAAC;IAC9C,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,YAAY,CAAC,4BAA4B,CAAC,CAAC;IACnJ,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ;QAAE,MAAM,YAAY,CAAC,2HAA2H,EAAE,sCAAsC,CAAC,CAAC;IACnP,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,YAAY,CAAC,mCAAmC,CAAC,CAAC;IAClI,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5F,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,YAAY,CAAC,gCAAgC,CAAC,CAAC;IAClG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,MAAM;QAAE,MAAM,YAAY,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IACpI,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,IAAI,OAAO,EAAE,CAAC;IAC3E,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,YAAY,CAAC,+EAA+E,CAAC,CAAC;IAC3J,MAAM,GAAG,GAA2B,EAAE,gBAAgB,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;IAC7E,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACtF,IAAI,cAAc;QAAE,GAAG,CAAC,wBAAwB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe;QAClG,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAC1G,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,cAAc,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE;QAC1P,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAuB,EAAE,CAAC;AAC7I,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAA2C,EAAE,YAAY,GAA6B,EAAE;IAC/H,OAAO,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;AAC5F,CAAC"}

package/dist/mcp-gateway/profile.d.ts

@@ -0,0 +1,61 @@
+import { z } from "zod";
+import { type AuthConfig } from "../config.js";
+import { type ResolvedPlatformProfile } from "../platform-profile.js";
+import { AiRegistryError } from "../ai-registry/errors.js";
+declare const Metadata: z.ZodObject<{
+    namespaceKey: z.ZodString;
+    instanceCode: z.ZodString;
+    nacosNamespaceId: z.ZodString;
+    envId: z.ZodString;
+    clusterId: z.ZodString;
+    gatewayId: z.ZodString;
+    default: z.ZodOptional<z.ZodBoolean>;
+    publishedEndpoints: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        serviceId: z.ZodString;
+        url: z.ZodString;
+        transport: z.ZodEnum<{
+            sse: "sse";
+            "streamable-http": "streamable-http";
+        }>;
+        applicationId: z.ZodString;
+        gatewayBindingId: z.ZodString;
+        bindingVersion: z.ZodNumber;
+        roleClientId: z.ZodString;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export interface GatewayOptions {
+    namespace?: string;
+    instance?: string;
+    gateway?: string;
+    workspace?: string;
+    credentialFile?: string;
+    profileId?: string;
+    endpoint?: string;
+    envId?: string;
+    gatewayId?: string;
+}
+export interface GatewayBinding {
+    serviceKey: string;
+    profileId: string;
+    profileUrl: string;
+    profileRevision: number;
+    tenantId: string;
+    baseUrl: string;
+    resource: string;
+    audience: string;
+    roleClientId: string;
+    authority: {
+        issuer: string;
+        discoveryUrl: string;
+        clientId: string;
+        scopes: string[];
+    };
+    metadata: z.infer<typeof Metadata>;
+}
+export declare function gatewayError(message: string, code?: string): AiRegistryError;
+export declare function hasGatewayProfiles(): boolean;
+export declare function publicUrl(value: string): URL;
+export declare function gatewayProfiles(profile?: ResolvedPlatformProfile | undefined): GatewayBinding[];
+export declare function resolveMcpGateway(options: GatewayOptions): Promise<GatewayBinding>;
+export declare function gatewayAuthConfig(binding: GatewayBinding, options: GatewayOptions): Promise<AuthConfig>;
+export {};

package/dist/mcp-gateway/profile.js

@@ -0,0 +1,155 @@
+import { createHash } from "node:crypto";
+import { lstat, readFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { z } from "zod";
+import { appConfigDirectory, loadAppConfig } from "../app-config.js";
+import { DEFAULT_REDIRECT_HOST, DEFAULT_REDIRECT_PORT } from "../config.js";
+import { currentPlatformProfile } from "../platform-profile.js";
+import { readRegistryManifest } from "../ai-registry/workspace.js";
+import { AiRegistryError } from "../ai-registry/errors.js";
+const Identifier = z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._-]{0,159}$/u);
+const PublishedEndpoint = z.object({
+    serviceId: z.string().regex(/^[a-z0-9][a-z0-9-]{0,62}$/u), url: z.string(),
+    transport: z.enum(["streamable-http", "sse"]), applicationId: Identifier, gatewayBindingId: Identifier,
+    bindingVersion: z.number().int().positive(), roleClientId: Identifier
+}).strict();
+const Metadata = z.object({
+    namespaceKey: Identifier, instanceCode: Identifier, nacosNamespaceId: Identifier,
+    envId: Identifier, clusterId: Identifier, gatewayId: Identifier, default: z.boolean().optional(), publishedEndpoints: z.array(PublishedEndpoint).max(256).optional()
+}).strict();
+export function gatewayError(message, code = "mcp_gateway_invalid") {
+    return new AiRegistryError(message, code);
+}
+export function hasGatewayProfiles() {
+    return Object.values(currentPlatformProfile()?.services ?? {}).some(service => {
+        const configuration = service.configuration;
+        return configuration && Object.hasOwn(configuration, "mcpGateway");
+    });
+}
+export function publicUrl(value) {
+    try {
+        const url = new URL(value);
+        const local = ["localhost", "127.0.0.1", "::1", "[::1]"].includes(url.hostname) || url.hostname.endsWith(".localhost");
+        if (url.username || url.password || url.search || url.hash || (url.protocol !== "https:" && !(url.protocol === "http:" && local)))
+            throw new Error();
+        return url;
+    }
+    catch {
+        throw gatewayError("MCP gateway metadata requires HTTPS URLs without credentials, query or fragment (loopback development excepted).");
+    }
+}
+export function gatewayProfiles(profile = currentPlatformProfile()) {
+    if (!profile)
+        throw gatewayError("A platform config profile is required for MCP gateways.", "mcp_gateway_profile_required");
+    if (profile.stale)
+        throw gatewayError("The platform profile is stale; refresh it before gateway invocation or installation.", "mcp_gateway_profile_stale");
+    const result = [];
+    for (const [serviceKey, raw] of Object.entries(profile.services)) {
+        const service = raw;
+        if (!service.configuration || !Object.hasOwn(service.configuration, "mcpGateway"))
+            continue;
+        const metadata = Metadata.safeParse(service.configuration.mcpGateway);
+        if (!metadata.success)
+            throw gatewayError("Invalid MCP gateway namespace metadata in platform profile.");
+        const authority = profile.authorities[service.authority];
+        if (!authority || !authority.clientId || !authority.scopes.includes("openid"))
+            throw gatewayError("MCP gateway has no valid authority.");
+        const base = publicUrl(service.baseUrl).toString().replace(/\/+$/u, "");
+        if (!base.endsWith("/mcp-gw") || !service.audience || !service.roleClientId)
+            throw gatewayError("MCP gateway baseUrl must identify the /mcp-gw application and its audience.");
+        publicUrl(service.resource);
+        const seenEndpoints = new Set();
+        for (const endpoint of metadata.data.publishedEndpoints ?? []) {
+            const u = publicUrl(endpoint.url), b = new URL(base);
+            const gatewayPrefix = b.pathname.slice(0, -"/mcp-gw".length);
+            if (u.toString() !== endpoint.url || u.origin !== b.origin || !u.pathname.startsWith(gatewayPrefix + "/") || /[%\\]/u.test(endpoint.url) || seenEndpoints.has(endpoint.serviceId))
+                throw gatewayError("Invalid or duplicate published MCP endpoint in selected gateway.");
+            seenEndpoints.add(endpoint.serviceId);
+        }
+        const issuer = publicUrl(authority.issuer).toString().replace(/\/+$/u, "");
+        if (publicUrl(authority.discoveryUrl).toString() !== `${issuer}/.well-known/openid-configuration`)
+            throw gatewayError("MCP gateway discovery must belong to its issuer.");
+        result.push({ serviceKey, profileId: profile.profileId, profileUrl: profile.sourceUrl, profileRevision: profile.revision,
+            tenantId: profile.tenant.id, baseUrl: base, resource: service.resource, audience: service.audience,
+            roleClientId: service.roleClientId, authority: { ...authority, issuer }, metadata: metadata.data });
+    }
+    const environments = new Map();
+    const defaults = new Set();
+    for (const binding of result) {
+        const m = binding.metadata;
+        const signature = JSON.stringify([m.clusterId, m.namespaceKey, m.instanceCode, m.nacosNamespaceId, binding.authority.issuer]);
+        if (environments.has(m.envId) && environments.get(m.envId) !== signature)
+            throw gatewayError("MCP gateways disagree on the environment namespace or issuer.");
+        environments.set(m.envId, signature);
+        if (m.default) {
+            const key = `${m.namespaceKey}\0${m.instanceCode}`;
+            if (defaults.has(key))
+                throw gatewayError("Multiple default MCP gateways are configured for one namespace instance.");
+            defaults.add(key);
+        }
+    }
+    return result;
+}
+export async function resolveMcpGateway(options) {
+    const bindings = gatewayProfiles();
+    const profile = currentPlatformProfile();
+    if (options.profileId && options.profileId !== profile.profileId)
+        throw gatewayError("Installed MCP profile identity changed; reinstall after reviewing the new profile.");
+    const explicit = options.namespace?.trim();
+    const project = explicit ? undefined : await readRegistryManifest(options.workspace, false);
+    const user = await loadAppConfig();
+    const profileDefault = profile.services.aiRegistry?.configuration?.defaultNamespaceKey;
+    const namespace = explicit || project?.manifest.namespaceKey || user.aiRegistryDefaultNamespaceKey || profileDefault;
+    if (!namespace)
+        throw gatewayError("Select a namespace with --namespace, project manifest, user default or profile default.", "mcp_gateway_namespace_required");
+    const instance = options.instance || (!explicit ? project?.manifest.instanceCode : undefined);
+    let candidates = bindings.filter(b => b.metadata.namespaceKey === namespace && (!instance || b.metadata.instanceCode === instance)
+        && (!options.gateway || b.serviceKey === options.gateway));
+    if (!candidates.length)
+        throw gatewayError("The requested namespace/gateway is not configured in this platform profile.", "mcp_gateway_not_configured");
+    if (new Set(candidates.map(b => b.metadata.instanceCode)).size > 1)
+        throw gatewayError("Namespace is ambiguous; select --instance.", "mcp_gateway_ambiguous");
+    if (candidates.length > 1) {
+        const defaults = candidates.filter(b => b.metadata.default);
+        if (defaults.length === 1)
+            candidates = defaults;
+    }
+    if (candidates.length !== 1)
+        throw gatewayError("Namespace gateway is ambiguous; select --gateway <profile-service-key>.", "mcp_gateway_ambiguous");
+    const selected = candidates[0];
+    if ((options.envId && selected.metadata.envId !== options.envId) || (options.gatewayId && selected.metadata.gatewayId !== options.gatewayId))
+        throw gatewayError("Installed MCP environment or gateway identity changed; reinstall after review.");
+    return selected;
+}
+export async function gatewayAuthConfig(binding, options) {
+    let clientId = binding.authority.clientId;
+    let clientSecret;
+    const file = options.credentialFile || process.env.NUMA_MCP_CREDENTIAL_FILE;
+    if (file) {
+        try {
+            const info = await lstat(resolve(file));
+            if (!info.isFile() || info.isSymbolicLink() || info.size > 65536 || (process.platform !== "win32" && (info.mode & 0o077)))
+                throw new Error();
+            const value = JSON.parse(await readFile(resolve(file), "utf8"));
+            if (value.issuer !== binding.authority.issuer)
+                throw gatewayError("Machine credential issuer does not match the selected gateway.");
+            if (typeof value.client_id !== "string" || !value.client_id || typeof value.client_secret !== "string" || !value.client_secret)
+                throw new Error();
+            clientId = value.client_id;
+            clientSecret = value.client_secret;
+        }
+        catch (error) {
+            if (error instanceof AiRegistryError)
+                throw error;
+            throw gatewayError("Cannot load the private MCP machine credential file; use a regular 0600 platform-delivered file.", "mcp_gateway_credential_invalid");
+        }
+    }
+    const key = createHash("sha256").update(JSON.stringify([binding.profileId, binding.tenantId, binding.authority.issuer, clientId, binding.audience])).digest("hex").slice(0, 24);
+    return { authenticationMode: clientSecret ? "client_credentials" : "browser", discoveryUrl: binding.authority.discoveryUrl,
+        issuerUrl: binding.authority.issuer, clientId, clientSecret, resourceAudience: binding.audience,
+        profileTenantId: binding.tenantId, scope: clientSecret ? "openid" : binding.authority.scopes.join(" "),
+        tokenFile: join(appConfigDirectory(), `mcp-token-${key}.json`), redirectHost: DEFAULT_REDIRECT_HOST,
+        redirectPort: DEFAULT_REDIRECT_PORT, redirectPath: "/callback", openBrowser: process.env.NUMA_AUTH_OPEN_BROWSER !== "false",
+        backendBaseUrl: binding.baseUrl, allowAbsoluteBackendUrls: false };
+}
+//# sourceMappingURL=profile.js.map

package/dist/mcp-gateway/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../src/mcp-gateway/profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAmB,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,sBAAsB,EAAgC,MAAM,wBAAwB,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;AAC3E,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1E,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU;IACtG,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,UAAU;CACtE,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU;IAChF,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACrK,CAAC,CAAC,MAAM,EAAE,CAAC;AAWZ,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,IAAI,GAAG,qBAAqB;IACxE,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAC5E,MAAM,aAAa,GAAI,OAA+B,CAAC,aAAa,CAAC;QACrE,OAAO,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvH,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACrJ,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,YAAY,CAAC,kHAAkH,CAAC,CAAC;IAAC,CAAC;AACrJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAO,GAAG,sBAAsB,EAAE;IAChE,IAAI,CAAC,OAAO;QAAE,MAAM,YAAY,CAAC,yDAAyD,EAAE,8BAA8B,CAAC,CAAC;IAC5H,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,YAAY,CAAC,sFAAsF,EAAE,2BAA2B,CAAC,CAAC;IAC3J,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,GAA0B,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,YAAY,CAAC;YAAE,SAAS;QAC5F,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,MAAM,YAAY,CAAC,6DAA6D,CAAC,CAAC;QACzG,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,MAAM,YAAY,CAAC,qCAAqC,CAAC,CAAC;QACzI,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY;YAAE,MAAM,YAAY,CAAC,6EAA6E,CAAC,CAAC;QAC/K,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5B,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;YAC9D,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,aAAa,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC7D,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,GAAG,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,MAAM,YAAY,CAAC,kEAAkE,CAAC,CAAC;YAC1Q,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3E,IAAI,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,KAAK,GAAG,MAAM,mCAAmC;YAAE,MAAM,YAAY,CAAC,kDAAkD,CAAC,CAAC;QAC1K,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ;YACtH,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAClG,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,gBAAgB,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9H,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,MAAM,YAAY,CAAC,+DAA+D,CAAC,CAAC;QAC9J,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC;YACnD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,YAAY,CAAC,0EAA0E,CAAC,CAAC;YACtH,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAuB;IAC7D,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,sBAAsB,EAAG,CAAC;IAC1C,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;QAAE,MAAM,YAAY,CAAC,oFAAoF,CAAC,CAAC;IAC3K,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;IACnC,MAAM,cAAc,GAAI,OAAO,CAAC,QAAQ,CAAC,UAAkB,EAAE,aAAa,EAAE,mBAAmB,CAAC;IAChG,MAAM,SAAS,GAAG,QAAQ,IAAI,OAAO,EAAE,QAAQ,CAAC,YAAY,IAAI,IAAI,CAAC,6BAA6B,IAAI,cAAc,CAAC;IACrH,IAAI,CAAC,SAAS;QAAE,MAAM,YAAY,CAAC,yFAAyF,EAAE,gCAAgC,CAAC,CAAC;IAChK,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9F,IAAI,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC;WAC7H,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,MAAM,YAAY,CAAC,6EAA6E,EAAE,4BAA4B,CAAC,CAAC;IACxJ,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QAAE,MAAM,YAAY,CAAC,4CAA4C,EAAE,uBAAuB,CAAC,CAAC;IAC9J,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,UAAU,GAAG,QAAQ,CAAC;IACnD,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,YAAY,CAAC,yEAAyE,EAAE,uBAAuB,CAAC,CAAC;IACpJ,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IAChC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,YAAY,CAAC,gFAAgF,CAAC,CAAC;IACnP,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAuB,EAAE,OAAuB;IACtF,IAAI,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC;IAC1C,IAAI,YAAgC,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAC5E,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YAC7I,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAChE,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,MAAM;gBAAE,MAAM,YAAY,CAAC,gEAAgE,CAAC,CAAC;YACpI,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YAClJ,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;YAAC,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe;gBAAE,MAAM,KAAK,CAAC;YAClD,MAAM,YAAY,CAAC,kGAAkG,EAAE,gCAAgC,CAAC,CAAC;QAC3J,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChL,OAAO,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,YAAY;QACxH,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,OAAO,CAAC,QAAQ;QAC/F,eAAe,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACtG,SAAS,EAAE,IAAI,CAAC,kBAAkB,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,EAAE,YAAY,EAAE,qBAAqB;QACnG,YAAY,EAAE,qBAAqB,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,OAAO;QAC3H,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC;AACvE,CAAC"}

package/dist/mcp-gateway/runtime.d.ts

@@ -0,0 +1,141 @@
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import type { AuthConfig } from "../config.js";
+import { type KeycloakFetchDependencies } from "../oauth.js";
+import { type GatewayBinding } from "./profile.js";
+export type RuntimeDependencies = KeycloakFetchDependencies & {
+    timeoutMs?: number;
+};
+export declare function serviceEndpoint(binding: GatewayBinding, service: string): string;
+export declare function gatewayFetch(binding: GatewayBinding, auth: AuthConfig, dependencies?: RuntimeDependencies, exactEndpoint?: string): typeof fetch;
+export declare function gatewayTransport(binding: GatewayBinding, auth: AuthConfig, service: string, dependencies?: RuntimeDependencies): StreamableHTTPClientTransport;
+export declare function listGatewayTools(binding: GatewayBinding, auth: AuthConfig, service: string, dependencies?: RuntimeDependencies): Promise<{
+    tools: {
+        inputSchema: {
+            [x: string]: unknown;
+            type: "object";
+            properties?: Record<string, object> | undefined;
+            required?: string[] | undefined;
+        };
+        name: string;
+        description?: string | undefined;
+        outputSchema?: {
+            [x: string]: unknown;
+            type: "object";
+            properties?: Record<string, object> | undefined;
+            required?: string[] | undefined;
+        } | undefined;
+        annotations?: {
+            title?: string | undefined;
+            readOnlyHint?: boolean | undefined;
+            destructiveHint?: boolean | undefined;
+            idempotentHint?: boolean | undefined;
+            openWorldHint?: boolean | undefined;
+        } | undefined;
+        execution?: {
+            taskSupport?: "optional" | "required" | "forbidden" | undefined;
+        } | undefined;
+        _meta?: Record<string, unknown> | undefined;
+        icons?: {
+            src: string;
+            mimeType?: string | undefined;
+            sizes?: string[] | undefined;
+            theme?: "light" | "dark" | undefined;
+        }[] | undefined;
+        title?: string | undefined;
+    }[];
+}>;
+export declare function callGatewayTool(binding: GatewayBinding, auth: AuthConfig, service: string, tool: string, argumentsValue: Record<string, unknown>, dependencies?: RuntimeDependencies): Promise<{
+    [x: string]: unknown;
+    content: ({
+        type: "text";
+        text: string;
+        annotations?: {
+            audience?: ("user" | "assistant")[] | undefined;
+            priority?: number | undefined;
+            lastModified?: string | undefined;
+        } | undefined;
+        _meta?: Record<string, unknown> | undefined;
+    } | {
+        type: "image";
+        data: string;
+        mimeType: string;
+        annotations?: {
+            audience?: ("user" | "assistant")[] | undefined;
+            priority?: number | undefined;
+            lastModified?: string | undefined;
+        } | undefined;
+        _meta?: Record<string, unknown> | undefined;
+    } | {
+        type: "audio";
+        data: string;
+        mimeType: string;
+        annotations?: {
+            audience?: ("user" | "assistant")[] | undefined;
+            priority?: number | undefined;
+            lastModified?: string | undefined;
+        } | undefined;
+        _meta?: Record<string, unknown> | undefined;
+    } | {
+        type: "resource";
+        resource: {
+            uri: string;
+            text: string;
+            mimeType?: string | undefined;
+            _meta?: Record<string, unknown> | undefined;
+        } | {
+            uri: string;
+            blob: string;
+            mimeType?: string | undefined;
+            _meta?: Record<string, unknown> | undefined;
+        };
+        annotations?: {
+            audience?: ("user" | "assistant")[] | undefined;
+            priority?: number | undefined;
+            lastModified?: string | undefined;
+        } | undefined;
+        _meta?: Record<string, unknown> | undefined;
+    } | {
+        uri: string;
+        name: string;
+        type: "resource_link";
+        description?: string | undefined;
+        mimeType?: string | undefined;
+        size?: number | undefined;
+        annotations?: {
+            audience?: ("user" | "assistant")[] | undefined;
+            priority?: number | undefined;
+            lastModified?: string | undefined;
+        } | undefined;
+        _meta?: {
+            [x: string]: unknown;
+        } | undefined;
+        icons?: {
+            src: string;
+            mimeType?: string | undefined;
+            sizes?: string[] | undefined;
+            theme?: "light" | "dark" | undefined;
+        }[] | undefined;
+        title?: string | undefined;
+    })[];
+    _meta?: {
+        [x: string]: unknown;
+        progressToken?: string | number | undefined;
+        "io.modelcontextprotocol/related-task"?: {
+            taskId: string;
+        } | undefined;
+    } | undefined;
+    structuredContent?: Record<string, unknown> | undefined;
+    isError?: boolean | undefined;
+} | {
+    [x: string]: unknown;
+    toolResult: unknown;
+    _meta?: {
+        [x: string]: unknown;
+        progressToken?: string | number | undefined;
+        "io.modelcontextprotocol/related-task"?: {
+            taskId: string;
+        } | undefined;
+    } | undefined;
+}>;
+export declare function gatewayCatalog(binding: GatewayBinding, auth: AuthConfig, service?: string, dependencies?: RuntimeDependencies): Promise<Record<string, any>>;
+export declare function runGatewayBridge(binding: GatewayBinding, auth: AuthConfig, service: string): Promise<void>;

package/dist/mcp-gateway/runtime.js

@@ -0,0 +1,148 @@
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { PACKAGE_VERSION } from "../branding.js";
+import { fetchWithKeycloakIdentity } from "../oauth.js";
+import { bridgeMcpTransports } from "../ai-registry/bridge.js";
+import { AiRegistryError } from "../ai-registry/errors.js";
+import { gatewayError } from "./profile.js";
+const MAX_BYTES = 4 * 1024 * 1024;
+export function serviceEndpoint(binding, service) {
+    if (service === "@catalog")
+        return binding.baseUrl + "/catalog/mcp" + (binding.metadata.publishedEndpoints !== undefined ? `?gatewayId=${encodeURIComponent(binding.metadata.gatewayId)}` : "");
+    if (!/^[a-z0-9][a-z0-9-]{0,62}$/u.test(service))
+        throw gatewayError("Invalid MCP service name.");
+    if (binding.metadata.publishedEndpoints !== undefined) {
+        const endpoint = binding.metadata.publishedEndpoints.find(e => e.serviceId === service);
+        if (!endpoint)
+            throw gatewayError("MCP service has no published endpoint in this gateway profile.");
+        return endpoint.url;
+    }
+    return `${binding.baseUrl}/services/${service}/mcp`;
+}
+export function gatewayFetch(binding, auth, dependencies = {}, exactEndpoint) {
+    return async (input, init = {}) => {
+        const url = new URL(typeof input === "string" || input instanceof URL ? input : input.url);
+        const base = new URL(binding.baseUrl);
+        const catalogPath = base.pathname + "/api/v1/catalog";
+        const catalogRequest = url.pathname === catalogPath || /^\/[a-z0-9][a-z0-9-]{0,62}$/u.test(url.pathname.slice(catalogPath.length)) && url.pathname.startsWith(catalogPath + "/");
+        const validQuery = !url.search || (catalogRequest || url.pathname === base.pathname + "/catalog/mcp") && [...url.searchParams.keys()].every(k => k === "gatewayId") && url.searchParams.getAll("gatewayId").length === 1 && url.searchParams.get("gatewayId") === binding.metadata.gatewayId;
+        const allowedPath = exactEndpoint ? url.origin + url.pathname === new URL(exactEndpoint).origin + new URL(exactEndpoint).pathname && url.search === new URL(exactEndpoint).search : catalogRequest || url.pathname.startsWith(base.pathname + "/");
+        if (url.origin !== base.origin || !allowedPath || url.username || url.password || !validQuery || url.hash) {
+            throw gatewayError("MCP request escaped the selected gateway application.");
+        }
+        const timeout = AbortSignal.timeout(dependencies.timeoutMs ?? 60_000);
+        const signal = init.signal ? AbortSignal.any([init.signal, timeout]) : timeout;
+        const response = await fetchWithKeycloakIdentity(auth, url.toString(), () => ({ ...init, signal, redirect: "manual", headers: new Headers(init.headers) }), {
+            ...dependencies, retryUnauthorized: false
+        });
+        if (response.status >= 300 && response.status < 400) {
+            await response.body?.cancel();
+            throw gatewayError("MCP gateway redirects are refused.");
+        }
+        if (Number(response.headers.get("content-length")) > MAX_BYTES) {
+            await response.body?.cancel();
+            throw gatewayError("MCP gateway response exceeds the size limit.");
+        }
+        if (!response.body)
+            return response;
+        let size = 0;
+        const bounded = response.body.pipeThrough(new TransformStream({
+            transform(chunk, controller) {
+                size += chunk.byteLength;
+                if (size > MAX_BYTES)
+                    throw gatewayError("MCP gateway response exceeds the size limit.");
+                controller.enqueue(chunk);
+            }
+        }));
+        return new Response(bounded, { status: response.status, statusText: response.statusText, headers: response.headers });
+    };
+}
+export function gatewayTransport(binding, auth, service, dependencies = {}) {
+    if (binding.metadata.publishedEndpoints?.find(e => e.serviceId === service)?.transport === "sse")
+        throw gatewayError("Direct SSE providers are not supported by this bridge; publish a Streamable HTTP Router endpoint.");
+    return new StreamableHTTPClientTransport(new URL(serviceEndpoint(binding, service)), { fetch: gatewayFetch(binding, auth, dependencies, serviceEndpoint(binding, service)) });
+}
+function safeError(error) {
+    if (error instanceof AiRegistryError)
+        return error;
+    const code = error?.code;
+    const status = error?.status ?? (typeof code === "number" && code >= 400 && code <= 599 ? code : undefined);
+    if (status === 401 || status === 403)
+        return new AiRegistryError(`MCP gateway access denied (HTTP ${status}).`, "mcp_gateway_forbidden", status);
+    if (typeof code === "string" && /login|auth|token/iu.test(code))
+        return gatewayError("MCP identity is unavailable; run numa mcp login for the selected namespace or supply its machine credential file.", "mcp_gateway_login_required");
+    return gatewayError("MCP gateway request failed; check namespace identity, connectivity and service state.", "mcp_gateway_request_failed");
+}
+async function withClient(binding, auth, service, dependencies, operation) {
+    const client = new Client({ name: "numa-mcp-gateway", version: PACKAGE_VERSION });
+    let timer;
+    try {
+        return await Promise.race([
+            (async () => { await client.connect(gatewayTransport(binding, auth, service, dependencies)); return operation(client); })(),
+            new Promise((_resolve, reject) => { timer = setTimeout(() => reject(gatewayError("MCP operation timed out.", "mcp_gateway_timeout")), dependencies.timeoutMs ?? 60_000); })
+        ]);
+    }
+    catch (error) {
+        throw safeError(error);
+    }
+    finally {
+        clearTimeout(timer);
+        await client.close().catch(() => undefined);
+    }
+}
+export async function listGatewayTools(binding, auth, service, dependencies = {}) {
+    return withClient(binding, auth, service, dependencies, async (client) => {
+        const tools = [];
+        let cursor;
+        const seen = new Set();
+        for (let page = 0; page < 32; page++) {
+            const result = await client.listTools(cursor ? { cursor } : undefined);
+            tools.push(...result.tools);
+            if (tools.length > 4096)
+                throw gatewayError("Too many MCP tools.");
+            cursor = result.nextCursor;
+            if (!cursor)
+                return { tools };
+            if (seen.has(cursor))
+                throw gatewayError("MCP tools pagination repeated a cursor.");
+            seen.add(cursor);
+        }
+        throw gatewayError("MCP tools pagination exceeded its limit.");
+    });
+}
+export async function callGatewayTool(binding, auth, service, tool, argumentsValue, dependencies = {}) {
+    return withClient(binding, auth, service, dependencies, client => client.callTool({ name: tool, arguments: argumentsValue }, undefined, { timeout: dependencies.timeoutMs ?? 60_000 }));
+}
+export async function gatewayCatalog(binding, auth, service, dependencies = {}) {
+    if (service)
+        serviceEndpoint(binding, service);
+    try {
+        const response = await gatewayFetch(binding, auth, dependencies)(binding.baseUrl + "/api/v1/catalog" + (service ? `/${service}` : "") + (binding.metadata.publishedEndpoints !== undefined ? `?gatewayId=${encodeURIComponent(binding.metadata.gatewayId)}` : ""));
+        if (!response.ok)
+            throw new AiRegistryError(`MCP directory request failed (HTTP ${response.status}).`, "mcp_gateway_catalog_failed", response.status);
+        const value = await response.json();
+        const rows = service ? [value] : value.services;
+        if (!Array.isArray(rows) || rows.length > 256)
+            throw gatewayError("Invalid MCP directory response.");
+        for (const row of rows) {
+            if (typeof row.serviceId !== "string" || row.url !== serviceEndpoint(binding, row.serviceId) || row.transport !== (binding.metadata.publishedEndpoints?.find(e => e.serviceId === row.serviceId)?.transport ?? "streamable-http") || (row.gatewayId !== undefined && row.gatewayId !== binding.metadata.gatewayId) || !Array.isArray(row.tools))
+                throw gatewayError("MCP directory returned an endpoint outside the selected gateway binding.");
+        }
+        if (service && value.serviceId !== service)
+            throw gatewayError("MCP directory service identity mismatch.");
+        return value;
+    }
+    catch (error) {
+        throw safeError(error);
+    }
+}
+export async function runGatewayBridge(binding, auth, service) {
+    try {
+        await bridgeMcpTransports(new StdioServerTransport(), gatewayTransport(binding, auth, service));
+    }
+    catch (error) {
+        throw safeError(error);
+    }
+}
+//# sourceMappingURL=runtime.js.map

package/dist/mcp-gateway/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/mcp-gateway/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,EAAE,yBAAyB,EAAkC,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAuB,MAAM,cAAc,CAAC;AAEjE,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAGlC,MAAM,UAAU,eAAe,CAAC,OAAuB,EAAE,OAAe;IACtE,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,OAAO,GAAG,cAAc,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChM,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,YAAY,CAAC,2BAA2B,CAAC,CAAC;IACjG,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC;QACxF,IAAI,CAAC,QAAQ;YAAE,MAAM,YAAY,CAAC,gEAAgE,CAAC,CAAC;QACpG,OAAO,QAAQ,CAAC,GAAG,CAAC;IACtB,CAAC;IACD,OAAO,GAAG,OAAO,CAAC,OAAO,aAAa,OAAO,MAAM,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAuB,EAAE,IAAgB,EAAE,YAAY,GAAwB,EAAE,EAAE,aAAsB;IACpI,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE;QAChC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,GAAG,iBAAiB,CAAC;QACtD,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC;QACjL,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC7R,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;QACnP,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC1G,MAAM,YAAY,CAAC,uDAAuD,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/E,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;YAC1J,GAAG,YAAY,EAAE,iBAAiB,EAAE,KAAK;SAC1C,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,YAAY,CAAC,oCAAoC,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,SAAS,EAAE,CAAC;YAC/D,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,YAAY,CAAC,8CAA8C,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC;QACpC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,eAAe,CAAyB;YACpF,SAAS,CAAC,KAAK,EAAE,UAAU;gBACzB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;gBACzB,IAAI,IAAI,GAAG,SAAS;oBAAE,MAAM,YAAY,CAAC,8CAA8C,CAAC,CAAC;gBACzF,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;SACF,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACxH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAuB,EAAE,IAAgB,EAAE,OAAe,EAAE,YAAY,GAAwB,EAAE;IACjI,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,SAAS,KAAK,KAAK;QAAE,MAAM,YAAY,CAAC,mGAAmG,CAAC,CAAC;IAC1N,OAAO,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;AAChL,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,eAAe;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,IAAI,GAAI,KAA4B,EAAE,IAAI,CAAC;IACjD,MAAM,MAAM,GAAI,KAA8C,EAAE,MAAM,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtJ,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,eAAe,CAAC,mCAAmC,MAAM,IAAI,EAAE,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACjJ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC,mHAAmH,EAAE,4BAA4B,CAAC,CAAC;IACxO,OAAO,YAAY,CAAC,uFAAuF,EAAE,4BAA4B,CAAC,CAAC;AAC7I,CAAC;AAED,KAAK,UAAU,UAAU,CAAI,OAAuB,EAAE,IAAgB,EAAE,OAAe,EAAE,YAAiC,EAAE,SAAyC;IACnK,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IAClF,IAAI,KAAiC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,CAAC,KAAK,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YAC3H,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,0BAA0B,EAAE,qBAAqB,CAAC,CAAC,EAAE,YAAY,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;SACnL,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;YACnC,CAAC;QAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAuB,EAAE,IAAgB,EAAE,OAAe,EAAE,YAAY,GAAwB,EAAE;IACvI,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;QACrE,MAAM,KAAK,GAAsD,EAAE,CAAC;QACpE,IAAI,MAA0B,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;gBAAE,MAAM,YAAY,CAAC,qBAAqB,CAAC,CAAC;YACnE,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;YAC3B,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,MAAM,YAAY,CAAC,yCAAyC,CAAC,CAAC;YACpF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QACD,MAAM,YAAY,CAAC,0CAA0C,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAuB,EAAE,IAAgB,EAAE,OAAe,EAAE,IAAY,EAAE,cAAuC,EAAE,YAAY,GAAwB,EAAE;IAC7L,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;AAC1L,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB,EAAE,IAAgB,EAAE,OAAgB,EAAE,YAAY,GAAwB,EAAE;IACtI,IAAI,OAAO;QAAE,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,OAAO,GAAG,iBAAiB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnQ,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,eAAe,CAAC,sCAAsC,QAAQ,CAAC,MAAM,IAAI,EAAE,4BAA4B,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtJ,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,YAAY,CAAC,iCAAiC,CAAC,CAAC;QACrG,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,KAAK,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,MAAM,YAAY,CAAC,0EAA0E,CAAC,CAAC;QAClb,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO;YAAE,MAAM,YAAY,CAAC,0CAA0C,CAAC,CAAC;QAC3G,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAuB,EAAE,IAAgB,EAAE,OAAe;IAC/F,IAAI,CAAC;QAAC,MAAM,mBAAmB,CAAC,IAAI,oBAAoB,EAAE,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAAC,CAAC;IACxG,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;AAC3C,CAAC"}