@rudderhq/server 0.6.1 → 0.6.2-canary.0

package/dist/services/mcp/managed-runtime.js

@@ -1,9 +1,70 @@
 import { activityLog, agentCustomIntegrationBindings, customIntegrationToolCalls, customIntegrationTools, heartbeatRuns, mcpConnections, } from "@rudderhq/db";
-import { and, eq, inArray } from "drizzle-orm";
+import { and, eq, inArray, or, sql } from "drizzle-orm";
 import { createHash } from "node:crypto";
 import { forbidden } from "../../errors.js";
 import { REDACTED_EVENT_VALUE } from "../../redaction.js";
+import { effectiveManagedMcpAccess } from "./managed-bindings.js";
 import { ManagedMcpClientError, } from "./managed-client.js";
+import { isManagedMcpToolCapabilityAllowed } from "./tool-discovery.js";
+function effectiveBindingAccess(binding, connection) {
+    return effectiveManagedMcpAccess(binding.accessMode, connection.provider, connection.accessMode);
+}
+function toolAllowed(binding, connection, tool, runAllowedToolNames) {
+    return binding.enabledToolIds.includes(tool.id)
+        && (runAllowedToolNames === null || runAllowedToolNames.has(tool.rudderToolName))
+        && isManagedMcpToolCapabilityAllowed(effectiveBindingAccess(binding, connection), tool.capabilityClass)
+        && tool.status === "active"
+        && tool.enabled
+        && !tool.removedAt;
+}
+function intersectRunAccess(current, snapshot) {
+    if (snapshot === "none" || current === "none")
+        return "none";
+    if (snapshot === current)
+        return current;
+    if ((snapshot === "read_only" || snapshot === "read_write")
+        && (current === "read_only" || current === "read_write")) {
+        return snapshot === "read_only" || current === "read_only"
+            ? "read_only"
+            : "read_write";
+    }
+    return "none";
+}
+function runBindingSnapshot(contextSnapshot, bindingId) {
+    const snapshots = contextSnapshot?.managedMcpPolicySnapshot;
+    if (!Array.isArray(snapshots))
+        return null;
+    const matches = snapshots.filter((candidate) => (candidate
+        && typeof candidate === "object"
+        && !Array.isArray(candidate)
+        && candidate.bindingId === bindingId));
+    if (matches.length !== 1)
+        return null;
+    const snapshot = matches[0];
+    const accessMode = snapshot.accessMode;
+    if (accessMode !== "none"
+        && accessMode !== "read_only"
+        && accessMode !== "read_write"
+        && accessMode !== "provider_granted"
+        && accessMode !== "full")
+        return null;
+    const policy = snapshot.toolPolicy;
+    const allowedToolNames = policy && typeof policy === "object" && !Array.isArray(policy)
+        ? policy.allowedToolNames
+        : null;
+    if (!policy
+        || typeof policy !== "object"
+        || Array.isArray(policy)
+        || policy.mode !== "allowlist"
+        || !Array.isArray(allowedToolNames)
+        || !allowedToolNames
+            .every((name) => typeof name === "string"))
+        return null;
+    return {
+        accessMode,
+        allowedToolNames: new Set(allowedToolNames),
+    };
+}
 const SECRET_KEY_RE = /(api[-_]?key|access[-_]?token|auth(?:[-_]?token)?|authorization|bearer|secret|passwd|password|credential|cookie|jwt|private[-_]?key|connectionstring|(?:^|[-_])token(?:$|[-_]))/iu;
 const JWT_RE = /^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+)?$/u;
 const AUTHORIZATION_VALUE_RE = /\b(?:Bearer|Basic)\s+[A-Za-z0-9+/_=.-]{4,}/iu;
@@ -129,46 +190,66 @@ function safeErrorMessage(code) {
     }
 }
 export function managedMcpRuntimeService(db, options) {
-    async function requireRuntimeBinding(identity, bindingId) {
-        const run = await db.select({ id: heartbeatRuns.id })
+    async function requireRuntimeBinding(identity, bindingId, executor = db, lockConnection = false, grantExecutor) {
+        const run = await executor.select({
+            id: heartbeatRuns.id,
+            contextSnapshot: heartbeatRuns.contextSnapshot,
+        })
             .from(heartbeatRuns)
             .where(and(eq(heartbeatRuns.id, identity.runId), eq(heartbeatRuns.orgId, identity.orgId), eq(heartbeatRuns.agentId, identity.agentId), eq(heartbeatRuns.status, "running")))
             .then((rows) => rows[0] ?? null);
         if (!run)
             throw forbidden("Managed MCP runtime context is not active");
-        const row = await db.select({
+        const rowQuery = executor.select({
             binding: agentCustomIntegrationBindings,
             connection: mcpConnections,
         })
             .from(agentCustomIntegrationBindings)
             .innerJoin(mcpConnections, eq(agentCustomIntegrationBindings.connectionId, mcpConnections.id))
-            .where(and(eq(agentCustomIntegrationBindings.id, bindingId), eq(agentCustomIntegrationBindings.orgId, identity.orgId), eq(agentCustomIntegrationBindings.agentId, identity.agentId), eq(agentCustomIntegrationBindings.status, "active"), eq(mcpConnections.orgId, identity.orgId), eq(mcpConnections.enabled, true), eq(mcpConnections.status, "active")))
-            .then((rows) => rows[0] ?? null);
+            .where(and(eq(agentCustomIntegrationBindings.id, bindingId), eq(agentCustomIntegrationBindings.orgId, identity.orgId), eq(agentCustomIntegrationBindings.agentId, identity.agentId), eq(agentCustomIntegrationBindings.status, "active"), eq(mcpConnections.orgId, identity.orgId), eq(mcpConnections.enabled, true), eq(mcpConnections.status, "active"), or(eq(mcpConnections.provider, "custom"), eq(mcpConnections.canonicalState, "canonical"))));
+        const row = await (lockConnection
+            ? rowQuery.for("share", { of: mcpConnections })
+            : rowQuery).then((rows) => rows[0] ?? null);
         if (!row || row.connection.transport === "legacy_manual") {
             throw forbidden("Managed MCP binding is unavailable");
         }
         if (row.connection.provider !== "custom") {
             try {
-                await options.requireUsableGrant(identity.orgId, row.connection.id);
+                if (!grantExecutor) {
+                    await options.requireUsableGrant(identity.orgId, row.connection.id);
+                }
+                else {
+                    await options.requireUsableGrant(identity.orgId, row.connection.id, grantExecutor);
+                }
             }
             catch {
                 throw forbidden("Managed MCP binding is unavailable");
             }
         }
-        return row;
-    }
-    async function currentTools(identity, bindingId) {
-        const context = await requireRuntimeBinding(identity, bindingId);
-        const enabledIds = context.binding.enabledToolIds;
-        const tools = enabledIds.length === 0
-            ? []
-            : await db.select().from(customIntegrationTools)
-                .where(and(eq(customIntegrationTools.orgId, identity.orgId), eq(customIntegrationTools.connectionId, context.connection.id), eq(customIntegrationTools.status, "active"), eq(customIntegrationTools.enabled, true), inArray(customIntegrationTools.id, enabledIds)));
+        const snapshot = runBindingSnapshot(run.contextSnapshot, bindingId);
+        if (!snapshot) {
+            throw forbidden("Managed MCP binding is not enabled for this run");
+        }
         return {
-            ...context,
-            tools: tools.filter((tool) => !tool.removedAt),
+            ...row,
+            runAllowedToolNames: snapshot.allowedToolNames,
+            runAccessMode: intersectRunAccess(effectiveBindingAccess(row.binding, row.connection), snapshot.accessMode),
         };
     }
+    async function currentTools(identity, bindingId) {
+        return db.transaction(async (tx) => {
+            const context = await requireRuntimeBinding(identity, bindingId, tx, true, tx);
+            const compatibilityIds = context.binding.enabledToolIds;
+            const tools = compatibilityIds.length === 0
+                ? []
+                : await tx.select().from(customIntegrationTools)
+                    .where(and(eq(customIntegrationTools.orgId, identity.orgId), eq(customIntegrationTools.connectionId, context.connection.id), eq(customIntegrationTools.status, "active"), eq(customIntegrationTools.enabled, true), inArray(customIntegrationTools.id, compatibilityIds)));
+            return {
+                ...context,
+                tools: tools.filter((tool) => toolAllowed(context.binding, context.connection, tool, context.runAllowedToolNames)),
+            };
+        });
+    }
     async function listTools(identity, bindingId) {
         const { tools } = await currentTools(identity, bindingId);
         return tools
@@ -181,68 +262,88 @@ export function managedMcpRuntimeService(db, options) {
             .sort((left, right) => left.name.localeCompare(right.name));
     }
     async function callTool(identity, bindingId, exposedToolName, args) {
-        const context = await requireRuntimeBinding(identity, bindingId);
-        const tool = await db.select().from(customIntegrationTools)
-            .where(and(eq(customIntegrationTools.orgId, identity.orgId), eq(customIntegrationTools.connectionId, context.connection.id), eq(customIntegrationTools.rudderToolName, exposedToolName)))
-            .then((rows) => rows[0] ?? null);
-        const enabled = Boolean(tool
-            && context.binding.enabledToolIds.includes(tool.id)
-            && tool.status === "active"
-            && tool.enabled
-            && !tool.removedAt);
-        if (!enabled) {
-            if (tool) {
-                await db.insert(customIntegrationToolCalls).values({
-                    orgId: identity.orgId,
-                    connectionId: context.connection.id,
-                    toolId: tool.id,
-                    agentId: identity.agentId,
-                    runId: identity.runId,
-                    status: "blocked",
-                    sanitizedInput: boundedRedactedMcpAuditRecord(args),
-                    redactedDispatchOutcome: {
+        const prepared = await db.transaction(async (tx) => {
+            const lockedContext = await requireRuntimeBinding(identity, bindingId, tx, true, tx);
+            await tx.execute(sql `
+        select pg_advisory_xact_lock(
+          hashtextextended(
+            ${`managed-mcp-binding:${identity.orgId}:${identity.agentId}:${lockedContext.connection.id}`},
+            0
+          )
+        )
+      `);
+            // The first read establishes connection-before-advisory lock order. Re-read
+            // after acquiring the advisory lock so a downgrade that committed while
+            // this dispatch was waiting is visible before dispatch-start is recorded.
+            const context = await requireRuntimeBinding(identity, bindingId, tx, false, tx);
+            const tool = await tx.select().from(customIntegrationTools)
+                .where(and(eq(customIntegrationTools.orgId, identity.orgId), eq(customIntegrationTools.connectionId, context.connection.id), eq(customIntegrationTools.rudderToolName, exposedToolName)))
+                .then((rows) => rows[0] ?? null);
+            const enabled = Boolean(tool && toolAllowed(context.binding, context.connection, tool, context.runAllowedToolNames));
+            if (!enabled) {
+                if (tool) {
+                    await tx.insert(customIntegrationToolCalls).values({
+                        orgId: identity.orgId,
+                        connectionId: context.connection.id,
+                        toolId: tool.id,
+                        agentId: identity.agentId,
+                        runId: identity.runId,
                         status: "blocked",
+                        sanitizedInput: boundedRedactedMcpAuditRecord(args),
+                        redactedDispatchOutcome: {
+                            status: "blocked",
+                            errorCode: "mcp_tool_not_allowed",
+                        },
                         errorCode: "mcp_tool_not_allowed",
-                    },
-                    errorCode: "mcp_tool_not_allowed",
-                    errorMessage: "Managed MCP tool is not enabled for this run",
-                    completedAt: new Date(),
-                });
-            }
-            else {
-                await db.insert(activityLog).values({
-                    orgId: identity.orgId,
-                    actorType: "agent",
-                    actorId: identity.agentId,
-                    action: "mcp_tool_call.blocked_unknown",
-                    entityType: "mcp_agent_binding",
-                    entityId: context.binding.id,
-                    agentId: identity.agentId,
-                    runId: identity.runId,
-                    details: {
-                        reason: "unknown_tool",
-                        requestedToolSha256: createHash("sha256")
-                            .update(exposedToolName)
-                            .digest("hex"),
-                    },
-                });
+                        errorMessage: "Managed MCP tool is not enabled for this run",
+                        completedAt: new Date(),
+                    });
+                }
+                else {
+                    await tx.insert(activityLog).values({
+                        orgId: identity.orgId,
+                        actorType: "agent",
+                        actorId: identity.agentId,
+                        action: "mcp_tool_call.blocked_unknown",
+                        entityType: "mcp_agent_binding",
+                        entityId: context.binding.id,
+                        agentId: identity.agentId,
+                        runId: identity.runId,
+                        details: {
+                            reason: "unknown_tool",
+                            requestedToolSha256: createHash("sha256")
+                                .update(exposedToolName)
+                                .digest("hex"),
+                        },
+                    });
+                }
+                return { kind: "blocked" };
             }
+            const audit = await tx.insert(customIntegrationToolCalls).values({
+                orgId: identity.orgId,
+                connectionId: context.connection.id,
+                toolId: tool.id,
+                agentId: identity.agentId,
+                runId: identity.runId,
+                status: "blocked",
+                sanitizedInput: boundedRedactedMcpAuditRecord(args),
+                redactedDispatchOutcome: { status: "started" },
+            }).returning({ id: customIntegrationToolCalls.id })
+                .then((rows) => rows[0]);
+            return {
+                kind: "ready",
+                context,
+                tool: tool,
+                audit,
+            };
+        });
+        if (prepared.kind === "blocked") {
             throw forbidden("Managed MCP tool is not enabled for this run");
         }
-        const audit = await db.insert(customIntegrationToolCalls).values({
-            orgId: identity.orgId,
-            connectionId: context.connection.id,
-            toolId: tool.id,
-            agentId: identity.agentId,
-            runId: identity.runId,
-            status: "blocked",
-            sanitizedInput: boundedRedactedMcpAuditRecord(args),
-            redactedDispatchOutcome: { status: "started" },
-        }).returning({ id: customIntegrationToolCalls.id })
-            .then((rows) => rows[0]);
+        const { audit, context, tool } = prepared;
         let client = null;
         try {
-            client = await options.openClient(identity.orgId, context.connection.id);
+            client = await options.openClient(identity.orgId, context.connection.id, context.runAccessMode);
             const result = await client.callTool(tool.externalToolName, args);
             await db.update(customIntegrationToolCalls).set({
                 status: "success",
@@ -270,7 +371,7 @@ export function managedMcpRuntimeService(db, options) {
             throw safe;
         }
         finally {
-            await client?.close().catch(() => undefined);
+            await Promise.resolve(client?.close()).catch(() => undefined);
         }
     }
     return {

package/dist/services/mcp/managed-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"managed-runtime.js","sourceRoot":"","sources":["../../../src/services/mcp/managed-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,8BAA8B,EAC9B,0BAA0B,EAC1B,sBAAsB,EACtB,aAAa,EACb,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EACL,qBAAqB,GAEtB,MAAM,qBAAqB,CAAC;AAwB7B,MAAM,aAAa,GACjB,mLAAmL,CAAC;AACtL,MAAM,MAAM,GACV,wEAAwE,CAAC;AAC3E,MAAM,sBAAsB,GAC1B,8CAA8C,CAAC;AACjD,MAAM,oBAAoB,GACxB,+FAA+F,CAAC;AAClG,MAAM,oBAAoB,GACxB,yDAAyD,CAAC;AAC5D,MAAM,gBAAgB,GACpB,8CAA8C,CAAC;AACjD,MAAM,qBAAqB,GAAG,yEAAyE,CAAC;AACxG,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc,EACd,KAAwB,EACxB,KAAK,GAAG,CAAC;IAET,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IACjB,IAAI,KAAK,CAAC,KAAK,GAAG,eAAe,IAAI,KAAK,IAAI,eAAe,EAAE,CAAC;QAC9D,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IACE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;eACf,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;eAClC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;eAChC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;eAChC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EACpC,CAAC;YACD,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;QACvE,OAAO,QAAQ,CAAC,MAAM,GAAG,sBAAsB;YAC7C,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,GAAG;YACjD,CAAC,CAAC,QAAQ,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;aAC5C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe;YAAE,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC/E,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAE5E,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,GAAG;aAChB,OAAO,CAAC,gBAAgB,EAAE,oBAAoB,CAAC;aAC/C,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACpC,IAAI,OAAO,GAAG,OAAO,CAAC;QACtB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC/B,OAAO,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;YACjF,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YACvC,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QAC/C,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAc;IAEd,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACtE,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,sBAAsB,EAAE,CAAC;QACpE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC;IAC9B,OAAO,KAAK,GAAG,KAAK,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG;YAChB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;SACvC,CAAC;QACF,IACE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;eACjD,sBAAsB,EACzB,CAAC;YACD,KAAK,GAAG,QAAQ,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChE,IAAI,gBAAgB,IAAI,MAAM,IAAI,gBAAgB,IAAI,MAAM,EAAE,CAAC;QAC7D,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;QAC3C,OAAO,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,qBAAqB,CAC9B,iBAAiB,EACjB,8BAA8B,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,kBAAkB;YACrB,OAAO,iCAAiC,CAAC;QAC3C,KAAK,2BAA2B;YAC9B,OAAO,wCAAwC,CAAC;QAClD,KAAK,2BAA2B;YAC9B,OAAO,6CAA6C,CAAC;QACvD,KAAK,sBAAsB;YACzB,OAAO,kDAAkD,CAAC;QAC5D;YACE,OAAO,8BAA8B,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,EAAM,EACN,OAAwC;IAExC,KAAK,UAAU,qBAAqB,CAClC,QAAmC,EACnC,SAAiB;QAEjB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC;aAClD,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,EACpC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EACvC,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAC3C,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CACpC,CAAC;aACD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG;YAAE,MAAM,SAAS,CAAC,2CAA2C,CAAC,CAAC;QAEvE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;YAC1B,OAAO,EAAE,8BAA8B;YACvC,UAAU,EAAE,cAAc;SAC3B,CAAC;aACC,IAAI,CAAC,8BAA8B,CAAC;aACpC,SAAS,CACR,cAAc,EACd,EAAE,CAAC,8BAA8B,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,CAAC,CACnE;aACA,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,8BAA8B,CAAC,EAAE,EAAE,SAAS,CAAC,EAChD,EAAE,CAAC,8BAA8B,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EACxD,EAAE,CAAC,8BAA8B,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAC5D,EAAE,CAAC,8BAA8B,CAAC,MAAM,EAAE,QAAQ,CAAC,EACnD,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EACxC,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,EAChC,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CACpC,CAAC;aACD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,KAAK,eAAe,EAAE,CAAC;YACzD,MAAM,SAAS,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,SAAS,CAAC,oCAAoC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,UAAU,YAAY,CACzB,QAAmC,EACnC,SAAiB;QAMjB,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;QAClD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,KAAK,CAAC;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC;iBAC7C,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EAChD,EAAE,CAAC,sBAAsB,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,EAC9D,EAAE,CAAC,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAC3C,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,EACxC,OAAO,CAAC,sBAAsB,CAAC,EAAE,EAAE,UAAU,CAAC,CAC/C,CAAC,CAAC;QACP,OAAO;YACL,GAAG,OAAO;YACV,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,SAAS,CACtB,QAAmC,EACnC,SAAiB;QAEjB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1D,OAAO,KAAK;aACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACd,IAAI,EAAE,IAAI,CAAC,cAAc;YACzB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,UAAU,QAAQ,CACrB,QAAmC,EACnC,SAAiB,EACjB,eAAuB,EACvB,IAA6B;QAE7B,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC;aACxD,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EAChD,EAAE,CAAC,sBAAsB,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,EAC9D,EAAE,CAAC,sBAAsB,CAAC,cAAc,EAAE,eAAe,CAAC,CAC3D,CAAC;aACD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,OAAO,CACrB,IAAI;eACD,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;eAChD,IAAI,CAAC,MAAM,KAAK,QAAQ;eACxB,IAAI,CAAC,OAAO;eACZ,CAAC,IAAI,CAAC,SAAS,CACnB,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAAC;oBACjD,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE;oBACnC,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,MAAM,EAAE,SAAS;oBACjB,cAAc,EAAE,6BAA6B,CAAC,IAAI,CAAC;oBACnD,uBAAuB,EAAE;wBACvB,MAAM,EAAE,SAAS;wBACjB,SAAS,EAAE,sBAAsB;qBAClC;oBACD,SAAS,EAAE,sBAAsB;oBACjC,YAAY,EAAE,8CAA8C;oBAC5D,WAAW,EAAE,IAAI,IAAI,EAAE;iBACxB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;oBAClC,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,SAAS,EAAE,OAAO;oBAClB,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,MAAM,EAAE,+BAA+B;oBACvC,UAAU,EAAE,mBAAmB;oBAC/B,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;oBAC5B,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,OAAO,EAAE;wBACP,MAAM,EAAE,cAAc;wBACtB,mBAAmB,EAAE,UAAU,CAAC,QAAQ,CAAC;6BACtC,MAAM,CAAC,eAAe,CAAC;6BACvB,MAAM,CAAC,KAAK,CAAC;qBACjB;iBACF,CAAC,CAAC;YACL,CAAC;YACD,MAAM,SAAS,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAAC;YAC/D,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE;YACnC,MAAM,EAAE,IAAK,CAAC,EAAE;YAChB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE,SAAS;YACjB,cAAc,EAAE,6BAA6B,CAAC,IAAI,CAAC;YACnD,uBAAuB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;SAC/C,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,0BAA0B,CAAC,EAAE,EAAE,CAAC;aAChD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QAE5B,IAAI,MAAM,GAA4B,IAAI,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACzE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;YACnE,MAAM,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC;gBAC9C,MAAM,EAAE,SAAS;gBACjB,eAAe,EAAE,6BAA6B,CAAC,MAAM,CAAC;gBACtD,uBAAuB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;gBAC9C,SAAS,EAAE,IAAI;gBACf,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,IAAI,IAAI,EAAE;aACxB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACtD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC;gBAC9C,MAAM,EAAE,OAAO;gBACf,eAAe,EAAE,IAAI;gBACrB,uBAAuB,EAAE;oBACvB,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,IAAI,CAAC,IAAI;iBACrB;gBACD,SAAS,EAAE,IAAI,CAAC,IAAI;gBACpB,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBACzC,WAAW,EAAE,IAAI,IAAI,EAAE;aACxB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC;QACb,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO;QACL,oBAAoB,EAAE,qBAAqB;QAC3C,SAAS;QACT,QAAQ;KACT,CAAC;AACJ,CAAC"}
+{"version":3,"file":"managed-runtime.js","sourceRoot":"","sources":["../../../src/services/mcp/managed-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,8BAA8B,EAC9B,0BAA0B,EAC1B,sBAAsB,EACtB,aAAa,EACb,cAAc,GACf,MAAM,cAAc,CAAC;AAMtB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EACL,qBAAqB,GAEtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,qBAAqB,CAAC;AAQxE,SAAS,sBAAsB,CAC7B,OAAmB,EACnB,UAAyB;IAEzB,OAAO,yBAAyB,CAC9B,OAAO,CAAC,UAAgC,EACxC,UAAU,CAAC,QAAiC,EAC5C,UAAU,CAAC,UAAqC,CACjD,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,OAAmB,EACnB,UAAyB,EACzB,IAAa,EACb,mBAAuC;IAEvC,OAAO,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;WAC1C,CAAC,mBAAmB,KAAK,IAAI,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;WAC9E,iCAAiC,CAClC,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,EAC3C,IAAI,CAAC,eAA0E,CAChF;WACE,IAAI,CAAC,MAAM,KAAK,QAAQ;WACxB,IAAI,CAAC,OAAO;WACZ,CAAC,IAAI,CAAC,SAAS,CAAC;AACvB,CAAC;AAED,SAAS,kBAAkB,CACzB,OAA2B,EAC3B,QAAiB;IAEjB,IAAI,QAAQ,KAAK,MAAM,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAC7D,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACzC,IACE,CAAC,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,YAAY,CAAC;WACpD,CAAC,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,YAAY,CAAC,EACxD,CAAC;QACD,OAAO,QAAQ,KAAK,WAAW,IAAI,OAAO,KAAK,WAAW;YACxD,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,YAAY,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CACzB,eAAkE,EAClE,SAAiB;IAKjB,MAAM,SAAS,GAAG,eAAe,EAAE,wBAAwB,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAC9C,SAAS;WACN,OAAO,SAAS,KAAK,QAAQ;WAC7B,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;WACxB,SAAqC,CAAC,SAAS,KAAK,SAAS,CAClE,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAA4B,CAAC;IACvD,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IACvC,IACE,UAAU,KAAK,MAAM;WAClB,UAAU,KAAK,WAAW;WAC1B,UAAU,KAAK,YAAY;WAC3B,UAAU,KAAK,kBAAkB;WACjC,UAAU,KAAK,MAAM;QACxB,OAAO,IAAI,CAAC;IACd,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC;IACnC,MAAM,gBAAgB,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrF,CAAC,CAAE,MAAkC,CAAC,gBAAgB;QACtD,CAAC,CAAC,IAAI,CAAC;IACT,IACE,CAAC,MAAM;WACJ,OAAO,MAAM,KAAK,QAAQ;WAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;WACpB,MAAkC,CAAC,IAAI,KAAK,WAAW;WACxD,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;WAChC,CAAC,gBAAgB;aACjB,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,OAAO;QACL,UAAU;QACV,gBAAgB,EAAE,IAAI,GAAG,CAAC,gBAA4B,CAAC;KACxD,CAAC;AACJ,CAAC;AA4BD,MAAM,aAAa,GACjB,mLAAmL,CAAC;AACtL,MAAM,MAAM,GACV,wEAAwE,CAAC;AAC3E,MAAM,sBAAsB,GAC1B,8CAA8C,CAAC;AACjD,MAAM,oBAAoB,GACxB,+FAA+F,CAAC;AAClG,MAAM,oBAAoB,GACxB,yDAAyD,CAAC;AAC5D,MAAM,gBAAgB,GACpB,8CAA8C,CAAC;AACjD,MAAM,qBAAqB,GAAG,yEAAyE,CAAC;AACxG,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc,EACd,KAAwB,EACxB,KAAK,GAAG,CAAC;IAET,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IACjB,IAAI,KAAK,CAAC,KAAK,GAAG,eAAe,IAAI,KAAK,IAAI,eAAe,EAAE,CAAC;QAC9D,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IACE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;eACf,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;eAClC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;eAChC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;eAChC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EACpC,CAAC;YACD,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;QACvE,OAAO,QAAQ,CAAC,MAAM,GAAG,sBAAsB;YAC7C,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,GAAG;YACjD,CAAC,CAAC,QAAQ,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;aAC5C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe;YAAE,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC/E,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAE5E,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,GAAG;aAChB,OAAO,CAAC,gBAAgB,EAAE,oBAAoB,CAAC;aAC/C,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACpC,IAAI,OAAO,GAAG,OAAO,CAAC;QACtB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC/B,OAAO,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;YACjF,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YACvC,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QAC/C,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAc;IAEd,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACtE,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,sBAAsB,EAAE,CAAC;QACpE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC;IAC9B,OAAO,KAAK,GAAG,KAAK,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG;YAChB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;SACvC,CAAC;QACF,IACE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;eACjD,sBAAsB,EACzB,CAAC;YACD,KAAK,GAAG,QAAQ,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChE,IAAI,gBAAgB,IAAI,MAAM,IAAI,gBAAgB,IAAI,MAAM,EAAE,CAAC;QAC7D,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;QAC3C,OAAO,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,qBAAqB,CAC9B,iBAAiB,EACjB,8BAA8B,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,kBAAkB;YACrB,OAAO,iCAAiC,CAAC;QAC3C,KAAK,2BAA2B;YAC9B,OAAO,wCAAwC,CAAC;QAClD,KAAK,2BAA2B;YAC9B,OAAO,6CAA6C,CAAC;QACvD,KAAK,sBAAsB;YACzB,OAAO,kDAAkD,CAAC;QAC5D;YACE,OAAO,8BAA8B,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,EAAM,EACN,OAAwC;IAExC,KAAK,UAAU,qBAAqB,CAClC,QAAmC,EACnC,SAAiB,EACjB,WAA8B,EAAE,EAChC,cAAc,GAAG,KAAK,EACtB,aAAkC;QAOlC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;YAChC,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,eAAe,EAAE,aAAa,CAAC,eAAe;SAC/C,CAAC;aACC,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,EACpC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EACvC,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAC3C,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CACpC,CAAC;aACD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG;YAAE,MAAM,SAAS,CAAC,2CAA2C,CAAC,CAAC;QAEvE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC/B,OAAO,EAAE,8BAA8B;YACvC,UAAU,EAAE,cAAc;SAC3B,CAAC;aACC,IAAI,CAAC,8BAA8B,CAAC;aACpC,SAAS,CACR,cAAc,EACd,EAAE,CAAC,8BAA8B,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,CAAC,CACnE;aACA,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,8BAA8B,CAAC,EAAE,EAAE,SAAS,CAAC,EAChD,EAAE,CAAC,8BAA8B,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EACxD,EAAE,CAAC,8BAA8B,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAC5D,EAAE,CAAC,8BAA8B,CAAC,MAAM,EAAE,QAAQ,CAAC,EACnD,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EACxC,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,EAChC,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,EACnC,EAAE,CACA,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACrC,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,WAAW,CAAC,CAC/C,CACF,CAAC,CAAC;QACL,MAAM,GAAG,GAAG,MAAM,CAChB,cAAc;YACZ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC;YAC/C,CAAC,CAAC,QAAQ,CACb,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,KAAK,eAAe,EAAE,CAAC;YACzD,MAAM,SAAS,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACtE,CAAC;qBAAM,CAAC;oBACN,MAAM,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;gBACrF,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,SAAS,CAAC,oCAAoC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,SAAS,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,OAAO;YACL,GAAG,GAAG;YACN,mBAAmB,EAAE,QAAQ,CAAC,gBAAgB;YAC9C,aAAa,EAAE,kBAAkB,CAC/B,sBAAsB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,EACnD,QAAQ,CAAC,UAAU,CACpB;SACF,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,YAAY,CACzB,QAAmC,EACnC,SAAiB;QAMjB,OAAO,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/E,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;YACxD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,KAAK,CAAC;gBACzC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC;qBAC7C,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EAChD,EAAE,CAAC,sBAAsB,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,EAC9D,EAAE,CAAC,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAC3C,EAAE,CAAC,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,EACxC,OAAO,CAAC,sBAAsB,CAAC,EAAE,EAAE,gBAAgB,CAAC,CACrD,CAAC,CAAC;YACP,OAAO;gBACL,GAAG,OAAO;gBACV,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3B,WAAW,CACT,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,UAAU,EAClB,IAAI,EACJ,OAAO,CAAC,mBAAmB,CAC5B,CAAC;aACL,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,SAAS,CACtB,QAAmC,EACnC,SAAiB;QAEjB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1D,OAAO,KAAK;aACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACd,IAAI,EAAE,IAAI,CAAC,cAAc;YACzB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,UAAU,QAAQ,CACrB,QAAmC,EACnC,SAAiB,EACjB,eAAuB,EACvB,IAA6B;QAE7B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACjD,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACrF,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;;cAGZ,uBAAuB,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,EAAE;;;;OAIjG,CAAC,CAAC;YACH,4EAA4E;YAC5E,wEAAwE;YACxE,0EAA0E;YAC1E,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAChF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC;iBACxD,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EAChD,EAAE,CAAC,sBAAsB,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,EAC9D,EAAE,CAAC,sBAAsB,CAAC,cAAc,EAAE,eAAe,CAAC,CAC3D,CAAC;iBACD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CACzC,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,UAAU,EAClB,IAAI,EACJ,OAAO,CAAC,mBAAmB,CAC5B,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAAC;wBACjD,KAAK,EAAE,QAAQ,CAAC,KAAK;wBACrB,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE;wBACnC,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;wBACrB,MAAM,EAAE,SAAS;wBACjB,cAAc,EAAE,6BAA6B,CAAC,IAAI,CAAC;wBACnD,uBAAuB,EAAE;4BACvB,MAAM,EAAE,SAAS;4BACjB,SAAS,EAAE,sBAAsB;yBAClC;wBACD,SAAS,EAAE,sBAAsB;wBACjC,YAAY,EAAE,8CAA8C;wBAC5D,WAAW,EAAE,IAAI,IAAI,EAAE;qBACxB,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;wBAClC,KAAK,EAAE,QAAQ,CAAC,KAAK;wBACrB,SAAS,EAAE,OAAO;wBAClB,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,MAAM,EAAE,+BAA+B;wBACvC,UAAU,EAAE,mBAAmB;wBAC/B,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;wBAC5B,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;wBACrB,OAAO,EAAE;4BACP,MAAM,EAAE,cAAc;4BACtB,mBAAmB,EAAE,UAAU,CAAC,QAAQ,CAAC;iCACtC,MAAM,CAAC,eAAe,CAAC;iCACvB,MAAM,CAAC,KAAK,CAAC;yBACjB;qBACF,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC;YACtC,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAAC;gBAC/D,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE;gBACnC,MAAM,EAAE,IAAK,CAAC,EAAE;gBAChB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,MAAM,EAAE,SAAS;gBACjB,cAAc,EAAE,6BAA6B,CAAC,IAAI,CAAC;gBACnD,uBAAuB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;aAC/C,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,0BAA0B,CAAC,EAAE,EAAE,CAAC;iBAChD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;YAC5B,OAAO;gBACL,IAAI,EAAE,OAAgB;gBACtB,OAAO;gBACP,IAAI,EAAE,IAAK;gBACX,KAAK;aACN,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,SAAS,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;QAE1C,IAAI,MAAM,GAA4B,IAAI,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAC/B,QAAQ,CAAC,KAAK,EACd,OAAO,CAAC,UAAU,CAAC,EAAE,EACrB,OAAO,CAAC,aAAa,CACtB,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;YAClE,MAAM,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC;gBAC9C,MAAM,EAAE,SAAS;gBACjB,eAAe,EAAE,6BAA6B,CAAC,MAAM,CAAC;gBACtD,uBAAuB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;gBAC9C,SAAS,EAAE,IAAI;gBACf,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,IAAI,IAAI,EAAE;aACxB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACtD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC;gBAC9C,MAAM,EAAE,OAAO;gBACf,eAAe,EAAE,IAAI;gBACrB,uBAAuB,EAAE;oBACvB,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,IAAI,CAAC,IAAI;iBACrB;gBACD,SAAS,EAAE,IAAI,CAAC,IAAI;gBACpB,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBACzC,WAAW,EAAE,IAAI,IAAI,EAAE;aACxB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC;QACb,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,OAAO;QACL,oBAAoB,EAAE,qBAAqB;QAC3C,SAAS;QACT,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/services/mcp/oauth-helpers.d.ts

@@ -0,0 +1,53 @@
+import { type StoredOAuthTokens } from "@modelcontextprotocol/client";
+import { mcpConnections } from "@rudderhq/db";
+import type { McpExternalScopeOption } from "@rudderhq/shared";
+import type { ManagedMcpOAuthMaterial } from "./oauth-provider.js";
+import { type McpDeploymentAllowlists, type McpDnsLookup } from "./security-policy.js";
+type McpConnectionRow = typeof mcpConnections.$inferSelect;
+export interface ManagedMcpProviderScopeResult {
+    options: McpExternalScopeOption[];
+    selected?: McpExternalScopeOption;
+    providerSubject?: string | null;
+}
+export declare function oauthActivityValues(input: {
+    orgId: string;
+    connectionId: string;
+    action: string;
+    actorUserId?: string | null;
+    details: Record<string, unknown>;
+}): {
+    orgId: string;
+    actorType: "system" | "user";
+    actorId: string;
+    action: string;
+    entityType: string;
+    entityId: string;
+    details: Record<string, unknown>;
+};
+export declare function tokenExpiry(tokens: StoredOAuthTokens | undefined, now?: Date): Date | null;
+export declare function tokenScopes(tokens: StoredOAuthTokens | undefined): string[];
+export declare function accessToken(material: ManagedMcpOAuthMaterial): string;
+export declare function oauthRevocationEndpoint(material: ManagedMcpOAuthMaterial | null): string | null;
+export declare const MAX_SCOPE_OPTIONS = 500;
+export declare function safeScopeOption(value: McpExternalScopeOption): McpExternalScopeOption;
+export declare function sanitizeScopeOptions(values: McpExternalScopeOption[]): McpExternalScopeOption[];
+export declare function parseProviderWorkspaceScope(provider: "linear" | "notion", value: unknown): McpExternalScopeOption | null;
+export declare function defaultDiscoverProviderScope(input: {
+    provider: "supabase" | "linear" | "notion";
+    connection: McpConnectionRow;
+    material: ManagedMcpOAuthMaterial;
+    endpoint: string;
+    allowlists: McpDeploymentAllowlists;
+    dnsLookup?: McpDnsLookup;
+}): Promise<ManagedMcpProviderScopeResult>;
+export declare function defaultValidateProviderTools(input: {
+    provider: "supabase" | "linear" | "notion";
+    connection: McpConnectionRow;
+    material: ManagedMcpOAuthMaterial;
+    endpoint: string;
+    allowlists: McpDeploymentAllowlists;
+    dnsLookup?: McpDnsLookup;
+}): Promise<void>;
+export declare function parseOAuthMaterial(value: string): ManagedMcpOAuthMaterial;
+export {};
+//# sourceMappingURL=oauth-helpers.d.ts.map

package/dist/services/mcp/oauth-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-helpers.d.ts","sourceRoot":"","sources":["../../../src/services/mcp/oauth-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EACV,sBAAsB,EACvB,MAAM,kBAAkB,CAAC;AAO1B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAInE,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAE9B,KAAK,gBAAgB,GAAG,OAAO,cAAc,CAAC,YAAY,CAAC;AAE3D,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAClC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;;;;;;;;EAUA;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,SAAS,EAAE,GAAG,OAAa,GAAG,IAAI,GAAG,IAAI,CAGhG;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,SAAS,GAAG,MAAM,EAAE,CAI3E;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,uBAAuB,GAAG,MAAM,CAIrE;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,uBAAuB,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAK/F;AAWD,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAwBrC,wBAAgB,eAAe,CAAC,KAAK,EAAE,sBAAsB,GAAG,sBAAsB,CAMrF;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,sBAAsB,EAAE,GAAG,sBAAsB,EAAE,CAW/F;AAsDD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,EAC7B,KAAK,EAAE,OAAO,GACb,sBAAsB,GAAG,IAAI,CA+C/B;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,QAAQ,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC3C,UAAU,EAAE,gBAAgB,CAAC;IAC7B,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,uBAAuB,CAAC;IACpC,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CA+CzC;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,QAAQ,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC3C,UAAU,EAAE,gBAAgB,CAAC;IAC7B,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,uBAAuB,CAAC;IACpC,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBhB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,uBAAuB,CAQzE"}