@tedorigawa001/servicenow-mcp 1.0.2

package/dist/tools/usem-approval.js

@@ -0,0 +1,194 @@
+import { ServiceNowError } from '../utils/errors.js';
+import { requireWrite } from '../utils/permissions.js';
+const SYS_ID_RE = /^[0-9a-f]{32}$/i;
+/**
+ * Approval `source_table` values that represent VR state transitions. Exception
+ * approvals come through sn_sec_exception_change_approval; group/item approvals
+ * may come directly from the VR record classes.
+ */
+const VR_APPROVAL_CLASSES = [
+    'sn_sec_exception_change_approval',
+    'sn_vul_vulnerability',
+    'sn_vul_vulnerable_item',
+    'sn_vul_remediation_task',
+    'sn_vul_app_vulnerability',
+    'sn_vul_app_vulnerable_item',
+];
+/** Ultimate VR record classes an approval can resolve to (approval_source). */
+const APPROVAL_SOURCE_CLASSES = [
+    'sn_vul_vulnerability',
+    'sn_vul_vulnerable_item',
+    'sn_vul_remediation_task',
+    'sn_vul_app_vulnerability',
+    'sn_vul_app_vulnerable_item',
+];
+const EXCEPTION_APPROVAL_STATE_LABELS = {
+    '0': 'In Review',
+    '1': 'Approved',
+    '2': 'Rejected',
+    '3': 'No Longer Required',
+    '4': 'Expired',
+    '5': 'Draft',
+};
+export function getUsemApprovalToolDefinitions() {
+    return [
+        {
+            name: 'list_vr_approvals',
+            description: 'List approval records (sysapproval_approver) for Vulnerability Response items — exception, ' +
+                'risk-acceptance and false-positive requests whose approval drives a VR state transition. ' +
+                'Defaults to pending (state=requested). Each row shows the source record class and number.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    state: {
+                        type: 'string',
+                        description: 'Approval state filter (default "requested"); e.g. requested, approved, rejected. Use "any" for all.',
+                    },
+                    source_table: {
+                        type: 'string',
+                        description: 'Restrict to one source_table (e.g. "sn_sec_exception_change_approval"); default = all VR classes',
+                    },
+                    approval_source: {
+                        type: 'string',
+                        description: 'Filter by the ultimate VR record class — "sn_vul_vulnerable_item" (e.g. False Positive on a VI) ' +
+                            'or "sn_vul_vulnerability" (group exception/deferral)',
+                    },
+                    limit: { type: 'number', description: 'Max records (default: 25, max: 1000)' },
+                },
+            },
+        },
+        {
+            name: 'list_vr_exception_requests',
+            description: 'List Vulnerability Response exception requests (sn_sec_exception_change_approval) — False ' +
+                'Positive, Risk Acceptance and Exception/Deferral requests raised against vulnerable items or ' +
+                'groups. Shows request_type, the target record, the desired state/substate if approved, the ' +
+                'approval_state, requester and reason. Approve/reject via act_on_vr_approval (find the approver ' +
+                'rows with list_vr_approvals).',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    request_type: { type: 'string', description: 'Exact request type, e.g. "False positive", "Exception", "Risk Acceptance"' },
+                    approval_state: {
+                        type: 'string',
+                        description: 'Approval state: 0=In Review, 1=Approved, 2=Rejected, 3=No Longer Required, 4=Expired, 5=Draft',
+                    },
+                    table: { type: 'string', description: 'Target record class, e.g. "sn_vul_vulnerable_item" or "sn_vul_vulnerability"' },
+                    latest_only: { type: 'boolean', description: 'Only the latest revision of each request (default: true)' },
+                    query: { type: 'string', description: 'Additional raw encoded query appended with ^' },
+                    limit: { type: 'number', description: 'Max records (default: 25, max: 1000)' },
+                },
+            },
+        },
+        {
+            name: 'act_on_vr_approval',
+            description: 'Approve or reject a Vulnerability Response approval (sysapproval_approver) by sys_id, which ' +
+                'advances the attached workflow and transitions the underlying VR record. Rejection requires ' +
+                'a comment. **[Write — requires WRITE_ENABLED=true]**',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    sys_id: { type: 'string', description: '32-char sys_id of the sysapproval_approver record' },
+                    action: { type: 'string', enum: ['approve', 'reject'], description: 'approve or reject' },
+                    comments: { type: 'string', description: 'Comment/justification (required when action=reject)' },
+                },
+                required: ['sys_id', 'action'],
+            },
+        },
+    ];
+}
+export async function executeUsemApprovalToolCall(client, name, args) {
+    switch (name) {
+        case 'list_vr_approvals': {
+            const parts = [];
+            const source = typeof args.source_table === 'string' ? args.source_table.trim() : '';
+            if (source) {
+                if (!VR_APPROVAL_CLASSES.includes(source)) {
+                    throw new ServiceNowError(`source_table must be one of: ${VR_APPROVAL_CLASSES.join(', ')}`, 'INVALID_REQUEST');
+                }
+                parts.push(`source_table=${source}`);
+            }
+            else {
+                parts.push(`source_tableIN${VR_APPROVAL_CLASSES.join(',')}`);
+            }
+            const state = typeof args.state === 'string' && args.state.trim() ? args.state.trim() : 'requested';
+            if (state !== 'any')
+                parts.push(`state=${state}`);
+            const approvalSource = typeof args.approval_source === 'string' ? args.approval_source.trim() : '';
+            if (approvalSource) {
+                if (!APPROVAL_SOURCE_CLASSES.includes(approvalSource)) {
+                    throw new ServiceNowError(`approval_source must be one of: ${APPROVAL_SOURCE_CLASSES.join(', ')}`, 'INVALID_REQUEST');
+                }
+                parts.push(`approval_source=${approvalSource}`);
+            }
+            const resp = await client.queryRecords({
+                table: 'sysapproval_approver',
+                query: parts.join('^'),
+                fields: 'state,approver,document_id,source_table,approval_source,group,due_date,sys_created_on,sys_id',
+                orderBy: '-sys_created_on',
+                limit: args.limit ?? 25,
+                display_value: 'all',
+            });
+            return {
+                count: resp.count,
+                records: resp.records,
+                summary: `Found ${resp.count} VR approval(s)${state !== 'any' ? ` in state "${state}"` : ''}`,
+            };
+        }
+        case 'list_vr_exception_requests': {
+            const parts = [];
+            if (args.latest_only !== false)
+                parts.push('is_latest=true');
+            if (args.request_type)
+                parts.push(`request_type=${args.request_type}`);
+            if (args.approval_state !== undefined && args.approval_state !== '')
+                parts.push(`approval_state=${args.approval_state}`);
+            if (args.table)
+                parts.push(`table=${args.table}`);
+            if (args.query)
+                parts.push(args.query);
+            const resp = await client.queryRecords({
+                table: 'sn_sec_exception_change_approval',
+                query: parts.join('^'),
+                fields: 'number,request_type,approval_state,record,table,desired_state,desired_substate,' +
+                    'desired_reason,requested_by,assignment_group,risk_rating,sys_created_on,sys_id',
+                orderBy: '-sys_created_on',
+                limit: args.limit ?? 25,
+                display_value: 'all',
+            });
+            const records = resp.records.map(r => {
+                const stateVal = r.approval_state && typeof r.approval_state === 'object'
+                    ? (r.approval_state.value ?? '')
+                    : String(r.approval_state ?? '');
+                return { ...r, approval_state_label: EXCEPTION_APPROVAL_STATE_LABELS[stateVal] ?? stateVal };
+            });
+            return {
+                count: resp.count,
+                records,
+                summary: `Found ${resp.count} exception request(s)`,
+            };
+        }
+        case 'act_on_vr_approval': {
+            requireWrite();
+            if (!args.sys_id || !SYS_ID_RE.test(args.sys_id)) {
+                throw new ServiceNowError('sys_id must be a 32-character hex string', 'INVALID_REQUEST');
+            }
+            if (args.action !== 'approve' && args.action !== 'reject') {
+                throw new ServiceNowError('action must be "approve" or "reject"', 'INVALID_REQUEST');
+            }
+            if (args.action === 'reject' && !args.comments) {
+                throw new ServiceNowError('comments are required when rejecting', 'INVALID_REQUEST');
+            }
+            const data = { state: args.action === 'approve' ? 'approved' : 'rejected' };
+            if (args.comments)
+                data.comments = args.comments;
+            const result = await client.updateRecord('sysapproval_approver', args.sys_id, data);
+            return {
+                ...result,
+                summary: `${args.action === 'approve' ? 'Approved' : 'Rejected'} VR approval ${args.sys_id}`,
+            };
+        }
+        default:
+            return null;
+    }
+}
+//# sourceMappingURL=usem-approval.js.map

package/dist/tools/usem-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usem-approval.js","sourceRoot":"","sources":["../../src/tools/usem-approval.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,SAAS,GAAG,iBAAiB,CAAC;AAEpC;;;;GAIG;AACH,MAAM,mBAAmB,GAAG;IAC1B,kCAAkC;IAClC,sBAAsB;IACtB,wBAAwB;IACxB,yBAAyB;IACzB,0BAA0B;IAC1B,4BAA4B;CAC7B,CAAC;AAEF,+EAA+E;AAC/E,MAAM,uBAAuB,GAAG;IAC9B,sBAAsB;IACtB,wBAAwB;IACxB,yBAAyB;IACzB,0BAA0B;IAC1B,4BAA4B;CAC7B,CAAC;AAEF,MAAM,+BAA+B,GAA2B;IAC9D,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,oBAAoB;IACzB,GAAG,EAAE,SAAS;IACd,GAAG,EAAE,OAAO;CACb,CAAC;AAEF,MAAM,UAAU,8BAA8B;IAC5C,OAAO;QACL;YACE,IAAI,EAAE,mBAAmB;YACzB,WAAW,EACT,6FAA6F;gBAC7F,2FAA2F;gBAC3F,2FAA2F;YAC7F,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,qGAAqG;qBACnH;oBACD,YAAY,EAAE;wBACZ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,kGAAkG;qBAChH;oBACD,eAAe,EAAE;wBACf,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,kGAAkG;4BAClG,sDAAsD;qBACzD;oBACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;iBAC/E;aACF;SACF;QACD;YACE,IAAI,EAAE,4BAA4B;YAClC,WAAW,EACT,4FAA4F;gBAC5F,+FAA+F;gBAC/F,6FAA6F;gBAC7F,iGAAiG;gBACjG,+BAA+B;YACjC,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2EAA2E,EAAE;oBAC1H,cAAc,EAAE;wBACd,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,+FAA+F;qBAC7G;oBACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8EAA8E,EAAE;oBACtH,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,0DAA0D,EAAE;oBACzG,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8CAA8C,EAAE;oBACtF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;iBAC/E;aACF;SACF;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EACT,8FAA8F;gBAC9F,8FAA8F;gBAC9F,sDAAsD;YACxD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mDAAmD,EAAE;oBAC5F,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE;oBACzF,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;iBACjG;gBACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;aAC/B;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAwB,EACxB,IAAY,EACZ,IAAyB;IAEzB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1C,MAAM,IAAI,eAAe,CACvB,gCAAgC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAChE,iBAAiB,CAClB,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,iBAAiB,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YACpG,IAAI,KAAK,KAAK,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;YAElD,MAAM,cAAc,GAAG,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnG,IAAI,cAAc,EAAE,CAAC;gBACnB,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;oBACtD,MAAM,IAAI,eAAe,CACvB,mCAAmC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACvE,iBAAiB,CAClB,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,mBAAmB,cAAc,EAAE,CAAC,CAAC;YAClD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;gBACrC,KAAK,EAAE,sBAAsB;gBAC7B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;gBACtB,MAAM,EAAE,8FAA8F;gBACtG,OAAO,EAAE,iBAAiB;gBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;gBACvB,aAAa,EAAE,KAAK;aACrB,CAAC,CAAC;YACH,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,SAAS,IAAI,CAAC,KAAK,kBAAkB,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;aAC9F,CAAC;QACJ,CAAC;QAED,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC7D,IAAI,IAAI,CAAC,YAAY;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YACvE,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,cAAc,KAAK,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YACzH,IAAI,IAAI,CAAC,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAClD,IAAI,IAAI,CAAC,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAEvC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;gBACrC,KAAK,EAAE,kCAAkC;gBACzC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;gBACtB,MAAM,EACJ,iFAAiF;oBACjF,gFAAgF;gBAClF,OAAO,EAAE,iBAAiB;gBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;gBACvB,aAAa,EAAE,KAAK;aACrB,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;gBACnC,MAAM,QAAQ,GACZ,CAAC,CAAC,cAAc,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;oBACtD,CAAC,CAAC,CAAE,CAAC,CAAC,cAAsB,CAAC,KAAK,IAAI,EAAE,CAAC;oBACzC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;gBACrC,OAAO,EAAE,GAAG,CAAC,EAAE,oBAAoB,EAAE,+BAA+B,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC/F,CAAC,CAAC,CAAC;YAEH,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO;gBACP,OAAO,EAAE,SAAS,IAAI,CAAC,KAAK,uBAAuB;aACpD,CAAC;QACJ,CAAC;QAED,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,YAAY,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,eAAe,CAAC,0CAA0C,EAAE,iBAAiB,CAAC,CAAC;YAC3F,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC1D,MAAM,IAAI,eAAe,CAAC,sCAAsC,EAAE,iBAAiB,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC/C,MAAM,IAAI,eAAe,CAAC,sCAAsC,EAAE,iBAAiB,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,IAAI,GAA2B,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;YACpG,IAAI,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YACjD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,sBAAsB,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpF,OAAO;gBACL,GAAG,MAAM;gBACT,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,gBAAgB,IAAI,CAAC,MAAM,EAAE;aAC7F,CAAC;QACJ,CAAC;QAED;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/tools/usem-config.d.ts

@@ -0,0 +1,171 @@
+/**
+ * USEM / Vulnerability Response configuration tools — operate the rule tables
+ * that drive automation (assignment, remediation task grouping, TTR targets,
+ * approval, auto-close, exclusion).
+ *
+ * A single rule-type registry maps a friendly `rule_type` to its backing table
+ * so one small set of generic tools (list/get/create/update/set_active) covers
+ * every rule family without per-table boilerplate.
+ *
+ * Read tools: Tier 0. Write tools: Tier 1 (WRITE_ENABLED=true) — these mutate
+ * platform automation config, so treat them as admin-level changes.
+ *
+ * Tables, key fields and schemas verified against a live PDI (dev400464):
+ *   assignment         → sn_sec_wf_assign_rule        (USEM; key: name, has active)
+ *   remediation_task   → sn_sec_rem_task_rule         (key: rule_name)
+ *   remediation_target → sn_sec_wf_ttr_rule           (key: name; TTR max/remind)
+ *   risk_calculator    → sn_sec_calculator_group      (key: name; no order field)
+ *   calculator_rule    → sn_sec_calculator_rule       (key: name; per-calculator rule)
+ *   classification     → sn_sec_wf_classification_group (extends calculator_group; no order)
+ *   classification_rule→ sn_sec_wf_classification_rule  (extends calculator_rule)
+ *   exception_rule     → sn_sec_exception_rule        (key: name; state via rule_state/stage, no active)
+ *   approval           → sn_vul_cmn_approval_rule     (key: name)
+ *   auto_close         → sn_vul_cmn_auto_close_rule   (key: name)
+ *   exclusion          → sn_vul_cmn_auto_exclusion_rule (key: name)
+ *
+ * Migration note (KB2556844): USEM moved assignment/calculator/classification/
+ * exception config from the deprecated sn_vul_ and sn_vulc_ tables to sn_sec_.
+ * The legacy sn_vul_assignment_rule table no longer exists post-migration, and
+ * sn_vul_vgr_assignment_rule holds no records — the live assignment rules are in
+ * sn_sec_wf_assign_rule, which is what `assignment` now targets.
+ */
+import type { ServiceNowClient } from '../servicenow/client.js';
+export declare function getUsemConfigToolDefinitions(): ({
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            rule_type: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            active: {
+                type: string;
+                description: string;
+            };
+            query: {
+                type: string;
+                description: string;
+            };
+            limit: {
+                type: string;
+                description: string;
+            };
+            display_value: {
+                description: string;
+                oneOf: ({
+                    type: string;
+                    enum?: undefined;
+                } | {
+                    type: string;
+                    enum: string[];
+                })[];
+            };
+            sys_id?: undefined;
+            fields?: undefined;
+        };
+        required: string[];
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            rule_type: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            sys_id: {
+                type: string;
+                description: string;
+            };
+            active?: undefined;
+            query?: undefined;
+            limit?: undefined;
+            display_value?: undefined;
+            fields?: undefined;
+        };
+        required: string[];
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            rule_type: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            fields: {
+                type: string;
+                description: string;
+            };
+            active?: undefined;
+            query?: undefined;
+            limit?: undefined;
+            display_value?: undefined;
+            sys_id?: undefined;
+        };
+        required: string[];
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            rule_type: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            sys_id: {
+                type: string;
+                description: string;
+            };
+            fields: {
+                type: string;
+                description: string;
+            };
+            active?: undefined;
+            query?: undefined;
+            limit?: undefined;
+            display_value?: undefined;
+        };
+        required: string[];
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            rule_type: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            sys_id: {
+                type: string;
+                description: string;
+            };
+            active: {
+                type: string;
+                description: string;
+            };
+            query?: undefined;
+            limit?: undefined;
+            display_value?: undefined;
+            fields?: undefined;
+        };
+        required: string[];
+    };
+})[];
+export declare function executeUsemConfigToolCall(client: ServiceNowClient, name: string, args: Record<string, any>): Promise<any>;
+//# sourceMappingURL=usem-config.d.ts.map

package/dist/tools/usem-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usem-config.d.ts","sourceRoot":"","sources":["../../src/tools/usem-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AA2HhE,wBAAgB,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAmF3C;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GACxB,OAAO,CAAC,GAAG,CAAC,CA4Ed"}

package/dist/tools/usem-config.js

@@ -0,0 +1,254 @@
+import { ServiceNowError } from '../utils/errors.js';
+import { requireWrite } from '../utils/permissions.js';
+const RULE_REGISTRY = {
+    assignment: {
+        table: 'sn_sec_wf_assign_rule',
+        label: 'Assignment Rule',
+        nameField: 'name',
+        hasActive: true,
+        listFields: 'name,active,order,table,assignment_group,condition,type,sys_id',
+    },
+    remediation_task: {
+        table: 'sn_sec_rem_task_rule',
+        label: 'Remediation Task Rule',
+        nameField: 'rule_name',
+        hasActive: true,
+        listFields: 'rule_name,active,order,assignment_group,table,condition,sys_id',
+    },
+    remediation_target: {
+        table: 'sn_sec_wf_ttr_rule',
+        label: 'Remediation Target Rule',
+        nameField: 'name',
+        hasActive: true,
+        listFields: 'name,active,order,table,ttr_max,ttr_remind,target_from,sys_id',
+    },
+    risk_calculator: {
+        table: 'sn_sec_calculator_group',
+        label: 'Risk Calculator',
+        nameField: 'name',
+        hasActive: true,
+        orderField: 'name', // no order column on this table
+        listFields: 'name,active,table,target_field,description,sys_id',
+    },
+    calculator_rule: {
+        table: 'sn_sec_calculator_rule',
+        label: 'Risk Calculator Rule',
+        nameField: 'name',
+        hasActive: true,
+        listFields: 'name,active,order,calculator_group,table,condition,value_type,sys_id',
+    },
+    classification: {
+        table: 'sn_sec_wf_classification_group',
+        label: 'Classification Group',
+        nameField: 'name',
+        hasActive: true,
+        orderField: 'name', // extends sn_sec_calculator_group, which has no order column
+        listFields: 'name,active,table,target_field,sys_id',
+    },
+    classification_rule: {
+        table: 'sn_sec_wf_classification_rule',
+        label: 'Classification Rule',
+        nameField: 'name',
+        hasActive: true,
+        listFields: 'name,active,order,classification,classification_type,table,condition,sys_id',
+    },
+    exception_rule: {
+        table: 'sn_sec_exception_rule',
+        label: 'Exception Rule',
+        nameField: 'name',
+        hasActive: false, // lifecycle is rule_state/stage, not an active flag
+        listFields: 'name,order,table,rule_state,stage,condition,applies_to,sys_id',
+    },
+    approval: {
+        table: 'sn_vul_cmn_approval_rule',
+        label: 'Approval Rule',
+        nameField: 'name',
+        hasActive: true,
+        listFields: 'name,active,order,table,type,condition,sys_id',
+    },
+    auto_close: {
+        table: 'sn_vul_cmn_auto_close_rule',
+        label: 'Auto-Close Rule',
+        nameField: 'name',
+        hasActive: true,
+        listFields: 'name,active,order,table,condition,sys_id',
+    },
+    exclusion: {
+        table: 'sn_vul_cmn_auto_exclusion_rule',
+        label: 'Exclusion Rule',
+        nameField: 'name',
+        hasActive: true,
+        listFields: 'name,active,order,table,condition,sys_id',
+    },
+};
+const RULE_TYPES = Object.keys(RULE_REGISTRY);
+const SYS_ID_RE = /^[0-9a-f]{32}$/i;
+const RULE_TYPE_SCHEMA = {
+    type: 'string',
+    enum: RULE_TYPES,
+    description: 'Which rule family to operate on: ' +
+        'assignment (sn_sec_wf_assign_rule), remediation_task, remediation_target (TTR/SLA targets), ' +
+        'risk_calculator + calculator_rule (risk scoring), classification + classification_rule, ' +
+        'exception_rule (sn_sec_exception_rule), approval, auto_close, exclusion',
+};
+function resolveType(ruleType) {
+    if (typeof ruleType !== 'string' || !RULE_REGISTRY[ruleType]) {
+        throw new ServiceNowError(`rule_type must be one of: ${RULE_TYPES.join(', ')}`, 'INVALID_REQUEST');
+    }
+    return RULE_REGISTRY[ruleType];
+}
+export function getUsemConfigToolDefinitions() {
+    return [
+        {
+            name: 'list_usem_rules',
+            description: 'List USEM/Vulnerability Response automation rules of a given type (assignment, ' +
+                'remediation_task, remediation_target, risk_calculator, calculator_rule, classification, ' +
+                'classification_rule, exception_rule, approval, auto_close, exclusion). Ordered by ' +
+                'execution order. Optionally filter by active state or an extra encoded query.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    rule_type: RULE_TYPE_SCHEMA,
+                    active: { type: 'boolean', description: 'Filter by active state (ignored for rule types without an active field)' },
+                    query: { type: 'string', description: 'Additional raw encoded query appended with ^' },
+                    limit: { type: 'number', description: 'Max records (default: 50, max: 1000)' },
+                    display_value: {
+                        description: 'Return human-readable reference/choice values (true) or both raw and display ("all")',
+                        oneOf: [{ type: 'boolean' }, { type: 'string', enum: ['all'] }],
+                    },
+                },
+                required: ['rule_type'],
+            },
+        },
+        {
+            name: 'get_usem_rule',
+            description: 'Get the full definition of a single USEM/VR rule by sys_id.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    rule_type: RULE_TYPE_SCHEMA,
+                    sys_id: { type: 'string', description: '32-char sys_id of the rule' },
+                },
+                required: ['rule_type', 'sys_id'],
+            },
+        },
+        {
+            name: 'create_usem_rule',
+            description: 'Create a USEM/VR automation rule. Provide the rule_type and a fields object matching ' +
+                'that table (e.g. name/rule_name, active, order, condition, assignment_group, ttr_max). ' +
+                '**[Write — requires WRITE_ENABLED=true; admin-level config change]**',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    rule_type: RULE_TYPE_SCHEMA,
+                    fields: { type: 'object', description: 'Column/value map for the new rule record' },
+                },
+                required: ['rule_type', 'fields'],
+            },
+        },
+        {
+            name: 'update_usem_rule',
+            description: 'Update a USEM/VR automation rule by sys_id with a fields object. ' +
+                '**[Write — requires WRITE_ENABLED=true; admin-level config change]**',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    rule_type: RULE_TYPE_SCHEMA,
+                    sys_id: { type: 'string', description: '32-char sys_id of the rule' },
+                    fields: { type: 'object', description: 'Column/value map of changes' },
+                },
+                required: ['rule_type', 'sys_id', 'fields'],
+            },
+        },
+        {
+            name: 'set_usem_rule_active',
+            description: 'Enable or disable a USEM/VR rule (convenience toggle of the active flag). ' +
+                'Not supported for the assignment rule type, which has no active field. ' +
+                '**[Write — requires WRITE_ENABLED=true; admin-level config change]**',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    rule_type: RULE_TYPE_SCHEMA,
+                    sys_id: { type: 'string', description: '32-char sys_id of the rule' },
+                    active: { type: 'boolean', description: 'true to enable, false to disable' },
+                },
+                required: ['rule_type', 'sys_id', 'active'],
+            },
+        },
+    ];
+}
+export async function executeUsemConfigToolCall(client, name, args) {
+    switch (name) {
+        case 'list_usem_rules': {
+            const rt = resolveType(args.rule_type);
+            const parts = [];
+            if (args.active !== undefined && rt.hasActive)
+                parts.push(`active=${args.active === true}`);
+            if (args.query)
+                parts.push(args.query);
+            const resp = await client.queryRecords({
+                table: rt.table,
+                query: parts.join('^'),
+                fields: rt.listFields,
+                orderBy: rt.orderField ?? 'order',
+                limit: args.limit ?? 50,
+                display_value: args.display_value,
+            });
+            return {
+                rule_type: args.rule_type,
+                table: rt.table,
+                count: resp.count,
+                records: resp.records,
+                summary: `Found ${resp.count} ${rt.label}(s)`,
+            };
+        }
+        case 'get_usem_rule': {
+            const rt = resolveType(args.rule_type);
+            if (!args.sys_id || !SYS_ID_RE.test(args.sys_id)) {
+                throw new ServiceNowError('sys_id must be a 32-character hex string', 'INVALID_REQUEST');
+            }
+            return await client.getRecord(rt.table, args.sys_id);
+        }
+        case 'create_usem_rule': {
+            requireWrite();
+            const rt = resolveType(args.rule_type);
+            if (!args.fields || typeof args.fields !== 'object' || Object.keys(args.fields).length === 0) {
+                throw new ServiceNowError('fields object with at least one column is required', 'INVALID_REQUEST');
+            }
+            const result = await client.createRecord(rt.table, args.fields);
+            const label = rt.nameField ? args.fields[rt.nameField] ?? result.sys_id : result.sys_id;
+            return { ...result, rule_type: args.rule_type, summary: `Created ${rt.label}: ${label}` };
+        }
+        case 'update_usem_rule': {
+            requireWrite();
+            const rt = resolveType(args.rule_type);
+            if (!args.sys_id)
+                throw new ServiceNowError('sys_id is required', 'INVALID_REQUEST');
+            if (!args.fields || typeof args.fields !== 'object' || Object.keys(args.fields).length === 0) {
+                throw new ServiceNowError('fields object with at least one column is required', 'INVALID_REQUEST');
+            }
+            const result = await client.updateRecord(rt.table, args.sys_id, args.fields);
+            return { ...result, rule_type: args.rule_type, summary: `Updated ${rt.label} ${args.sys_id}` };
+        }
+        case 'set_usem_rule_active': {
+            requireWrite();
+            const rt = resolveType(args.rule_type);
+            if (!rt.hasActive) {
+                throw new ServiceNowError(`${rt.label} has no active field; use update_usem_rule instead`, 'INVALID_REQUEST');
+            }
+            if (!args.sys_id)
+                throw new ServiceNowError('sys_id is required', 'INVALID_REQUEST');
+            if (typeof args.active !== 'boolean')
+                throw new ServiceNowError('active (boolean) is required', 'INVALID_REQUEST');
+            const result = await client.updateRecord(rt.table, args.sys_id, { active: args.active });
+            return {
+                ...result,
+                rule_type: args.rule_type,
+                summary: `${args.active ? 'Enabled' : 'Disabled'} ${rt.label} ${args.sys_id}`,
+            };
+        }
+        default:
+            return null;
+    }
+}
+//# sourceMappingURL=usem-config.js.map

package/dist/tools/usem-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usem-config.js","sourceRoot":"","sources":["../../src/tools/usem-config.ts"],"names":[],"mappings":"AAgCA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAgBvD,MAAM,aAAa,GAA6B;IAC9C,UAAU,EAAE;QACV,KAAK,EAAE,uBAAuB;QAC9B,KAAK,EAAE,iBAAiB;QACxB,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,gEAAgE;KAC7E;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,sBAAsB;QAC7B,KAAK,EAAE,uBAAuB;QAC9B,SAAS,EAAE,WAAW;QACtB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,gEAAgE;KAC7E;IACD,kBAAkB,EAAE;QAClB,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,yBAAyB;QAChC,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,+DAA+D;KAC5E;IACD,eAAe,EAAE;QACf,KAAK,EAAE,yBAAyB;QAChC,KAAK,EAAE,iBAAiB;QACxB,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,MAAM,EAAE,gCAAgC;QACpD,UAAU,EAAE,mDAAmD;KAChE;IACD,eAAe,EAAE;QACf,KAAK,EAAE,wBAAwB;QAC/B,KAAK,EAAE,sBAAsB;QAC7B,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,sEAAsE;KACnF;IACD,cAAc,EAAE;QACd,KAAK,EAAE,gCAAgC;QACvC,KAAK,EAAE,sBAAsB;QAC7B,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,MAAM,EAAE,6DAA6D;QACjF,UAAU,EAAE,uCAAuC;KACpD;IACD,mBAAmB,EAAE;QACnB,KAAK,EAAE,+BAA+B;QACtC,KAAK,EAAE,qBAAqB;QAC5B,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,6EAA6E;KAC1F;IACD,cAAc,EAAE;QACd,KAAK,EAAE,uBAAuB;QAC9B,KAAK,EAAE,gBAAgB;QACvB,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,KAAK,EAAE,oDAAoD;QACtE,UAAU,EAAE,+DAA+D;KAC5E;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,0BAA0B;QACjC,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,+CAA+C;KAC5D;IACD,UAAU,EAAE;QACV,KAAK,EAAE,4BAA4B;QACnC,KAAK,EAAE,iBAAiB;QACxB,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,0CAA0C;KACvD;IACD,SAAS,EAAE;QACT,KAAK,EAAE,gCAAgC;QACvC,KAAK,EAAE,gBAAgB;QACvB,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,0CAA0C;KACvD;CACF,CAAC;AAEF,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAC9C,MAAM,SAAS,GAAG,iBAAiB,CAAC;AAEpC,MAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,UAAU;IAChB,WAAW,EACT,mCAAmC;QACnC,8FAA8F;QAC9F,0FAA0F;QAC1F,yEAAyE;CAC5E,CAAC;AAEF,SAAS,WAAW,CAAC,QAAiB;IACpC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,eAAe,CACvB,6BAA6B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACpD,iBAAiB,CAClB,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,OAAO;QACL;YACE,IAAI,EAAE,iBAAiB;YACvB,WAAW,EACT,iFAAiF;gBACjF,0FAA0F;gBAC1F,oFAAoF;gBACpF,+EAA+E;YACjF,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,SAAS,EAAE,gBAAgB;oBAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,yEAAyE,EAAE;oBACnH,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8CAA8C,EAAE;oBACtF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;oBAC9E,aAAa,EAAE;wBACb,WAAW,EAAE,sFAAsF;wBACnG,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;qBAChE;iBACF;gBACD,QAAQ,EAAE,CAAC,WAAW,CAAC;aACxB;SACF;QACD;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,6DAA6D;YAC1E,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,SAAS,EAAE,gBAAgB;oBAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4BAA4B,EAAE;iBACtE;gBACD,QAAQ,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;aAClC;SACF;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,WAAW,EACT,uFAAuF;gBACvF,yFAAyF;gBACzF,sEAAsE;YACxE,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,SAAS,EAAE,gBAAgB;oBAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0CAA0C,EAAE;iBACpF;gBACD,QAAQ,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;aAClC;SACF;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,WAAW,EACT,mEAAmE;gBACnE,sEAAsE;YACxE,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,SAAS,EAAE,gBAAgB;oBAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4BAA4B,EAAE;oBACrE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;iBACvE;gBACD,QAAQ,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC;aAC5C;SACF;QACD;YACE,IAAI,EAAE,sBAAsB;YAC5B,WAAW,EACT,4EAA4E;gBAC5E,yEAAyE;gBACzE,sEAAsE;YACxE,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,SAAS,EAAE,gBAAgB;oBAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4BAA4B,EAAE;oBACrE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,kCAAkC,EAAE;iBAC7E;gBACD,QAAQ,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC;aAC5C;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAwB,EACxB,IAAY,EACZ,IAAyB;IAEzB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,CAAC,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;YAC5F,IAAI,IAAI,CAAC,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;gBACrC,KAAK,EAAE,EAAE,CAAC,KAAK;gBACf,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;gBACtB,MAAM,EAAE,EAAE,CAAC,UAAU;gBACrB,OAAO,EAAE,EAAE,CAAC,UAAU,IAAI,OAAO;gBACjC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;gBACvB,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC,CAAC;YACH,OAAO;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,EAAE,CAAC,KAAK;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,SAAS,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,KAAK;aAC9C,CAAC;QACJ,CAAC;QAED,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,eAAe,CAAC,0CAA0C,EAAE,iBAAiB,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC;QAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,YAAY,EAAE,CAAC;YACf,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7F,MAAM,IAAI,eAAe,CAAC,oDAAoD,EAAE,iBAAiB,CAAC,CAAC;YACrG,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACxF,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,KAAK,KAAK,KAAK,EAAE,EAAE,CAAC;QAC5F,CAAC;QAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,YAAY,EAAE,CAAC;YACf,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;YACrF,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7F,MAAM,IAAI,eAAe,CAAC,oDAAoD,EAAE,iBAAiB,CAAC,CAAC;YACrG,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7E,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACjG,CAAC;QAED,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,YAAY,EAAE,CAAC;YACf,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;gBAClB,MAAM,IAAI,eAAe,CACvB,GAAG,EAAE,CAAC,KAAK,oDAAoD,EAC/D,iBAAiB,CAClB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;YACrF,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,eAAe,CAAC,8BAA8B,EAAE,iBAAiB,CAAC,CAAC;YACnH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACzF,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE;aAC9E,CAAC;QACJ,CAAC;QAED;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}