@sonoma-security/mcp-gateway 0.1.0

package/dist/gateway.d.ts

@@ -0,0 +1,66 @@
+/**
+ * MCP Gateway - Core proxy implementation
+ *
+ * Architecture:
+ * AI Client (stdio) -> Gateway Server -> [Upstream MCP Clients] -> Upstream Servers
+ *
+ * The gateway:
+ * 1. Exposes itself as an MCP server to the AI client
+ * 2. Spawns upstream MCP servers and connects as a client to each
+ * 3. Aggregates tools from all upstream servers
+ * 4. Forwards tool calls to the appropriate upstream server
+ * 5. Reports telemetry to Sonoma API
+ * 6. Enforces policy (block/allow tools)
+ */
+import type { GatewayConfig, ToolCallEvent } from "./types";
+export declare class McpGateway {
+    private config;
+    private server;
+    private upstreams;
+    private toolToServer;
+    private events;
+    private debug;
+    private sonomaClient;
+    private policy;
+    private policyRefreshInterval;
+    constructor(config: GatewayConfig);
+    private log;
+    /**
+     * Check if a tool is blocked by policy
+     * @returns true if blocked, false if allowed
+     */
+    private isToolBlocked;
+    /**
+     * Set up MCP server handlers
+     */
+    private setupHandlers;
+    /**
+     * Connect to an upstream MCP server
+     */
+    private connectUpstream;
+    /**
+     * Record a tool call event for telemetry
+     */
+    private recordEvent;
+    /**
+     * Refresh policy from Sonoma API
+     */
+    private refreshPolicy;
+    /**
+     * Start the gateway
+     */
+    start(): Promise<void>;
+    /**
+     * Stop the gateway and disconnect from all upstreams
+     */
+    stop(): Promise<void>;
+    /**
+     * Get recorded events (for telemetry export)
+     */
+    getEvents(): ToolCallEvent[];
+    /**
+     * Clear recorded events
+     */
+    clearEvents(): void;
+}
+//# sourceMappingURL=gateway.d.ts.map

package/dist/gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAeH,OAAO,KAAK,EACV,aAAa,EAEb,aAAa,EACd,MAAM,SAAS,CAAC;AAUjB,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAA8C;IAC/D,OAAO,CAAC,YAAY,CAAkC;IACtD,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,KAAK,CAAU;IACvB,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,MAAM,CAA+B;IAC7C,OAAO,CAAC,qBAAqB,CAA+C;gBAEhE,MAAM,EAAE,aAAa;IA6BjC,OAAO,CAAC,GAAG;IAMX;;;OAGG;IACH,OAAO,CAAC,aAAa;IAwCrB;;OAEG;IACH,OAAO,CAAC,aAAa;IAkIrB;;OAEG;YACW,eAAe;IA2C7B;;OAEG;IACH,OAAO,CAAC,WAAW;IAUnB;;OAEG;YACW,aAAa;IAW3B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAsC5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgC3B;;OAEG;IACH,SAAS,IAAI,aAAa,EAAE;IAI5B;;OAEG;IACH,WAAW,IAAI,IAAI;CAGpB"}

package/dist/gateway.js

@@ -0,0 +1,346 @@
+/**
+ * MCP Gateway - Core proxy implementation
+ *
+ * Architecture:
+ * AI Client (stdio) -> Gateway Server -> [Upstream MCP Clients] -> Upstream Servers
+ *
+ * The gateway:
+ * 1. Exposes itself as an MCP server to the AI client
+ * 2. Spawns upstream MCP servers and connects as a client to each
+ * 3. Aggregates tools from all upstream servers
+ * 4. Forwards tool calls to the appropriate upstream server
+ * 5. Reports telemetry to Sonoma API
+ * 6. Enforces policy (block/allow tools)
+ */
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { SonomaClient } from "./sonoma-client";
+export class McpGateway {
+    config;
+    server;
+    upstreams = new Map();
+    toolToServer = new Map();
+    events = [];
+    debug;
+    sonomaClient = null;
+    policy = null;
+    policyRefreshInterval = null;
+    constructor(config) {
+        this.config = config;
+        this.debug = config.debug ?? false;
+        // Initialize Sonoma client if endpoint provided
+        // Auth priority: OAuth token (user-linked) > org API key (device-level)
+        if (config.sonomaEndpoint) {
+            this.sonomaClient = new SonomaClient({
+                endpoint: config.sonomaEndpoint,
+                orgApiKey: config.sonomaApiKey,
+                debug: this.debug,
+            });
+        }
+        this.server = new Server({
+            name: "sonoma-mcp-gateway",
+            version: "0.1.0",
+        }, {
+            capabilities: {
+                tools: {},
+            },
+        });
+        this.setupHandlers();
+    }
+    log(message, ...args) {
+        if (this.debug) {
+            console.error(`[gateway] ${message}`, ...args);
+        }
+    }
+    /**
+     * Check if a tool is blocked by policy
+     * @returns true if blocked, false if allowed
+     */
+    isToolBlocked(serverName, toolName) {
+        if (!this.policy || this.policy.mode === "disabled") {
+            return false;
+        }
+        // Get identifiers to check
+        const upstream = this.upstreams.get(serverName);
+        const packageName = upstream?.config.packageName;
+        // Identifiers to check: packageName (preferred) or server name
+        const identifiers = [];
+        if (packageName)
+            identifiers.push(packageName);
+        identifiers.push(serverName);
+        // Check if any identifier is in the list
+        const matchedEntry = this.policy.list.find((entry) => identifiers.includes(entry.identifier));
+        if (this.policy.mode === "blocklist") {
+            // Blocklist: block if found in list with blocked status
+            if (matchedEntry && matchedEntry.status === "blocked") {
+                this.log(`Tool blocked by policy: ${serverName}.${toolName}`);
+                return true;
+            }
+            return false;
+        }
+        if (this.policy.mode === "allowlist") {
+            // Allowlist: block if NOT found in list with allowed status
+            if (!matchedEntry || matchedEntry.status !== "allowed") {
+                this.log(`Tool not in allowlist: ${serverName}.${toolName}`);
+                return true;
+            }
+            return false;
+        }
+        return false;
+    }
+    /**
+     * Set up MCP server handlers
+     */
+    setupHandlers() {
+        // Handle tools/list - aggregate tools from all upstreams
+        this.server.setRequestHandler(ListToolsRequestSchema, async () => {
+            const allTools = [];
+            for (const [serverName, upstream] of this.upstreams) {
+                for (const tool of upstream.tools) {
+                    // Namespace tool names to avoid conflicts: serverName__toolName
+                    const namespacedTool = {
+                        ...tool,
+                        name: `${serverName}__${tool.name}`,
+                        description: `[${serverName}] ${tool.description || ""}`,
+                    };
+                    allTools.push(namespacedTool);
+                    this.toolToServer.set(namespacedTool.name, serverName);
+                }
+            }
+            this.log(`Returning ${allTools.length} tools from ${this.upstreams.size} servers`);
+            return { tools: allTools };
+        });
+        // Handle tools/call - forward to appropriate upstream
+        this.server.setRequestHandler(CallToolRequestSchema, async (request) => {
+            const { name, arguments: args } = request.params;
+            const startTime = Date.now();
+            // Parse namespaced tool name
+            const separatorIndex = name.indexOf("__");
+            if (separatorIndex === -1) {
+                return {
+                    isError: true,
+                    content: [
+                        {
+                            type: "text",
+                            text: `Invalid tool name format: ${name}. Expected serverName__toolName`,
+                        },
+                    ],
+                };
+            }
+            const serverName = name.slice(0, separatorIndex);
+            const toolName = name.slice(separatorIndex + 2);
+            const upstream = this.upstreams.get(serverName);
+            if (!upstream) {
+                return {
+                    isError: true,
+                    content: [
+                        {
+                            type: "text",
+                            text: `Unknown server: ${serverName}`,
+                        },
+                    ],
+                };
+            }
+            // Check policy before forwarding
+            if (this.isToolBlocked(serverName, toolName)) {
+                const event = {
+                    serverName,
+                    toolName,
+                    timestamp: new Date().toISOString(),
+                    durationMs: Date.now() - startTime,
+                    status: "blocked",
+                    argumentKeys: args ? Object.keys(args) : [],
+                };
+                this.recordEvent(event);
+                return {
+                    isError: true,
+                    content: [
+                        {
+                            type: "text",
+                            text: `Tool ${serverName}.${toolName} is blocked by organization policy`,
+                        },
+                    ],
+                };
+            }
+            this.log(`Forwarding tool call: ${serverName}.${toolName}`);
+            try {
+                const result = await upstream.client.callTool({
+                    name: toolName,
+                    arguments: args,
+                });
+                this.recordEvent({
+                    serverName,
+                    toolName,
+                    timestamp: new Date().toISOString(),
+                    durationMs: Date.now() - startTime,
+                    status: "success",
+                    argumentKeys: args ? Object.keys(args) : [],
+                });
+                return result;
+            }
+            catch (error) {
+                const errorMessage = error instanceof Error ? error.message : String(error);
+                this.recordEvent({
+                    serverName,
+                    toolName,
+                    timestamp: new Date().toISOString(),
+                    durationMs: Date.now() - startTime,
+                    status: "error",
+                    errorMessage,
+                    argumentKeys: args ? Object.keys(args) : [],
+                });
+                return {
+                    isError: true,
+                    content: [
+                        {
+                            type: "text",
+                            text: `Error calling ${serverName}.${toolName}: ${errorMessage}`,
+                        },
+                    ],
+                };
+            }
+        });
+    }
+    /**
+     * Connect to an upstream MCP server
+     */
+    async connectUpstream(config) {
+        this.log(`Connecting to upstream: ${config.name} (${config.command})`);
+        const client = new Client({
+            name: `gateway-client-${config.name}`,
+            version: "0.1.0",
+        }, {
+            capabilities: {},
+        });
+        // Build env with only defined values (filter out undefined from process.env)
+        let env;
+        if (config.env) {
+            env = {};
+            for (const [key, value] of Object.entries(process.env)) {
+                if (value !== undefined) {
+                    env[key] = value;
+                }
+            }
+            Object.assign(env, config.env);
+        }
+        const transport = new StdioClientTransport({
+            command: config.command,
+            args: config.args,
+            env,
+            cwd: config.cwd,
+        });
+        await client.connect(transport);
+        // Fetch tools from this upstream
+        const toolsResult = await client.listTools();
+        const tools = toolsResult.tools || [];
+        this.log(`  ${config.name}: ${tools.length} tools available`);
+        return { config, client, transport, tools };
+    }
+    /**
+     * Record a tool call event for telemetry
+     */
+    recordEvent(event) {
+        this.events.push(event);
+        this.log(`Event: ${event.serverName}.${event.toolName} [${event.status}] ${event.durationMs}ms`);
+        // Queue event for Sonoma telemetry if connected
+        if (this.sonomaClient) {
+            this.sonomaClient.queueEvent(event);
+        }
+    }
+    /**
+     * Refresh policy from Sonoma API
+     */
+    async refreshPolicy() {
+        if (!this.sonomaClient)
+            return;
+        try {
+            this.policy = await this.sonomaClient.fetchPolicy();
+            this.log(`Policy refreshed: mode=${this.policy.mode}, ${this.policy.list.length} rules`);
+        }
+        catch (error) {
+            this.log(`Failed to refresh policy: ${error}`);
+        }
+    }
+    /**
+     * Start the gateway
+     */
+    async start() {
+        this.log("Starting MCP Gateway...");
+        // Fetch initial policy from Sonoma
+        if (this.sonomaClient) {
+            await this.refreshPolicy();
+            // Start periodic policy refresh (every 5 minutes)
+            this.policyRefreshInterval = setInterval(() => {
+                this.refreshPolicy().catch((err) => {
+                    this.log(`Policy refresh error: ${err}`);
+                });
+            }, 5 * 60 * 1000);
+            // Start periodic telemetry flush (every 30 seconds)
+            this.sonomaClient.startTelemetryFlush(30 * 1000);
+        }
+        // Connect to all upstream servers
+        for (const serverConfig of this.config.servers) {
+            try {
+                const upstream = await this.connectUpstream(serverConfig);
+                this.upstreams.set(serverConfig.name, upstream);
+            }
+            catch (error) {
+                console.error(`Failed to connect to ${serverConfig.name}:`, error);
+                // Continue with other servers
+            }
+        }
+        this.log(`Connected to ${this.upstreams.size}/${this.config.servers.length} upstreams`);
+        // Start the server (stdio transport to AI client)
+        const transport = new StdioServerTransport();
+        await this.server.connect(transport);
+        this.log("Gateway ready - listening for requests");
+    }
+    /**
+     * Stop the gateway and disconnect from all upstreams
+     */
+    async stop() {
+        this.log("Stopping gateway...");
+        // Stop policy refresh
+        if (this.policyRefreshInterval) {
+            clearInterval(this.policyRefreshInterval);
+            this.policyRefreshInterval = null;
+        }
+        // Flush remaining telemetry
+        if (this.sonomaClient) {
+            this.sonomaClient.stopTelemetryFlush();
+            try {
+                await this.sonomaClient.flushTelemetry();
+            }
+            catch (error) {
+                this.log(`Failed to flush telemetry on shutdown: ${error}`);
+            }
+        }
+        for (const [name, upstream] of this.upstreams) {
+            try {
+                await upstream.client.close();
+                this.log(`Disconnected from ${name}`);
+            }
+            catch (error) {
+                console.error(`Error disconnecting from ${name}:`, error);
+            }
+        }
+        await this.server.close();
+        this.log("Gateway stopped");
+    }
+    /**
+     * Get recorded events (for telemetry export)
+     */
+    getEvents() {
+        return [...this.events];
+    }
+    /**
+     * Clear recorded events
+     */
+    clearEvents() {
+        this.events = [];
+    }
+}
+//# sourceMappingURL=gateway.js.map

package/dist/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAW5C,OAAO,EAAE,YAAY,EAAuB,MAAM,iBAAiB,CAAC;AASpE,MAAM,OAAO,UAAU;IACb,MAAM,CAAgB;IACtB,MAAM,CAAS;IACf,SAAS,GAAoC,IAAI,GAAG,EAAE,CAAC;IACvD,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAC;IAC9C,MAAM,GAAoB,EAAE,CAAC;IAC7B,KAAK,CAAU;IACf,YAAY,GAAwB,IAAI,CAAC;IACzC,MAAM,GAA0B,IAAI,CAAC;IACrC,qBAAqB,GAA0C,IAAI,CAAC;IAE5E,YAAY,MAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC;QAEnC,gDAAgD;QAChD,wEAAwE;QACxE,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC;gBACnC,QAAQ,EAAE,MAAM,CAAC,cAAc;gBAC/B,SAAS,EAAE,MAAM,CAAC,YAAY;gBAC9B,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CACtB;YACE,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,OAAO;SACjB,EACD;YACE,YAAY,EAAE;gBACZ,KAAK,EAAE,EAAE;aACV;SACF,CACF,CAAC;QAEF,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAEO,GAAG,CAAC,OAAe,EAAE,GAAG,IAAe;QAC7C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,aAAa,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,aAAa,CAAC,UAAkB,EAAE,QAAgB;QACxD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC;QAEjD,+DAA+D;QAC/D,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,IAAI,WAAW;YAAE,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/C,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE7B,yCAAyC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CACxC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAClD,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACrC,wDAAwD;YACxD,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACtD,IAAI,CAAC,GAAG,CAAC,2BAA2B,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC;gBAC9D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACrC,4DAA4D;YAC5D,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvD,IAAI,CAAC,GAAG,CAAC,0BAA0B,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC;gBAC7D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,aAAa;QACnB,yDAAyD;QACzD,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAC3B,sBAAsB,EACtB,KAAK,IAA8B,EAAE;YACnC,MAAM,QAAQ,GAAW,EAAE,CAAC;YAE5B,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBAClC,gEAAgE;oBAChE,MAAM,cAAc,GAAS;wBAC3B,GAAG,IAAI;wBACP,IAAI,EAAE,GAAG,UAAU,KAAK,IAAI,CAAC,IAAI,EAAE;wBACnC,WAAW,EAAE,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE;qBACzD,CAAC;oBACF,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBAC9B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,eAAe,IAAI,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,CAAC;YACnF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC7B,CAAC,CACF,CAAC;QAEF,sDAAsD;QACtD,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAC3B,qBAAqB,EACrB,KAAK,EAAE,OAAO,EAA2B,EAAE;YACzC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;YACjD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,6BAA6B;YAC7B,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,cAAc,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,6BAA6B,IAAI,iCAAiC;yBACzE;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;YACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;YAEhD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,mBAAmB,UAAU,EAAE;yBACtC;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,iCAAiC;YACjC,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC7C,MAAM,KAAK,GAAkB;oBAC3B,UAAU;oBACV,QAAQ;oBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAClC,MAAM,EAAE,SAAS;oBACjB,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;iBAC5C,CAAC;gBACF,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBAExB,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,QAAQ,UAAU,IAAI,QAAQ,oCAAoC;yBACzE;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,yBAAyB,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC;YAE5D,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;oBAC5C,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;gBAEH,IAAI,CAAC,WAAW,CAAC;oBACf,UAAU;oBACV,QAAQ;oBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAClC,MAAM,EAAE,SAAS;oBACjB,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;iBAC5C,CAAC,CAAC;gBAEH,OAAO,MAAwB,CAAC;YAClC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAE5E,IAAI,CAAC,WAAW,CAAC;oBACf,UAAU;oBACV,QAAQ;oBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAClC,MAAM,EAAE,OAAO;oBACf,YAAY;oBACZ,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;iBAC5C,CAAC,CAAC;gBAEH,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,iBAAiB,UAAU,IAAI,QAAQ,KAAK,YAAY,EAAE;yBACjE;qBACF;iBACF,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAAC,MAAuB;QACnD,IAAI,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;YACE,IAAI,EAAE,kBAAkB,MAAM,CAAC,IAAI,EAAE;YACrC,OAAO,EAAE,OAAO;SACjB,EACD;YACE,YAAY,EAAE,EAAE;SACjB,CACF,CAAC;QAEF,6EAA6E;QAC7E,IAAI,GAAuC,CAAC;QAC5C,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,GAAG,GAAG,EAA4B,CAAC;YACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACnB,CAAC;YACH,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC;YACzC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG;YACH,GAAG,EAAE,MAAM,CAAC,GAAG;SAChB,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEhC,iCAAiC;QACjC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;QAEtC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,kBAAkB,CAAC,CAAC;QAE9D,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,KAAoB;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;QAEjG,gDAAgD;QAChD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO;QAE/B,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;YACpD,IAAI,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAEpC,mCAAmC;QACnC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAE3B,kDAAkD;YAClD,IAAI,CAAC,qBAAqB,GAAG,WAAW,CAAC,GAAG,EAAE;gBAC5C,IAAI,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACjC,IAAI,CAAC,GAAG,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;gBAC3C,CAAC,CAAC,CAAC;YACL,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAElB,oDAAoD;YACpD,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QACnD,CAAC;QAED,kCAAkC;QAClC,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;gBAC1D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,wBAAwB,YAAY,CAAC,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC;gBACnE,8BAA8B;YAChC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC;QAExF,kDAAkD;QAClD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAErC,IAAI,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAEhC,sBAAsB;QACtB,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/B,aAAa,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAC1C,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QACpC,CAAC;QAED,4BAA4B;QAC5B,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;YAC3C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,GAAG,CAAC,0CAA0C,KAAK,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC9B,IAAI,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,WAAW;QACT,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @sonoma/mcp-gateway
+ *
+ * Local MCP Gateway for tool-level visibility and enforcement.
+ * Proxies MCP servers and reports telemetry to Sonoma.
+ */
+export { McpGateway } from "./gateway";
+export { loadConfig, findClaudeDesktopConfig, createTestConfig } from "./config";
+export type { GatewayConfig, McpServerConfig, ToolCallEvent, ToolInfo, UpstreamServer, } from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACjF,YAAY,EACV,aAAa,EACb,eAAe,EACf,aAAa,EACb,QAAQ,EACR,cAAc,GACf,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+/**
+ * @sonoma/mcp-gateway
+ *
+ * Local MCP Gateway for tool-level visibility and enforcement.
+ * Proxies MCP servers and reports telemetry to Sonoma.
+ */
+export { McpGateway } from "./gateway";
+export { loadConfig, findClaudeDesktopConfig, createTestConfig } from "./config";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC"}

package/dist/sonoma-client.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Sonoma API client for telemetry and policy
+ *
+ * Uses OAuth tokens from the auth module for authentication.
+ */
+import type { ToolCallEvent } from "./types";
+export interface PolicyResponse {
+    mode: "disabled" | "blocklist" | "allowlist";
+    gatewayAuthMode: "org_key" | "user_id";
+    list: Array<{
+        identifier: string;
+        type: string;
+        status: string;
+    }>;
+}
+export declare class SonomaClient {
+    private endpoint;
+    private hostname;
+    private deviceId;
+    private orgApiKey;
+    private pendingEvents;
+    private flushInterval;
+    private debug;
+    constructor(options: {
+        endpoint: string;
+        orgApiKey?: string;
+        debug?: boolean;
+    });
+    private log;
+    /**
+     * Get auth token - tries OAuth first, falls back to org API key
+     */
+    private getToken;
+    /**
+     * Start periodic telemetry flush
+     */
+    startTelemetryFlush(intervalMs?: number): void;
+    /**
+     * Stop periodic telemetry flush
+     */
+    stopTelemetryFlush(): void;
+    /**
+     * Queue an event for telemetry
+     */
+    queueEvent(event: ToolCallEvent): void;
+    /**
+     * Flush all pending events to Sonoma
+     */
+    flushTelemetry(): Promise<void>;
+    /**
+     * Fetch policy from Sonoma
+     */
+    fetchPolicy(): Promise<PolicyResponse>;
+}
+//# sourceMappingURL=sonoma-client.d.ts.map

package/dist/sonoma-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sonoma-client.d.ts","sourceRoot":"","sources":["../src/sonoma-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAI7C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,GAAG,WAAW,GAAG,WAAW,CAAC;IAC7C,eAAe,EAAE,SAAS,GAAG,SAAS,CAAC;IACvC,IAAI,EAAE,KAAK,CAAC;QACV,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;CACJ;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,aAAa,CAA+C;IACpE,OAAO,CAAC,KAAK,CAAU;gBAEX,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;IAQ9E,OAAO,CAAC,GAAG;IAMX;;OAEG;YACW,QAAQ;IActB;;OAEG;IACH,mBAAmB,CAAC,UAAU,SAAQ,GAAG,IAAI;IAc7C;;OAEG;IACH,kBAAkB,IAAI,IAAI;IAO1B;;OAEG;IACH,UAAU,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI;IAKtC;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IA6CrC;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,cAAc,CAAC;CAwB7C"}

package/dist/sonoma-client.js

@@ -0,0 +1,144 @@
+/**
+ * Sonoma API client for telemetry and policy
+ *
+ * Uses OAuth tokens from the auth module for authentication.
+ */
+import { hostname } from "node:os";
+import { getAccessToken, getStoredDeviceId } from "./auth";
+export class SonomaClient {
+    endpoint;
+    hostname;
+    deviceId;
+    orgApiKey = null;
+    pendingEvents = [];
+    flushInterval = null;
+    debug;
+    constructor(options) {
+        this.endpoint = options.endpoint.replace(/\/$/, "");
+        this.hostname = hostname();
+        this.deviceId = getStoredDeviceId();
+        this.orgApiKey = options.orgApiKey ?? null;
+        this.debug = options.debug ?? false;
+    }
+    log(message, ...args) {
+        if (this.debug) {
+            console.error(`[sonoma-client] ${message}`, ...args);
+        }
+    }
+    /**
+     * Get auth token - tries OAuth first, falls back to org API key
+     */
+    async getToken() {
+        // Try OAuth token first
+        try {
+            return await getAccessToken({ sonomaEndpoint: this.endpoint, debug: this.debug });
+        }
+        catch {
+            // Fall back to org API key if available
+            if (this.orgApiKey) {
+                this.log("Using org API key (no OAuth token)");
+                return this.orgApiKey;
+            }
+            throw new Error("No authentication available. Run --login or set SONOMA_API_KEY");
+        }
+    }
+    /**
+     * Start periodic telemetry flush
+     */
+    startTelemetryFlush(intervalMs = 30000) {
+        if (this.flushInterval) {
+            return;
+        }
+        this.flushInterval = setInterval(() => {
+            this.flushTelemetry().catch((err) => {
+                this.log("Failed to flush telemetry:", err);
+            });
+        }, intervalMs);
+        this.log(`Started telemetry flush every ${intervalMs}ms`);
+    }
+    /**
+     * Stop periodic telemetry flush
+     */
+    stopTelemetryFlush() {
+        if (this.flushInterval) {
+            clearInterval(this.flushInterval);
+            this.flushInterval = null;
+        }
+    }
+    /**
+     * Queue an event for telemetry
+     */
+    queueEvent(event) {
+        this.pendingEvents.push(event);
+        this.log(`Queued event: ${event.serverName}.${event.toolName}`);
+    }
+    /**
+     * Flush all pending events to Sonoma
+     */
+    async flushTelemetry() {
+        if (this.pendingEvents.length === 0) {
+            return;
+        }
+        const events = [...this.pendingEvents];
+        this.pendingEvents = [];
+        try {
+            const token = await this.getToken();
+            const response = await fetch(`${this.endpoint}/api/mcp-visibility/telemetry`, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    Authorization: `Bearer ${token}`,
+                },
+                body: JSON.stringify({
+                    hostname: this.hostname,
+                    deviceId: this.deviceId,
+                    events: events.map((e) => ({
+                        serverName: e.serverName,
+                        toolName: e.toolName,
+                        timestamp: e.timestamp,
+                        durationMs: e.durationMs,
+                        status: e.status,
+                        errorMessage: e.errorMessage,
+                        argumentKeys: e.argumentKeys,
+                    })),
+                }),
+            });
+            if (!response.ok) {
+                const text = await response.text();
+                throw new Error(`Telemetry failed: ${response.status} ${text}`);
+            }
+            this.log(`Flushed ${events.length} events to Sonoma`);
+        }
+        catch (error) {
+            // Re-queue events on failure
+            this.pendingEvents.unshift(...events);
+            throw error;
+        }
+    }
+    /**
+     * Fetch policy from Sonoma
+     */
+    async fetchPolicy() {
+        try {
+            const token = await this.getToken();
+            const response = await fetch(`${this.endpoint}/api/mcp-visibility/policy`, {
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                },
+            });
+            if (!response.ok) {
+                const text = await response.text();
+                throw new Error(`Policy fetch failed: ${response.status} ${text}`);
+            }
+            const policy = (await response.json());
+            this.log(`Fetched policy: mode=${policy.mode}, ${policy.list.length} rules`);
+            return policy;
+        }
+        catch (error) {
+            this.log("Failed to fetch policy:", error);
+            // Return disabled policy on failure (fail-open)
+            return { mode: "disabled", gatewayAuthMode: "org_key", list: [] };
+        }
+    }
+}
+//# sourceMappingURL=sonoma-client.js.map

package/dist/sonoma-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sonoma-client.js","sourceRoot":"","sources":["../src/sonoma-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAY3D,MAAM,OAAO,YAAY;IACf,QAAQ,CAAS;IACjB,QAAQ,CAAS;IACjB,QAAQ,CAAS;IACjB,SAAS,GAAkB,IAAI,CAAC;IAChC,aAAa,GAAoB,EAAE,CAAC;IACpC,aAAa,GAA0C,IAAI,CAAC;IAC5D,KAAK,CAAU;IAEvB,YAAY,OAAkE;QAC5E,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,iBAAiB,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;QAC3C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACtC,CAAC;IAEO,GAAG,CAAC,OAAe,EAAE,GAAG,IAAe;QAC7C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mBAAmB,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,QAAQ;QACpB,wBAAwB;QACxB,IAAI,CAAC;YACH,OAAO,MAAM,cAAc,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;YACxC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,IAAI,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;gBAC/C,OAAO,IAAI,CAAC,SAAS,CAAC;YACxB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,UAAU,GAAG,KAAK;QACpC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAClC,IAAI,CAAC,GAAG,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,UAAU,CAAC,CAAC;QAEf,IAAI,CAAC,GAAG,CAAC,iCAAiC,UAAU,IAAI,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,KAAoB;QAC7B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAClB,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;QAExB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YAEpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,+BAA+B,EAAE;gBAC5E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACzB,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,SAAS,EAAE,CAAC,CAAC,SAAS;wBACtB,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,YAAY,EAAE,CAAC,CAAC,YAAY;wBAC5B,YAAY,EAAE,CAAC,CAAC,YAAY;qBAC7B,CAAC,CAAC;iBACJ,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;YAClE,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,mBAAmB,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6BAA6B;YAC7B,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;YACtC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YAEpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,4BAA4B,EAAE;gBACzE,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmB,CAAC;YACzD,IAAI,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;YAC7E,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAC3C,gDAAgD;YAChD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACpE,CAAC;IACH,CAAC;CACF"}