@praxis.guard/auditor-cli 0.0.17 → 0.0.19
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +23 -1
- package/dist/approval/argv-fingerprint.d.ts +2 -0
- package/dist/approval/argv-fingerprint.d.ts.map +1 -0
- package/dist/approval/argv-fingerprint.js +2 -0
- package/dist/approval/argv-fingerprint.js.map +1 -0
- package/dist/approval/client.d.ts +35 -0
- package/dist/approval/client.d.ts.map +1 -0
- package/dist/approval/client.js +117 -0
- package/dist/approval/client.js.map +1 -0
- package/dist/approval/grant.d.ts +6 -0
- package/dist/approval/grant.d.ts.map +1 -0
- package/dist/approval/grant.js +78 -0
- package/dist/approval/grant.js.map +1 -0
- package/dist/approval/mcp-flow.d.ts +41 -0
- package/dist/approval/mcp-flow.d.ts.map +1 -0
- package/dist/approval/mcp-flow.js +116 -0
- package/dist/approval/mcp-flow.js.map +1 -0
- package/dist/approval/redeem.d.ts +21 -0
- package/dist/approval/redeem.d.ts.map +1 -0
- package/dist/approval/redeem.js +67 -0
- package/dist/approval/redeem.js.map +1 -0
- package/dist/approval/types.d.ts +53 -0
- package/dist/approval/types.d.ts.map +1 -0
- package/dist/approval/types.js +2 -0
- package/dist/approval/types.js.map +1 -0
- package/dist/bridge/execution-ticket.d.ts +17 -0
- package/dist/bridge/execution-ticket.d.ts.map +1 -0
- package/dist/bridge/execution-ticket.js +91 -0
- package/dist/bridge/execution-ticket.js.map +1 -0
- package/dist/bridge/shell-approval-bridge.d.ts +1 -1
- package/dist/bridge/shell-approval-bridge.d.ts.map +1 -1
- package/dist/bridge/shell-approval-bridge.js +9 -1
- package/dist/bridge/shell-approval-bridge.js.map +1 -1
- package/dist/cli/approvals.d.ts +2 -0
- package/dist/cli/approvals.d.ts.map +1 -0
- package/dist/cli/approvals.js +78 -0
- package/dist/cli/approvals.js.map +1 -0
- package/dist/cli/cursor-config.d.ts +5 -0
- package/dist/cli/cursor-config.d.ts.map +1 -1
- package/dist/cli/cursor-config.js +118 -13
- package/dist/cli/cursor-config.js.map +1 -1
- package/dist/cli/doctor.d.ts.map +1 -1
- package/dist/cli/doctor.js +2 -0
- package/dist/cli/doctor.js.map +1 -1
- package/dist/cli/main.d.ts.map +1 -1
- package/dist/cli/main.js +19 -2
- package/dist/cli/main.js.map +1 -1
- package/dist/cli/setup-doctor.d.ts.map +1 -1
- package/dist/cli/setup-doctor.js +57 -7
- package/dist/cli/setup-doctor.js.map +1 -1
- package/dist/hooks/agent-message.d.ts +19 -0
- package/dist/hooks/agent-message.d.ts.map +1 -0
- package/dist/hooks/agent-message.js +48 -0
- package/dist/hooks/agent-message.js.map +1 -0
- package/dist/hooks/run-before-mcp.d.ts.map +1 -1
- package/dist/hooks/run-before-mcp.js +27 -9
- package/dist/hooks/run-before-mcp.js.map +1 -1
- package/dist/hooks/run-before-shell.d.ts.map +1 -1
- package/dist/hooks/run-before-shell.js +24 -9
- package/dist/hooks/run-before-shell.js.map +1 -1
- package/dist/mcp/guard-mode.d.ts +26 -0
- package/dist/mcp/guard-mode.d.ts.map +1 -0
- package/dist/mcp/guard-mode.js +27 -0
- package/dist/mcp/guard-mode.js.map +1 -0
- package/dist/mcp/server.d.ts.map +1 -1
- package/dist/mcp/server.js +243 -149
- package/dist/mcp/server.js.map +1 -1
- package/package.json +1 -1
package/dist/mcp/server.js
CHANGED
|
@@ -5,13 +5,21 @@ import { v4 as uuidv4 } from "uuid";
|
|
|
5
5
|
import { loadPoliciesV1, readPoliciesV1Revision } from "../policy/index.js";
|
|
6
6
|
import { resolveGuardToken } from "../cli/credentials.js";
|
|
7
7
|
import { getInstallId } from "../cli/install-id.js";
|
|
8
|
-
import {
|
|
8
|
+
import { resolveMutateApproval } from "../approval/mcp-flow.js";
|
|
9
9
|
import { evaluateMcpProposal, evaluateShellProposal, parseCommandToArgv, } from "../shell/evaluate.js";
|
|
10
10
|
import { sendGuardEvent } from "../telemetry/guard-events.js";
|
|
11
11
|
import { resolveGuardAuditStatus } from "./guard-audit-status.js";
|
|
12
|
+
import { applyGuardMode, tierToPolicyDecision } from "./guard-mode.js";
|
|
12
13
|
import { AUDITOR_CLI_VERSION } from "../runtime/version.js";
|
|
14
|
+
import { prodFunctionUrl } from "../cli/function-url.js";
|
|
13
15
|
const GuardModeSchema = z.enum(["shadow", "enforce"]);
|
|
14
16
|
const ProposalKindSchema = z.enum(["shell", "mcp"]);
|
|
17
|
+
const ApprovalContextSchema = z
|
|
18
|
+
.object({
|
|
19
|
+
request_id: z.string().nullable().optional(),
|
|
20
|
+
grant: z.string().nullable().optional(),
|
|
21
|
+
})
|
|
22
|
+
.optional();
|
|
15
23
|
const GuardInputSchema = z.object({
|
|
16
24
|
mode: GuardModeSchema,
|
|
17
25
|
proposal: z.object({
|
|
@@ -28,30 +36,18 @@ const GuardInputSchema = z.object({
|
|
|
28
36
|
agent_id: z.string().optional(),
|
|
29
37
|
user_id: z.string().optional(),
|
|
30
38
|
environment: z.string().optional(),
|
|
31
|
-
approval:
|
|
39
|
+
approval: ApprovalContextSchema,
|
|
40
|
+
wait_ms: z.number().int().nonnegative().optional(),
|
|
32
41
|
})
|
|
33
42
|
.optional(),
|
|
34
43
|
});
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
function argvFingerprint(argv) {
|
|
43
|
-
return JSON.stringify(argv);
|
|
44
|
-
}
|
|
45
|
-
/** One-time tokens from prior `require_approval` (same Node process). Not persisted. */
|
|
46
|
-
const pendingApprovalByToken = new Map();
|
|
47
|
-
function pruneExpiredApprovals() {
|
|
48
|
-
const now = Date.now();
|
|
49
|
-
for (const [token, row] of pendingApprovalByToken) {
|
|
50
|
-
if (now > row.expiresAt)
|
|
51
|
-
pendingApprovalByToken.delete(token);
|
|
52
|
-
}
|
|
53
|
-
}
|
|
54
|
-
import { prodFunctionUrl } from "../cli/function-url.js";
|
|
44
|
+
const GUARD_TOOL_DESCRIPTION = "Policy gatekeeper for agent actions. Evaluates a proposal argv against policies.v1.json. " +
|
|
45
|
+
"Required `mode`: `shadow` (dry-run — response `decision` is always `allow`; see `shadow` for the policy verdict) " +
|
|
46
|
+
"or `enforce` (coordination — real `allow` / `require_approval` / `block`; runs human approval for MUTATE). " +
|
|
47
|
+
"For MUTATE after approval, pass `context.approval.request_id` (and optional `grant`) from the app or dev CLI.";
|
|
48
|
+
const GUARD_WAIT_TOOL_DESCRIPTION = "Poll until a MUTATE approval request is approved, redeem grant, and record the shell/MCP bridge. " +
|
|
49
|
+
"Uses enforce semantics (approval backend). Set `context.wait_ms` (default 120000) and `context.approval.request_id` " +
|
|
50
|
+
"from a prior `guard` call in enforce mode.";
|
|
55
51
|
const DEFAULT_HEARTBEAT_URL = prodFunctionUrl("guardHeartbeat");
|
|
56
52
|
const HEARTBEAT_BASE_INTERVAL_MS = 5 * 60 * 1000;
|
|
57
53
|
const HEARTBEAT_MAX_INTERVAL_MS = 30 * 60 * 1000;
|
|
@@ -109,149 +105,247 @@ async function sendGuardHeartbeat() {
|
|
|
109
105
|
process.stderr.write(`[auditor:mcp] heartbeat error: ${msg}\n`);
|
|
110
106
|
}
|
|
111
107
|
}
|
|
112
|
-
function
|
|
113
|
-
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
108
|
+
async function evaluateGuard(input, policyState) {
|
|
109
|
+
const startedAt = performance.now();
|
|
110
|
+
const event_id = uuidv4();
|
|
111
|
+
resetHeartbeatIdle();
|
|
112
|
+
const argv = input.proposal.raw_command
|
|
113
|
+
? parseCommandToArgv(input.proposal.raw_command)
|
|
114
|
+
: input.proposal.argv;
|
|
115
|
+
const { skipped, evaluation } = input.proposal.kind === "shell"
|
|
116
|
+
? evaluateShellProposal(policyState.policy, argv)
|
|
117
|
+
: evaluateMcpProposal(policyState.policy, argv);
|
|
118
|
+
const tier = evaluation.tier;
|
|
119
|
+
const reasons = [...evaluation.reasons];
|
|
120
|
+
const policyReasons = [...evaluation.reasons];
|
|
121
|
+
let enforceDecision = tierToPolicyDecision(tier, skipped);
|
|
122
|
+
let approvalBlock = {
|
|
123
|
+
required: false,
|
|
124
|
+
request_id: null,
|
|
125
|
+
expires_at: null,
|
|
126
|
+
open_url: null,
|
|
127
|
+
instructions: null,
|
|
128
|
+
redeemed: false,
|
|
129
|
+
approved_by: null,
|
|
130
|
+
};
|
|
131
|
+
let approvalRequestId = null;
|
|
132
|
+
if (skipped) {
|
|
133
|
+
enforceDecision = "allow";
|
|
120
134
|
}
|
|
121
|
-
if (
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
}
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
|
|
138
|
-
|
|
139
|
-
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
const { skipped, evaluation } = input.proposal.kind === "shell"
|
|
148
|
-
? evaluateShellProposal(policy, argv)
|
|
149
|
-
: evaluateMcpProposal(policy, argv);
|
|
150
|
-
const tier = evaluation.tier;
|
|
151
|
-
const reasons = [...evaluation.reasons];
|
|
152
|
-
const fingerprint = argvFingerprint(argv);
|
|
153
|
-
const submittedToken = input.context?.approval?.token ?? null;
|
|
154
|
-
const redeemed = !skipped && tryRedeemApprovalToken(submittedToken, fingerprint, tier);
|
|
155
|
-
if (redeemed) {
|
|
135
|
+
else if (tier === "DESTRUCTIVE") {
|
|
136
|
+
enforceDecision = "block";
|
|
137
|
+
approvalBlock.instructions =
|
|
138
|
+
"DESTRUCTIVE actions cannot be approved via guard. Escalate outside the agent loop.";
|
|
139
|
+
}
|
|
140
|
+
else if (tier === "READ") {
|
|
141
|
+
enforceDecision = "allow";
|
|
142
|
+
}
|
|
143
|
+
else if (input.mode === "shadow") {
|
|
144
|
+
enforceDecision = "require_approval";
|
|
145
|
+
approvalBlock.instructions =
|
|
146
|
+
"Shadow mode: no approval request created. Re-call with mode enforce to coordinate human approval.";
|
|
147
|
+
}
|
|
148
|
+
else {
|
|
149
|
+
const hasToken = Boolean(resolveGuardToken());
|
|
150
|
+
if (!hasToken) {
|
|
151
|
+
enforceDecision = "require_approval";
|
|
152
|
+
approvalBlock = {
|
|
153
|
+
required: true,
|
|
154
|
+
request_id: null,
|
|
155
|
+
expires_at: null,
|
|
156
|
+
open_url: null,
|
|
157
|
+
instructions: "MUTATE requires human approval. Run `auditor login` (or set PRAXIS_GUARD_TOKEN), then call guard again.",
|
|
158
|
+
redeemed: false,
|
|
159
|
+
approved_by: null,
|
|
160
|
+
};
|
|
156
161
|
reasons.push({
|
|
157
|
-
code: "
|
|
158
|
-
message: "
|
|
162
|
+
code: "approval_backend_unavailable",
|
|
163
|
+
message: "No guard token; cannot create approval request.",
|
|
159
164
|
});
|
|
160
165
|
}
|
|
161
|
-
|
|
162
|
-
|
|
163
|
-
|
|
164
|
-
|
|
165
|
-
|
|
166
|
-
|
|
167
|
-
|
|
168
|
-
|
|
169
|
-
|
|
170
|
-
|
|
171
|
-
|
|
172
|
-
|
|
173
|
-
|
|
166
|
+
else {
|
|
167
|
+
const outcome = await resolveMutateApproval({
|
|
168
|
+
argv,
|
|
169
|
+
proposalKind: input.proposal.kind,
|
|
170
|
+
cwd: input.proposal.cwd,
|
|
171
|
+
rawDisplay: input.proposal.raw_command ?? argv.join(" "),
|
|
172
|
+
eventId: event_id,
|
|
173
|
+
policyRevision: policyState.policyRevision,
|
|
174
|
+
reasons,
|
|
175
|
+
sessionId: input.context?.session_id ?? null,
|
|
176
|
+
environment: input.context?.environment ?? null,
|
|
177
|
+
approval: input.context?.approval ?? null,
|
|
178
|
+
waitMs: input.context?.wait_ms ?? null,
|
|
174
179
|
});
|
|
175
|
-
|
|
176
|
-
|
|
177
|
-
|
|
178
|
-
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
|
|
182
|
-
|
|
183
|
-
|
|
184
|
-
|
|
185
|
-
|
|
186
|
-
|
|
187
|
-
|
|
188
|
-
|
|
189
|
-
|
|
190
|
-
|
|
191
|
-
|
|
192
|
-
? "Re-run the same proposal with context.approval.token set to the token value above (MUTATE only; DESTRUCTIVE cannot be approved this way)."
|
|
193
|
-
: redeemed
|
|
194
|
-
? "Token consumed; this argv is cleared for one execution."
|
|
195
|
-
: null,
|
|
196
|
-
},
|
|
197
|
-
audit: {
|
|
198
|
-
event_id,
|
|
199
|
-
timestamp: new Date().toISOString(),
|
|
200
|
-
latency_ms: performance.now() - startedAt,
|
|
201
|
-
},
|
|
202
|
-
execution: {
|
|
203
|
-
attempted: false,
|
|
204
|
-
result: null,
|
|
205
|
-
},
|
|
206
|
-
};
|
|
207
|
-
const firstReason = reasons.find((r) => typeof r?.message === "string")?.message ??
|
|
208
|
-
reasons.find((r) => typeof r?.code === "string")?.code ??
|
|
209
|
-
null;
|
|
210
|
-
const actionVerb = argv[1] ?? null;
|
|
211
|
-
const actionResource = argv.length > 2 ? argv.slice(2).join(" ") : null;
|
|
212
|
-
const status = resolveGuardAuditStatus({ skipped, decision });
|
|
213
|
-
void sendGuardEvent({
|
|
214
|
-
ts: new Date().toISOString(),
|
|
215
|
-
status,
|
|
216
|
-
skipped,
|
|
217
|
-
...(skipped
|
|
218
|
-
? {
|
|
219
|
-
skip_reason: input.proposal.kind === "shell" ? "ungoverned_shell_tool" : "mcp_policy_unmatched",
|
|
180
|
+
if (outcome.kind === "allow") {
|
|
181
|
+
enforceDecision = "allow";
|
|
182
|
+
approvalRequestId = outcome.request_id;
|
|
183
|
+
approvalBlock = {
|
|
184
|
+
required: false,
|
|
185
|
+
request_id: outcome.request_id,
|
|
186
|
+
expires_at: null,
|
|
187
|
+
open_url: null,
|
|
188
|
+
instructions: "Approval redeemed; retry the same shell/MCP invocation (hook consumes execution ticket or bridge).",
|
|
189
|
+
redeemed: outcome.redeemed,
|
|
190
|
+
approved_by: outcome.approved_by,
|
|
191
|
+
};
|
|
192
|
+
if (outcome.ticketRecorded) {
|
|
193
|
+
reasons.push({
|
|
194
|
+
code: "execution_ticket_recorded",
|
|
195
|
+
message: "Recorded signed execution ticket for hooks (same argv within TTL).",
|
|
196
|
+
});
|
|
220
197
|
}
|
|
221
|
-
|
|
222
|
-
|
|
223
|
-
|
|
224
|
-
|
|
225
|
-
|
|
226
|
-
|
|
227
|
-
|
|
228
|
-
|
|
229
|
-
|
|
230
|
-
|
|
231
|
-
|
|
232
|
-
|
|
233
|
-
|
|
234
|
-
|
|
235
|
-
|
|
236
|
-
|
|
237
|
-
|
|
238
|
-
|
|
239
|
-
|
|
198
|
+
if (outcome.bridgeRecorded) {
|
|
199
|
+
reasons.push({
|
|
200
|
+
code: "shell_bridge_recorded",
|
|
201
|
+
message: "Recorded one-shot approval bridge for hooks (same argv within TTL).",
|
|
202
|
+
});
|
|
203
|
+
}
|
|
204
|
+
}
|
|
205
|
+
else if (outcome.kind === "credential_not_recorded") {
|
|
206
|
+
enforceDecision = "require_approval";
|
|
207
|
+
approvalRequestId = outcome.request_id;
|
|
208
|
+
approvalBlock = {
|
|
209
|
+
required: true,
|
|
210
|
+
request_id: outcome.request_id,
|
|
211
|
+
expires_at: null,
|
|
212
|
+
open_url: null,
|
|
213
|
+
instructions: `${outcome.message} Hooks will deny until a credential is recorded; retry guard after fixing local write permissions.`,
|
|
214
|
+
redeemed: false,
|
|
215
|
+
approved_by: null,
|
|
216
|
+
};
|
|
240
217
|
reasons.push({
|
|
241
|
-
code: "
|
|
242
|
-
message:
|
|
218
|
+
code: "hook_credential_not_recorded",
|
|
219
|
+
message: outcome.message,
|
|
243
220
|
});
|
|
244
221
|
}
|
|
245
|
-
|
|
222
|
+
else if (outcome.kind === "require_approval") {
|
|
223
|
+
enforceDecision = "require_approval";
|
|
224
|
+
approvalRequestId = outcome.request_id;
|
|
225
|
+
approvalBlock = {
|
|
226
|
+
required: true,
|
|
227
|
+
request_id: outcome.request_id,
|
|
228
|
+
expires_at: outcome.expires_at,
|
|
229
|
+
open_url: outcome.open_url,
|
|
230
|
+
instructions: "Human must approve in the Praxis app (or dev: `auditor approvals approve <id>`). Re-call guard with context.approval.request_id, or use guard_wait.",
|
|
231
|
+
redeemed: false,
|
|
232
|
+
approved_by: null,
|
|
233
|
+
};
|
|
234
|
+
}
|
|
235
|
+
else {
|
|
236
|
+
enforceDecision = "require_approval";
|
|
237
|
+
approvalBlock = {
|
|
238
|
+
required: true,
|
|
239
|
+
request_id: input.context?.approval?.request_id ?? null,
|
|
240
|
+
expires_at: null,
|
|
241
|
+
open_url: null,
|
|
242
|
+
instructions: `Approval backend error: ${outcome.message}. Hooks will deny MUTATE until resolved.`,
|
|
243
|
+
redeemed: false,
|
|
244
|
+
approved_by: null,
|
|
245
|
+
};
|
|
246
246
|
reasons.push({
|
|
247
|
-
code: "
|
|
248
|
-
message:
|
|
247
|
+
code: "approval_backend_unavailable",
|
|
248
|
+
message: outcome.message,
|
|
249
249
|
});
|
|
250
250
|
}
|
|
251
251
|
}
|
|
252
|
+
}
|
|
253
|
+
const { decision, shadow } = applyGuardMode({
|
|
254
|
+
mode: input.mode,
|
|
255
|
+
skipped,
|
|
256
|
+
tier,
|
|
257
|
+
policyReasons,
|
|
258
|
+
enforceDecision,
|
|
259
|
+
});
|
|
260
|
+
const response = {
|
|
261
|
+
mode: input.mode,
|
|
262
|
+
decision,
|
|
263
|
+
skipped,
|
|
264
|
+
tier,
|
|
265
|
+
risk_score: skipped ? 0 : tier === "READ" ? 0 : tier === "MUTATE" ? 60 : 95,
|
|
266
|
+
reasons,
|
|
267
|
+
shadow,
|
|
268
|
+
approval: approvalBlock,
|
|
269
|
+
audit: {
|
|
270
|
+
event_id,
|
|
271
|
+
timestamp: new Date().toISOString(),
|
|
272
|
+
latency_ms: performance.now() - startedAt,
|
|
273
|
+
},
|
|
274
|
+
execution: {
|
|
275
|
+
attempted: false,
|
|
276
|
+
result: null,
|
|
277
|
+
},
|
|
278
|
+
};
|
|
279
|
+
const firstReason = reasons.find((r) => typeof r?.message === "string")?.message ??
|
|
280
|
+
reasons.find((r) => typeof r?.code === "string")?.code ??
|
|
281
|
+
null;
|
|
282
|
+
const actionVerb = argv[1] ?? null;
|
|
283
|
+
const actionResource = argv.length > 2 ? argv.slice(2).join(" ") : null;
|
|
284
|
+
const status = resolveGuardAuditStatus({ skipped, decision });
|
|
285
|
+
void sendGuardEvent({
|
|
286
|
+
ts: new Date().toISOString(),
|
|
287
|
+
status,
|
|
288
|
+
skipped,
|
|
289
|
+
...(skipped
|
|
290
|
+
? {
|
|
291
|
+
skip_reason: input.proposal.kind === "shell" ? "ungoverned_shell_tool" : "mcp_policy_unmatched",
|
|
292
|
+
}
|
|
293
|
+
: {}),
|
|
294
|
+
tool: "auditor-mcp",
|
|
295
|
+
command_path: argv[0] ?? null,
|
|
296
|
+
verb: actionVerb,
|
|
297
|
+
resource: actionResource,
|
|
298
|
+
reason: firstReason,
|
|
299
|
+
cmd: argv.join(" "),
|
|
300
|
+
tier,
|
|
301
|
+
decision,
|
|
302
|
+
latency_ms: performance.now() - startedAt,
|
|
303
|
+
event_id,
|
|
304
|
+
installId: getInstallId(),
|
|
305
|
+
kind: input.proposal.kind,
|
|
306
|
+
...(policyState.policyRevision !== null
|
|
307
|
+
? { policy_revision: policyState.policyRevision }
|
|
308
|
+
: {}),
|
|
309
|
+
...(approvalRequestId ? { approval_request_id: approvalRequestId } : {}),
|
|
310
|
+
});
|
|
311
|
+
return { response, startedAt };
|
|
312
|
+
}
|
|
313
|
+
/** Start the Praxis `guard` MCP server on stdio (blocks until disconnect). */
|
|
314
|
+
export async function runMcpStdioServer() {
|
|
315
|
+
const policyState = {
|
|
316
|
+
policy: await loadPoliciesV1(),
|
|
317
|
+
policyRevision: await readPoliciesV1Revision(),
|
|
318
|
+
};
|
|
319
|
+
await sendGuardHeartbeat();
|
|
320
|
+
scheduleNextHeartbeat();
|
|
321
|
+
const server = new McpServer({
|
|
322
|
+
name: "praxis-guard",
|
|
323
|
+
version: AUDITOR_CLI_VERSION,
|
|
324
|
+
});
|
|
325
|
+
const runTool = async (input) => {
|
|
326
|
+
const { response } = await evaluateGuard(input, policyState);
|
|
252
327
|
return {
|
|
253
328
|
content: [{ type: "text", text: JSON.stringify(response, null, 2) }],
|
|
254
329
|
};
|
|
330
|
+
};
|
|
331
|
+
server.registerTool("guard", {
|
|
332
|
+
description: GUARD_TOOL_DESCRIPTION,
|
|
333
|
+
inputSchema: GuardInputSchema,
|
|
334
|
+
}, runTool);
|
|
335
|
+
server.registerTool("guard_wait", {
|
|
336
|
+
description: GUARD_WAIT_TOOL_DESCRIPTION,
|
|
337
|
+
inputSchema: GuardInputSchema,
|
|
338
|
+
}, async (input) => {
|
|
339
|
+
const waitMs = input.context?.wait_ms ?? 120_000;
|
|
340
|
+
const withWait = {
|
|
341
|
+
...input,
|
|
342
|
+
mode: "enforce",
|
|
343
|
+
context: {
|
|
344
|
+
...input.context,
|
|
345
|
+
wait_ms: waitMs,
|
|
346
|
+
},
|
|
347
|
+
};
|
|
348
|
+
return runTool(withWait);
|
|
255
349
|
});
|
|
256
350
|
const transport = new StdioServerTransport();
|
|
257
351
|
await server.connect(transport);
|
package/dist/mcp/server.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAa,MAAM,oBAAoB,CAAC;AAEvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AACxG,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AACtD,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAEpD,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IACF,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC3E,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAIH,SAAS,cAAc,CAAC,IAAU;IAChC,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IACpC,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC;IACjD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,IAAuB;IAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,wFAAwF;AACxF,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAsD,CAAC;AAC7F,SAAS,qBAAqB;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC;QAClD,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS;YAAE,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,qBAAqB,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;AAEhE,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,IAAI,cAAc,GAAyC,IAAI,CAAC;AAChE,IAAI,yBAAyB,GAAG,CAAC,CAAC;AAElC,SAAS,wBAAwB;IAC/B,IAAI,yBAAyB,GAAG,CAAC;QAAE,OAAO,0BAA0B,CAAC;IACrE,OAAO,IAAI,CAAC,GAAG,CACb,0BAA0B,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,yBAAyB,GAAG,CAAC,CAAC,EACzE,yBAAyB,CAC1B,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB;IAC5B,IAAI,cAAc;QAAE,YAAY,CAAC,cAAc,CAAC,CAAC;IACjD,cAAc,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE;QACrC,yBAAyB,EAAE,CAAC;QAC5B,MAAM,kBAAkB,EAAE,CAAC;QAC3B,qBAAqB,EAAE,CAAC;IAC1B,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB;IACzB,yBAAyB,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,qBAAqB,CAAC;IACrF,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,MAAM,OAAO,GAAG;QACd,SAAS,EAAE,YAAY,EAAE;QACzB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE;YACN,EAAE,EAAE,OAAO,CAAC,QAAQ;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,OAAO;SACtB;KACF,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,GAAG,IAAI,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAgC,EAChC,WAAmB,EACnB,IAAU;IAEV,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,GAAG;YAAE,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAClD,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;IACtC,MAAM,cAAc,GAAG,MAAM,sBAAsB,EAAE,CAAC;IACtD,MAAM,kBAAkB,EAAE,CAAC;IAC3B,qBAAqB,EAAE,CAAC;IAExB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,mBAAmB;KAC7B,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CACjB,OAAO,EACP;QACE,WAAW,EACT,6IAA6I;QAC/I,WAAW,EAAE,gBAAgB;KAC9B,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;QACd,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC;QAC1B,qBAAqB,EAAE,CAAC;QACxB,kBAAkB,EAAE,CAAC;QAErB,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW;YACrC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;YAChD,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAExB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAC3B,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;YAC7B,CAAC,CAAC,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC;YACrC,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAExC,MAAM,IAAI,GAAS,UAAU,CAAC,IAAI,CAAC;QACnC,MAAM,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,IAAI,IAAI,CAAC;QAE9D,MAAM,QAAQ,GACZ,CAAC,OAAO,IAAI,sBAAsB,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QAExE,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,iFAAiF;aAC3F,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,OAAO,IAAI,QAAQ;YAAE,QAAQ,GAAG,OAAO,CAAC;aACvC,IAAI,IAAI,KAAK,aAAa;YAAE,QAAQ,GAAG,OAAO,CAAC;;YAC/C,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAErC,MAAM,UAAU,GAAG,QAAQ,KAAK,kBAAkB,CAAC;QACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACvD,IAAI,UAAU,IAAI,QAAQ,EAAE,CAAC;YAC3B,sBAAsB,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACnC,WAAW;gBACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;aACvC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG;YACf,QAAQ;YACR,OAAO;YACP,IAAI;YACJ,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;YAC3E,OAAO;YACP,MAAM,EAAE;gBACN,QAAQ;gBACR,IAAI;gBACJ,OAAO,EAAE,EAAE;aACZ;YACD,QAAQ,EAAE;gBACR,QAAQ,EAAE,QAAQ,KAAK,kBAAkB;gBACzC,KAAK,EAAE,QAAQ;gBACf,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;gBACnF,YAAY,EACV,QAAQ,KAAK,kBAAkB;oBAC7B,CAAC,CAAC,2IAA2I;oBAC7I,CAAC,CAAC,QAAQ;wBACR,CAAC,CAAC,yDAAyD;wBAC3D,CAAC,CAAC,IAAI;aACb;YACD,KAAK,EAAE;gBACL,QAAQ;gBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;aAC1C;YACD,SAAS,EAAE;gBACT,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,IAAI;aACb;SACF,CAAC;QAEF,MAAM,WAAW,GACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,QAAQ,CAAC,EAAE,OAAO;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,KAAK,QAAQ,CAAC,EAAE,IAAI;YACtD,IAAI,CAAC;QACP,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACnC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE9D,KAAK,cAAc,CAAC;YAClB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,MAAM;YACN,OAAO;YACP,GAAG,CAAC,OAAO;gBACT,CAAC,CAAC;oBACE,WAAW,EACT,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,sBAAsB;iBACrF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,EAAE,aAAa;YACnB,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI;YAC7B,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,cAAc;YACxB,MAAM,EAAE,WAAW;YACnB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YACnB,IAAI;YACJ,QAAQ;YACR,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;YACzC,QAAQ;YACR,SAAS,EAAE,YAAY,EAAE;YACzB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YACzB,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC,CAAC;QAEH,IACE,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;YAC/B,uBAAuB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EACpD,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,yBAAyB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EACL,0FAA0F;iBAC7F,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,yEAAyE;iBACnF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC"}
|
|
1
|
+
{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAa,MAAM,oBAAoB,CAAC;AAEvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAsB,MAAM,iBAAiB,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AACtD,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAEpD,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IACF,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,QAAQ,EAAE,qBAAqB;QAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;KACnD,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAC1B,2FAA2F;IAC3F,mHAAmH;IACnH,6GAA6G;IAC7G,+GAA+G,CAAC;AAElH,MAAM,2BAA2B,GAC/B,mGAAmG;IACnG,sHAAsH;IACtH,4CAA4C,CAAC;AAE/C,MAAM,qBAAqB,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;AAEhE,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,IAAI,cAAc,GAAyC,IAAI,CAAC;AAChE,IAAI,yBAAyB,GAAG,CAAC,CAAC;AAElC,SAAS,wBAAwB;IAC/B,IAAI,yBAAyB,GAAG,CAAC;QAAE,OAAO,0BAA0B,CAAC;IACrE,OAAO,IAAI,CAAC,GAAG,CACb,0BAA0B,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,yBAAyB,GAAG,CAAC,CAAC,EACzE,yBAAyB,CAC1B,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB;IAC5B,IAAI,cAAc;QAAE,YAAY,CAAC,cAAc,CAAC,CAAC;IACjD,cAAc,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE;QACrC,yBAAyB,EAAE,CAAC;QAC5B,MAAM,kBAAkB,EAAE,CAAC;QAC3B,qBAAqB,EAAE,CAAC;IAC1B,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB;IACzB,yBAAyB,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,qBAAqB,CAAC;IACrF,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,MAAM,OAAO,GAAG;QACd,SAAS,EAAE,YAAY,EAAE;QACzB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE;YACN,EAAE,EAAE,OAAO,CAAC,QAAQ;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,OAAO;SACtB;KACF,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,GAAG,IAAI,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,KAAuC,EACvC,WAAkG;IAElG,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,CAAC;IAErB,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW;QACrC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAChD,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IAExB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAC3B,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;QAC7B,CAAC,CAAC,qBAAqB,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC;QACjD,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAEpD,MAAM,IAAI,GAAS,UAAU,CAAC,IAAI,CAAC;IACnC,MAAM,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,aAAa,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAE9C,IAAI,eAAe,GAAkB,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzE,IAAI,aAAa,GAA4B;QAC3C,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,IAAI;KAClB,CAAC;IACF,IAAI,iBAAiB,GAAkB,IAAI,CAAC;IAE5C,IAAI,OAAO,EAAE,CAAC;QACZ,eAAe,GAAG,OAAO,CAAC;IAC5B,CAAC;SAAM,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAClC,eAAe,GAAG,OAAO,CAAC;QAC1B,aAAa,CAAC,YAAY;YACxB,oFAAoF,CAAC;IACzF,CAAC;SAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,eAAe,GAAG,OAAO,CAAC;IAC5B,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnC,eAAe,GAAG,kBAAkB,CAAC;QACrC,aAAa,CAAC,YAAY;YACxB,mGAAmG,CAAC;IACxG,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,eAAe,GAAG,kBAAkB,CAAC;YACrC,aAAa,GAAG;gBACd,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,IAAI;gBACd,YAAY,EACV,yGAAyG;gBAC3G,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,IAAI;aAClB,CAAC;YACF,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,8BAA8B;gBACpC,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;gBAC1C,IAAI;gBACJ,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;gBACjC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG;gBACvB,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;gBACxD,OAAO,EAAE,QAAQ;gBACjB,cAAc,EAAE,WAAW,CAAC,cAAc;gBAC1C,OAAO;gBACP,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI;gBAC5C,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,IAAI,IAAI;gBAC/C,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI;gBACzC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,IAAI,IAAI;aACvC,CAAC,CAAC;YAEH,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC7B,eAAe,GAAG,OAAO,CAAC;gBAC1B,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC;gBACvC,aAAa,GAAG;oBACd,QAAQ,EAAE,KAAK;oBACf,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,IAAI;oBACd,YAAY,EACV,oGAAoG;oBACtG,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;iBACjC,CAAC;gBACF,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;oBAC3B,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,2BAA2B;wBACjC,OAAO,EACL,oEAAoE;qBACvE,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;oBAC3B,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,uBAAuB;wBAC7B,OAAO,EACL,qEAAqE;qBACxE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;gBACtD,eAAe,GAAG,kBAAkB,CAAC;gBACrC,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC;gBACvC,aAAa,GAAG;oBACd,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,IAAI;oBACd,YAAY,EAAE,GAAG,OAAO,CAAC,OAAO,oGAAoG;oBACpI,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;iBAClB,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,8BAA8B;oBACpC,OAAO,EAAE,OAAO,CAAC,OAAO;iBACzB,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBAC/C,eAAe,GAAG,kBAAkB,CAAC;gBACrC,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC;gBACvC,aAAa,GAAG;oBACd,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,YAAY,EACV,qJAAqJ;oBACvJ,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;iBAClB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,eAAe,GAAG,kBAAkB,CAAC;gBACrC,aAAa,GAAG;oBACd,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,IAAI,IAAI;oBACvD,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,IAAI;oBACd,YAAY,EAAE,2BAA2B,OAAO,CAAC,OAAO,0CAA0C;oBAClG,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;iBAClB,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,8BAA8B;oBACpC,OAAO,EAAE,OAAO,CAAC,OAAO;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC;QAC1C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO;QACP,IAAI;QACJ,aAAa;QACb,eAAe;KAChB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ;QACR,OAAO;QACP,IAAI;QACJ,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QAC3E,OAAO;QACP,MAAM;QACN,QAAQ,EAAE,aAAa;QACvB,KAAK,EAAE;YACL,QAAQ;YACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;SAC1C;QACD,SAAS,EAAE;YACT,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,IAAI;SACb;KACF,CAAC;IAEF,MAAM,WAAW,GACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,QAAQ,CAAC,EAAE,OAAO;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,KAAK,QAAQ,CAAC,EAAE,IAAI;QACtD,IAAI,CAAC;IACP,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACnC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE9D,KAAK,cAAc,CAAC;QAClB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,MAAM;QACN,OAAO;QACP,GAAG,CAAC,OAAO;YACT,CAAC,CAAC;gBACE,WAAW,EACT,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,sBAAsB;aACrF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,EAAE,aAAa;QACnB,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI;QAC7B,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,WAAW;QACnB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACnB,IAAI;QACJ,QAAQ;QACR,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;QACzC,QAAQ;QACR,SAAS,EAAE,YAAY,EAAE;QACzB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;QACzB,GAAG,CAAC,WAAW,CAAC,cAAc,KAAK,IAAI;YACrC,CAAC,CAAC,EAAE,eAAe,EAAE,WAAW,CAAC,cAAc,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,WAAW,GAAG;QAClB,MAAM,EAAE,MAAM,cAAc,EAAE;QAC9B,cAAc,EAAE,MAAM,sBAAsB,EAAE;KAC/C,CAAC;IACF,MAAM,kBAAkB,EAAE,CAAC;IAC3B,qBAAqB,EAAE,CAAC;IAExB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,mBAAmB;KAC7B,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,KAAK,EAAE,KAAuC,EAAE,EAAE;QAChE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC7D,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,OAAO,EACP;QACE,WAAW,EAAE,sBAAsB;QACnC,WAAW,EAAE,gBAAgB;KAC9B,EACD,OAAO,CACR,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,WAAW,EAAE,2BAA2B;QACxC,WAAW,EAAE,gBAAgB;KAC9B,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;QACd,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC;QACjD,MAAM,QAAQ,GAAG;YACf,GAAG,KAAK;YACR,IAAI,EAAE,SAAkB;YACxB,OAAO,EAAE;gBACP,GAAG,KAAK,CAAC,OAAO;gBAChB,OAAO,EAAE,MAAM;aAChB;SACF,CAAC;QACF,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC,CACF,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC"}
|