@selfhost.dev/mcp-server 0.1.1 → 0.3.0

package/dist/tools/database-users.js

@@ -0,0 +1,181 @@
+import { z } from "zod";
+import { apiRequest } from "../client.js";
+/**
+ * Database users — DBMS-level credentials (distinct from the platform login).
+ *
+ * Endpoints:
+ * - GET    /aws/v1/instances/:id/database_users
+ * - POST   /aws/v1/instances/:id/database_users
+ * - PATCH  /aws/v1/instances/:id/database_users/:user_id
+ * - DELETE /aws/v1/instances/:id/database_users/:user_id
+ * - POST   /aws/v1/instances/:id/database_users/:user_id/rotate_password
+ *
+ * Use these to provision separate credentials for apps / people instead of
+ * sharing the master admin password.
+ */
+const ROLES = ["read_only", "read_write", "admin"];
+export function registerDatabaseUserTools(server) {
+    server.tool("list_database_users", "List DBMS-level users on an instance. Returns each user's id, username, role, status (active | pending | deleting), target database, connection limit, and password expiry metadata.", {
+        instance_id: z.string().min(1),
+    }, async ({ instance_id }) => {
+        const result = await apiRequest(`/aws/v1/instances/${instance_id}/database_users`, {
+            toolName: "list_database_users",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `Failed to list database users (${result.statusCode}): ${result.message}`,
+                    }],
+            };
+        }
+        return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+    });
+    server.tool("create_database_user", "Create a DBMS-level user on an instance. Username 1-31 chars, letters/digits/underscores only. Password 8-128 printable chars. Role determines DB privileges: read_only (SELECT), read_write (SELECT/INSERT/UPDATE/DELETE), admin (broader DDL). Target database scopes the grant to one DB; leave empty for cluster-level access.", {
+        instance_id: z.string().min(1),
+        username: z.string().min(1).max(31).regex(/^[a-zA-Z0-9_]+$/, "letters, digits, underscores only"),
+        password: z.string().min(8).max(128),
+        role: z.enum(ROLES),
+        target_database: z.string().optional().describe("Specific DB to grant on; omit for cluster-wide"),
+        connection_limit: z.number().int().min(1).max(1000).optional()
+            .describe("Max concurrent connections for this user (default unlimited)"),
+        password_expiry_days: z.number().int().min(1).max(365).optional()
+            .describe("Days until the password expires; omit for no expiry"),
+    }, async ({ instance_id, username, password, role, target_database, connection_limit, password_expiry_days }) => {
+        const body = {
+            username,
+            password,
+            role,
+        };
+        if (target_database !== undefined)
+            body.target_database = target_database;
+        if (connection_limit !== undefined)
+            body.connection_limit = connection_limit;
+        if (password_expiry_days !== undefined)
+            body.password_expiry_days = password_expiry_days;
+        const result = await apiRequest(`/aws/v1/instances/${instance_id}/database_users`, {
+            method: "POST",
+            body,
+            toolName: "create_database_user",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `Failed to create database user (${result.statusCode}): ${result.message}`,
+                    }],
+            };
+        }
+        return {
+            content: [
+                { type: "text", text: `Database user \`${username}\` create requested. Status will transition from \`pending\` to \`active\` once applied — poll \`list_database_users\`.` },
+                { type: "text", text: JSON.stringify(result.data, null, 2) },
+            ],
+        };
+    });
+    server.tool("update_database_user", "Update a database user — change role, connection limit, or password expiry. Username and target database are immutable (delete + recreate to change them).", {
+        instance_id: z.string().min(1),
+        user_id: z.string().min(1).describe("Database user PID (from list_database_users)"),
+        role: z.enum(ROLES).optional(),
+        connection_limit: z.number().int().min(1).max(1000).optional(),
+        password_expiry_days: z.number().int().min(0).max(365).optional()
+            .describe("0 removes expiry; otherwise sets a new countdown from now"),
+    }, async ({ instance_id, user_id, role, connection_limit, password_expiry_days }) => {
+        const body = {};
+        if (role !== undefined)
+            body.role = role;
+        if (connection_limit !== undefined)
+            body.connection_limit = connection_limit;
+        if (password_expiry_days !== undefined)
+            body.password_expiry_days = password_expiry_days;
+        if (Object.keys(body).length === 0) {
+            return {
+                content: [{
+                        type: "text",
+                        text: "No changes to apply — pass at least one of role / connection_limit / password_expiry_days.",
+                    }],
+            };
+        }
+        const result = await apiRequest(`/aws/v1/instances/${instance_id}/database_users/${user_id}`, {
+            method: "PATCH",
+            body,
+            toolName: "update_database_user",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `Failed to update database user (${result.statusCode}): ${result.message}`,
+                    }],
+            };
+        }
+        return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+    });
+    server.tool("delete_database_user", "Soft-delete a database user. Existing connections opened by this user are terminated. The record is preserved for audit — contact support to recover.", {
+        instance_id: z.string().min(1),
+        user_id: z.string().min(1),
+        username: z.string().optional().describe("Username for the confirmation message (cosmetic)"),
+        confirm: z.boolean().describe("Must be true to proceed. Existing connections will be dropped."),
+    }, async ({ instance_id, user_id, username, confirm }) => {
+        if (!confirm) {
+            const label = username ? `\`${username}\` (${user_id})` : user_id;
+            return {
+                content: [{
+                        type: "text",
+                        text: `⚠️  About to DELETE database user ${label} on instance ${instance_id}. Apps/scripts using this credential will lose access immediately.\n\nCall again with confirm=true to proceed.`,
+                    }],
+            };
+        }
+        const result = await apiRequest(`/aws/v1/instances/${instance_id}/database_users/${user_id}`, {
+            method: "DELETE",
+            toolName: "delete_database_user",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `Failed to delete database user (${result.statusCode}): ${result.message}`,
+                    }],
+            };
+        }
+        return { content: [{ type: "text", text: "Database user delete requested — status will move to `deleting` and then disappear from the list." }] };
+    });
+    server.tool("rotate_database_user_password", "Rotate the password for a database user. The new password is generated server-side and returned ONCE in the response. SECURITY: save it immediately — there is no way to retrieve it later. Existing connections using the old password are terminated.", {
+        instance_id: z.string().min(1),
+        user_id: z.string().min(1),
+        confirm: z.boolean().describe("Must be true. Old password is invalidated immediately; apps and scripts must pick up the new value."),
+    }, async ({ instance_id, user_id, confirm }) => {
+        if (!confirm) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `⚠️  About to ROTATE the password for database user ${user_id} on instance ${instance_id}.\n\nThe new password is shown ONCE in the response — save it before doing anything else.\nApps and scripts using the old password will lose connections immediately.\n\nCall again with confirm=true to proceed.`,
+                    }],
+            };
+        }
+        const result = await apiRequest(`/aws/v1/instances/${instance_id}/database_users/${user_id}/rotate_password`, {
+            method: "POST",
+            toolName: "rotate_database_user_password",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `Failed to rotate password (${result.statusCode}): ${result.message}`,
+                    }],
+            };
+        }
+        return {
+            content: [
+                { type: "text", text: "🔑 New password generated. Copy it now — it will not be shown again." },
+                { type: "text", text: JSON.stringify(result.data, null, 2) },
+            ],
+        };
+    });
+}
+//# sourceMappingURL=database-users.js.map

package/dist/tools/database-users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-users.js","sourceRoot":"","sources":["../../src/tools/database-users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C;;;;;;;;;;;;GAYG;AAEH,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,CAAU,CAAC;AAE5D,MAAM,UAAU,yBAAyB,CAAC,MAAiB;IAEzD,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,sLAAsL,EACtL;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACxB,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,qBAAqB,WAAW,iBAAiB,EACjD;YACE,QAAQ,EAAE,qBAAqB;YAC/B,gBAAgB,EAAE,IAAI;SACvB,CACF,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kCAAkC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE;qBAChF,CAAC;aACH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,oUAAoU,EACpU;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,mCAAmC,CAAC;QACjG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACpC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACnB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QACjG,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;aACzD,QAAQ,CAAC,8DAA8D,CAAC;QAC7E,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;aAC5D,QAAQ,CAAC,qDAAqD,CAAC;KACrE,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,EAAE,EAAE;QAC3G,MAAM,IAAI,GAA4B;YACpC,QAAQ;YACR,QAAQ;YACR,IAAI;SACL,CAAC;QACF,IAAI,eAAe,KAAK,SAAS;YAAE,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QAC1E,IAAI,gBAAgB,KAAK,SAAS;YAAE,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QAC7E,IAAI,oBAAoB,KAAK,SAAS;YAAE,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;QAEzF,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,qBAAqB,WAAW,iBAAiB,EACjD;YACE,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,QAAQ,EAAE,sBAAsB;YAChC,gBAAgB,EAAE,IAAI;SACvB,CACF,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,mCAAmC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE;qBACjF,CAAC;aACH,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,QAAQ,yHAAyH,EAAE;gBAC5K,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,4JAA4J,EAC5J;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8CAA8C,CAAC;QACnF,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;QAC9B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC9D,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;aAC5D,QAAQ,CAAC,2DAA2D,CAAC;KAC3E,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,EAAE,EAAE;QAC/E,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACzC,IAAI,gBAAgB,KAAK,SAAS;YAAE,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QAC7E,IAAI,oBAAoB,KAAK,SAAS;YAAE,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;QAEzF,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,4FAA4F;qBACnG,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,qBAAqB,WAAW,mBAAmB,OAAO,EAAE,EAC5D;YACE,MAAM,EAAE,OAAO;YACf,IAAI;YACJ,QAAQ,EAAE,sBAAsB;YAChC,gBAAgB,EAAE,IAAI;SACvB,CACF,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,mCAAmC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE;qBACjF,CAAC;aACH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,uJAAuJ,EACvJ;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;QAC5F,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;KAChG,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,OAAO,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAClE,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,qCAAqC,KAAK,gBAAgB,WAAW,gHAAgH;qBAC5L,CAAC;aACH,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,qBAAqB,WAAW,mBAAmB,OAAO,EAAE,EAC5D;YACE,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,sBAAsB;YAChC,gBAAgB,EAAE,IAAI;SACvB,CACF,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,mCAAmC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE;qBACjF,CAAC;aACH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mGAAmG,EAAE,CAAC,EAAE,CAAC;IACpJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,+BAA+B,EAC/B,yPAAyP,EACzP;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,qGAAqG,CAAC;KACrI,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,sDAAsD,OAAO,gBAAgB,WAAW,mNAAmN;qBAClT,CAAC;aACH,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,qBAAqB,WAAW,mBAAmB,OAAO,kBAAkB,EAC5E;YACE,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,+BAA+B;YACzC,gBAAgB,EAAE,IAAI;SACvB,CACF,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,8BAA8B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE;qBAC5E,CAAC;aACH,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sEAAsE,EAAE;gBAC9F,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/hetzner.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerHetznerTools(server: McpServer): void;

package/dist/tools/hetzner.js

@@ -0,0 +1,263 @@
+import { z } from "zod";
+import { apiRequest } from "../client.js";
+import { session } from "../session.js";
+/**
+ * Hetzner Cloud — Postgres-only provisioning.
+ *
+ * Backend endpoints (added in selfhost-dev/selfhost PR #983):
+ * - POST   /hetzner/v1/instances             — provision
+ * - GET    /hetzner/v1/instances/:pid        — read
+ * - GET    /hetzner/v1/instances/:pid/status — provisioning progress
+ * - DELETE /hetzner/v1/instances/:pid        — destroy
+ *
+ * Limitations vs AWS today:
+ * - Postgres only (no MySQL, no MongoDB)
+ * - No list endpoint — callers must keep track of `pid` after create
+ * - No start / stop / reboot / update / fork
+ * - No scaling, no PITR, no PgBouncer, no database-user management
+ *
+ * Locations + server types are hardcoded here to mirror the Rails CLI
+ * registry. When the backend ships discovery endpoints we'll switch these
+ * tools over.
+ */
+function resolveOrgId(organization_id) {
+    return organization_id || session.getActiveOrgId();
+}
+const noOrgMessage = "No organization selected. Call `select_organization` first or pass an organization_id.";
+// --- Static reference data ---------------------------------------------------
+const CLOUD_PROVIDERS = [
+    {
+        id: "aws",
+        name: "Amazon Web Services (AWS)",
+        capabilities: "Full lifecycle: create / list / start / stop / reboot / update / fork / delete; multi-AZ; replicas; auto-scaling; scheduled scaling; PITR; PgBouncer; database users; alerts; backup policies.",
+        create_tool: "create_instance",
+        list_tool: "list_instances",
+        notes: "Production-ready. Use for any workload that needs HA, replicas, or any of the lifecycle ops above. Available in 20+ AWS regions.",
+    },
+    {
+        id: "hetzner",
+        name: "Hetzner Cloud",
+        capabilities: "Provisioning only: create / read / status / delete. No start / stop / reboot / update / fork; no scaling; no PITR; no PgBouncer; no database users; no alerts.",
+        create_tool: "create_hetzner_instance",
+        list_tool: null,
+        notes: "Cheaper than AWS for Postgres workloads but BE feature surface is currently limited. Use only when the user explicitly asks for Hetzner. Postgres only.",
+    },
+];
+const HETZNER_LOCATIONS = [
+    { code: "fsn1", name: "Falkenstein", country: "Germany", continent: "Europe" },
+    { code: "nbg1", name: "Nuremberg", country: "Germany", continent: "Europe" },
+    { code: "hel1", name: "Helsinki", country: "Finland", continent: "Europe" },
+    { code: "ash", name: "Ashburn, VA", country: "United States", continent: "North America" },
+    { code: "sin", name: "Singapore", country: "Singapore", continent: "Asia" },
+];
+const HETZNER_SERVER_TYPES = [
+    { code: "cpx11", vcpu: 2, memory_gb: 2, disk_gb: 40, cpu_family: "AMD" },
+    { code: "cpx21", vcpu: 3, memory_gb: 4, disk_gb: 80, cpu_family: "AMD" },
+    { code: "cpx22", vcpu: 4, memory_gb: 4, disk_gb: 80, cpu_family: "AMD" },
+    { code: "cpx31", vcpu: 4, memory_gb: 8, disk_gb: 160, cpu_family: "AMD" },
+    { code: "cpx42", vcpu: 8, memory_gb: 16, disk_gb: 240, cpu_family: "AMD" },
+    { code: "cpx51", vcpu: 16, memory_gb: 32, disk_gb: 360, cpu_family: "AMD" },
+];
+// --- Schemas -----------------------------------------------------------------
+const cidrRangeSchema = z.object({
+    cidr: z.string().min(1).describe("CIDR range, e.g. 10.0.0.0/24"),
+    name: z.string().optional().describe("Friendly label"),
+    port: z.number().int().optional().describe("Port allowed by this rule (default: 5432)"),
+    description: z.string().optional(),
+});
+const LOCATION_CODES = HETZNER_LOCATIONS.map((l) => l.code);
+const SERVER_TYPE_CODES = HETZNER_SERVER_TYPES.map((s) => s.code);
+// --- Registration ------------------------------------------------------------
+export function registerHetznerTools(server) {
+    // ----- Provider discovery -------------------------------------------------
+    server.tool("list_cloud_providers", "List the cloud providers SelfHost can provision Postgres on. Call this whenever the user expresses an intent to create a database — present the options and ask which one they want before choosing the create tool. The response includes capabilities and the specific create tool for each provider.", {}, async () => {
+        return {
+            content: [
+                { type: "text", text: JSON.stringify(CLOUD_PROVIDERS, null, 2) },
+            ],
+        };
+    });
+    server.tool("list_hetzner_locations", "List the Hetzner Cloud locations (datacenters) available for provisioning. Returns an array of `{code, name, country, continent}`. The `code` is what `create_hetzner_instance` expects for its `region` param. Ask the user which one they want before creating.", {}, async () => {
+        return {
+            content: [
+                { type: "text", text: JSON.stringify(HETZNER_LOCATIONS, null, 2) },
+            ],
+        };
+    });
+    server.tool("list_hetzner_server_types", "List the Hetzner Cloud server types available for Postgres. Returns an array of `{code, vcpu, memory_gb, disk_gb, cpu_family}`. The `code` is what `create_hetzner_instance` expects for its `server_type` param. Note: `disk_gb` is the server's local disk; the database storage is a separately-attached Hetzner Volume sized via the `storage_size` param at create time.", {}, async () => {
+        return {
+            content: [
+                { type: "text", text: JSON.stringify(HETZNER_SERVER_TYPES, null, 2) },
+            ],
+        };
+    });
+    // ----- Provisioning -------------------------------------------------------
+    server.tool("create_hetzner_instance", `Provision a new Postgres database on Hetzner Cloud.
+
+RECOMMENDED FLOW:
+1. Call \`list_cloud_providers\` and ask the user which provider they want.
+2. If Hetzner: call \`list_hetzner_locations\` and let the user pick a region.
+3. Call \`list_hetzner_server_types\` and let the user pick a size.
+4. Confirm storage_size (separate Hetzner Volume, in GB).
+5. Then call this tool.
+
+IMPORTANT:
+- The password returned in the response is shown ONCE. Save it immediately — there's no way to retrieve it.
+- Hetzner integration is currently provision/delete only. After creation, use \`get_hetzner_instance_status\` to poll provisioning progress, and \`get_hetzner_instance\` to read details. To remove it, use \`delete_hetzner_instance\`.
+- Provisioning takes ~5-10 minutes (network + firewall + SSH key + server + volume + load balancer + Ansible/autobase playbook + Cloudflare DNS).`, {
+        organization_id: z.string().optional()
+            .describe("Organization PID (defaults to active org)"),
+        name: z.string().min(1).max(63)
+            .describe("Instance name (used for DNS host)"),
+        region: z.enum(LOCATION_CODES)
+            .describe("Hetzner location code — call list_hetzner_locations to see options"),
+        server_type: z.enum(SERVER_TYPE_CODES)
+            .describe("Hetzner server type — call list_hetzner_server_types to see options"),
+        storage_size: z.number().int().min(10).max(10240)
+            .describe("Database storage size in GB (Hetzner Volume, separate from server local disk)"),
+        db_version: z.string().optional()
+            .describe("Postgres version (default: 18)"),
+        high_availability: z.boolean().optional()
+            .describe("Provision a 3-node cluster with a load balancer (extra ~€5/mo). Default: false (single-node, public IP only)"),
+        public_access: z.boolean().optional()
+            .describe("Expose port 5432 to the internet (default: true). Combine with allowed_cidr_ranges to restrict."),
+        backup_enabled: z.boolean().optional()
+            .describe("Enable automated backups (default: true)"),
+        username: z.string().regex(/^[a-z_][a-z0-9_]{0,30}$/i).optional()
+            .describe("Database username (default: postgres)"),
+        delete_protection: z.boolean().optional()
+            .describe("Prevent accidental deletion (recommended for production)"),
+        allowed_cidr_ranges: z.array(cidrRangeSchema).max(24).optional()
+            .describe("IP whitelist on port 5432 (max 24 ranges). Merged with the internal 10.0.0.0/16 rule."),
+    }, async (params) => {
+        const orgId = resolveOrgId(params.organization_id);
+        if (!orgId) {
+            return { content: [{ type: "text", text: noOrgMessage }] };
+        }
+        const body = {
+            organization_id: orgId,
+            name: params.name,
+            region: params.region,
+            server_type: params.server_type,
+            storage_size: params.storage_size,
+        };
+        if (params.db_version !== undefined)
+            body.db_version = params.db_version;
+        if (params.high_availability !== undefined)
+            body.high_availability = params.high_availability;
+        if (params.public_access !== undefined)
+            body.public_access = params.public_access;
+        if (params.backup_enabled !== undefined)
+            body.backup_enabled = params.backup_enabled;
+        if (params.username !== undefined)
+            body.username = params.username;
+        if (params.delete_protection !== undefined)
+            body.delete_protection = params.delete_protection;
+        if (params.allowed_cidr_ranges !== undefined)
+            body.allowed_cidr_ranges = params.allowed_cidr_ranges;
+        const result = await apiRequest("/hetzner/v1/instances", {
+            method: "POST",
+            body,
+            toolName: "create_hetzner_instance",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `Failed to create Hetzner instance (${result.statusCode}): ${result.message}`,
+                    }],
+            };
+        }
+        const data = result.data;
+        const lines = [
+            "Hetzner instance provisioning started!",
+            "",
+            `PID: ${data.pid}`,
+        ];
+        if (data.host)
+            lines.push(`Host: ${data.host}`);
+        if (data.username)
+            lines.push(`Username: ${data.username}`);
+        if (data.password) {
+            lines.push(`Password: ${data.password}`);
+            lines.push("");
+            lines.push("⚠️  SAVE THIS PASSWORD NOW — it cannot be retrieved again.");
+        }
+        lines.push("");
+        lines.push(`Poll provisioning progress with \`get_hetzner_instance_status\` (pid: ${data.pid}). Provisioning typically takes 5–10 minutes.`);
+        return {
+            content: [
+                { type: "text", text: lines.join("\n") },
+                { type: "text", text: JSON.stringify(data, null, 2) },
+            ],
+        };
+    });
+    server.tool("get_hetzner_instance", "Get details for a single Hetzner instance by PID. Returns the full record including name, region, server_type, storage_size, high_availability, public_access, host (DNS name), and creation timestamps.", {
+        pid: z.string().min(1).describe("Hetzner instance PID (returned by create_hetzner_instance)"),
+    }, async ({ pid }) => {
+        const result = await apiRequest(`/hetzner/v1/instances/${pid}`, {
+            toolName: "get_hetzner_instance",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `Failed to get Hetzner instance (${result.statusCode}): ${result.message}`,
+                    }],
+            };
+        }
+        return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+    });
+    server.tool("get_hetzner_instance_status", "Poll the provisioning progress of a Hetzner instance. Returns `{pid, status, progress: {step_name: 'completed' | 'pending', ...}}`. Use this after `create_hetzner_instance` until `status` is terminal (e.g. `running` or `failed`). Steps include network, firewall, ssh_key, server, volume, load_balancer (HA only), ansible, finalize.", {
+        pid: z.string().min(1),
+    }, async ({ pid }) => {
+        const result = await apiRequest(`/hetzner/v1/instances/${pid}/status`, {
+            toolName: "get_hetzner_instance_status",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `Failed to get Hetzner instance status (${result.statusCode}): ${result.message}`,
+                    }],
+            };
+        }
+        return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+    });
+    server.tool("delete_hetzner_instance", "Delete a Hetzner instance and all associated resources (server, volume, firewall, network, load balancer if HA, DNS record). IRREVERSIBLE — there's no `start` / `stop` on Hetzner; deletion is the only way to remove an instance.", {
+        pid: z.string().min(1),
+        confirm: z.boolean().describe("Must be true to proceed. ALL DATA on this instance will be permanently lost."),
+    }, async ({ pid, confirm }) => {
+        if (!confirm) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `⚠️  About to DELETE Hetzner instance ${pid}.\n\nThis action is IRREVERSIBLE. Server, volume, firewall, network, load balancer, and DNS records will all be removed. All data will be lost.\n\nCall again with confirm=true to proceed.`,
+                    }],
+            };
+        }
+        const result = await apiRequest(`/hetzner/v1/instances/${pid}`, {
+            method: "DELETE",
+            toolName: "delete_hetzner_instance",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `Failed to delete Hetzner instance (${result.statusCode}): ${result.message}`,
+                    }],
+            };
+        }
+        return {
+            content: [
+                { type: "text", text: `Hetzner instance ${pid} delete requested. Resources are being torn down.` },
+                { type: "text", text: JSON.stringify(result.data, null, 2) },
+            ],
+        };
+    });
+}
+//# sourceMappingURL=hetzner.js.map

package/dist/tools/hetzner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hetzner.js","sourceRoot":"","sources":["../../src/tools/hetzner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC;;;;;;;;;;;;;;;;;;GAkBG;AAEH,SAAS,YAAY,CAAC,eAAwB;IAC5C,OAAO,eAAe,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,YAAY,GAAG,wFAAwF,CAAC;AAE9G,gFAAgF;AAEhF,MAAM,eAAe,GAAG;IACtB;QACE,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,2BAA2B;QACjC,YAAY,EACV,gMAAgM;QAClM,WAAW,EAAE,iBAAiB;QAC9B,SAAS,EAAE,gBAAgB;QAC3B,KAAK,EACH,kIAAkI;KACrI;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,eAAe;QACrB,YAAY,EACV,gKAAgK;QAClK,WAAW,EAAE,yBAAyB;QACtC,SAAS,EAAE,IAAI;QACf,KAAK,EACH,yJAAyJ;KAC5J;CACF,CAAC;AAEF,MAAM,iBAAiB,GAAG;IACxB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE;IAC9E,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE;IAC5E,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE;IAC3E,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe,EAAE;IAC1F,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE;CAC5E,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;IACxE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;IACxE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;IACxE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE;IACzE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE;IAC1E,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE;CAC5E,CAAC;AAEF,gFAAgF;AAEhF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAChE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACtD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACvF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAA0B,CAAC;AACrF,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAG/D,CAAC;AAEF,gFAAgF;AAEhF,MAAM,UAAU,oBAAoB,CAAC,MAAiB;IAEpD,6EAA6E;IAE7E,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,ySAAyS,EACzS,EAAE,EACF,KAAK,IAAI,EAAE;QACT,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aACjE;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,mQAAmQ,EACnQ,EAAE,EACF,KAAK,IAAI,EAAE;QACT,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aACnE;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,2BAA2B,EAC3B,+WAA+W,EAC/W,EAAE,EACF,KAAK,IAAI,EAAE;QACT,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aACtE;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,6EAA6E;IAE7E,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB;;;;;;;;;;;;kJAY8I,EAC9I;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;aACjC,QAAQ,CAAC,2CAA2C,CAAC;QAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;aAC1B,QAAQ,CAAC,mCAAmC,CAAC;QAClD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;aACzB,QAAQ,CAAC,oEAAoE,CAAC;QACnF,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;aACjC,QAAQ,CAAC,qEAAqE,CAAC;QACpF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;aAC5C,QAAQ,CAAC,+EAA+E,CAAC;QAC9F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;aAC5B,QAAQ,CAAC,gCAAgC,CAAC;QAC/C,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;aACpC,QAAQ,CAAC,8GAA8G,CAAC;QAC7H,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;aAChC,QAAQ,CAAC,iGAAiG,CAAC;QAChH,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;aACjC,QAAQ,CAAC,0CAA0C,CAAC;QACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE;aAC5D,QAAQ,CAAC,uCAAuC,CAAC;QACtD,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;aACpC,QAAQ,CAAC,0DAA0D,CAAC;QACzE,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;aAC3D,QAAQ,CAAC,uFAAuF,CAAC;KACvG,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,GAA4B;YACpC,eAAe,EAAE,KAAK;YACtB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;QACF,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACzE,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS;YAAE,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAC9F,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;YAAE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAClF,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;YAAE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QACrF,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACnE,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS;YAAE,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAC9F,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS;YAAE,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,CAAC;QAEpG,MAAM,MAAM,GAAG,MAAM,UAAU,CAQ5B,uBAAuB,EAAE;YAC1B,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,QAAQ,EAAE,yBAAyB;YACnC,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,sCAAsC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE;qBACpF,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAK,CAAC;QAC1B,MAAM,KAAK,GAAa;YACtB,wCAAwC;YACxC,EAAE;YACF,QAAQ,IAAI,CAAC,GAAG,EAAE;SACnB,CAAC;QACF,IAAI,IAAI,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,yEAAyE,IAAI,CAAC,GAAG,+CAA+C,CACjI,CAAC;QAEF,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACxC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aACtD;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,0MAA0M,EAC1M;QACE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4DAA4D,CAAC;KAC9F,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,yBAAyB,GAAG,EAAE,EAAE;YACvE,QAAQ,EAAE,sBAAsB;YAChC,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,mCAAmC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE;qBACjF,CAAC;aACH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,6BAA6B,EAC7B,6UAA6U,EAC7U;QACE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACvB,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,yBAAyB,GAAG,SAAS,EACrC;YACE,QAAQ,EAAE,6BAA6B;YACvC,gBAAgB,EAAE,IAAI;SACvB,CACF,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,0CAA0C,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE;qBACxF,CAAC;aACH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB,qOAAqO,EACrO;QACE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;KAC9G,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE;QACzB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,wCAAwC,GAAG,6LAA6L;qBAC/O,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,yBAAyB,GAAG,EAAE,EAAE;YACvE,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,yBAAyB;YACnC,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,sCAAsC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE;qBACpF,CAAC;aACH,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,GAAG,mDAAmD,EAAE;gBAClG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}