npm - @wildo-ai/saas-backend-lib - Versions diffs - 1.1.2 → 1.1.3 - Mend

@wildo-ai/saas-backend-lib 1.1.2 → 1.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (853) hide show

package/dist/esm/mcp/controllers/mcp.controller.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"mcp.controller.js","sourceRoot":"","sources":["../../../../../src/mcp/controllers/mcp.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,6BAA6B,EAC7B,wBAAwB,EACxB,kBAAkB,GAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,gFAAgF,CAAC;AACzH,OAAO,EAAE,sBAAsB,EAAE,MAAM,0DAA0D,CAAC;AAClG,OAAO,EAAE,YAAY,EAAE,MAAM,qDAAqD,CAAC;AACnF,OAAO,EAAE,8BAA8B,EAAE,MAAM,kGAAkG,CAAC;AAClJ,OAAO,EACL,0BAA0B,EAC1B,qCAAqC,EACrC,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,mGAAmG,CAAC;AAC3G,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,uBAAuB,EAAE,MAAM,4DAA4D,CAAC;AACrG,OAAO,EACL,4BAA4B,EAC5B,8BAA8B,EAC9B,kCAAkC,EAClC,kBAAkB,GACnB,MAAM,kEAAkE,CAAC;AAC1E,OAAO,EAAE,6CAA6C,EAAE,MAAM,oFAAoF,CAAC;AACnJ,OAAO,EAAE,uBAAuB,EAC9B,4BAA4B,GAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,8BAA8B,EAAE,MAAM,uFAAuF,CAAC;AACvI,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,mEAAmE,CAAC;AACxI,OAAO,EACL,oBAAoB,EACpB,+BAA+B,EAC/B,2BAA2B,EAC3B,yBAAyB,EACzB,cAAc,EACd,6BAA6B,EAC7B,oBAAoB,EACpB,iCAAiC,EACjC,8BAA8B,EAC9B,+CAA+C,EAC/C,6BAA6B,EAC7B,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,4DAA4D,CAAC;AAMpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEI,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,gCAAgC;IAKM;IAC5B;IACK;IACS;IACP;IACA;IACJ;IACmB;IAX/E,YACqC,MAAqB,EACR,YAAwC,EACxC,YAAiC,EACE,uBAA8D,EAC1F,SAAkC,EAC7B,WAAyC,EAChC,iBAAkD,EACzD,gBAAyC,EACzC,SAAkC,EACtC,YAA0B,EACP,uBAAsE;QAEnJ,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;QATwB,4BAAuB,GAAvB,uBAAuB,CAAuC;QAC1F,cAAS,GAAT,SAAS,CAAyB;QAC7B,gBAAW,GAAX,WAAW,CAA8B;QAChC,sBAAiB,GAAjB,iBAAiB,CAAiC;QACzD,qBAAgB,GAAhB,gBAAgB,CAAyB;QACzC,cAAS,GAAT,SAAS,CAAyB;QACtC,iBAAY,GAAZ,YAAY,CAAc;QACP,4BAAuB,GAAvB,uBAAuB,CAA+C;IAGrJ,CAAC;IAES,WAAW;QACnB,gFAAgF;QAChF,4EAA4E;QAC5E,gFAAgF;QAChF,MAAM,kBAAkB,GAAG,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAEvF,MAAM,WAAW,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,+BAA+B,CAAC,CAAC;QAC5G,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrH,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW,EAAE,oDAAoD,CAAC,CAAC;QAEpG,MAAM,MAAM,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,oFAAoF,CAAC,CAAC;QAEhI,kGAAkG;QAClG,+FAA+F;QAC/F,kGAAkG;QAClG,uDAAuD;QACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;YACvD,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACxC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI;gBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,EAAE,kEAAkE,EAAE;aACpI,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,yDAAyD,CAAC,CAAC;QAEpG,+FAA+F;QAC/F,6FAA6F;QAC7F,kGAAkG;QAClG,EAAE;QACF,qFAAqF;QACrF,oFAAoF;QACpF,EAAE;QACF,gGAAgG;QAChG,+FAA+F;QAC/F,gGAAgG;QAChG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;YAC1D,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACxC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI;gBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,EAAE,yDAAyD,EAAE;aAC3H,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,wDAAwD,CAAC,CAAC;QAEtG,gFAAgF;QAChF,+FAA+F;QAC/F,wFAAwF;QACxF,iGAAiG;QACjG,4FAA4F;QAC5F,4FAA4F;QAC5F,+FAA+F;QAC/F,kFAAkF;QAClF,MAAM,mBAAmB,GAAG,GAAG,MAAM,gBAAgB,6BAA6B,CAAC,wBAAwB,CAAC,+BAA+B,CAAC,EAAE,CAAC;QAC/I,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7H,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,EAAE,iEAAiE,CAAC,CAAC;QAEzH,MAAM,WAAW,GAAG,GAAG,MAAM,eAAe,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,WAAW,EAAE,sEAAsE,CAAC,CAAC;QAEvH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;YAC5D,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACxC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI;gBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,EAAE,kEAAkE,EAAE;aACpI,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW,EAAE,sEAAsE,CAAC,CAAC;QAEtH,iGAAiG;QACjG,kGAAkG;QAClG,+FAA+F;QAC/F,4FAA4F;QAC5F,sEAAsE;QACtE,EAAE;QACF,+FAA+F;QAC/F,oFAAoF;QACpF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;YAC/D,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACxC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI;gBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,EAAE,yDAAyD,EAAE;aAC3H,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,WAAW,EAAE,qEAAqE,CAAC,CAAC;IAC1H,CAAC;IAED;;;;;;;;OAQG;IACK,kBAAkB,CAAC,GAAY;QACrC,MAAM,SAAS,GAAI,GAAG,CAAC,MAA6C,EAAE,WAAW,CAAC;QAClF,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAChG,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,+BAA+B,CAAC,GAAY,EAAE,GAAa;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAC/F,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,0BAA0B,EAAE,CAAC;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC9D,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,4DAA4D,EAAE,CAAC,CAAC;YAC5I,OAAO;QACT,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;QACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,2FAA2F;YAC3F,QAAQ,EAAE,WAAW;YACrB,iEAAiE;YACjE,qBAAqB,EAAE,CAAC,WAAW,CAAC;YACpC,wBAAwB,EAAE,CAAC,QAAQ,CAAC;YACpC;;;;;;;;;;;;;;;;eAgBG;YACH,gBAAgB,EAAE,CAAC,GAAG,8BAA8B,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACK,wBAAwB,CAAC,MAAe,EAAE,eAAwB;QACxE,MAAM,SAAS,GAAI,MAAoD,EAAE,eAAe,CAAC;QACzF,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,+BAA+B,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3G,0FAA0F;QAC1F,uFAAuF;QACvF,6FAA6F;QAC7F,0EAA0E;QAC1E,IAAI,eAAe,IAAI,+BAA+B,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,OAAO,eAAe,CAAC;QACzG,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,iCAAiC,CAAC,GAAY,EAAE,MAAc,EAAE,MAAe;QACrF,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC1D,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,yCAAyC,CAAC;QACnD,CAAC;QACD,MAAM,WAAW,GAAI,MAA0D,EAAE,KAAK,EAAE,CAAC,6BAA6B,CAAC,CAAC;QACxH,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;YACrE,OAAO,sCAAsC,aAAa,gCAAgC,WAAW,GAAG,CAAC;QAC3G,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/C,IAAI,OAAO,YAAY,KAAK,QAAQ;YAAE,OAAO,+BAA+B,CAAC;QAC7E,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,4BAA4B,YAAY,gCAAgC,MAAM,GAAG,CAAC;QAC3F,CAAC;QAED,IAAI,CAAC,iCAAiC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAE1E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,OAAO,UAAU,KAAK,QAAQ;YAAE,OAAO,6BAA6B,CAAC;QACzE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAsC,CAAC;QAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvG,iFAAiF;QACjF,gGAAgG;QAChG,gGAAgG;QAChG,wEAAwE;QACxE,EAAE;QACF,yFAAyF;QACzF,2FAA2F;QAC3F,4FAA4F;QAC5F,2FAA2F;QAC3F,uDAAuD;QACvD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,0BAA0B,oBAAoB,CAAC,UAAU,CAAC,0CAA0C,CAAC;QAC9G,CAAC;QACD,8FAA8F;QAC9F,6FAA6F;QAC7F,IAAI,oBAAoB,CAAC,UAAU,CAAC,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,0BAA0B,UAAU,gCAAgC,QAAQ,GAAG,CAAC;QACzF,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IACK,8BAA8B,CAAC,GAAY;QACjD,MAAM,IAAI,GAAI,GAAG,CAAC,IAAqE,EAAE,MAAM,EAAE,KAAK,CAAC;QACvG,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC,6BAA6B,CAAC,CAAC;QACvD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QAExG,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACnD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,+BAA+B,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QAElG,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,+BAA+B,CAAC,GAAY;QAClD,OAAO,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,IAAI,+CAA+C,CAAC;IACrG,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,aAAa,CAAC,GAAY,EAAE,GAAa;QACrD,8FAA8F;QAC9F,mGAAmG;QACnG,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAC/F,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;QAEzC,4FAA4F;QAC5F,EAAE;QACF,0FAA0F;QAC1F,wBAAwB;QACxB,gFAAgF;QAChF,EAAE;QACF,+FAA+F;QAC/F,gGAAgG;QAChG,gGAAgG;QAChG,0FAA0F;QAC1F,EAAE;QACF,6FAA6F;QAC7F,8FAA8F;QAC9F,8FAA8F;QAC9F,+FAA+F;QAC/F,gGAAgG;QAChG,iEAAiE;QACjE,EAAE;QACF,gGAAgG;QAChG,+FAA+F;QAC/F,2FAA2F;QAC3F,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QACzC,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;YAC7G,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,oBAAoB;gBAC3B,iBAAiB,EAAE,8DAA8D;aAClF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,4FAA4F;QAC5F,EAAE;QACF,gGAAgG;QAChG,2CAA2C;QAC3C,qEAAqE;QACrE,EAAE;QACF,6FAA6F;QAC7F,8FAA8F;QAC9F,uDAAuD;QACvD,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC5D,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,CAAC,+BAA+B,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACtG,kFAAkF;YAClF,EAAE;YACF,8FAA8F;YAC9F,2FAA2F;YAC3F,6FAA6F;YAC7F,kDAAkD;YAClD,uEAAuE;YACvE,EAAE;YACF,2FAA2F;YAC3F,2FAA2F;YAC3F,sFAAsF;YACtF,6FAA6F;YAC7F,uCAAuC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE;oBACL,IAAI,EAAE,oBAAoB,CAAC,4BAA4B;oBACvD,OAAO,EAAE,yBAAyB,eAAe,oBAAoB;oBACrE,IAAI,EAAE,EAAE,SAAS,EAAE,+BAA+B,EAAE;iBACrD;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,4FAA4F;QAC5F,EAAE;QACF,gGAAgG;QAChG,uFAAuF;QACvF,0FAA0F;QAC1F,EAAE;QACF,qEAAqE;QACrE,gGAAgG;QAChG,2EAA2E;QAC3E,8CAA8C;QAC9C,EAAE;QACF,+FAA+F;QAC/F,+FAA+F;QAC/F,+FAA+F;QAC/F,iGAAiG;QACjG,oFAAoF;QACpF,gGAAgG;QAChG,kGAAkG;QAClG,kGAAkG;QAClG,yFAAyF;QACzF,4DAA4D;QAC5D,6DAA6D;QAC7D,MAAM,gBAAgB,GAAG,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,CAAC;QACnE,8FAA8F;QAC9F,yFAAyF;QACzF,MAAM,6BAA6B,GAAG,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC;QAE/E,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,CAAC,eAAe,EAAE,gCAAgC,CAAC,CAAC;YAC1G,OAAO;QACT,CAAC;QACD,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAC3C,MAAM,KAAK,GAAc,EAAE,IAAI,IAAI,CAAC;QAEpC,4FAA4F;QAC5F,EAAE;QACF,4FAA4F;QAC5F,2FAA2F;QAC3F,sFAAsF;QACtF,yEAAyE;QACzE,EAAE;QACF,4FAA4F;QAC5F,0EAA0E;QAC1E,IAAI,6BAA6B,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,iCAAiC,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC7E,IAAI,QAAQ,EAAE,CAAC;gBACb,4FAA4F;gBAC5F,wFAAwF;gBACxF,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,oBAAoB,CAAC,eAAe,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;gBACxF,OAAO;YACT,CAAC;QACH,CAAC;QAED,4FAA4F;QAC5F,EAAE;QACF,yFAAyF;QACzF,EAAE;QACF,+FAA+F;QAC/F,qEAAqE;QACrE,sGAAsG;QACtG,EAAE;QACF,gGAAgG;QAChG,gBAAgB;QAChB,EAAE;QACF,4FAA4F;QAC5F,iHAAiH;QACjH,2DAA2D;QAC3D,EAAE;QACF,2FAA2F;QAC3F,+FAA+F;QAC/F,+FAA+F;QAC/F,yEAAyE;QACzE,EAAE;QACF,8FAA8F;QAC9F,+FAA+F;QAC/F,yFAAyF;QACzF,gGAAgG;QAChG,6FAA6F;QAC7F,kBAAkB;QAClB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,YAAY;gBACf,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE;oBAClC,4BAA4B;oBAC5B,0FAA0F;oBAC1F,6FAA6F;oBAC7F,gEAAgE;oBAChE,EAAE;oBACF,yFAAyF;oBACzF,mFAAmF;oBACnF,yFAAyF;oBACzF,wDAAwD;oBACxD,eAAe,EAAE,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,6BAA6B,CAAC;oBACrF,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;oBAC/C,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE;iBACpD,CAAC,CAAC;gBACH,OAAO;YACT,KAAK,iBAAiB;gBACpB,iFAAiF;gBACjF,kFAAkF;gBAClF,kBAAkB;gBAClB,wCAAwC;gBACxC,EAAE;gBACF,2FAA2F;gBAC3F,4FAA4F;gBAC5F,0FAA0F;gBAC1F,8EAA8E;gBAC9E,EAAE;gBACF,wFAAwF;gBACxF,EAAE;gBACF,qCAAqC;gBACrC,EAAE;gBACF,yFAAyF;gBACzF,2FAA2F;gBAC3F,0FAA0F;gBAC1F,kFAAkF;gBAClF,sCAAsC;gBACtC,wFAAwF;gBACxF,0FAA0F;gBAC1F,wFAAwF;gBACxF,6FAA6F;gBAC7F,8DAA8D;gBAC9D,sFAAsF;gBACtF,0FAA0F;gBAC1F,sBAAsB;gBACtB,EAAE;gBACF,4FAA4F;gBAC5F,yFAAyF;gBACzF,4DAA4D;gBAC5D,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC;oBAC1D,iBAAiB,EAAE,+BAA+B;oBAClD,0FAA0F;oBAC1F,uFAAuF;oBACvF,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;oBAC3B,uFAAuF;oBACvF,sEAAsE;oBACtE,EAAE;oBACF,uFAAuF;oBACvF,0FAA0F;oBAC1F,0FAA0F;oBAC1F,yCAAyC;oBACzC,YAAY,EAAE,uBAAuB;oBACrC,KAAK,EAAE,EAAE,oCAAoC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;oBACxF,4FAA4F;oBAC5F,sFAAsF;oBACtF,wEAAwE;oBACxE,EAAE;oBACF,gFAAgF;oBAChF,2FAA2F;oBAC3F,0FAA0F;oBAC1F,wFAAwF;oBACxF,wDAAwD;iBACzD,EAAE,8BAA8B,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAC7G,OAAO;YACT,KAAK,YAAY;gBACf,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;gBACnF,OAAO;YACT,KAAK,YAAY;gBACf,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;gBACnF,OAAO;YACT;gBACE,mFAAmF;gBACnF,6DAA6D;gBAC7D,wEAAwE;gBACxE,EAAE;gBACF,uFAAuF;gBACvF,4FAA4F;gBAC5F,6FAA6F;gBAC7F,IAAI,CAAC,YAAY,CACf,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,oBAAoB,CAAC,gBAAgB,EAAE,WAAW,MAAM,oBAAoB,EAC7F,6BAA6B,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CACzE,CAAC;QACN,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,KAAK,CAAC,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,EAAa,EAAE,MAAe,EAAE,WAAoB,EAAE,gBAAgB,GAAG,oBAAoB;QACtJ,6FAA6F;QAC7F,EAAE;QACF,8FAA8F;QAC9F,2FAA2F;QAC3F,gGAAgG;QAChG,iDAAiD;QACjD,EAAE;QACF,gGAAgG;QAChG,iGAAiG;QACjG,+FAA+F;QAC/F,6FAA6F;QAC7F,qDAAqD;QACrD,EAAE;QACF,iFAAiF;QACjF,0DAA0D;QAC1D,EAAE;QACF,gGAAgG;QAChG,8FAA8F;QAC9F,iEAAiE;QACjE,MAAM,eAAe,GAAI,MAA2C,EAAE,MAAM,CAAC;QAC7E,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC9D,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,cAAc,EAAE,2HAA2H,CAAC,CAAC;YAClM,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC3C,iGAAiG;QACjG,qCAAqC;QACrC,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,0BAA0B,EAAE,CAAC;QACvE,IAAI,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC;QAC7C,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,yBAAyB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;gBAC9F,8FAA8F;gBAC9F,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC;YACzG,CAAC;YAAC,MAAM,CAAC;gBACP,0FAA0F;gBAC1F,4FAA4F;gBAC5F,4FAA4F;gBAC5F,yEAAyE;gBACzE,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAC;oBAC5G,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,6DAA6D,EAAE,eAAe,CAAC,CAAC;gBACjJ,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC,CAAC;QAEzE;;;;;;;;;;;;;;;;;;;WAmBG;QACH,IAAI,SAAS,KAAK,kBAAkB,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAC;gBAC5G,OAAO;YACT,CAAC;YACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,gEAAgE,CAAC,CAAC;YACnI,OAAO;QACT,CAAC;QACD,yFAAyF;QACzF,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,kBAAkB,CAAC;YACvD,6FAA6F;YAC7F,sEAAsE;YACtE,iEAAiE;YACjE,EAAE;YACF,0FAA0F;YAC1F,0FAA0F;YAC1F,wFAAwF;YACxF,KAAK,EAAE,KAAK;iBACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzD,CAAC,CAAC;iBACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/C,kEAAkE;YAClE,EAAE;YACF,6FAA6F;YAC7F,0FAA0F;YAC1F,8FAA8F;YAC9F,gGAAgG;YAChG,8FAA8F;YAC9F,6CAA6C;YAC7C,8FAA8F;YAC9F,iFAAiF;SAClF,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,UAAU,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,kGAAkG;IAC1F,KAAK,CAAC,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,EAAa,EAAE,MAAe,EAAE,WAAoB,EAAE,gBAAgB,GAAG,oBAAoB;QACtJ,MAAM,YAAY,GAAG,yBAAyB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,gBAAgB,CAAC,CAAC;YAChI,OAAO;QACT,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC;QAElE,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,0BAA0B,EAAE,CAAC;QACvE,gGAAgG;QAChG,oGAAoG;QACpG,4FAA4F;QAC5F,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAC;YAC5G,OAAO;QACT,CAAC;QAED,+EAA+E;QAC/E,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,mCAAmC,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QACD,IAAI,IAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,yFAAyF;YACzF,gGAAgG;YAChG,gGAAgG;YAChG,iGAAiG;YACjG,+FAA+F;YAC/F,gCAAgC;YAChC,IAAI,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,yBAAyB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,+FAA+F;YAC/F,6FAA6F;YAC7F,uFAAuF;YACvF,KAAK,8BAA8B,CACjC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EACnF,EAAE,QAAQ,EAAE,sBAAsB,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,wBAAwB,EAAE,CACpH,CAAC;YACF,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,6DAA6D,CAAC,CAAC;YAChI,OAAO;QACT,CAAC;QAED,+EAA+E;QAC/E,4FAA4F;QAC5F,0FAA0F;QAC1F,8FAA8F;QAC9F,MAAM,YAAY,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,4BAA4B,CAC7C,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EACxD;gBACE,YAAY;gBACZ,cAAc,EAAE,kBAAkB,CAAC,GAAG;gBACtC,YAAY,EAAE,0BAA0B;gBACxC,aAAa,EAAE,qCAAqC;gBACpD,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,cAAc;aACrD,CACF,CAAC;YACF,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACjC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;QACH,CAAC;QAED,gFAAgF;QAChF,oGAAoG;QACpG,mGAAmG;QACnG,kGAAkG;QAClG,4EAA4E;QAC5E,MAAM,EAAE,YAAY,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC3E,MAAM,eAAe,GAAG,8BAA8B,CAAC,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QACxH,+FAA+F;QAC/F,+FAA+F;QAC/F,gGAAgG;QAChG,MAAM,kBAAkB,GAAG,YAAY,IAAI,mBAAmB,IAAI,mBAAmB,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YAC1H,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,WAAW,CAAC;YAC1G,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,SAAS,GAAG,kBAAkB,EAAE,eAAe,IAAI,CAAC,YAAY,IAAI,mBAAmB;YAC3F,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,WAAW,CAAC;YAC7G,CAAC,CAAC,SAAS,CAAC,CAAC;QACf,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,sFAAsF;YACtF,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,gBAAgB,EAAE,SAAS,QAAQ,0CAA0C,CAAC,CAAC;YACpI,OAAO;QACT,CAAC;QAED,4FAA4F;QAC5F,kGAAkG;QAClG,kGAAkG;QAClG,kGAAkG;QAClG,+FAA+F;QAC/F,iGAAiG;QACjG,uCAAuC;QACvC,IAAI,CAAC,SAAS,CAAC,gCAAgC,CAAC,IAAI,EAAE;YACpD,cAAc,EAAE,kBAAkB,CAAC,GAAG;YACtC,kBAAkB,EAAE,QAAQ;YAC5B,mBAAmB,EAAE,sBAAsB,CAAC,cAAc;YAC1D,SAAS,EAAE,sBAAsB,CAAC,GAAG,CAAC;SACvC,CAAC,CAAC;QAEH,gGAAgG;QAChG,+FAA+F;QAC/F,6FAA6F;QAC7F,6FAA6F;QAC7F,6FAA6F;QAC7F,kGAAkG;QAClG,8FAA8F;QAC9F,iGAAiG;QACjG,wGAAwG;QACxG,uFAAuF;QACvF,wFAAwF;QACxF,MAAM,UAAU,GAA2B;YACzC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClG,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChG,CAAC;QAEF,6FAA6F;QAC7F,6FAA6F;QAC7F,+FAA+F;QAC/F,8FAA8F;QAC9F,yEAAyE;QACzE,mGAAmG;QACnG,wEAAwE;QACxE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAA2C,CAAC,kBAAkB,IAAI,2BAA2B,CAAC,SAAS,CAAC,UAAU,CAAC;YAC3I,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE;YAClE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAEnD,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,0BAA0B,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACpH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;YACvI,6FAA6F;YAC7F,EAAE;YACF,sCAAsC;YACtC,EAAE;YACF,+FAA+F;YAC/F,+FAA+F;YAC/F,+FAA+F;YAC/F,6DAA6D;YAC7D,iFAAiF;YACjF,6FAA6F;YAC7F,mDAAmD;YACnD,0EAA0E;YAC1E,EAAE;YACF,mFAAmF;YACnF,2FAA2F;YAC3F,iFAAiF;YACjF,2FAA2F;YAC3F,4FAA4F;YAC5F,EAAE;YACF,4FAA4F;YAC5F,6FAA6F;YAC7F,2FAA2F;YAC3F,4FAA4F;YAC5F,yEAAyE;YACzE,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;YACjE,8FAA8F;YAC9F,+FAA+F;YAC/F,gGAAgG;YAChG,8FAA8F;YAC9F,yFAAyF;YACzF,4FAA4F;YAC5F,mFAAmF;YACnF,wFAAwF;YACxF,iGAAiG;YACjG,EAAE;YACF,8FAA8F;YAC9F,+FAA+F;YAC/F,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,kBAAkB,CAAC;gBACvD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;gBACnD,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC5E,OAAO,EAAE,KAAK;aACf,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,6EAA6E;IAE7E;;;;;;OAMG;IACK,cAAc,CAAC,WAAoB;QACzC,OAAO,IAAI,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,kBAAkB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAClG,CAAC;IAEO,kBAAkB,CAAC,GAAY;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAClF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAED,+FAA+F;IACvF,aAAa,CAAC,QAAgB;QACpC,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACrD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,uBAAuB,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACtE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;QACrE,CAAC;QACD,OAAO;YACL,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAiB;YACnD,mBAAmB,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC;SACzE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,iBAAiB,CACvB,YAA0B,EAC1B,IAAyC;QAEzC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC,8BAA8B,EAAE,CAAC,YAAY,CAAC,CAAC;QAC9F,IAAI,eAAe,IAAI,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;YAChD,OAAO,EAAE,UAAU,EAAE,EAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAClD,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACK,kBAAkB,CAAC,GAAY;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACxE,+FAA+F;QAC/F,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,iGAAiG;QACjG,2FAA2F;QAC3F,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACnE,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE/D,mFAAmF;QACnF,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,kBAAkB,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACxG,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,CAAC,uDAAuD;QAEnG,mGAAmG;QACnG,0FAA0F;QAC1F,OAAO,UAAU,GAAG,WAAW,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACK,aAAa,CAAC,MAAc,EAAE,SAAiB;QACrD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3E,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5D,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACK,eAAe,CAAC,GAAa,EAAE,OAAgB;QACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;YAClB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,wBAAwB;YACzC,UAAU,EAAE,YAAY;YACxB,+FAA+F;YAC/F,yFAAyF;YACzF,8FAA8F;YAC9F,sBAAsB;YACtB,mEAAmE;YACnE,EAAE;YACF,8FAA8F;YAC9F,4FAA4F;YAC5F,2FAA2F;YAC3F,gFAAgF;YAChF,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;IAED;;;OAGG;IACH;;;;;;;;;;;;;;;;OAgBG;IACK,kBAAkB,CACxB,MAA+B,EAC/B,gBAAwB,EACxB,KAAqD;QAErD,IAAI,CAAC,6BAA6B,CAAC,gBAAgB,CAAC;YAAE,OAAO,MAAM,CAAC;QACpE,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACvH,CAAC;IAEO,aAAa,CAAC,GAAY,EAAE,GAAa,EAAE,EAAa,EAAE,MAAe;QAC/E,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACjF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,GAAY,EAAE,GAAa,EAAE,EAAa,EAAE,IAA0B,EAAE,OAAe,EAAE,UAAU,GAAG,GAAG;QAC5H,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;QACjE,IAAI,UAAU,KAAK,GAAG,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACvG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,mBAAmB,CACzB,GAAY,EACZ,GAAa,EACb,EAAa,EACb,WAAmB,EACnB,WAA+B,EAC/B,OAAe;IACf;;;;;OAKG;IACH,UAAmB;QAEnB,wFAAwF;QACxF,6FAA6F;QAC7F,iGAAiG;QACjG,iGAAiG;QACjG,8FAA8F;QAC9F,2DAA2D;QAC3D,sFAAsF;QACtF,MAAM,cAAc,GAAG,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChE,GAAG,CAAC,GAAG,CACL,kBAAkB,EAClB;YACE,QAAQ;YACR;gBACE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChD,sBAAsB,IAAI,CAAC,+BAA+B,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG;gBACvF,UAAU,cAAc,GAAG;aAC5B,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,eAAe,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACtF,CAAC;IAED;;;;;;;;OAQG;IACK,+BAA+B,CAAC,WAAmB,EAAE,WAAoB;QAC/E,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,+BAA+B,CAAC,CAAC;QAC9G,IAAI,CAAC,WAAW;YAAE,OAAO,GAAG,WAAW,GAAG,aAAa,EAAE,CAAC;QAC1D,OAAO,GAAG,WAAW,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,YAAY,CAAC,IAAI,WAAW,GAAG,aAAa,EAAE,CAAC;IAChI,CAAC;IAED;;;;OAIG;IACK,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,EAAa,EAAE,iBAAyB;QAC3F,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,YAAY,EAAE,uDAAuD,EAAE,GAAG,CAAC,CAAC;IACnI,CAAC;IAED;;;;;OAKG;IACK,aAAa,CAAC,GAAY,EAAE,GAAa,EAAE,EAAa,EAAE,KAAc,EAAE,gBAAgB,GAAG,oBAAoB;QACvH,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC;QACzB,MAAM,OAAO,GAAI,KAAK,EAAE,sBAAiC,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;QAChI,IAAI,CAAC,QAAQ,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAE1D,6FAA6F;QAC7F,EAAE;QACF,+FAA+F;QAC/F,+FAA+F;QAC/F,iGAAiG;QACjG,iDAAiD;QACjD,qDAAqD;QACrD,EAAE;QACF,4FAA4F;QAC5F,+FAA+F;QAC/F,IAAI,IAAI,IAAI,8BAA8B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,+FAA+F;YAC/F,+FAA+F;YAC/F,kGAAkG;YAClG,iGAAiG;YACjG,uDAAuD;YACvD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,MAAM,MAAM,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,kBAAkB,CAAC;gBACvD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,GAAG,MAAM,EAAE,EAAE,CAAC;gBACxD,OAAO,EAAE,IAAI;aACd,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QAED,iGAAiG;QACjG,+FAA+F;QAC/F,8EAA8E;QAC9E,MAAM,YAAY,GAAG,IAAI,KAAK,SAAS,CAAC,cAAc,IAAI,IAAI,KAAK,SAAS,CAAC,aAAa,CAAC;QAC3F,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC;QACvG,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;QACpG,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACjF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAEO,YAAY,CAAC,KAAc;QACjC,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK;YACrF,CAAC,CAAE,KAA4B;YAC/B,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;CACF,CAAA;AA7oCY,2BAA2B;IADvC,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAChE,WAAA,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAA;IACpC,WAAA,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;IACzC,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAA;IACvC,YAAA,MAAM,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAAA;qCAVhB,aAAa;QACM,0BAA0B;QAC1B,mBAAmB;QAC2B,qCAAqC;QAC/E,uBAAuB;QAChB,4BAA4B;QACb,+BAA+B;QACvC,uBAAuB;QAC9B,uBAAuB;QACxB,YAAY;QACkB,6CAA6C;GAZ1I,2BAA2B,CA6oCvC","sourcesContent":["import 'reflect-metadata';\nimport { inject, injectable } from 'inversify';\nimport type { Request, Response } from 'express';\nimport cors from 'cors';\nimport {\n ErrorType,\n MachineAccessOperation,\n MANUAL_CONTROLLER_ROUTES_URLS,\n ManualControllerRouteKey,\n ResourceServerKind,\n ResourceType,\n WildoError_Backend,\n} from '@wildo-ai/saas-models';\nimport { AbstractControllerBackendService } from '~wildo-backend-lib/base-classes/services/controllers/abstract-controller.backend.service';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { ErrorHandlerService } from '~wildo-backend-lib/errors/services/error-handler.backend.service';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { AuditLogsBackendService } from '~wildo-backend-lib/compliance/audit-trails/services/audit-logs.backend.service';\nimport { getClientIpFromRequest } from '~wildo-backend-lib/runtime/utils/request-client-ip.utils';\nimport { RedisService } from '~wildo-backend-lib/databases/services/redis.service';\nimport { recordExternalTokenAuthFailure } from '~wildo-backend-lib/security/authentications/services/utils/machine-auth-rate-limit.backend.utils';\nimport {\n MCP_EXTERNAL_CALL_RATE_MAX,\n MCP_EXTERNAL_CALL_RATE_WINDOW_SECONDS,\n assertExternalTurnWithinRate,\n resolvePrincipalRateKey,\n} from '~wildo-backend-lib/security/authentications/services/utils/external-turn-rate-limit.backend.utils';\nimport { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport { AppConfigurationService } from '~wildo-backend-lib/config/services/app-configuration.backend.service';\nimport { McpServerBackendService } from '~wildo-backend-lib/mcp/services/mcp-server.backend.service';\nimport {\n McpToolAdapterBackendService,\n mcpReachableScopesForPrincipal,\n mcpPrincipalForAuthenticatedCaller,\n McpCallerPrincipal,\n} from '~wildo-backend-lib/mcp/services/mcp-tool-adapter.backend.service';\nimport { ResourceServerInstancesRegistryBackendService } from '~wildo-backend-lib/mcp/services/resource-server-instances-registry.backend.service';\nimport { MCP_TOOL_NAME_SEPARATOR,\n MCP_UPLOAD_GRANT_TOOL_MARKER,\n} from '~wildo-backend-lib/mcp/models/mcp-tool.backend.schemas';\nimport { OIDC_SUPPORTED_IDENTITY_SCOPES } from '~wildo-backend-lib/security/authentications/services/oidc-user-claims.backend.service';\nimport { isMcpValueWrappedRequestDto, unwrapMcpValueEnvelope } from '~wildo-backend-lib/mcp/utils/zod-to-mcp-json-schema.backend.utils';\nimport {\n MCP_PROTOCOL_VERSION,\n MCP_SUPPORTED_PROTOCOL_VERSIONS,\n MCP_TOOLS_LIST_CACHE_TTL_MS,\n MCP_DISCOVER_CACHE_TTL_MS,\n Mcp_CacheScope,\n isStatelessMcpProtocolVersion,\n decodeMcpHeaderValue,\n MCP_METHODS_REQUIRING_NAME_HEADER,\n MCP_STATELESS_PROTOCOL_VERSION,\n MCP_ASSUMED_PROTOCOL_VERSION_WHEN_HEADER_ABSENT,\n MCP_META_PROTOCOL_VERSION_KEY,\n Mcp_JsonRpcErrorCode,\n Mcp_JsonRpcRequestSchema,\n Mcp_ToolsCallParamsSchema,\n MCP_SERVER_INSTRUCTIONS,\n MCP_TOOL_EXECUTION_ERROR_TYPES,\n} from '~wildo-backend-lib/mcp/models/mcp-protocol.backend.schemas';\nimport type { SocketAuthResult } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\n\n/** A JSON-RPC id is `string \| number \| null` (absent → treated as null in a response). /\ntype JsonRpcId = string \| number \| null;\n\n/\n Inbound Model Context Protocol (MCP) transport controller — a THIN JSON-RPC 2.0\n * wrapper over {@link McpServerBackendService}, mirroring {@link A2AControllerBackendService}.\n * Exposes a curated set of resource operations as MCP tools to external AI agents:\n \n - `GET /.well-known/oauth-protected-resource` — RFC 9728 Protected Resource\n * Metadata (public, CORS-open): advertises this server's `resource` identifier +\n * the `authorization_servers` (the app's own OIDC provider) a client uses to obtain\n * a token.\n * - `POST /mcp` — JSON-RPC 2.0. `initialize` is public; `tools/list` is PROGRESSIVELY principal-aware\n * (a valid Bearer → the caller's catalog, a user-delegated token additionally surfacing USER_SELF\n * tools; an ANONYMOUS caller reaches nothing and is CHALLENGED, which is the 401 every client needs\n * in order to begin authorization); `tools/call` is Bearer-credentialed, RFC 8707\n * audience-bound (validated in\n * {@link ExecutionContextCreatorBackendService.authenticateExternalToken}), and the\n * server re-runs `authorizeInController` BEFORE dispatch (fail-closed, roles-only).\n * - `POST /mcp/:instanceRef` + `GET /mcp/:instanceRef/.well-known/oauth-protected-resource` — the R-2\n * NAMED server instances. Each declared instance is a SEPARATE resource server: its own URL, its own\n * RFC 8707 audience (`…/mcp/<ref>`), its own metadata, and its own curated catalog (membership is\n * EXCLUSIVE — a curated operation LEAVES the default catalog). An unknown ref 404s before\n * parsing/auth and never falls back to the default catalog.\n * - Response mode (Streamable HTTP): a POST result is `application/json` by default, or an SSE stream\n * (`text/event-stream`, a single message event) when the client's `Accept` negotiates it. *JSON wins a\n tie** — the spec makes clients advertise BOTH, so only an explicit RFC 9110 `q`-value preference for\n * SSE selects it (see {@link MCPControllerBackendService.acceptsEventStream}). `GET /mcp`\n * → 405 (no server-initiated stream — no notifications/sampling yet). Transport-level errors\n * (401 / 429 / 503) are always plain HTTP, never SSE.\n \n Auth model (D6): a client-credentials / api-key MACHINE principal. Its token is\n * audience-bound to THE ADDRESSED SURFACE's own resource identifier (`mcpResourceUri(instanceRef)` →\n * `${apiAudience}/mcp` or `${apiAudience}/mcp/<ref>`, advertised in that surface's RFC 9728 metadata) —\n * the generic API audience is NOT accepted here (2026-07-29 flip), so an API token and an MCP token\n * never cross, and a token minted for one instance is rejected at another.\n * A user-delegated caller (an `authorization_code` token bound to this endpoint) additionally reaches\n * their USER_SELF tools — see the progressive principal-aware `tools/list` + the `callTool` gate.\n \n Curation is NOT authorization. `mcp.exposed` / `mcp.servers` decide which operations are shaped as\n * tools and which surface advertises them; every `tools/call` still re-runs the operation's own role\n * authorization, so exposure can only ever be a SUBSET of what the caller's roles already permit.\n \n NOTE: `setupRoutes()` runs inside the `super()` constructor before this subclass's\n * field initializers, so it only BINDS handlers — the injected services are read at\n * REQUEST time. Standard manual-controller pattern.\n /\n@injectable()\nexport class MCPControllerBackendService extends AbstractControllerBackendService {\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger) logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.ErrorHandlerService) errorHandler: ErrorHandlerService,\n @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) private readonly executionContextCreator: ExecutionContextCreatorBackendService,\n @inject(SAAS_SERVICE_TYPES.McpServer) private readonly mcpServer: McpServerBackendService,\n @inject(SAAS_SERVICE_TYPES.McpToolAdapter) private readonly toolAdapter: McpToolAdapterBackendService,\n @inject(SAAS_SERVICE_TYPES.ResourceRegistryService) private readonly resourcesRegistry: ResourcesRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.AppConfigService) private readonly appConfigService: AppConfigurationService,\n @inject(SAAS_SERVICE_TYPES.AuditLogsService) private readonly auditLogs: AuditLogsBackendService,\n @inject(SAAS_SERVICE_TYPES.RedisService) private readonly redisService: RedisService,\n @inject(SAAS_SERVICE_TYPES.ResourceServerInstancesRegistry) private readonly resourceServerInstances: ResourceServerInstancesRegistryBackendService,\n ) {\n super(logger, errorBuilder, errorHandler, 'MCPController');\n }\n\n protected setupRoutes(): void {\n // RFC 9728 metadata is PUBLIC, non-credentialed discovery an MCP client fetches\n // cross-origin to learn where to get a token — CORS-open GET, like the OIDC\n // discovery doc. The JSON-RPC endpoint stays under the restrictive global CORS.\n const publicMetadataCors = cors({ origin: '', methods: ['GET'], credentials: false });\n\n const metadataUrl = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.MCP_PROTECTED_RESOURCE_METADATA];\n this.router.get(metadataUrl, publicMetadataCors, this.asyncHandler(this.handleProtectedResourceMetadata.bind(this)));\n this.logRouteRegistration('GET', metadataUrl, 'MCP protected-resource metadata (RFC 9728, public)');\n\n const mcpUrl = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.MCP_ENDPOINT];\n this.router.post(mcpUrl, this.asyncHandler(this.handleJsonRpc.bind(this)));\n this.logRouteRegistration('POST', mcpUrl, 'MCP JSON-RPC endpoint (initialize, tools/list, tools/call; SSE or JSON per Accept)');\n\n // GET /mcp — the Streamable-HTTP server-initiated SSE stream. This server has no server-initiated\n // messages (no notifications / sampling), so respond 405 + `Allow: POST` — the spec-sanctioned\n // answer when a server offers no GET stream. Explicit 405 (not an unhandled 404) so clients probe\n // cleanly and fall back to the POST response-mode SSE.\n this.router.get(mcpUrl, (_req: Request, res: Response) => {\n res.set('Allow', 'POST').status(405).json({\n jsonrpc: '2.0', id: null,\n error: { code: Mcp_JsonRpcErrorCode.METHOD_NOT_FOUND, message: 'the MCP endpoint offers no server-initiated SSE stream; use POST' },\n });\n });\n this.logRouteRegistration('GET', mcpUrl, 'MCP endpoint GET → 405 (no server-initiated SSE stream)');\n\n // DELETE /mcp — the session-termination verb of the `2025-03-26`…`2025-11-25` transport, which\n // `2026-07-28` removed along with protocol-level sessions. We never implemented sessions, so\n // there is nothing to terminate; the spec names the answer for a server in exactly this position:\n //\n // \"HTTP GET or DELETE to the MCP endpoint: respond with `405 Method Not Allowed`.\"\n // spec-cite: MCP 2026-07-28 — Streamable HTTP § Earlier Streamable HTTP Revisions\n //\n // Registered EXPLICITLY rather than left to a framework 404, for the same reason as the GET: an\n // older client that sent DELETE would read a bare 404 as \"this server has no MCP endpoint\" and\n // fall back to the deprecated HTTP+SSE transport, against a server that speaks Streamable HTTP.\n this.router.delete(mcpUrl, (_req: Request, res: Response) => {\n res.set('Allow', 'POST').status(405).json({\n jsonrpc: '2.0', id: null,\n error: { code: Mcp_JsonRpcErrorCode.METHOD_NOT_FOUND, message: 'the MCP endpoint has no sessions to terminate; use POST' },\n });\n });\n this.logRouteRegistration('DELETE', mcpUrl, 'MCP endpoint DELETE → 405 (no protocol-level sessions)');\n\n // ── R-2: NAMED MCP server instances (`/mcp/:instanceRef`) ────────────────────\n // Each declared instance is a SEPARATE resource server: its own URL, its own RFC 8707 audience\n // (`…/mcp/<ref>`), its own PRM, and its own curated tool catalog. Routes are registered\n // unconditionally (not gated on `hasInstances`) because the registry is populated during startup\n // AFTER `setupRoutes` runs inside `super()` — an unknown ref is rejected at REQUEST time by\n // `resolveInstanceRef` (404), which is the same fail-closed answer with no ordering hazard.\n // More-specific paths first: the metadata route has more segments than `/mcp/:instanceRef`, so\n // Express matches it exactly and it can never be swallowed by the instance route.\n const instanceMetadataUrl = `${mcpUrl}/:instanceRef${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.MCP_PROTECTED_RESOURCE_METADATA]}`;\n this.router.get(instanceMetadataUrl, publicMetadataCors, this.asyncHandler(this.handleProtectedResourceMetadata.bind(this)));\n this.logRouteRegistration('GET', instanceMetadataUrl, 'Per-instance MCP protected-resource metadata (RFC 9728, public)');\n\n const instanceUrl = `${mcpUrl}/:instanceRef`;\n this.router.post(instanceUrl, this.asyncHandler(this.handleJsonRpc.bind(this)));\n this.logRouteRegistration('POST', instanceUrl, 'Named MCP server instance (JSON-RPC; own audience + curated catalog)');\n\n this.router.get(instanceUrl, (_req: Request, res: Response) => {\n res.set('Allow', 'POST').status(405).json({\n jsonrpc: '2.0', id: null,\n error: { code: Mcp_JsonRpcErrorCode.METHOD_NOT_FOUND, message: 'the MCP endpoint offers no server-initiated SSE stream; use POST' },\n });\n });\n this.logRouteRegistration('GET', instanceUrl, 'Named MCP server instance GET → 405 (no server-initiated SSE stream)');\n\n // A named instance IS an MCP endpoint, so it owes the same answer as the default one. Registered\n // separately because Express matches `/mcp` and `/mcp/:instanceRef` as distinct routes — the base\n // DELETE handler does NOT cover the instance path, and without this an older client that sends\n // the retired session-termination verb to `/mcp/support` reads the framework 404 as \"no MCP\n // endpoint here\" and falls back to the deprecated HTTP+SSE transport.\n //\n // Found by probing the running server, not by a test: the base-endpoint pin passed while every\n // named instance answered 404. One verb, two routes — the recurring one-of-N shape.\n this.router.delete(instanceUrl, (_req: Request, res: Response) => {\n res.set('Allow', 'POST').status(405).json({\n jsonrpc: '2.0', id: null,\n error: { code: Mcp_JsonRpcErrorCode.METHOD_NOT_FOUND, message: 'the MCP endpoint has no sessions to terminate; use POST' },\n });\n });\n this.logRouteRegistration('DELETE', instanceUrl, 'Named MCP server instance DELETE → 405 (no protocol-level sessions)');\n }\n\n /*\n Resolve the NAMED server instance addressed by this request, or the DEFAULT server.\n \n - No `:instanceRef` path param ⇒ `{ instanceRef: undefined }` — the default `/mcp` surface.\n * - A param naming a DECLARED instance ⇒ that ref (drives the audience + the catalog filter).\n * - A param naming an UNDECLARED instance ⇒ `undefined` (the caller 404s). Fail-closed: an\n * unknown ref must never silently fall back to the default catalog, which would hand a caller\n * tools the (non-existent) server was never meant to expose.\n /\n private resolveInstanceRef(req: Request): { instanceRef?: string } \| undefined {\n const requested = (req.params as Record<string, string \| undefined>)?.instanceRef;\n if (!requested) return { instanceRef: undefined };\n const instance = this.resourceServerInstances.tryGetInstance(ResourceServerKind.MCP, requested);\n return instance ? { instanceRef: instance.ref } : undefined;\n }\n\n /\n `GET /.well-known/oauth-protected-resource` (default server) and\n * `GET /mcp/:instanceRef/.well-known/oauth-protected-resource` (a named instance) — RFC 9728 metadata.\n \n Each instance advertises its OWN `resource` (its canonical audience), which is exactly the `aud` a\n * token must carry to be accepted there — so a client that discovers an instance and follows its\n * metadata obtains a token scoped to that instance and nothing else.\n /\n private async handleProtectedResourceMetadata(req: Request, res: Response): Promise<void> {\n const resolved = this.resolveInstanceRef(req);\n if (!resolved) {\n res.status(404).json({ error: 'not_found', error_description: 'no such MCP server instance' });\n return;\n }\n const apiAudience = this.appConfigService.resolveApiResourceAudience();\n const mcpResource = this.mcpResourceUri(resolved.instanceRef);\n if (!apiAudience \|\| !mcpResource) {\n res.status(503).json({ error: 'temporarily_unavailable', error_description: 'resource audience is not resolvable (app public URL unset)' });\n return;\n }\n res.set('Cache-Control', 'public, max-age=3600');\n res.status(200).json({\n // This MCP resource server's canonical URI (the `aud` an audience-bound token must carry).\n resource: mcpResource,\n // The app's own OIDC provider (issuer == the API audience base).\n authorization_servers: [apiAudience],\n bearer_methods_supported: ['header'],\n /\n The OIDC identity scopes a delegated client should request — NOT authorization scopes.\n \n Wildo's authorization is roles-only, so this document once advertised `[]`, which was\n * TRUTHFUL and turned out to be unusable. A real client (Cursor, 2026-08-11) read the empty set,\n * concluded there was nothing to authorize, reported \"successfully authenticated\" and *never\n opened a browser** — so no token was ever obtained and every `tools/call` stayed 401. The\n * scope-selection strategy tells a client to take the challenge's `scope` and otherwise fall\n * back to this field; supplying neither leaves it with no way to start an authorization request.\n \n These are the scopes a dynamically registered client is actually granted\n * (`/oauth/register` confines to exactly this set), so advertising them describes what a client\n * will really receive rather than inventing a vocabulary. They remain IDENTITY scopes: nothing\n * here grants access to a tool, which roles alone still decide.\n \n spec-cite: MCP 2026-07-28 — Authorization § Scope Selection Strategy.\n /\n scopes_supported: [...OIDC_SUPPORTED_IDENTITY_SCOPES],\n });\n }\n\n /\n Pick the protocol revision to answer `initialize` with.\n \n Returns the CLIENT's requested revision when this server serves it, else this server's own\n * newest — exactly the two-branch rule in Lifecycle § Version Negotiation. A malformed or absent\n * `params.protocolVersion` falls to our newest, which is also what a client that sent nothing\n * parseable can most reasonably be given.\n /\n private negotiateProtocolVersion(params: unknown, declaredVersion?: string): string {\n const requested = (params as { protocolVersion?: unknown } \| undefined)?.protocolVersion;\n if (typeof requested === 'string' && MCP_SUPPORTED_PROTOCOL_VERSIONS.includes(requested)) return requested;\n // Fall back to what the REQUEST resolved to (header / `_meta`) before falling back to our\n // newest: a client that declared its revision on the transport but omitted it from the\n // `initialize` body has still told us what it speaks, and answering our newest instead would\n // hand it a version it may not support — whose own rule is to disconnect.\n if (declaredVersion && MCP_SUPPORTED_PROTOCOL_VERSIONS.includes(declaredVersion)) return declaredVersion;\n return MCP_PROTOCOL_VERSION;\n }\n\n /\n Validate the mirrored request-metadata headers against the body. Returns a reason, or\n * `undefined` when everything agrees.\n \n The hazard being closed is a SPLIT BRAIN, not sloppiness: \"This prevents potential security\n * vulnerabilities when different components in the network rely on different sources of truth\n * (e.g., a load balancer routing on the header value while the MCP server executes based on the\n * body value).\"\n * spec-cite: MCP 2026-07-28 — Streamable HTTP § Server Validation\n \n A MISSING required header is a validation failure too, not a tolerated omission — the spec lists\n * \"a required standard header … is missing\" first among its failure conditions. Tolerating it\n * would leave an intermediary routing on a header this server never checked.\n /\n private findRequestMetadataHeaderMismatch(req: Request, method: string, params: unknown): string \| undefined {\n const headerVersion = req.headers['mcp-protocol-version'];\n if (typeof headerVersion !== 'string') {\n return 'MCP-Protocol-Version header is required';\n }\n const metaVersion = (params as { _meta?: Record<string, unknown> } \| undefined)?._meta?.[MCP_META_PROTOCOL_VERSION_KEY];\n if (typeof metaVersion === 'string' && metaVersion !== headerVersion) {\n return `MCP-Protocol-Version header value '${headerVersion}' does not match body value '${metaVersion}'`;\n }\n\n const headerMethod = req.headers['mcp-method'];\n if (typeof headerMethod !== 'string') return 'Mcp-Method header is required';\n if (headerMethod !== method) {\n return `Mcp-Method header value '${headerMethod}' does not match body value '${method}'`;\n }\n\n if (!MCP_METHODS_REQUIRING_NAME_HEADER.includes(method)) return undefined;\n\n const headerName = req.headers['mcp-name'];\n if (typeof headerName !== 'string') return 'Mcp-Name header is required';\n const p = (params ?? {}) as { name?: unknown; uri?: unknown };\n const bodyName = typeof p.name === 'string' ? p.name : (typeof p.uri === 'string' ? p.uri : undefined);\n // A body with NO target used to pass this gate, because the comparison carried a\n // `bodyName !== undefined &&` guard and was therefore skipped when there was nothing to compare\n // against. The header exists so a proxy can route without parsing the body, and this is exactly\n // the case where it asserts a routing target the body does not support.\n //\n // Dropping that guard is what makes this correct* — the comparison below then rejects\n // `'todos__list' !== undefined` on its own. This early return exists only for the MESSAGE:\n // \"does not match body value 'undefined'\" describes a mismatch, when the real fault is that\n // there is nothing to match. Proven by mutation: removing only this block changes nothing;\n // restoring the guard as well is what reddens the pin.\n if (bodyName === undefined) {\n return `Mcp-Name header names '${decodeMcpHeaderValue(headerName)}' but the request body carries no target`;\n }\n // Decoded BEFORE comparison — a client MUST use the Base64 sentinel for any value that is not\n // header-safe, so comparing raw would reject exactly the names the encoding exists to carry.\n if (decodeMcpHeaderValue(headerName) !== bodyName) {\n return `Mcp-Name header value '${headerName}' does not match body value '${bodyName}'`;\n }\n return undefined;\n }\n\n /*\n The protocol revision THIS request is written against.\n \n `_meta` wins over the header because a stateless request carries its revision in the body and a\n * proxy cannot rewrite it there; the header is the transport mirror of the same value. When\n * neither is present the request predates both mechanisms, so it gets the handshake default the\n * specification assigns rather than our newest — answering our newest to a client that said\n * nothing is how a `2025-03-26` client gets told it is speaking something it may not support.\n /\n private resolveDeclaredProtocolVersion(req: Request): string \| undefined {\n const meta = (req.body as { params?: { _meta?: Record<string, unknown> } } \| undefined)?.params?._meta;\n const declared = meta?.[MCP_META_PROTOCOL_VERSION_KEY];\n if (typeof declared === 'string' && MCP_SUPPORTED_PROTOCOL_VERSIONS.includes(declared)) return declared;\n\n const header = req.headers['mcp-protocol-version'];\n if (typeof header === 'string' && MCP_SUPPORTED_PROTOCOL_VERSIONS.includes(header)) return header;\n\n return undefined;\n }\n\n /\n The revision whose RULES this request is held to.\n \n Distinct from {@link resolveDeclaredProtocolVersion} on purpose, and the distinction is\n * load-bearing. When a client declares nothing the specification tells us how to READ the request\n * — assume `2025-03-26` — but that assumption must never become what we ADVERTISE back: a client\n * that said nothing has requested nothing, and `initialize` must then answer this server's newest,\n * not the floor we read it at.\n \n Collapsing the two (returning the assumed default from one helper and feeding it into\n * negotiation) silently downgraded every handshake client to `2025-03-26`. Two existing pins\n * caught it immediately, which is the argument for keeping them narrow enough to fail loudly.\n /\n private resolveEffectiveProtocolVersion(req: Request): string {\n return this.resolveDeclaredProtocolVersion(req) ?? MCP_ASSUMED_PROTOCOL_VERSION_WHEN_HEADER_ABSENT;\n }\n\n /\n `POST /mcp` — JSON-RPC 2.0 dispatch. Application-level failures are returned as\n * JSON-RPC error envelopes (HTTP 200) per the protocol; a missing/invalid Bearer on\n * `tools/call` returns HTTP 401 + `WWW-Authenticate` pointing at the RFC 9728 metadata\n * (the OAuth resource-server challenge). A malformed envelope yields a null-id error.\n /\n private async handleJsonRpc(req: Request, res: Response): Promise<void> {\n // R-2: which server instance is being addressed (default `/mcp`, or a declared `/mcp/<ref>`).\n // An unknown ref 404s BEFORE any parsing/auth — it is not a server, so it has no JSON-RPC surface.\n const resolved = this.resolveInstanceRef(req);\n if (!resolved) {\n res.status(404).json({ error: 'not_found', error_description: 'no such MCP server instance' });\n return;\n }\n const instanceRef = resolved.instanceRef;\n\n // ── Origin: refuse ANY browser-originated call ───────────────────────────────────────────\n //\n // \"Servers MUST validate the `Origin` header on all incoming connections to prevent DNS\n // rebinding attacks\"\n // spec-cite: MCP 2025-06-18 — Transports § Streamable HTTP → Security Warning\n //\n // The policy is a FLAT REFUSAL of any request carrying an `Origin`, not an allow-list, because\n // this endpoint has no legitimate browser caller: it is machine-to-machine and authenticated by\n // a Bearer machine token, so a page able to call it would have had to keep that token somewhere\n // browser-reachable — which is a credential leak whether or not the origin is recognised.\n //\n // An ABSENT `Origin` is allowed, and that is the whole reason this is safe to ship: browsers\n // attach `Origin` to every cross-origin request, while the MCP clients that actually use this\n // surface (desktop hosts, CLIs, agent runtimes) are not browsers and send none. An allow-list\n // keyed on configured frontend URLs would have been the obvious move and is worse twice over —\n // it invents a second origin authority beside the WebSocket service's, and it implies a browser\n // MCP client is a supported shape when it is a misconfiguration.\n //\n // Defence in depth rather than the primary control: a rebinding page cannot set `Authorization`\n // cross-origin without a preflight this endpoint does not answer permissively, so it never got\n // past the auth gate either. Both are cheap; the one that fails closed on its own is kept.\n const requestOrigin = req.headers.origin;\n if (typeof requestOrigin === 'string' && requestOrigin.length > 0) {\n this.logger.warn('[MCP] Refused a browser-originated JSON-RPC call', { origin: requestOrigin, instanceRef });\n res.status(403).json({\n error: 'origin_not_allowed',\n error_description: 'the MCP endpoint does not accept browser-originated requests',\n });\n return;\n }\n\n // ── MCP-Protocol-Version header ──────────────────────────────────────────────────────────\n //\n // \"If the server receives a request with an invalid or unsupported `MCP-Protocol-Version`, it\n // MUST respond with `400 Bad Request`.\"\n // spec-cite: MCP 2025-06-18 — Transports § Protocol Version Header\n //\n // ABSENT is not invalid — the spec assigns a default rather than requiring the header on the\n // first exchange, and demanding it would break the `initialize` request itself, which is sent\n // before any version has been negotiated to put in it.\n const declaredVersion = req.headers['mcp-protocol-version'];\n if (typeof declaredVersion === 'string' && !MCP_SUPPORTED_PROTOCOL_VERSIONS.includes(declaredVersion)) {\n // A JSON-RPC error body, NOT a plain one — and the shape is what makes it useful.\n //\n // A client that supports both eras probes with a modern request and decides from the RESPONSE\n // BODY whether to fall back: \"If the body contains a recognized modern JSON-RPC error, the\n // server speaks a modern version of MCP — retry using the advertised `supported` versions or\n // correct the request, rather than falling back.\"\n // spec-cite: MCP 2026-07-28 — Streamable HTTP § Backward Compatibility\n //\n // A plain `{error: '…'}` body is NOT a recognized JSON-RPC error, so it would send exactly\n // that client down the legacy HTTP+SSE path — against a server that speaks the modern one.\n // The earlier comment here reasoned that a JSON-RPC body \"would imply the message was\n // processed\"; that is true of application errors and wrong here, because the spec makes this\n // response the fallback DISCRIMINATOR.\n res.status(400).json({\n jsonrpc: '2.0',\n id: null,\n error: {\n code: Mcp_JsonRpcErrorCode.UNSUPPORTED_PROTOCOL_VERSION,\n message: `MCP-Protocol-Version '${declaredVersion}' is not supported`,\n data: { supported: MCP_SUPPORTED_PROTOCOL_VERSIONS },\n },\n });\n return;\n }\n\n // ── The effective revision for THIS request ──────────────────────────────────────────────\n //\n // From `2026-07-28` MCP is stateless: the revision travels per request rather than being agreed\n // once by a handshake. Three sources, most specific first — the `_meta` key (stateless\n // revisions), then the transport header, then the handshake default for everything older.\n //\n // \"Every request declares the protocol version it is using via the\n // `io.modelcontextprotocol/protocolVersion` key in its `_meta` field […] On Streamable HTTP,\n // the same value is also carried in the `MCP-Protocol-Version` header.\"\n // spec-cite: MCP — Versioning § Negotiation\n //\n // Resolved BEFORE dispatch because the revision decides which RULES apply, and the obligations\n // that arrived with `2026-07-28` (required `Mcp-Method`/`Mcp-Name`, the `resultType` envelope)\n // must never be applied to a request written against an earlier one. Serving several revisions\n // at once is explicitly sanctioned — \"Clients and servers MAY support multiple protocol versions\n // simultaneously\" — and is what makes this migration additive rather than breaking.\n // The revision whose RULES this request is held to. Not consumed yet: the obligations that read\n // it — required `Mcp-Method`/`Mcp-Name`, the `resultType` envelope, `ttlMs`/`cacheScope` — arrive\n // in migration steps M3/M4. Resolved here rather than at each future site because the whole point\n // of the seam is that ONE decision governs which rules apply; deriving it separately per\n // obligation is how three of four sites end up disagreeing.\n // eslint-disable-next-line @typescript-eslint/no-unused-vars\n const effectiveVersion = this.resolveEffectiveProtocolVersion(req);\n // What the client actually DECLARED, or undefined. Deliberately separate — see the resolver's\n // JSDoc: feeding the assumed default into negotiation downgraded every handshake client.\n const declaredVersionForNegotiation = this.resolveDeclaredProtocolVersion(req);\n\n const parsed = Mcp_JsonRpcRequestSchema.safeParse(req.body);\n if (!parsed.success) {\n this.sendRpcError(req, res, null, Mcp_JsonRpcErrorCode.INVALID_REQUEST, 'malformed JSON-RPC 2.0 request');\n return;\n }\n const { id, method, params } = parsed.data;\n const rpcId: JsonRpcId = id ?? null;\n\n // ── Request-metadata headers — `2026-07-28` ONLY ─────────────────────────────────────────\n //\n // This is HAZARD 1 in code. `Mcp-Method` is \"Required For: All requests\" and `Mcp-Name` for\n // `tools/call` / `resources/read` / `prompts/get`; a `2025-06-18` client sends NEITHER, so\n // validating unconditionally would reject every existing client on its first request.\n // spec-cite: MCP 2026-07-28 — Streamable HTTP § Standard Request Headers\n //\n // The rule is gated on what the request DECLARED, which is why the declared/effective split\n // matters: a request that never claimed `2026-07-28` is never held to it.\n if (isStatelessMcpProtocolVersion(declaredVersionForNegotiation)) {\n const mismatch = this.findRequestMetadataHeaderMismatch(req, method, params);\n if (mismatch) {\n // 400 + `-32020`, both mandated. The status is what a legacy-probing client keys on to tell\n // a modern server from an old one, and the JSON-RPC body is what stops it falling back.\n this.sendRpcError(req, res, rpcId, Mcp_JsonRpcErrorCode.HEADER_MISMATCH, mismatch, 400);\n return;\n }\n }\n\n // ── JSON-RPC NOTIFICATIONS: acknowledge, never answer ────────────────────────────────────\n //\n // A notification is a message with NO `id`. Streamable HTTP is explicit about the reply:\n //\n // \"If the input is a JSON-RPC response or notification: If the server accepts the input, the\n // server MUST return HTTP status code 202 Accepted with no body.\"\n // spec-cite: MCP 2025-06-18 — Transports § Streamable HTTP → Sending Messages to the Server, item 4\n //\n // This matters far beyond tidiness, because EVERY conformant client sends one immediately after\n // `initialize`:\n //\n // \"After successful initialization, the client MUST send an `initialized` notification to\n // indicate it is ready to begin normal operations\" — `{\"jsonrpc\":\"2.0\",\"method\":\"notifications/initialized\"}`\n // spec-cite: MCP 2025-06-18 — Lifecycle § Initialization\n //\n // Before this, that notification fell through to the `default` arm and was answered with a\n // METHOD_NOT_FOUND error envelope — the server telling every client, on every connection, that\n // the one message the specification obliges it to send is unsupported. Clients that surface or\n // fail on an initialization error would never have reached `tools/list`.\n //\n // Acknowledged rather than routed: this server negotiates `tools` only, so no notification it\n // can legally receive changes any state. An UNKNOWN notification is also accepted (202) rather\n // than refused, because refusing is reserved for input the server \"cannot accept\", and a\n // notification it does not recognise is one it can safely ignore — the sender is not waiting on\n // an answer either way, so an error response would be a reply nobody reads to a message that\n // caused no harm.\n if (id === undefined) {\n res.status(202).end();\n return;\n }\n\n switch (method) {\n case 'initialize':\n this.sendRpcResult(req, res, rpcId, {\n // Negotiated, not asserted:\n // \"If the server supports the requested protocol version, it MUST respond with the same\n // version. Otherwise, the server MUST respond with another protocol version it supports.\"\n // spec-cite: MCP 2025-06-18 — Lifecycle § Version Negotiation\n //\n // This previously answered `MCP_PROTOCOL_VERSION` unconditionally, which silently told a\n // 2025-03-26 client it was talking 2025-06-18. The client's own rule on that is to\n // disconnect if it does not support the version it is handed, so an unconditional answer\n // converts a working pairing into a dropped connection.\n protocolVersion: this.negotiateProtocolVersion(params, declaredVersionForNegotiation),\n capabilities: { tools: { listChanged: false } },\n serverInfo: { name: 'wildo-mcp', version: '1.0.0' },\n });\n return;\n case 'server/discover':\n // \"`server/discover` lets a client query a server's supported protocol versions,\n // capabilities, and identity before sending any other requests. Servers MUST\n // implement it.\"\n // spec-cite: MCP 2026-07-28 — Discovery\n //\n // Answered for EVERY revision, not gated on `2026-07-28`. It costs an older client nothing\n // (it will never call it) and gating it would mean a stateless client probing a server that\n // also serves older revisions gets METHOD_NOT_FOUND — the same first-exchange failure the\n // `notifications/initialized` defect caused, arriving through the newer door.\n //\n // ── UNAUTHENTICATED, and that is a DECISION rather than an omission ──────────────────\n //\n // Three reasons, in order of weight:\n //\n // 1. It discloses nothing a caller cannot already learn. The response carries supported\n // revisions, a capability SHAPE (`tools`) and a self-reported name — no tool names, no\n // descriptions, no tenant data. The RFC 9728 protected-resource metadata beside it is\n // deliberately public and already reveals that this endpoint exists and which\n // authorization server guards it.\n // 2. Requiring a token would invert the order of operations. A conforming `2026-07-28`\n // request must carry `MCP-Protocol-Version`, so a client has to learn which revisions\n // this server speaks BEFORE it can construct one — and it obtains its token from an\n // authorization server it discovers through the public metadata. Gating discovery behind\n // the credential you need discovery to acquire is a loop.\n // 3. It is the documented backward-compatibility probe. A client that cannot call it\n // unauthenticated falls back to the deprecated transport against a server that speaks\n // the modern one.\n //\n // What this does NOT license: `tools/list` CHALLENGES an anonymous caller (its catalogue is\n // empty) and `tools/call` still authenticates fail-closed. Discovery being open is not a\n // precedent for the catalogue or the invocation being open.\n this.sendRpcResult(req, res, rpcId, this.withResultEnvelope({\n supportedVersions: MCP_SUPPORTED_PROTOCOL_VERSIONS,\n // TOOLS ONLY — a deliberate, recorded position, not an omission. Advertising a capability\n // we do not serve would have a client probe `resources/list` and get METHOD_NOT_FOUND.\n capabilities: { tools: {} },\n // \"Optional natural-language guidance for LLMs on how to use this server effectively.\"\n // spec-cite: MCP 2026-07-28 — Discovery § Data Types → DiscoverResult\n //\n // Carries the CONVENTIONS no single tool schema can express — the naming pattern, that\n // scope rides the credential rather than the arguments, the collection envelope, and that\n // the annotations are worth reading before a retry. Each was previously learnable only by\n // making a call and reading the failure.\n instructions: MCP_SERVER_INSTRUCTIONS,\n _meta: { 'io.modelcontextprotocol/serverInfo': { name: 'wildo-mcp', version: '1.0.0' } },\n // PUBLIC: supported revisions, capability shape and server identity are identical for every\n // caller, so a shared cache serving one client's answer to another discloses nothing.\n // The envelope is applied UNCONDITIONALLY here, unlike everywhere else.\n //\n // `server/discover` exists only from `2026-07-28` — a client that calls it is a\n // stateless-era client by definition, whatever it did or did not put in `_meta`. Gating on\n // the declared revision would hand exactly that client a hint-less result when it omitted\n // the key, and the caching rule names this method specifically as one whose result MUST\n // carry hints. So the method itself is the declaration.\n }, MCP_STATELESS_PROTOCOL_VERSION, { ttlMs: MCP_DISCOVER_CACHE_TTL_MS, cacheScope: Mcp_CacheScope.PUBLIC }));\n return;\n case 'tools/list':\n await this.handleToolsList(req, res, rpcId, params, instanceRef, effectiveVersion);\n return;\n case 'tools/call':\n await this.handleToolsCall(req, res, rpcId, params, instanceRef, effectiveVersion);\n return;\n default:\n // \"If the server does not implement the requested RPC method, it MUST respond with\n // `404 Not Found` and a JSON-RPC error with code `-32601`.\"\n // spec-cite: MCP 2026-07-28 — Streamable HTTP § Protocol Version Header\n //\n // 404 ONLY for a request that declared the stateless revision. Older revisions carry a\n // METHOD_NOT_FOUND on HTTP 200 per plain JSON-RPC, and changing that under them would break\n // clients that key on the status — the same per-revision discipline as the metadata headers.\n this.sendRpcError(\n req, res, rpcId, Mcp_JsonRpcErrorCode.METHOD_NOT_FOUND, `method '${method}' is not supported`,\n isStatelessMcpProtocolVersion(declaredVersionForNegotiation) ? 404 : 200,\n );\n }\n }\n\n /\n `tools/list` — PROGRESSIVE principal-awareness across THREE principals.\n \n A caller presenting a VALID Bearer bound to THIS MCP endpoint gets the catalog for its principal —\n * a user-delegated token additionally surfaces its USER_SELF tools. An ANONYMOUS caller reaches\n * nothing, and an empty anonymous catalogue is CHALLENGED rather than returned as an empty page. An\n * INVALID/expired Bearer is answered `invalid_token`, not silently downgraded.\n \n Both of those were the opposite until 2026-08-11, and the reversal is the point: an anonymous\n * caller was classified as a MACHINE principal and handed ORG/APP tools it could not invoke, so the\n * 401 that clients gate their login window on never fired. A real client reported \"successfully\n * authenticated\" having never opened a browser.\n /\n private async handleToolsList(req: Request, res: Response, id: JsonRpcId, params: unknown, instanceRef?: string, effectiveVersion = MCP_PROTOCOL_VERSION): Promise<void> {\n // ── Pagination cursor ─────────────────────────────────────────────────────────────────────\n //\n // This server does not paginate `tools/list`: the catalogue is small and bounded by the app's\n // own `mcp.exposed` declarations, so every call returns the complete set and NEVER emits a\n // `nextCursor`. That is allowed — pagination is a server capability, and a client \"SHOULD treat\n // a missing `nextCursor` as the end of results\".\n //\n // But it makes every cursor we RECEIVE invalid by construction: a cursor is opaque and can only\n // have come from a `nextCursor` we issued, and we issue none. Silently ignoring it and returning\n // the full page again is the dangerous answer — a client resuming from a stale cursor would be\n // handed the whole catalogue as though it were the next page, and one that kept paging would\n // loop forever on a `nextCursor` that never arrives.\n //\n // \"Invalid cursors SHOULD result in an error with code -32602 (Invalid params).\"\n // spec-cite: MCP 2026-07-28 — Pagination § Error Handling\n //\n // Presence is what makes it invalid, not the value: \"an empty string is a valid cursor and thus\n // MUST NOT be treated as the end of results\", so `cursor: ''` is a real cursor and is refused\n // like any other. Only an ABSENT cursor is a first-page request.\n const requestedCursor = (params as { cursor?: unknown } \| undefined)?.cursor;\n if (requestedCursor !== undefined && requestedCursor !== null) {\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.INVALID_PARAMS, 'tools/list does not paginate; this server never issues a nextCursor, so the supplied cursor is not one it can resume from');\n return;\n }\n\n const token = this.extractBearerToken(req);\n // The Bearer is validated against THIS instance's audience — a token minted for another instance\n // does not upgrade the catalog here.\n const mcpResource = this.mcpResourceUri(instanceRef);\n const apiAudience = this.appConfigService.resolveApiResourceAudience();\n let principal = McpCallerPrincipal.ANONYMOUS;\n if (token && mcpResource) {\n try {\n const auth = await this.executionContextCreator.authenticateExternalToken(token, mcpResource);\n // A user-delegated (`authorization_code`) token carries a `userId`; a machine token does not.\n principal = auth.initiatorIds?.userId ? McpCallerPrincipal.USER_DELEGATED : McpCallerPrincipal.MACHINE;\n } catch {\n // A PRESENTED-but-bad credential is answered, not ignored. Until 2026-08-11 this degraded\n // silently to the public catalogue, which hid an expiry from the one caller able to fix it:\n // the client saw a plausible list, called a tool, and only then learned its token was dead.\n // `invalid_token` tells it to REFRESH rather than restart authorization.\n if (!apiAudience) {\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.INTERNAL_ERROR, 'resource audience is not resolvable');\n return;\n }\n this.sendUnauthenticated(req, res, id, apiAudience, instanceRef, 'the access token is invalid, expired, or not audience-bound', 'invalid_token');\n return;\n }\n }\n\n const reachableScopes = mcpReachableScopesForPrincipal(principal);\n const tools = this.mcpServer.listTools({ reachableScopes, instanceRef });\n\n /\n An anonymous caller with nothing to list is CHALLENGED rather than handed an empty page.\n \n This is the rung a client's whole authorization flow hangs from. Clients open the login window\n * on a 401 during connect — and a reconnect is `initialize` + `tools/list`. Answering 200 there\n * means the session comes up \"working\", so authorization is never attempted and every later\n * `tools/call` fails 401 forever. Cursor demonstrated exactly this on 2026-08-11: clicking\n * Authenticate reported success without ever opening a browser.\n \n Scoped deliberately narrow — it fires ONLY when no credentials were presented AND the catalogue\n * is empty:\n * - a caller that presented a token gets its (possibly empty) catalogue, never a challenge:\n * \"This set MAY be empty\" is a legitimate answer to an authenticated principal, and\n * challenging one that already authenticated would loop it.\n * - an app whose anonymous catalogue is NON-empty stays public and is never challenged, so a\n * genuinely public MCP server remains expressible the day an anonymous dispatch path exists.\n \n spec-cite: MCP 2026-07-28 — Server Features § Tools (the tool set \"MAY be empty\" and \"MAY vary\n * by the authorization presented on the request\").\n /\n if (principal === McpCallerPrincipal.ANONYMOUS && tools.length === 0) {\n if (!apiAudience) {\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.INTERNAL_ERROR, 'resource audience is not resolvable');\n return;\n }\n this.sendUnauthenticated(req, res, id, apiAudience, instanceRef, 'a Bearer access token is required to list this server\\'s tools');\n return;\n }\n // Strip the internal fields the descriptor carries for re-resolution before serialising.\n this.sendRpcResult(req, res, id, this.withResultEnvelope({\n // Sorted by name. \"Servers SHOULD return tools from `tools/list` in a deterministic order to\n // enable client-side caching and improve LLM prompt cache hit rates.\"\n // spec-cite: MCP 2026-07-28 — Key Changes § Minor changes item 3\n //\n // Applied for EVERY revision, not gated: a stable order cannot break an older client, and\n // deriving it from registry iteration order would make the catalogue reorder itself on an\n // unrelated resource being registered — silently costing every client its prompt cache.\n tools: tools\n .map((t) => ({\n name: t.name,\n description: t.description,\n inputSchema: t.inputSchema,\n ...(t.annotations ? { annotations: t.annotations } : {}),\n }))\n .sort((a, b) => a.name.localeCompare(b.name)),\n // PRIVATE, and this is a security decision rather than a default.\n //\n // A tool catalogue looks like the textbook `public` case — \"lists of tools […] when they are\n // identical for all users\". OURS ARE NOT. The catalogue widens for a user-delegated token\n // (`mcpReachableScopesForPrincipal(isUserDelegated)`), so a `public` scope would let a shared\n // gateway serve a delegated caller's wider catalogue to a machine caller — which the spec warns\n // about in as many words: a `public` result \"may be shared between callers even if the Result\n // is coming from an authenticated endpoint\".\n // spec-cite: MCP 2026-07-28 — Caching § Security Considerations, and § Choosing a Cache Scope\n // (\"`private` is appropriate for […] filtered list results that vary per user\").\n }, effectiveVersion, { ttlMs: MCP_TOOLS_LIST_CACHE_TTL_MS, cacheScope: Mcp_CacheScope.PRIVATE }));\n }\n\n /* `tools/call` — authenticate (fail-closed) → build the machine EC → dispatch via the server. /\n private async handleToolsCall(req: Request, res: Response, id: JsonRpcId, params: unknown, instanceRef?: string, effectiveVersion = MCP_PROTOCOL_VERSION): Promise<void> {\n const parsedParams = Mcp_ToolsCallParamsSchema.safeParse(params);\n if (!parsedParams.success) {\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.INVALID_PARAMS, parsedParams.error.issues[0]?.message ?? 'invalid params');\n return;\n }\n const { name: toolName, arguments: toolArgs } = parsedParams.data;\n\n const apiAudience = this.appConfigService.resolveApiResourceAudience();\n // R-2: the token must be audience-bound to THIS instance (`…/mcp/<ref>`), so a token minted for\n // another server — or for the default one — is rejected here. Per-instance isolation is enforced by\n // the same RFC 8707 check the 2026-07-29 flip made strict; no auth-layer change was needed.\n const mcpResource = this.mcpResourceUri(instanceRef);\n if (!apiAudience \|\| !mcpResource) {\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.INTERNAL_ERROR, 'resource audience is not resolvable');\n return;\n }\n\n // ── OAuth 2.1 resource-server auth (D6/D7) ──────────────────────────────────\n const token = this.extractBearerToken(req);\n if (!token) {\n this.sendUnauthenticated(req, res, id, apiAudience, instanceRef, 'a Bearer access token is required');\n return;\n }\n let auth: SocketAuthResult;\n try {\n // `authenticateExternalToken` accepts BOTH a machine token (client_credentials → its own\n // org/app scope) AND a user-delegated token (authorization_code → the consenting user's scope).\n // Since the 2026-07-29 flip BOTH arms bind `aud` to THIS `mcpResource`: a machine token must be\n // minted for the MCP audience (the generic API audience is rejected here), and a delegated token\n // is verified aud-agnostically then bound to `mcpResource`. The scope for dispatch is resolved\n // principal-agnostically below.\n auth = await this.executionContextCreator.authenticateExternalToken(token, mcpResource);\n } catch {\n // SIEM-2 symmetry (S2): a rejected token at the token-USE seam feeds the shared per-IP failure\n // counter AND emits MACHINE_AUTH_FAILED, so a revoked/expired/forged token hammering /mcp is\n // visible to the SIEM (was invisible — only the token-MINT endpoint audited failures).\n void recordExternalTokenAuthFailure(\n { redisService: this.redisService, logger: this.logger, auditLogs: this.auditLogs },\n { clientIp: getClientIpFromRequest(req), resourceServer: ResourceServerKind.MCP, reason: 'external_token_invalid' },\n );\n this.sendUnauthenticated(req, res, id, apiAudience, instanceRef, 'the access token is invalid, expired, or not audience-bound');\n return;\n }\n\n // ── Per-principal call throttle (resource-op flood guard) ───────────────────\n // Cap `tools/call` dispatches per authenticated principal per window, rejecting a saturated\n // principal with a transport-level 429 + Retry-After BEFORE any dispatch. Fails open on a\n // limiter outage. (Distinct cap from A2A: an MCP call dispatches a CRUD op, not an LLM turn.)\n const principalKey = resolvePrincipalRateKey(auth);\n if (principalKey) {\n const rate = await assertExternalTurnWithinRate(\n { redisService: this.redisService, logger: this.logger },\n {\n principalKey,\n resourceServer: ResourceServerKind.MCP,\n maxPerWindow: MCP_EXTERNAL_CALL_RATE_MAX,\n windowSeconds: MCP_EXTERNAL_CALL_RATE_WINDOW_SECONDS,\n applicationEnv: this.appConfigService.applicationEnv,\n },\n );\n if (rate.kind === 'rate_limited') {\n this.sendRateLimited(req, res, id, rate.retryAfterSeconds);\n return;\n }\n }\n\n // ── Resolve the operation to build a correctly-scoped principal EC ───────────\n // Progressive principal-awareness: a user-delegated caller (carries a `userId`) can reach USER_SELF\n // operations; a machine caller reaches ORG/APP only. Resolve with the caller's reachable scopes so\n // this gate matches the server's `callTool` gate (advertise ≡ callable), and a crafted name for a\n // scope the caller cannot use fails closed HERE (before the service layer).\n const { resourceType, operationIdentifier } = this.parseToolName(toolName);\n const reachableScopes = mcpReachableScopesForPrincipal(mcpPrincipalForAuthenticatedCaller(!!auth.initiatorIds?.userId));\n // Issue #312, D11: a derived upload-grant tool resolves through its PARENT operation — that is\n // the operation whose scope the principal context must be built for, and whose instance id the\n // transport splits out of the arguments. The server re-resolves it the same way before minting.\n const derivedUploadGrant = resourceType && operationIdentifier && operationIdentifier.includes(MCP_UPLOAD_GRANT_TOOL_MARKER)\n ? this.toolAdapter.resolveUploadGrantTool(resourceType, operationIdentifier, reachableScopes, instanceRef)\n : undefined;\n const operation = derivedUploadGrant?.parentOperation ?? (resourceType && operationIdentifier\n ? this.toolAdapter.resolveExposableOperation(resourceType, operationIdentifier, reachableScopes, instanceRef)\n : undefined);\n if (!operation) {\n // A crafted / non-exposed name never reaches the service layer (would otherwise 403).\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.METHOD_NOT_FOUND, `tool '${toolName}' does not map to an exposable operation`);\n return;\n }\n\n // SIEM-2: audit machine resource-access at the authorized-dispatch boundary — the caller is\n // authenticated + the tool resolved to an exposable operation, about to dispatch. Fire-and-forget\n // (no-op for a user principal). This records the access ATTEMPT: it fires BEFORE the per-op roles\n // authorization inside `callTool`, so a subsequent roles denial does NOT suppress the row and the\n // row carries no allow/deny outcome — a SIEM sees that the machine reached this operation, not\n // whether the call ultimately succeeded. The shared shaper owns machine-principal detection + F4\n // org routing (A2A + MCP never drift).\n this.auditLogs.logMachineResourceAccessFromAuth(auth, {\n resourceServer: ResourceServerKind.MCP,\n resourceIdentifier: toolName,\n operationIdentifier: MachineAccessOperation.MCP_TOOLS_CALL,\n ipAddress: getClientIpFromRequest(req),\n });\n\n // Scope bundle for the operation's parent scope. Forward WHICHEVER of org/app the authenticated\n // principal carries and let `buildContextFromSocketAuth` filter it to the operation's DECLARED\n // scope parameter (org-scoped op → organizationId, app-scoped op → applicationId). A MACHINE\n // principal carries exactly one (org XOR app). A USER-delegated principal carries the user's\n // resolved ACTIVE org — since 2026-07-31 taken from the delegating OAuth client's own tenant\n // (`azp` → org-scoped client → organizationId), which is what restored org-scoped tool access for\n // MULTI-ORG members; they previously resolved to no org and had every org-scoped call denied.\n // It still resolves to none for an app-scoped/unknown client or a zero-membership user, in which\n // case org-scoped ops continue to fail closed. That rides PLUS the applicationId — the filter picks the\n // right one per operation, so a user is never mis-scoped to the application scope. The\n // authoritative identity (userId / machineCredential) always rides `auth.initiatorIds`.\n const contextIds: Record<string, string> = {\n ...(auth.initiatorIds?.organizationId ? { organizationId: auth.initiatorIds.organizationId } : {}),\n ...(auth.initiatorIds?.applicationId ? { applicationId: auth.initiatorIds.applicationId } : {}),\n };\n\n // F-MCP-WRAP: a union/primitive-root tool (e.g. the todos-create `one_time \| recurring` DTO)\n // advertises a `{value:...}` envelope; unwrap it symmetrically and pass the payload straight\n // through — such tools are creates with NO path-param id to split out (otherwise the DTO would\n // receive `{value:...}` and fail validation). Object-root tools keep the resource-id split so\n // READ/UPDATE/DELETE dispatch with a `resourceId` (path-param analogue).\n // A derived upload-grant tool never carries the parent's envelope — its arguments are the instance\n // id (UPDATE) plus a lifetime — so it always takes the id-split branch.\n const { resourceId, body }: { resourceId?: string; body: unknown } = !derivedUploadGrant && isMcpValueWrappedRequestDto(operation.requestDto)\n ? { body: unwrapMcpValueEnvelope(operation.requestDto, toolArgs) }\n : this.extractResourceId(resourceType, toolArgs);\n\n try {\n const executionContext = await this.executionContextCreator.buildContextFromSocketAuth(auth, operation, contextIds);\n const result = await this.mcpServer.callTool(toolName, body, executionContext, { ...(resourceId ? { resourceId } : {}), instanceRef });\n // ── MCP tool-result envelope ──────────────────────────────────────────────────────────────\n //\n // BOTH representations, deliberately:\n //\n // - `structuredContent` — the result as a JSON VALUE. Every tool here returns a resource DTO,\n // which is structured data by construction, so shipping it only as prose forced every agent\n // to parse JSON back out of a string it was told was text. The spec exists for exactly this\n // shape (its own worked example is a `list_users` array).\n // - `content` — the same payload serialized, kept because the spec asks for it:\n // \"For backwards compatibility, a tool that returns structured content SHOULD also return\n // the serialized JSON in a TextContent block.\"\n // spec-cite: MCP 2026-07-28 — Tools § Tool Result → Structured Content\n //\n // No `outputSchema` is advertised, and that is why `structuredContent` can be sent\n // unconditionally: the conformance obligation is one-directional — \"If an output schema is\n // provided: Servers MUST provide structured results that conform to this schema\"\n // (spec-cite: same page, § Output Schema). Structured content without a declared schema is\n // explicitly permitted, so this is additive and commits us to nothing we cannot yet derive.\n //\n // `text` is stringified defensively: `toResponseSafeToolOutput` passes `undefined` straight\n // through for a void operation, and `JSON.stringify(undefined)` is `undefined` — which would\n // have emitted a TextContent block whose REQUIRED `text` field was absent. `'null'` is the\n // honest JSON rendering of \"no result\", and `structuredContent` is omitted entirely in that\n // case rather than carrying a null that the agent would read as a value.\n const serializedResult = JSON.stringify(result.result) ?? 'null';\n // `withResultEnvelope` — NOT optional here, and its absence was a real gap found by reviewing\n // this block after adding `structuredContent` to it. Under the stateless revision every result\n // carries `resultType`, and on a TOOL result that field is load-bearing rather than decorative:\n // it is the discriminator between a completed call and `input_required`, the multi-round-trip\n // shape. A client switching on `resultType` received `undefined` from every tool call we\n // served, while `server/discover` and `tools/list` both carried it — the invariant had been\n // applied at two of its three sites, and the migration ledger recorded it as done.\n // spec-cite: MCP 2026-07-28 — Tools § Calling Tools (the CallToolResult example carries\n // `\"resultType\": \"complete\"`), and § Input Required Tool Results for the value it discriminates.\n //\n // No cache hints: a tool call mutates or reads live state per caller and is never cacheable —\n // which is why the envelope takes them as an explicit argument rather than always adding them.\n this.sendRpcResult(req, res, id, this.withResultEnvelope({\n content: [{ type: 'text', text: serializedResult }],\n ...(result.result === undefined ? {} : { structuredContent: result.result }),\n isError: false,\n }, effectiveVersion));\n } catch (error) {\n this.sendToolError(req, res, id, error, effectiveVersion);\n }\n }\n\n // ── helpers ───────────────────────────────────────────────────────────────\n\n /\n The MCP endpoint's absolute URI (`${apiAudience}/mcp`) — this resource server's identity and the\n * `aud` an audience-bound token must carry. Delegates to the single audience authority\n * (`resolveResourceServerAudience(MCP)`) so the token MINT (which validates a requested `resource`\n * against the SAME function) and this verify-side audience cannot drift. `undefined` when the app\n * public base URL is unresolvable (→ the caller fails closed with 503 / INTERNAL_ERROR).\n /\n private mcpResourceUri(instanceRef?: string): string \| undefined {\n return this.appConfigService.resolveResourceServerAudience(ResourceServerKind.MCP, instanceRef);\n }\n\n private extractBearerToken(req: Request): string \| undefined {\n const header = req.headers['authorization'];\n if (typeof header !== 'string' \|\| !header.startsWith('Bearer ')) return undefined;\n const token = header.slice('Bearer '.length).trim();\n return token.length > 0 ? token : undefined;\n }\n\n /* Split `<resource>__<operation>` on the FIRST `__` (resource ids use single underscores). /\n private parseToolName(toolName: string): { resourceType: ResourceType \| undefined; operationIdentifier: string \| undefined } {\n const at = toolName.indexOf(MCP_TOOL_NAME_SEPARATOR);\n if (at <= 0 \|\| at + MCP_TOOL_NAME_SEPARATOR.length >= toolName.length) {\n return { resourceType: undefined, operationIdentifier: undefined };\n }\n return {\n resourceType: toolName.slice(0, at) as ResourceType,\n operationIdentifier: toolName.slice(at + MCP_TOOL_NAME_SEPARATOR.length),\n };\n }\n\n /\n Pull the resource's own id field out of the tool arguments. When present it becomes\n * the service call's `resourceId` (path-param analogue) and is removed from the body;\n * otherwise the call is a collection operation (no id).\n /\n private extractResourceId(\n resourceType: ResourceType,\n args: Record<string, unknown> \| undefined,\n ): { resourceId?: string; body: unknown } {\n if (!args) return { body: args };\n const fieldIdentifier = this.resourcesRegistry.getAllResourceFieldIdentifiers()[resourceType];\n if (fieldIdentifier && typeof args[fieldIdentifier] === 'string') {\n const { [fieldIdentifier]: id, ...rest } = args;\n return { resourceId: id as string, body: rest };\n }\n return { body: args };\n }\n\n /\n Whether to answer in the Streamable-HTTP SSE response mode rather than `application/json`.\n \n JSON WINS A TIE — deliberately, and this is load-bearing. The MCP Streamable-HTTP spec REQUIRES a\n * client to advertise BOTH (`Accept: application/json, text/event-stream`) and leaves the choice to the\n * server. The previous implementation was a bare `includes('text/event-stream')`, which matched that\n * spec-mandated header — so EVERY conformant MCP client was served SSE. A client that then parsed the\n * body as JSON (the reasonable default for a synchronous JSON-RPC call) got `{}`: the\n * `client-integration-app` integrator's `tools/list` silently returned an empty result, its agent saw no\n * tools, and both real-LLM integration scenarios degraded to INCONCLUSIVE — reading as \"no LLM credits\"\n * while actually being this defect. It went unnoticed because the SSE proof used\n * `Accept: text/event-stream` ALONE, which no conformant client sends.\n \n spec-cite: MCP 2025-06-18 §Transports → Streamable HTTP → \"Sending Messages to the Server\", item 2:\n * \"The client MUST include an `Accept` header, listing both `application/json` and `text/event-stream`\n * as supported content types.\" Item 5 is what leaves the choice to the server: it \"MUST either return\n * `Content-Type: text/event-stream` … or `Content-Type: application/json`\", and \"The client MUST\n * support both these cases.\" Checked against the revision this server advertises — `MCP_PROTOCOL_VERSION`\n * is `2025-06-18`. https://modelcontextprotocol.io/specification/2025-06-18/basic/transports\n \n The rules, in order:\n * 1. the client must accept `text/event-stream` at all — otherwise JSON;\n * 2. if it ALSO accepts JSON (explicitly, via `* / `, or by sending no `Accept` at all), JSON wins.\n Our results are synchronous single-message payloads, so JSON is the cheaper, more interoperable\n * representation and the right default;\n * 3. UNLESS the client explicitly ranks SSE above JSON with RFC 9110 `q` values\n * (`application/json;q=0.1, text/event-stream;q=0.9`). That keeps the SSE path REACHABLE — without\n * it, rule 2 would make SSE dead code for every spec-conformant client — and it honours a genuine,\n * explicitly-stated client preference rather than inventing a Wildo-specific opt-in.\n /\n private acceptsEventStream(req: Request): boolean {\n const header = String(req.headers['accept'] ?? '').toLowerCase().trim();\n // No `Accept` at all ⇒ the client expressed no preference ⇒ JSON (the default representation).\n if (!header) return false;\n\n // RFC 9110 §12.5.1: `q=0` means \"NOT acceptable\", not \"acceptable but least preferred\". A client\n // that explicitly refuses SSE must never be served SSE, even when it names no alternative.\n const sseQuality = this.acceptQuality(header, 'text/event-stream');\n if (sseQuality === undefined \|\| sseQuality === 0) return false;\n\n // `/` makes JSON acceptable just as much as an explicit `application/json` does.\n const jsonQuality = this.acceptQuality(header, 'application/json') ?? this.acceptQuality(header, '/');\n if (jsonQuality === undefined) return true; // SSE is the only representation the client will take.\n\n // Both acceptable ⇒ JSON unless the client explicitly ranked SSE higher. (A `q=0` on JSON makes it\n // unacceptable, and `sseQuality > 0` at this point, so SSE correctly wins that case too.)\n return sseQuality > jsonQuality;\n }\n\n /\n The RFC 9110 quality value this `Accept` header assigns to one media type, or `undefined` when the\n * type is not present. A media range with no explicit `q` parameter defaults to `1.0`. Deliberately a\n * narrow lookup rather than a general `Accept` parser: only two media types are ever negotiated here.\n /\n private acceptQuality(header: string, mediaType: string): number \| undefined {\n for (const part of header.split(',')) {\n const [type, ...params] = part.split(';').map((segment) => segment.trim());\n if (type !== mediaType) continue;\n const qParam = params.find((param) => param.startsWith('q='));\n if (!qParam) return 1;\n const parsed = Number.parseFloat(qParam.slice('q='.length));\n return Number.isFinite(parsed) ? parsed : 1;\n }\n return undefined;\n }\n\n /\n Write a single JSON-RPC message as a Streamable-HTTP SSE stream, then close it. Our tool calls are\n * synchronous (one response, no progress/notifications/server-initiated messages), so the stream\n * carries exactly one message event and ends — spec-compliant for a synchronous request/response over\n * the SSE response mode. (When a long-running tool or notifications land, this becomes multi-event.)\n /\n private writeSseMessage(res: Response, payload: unknown): void {\n res.status(200).set({\n 'Content-Type': 'text/event-stream',\n 'Cache-Control': 'no-cache, no-transform',\n Connection: 'keep-alive',\n // \"When initiating an SSE stream, servers SHOULD include the `X-Accel-Buffering: no` header in\n // the HTTP response. This instructs reverse proxies (such as nginx) to disable response\n // buffering, ensuring that SSE events are delivered to clients immediately rather than being\n // held in a buffer.\"\n // spec-cite: MCP 2026-07-28 — Streamable HTTP § Receiving Messages\n //\n // Applied to EVERY revision: a buffering proxy does not care which protocol version is in the\n // body, and the failure it causes — a stream that arrives all at once at the end, or not at\n // all — looks like a server hang rather than a proxy setting. `no-transform` above already\n // asks intermediaries not to modify the payload; this asks them not to hold it.\n 'X-Accel-Buffering': 'no',\n });\n res.write(`data: ${JSON.stringify(payload)}\\n\\n`);\n res.end();\n }\n\n /\n Send a 200 JSON-RPC result — as an SSE stream when the client negotiated `text/event-stream`\n * (Streamable-HTTP response mode), else as `application/json`. Both are spec-compliant.\n /\n /\n Add the `2026-07-28` result envelope — and ONLY for a request written against it.\n \n \"All results now carry a required `resultType` field: `\"complete\"` for ordinary results […]\n * Clients MUST treat results from earlier-protocol servers that omit the field as\n * `\"complete\"`.\"\n * spec-cite: MCP 2026-07-28 — Key Changes § Major changes item 8\n \n \"Servers MUST include caching hints on results with `resultType: \"complete\"` returned by […]\n * `server/discover`, `tools/list` […]\"\n * spec-cite: MCP 2026-07-28 — Caching § Cacheable Results\n \n Gated on the revision because the envelope is the visible half of Hazard 1: stamping fields from\n * a newer revision onto a response to an older client is the mirror image of demanding headers it\n * never sends. The spec's own instruction — treat an omitted `resultType` as complete — is what\n * makes omission the correct behaviour there, not a shortcut.\n /\n private withResultEnvelope(\n result: Record<string, unknown>,\n effectiveVersion: string,\n cache?: { ttlMs: number; cacheScope: Mcp_CacheScope },\n ): Record<string, unknown> {\n if (!isStatelessMcpProtocolVersion(effectiveVersion)) return result;\n return { ...result, resultType: 'complete', ...(cache ? { ttlMs: cache.ttlMs, cacheScope: cache.cacheScope } : {}) };\n }\n\n private sendRpcResult(req: Request, res: Response, id: JsonRpcId, result: unknown): void {\n const payload = { jsonrpc: '2.0', id, result };\n if (this.acceptsEventStream(req)) { this.writeSseMessage(res, payload); return; }\n res.status(200).json(payload);\n }\n\n /\n Send a JSON-RPC error. A 200-status APPLICATION error is SSE-framed when the client negotiated it\n * (same as a result); a TRANSPORT-level error (401 / 429 / 503) is ALWAYS a plain HTTP response with\n * that status, never SSE — the client must observe it at the HTTP layer.\n /\n private sendRpcError(req: Request, res: Response, id: JsonRpcId, code: Mcp_JsonRpcErrorCode, message: string, httpStatus = 200): void {\n const payload = { jsonrpc: '2.0', id, error: { code, message } };\n if (httpStatus === 200 && this.acceptsEventStream(req)) { this.writeSseMessage(res, payload); return; }\n res.status(httpStatus).json(payload);\n }\n\n /\n RFC 9728 challenge: 401 + `WWW-Authenticate` naming the protected-resource metadata of the SERVER THE\n * CLIENT ACTUALLY ADDRESSED (transport-level; plain HTTP).\n \n The `instanceRef` is load-bearing, not cosmetic. This pointer is the ONLY discovery route a client\n * has: Wildo's PRM lives at a NON-STANDARD path (`…/mcp/<ref>/.well-known/oauth-protected-resource`\n * rather than the RFC's origin-root `/.well-known/oauth-protected-resource/<path>`), so a client cannot\n * derive it from the request URL and must follow this header. Pointing every 401 at the DEFAULT\n * metadata made named instances undiscoverable AND unusable: the client would read the default PRM,\n * mint a token for the DEFAULT audience, present it at `/mcp/<ref>`, be rejected on the audience check,\n * re-read the same default metadata, and loop forever — with each iteration looking like a plain auth\n * failure rather than a discovery bug.\n /\n private sendUnauthenticated(\n req: Request,\n res: Response,\n id: JsonRpcId,\n apiAudience: string,\n instanceRef: string \| undefined,\n message: string,\n /\n RFC 6750 § 3.1 `error` code. Supply `invalid_token` when the caller DID present a credential\n * and it failed — the distinction is actionable: a client seeing `invalid_token` refreshes, while\n * a bare challenge means \"you have not authorized yet\" and starts the whole flow. Omitted for the\n * no-credentials case, which is the bare challenge.\n /\n oauthError?: string,\n ): void {\n // `scope` accompanies the metadata pointer because it is the FIRST rung of the client's\n // scope-selection ladder — a client takes the challenge's `scope` and only falls back to the\n // protected-resource document's `scopes_supported`. Carrying neither is what left Cursor with no\n // authorization request to build on 2026-08-11, so it silently skipped the browser leg entirely.\n // The value is the identity set a delegated client is actually granted, kept identical to the\n // metadata document's so the two rungs can never disagree.\n // spec-cite: MCP 2026-07-28 — Authorization § Scope Selection Strategy; RFC 6750 § 3.\n const challengeScope = OIDC_SUPPORTED_IDENTITY_SCOPES.join(' ');\n res.set(\n 'WWW-Authenticate',\n [\n 'Bearer',\n [\n ...(oauthError ? [`error=\"${oauthError}\"`] : []),\n `resource_metadata=\"${this.mcpProtectedResourceMetadataUri(apiAudience, instanceRef)}\"`,\n `scope=\"${challengeScope}\"`,\n ].join(', '),\n ].join(' '),\n );\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.UNAUTHENTICATED, message, 401);\n }\n\n /\n The absolute RFC 9728 metadata URL for one MCP surface. Built from the SAME two route constants\n * `setupRoutes` composes the metadata routes from, so the advertised URL and the mounted route cannot\n * drift — change the constants and both move together.\n \n Note the deliberate asymmetry: the DEFAULT server's metadata hangs off the API audience root, while a\n * named instance's hangs off that instance's own audience (`…/mcp/<ref>`). That mirrors how the routes\n * are actually mounted.\n /\n private mcpProtectedResourceMetadataUri(apiAudience: string, instanceRef?: string): string {\n const metadataRoute = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.MCP_PROTECTED_RESOURCE_METADATA];\n if (!instanceRef) return `${apiAudience}${metadataRoute}`;\n return `${apiAudience}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.MCP_ENDPOINT]}/${instanceRef}${metadataRoute}`;\n }\n\n /\n Transport-level throttle response: HTTP 429 + `Retry-After`, carrying a valid JSON-RPC\n * error envelope with `RATE_LIMITED`. Distinct from the 200-envelope app errors because\n * rate-limiting is a transport concern a client should honor at the HTTP layer (so never SSE).\n /\n private sendRateLimited(req: Request, res: Response, id: JsonRpcId, retryAfterSeconds: number): void {\n res.set('Retry-After', String(retryAfterSeconds));\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.RATE_LIMITED, 'Rate limit exceeded; retry after the indicated delay.', 429);\n }\n\n /\n A thrown `callTool` failure → JSON-RPC error (a 200 envelope: the call transported OK, the tool\n * failed). An authorization/authentication denial (the fail-closed path) surfaces as UNAUTHENTICATED\n * so the caller sees the rejection; anything else is an INTERNAL_ERROR carrying the classified type.\n * SSE-framed when the client negotiated it (same as any 200 result).\n */\n private sendToolError(req: Request, res: Response, id: JsonRpcId, error: unknown, effectiveVersion = MCP_PROTOCOL_VERSION): void {\n const wildo = this.asWildoError(error);\n const type = wildo?.type;\n const message = (wildo?.customMessageReference as string) ?? (error instanceof Error ? error.message : 'tool execution failed');\n this.logDebug('MCP tools/call failed', { type, message });\n\n // ── TOOL EXECUTION ERROR vs PROTOCOL ERROR ────────────────────────────────────────────────\n //\n // The specification splits these by WHO CAN FIX IT, and the split decides whether the agent is\n // ever shown the reason: \"Clients MAY provide protocol errors to language models, though these\n // are less likely to result in successful recovery. Clients SHOULD provide tool execution errors\n // to language models to enable self-correction.\"\n // spec-cite: MCP 2026-07-28 — Tools § Error Handling\n //\n // Every failure used to leave here as a protocol error, so a bad field produced a reply the\n // client was entitled to withhold from the model — which then retried the same call unchanged.\n if (type && MCP_TOOL_EXECUTION_ERROR_TYPES.has(type)) {\n // Sanitised through the SAME boundary the HTTP path uses, so a tool caller learns exactly what\n // a REST caller would and not one field more. That boundary deliberately preserves `zodIssues`\n // and `fieldName` for VALIDATION — the field-level detail that makes the error actionable — while\n // stripping internal context. Re-deriving a bespoke projection here would be a second disclosure\n // policy for the same errors, and the two would drift.\n const safe = wildo ? this.errorBuilder.sanitizeErrorForClient(wildo) : undefined;\n const detail = safe?.context ? ` ${JSON.stringify(safe.context)}` : '';\n this.sendRpcResult(req, res, id, this.withResultEnvelope({\n content: [{ type: 'text', text: `${message}${detail}` }],\n isError: true,\n }, effectiveVersion));\n return;\n }\n\n // Everything else stays a PROTOCOL error. AUTHENTICATION / AUTHORIZATION in particular: a client\n // opens its OAuth window on an authentication failure, so returning one as a successful result\n // carrying an apology would remove the only signal that drives authorization.\n const isAuthDenial = type === ErrorType.AUTHENTICATION \|\| type === ErrorType.AUTHORIZATION;\n const code = isAuthDenial ? Mcp_JsonRpcErrorCode.UNAUTHENTICATED : Mcp_JsonRpcErrorCode.INTERNAL_ERROR;\n const payload = { jsonrpc: '2.0', id, error: { code, message, data: type ? { type } : undefined } };\n if (this.acceptsEventStream(req)) { this.writeSseMessage(res, payload); return; }\n res.status(200).json(payload);\n }\n\n private asWildoError(error: unknown): WildoError_Backend \| undefined {\n return !!error && typeof error === 'object' && 'statusCode' in error && 'type' in error\n ? (error as WildoError_Backend)\n : undefined;\n }\n}\n"]}
1	+ {"version":3,"file":"mcp.controller.js","sourceRoot":"","sources":["../../../../../src/mcp/controllers/mcp.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,6BAA6B,EAC7B,wBAAwB,EACxB,kBAAkB,GAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,gFAAgF,CAAC;AACzH,OAAO,EAAE,sBAAsB,EAAE,MAAM,0DAA0D,CAAC;AAClG,OAAO,EAAE,YAAY,EAAE,MAAM,qDAAqD,CAAC;AACnF,OAAO,EAAE,8BAA8B,EAAE,MAAM,kGAAkG,CAAC;AAClJ,OAAO,EACL,0BAA0B,EAC1B,qCAAqC,EACrC,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,mGAAmG,CAAC;AAC3G,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,uBAAuB,EAAE,MAAM,sEAAsE,CAAC;AAC/G,OAAO,EAAE,uBAAuB,EAAE,MAAM,4DAA4D,CAAC;AACrG,OAAO,EACL,4BAA4B,EAC5B,8BAA8B,EAC9B,kCAAkC,EAClC,kBAAkB,GACnB,MAAM,kEAAkE,CAAC;AAC1E,OAAO,EAAE,6CAA6C,EAAE,MAAM,oFAAoF,CAAC;AACnJ,OAAO,EAAE,uBAAuB,EAC9B,4BAA4B,GAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,8BAA8B,EAAE,MAAM,uFAAuF,CAAC;AACvI,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,mEAAmE,CAAC;AACxI,OAAO,EACL,oBAAoB,EACpB,+BAA+B,EAC/B,2BAA2B,EAC3B,yBAAyB,EACzB,cAAc,EACd,6BAA6B,EAC7B,oBAAoB,EACpB,iCAAiC,EACjC,8BAA8B,EAC9B,+CAA+C,EAC/C,6BAA6B,EAC7B,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,4DAA4D,CAAC;AAMpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEI,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,gCAAgC;IAKM;IAC5B;IACK;IACS;IACP;IACA;IACJ;IACmB;IAX/E,YACqC,MAAqB,EACR,YAAwC,EACxC,YAAiC,EACE,uBAA8D,EAC1F,SAAkC,EAC7B,WAAyC,EAChC,iBAAkD,EACzD,gBAAyC,EACzC,SAAkC,EACtC,YAA0B,EACP,uBAAsE;QAEnJ,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;QATwB,4BAAuB,GAAvB,uBAAuB,CAAuC;QAC1F,cAAS,GAAT,SAAS,CAAyB;QAC7B,gBAAW,GAAX,WAAW,CAA8B;QAChC,sBAAiB,GAAjB,iBAAiB,CAAiC;QACzD,qBAAgB,GAAhB,gBAAgB,CAAyB;QACzC,cAAS,GAAT,SAAS,CAAyB;QACtC,iBAAY,GAAZ,YAAY,CAAc;QACP,4BAAuB,GAAvB,uBAAuB,CAA+C;IAGrJ,CAAC;IAES,WAAW;QACnB,gFAAgF;QAChF,4EAA4E;QAC5E,gFAAgF;QAChF,MAAM,kBAAkB,GAAG,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAEvF,MAAM,WAAW,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,+BAA+B,CAAC,CAAC;QAC5G,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrH,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW,EAAE,oDAAoD,CAAC,CAAC;QAEpG,MAAM,MAAM,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,oFAAoF,CAAC,CAAC;QAEhI,kGAAkG;QAClG,+FAA+F;QAC/F,kGAAkG;QAClG,uDAAuD;QACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;YACvD,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACxC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI;gBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,EAAE,kEAAkE,EAAE;aACpI,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,yDAAyD,CAAC,CAAC;QAEpG,+FAA+F;QAC/F,6FAA6F;QAC7F,kGAAkG;QAClG,EAAE;QACF,qFAAqF;QACrF,oFAAoF;QACpF,EAAE;QACF,gGAAgG;QAChG,+FAA+F;QAC/F,gGAAgG;QAChG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;YAC1D,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACxC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI;gBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,EAAE,yDAAyD,EAAE;aAC3H,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,wDAAwD,CAAC,CAAC;QAEtG,gFAAgF;QAChF,+FAA+F;QAC/F,wFAAwF;QACxF,iGAAiG;QACjG,4FAA4F;QAC5F,4FAA4F;QAC5F,+FAA+F;QAC/F,kFAAkF;QAClF,MAAM,mBAAmB,GAAG,GAAG,MAAM,gBAAgB,6BAA6B,CAAC,wBAAwB,CAAC,+BAA+B,CAAC,EAAE,CAAC;QAC/I,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7H,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,EAAE,iEAAiE,CAAC,CAAC;QAEzH,MAAM,WAAW,GAAG,GAAG,MAAM,eAAe,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,WAAW,EAAE,sEAAsE,CAAC,CAAC;QAEvH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;YAC5D,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACxC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI;gBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,EAAE,kEAAkE,EAAE;aACpI,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW,EAAE,sEAAsE,CAAC,CAAC;QAEtH,iGAAiG;QACjG,kGAAkG;QAClG,+FAA+F;QAC/F,4FAA4F;QAC5F,sEAAsE;QACtE,EAAE;QACF,+FAA+F;QAC/F,oFAAoF;QACpF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;YAC/D,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACxC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI;gBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,EAAE,yDAAyD,EAAE;aAC3H,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,WAAW,EAAE,qEAAqE,CAAC,CAAC;IAC1H,CAAC;IAED;;;;;;;;OAQG;IACK,kBAAkB,CAAC,GAAY;QACrC,MAAM,SAAS,GAAI,GAAG,CAAC,MAA6C,EAAE,WAAW,CAAC;QAClF,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAChG,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,+BAA+B,CAAC,GAAY,EAAE,GAAa;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAC/F,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,0BAA0B,EAAE,CAAC;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC9D,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,4DAA4D,EAAE,CAAC,CAAC;YAC5I,OAAO;QACT,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;QACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,2FAA2F;YAC3F,QAAQ,EAAE,WAAW;YACrB,iEAAiE;YACjE,qBAAqB,EAAE,CAAC,WAAW,CAAC;YACpC,wBAAwB,EAAE,CAAC,QAAQ,CAAC;YACpC;;;;;;;;;;;;;;;;eAgBG;YACH,gBAAgB,EAAE,CAAC,GAAG,8BAA8B,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACK,wBAAwB,CAAC,MAAe,EAAE,eAAwB;QACxE,MAAM,SAAS,GAAI,MAAoD,EAAE,eAAe,CAAC;QACzF,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,+BAA+B,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3G,0FAA0F;QAC1F,uFAAuF;QACvF,6FAA6F;QAC7F,0EAA0E;QAC1E,IAAI,eAAe,IAAI,+BAA+B,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,OAAO,eAAe,CAAC;QACzG,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,iCAAiC,CAAC,GAAY,EAAE,MAAc,EAAE,MAAe;QACrF,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC1D,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,yCAAyC,CAAC;QACnD,CAAC;QACD,MAAM,WAAW,GAAI,MAA0D,EAAE,KAAK,EAAE,CAAC,6BAA6B,CAAC,CAAC;QACxH,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;YACrE,OAAO,sCAAsC,aAAa,gCAAgC,WAAW,GAAG,CAAC;QAC3G,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/C,IAAI,OAAO,YAAY,KAAK,QAAQ;YAAE,OAAO,+BAA+B,CAAC;QAC7E,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,4BAA4B,YAAY,gCAAgC,MAAM,GAAG,CAAC;QAC3F,CAAC;QAED,IAAI,CAAC,iCAAiC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAE1E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,OAAO,UAAU,KAAK,QAAQ;YAAE,OAAO,6BAA6B,CAAC;QACzE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAsC,CAAC;QAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvG,iFAAiF;QACjF,gGAAgG;QAChG,gGAAgG;QAChG,wEAAwE;QACxE,EAAE;QACF,yFAAyF;QACzF,2FAA2F;QAC3F,4FAA4F;QAC5F,2FAA2F;QAC3F,uDAAuD;QACvD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,0BAA0B,oBAAoB,CAAC,UAAU,CAAC,0CAA0C,CAAC;QAC9G,CAAC;QACD,8FAA8F;QAC9F,6FAA6F;QAC7F,IAAI,oBAAoB,CAAC,UAAU,CAAC,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,0BAA0B,UAAU,gCAAgC,QAAQ,GAAG,CAAC;QACzF,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IACK,8BAA8B,CAAC,GAAY;QACjD,MAAM,IAAI,GAAI,GAAG,CAAC,IAAqE,EAAE,MAAM,EAAE,KAAK,CAAC;QACvG,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC,6BAA6B,CAAC,CAAC;QACvD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QAExG,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACnD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,+BAA+B,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QAElG,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,+BAA+B,CAAC,GAAY;QAClD,OAAO,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,IAAI,+CAA+C,CAAC;IACrG,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,aAAa,CAAC,GAAY,EAAE,GAAa;QACrD,8FAA8F;QAC9F,mGAAmG;QACnG,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAC/F,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;QAEzC,4FAA4F;QAC5F,EAAE;QACF,0FAA0F;QAC1F,wBAAwB;QACxB,gFAAgF;QAChF,EAAE;QACF,+FAA+F;QAC/F,gGAAgG;QAChG,gGAAgG;QAChG,0FAA0F;QAC1F,EAAE;QACF,6FAA6F;QAC7F,8FAA8F;QAC9F,8FAA8F;QAC9F,+FAA+F;QAC/F,gGAAgG;QAChG,iEAAiE;QACjE,EAAE;QACF,gGAAgG;QAChG,+FAA+F;QAC/F,2FAA2F;QAC3F,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QACzC,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;YAC7G,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,oBAAoB;gBAC3B,iBAAiB,EAAE,8DAA8D;aAClF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,4FAA4F;QAC5F,EAAE;QACF,gGAAgG;QAChG,2CAA2C;QAC3C,qEAAqE;QACrE,EAAE;QACF,6FAA6F;QAC7F,8FAA8F;QAC9F,uDAAuD;QACvD,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC5D,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,CAAC,+BAA+B,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACtG,kFAAkF;YAClF,EAAE;YACF,8FAA8F;YAC9F,2FAA2F;YAC3F,6FAA6F;YAC7F,kDAAkD;YAClD,uEAAuE;YACvE,EAAE;YACF,2FAA2F;YAC3F,2FAA2F;YAC3F,sFAAsF;YACtF,6FAA6F;YAC7F,uCAAuC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE;oBACL,IAAI,EAAE,oBAAoB,CAAC,4BAA4B;oBACvD,OAAO,EAAE,yBAAyB,eAAe,oBAAoB;oBACrE,IAAI,EAAE,EAAE,SAAS,EAAE,+BAA+B,EAAE;iBACrD;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,4FAA4F;QAC5F,EAAE;QACF,gGAAgG;QAChG,uFAAuF;QACvF,0FAA0F;QAC1F,EAAE;QACF,qEAAqE;QACrE,gGAAgG;QAChG,2EAA2E;QAC3E,8CAA8C;QAC9C,EAAE;QACF,+FAA+F;QAC/F,+FAA+F;QAC/F,+FAA+F;QAC/F,iGAAiG;QACjG,oFAAoF;QACpF,gGAAgG;QAChG,kGAAkG;QAClG,kGAAkG;QAClG,yFAAyF;QACzF,4DAA4D;QAC5D,6DAA6D;QAC7D,MAAM,gBAAgB,GAAG,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,CAAC;QACnE,8FAA8F;QAC9F,yFAAyF;QACzF,MAAM,6BAA6B,GAAG,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC;QAE/E,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,CAAC,eAAe,EAAE,gCAAgC,CAAC,CAAC;YAC1G,OAAO;QACT,CAAC;QACD,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAC3C,MAAM,KAAK,GAAc,EAAE,IAAI,IAAI,CAAC;QAEpC,4FAA4F;QAC5F,EAAE;QACF,4FAA4F;QAC5F,2FAA2F;QAC3F,sFAAsF;QACtF,yEAAyE;QACzE,EAAE;QACF,4FAA4F;QAC5F,0EAA0E;QAC1E,IAAI,6BAA6B,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,iCAAiC,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC7E,IAAI,QAAQ,EAAE,CAAC;gBACb,4FAA4F;gBAC5F,wFAAwF;gBACxF,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,oBAAoB,CAAC,eAAe,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;gBACxF,OAAO;YACT,CAAC;QACH,CAAC;QAED,4FAA4F;QAC5F,EAAE;QACF,yFAAyF;QACzF,EAAE;QACF,+FAA+F;QAC/F,qEAAqE;QACrE,sGAAsG;QACtG,EAAE;QACF,gGAAgG;QAChG,gBAAgB;QAChB,EAAE;QACF,4FAA4F;QAC5F,iHAAiH;QACjH,2DAA2D;QAC3D,EAAE;QACF,2FAA2F;QAC3F,+FAA+F;QAC/F,+FAA+F;QAC/F,yEAAyE;QACzE,EAAE;QACF,8FAA8F;QAC9F,+FAA+F;QAC/F,yFAAyF;QACzF,gGAAgG;QAChG,6FAA6F;QAC7F,kBAAkB;QAClB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,YAAY;gBACf,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE;oBAClC,4BAA4B;oBAC5B,0FAA0F;oBAC1F,6FAA6F;oBAC7F,gEAAgE;oBAChE,EAAE;oBACF,yFAAyF;oBACzF,mFAAmF;oBACnF,yFAAyF;oBACzF,wDAAwD;oBACxD,eAAe,EAAE,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,6BAA6B,CAAC;oBACrF,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;oBAC/C,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE;iBACpD,CAAC,CAAC;gBACH,OAAO;YACT,KAAK,iBAAiB;gBACpB,iFAAiF;gBACjF,kFAAkF;gBAClF,kBAAkB;gBAClB,wCAAwC;gBACxC,EAAE;gBACF,2FAA2F;gBAC3F,4FAA4F;gBAC5F,0FAA0F;gBAC1F,8EAA8E;gBAC9E,EAAE;gBACF,wFAAwF;gBACxF,EAAE;gBACF,qCAAqC;gBACrC,EAAE;gBACF,yFAAyF;gBACzF,2FAA2F;gBAC3F,0FAA0F;gBAC1F,kFAAkF;gBAClF,sCAAsC;gBACtC,wFAAwF;gBACxF,0FAA0F;gBAC1F,wFAAwF;gBACxF,6FAA6F;gBAC7F,8DAA8D;gBAC9D,sFAAsF;gBACtF,0FAA0F;gBAC1F,sBAAsB;gBACtB,EAAE;gBACF,4FAA4F;gBAC5F,yFAAyF;gBACzF,4DAA4D;gBAC5D,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC;oBAC1D,iBAAiB,EAAE,+BAA+B;oBAClD,0FAA0F;oBAC1F,uFAAuF;oBACvF,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;oBAC3B,uFAAuF;oBACvF,sEAAsE;oBACtE,EAAE;oBACF,uFAAuF;oBACvF,0FAA0F;oBAC1F,0FAA0F;oBAC1F,yCAAyC;oBACzC,YAAY,EAAE,uBAAuB;oBACrC,KAAK,EAAE,EAAE,oCAAoC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;oBACxF,4FAA4F;oBAC5F,sFAAsF;oBACtF,wEAAwE;oBACxE,EAAE;oBACF,gFAAgF;oBAChF,2FAA2F;oBAC3F,0FAA0F;oBAC1F,wFAAwF;oBACxF,wDAAwD;iBACzD,EAAE,8BAA8B,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAC7G,OAAO;YACT,KAAK,YAAY;gBACf,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;gBACnF,OAAO;YACT,KAAK,YAAY;gBACf,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;gBACnF,OAAO;YACT;gBACE,mFAAmF;gBACnF,6DAA6D;gBAC7D,wEAAwE;gBACxE,EAAE;gBACF,uFAAuF;gBACvF,4FAA4F;gBAC5F,6FAA6F;gBAC7F,IAAI,CAAC,YAAY,CACf,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,oBAAoB,CAAC,gBAAgB,EAAE,WAAW,MAAM,oBAAoB,EAC7F,6BAA6B,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CACzE,CAAC;QACN,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,KAAK,CAAC,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,EAAa,EAAE,MAAe,EAAE,WAAoB,EAAE,gBAAgB,GAAG,oBAAoB;QACtJ,6FAA6F;QAC7F,EAAE;QACF,8FAA8F;QAC9F,2FAA2F;QAC3F,gGAAgG;QAChG,iDAAiD;QACjD,EAAE;QACF,gGAAgG;QAChG,iGAAiG;QACjG,+FAA+F;QAC/F,6FAA6F;QAC7F,qDAAqD;QACrD,EAAE;QACF,iFAAiF;QACjF,0DAA0D;QAC1D,EAAE;QACF,gGAAgG;QAChG,8FAA8F;QAC9F,iEAAiE;QACjE,MAAM,eAAe,GAAI,MAA2C,EAAE,MAAM,CAAC;QAC7E,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC9D,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,cAAc,EAAE,2HAA2H,CAAC,CAAC;YAClM,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC3C,iGAAiG;QACjG,qCAAqC;QACrC,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,0BAA0B,EAAE,CAAC;QACvE,IAAI,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC;QAC7C,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,yBAAyB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;gBAC9F,8FAA8F;gBAC9F,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC;YACzG,CAAC;YAAC,MAAM,CAAC;gBACP,0FAA0F;gBAC1F,4FAA4F;gBAC5F,4FAA4F;gBAC5F,yEAAyE;gBACzE,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAC;oBAC5G,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,6DAA6D,EAAE,eAAe,CAAC,CAAC;gBACjJ,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC,CAAC;QAEzE;;;;;;;;;;;;;;;;;;;WAmBG;QACH,IAAI,SAAS,KAAK,kBAAkB,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAC;gBAC5G,OAAO;YACT,CAAC;YACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,gEAAgE,CAAC,CAAC;YACnI,OAAO;QACT,CAAC;QACD,yFAAyF;QACzF,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,kBAAkB,CAAC;YACvD,6FAA6F;YAC7F,sEAAsE;YACtE,iEAAiE;YACjE,EAAE;YACF,0FAA0F;YAC1F,0FAA0F;YAC1F,wFAAwF;YACxF,KAAK,EAAE,KAAK;iBACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzD,CAAC,CAAC;iBACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/C,kEAAkE;YAClE,EAAE;YACF,6FAA6F;YAC7F,0FAA0F;YAC1F,8FAA8F;YAC9F,gGAAgG;YAChG,8FAA8F;YAC9F,6CAA6C;YAC7C,8FAA8F;YAC9F,iFAAiF;SAClF,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,UAAU,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,kGAAkG;IAC1F,KAAK,CAAC,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,EAAa,EAAE,MAAe,EAAE,WAAoB,EAAE,gBAAgB,GAAG,oBAAoB;QACtJ,MAAM,YAAY,GAAG,yBAAyB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,gBAAgB,CAAC,CAAC;YAChI,OAAO;QACT,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC;QAElE,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,0BAA0B,EAAE,CAAC;QACvE,gGAAgG;QAChG,oGAAoG;QACpG,4FAA4F;QAC5F,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAC;YAC5G,OAAO;QACT,CAAC;QAED,+EAA+E;QAC/E,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,mCAAmC,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QACD,IAAI,IAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,yFAAyF;YACzF,gGAAgG;YAChG,gGAAgG;YAChG,iGAAiG;YACjG,+FAA+F;YAC/F,gCAAgC;YAChC,IAAI,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,yBAAyB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,+FAA+F;YAC/F,6FAA6F;YAC7F,uFAAuF;YACvF,KAAK,8BAA8B,CACjC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EACnF,EAAE,QAAQ,EAAE,sBAAsB,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,wBAAwB,EAAE,CACpH,CAAC;YACF,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,6DAA6D,CAAC,CAAC;YAChI,OAAO;QACT,CAAC;QAED,+EAA+E;QAC/E,4FAA4F;QAC5F,0FAA0F;QAC1F,8FAA8F;QAC9F,MAAM,YAAY,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,4BAA4B,CAC7C,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EACxD;gBACE,YAAY;gBACZ,cAAc,EAAE,kBAAkB,CAAC,GAAG;gBACtC,YAAY,EAAE,0BAA0B;gBACxC,aAAa,EAAE,qCAAqC;gBACpD,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,cAAc;aACrD,CACF,CAAC;YACF,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACjC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;QACH,CAAC;QAED,gFAAgF;QAChF,oGAAoG;QACpG,mGAAmG;QACnG,kGAAkG;QAClG,4EAA4E;QAC5E,MAAM,EAAE,YAAY,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC3E,MAAM,eAAe,GAAG,8BAA8B,CAAC,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QACxH,+FAA+F;QAC/F,+FAA+F;QAC/F,gGAAgG;QAChG,MAAM,kBAAkB,GAAG,YAAY,IAAI,mBAAmB,IAAI,mBAAmB,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YAC1H,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,WAAW,CAAC;YAC1G,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,SAAS,GAAG,kBAAkB,EAAE,eAAe,IAAI,CAAC,YAAY,IAAI,mBAAmB;YAC3F,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,WAAW,CAAC;YAC7G,CAAC,CAAC,SAAS,CAAC,CAAC;QACf,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,sFAAsF;YACtF,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,gBAAgB,EAAE,SAAS,QAAQ,0CAA0C,CAAC,CAAC;YACpI,OAAO;QACT,CAAC;QAED,4FAA4F;QAC5F,kGAAkG;QAClG,kGAAkG;QAClG,kGAAkG;QAClG,+FAA+F;QAC/F,iGAAiG;QACjG,uCAAuC;QACvC,IAAI,CAAC,SAAS,CAAC,gCAAgC,CAAC,IAAI,EAAE;YACpD,cAAc,EAAE,kBAAkB,CAAC,GAAG;YACtC,kBAAkB,EAAE,QAAQ;YAC5B,mBAAmB,EAAE,sBAAsB,CAAC,cAAc;YAC1D,SAAS,EAAE,sBAAsB,CAAC,GAAG,CAAC;SACvC,CAAC,CAAC;QAEH,gGAAgG;QAChG,+FAA+F;QAC/F,6FAA6F;QAC7F,6FAA6F;QAC7F,6FAA6F;QAC7F,kGAAkG;QAClG,8FAA8F;QAC9F,iGAAiG;QACjG,wGAAwG;QACxG,uFAAuF;QACvF,wFAAwF;QACxF,MAAM,UAAU,GAA2B;YACzC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClG,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChG,CAAC;QAEF,6FAA6F;QAC7F,6FAA6F;QAC7F,+FAA+F;QAC/F,8FAA8F;QAC9F,yEAAyE;QACzE,mGAAmG;QACnG,wEAAwE;QACxE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAA2C,CAAC,kBAAkB,IAAI,2BAA2B,CAAC,SAAS,CAAC,UAAU,CAAC;YAC3I,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE;YAClE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAEnD,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,0BAA0B,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACpH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;YACvI,6FAA6F;YAC7F,EAAE;YACF,sCAAsC;YACtC,EAAE;YACF,+FAA+F;YAC/F,+FAA+F;YAC/F,+FAA+F;YAC/F,6DAA6D;YAC7D,iFAAiF;YACjF,6FAA6F;YAC7F,mDAAmD;YACnD,0EAA0E;YAC1E,EAAE;YACF,mFAAmF;YACnF,2FAA2F;YAC3F,iFAAiF;YACjF,2FAA2F;YAC3F,4FAA4F;YAC5F,EAAE;YACF,4FAA4F;YAC5F,6FAA6F;YAC7F,2FAA2F;YAC3F,4FAA4F;YAC5F,yEAAyE;YACzE,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;YACjE,8FAA8F;YAC9F,+FAA+F;YAC/F,gGAAgG;YAChG,8FAA8F;YAC9F,yFAAyF;YACzF,4FAA4F;YAC5F,mFAAmF;YACnF,wFAAwF;YACxF,iGAAiG;YACjG,EAAE;YACF,8FAA8F;YAC9F,+FAA+F;YAC/F,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,kBAAkB,CAAC;gBACvD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;gBACnD,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC5E,OAAO,EAAE,KAAK;aACf,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,6EAA6E;IAE7E;;;;;;OAMG;IACK,cAAc,CAAC,WAAoB;QACzC,OAAO,IAAI,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,kBAAkB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAClG,CAAC;IAEO,kBAAkB,CAAC,GAAY;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAClF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAED,+FAA+F;IACvF,aAAa,CAAC,QAAgB;QACpC,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACrD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,uBAAuB,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACtE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;QACrE,CAAC;QACD,OAAO;YACL,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAiB;YACnD,mBAAmB,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC;SACzE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,iBAAiB,CACvB,YAA0B,EAC1B,IAAyC;QAEzC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjC,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC,8BAA8B,EAAE,CAAC,YAAY,CAAC,CAAC;QAC9F,IAAI,eAAe,IAAI,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;YAChD,OAAO,EAAE,UAAU,EAAE,EAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAClD,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACK,kBAAkB,CAAC,GAAY;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACxE,+FAA+F;QAC/F,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,iGAAiG;QACjG,2FAA2F;QAC3F,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACnE,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE/D,mFAAmF;QACnF,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,kBAAkB,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACxG,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,CAAC,uDAAuD;QAEnG,mGAAmG;QACnG,0FAA0F;QAC1F,OAAO,UAAU,GAAG,WAAW,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACK,aAAa,CAAC,MAAc,EAAE,SAAiB;QACrD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3E,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5D,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACK,eAAe,CAAC,GAAa,EAAE,OAAgB;QACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;YAClB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,wBAAwB;YACzC,UAAU,EAAE,YAAY;YACxB,+FAA+F;YAC/F,yFAAyF;YACzF,8FAA8F;YAC9F,sBAAsB;YACtB,mEAAmE;YACnE,EAAE;YACF,8FAA8F;YAC9F,4FAA4F;YAC5F,2FAA2F;YAC3F,gFAAgF;YAChF,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;IAED;;;OAGG;IACH;;;;;;;;;;;;;;;;OAgBG;IACK,kBAAkB,CACxB,MAA+B,EAC/B,gBAAwB,EACxB,KAAqD;QAErD,IAAI,CAAC,6BAA6B,CAAC,gBAAgB,CAAC;YAAE,OAAO,MAAM,CAAC;QACpE,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACvH,CAAC;IAEO,aAAa,CAAC,GAAY,EAAE,GAAa,EAAE,EAAa,EAAE,MAAe;QAC/E,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACjF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,GAAY,EAAE,GAAa,EAAE,EAAa,EAAE,IAA0B,EAAE,OAAe,EAAE,UAAU,GAAG,GAAG;QAC5H,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;QACjE,IAAI,UAAU,KAAK,GAAG,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACvG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,mBAAmB,CACzB,GAAY,EACZ,GAAa,EACb,EAAa,EACb,WAAmB,EACnB,WAA+B,EAC/B,OAAe;IACf;;;;;OAKG;IACH,UAAmB;QAEnB,wFAAwF;QACxF,6FAA6F;QAC7F,iGAAiG;QACjG,iGAAiG;QACjG,8FAA8F;QAC9F,2DAA2D;QAC3D,sFAAsF;QACtF,MAAM,cAAc,GAAG,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChE,GAAG,CAAC,GAAG,CACL,kBAAkB,EAClB;YACE,QAAQ;YACR;gBACE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChD,sBAAsB,IAAI,CAAC,+BAA+B,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG;gBACvF,UAAU,cAAc,GAAG;aAC5B,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,eAAe,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACtF,CAAC;IAED;;;;;;;;OAQG;IACK,+BAA+B,CAAC,WAAmB,EAAE,WAAoB;QAC/E,MAAM,aAAa,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,+BAA+B,CAAC,CAAC;QAC9G,IAAI,CAAC,WAAW;YAAE,OAAO,GAAG,WAAW,GAAG,aAAa,EAAE,CAAC;QAC1D,OAAO,GAAG,WAAW,GAAG,6BAA6B,CAAC,wBAAwB,CAAC,YAAY,CAAC,IAAI,WAAW,GAAG,aAAa,EAAE,CAAC;IAChI,CAAC;IAED;;;;OAIG;IACK,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,EAAa,EAAE,iBAAyB;QAC3F,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,oBAAoB,CAAC,YAAY,EAAE,uDAAuD,EAAE,GAAG,CAAC,CAAC;IACnI,CAAC;IAED;;;;;OAKG;IACK,aAAa,CAAC,GAAY,EAAE,GAAa,EAAE,EAAa,EAAE,KAAc,EAAE,gBAAgB,GAAG,oBAAoB;QACvH,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC;QACzB,MAAM,OAAO,GAAI,KAAK,EAAE,sBAAiC,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;QAChI,IAAI,CAAC,QAAQ,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAE1D,6FAA6F;QAC7F,EAAE;QACF,+FAA+F;QAC/F,8FAA8F;QAC9F,2FAA2F;QAC3F,wFAAwF;QACxF,EAAE;QACF,2FAA2F;QAC3F,8FAA8F;QAC9F,gGAAgG;QAChG,mEAAmE;QACnE,EAAE;QACF,0FAA0F;QAC1F,6FAA6F;QAC7F,6DAA6D;QAC7D,IAAI,IAAI,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;YACzD,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QAED,6FAA6F;QAC7F,EAAE;QACF,+FAA+F;QAC/F,+FAA+F;QAC/F,iGAAiG;QACjG,iDAAiD;QACjD,qDAAqD;QACrD,EAAE;QACF,4FAA4F;QAC5F,+FAA+F;QAC/F,IAAI,IAAI,IAAI,8BAA8B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,+FAA+F;YAC/F,+FAA+F;YAC/F,kGAAkG;YAClG,iGAAiG;YACjG,uDAAuD;YACvD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,MAAM,MAAM,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,kBAAkB,CAAC;gBACvD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,GAAG,MAAM,EAAE,EAAE,CAAC;gBACxD,OAAO,EAAE,IAAI;aACd,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QAED,iGAAiG;QACjG,+FAA+F;QAC/F,8EAA8E;QAC9E,MAAM,YAAY,GAAG,IAAI,KAAK,SAAS,CAAC,cAAc,IAAI,IAAI,KAAK,SAAS,CAAC,aAAa,CAAC;QAC3F,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC;QACvG,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;QACpG,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACjF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAEO,YAAY,CAAC,KAAc;QACjC,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK;YACrF,CAAC,CAAE,KAA4B;YAC/B,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;CACF,CAAA;AAlqCY,2BAA2B;IADvC,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAChE,WAAA,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAA;IACpC,WAAA,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;IACzC,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAC3C,WAAA,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAA;IACvC,YAAA,MAAM,CAAC,kBAAkB,CAAC,+BAA+B,CAAC,CAAA;qCAVhB,aAAa;QACM,0BAA0B;QAC1B,mBAAmB;QAC2B,qCAAqC;QAC/E,uBAAuB;QAChB,4BAA4B;QACb,+BAA+B;QACvC,uBAAuB;QAC9B,uBAAuB;QACxB,YAAY;QACkB,6CAA6C;GAZ1I,2BAA2B,CAkqCvC","sourcesContent":["import 'reflect-metadata';\nimport { inject, injectable } from 'inversify';\nimport type { Request, Response } from 'express';\nimport cors from 'cors';\nimport {\n ErrorType,\n MachineAccessOperation,\n MANUAL_CONTROLLER_ROUTES_URLS,\n ManualControllerRouteKey,\n ResourceServerKind,\n ResourceType,\n WildoError_Backend,\n} from '@wildo-ai/saas-models';\nimport { AbstractControllerBackendService } from '~wildo-backend-lib/base-classes/services/controllers/abstract-controller.backend.service';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { ErrorHandlerService } from '~wildo-backend-lib/errors/services/error-handler.backend.service';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { AuditLogsBackendService } from '~wildo-backend-lib/compliance/audit-trails/services/audit-logs.backend.service';\nimport { getClientIpFromRequest } from '~wildo-backend-lib/runtime/utils/request-client-ip.utils';\nimport { RedisService } from '~wildo-backend-lib/databases/services/redis.service';\nimport { recordExternalTokenAuthFailure } from '~wildo-backend-lib/security/authentications/services/utils/machine-auth-rate-limit.backend.utils';\nimport {\n MCP_EXTERNAL_CALL_RATE_MAX,\n MCP_EXTERNAL_CALL_RATE_WINDOW_SECONDS,\n assertExternalTurnWithinRate,\n resolvePrincipalRateKey,\n} from '~wildo-backend-lib/security/authentications/services/utils/external-turn-rate-limit.backend.utils';\nimport { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport { AppConfigurationService } from '~wildo-backend-lib/config/services/app-configuration.backend.service';\nimport { McpServerBackendService } from '~wildo-backend-lib/mcp/services/mcp-server.backend.service';\nimport {\n McpToolAdapterBackendService,\n mcpReachableScopesForPrincipal,\n mcpPrincipalForAuthenticatedCaller,\n McpCallerPrincipal,\n} from '~wildo-backend-lib/mcp/services/mcp-tool-adapter.backend.service';\nimport { ResourceServerInstancesRegistryBackendService } from '~wildo-backend-lib/mcp/services/resource-server-instances-registry.backend.service';\nimport { MCP_TOOL_NAME_SEPARATOR,\n MCP_UPLOAD_GRANT_TOOL_MARKER,\n} from '~wildo-backend-lib/mcp/models/mcp-tool.backend.schemas';\nimport { OIDC_SUPPORTED_IDENTITY_SCOPES } from '~wildo-backend-lib/security/authentications/services/oidc-user-claims.backend.service';\nimport { isMcpValueWrappedRequestDto, unwrapMcpValueEnvelope } from '~wildo-backend-lib/mcp/utils/zod-to-mcp-json-schema.backend.utils';\nimport {\n MCP_PROTOCOL_VERSION,\n MCP_SUPPORTED_PROTOCOL_VERSIONS,\n MCP_TOOLS_LIST_CACHE_TTL_MS,\n MCP_DISCOVER_CACHE_TTL_MS,\n Mcp_CacheScope,\n isStatelessMcpProtocolVersion,\n decodeMcpHeaderValue,\n MCP_METHODS_REQUIRING_NAME_HEADER,\n MCP_STATELESS_PROTOCOL_VERSION,\n MCP_ASSUMED_PROTOCOL_VERSION_WHEN_HEADER_ABSENT,\n MCP_META_PROTOCOL_VERSION_KEY,\n Mcp_JsonRpcErrorCode,\n Mcp_JsonRpcRequestSchema,\n Mcp_ToolsCallParamsSchema,\n MCP_SERVER_INSTRUCTIONS,\n MCP_TOOL_EXECUTION_ERROR_TYPES,\n} from '~wildo-backend-lib/mcp/models/mcp-protocol.backend.schemas';\nimport type { SocketAuthResult } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\n\n/** A JSON-RPC id is `string \| number \| null` (absent → treated as null in a response). /\ntype JsonRpcId = string \| number \| null;\n\n/\n Inbound Model Context Protocol (MCP) transport controller — a THIN JSON-RPC 2.0\n * wrapper over {@link McpServerBackendService}, mirroring {@link A2AControllerBackendService}.\n * Exposes a curated set of resource operations as MCP tools to external AI agents:\n \n - `GET /.well-known/oauth-protected-resource` — RFC 9728 Protected Resource\n * Metadata (public, CORS-open): advertises this server's `resource` identifier +\n * the `authorization_servers` (the app's own OIDC provider) a client uses to obtain\n * a token.\n * - `POST /mcp` — JSON-RPC 2.0. `initialize` is public; `tools/list` is PROGRESSIVELY principal-aware\n * (a valid Bearer → the caller's catalog, a user-delegated token additionally surfacing USER_SELF\n * tools; an ANONYMOUS caller reaches nothing and is CHALLENGED, which is the 401 every client needs\n * in order to begin authorization); `tools/call` is Bearer-credentialed, RFC 8707\n * audience-bound (validated in\n * {@link ExecutionContextCreatorBackendService.authenticateExternalToken}), and the\n * server re-runs `authorizeInController` BEFORE dispatch (fail-closed, roles-only).\n * - `POST /mcp/:instanceRef` + `GET /mcp/:instanceRef/.well-known/oauth-protected-resource` — the R-2\n * NAMED server instances. Each declared instance is a SEPARATE resource server: its own URL, its own\n * RFC 8707 audience (`…/mcp/<ref>`), its own metadata, and its own curated catalog (membership is\n * EXCLUSIVE — a curated operation LEAVES the default catalog). An unknown ref 404s before\n * parsing/auth and never falls back to the default catalog.\n * - Response mode (Streamable HTTP): a POST result is `application/json` by default, or an SSE stream\n * (`text/event-stream`, a single message event) when the client's `Accept` negotiates it. *JSON wins a\n tie** — the spec makes clients advertise BOTH, so only an explicit RFC 9110 `q`-value preference for\n * SSE selects it (see {@link MCPControllerBackendService.acceptsEventStream}). `GET /mcp`\n * → 405 (no server-initiated stream — no notifications/sampling yet). Transport-level errors\n * (401 / 429 / 503) are always plain HTTP, never SSE.\n \n Auth model (D6): a client-credentials / api-key MACHINE principal. Its token is\n * audience-bound to THE ADDRESSED SURFACE's own resource identifier (`mcpResourceUri(instanceRef)` →\n * `${apiAudience}/mcp` or `${apiAudience}/mcp/<ref>`, advertised in that surface's RFC 9728 metadata) —\n * the generic API audience is NOT accepted here (2026-07-29 flip), so an API token and an MCP token\n * never cross, and a token minted for one instance is rejected at another.\n * A user-delegated caller (an `authorization_code` token bound to this endpoint) additionally reaches\n * their USER_SELF tools — see the progressive principal-aware `tools/list` + the `callTool` gate.\n \n Curation is NOT authorization. `mcp.exposed` / `mcp.servers` decide which operations are shaped as\n * tools and which surface advertises them; every `tools/call` still re-runs the operation's own role\n * authorization, so exposure can only ever be a SUBSET of what the caller's roles already permit.\n \n NOTE: `setupRoutes()` runs inside the `super()` constructor before this subclass's\n * field initializers, so it only BINDS handlers — the injected services are read at\n * REQUEST time. Standard manual-controller pattern.\n /\n@injectable()\nexport class MCPControllerBackendService extends AbstractControllerBackendService {\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger) logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.ErrorHandlerService) errorHandler: ErrorHandlerService,\n @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) private readonly executionContextCreator: ExecutionContextCreatorBackendService,\n @inject(SAAS_SERVICE_TYPES.McpServer) private readonly mcpServer: McpServerBackendService,\n @inject(SAAS_SERVICE_TYPES.McpToolAdapter) private readonly toolAdapter: McpToolAdapterBackendService,\n @inject(SAAS_SERVICE_TYPES.ResourceRegistryService) private readonly resourcesRegistry: ResourcesRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.AppConfigService) private readonly appConfigService: AppConfigurationService,\n @inject(SAAS_SERVICE_TYPES.AuditLogsService) private readonly auditLogs: AuditLogsBackendService,\n @inject(SAAS_SERVICE_TYPES.RedisService) private readonly redisService: RedisService,\n @inject(SAAS_SERVICE_TYPES.ResourceServerInstancesRegistry) private readonly resourceServerInstances: ResourceServerInstancesRegistryBackendService,\n ) {\n super(logger, errorBuilder, errorHandler, 'MCPController');\n }\n\n protected setupRoutes(): void {\n // RFC 9728 metadata is PUBLIC, non-credentialed discovery an MCP client fetches\n // cross-origin to learn where to get a token — CORS-open GET, like the OIDC\n // discovery doc. The JSON-RPC endpoint stays under the restrictive global CORS.\n const publicMetadataCors = cors({ origin: '', methods: ['GET'], credentials: false });\n\n const metadataUrl = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.MCP_PROTECTED_RESOURCE_METADATA];\n this.router.get(metadataUrl, publicMetadataCors, this.asyncHandler(this.handleProtectedResourceMetadata.bind(this)));\n this.logRouteRegistration('GET', metadataUrl, 'MCP protected-resource metadata (RFC 9728, public)');\n\n const mcpUrl = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.MCP_ENDPOINT];\n this.router.post(mcpUrl, this.asyncHandler(this.handleJsonRpc.bind(this)));\n this.logRouteRegistration('POST', mcpUrl, 'MCP JSON-RPC endpoint (initialize, tools/list, tools/call; SSE or JSON per Accept)');\n\n // GET /mcp — the Streamable-HTTP server-initiated SSE stream. This server has no server-initiated\n // messages (no notifications / sampling), so respond 405 + `Allow: POST` — the spec-sanctioned\n // answer when a server offers no GET stream. Explicit 405 (not an unhandled 404) so clients probe\n // cleanly and fall back to the POST response-mode SSE.\n this.router.get(mcpUrl, (_req: Request, res: Response) => {\n res.set('Allow', 'POST').status(405).json({\n jsonrpc: '2.0', id: null,\n error: { code: Mcp_JsonRpcErrorCode.METHOD_NOT_FOUND, message: 'the MCP endpoint offers no server-initiated SSE stream; use POST' },\n });\n });\n this.logRouteRegistration('GET', mcpUrl, 'MCP endpoint GET → 405 (no server-initiated SSE stream)');\n\n // DELETE /mcp — the session-termination verb of the `2025-03-26`…`2025-11-25` transport, which\n // `2026-07-28` removed along with protocol-level sessions. We never implemented sessions, so\n // there is nothing to terminate; the spec names the answer for a server in exactly this position:\n //\n // \"HTTP GET or DELETE to the MCP endpoint: respond with `405 Method Not Allowed`.\"\n // spec-cite: MCP 2026-07-28 — Streamable HTTP § Earlier Streamable HTTP Revisions\n //\n // Registered EXPLICITLY rather than left to a framework 404, for the same reason as the GET: an\n // older client that sent DELETE would read a bare 404 as \"this server has no MCP endpoint\" and\n // fall back to the deprecated HTTP+SSE transport, against a server that speaks Streamable HTTP.\n this.router.delete(mcpUrl, (_req: Request, res: Response) => {\n res.set('Allow', 'POST').status(405).json({\n jsonrpc: '2.0', id: null,\n error: { code: Mcp_JsonRpcErrorCode.METHOD_NOT_FOUND, message: 'the MCP endpoint has no sessions to terminate; use POST' },\n });\n });\n this.logRouteRegistration('DELETE', mcpUrl, 'MCP endpoint DELETE → 405 (no protocol-level sessions)');\n\n // ── R-2: NAMED MCP server instances (`/mcp/:instanceRef`) ────────────────────\n // Each declared instance is a SEPARATE resource server: its own URL, its own RFC 8707 audience\n // (`…/mcp/<ref>`), its own PRM, and its own curated tool catalog. Routes are registered\n // unconditionally (not gated on `hasInstances`) because the registry is populated during startup\n // AFTER `setupRoutes` runs inside `super()` — an unknown ref is rejected at REQUEST time by\n // `resolveInstanceRef` (404), which is the same fail-closed answer with no ordering hazard.\n // More-specific paths first: the metadata route has more segments than `/mcp/:instanceRef`, so\n // Express matches it exactly and it can never be swallowed by the instance route.\n const instanceMetadataUrl = `${mcpUrl}/:instanceRef${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.MCP_PROTECTED_RESOURCE_METADATA]}`;\n this.router.get(instanceMetadataUrl, publicMetadataCors, this.asyncHandler(this.handleProtectedResourceMetadata.bind(this)));\n this.logRouteRegistration('GET', instanceMetadataUrl, 'Per-instance MCP protected-resource metadata (RFC 9728, public)');\n\n const instanceUrl = `${mcpUrl}/:instanceRef`;\n this.router.post(instanceUrl, this.asyncHandler(this.handleJsonRpc.bind(this)));\n this.logRouteRegistration('POST', instanceUrl, 'Named MCP server instance (JSON-RPC; own audience + curated catalog)');\n\n this.router.get(instanceUrl, (_req: Request, res: Response) => {\n res.set('Allow', 'POST').status(405).json({\n jsonrpc: '2.0', id: null,\n error: { code: Mcp_JsonRpcErrorCode.METHOD_NOT_FOUND, message: 'the MCP endpoint offers no server-initiated SSE stream; use POST' },\n });\n });\n this.logRouteRegistration('GET', instanceUrl, 'Named MCP server instance GET → 405 (no server-initiated SSE stream)');\n\n // A named instance IS an MCP endpoint, so it owes the same answer as the default one. Registered\n // separately because Express matches `/mcp` and `/mcp/:instanceRef` as distinct routes — the base\n // DELETE handler does NOT cover the instance path, and without this an older client that sends\n // the retired session-termination verb to `/mcp/support` reads the framework 404 as \"no MCP\n // endpoint here\" and falls back to the deprecated HTTP+SSE transport.\n //\n // Found by probing the running server, not by a test: the base-endpoint pin passed while every\n // named instance answered 404. One verb, two routes — the recurring one-of-N shape.\n this.router.delete(instanceUrl, (_req: Request, res: Response) => {\n res.set('Allow', 'POST').status(405).json({\n jsonrpc: '2.0', id: null,\n error: { code: Mcp_JsonRpcErrorCode.METHOD_NOT_FOUND, message: 'the MCP endpoint has no sessions to terminate; use POST' },\n });\n });\n this.logRouteRegistration('DELETE', instanceUrl, 'Named MCP server instance DELETE → 405 (no protocol-level sessions)');\n }\n\n /*\n Resolve the NAMED server instance addressed by this request, or the DEFAULT server.\n \n - No `:instanceRef` path param ⇒ `{ instanceRef: undefined }` — the default `/mcp` surface.\n * - A param naming a DECLARED instance ⇒ that ref (drives the audience + the catalog filter).\n * - A param naming an UNDECLARED instance ⇒ `undefined` (the caller 404s). Fail-closed: an\n * unknown ref must never silently fall back to the default catalog, which would hand a caller\n * tools the (non-existent) server was never meant to expose.\n /\n private resolveInstanceRef(req: Request): { instanceRef?: string } \| undefined {\n const requested = (req.params as Record<string, string \| undefined>)?.instanceRef;\n if (!requested) return { instanceRef: undefined };\n const instance = this.resourceServerInstances.tryGetInstance(ResourceServerKind.MCP, requested);\n return instance ? { instanceRef: instance.ref } : undefined;\n }\n\n /\n `GET /.well-known/oauth-protected-resource` (default server) and\n * `GET /mcp/:instanceRef/.well-known/oauth-protected-resource` (a named instance) — RFC 9728 metadata.\n \n Each instance advertises its OWN `resource` (its canonical audience), which is exactly the `aud` a\n * token must carry to be accepted there — so a client that discovers an instance and follows its\n * metadata obtains a token scoped to that instance and nothing else.\n /\n private async handleProtectedResourceMetadata(req: Request, res: Response): Promise<void> {\n const resolved = this.resolveInstanceRef(req);\n if (!resolved) {\n res.status(404).json({ error: 'not_found', error_description: 'no such MCP server instance' });\n return;\n }\n const apiAudience = this.appConfigService.resolveApiResourceAudience();\n const mcpResource = this.mcpResourceUri(resolved.instanceRef);\n if (!apiAudience \|\| !mcpResource) {\n res.status(503).json({ error: 'temporarily_unavailable', error_description: 'resource audience is not resolvable (app public URL unset)' });\n return;\n }\n res.set('Cache-Control', 'public, max-age=3600');\n res.status(200).json({\n // This MCP resource server's canonical URI (the `aud` an audience-bound token must carry).\n resource: mcpResource,\n // The app's own OIDC provider (issuer == the API audience base).\n authorization_servers: [apiAudience],\n bearer_methods_supported: ['header'],\n /\n The OIDC identity scopes a delegated client should request — NOT authorization scopes.\n \n Wildo's authorization is roles-only, so this document once advertised `[]`, which was\n * TRUTHFUL and turned out to be unusable. A real client (Cursor, 2026-08-11) read the empty set,\n * concluded there was nothing to authorize, reported \"successfully authenticated\" and *never\n opened a browser** — so no token was ever obtained and every `tools/call` stayed 401. The\n * scope-selection strategy tells a client to take the challenge's `scope` and otherwise fall\n * back to this field; supplying neither leaves it with no way to start an authorization request.\n \n These are the scopes a dynamically registered client is actually granted\n * (`/oauth/register` confines to exactly this set), so advertising them describes what a client\n * will really receive rather than inventing a vocabulary. They remain IDENTITY scopes: nothing\n * here grants access to a tool, which roles alone still decide.\n \n spec-cite: MCP 2026-07-28 — Authorization § Scope Selection Strategy.\n /\n scopes_supported: [...OIDC_SUPPORTED_IDENTITY_SCOPES],\n });\n }\n\n /\n Pick the protocol revision to answer `initialize` with.\n \n Returns the CLIENT's requested revision when this server serves it, else this server's own\n * newest — exactly the two-branch rule in Lifecycle § Version Negotiation. A malformed or absent\n * `params.protocolVersion` falls to our newest, which is also what a client that sent nothing\n * parseable can most reasonably be given.\n /\n private negotiateProtocolVersion(params: unknown, declaredVersion?: string): string {\n const requested = (params as { protocolVersion?: unknown } \| undefined)?.protocolVersion;\n if (typeof requested === 'string' && MCP_SUPPORTED_PROTOCOL_VERSIONS.includes(requested)) return requested;\n // Fall back to what the REQUEST resolved to (header / `_meta`) before falling back to our\n // newest: a client that declared its revision on the transport but omitted it from the\n // `initialize` body has still told us what it speaks, and answering our newest instead would\n // hand it a version it may not support — whose own rule is to disconnect.\n if (declaredVersion && MCP_SUPPORTED_PROTOCOL_VERSIONS.includes(declaredVersion)) return declaredVersion;\n return MCP_PROTOCOL_VERSION;\n }\n\n /\n Validate the mirrored request-metadata headers against the body. Returns a reason, or\n * `undefined` when everything agrees.\n \n The hazard being closed is a SPLIT BRAIN, not sloppiness: \"This prevents potential security\n * vulnerabilities when different components in the network rely on different sources of truth\n * (e.g., a load balancer routing on the header value while the MCP server executes based on the\n * body value).\"\n * spec-cite: MCP 2026-07-28 — Streamable HTTP § Server Validation\n \n A MISSING required header is a validation failure too, not a tolerated omission — the spec lists\n * \"a required standard header … is missing\" first among its failure conditions. Tolerating it\n * would leave an intermediary routing on a header this server never checked.\n /\n private findRequestMetadataHeaderMismatch(req: Request, method: string, params: unknown): string \| undefined {\n const headerVersion = req.headers['mcp-protocol-version'];\n if (typeof headerVersion !== 'string') {\n return 'MCP-Protocol-Version header is required';\n }\n const metaVersion = (params as { _meta?: Record<string, unknown> } \| undefined)?._meta?.[MCP_META_PROTOCOL_VERSION_KEY];\n if (typeof metaVersion === 'string' && metaVersion !== headerVersion) {\n return `MCP-Protocol-Version header value '${headerVersion}' does not match body value '${metaVersion}'`;\n }\n\n const headerMethod = req.headers['mcp-method'];\n if (typeof headerMethod !== 'string') return 'Mcp-Method header is required';\n if (headerMethod !== method) {\n return `Mcp-Method header value '${headerMethod}' does not match body value '${method}'`;\n }\n\n if (!MCP_METHODS_REQUIRING_NAME_HEADER.includes(method)) return undefined;\n\n const headerName = req.headers['mcp-name'];\n if (typeof headerName !== 'string') return 'Mcp-Name header is required';\n const p = (params ?? {}) as { name?: unknown; uri?: unknown };\n const bodyName = typeof p.name === 'string' ? p.name : (typeof p.uri === 'string' ? p.uri : undefined);\n // A body with NO target used to pass this gate, because the comparison carried a\n // `bodyName !== undefined &&` guard and was therefore skipped when there was nothing to compare\n // against. The header exists so a proxy can route without parsing the body, and this is exactly\n // the case where it asserts a routing target the body does not support.\n //\n // Dropping that guard is what makes this correct* — the comparison below then rejects\n // `'todos__list' !== undefined` on its own. This early return exists only for the MESSAGE:\n // \"does not match body value 'undefined'\" describes a mismatch, when the real fault is that\n // there is nothing to match. Proven by mutation: removing only this block changes nothing;\n // restoring the guard as well is what reddens the pin.\n if (bodyName === undefined) {\n return `Mcp-Name header names '${decodeMcpHeaderValue(headerName)}' but the request body carries no target`;\n }\n // Decoded BEFORE comparison — a client MUST use the Base64 sentinel for any value that is not\n // header-safe, so comparing raw would reject exactly the names the encoding exists to carry.\n if (decodeMcpHeaderValue(headerName) !== bodyName) {\n return `Mcp-Name header value '${headerName}' does not match body value '${bodyName}'`;\n }\n return undefined;\n }\n\n /*\n The protocol revision THIS request is written against.\n \n `_meta` wins over the header because a stateless request carries its revision in the body and a\n * proxy cannot rewrite it there; the header is the transport mirror of the same value. When\n * neither is present the request predates both mechanisms, so it gets the handshake default the\n * specification assigns rather than our newest — answering our newest to a client that said\n * nothing is how a `2025-03-26` client gets told it is speaking something it may not support.\n /\n private resolveDeclaredProtocolVersion(req: Request): string \| undefined {\n const meta = (req.body as { params?: { _meta?: Record<string, unknown> } } \| undefined)?.params?._meta;\n const declared = meta?.[MCP_META_PROTOCOL_VERSION_KEY];\n if (typeof declared === 'string' && MCP_SUPPORTED_PROTOCOL_VERSIONS.includes(declared)) return declared;\n\n const header = req.headers['mcp-protocol-version'];\n if (typeof header === 'string' && MCP_SUPPORTED_PROTOCOL_VERSIONS.includes(header)) return header;\n\n return undefined;\n }\n\n /\n The revision whose RULES this request is held to.\n \n Distinct from {@link resolveDeclaredProtocolVersion} on purpose, and the distinction is\n * load-bearing. When a client declares nothing the specification tells us how to READ the request\n * — assume `2025-03-26` — but that assumption must never become what we ADVERTISE back: a client\n * that said nothing has requested nothing, and `initialize` must then answer this server's newest,\n * not the floor we read it at.\n \n Collapsing the two (returning the assumed default from one helper and feeding it into\n * negotiation) silently downgraded every handshake client to `2025-03-26`. Two existing pins\n * caught it immediately, which is the argument for keeping them narrow enough to fail loudly.\n /\n private resolveEffectiveProtocolVersion(req: Request): string {\n return this.resolveDeclaredProtocolVersion(req) ?? MCP_ASSUMED_PROTOCOL_VERSION_WHEN_HEADER_ABSENT;\n }\n\n /\n `POST /mcp` — JSON-RPC 2.0 dispatch. Application-level failures are returned as\n * JSON-RPC error envelopes (HTTP 200) per the protocol; a missing/invalid Bearer on\n * `tools/call` returns HTTP 401 + `WWW-Authenticate` pointing at the RFC 9728 metadata\n * (the OAuth resource-server challenge). A malformed envelope yields a null-id error.\n /\n private async handleJsonRpc(req: Request, res: Response): Promise<void> {\n // R-2: which server instance is being addressed (default `/mcp`, or a declared `/mcp/<ref>`).\n // An unknown ref 404s BEFORE any parsing/auth — it is not a server, so it has no JSON-RPC surface.\n const resolved = this.resolveInstanceRef(req);\n if (!resolved) {\n res.status(404).json({ error: 'not_found', error_description: 'no such MCP server instance' });\n return;\n }\n const instanceRef = resolved.instanceRef;\n\n // ── Origin: refuse ANY browser-originated call ───────────────────────────────────────────\n //\n // \"Servers MUST validate the `Origin` header on all incoming connections to prevent DNS\n // rebinding attacks\"\n // spec-cite: MCP 2025-06-18 — Transports § Streamable HTTP → Security Warning\n //\n // The policy is a FLAT REFUSAL of any request carrying an `Origin`, not an allow-list, because\n // this endpoint has no legitimate browser caller: it is machine-to-machine and authenticated by\n // a Bearer machine token, so a page able to call it would have had to keep that token somewhere\n // browser-reachable — which is a credential leak whether or not the origin is recognised.\n //\n // An ABSENT `Origin` is allowed, and that is the whole reason this is safe to ship: browsers\n // attach `Origin` to every cross-origin request, while the MCP clients that actually use this\n // surface (desktop hosts, CLIs, agent runtimes) are not browsers and send none. An allow-list\n // keyed on configured frontend URLs would have been the obvious move and is worse twice over —\n // it invents a second origin authority beside the WebSocket service's, and it implies a browser\n // MCP client is a supported shape when it is a misconfiguration.\n //\n // Defence in depth rather than the primary control: a rebinding page cannot set `Authorization`\n // cross-origin without a preflight this endpoint does not answer permissively, so it never got\n // past the auth gate either. Both are cheap; the one that fails closed on its own is kept.\n const requestOrigin = req.headers.origin;\n if (typeof requestOrigin === 'string' && requestOrigin.length > 0) {\n this.logger.warn('[MCP] Refused a browser-originated JSON-RPC call', { origin: requestOrigin, instanceRef });\n res.status(403).json({\n error: 'origin_not_allowed',\n error_description: 'the MCP endpoint does not accept browser-originated requests',\n });\n return;\n }\n\n // ── MCP-Protocol-Version header ──────────────────────────────────────────────────────────\n //\n // \"If the server receives a request with an invalid or unsupported `MCP-Protocol-Version`, it\n // MUST respond with `400 Bad Request`.\"\n // spec-cite: MCP 2025-06-18 — Transports § Protocol Version Header\n //\n // ABSENT is not invalid — the spec assigns a default rather than requiring the header on the\n // first exchange, and demanding it would break the `initialize` request itself, which is sent\n // before any version has been negotiated to put in it.\n const declaredVersion = req.headers['mcp-protocol-version'];\n if (typeof declaredVersion === 'string' && !MCP_SUPPORTED_PROTOCOL_VERSIONS.includes(declaredVersion)) {\n // A JSON-RPC error body, NOT a plain one — and the shape is what makes it useful.\n //\n // A client that supports both eras probes with a modern request and decides from the RESPONSE\n // BODY whether to fall back: \"If the body contains a recognized modern JSON-RPC error, the\n // server speaks a modern version of MCP — retry using the advertised `supported` versions or\n // correct the request, rather than falling back.\"\n // spec-cite: MCP 2026-07-28 — Streamable HTTP § Backward Compatibility\n //\n // A plain `{error: '…'}` body is NOT a recognized JSON-RPC error, so it would send exactly\n // that client down the legacy HTTP+SSE path — against a server that speaks the modern one.\n // The earlier comment here reasoned that a JSON-RPC body \"would imply the message was\n // processed\"; that is true of application errors and wrong here, because the spec makes this\n // response the fallback DISCRIMINATOR.\n res.status(400).json({\n jsonrpc: '2.0',\n id: null,\n error: {\n code: Mcp_JsonRpcErrorCode.UNSUPPORTED_PROTOCOL_VERSION,\n message: `MCP-Protocol-Version '${declaredVersion}' is not supported`,\n data: { supported: MCP_SUPPORTED_PROTOCOL_VERSIONS },\n },\n });\n return;\n }\n\n // ── The effective revision for THIS request ──────────────────────────────────────────────\n //\n // From `2026-07-28` MCP is stateless: the revision travels per request rather than being agreed\n // once by a handshake. Three sources, most specific first — the `_meta` key (stateless\n // revisions), then the transport header, then the handshake default for everything older.\n //\n // \"Every request declares the protocol version it is using via the\n // `io.modelcontextprotocol/protocolVersion` key in its `_meta` field […] On Streamable HTTP,\n // the same value is also carried in the `MCP-Protocol-Version` header.\"\n // spec-cite: MCP — Versioning § Negotiation\n //\n // Resolved BEFORE dispatch because the revision decides which RULES apply, and the obligations\n // that arrived with `2026-07-28` (required `Mcp-Method`/`Mcp-Name`, the `resultType` envelope)\n // must never be applied to a request written against an earlier one. Serving several revisions\n // at once is explicitly sanctioned — \"Clients and servers MAY support multiple protocol versions\n // simultaneously\" — and is what makes this migration additive rather than breaking.\n // The revision whose RULES this request is held to. Not consumed yet: the obligations that read\n // it — required `Mcp-Method`/`Mcp-Name`, the `resultType` envelope, `ttlMs`/`cacheScope` — arrive\n // in migration steps M3/M4. Resolved here rather than at each future site because the whole point\n // of the seam is that ONE decision governs which rules apply; deriving it separately per\n // obligation is how three of four sites end up disagreeing.\n // eslint-disable-next-line @typescript-eslint/no-unused-vars\n const effectiveVersion = this.resolveEffectiveProtocolVersion(req);\n // What the client actually DECLARED, or undefined. Deliberately separate — see the resolver's\n // JSDoc: feeding the assumed default into negotiation downgraded every handshake client.\n const declaredVersionForNegotiation = this.resolveDeclaredProtocolVersion(req);\n\n const parsed = Mcp_JsonRpcRequestSchema.safeParse(req.body);\n if (!parsed.success) {\n this.sendRpcError(req, res, null, Mcp_JsonRpcErrorCode.INVALID_REQUEST, 'malformed JSON-RPC 2.0 request');\n return;\n }\n const { id, method, params } = parsed.data;\n const rpcId: JsonRpcId = id ?? null;\n\n // ── Request-metadata headers — `2026-07-28` ONLY ─────────────────────────────────────────\n //\n // This is HAZARD 1 in code. `Mcp-Method` is \"Required For: All requests\" and `Mcp-Name` for\n // `tools/call` / `resources/read` / `prompts/get`; a `2025-06-18` client sends NEITHER, so\n // validating unconditionally would reject every existing client on its first request.\n // spec-cite: MCP 2026-07-28 — Streamable HTTP § Standard Request Headers\n //\n // The rule is gated on what the request DECLARED, which is why the declared/effective split\n // matters: a request that never claimed `2026-07-28` is never held to it.\n if (isStatelessMcpProtocolVersion(declaredVersionForNegotiation)) {\n const mismatch = this.findRequestMetadataHeaderMismatch(req, method, params);\n if (mismatch) {\n // 400 + `-32020`, both mandated. The status is what a legacy-probing client keys on to tell\n // a modern server from an old one, and the JSON-RPC body is what stops it falling back.\n this.sendRpcError(req, res, rpcId, Mcp_JsonRpcErrorCode.HEADER_MISMATCH, mismatch, 400);\n return;\n }\n }\n\n // ── JSON-RPC NOTIFICATIONS: acknowledge, never answer ────────────────────────────────────\n //\n // A notification is a message with NO `id`. Streamable HTTP is explicit about the reply:\n //\n // \"If the input is a JSON-RPC response or notification: If the server accepts the input, the\n // server MUST return HTTP status code 202 Accepted with no body.\"\n // spec-cite: MCP 2025-06-18 — Transports § Streamable HTTP → Sending Messages to the Server, item 4\n //\n // This matters far beyond tidiness, because EVERY conformant client sends one immediately after\n // `initialize`:\n //\n // \"After successful initialization, the client MUST send an `initialized` notification to\n // indicate it is ready to begin normal operations\" — `{\"jsonrpc\":\"2.0\",\"method\":\"notifications/initialized\"}`\n // spec-cite: MCP 2025-06-18 — Lifecycle § Initialization\n //\n // Before this, that notification fell through to the `default` arm and was answered with a\n // METHOD_NOT_FOUND error envelope — the server telling every client, on every connection, that\n // the one message the specification obliges it to send is unsupported. Clients that surface or\n // fail on an initialization error would never have reached `tools/list`.\n //\n // Acknowledged rather than routed: this server negotiates `tools` only, so no notification it\n // can legally receive changes any state. An UNKNOWN notification is also accepted (202) rather\n // than refused, because refusing is reserved for input the server \"cannot accept\", and a\n // notification it does not recognise is one it can safely ignore — the sender is not waiting on\n // an answer either way, so an error response would be a reply nobody reads to a message that\n // caused no harm.\n if (id === undefined) {\n res.status(202).end();\n return;\n }\n\n switch (method) {\n case 'initialize':\n this.sendRpcResult(req, res, rpcId, {\n // Negotiated, not asserted:\n // \"If the server supports the requested protocol version, it MUST respond with the same\n // version. Otherwise, the server MUST respond with another protocol version it supports.\"\n // spec-cite: MCP 2025-06-18 — Lifecycle § Version Negotiation\n //\n // This previously answered `MCP_PROTOCOL_VERSION` unconditionally, which silently told a\n // 2025-03-26 client it was talking 2025-06-18. The client's own rule on that is to\n // disconnect if it does not support the version it is handed, so an unconditional answer\n // converts a working pairing into a dropped connection.\n protocolVersion: this.negotiateProtocolVersion(params, declaredVersionForNegotiation),\n capabilities: { tools: { listChanged: false } },\n serverInfo: { name: 'wildo-mcp', version: '1.0.0' },\n });\n return;\n case 'server/discover':\n // \"`server/discover` lets a client query a server's supported protocol versions,\n // capabilities, and identity before sending any other requests. Servers MUST\n // implement it.\"\n // spec-cite: MCP 2026-07-28 — Discovery\n //\n // Answered for EVERY revision, not gated on `2026-07-28`. It costs an older client nothing\n // (it will never call it) and gating it would mean a stateless client probing a server that\n // also serves older revisions gets METHOD_NOT_FOUND — the same first-exchange failure the\n // `notifications/initialized` defect caused, arriving through the newer door.\n //\n // ── UNAUTHENTICATED, and that is a DECISION rather than an omission ──────────────────\n //\n // Three reasons, in order of weight:\n //\n // 1. It discloses nothing a caller cannot already learn. The response carries supported\n // revisions, a capability SHAPE (`tools`) and a self-reported name — no tool names, no\n // descriptions, no tenant data. The RFC 9728 protected-resource metadata beside it is\n // deliberately public and already reveals that this endpoint exists and which\n // authorization server guards it.\n // 2. Requiring a token would invert the order of operations. A conforming `2026-07-28`\n // request must carry `MCP-Protocol-Version`, so a client has to learn which revisions\n // this server speaks BEFORE it can construct one — and it obtains its token from an\n // authorization server it discovers through the public metadata. Gating discovery behind\n // the credential you need discovery to acquire is a loop.\n // 3. It is the documented backward-compatibility probe. A client that cannot call it\n // unauthenticated falls back to the deprecated transport against a server that speaks\n // the modern one.\n //\n // What this does NOT license: `tools/list` CHALLENGES an anonymous caller (its catalogue is\n // empty) and `tools/call` still authenticates fail-closed. Discovery being open is not a\n // precedent for the catalogue or the invocation being open.\n this.sendRpcResult(req, res, rpcId, this.withResultEnvelope({\n supportedVersions: MCP_SUPPORTED_PROTOCOL_VERSIONS,\n // TOOLS ONLY — a deliberate, recorded position, not an omission. Advertising a capability\n // we do not serve would have a client probe `resources/list` and get METHOD_NOT_FOUND.\n capabilities: { tools: {} },\n // \"Optional natural-language guidance for LLMs on how to use this server effectively.\"\n // spec-cite: MCP 2026-07-28 — Discovery § Data Types → DiscoverResult\n //\n // Carries the CONVENTIONS no single tool schema can express — the naming pattern, that\n // scope rides the credential rather than the arguments, the collection envelope, and that\n // the annotations are worth reading before a retry. Each was previously learnable only by\n // making a call and reading the failure.\n instructions: MCP_SERVER_INSTRUCTIONS,\n _meta: { 'io.modelcontextprotocol/serverInfo': { name: 'wildo-mcp', version: '1.0.0' } },\n // PUBLIC: supported revisions, capability shape and server identity are identical for every\n // caller, so a shared cache serving one client's answer to another discloses nothing.\n // The envelope is applied UNCONDITIONALLY here, unlike everywhere else.\n //\n // `server/discover` exists only from `2026-07-28` — a client that calls it is a\n // stateless-era client by definition, whatever it did or did not put in `_meta`. Gating on\n // the declared revision would hand exactly that client a hint-less result when it omitted\n // the key, and the caching rule names this method specifically as one whose result MUST\n // carry hints. So the method itself is the declaration.\n }, MCP_STATELESS_PROTOCOL_VERSION, { ttlMs: MCP_DISCOVER_CACHE_TTL_MS, cacheScope: Mcp_CacheScope.PUBLIC }));\n return;\n case 'tools/list':\n await this.handleToolsList(req, res, rpcId, params, instanceRef, effectiveVersion);\n return;\n case 'tools/call':\n await this.handleToolsCall(req, res, rpcId, params, instanceRef, effectiveVersion);\n return;\n default:\n // \"If the server does not implement the requested RPC method, it MUST respond with\n // `404 Not Found` and a JSON-RPC error with code `-32601`.\"\n // spec-cite: MCP 2026-07-28 — Streamable HTTP § Protocol Version Header\n //\n // 404 ONLY for a request that declared the stateless revision. Older revisions carry a\n // METHOD_NOT_FOUND on HTTP 200 per plain JSON-RPC, and changing that under them would break\n // clients that key on the status — the same per-revision discipline as the metadata headers.\n this.sendRpcError(\n req, res, rpcId, Mcp_JsonRpcErrorCode.METHOD_NOT_FOUND, `method '${method}' is not supported`,\n isStatelessMcpProtocolVersion(declaredVersionForNegotiation) ? 404 : 200,\n );\n }\n }\n\n /\n `tools/list` — PROGRESSIVE principal-awareness across THREE principals.\n \n A caller presenting a VALID Bearer bound to THIS MCP endpoint gets the catalog for its principal —\n * a user-delegated token additionally surfaces its USER_SELF tools. An ANONYMOUS caller reaches\n * nothing, and an empty anonymous catalogue is CHALLENGED rather than returned as an empty page. An\n * INVALID/expired Bearer is answered `invalid_token`, not silently downgraded.\n \n Both of those were the opposite until 2026-08-11, and the reversal is the point: an anonymous\n * caller was classified as a MACHINE principal and handed ORG/APP tools it could not invoke, so the\n * 401 that clients gate their login window on never fired. A real client reported \"successfully\n * authenticated\" having never opened a browser.\n /\n private async handleToolsList(req: Request, res: Response, id: JsonRpcId, params: unknown, instanceRef?: string, effectiveVersion = MCP_PROTOCOL_VERSION): Promise<void> {\n // ── Pagination cursor ─────────────────────────────────────────────────────────────────────\n //\n // This server does not paginate `tools/list`: the catalogue is small and bounded by the app's\n // own `mcp.exposed` declarations, so every call returns the complete set and NEVER emits a\n // `nextCursor`. That is allowed — pagination is a server capability, and a client \"SHOULD treat\n // a missing `nextCursor` as the end of results\".\n //\n // But it makes every cursor we RECEIVE invalid by construction: a cursor is opaque and can only\n // have come from a `nextCursor` we issued, and we issue none. Silently ignoring it and returning\n // the full page again is the dangerous answer — a client resuming from a stale cursor would be\n // handed the whole catalogue as though it were the next page, and one that kept paging would\n // loop forever on a `nextCursor` that never arrives.\n //\n // \"Invalid cursors SHOULD result in an error with code -32602 (Invalid params).\"\n // spec-cite: MCP 2026-07-28 — Pagination § Error Handling\n //\n // Presence is what makes it invalid, not the value: \"an empty string is a valid cursor and thus\n // MUST NOT be treated as the end of results\", so `cursor: ''` is a real cursor and is refused\n // like any other. Only an ABSENT cursor is a first-page request.\n const requestedCursor = (params as { cursor?: unknown } \| undefined)?.cursor;\n if (requestedCursor !== undefined && requestedCursor !== null) {\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.INVALID_PARAMS, 'tools/list does not paginate; this server never issues a nextCursor, so the supplied cursor is not one it can resume from');\n return;\n }\n\n const token = this.extractBearerToken(req);\n // The Bearer is validated against THIS instance's audience — a token minted for another instance\n // does not upgrade the catalog here.\n const mcpResource = this.mcpResourceUri(instanceRef);\n const apiAudience = this.appConfigService.resolveApiResourceAudience();\n let principal = McpCallerPrincipal.ANONYMOUS;\n if (token && mcpResource) {\n try {\n const auth = await this.executionContextCreator.authenticateExternalToken(token, mcpResource);\n // A user-delegated (`authorization_code`) token carries a `userId`; a machine token does not.\n principal = auth.initiatorIds?.userId ? McpCallerPrincipal.USER_DELEGATED : McpCallerPrincipal.MACHINE;\n } catch {\n // A PRESENTED-but-bad credential is answered, not ignored. Until 2026-08-11 this degraded\n // silently to the public catalogue, which hid an expiry from the one caller able to fix it:\n // the client saw a plausible list, called a tool, and only then learned its token was dead.\n // `invalid_token` tells it to REFRESH rather than restart authorization.\n if (!apiAudience) {\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.INTERNAL_ERROR, 'resource audience is not resolvable');\n return;\n }\n this.sendUnauthenticated(req, res, id, apiAudience, instanceRef, 'the access token is invalid, expired, or not audience-bound', 'invalid_token');\n return;\n }\n }\n\n const reachableScopes = mcpReachableScopesForPrincipal(principal);\n const tools = this.mcpServer.listTools({ reachableScopes, instanceRef });\n\n /\n An anonymous caller with nothing to list is CHALLENGED rather than handed an empty page.\n \n This is the rung a client's whole authorization flow hangs from. Clients open the login window\n * on a 401 during connect — and a reconnect is `initialize` + `tools/list`. Answering 200 there\n * means the session comes up \"working\", so authorization is never attempted and every later\n * `tools/call` fails 401 forever. Cursor demonstrated exactly this on 2026-08-11: clicking\n * Authenticate reported success without ever opening a browser.\n \n Scoped deliberately narrow — it fires ONLY when no credentials were presented AND the catalogue\n * is empty:\n * - a caller that presented a token gets its (possibly empty) catalogue, never a challenge:\n * \"This set MAY be empty\" is a legitimate answer to an authenticated principal, and\n * challenging one that already authenticated would loop it.\n * - an app whose anonymous catalogue is NON-empty stays public and is never challenged, so a\n * genuinely public MCP server remains expressible the day an anonymous dispatch path exists.\n \n spec-cite: MCP 2026-07-28 — Server Features § Tools (the tool set \"MAY be empty\" and \"MAY vary\n * by the authorization presented on the request\").\n /\n if (principal === McpCallerPrincipal.ANONYMOUS && tools.length === 0) {\n if (!apiAudience) {\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.INTERNAL_ERROR, 'resource audience is not resolvable');\n return;\n }\n this.sendUnauthenticated(req, res, id, apiAudience, instanceRef, 'a Bearer access token is required to list this server\\'s tools');\n return;\n }\n // Strip the internal fields the descriptor carries for re-resolution before serialising.\n this.sendRpcResult(req, res, id, this.withResultEnvelope({\n // Sorted by name. \"Servers SHOULD return tools from `tools/list` in a deterministic order to\n // enable client-side caching and improve LLM prompt cache hit rates.\"\n // spec-cite: MCP 2026-07-28 — Key Changes § Minor changes item 3\n //\n // Applied for EVERY revision, not gated: a stable order cannot break an older client, and\n // deriving it from registry iteration order would make the catalogue reorder itself on an\n // unrelated resource being registered — silently costing every client its prompt cache.\n tools: tools\n .map((t) => ({\n name: t.name,\n description: t.description,\n inputSchema: t.inputSchema,\n ...(t.annotations ? { annotations: t.annotations } : {}),\n }))\n .sort((a, b) => a.name.localeCompare(b.name)),\n // PRIVATE, and this is a security decision rather than a default.\n //\n // A tool catalogue looks like the textbook `public` case — \"lists of tools […] when they are\n // identical for all users\". OURS ARE NOT. The catalogue widens for a user-delegated token\n // (`mcpReachableScopesForPrincipal(isUserDelegated)`), so a `public` scope would let a shared\n // gateway serve a delegated caller's wider catalogue to a machine caller — which the spec warns\n // about in as many words: a `public` result \"may be shared between callers even if the Result\n // is coming from an authenticated endpoint\".\n // spec-cite: MCP 2026-07-28 — Caching § Security Considerations, and § Choosing a Cache Scope\n // (\"`private` is appropriate for […] filtered list results that vary per user\").\n }, effectiveVersion, { ttlMs: MCP_TOOLS_LIST_CACHE_TTL_MS, cacheScope: Mcp_CacheScope.PRIVATE }));\n }\n\n /* `tools/call` — authenticate (fail-closed) → build the machine EC → dispatch via the server. /\n private async handleToolsCall(req: Request, res: Response, id: JsonRpcId, params: unknown, instanceRef?: string, effectiveVersion = MCP_PROTOCOL_VERSION): Promise<void> {\n const parsedParams = Mcp_ToolsCallParamsSchema.safeParse(params);\n if (!parsedParams.success) {\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.INVALID_PARAMS, parsedParams.error.issues[0]?.message ?? 'invalid params');\n return;\n }\n const { name: toolName, arguments: toolArgs } = parsedParams.data;\n\n const apiAudience = this.appConfigService.resolveApiResourceAudience();\n // R-2: the token must be audience-bound to THIS instance (`…/mcp/<ref>`), so a token minted for\n // another server — or for the default one — is rejected here. Per-instance isolation is enforced by\n // the same RFC 8707 check the 2026-07-29 flip made strict; no auth-layer change was needed.\n const mcpResource = this.mcpResourceUri(instanceRef);\n if (!apiAudience \|\| !mcpResource) {\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.INTERNAL_ERROR, 'resource audience is not resolvable');\n return;\n }\n\n // ── OAuth 2.1 resource-server auth (D6/D7) ──────────────────────────────────\n const token = this.extractBearerToken(req);\n if (!token) {\n this.sendUnauthenticated(req, res, id, apiAudience, instanceRef, 'a Bearer access token is required');\n return;\n }\n let auth: SocketAuthResult;\n try {\n // `authenticateExternalToken` accepts BOTH a machine token (client_credentials → its own\n // org/app scope) AND a user-delegated token (authorization_code → the consenting user's scope).\n // Since the 2026-07-29 flip BOTH arms bind `aud` to THIS `mcpResource`: a machine token must be\n // minted for the MCP audience (the generic API audience is rejected here), and a delegated token\n // is verified aud-agnostically then bound to `mcpResource`. The scope for dispatch is resolved\n // principal-agnostically below.\n auth = await this.executionContextCreator.authenticateExternalToken(token, mcpResource);\n } catch {\n // SIEM-2 symmetry (S2): a rejected token at the token-USE seam feeds the shared per-IP failure\n // counter AND emits MACHINE_AUTH_FAILED, so a revoked/expired/forged token hammering /mcp is\n // visible to the SIEM (was invisible — only the token-MINT endpoint audited failures).\n void recordExternalTokenAuthFailure(\n { redisService: this.redisService, logger: this.logger, auditLogs: this.auditLogs },\n { clientIp: getClientIpFromRequest(req), resourceServer: ResourceServerKind.MCP, reason: 'external_token_invalid' },\n );\n this.sendUnauthenticated(req, res, id, apiAudience, instanceRef, 'the access token is invalid, expired, or not audience-bound');\n return;\n }\n\n // ── Per-principal call throttle (resource-op flood guard) ───────────────────\n // Cap `tools/call` dispatches per authenticated principal per window, rejecting a saturated\n // principal with a transport-level 429 + Retry-After BEFORE any dispatch. Fails open on a\n // limiter outage. (Distinct cap from A2A: an MCP call dispatches a CRUD op, not an LLM turn.)\n const principalKey = resolvePrincipalRateKey(auth);\n if (principalKey) {\n const rate = await assertExternalTurnWithinRate(\n { redisService: this.redisService, logger: this.logger },\n {\n principalKey,\n resourceServer: ResourceServerKind.MCP,\n maxPerWindow: MCP_EXTERNAL_CALL_RATE_MAX,\n windowSeconds: MCP_EXTERNAL_CALL_RATE_WINDOW_SECONDS,\n applicationEnv: this.appConfigService.applicationEnv,\n },\n );\n if (rate.kind === 'rate_limited') {\n this.sendRateLimited(req, res, id, rate.retryAfterSeconds);\n return;\n }\n }\n\n // ── Resolve the operation to build a correctly-scoped principal EC ───────────\n // Progressive principal-awareness: a user-delegated caller (carries a `userId`) can reach USER_SELF\n // operations; a machine caller reaches ORG/APP only. Resolve with the caller's reachable scopes so\n // this gate matches the server's `callTool` gate (advertise ≡ callable), and a crafted name for a\n // scope the caller cannot use fails closed HERE (before the service layer).\n const { resourceType, operationIdentifier } = this.parseToolName(toolName);\n const reachableScopes = mcpReachableScopesForPrincipal(mcpPrincipalForAuthenticatedCaller(!!auth.initiatorIds?.userId));\n // Issue #312, D11: a derived upload-grant tool resolves through its PARENT operation — that is\n // the operation whose scope the principal context must be built for, and whose instance id the\n // transport splits out of the arguments. The server re-resolves it the same way before minting.\n const derivedUploadGrant = resourceType && operationIdentifier && operationIdentifier.includes(MCP_UPLOAD_GRANT_TOOL_MARKER)\n ? this.toolAdapter.resolveUploadGrantTool(resourceType, operationIdentifier, reachableScopes, instanceRef)\n : undefined;\n const operation = derivedUploadGrant?.parentOperation ?? (resourceType && operationIdentifier\n ? this.toolAdapter.resolveExposableOperation(resourceType, operationIdentifier, reachableScopes, instanceRef)\n : undefined);\n if (!operation) {\n // A crafted / non-exposed name never reaches the service layer (would otherwise 403).\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.METHOD_NOT_FOUND, `tool '${toolName}' does not map to an exposable operation`);\n return;\n }\n\n // SIEM-2: audit machine resource-access at the authorized-dispatch boundary — the caller is\n // authenticated + the tool resolved to an exposable operation, about to dispatch. Fire-and-forget\n // (no-op for a user principal). This records the access ATTEMPT: it fires BEFORE the per-op roles\n // authorization inside `callTool`, so a subsequent roles denial does NOT suppress the row and the\n // row carries no allow/deny outcome — a SIEM sees that the machine reached this operation, not\n // whether the call ultimately succeeded. The shared shaper owns machine-principal detection + F4\n // org routing (A2A + MCP never drift).\n this.auditLogs.logMachineResourceAccessFromAuth(auth, {\n resourceServer: ResourceServerKind.MCP,\n resourceIdentifier: toolName,\n operationIdentifier: MachineAccessOperation.MCP_TOOLS_CALL,\n ipAddress: getClientIpFromRequest(req),\n });\n\n // Scope bundle for the operation's parent scope. Forward WHICHEVER of org/app the authenticated\n // principal carries and let `buildContextFromSocketAuth` filter it to the operation's DECLARED\n // scope parameter (org-scoped op → organizationId, app-scoped op → applicationId). A MACHINE\n // principal carries exactly one (org XOR app). A USER-delegated principal carries the user's\n // resolved ACTIVE org — since 2026-07-31 taken from the delegating OAuth client's own tenant\n // (`azp` → org-scoped client → organizationId), which is what restored org-scoped tool access for\n // MULTI-ORG members; they previously resolved to no org and had every org-scoped call denied.\n // It still resolves to none for an app-scoped/unknown client or a zero-membership user, in which\n // case org-scoped ops continue to fail closed. That rides PLUS the applicationId — the filter picks the\n // right one per operation, so a user is never mis-scoped to the application scope. The\n // authoritative identity (userId / machineCredential) always rides `auth.initiatorIds`.\n const contextIds: Record<string, string> = {\n ...(auth.initiatorIds?.organizationId ? { organizationId: auth.initiatorIds.organizationId } : {}),\n ...(auth.initiatorIds?.applicationId ? { applicationId: auth.initiatorIds.applicationId } : {}),\n };\n\n // F-MCP-WRAP: a union/primitive-root tool (e.g. the todos-create `one_time \| recurring` DTO)\n // advertises a `{value:...}` envelope; unwrap it symmetrically and pass the payload straight\n // through — such tools are creates with NO path-param id to split out (otherwise the DTO would\n // receive `{value:...}` and fail validation). Object-root tools keep the resource-id split so\n // READ/UPDATE/DELETE dispatch with a `resourceId` (path-param analogue).\n // A derived upload-grant tool never carries the parent's envelope — its arguments are the instance\n // id (UPDATE) plus a lifetime — so it always takes the id-split branch.\n const { resourceId, body }: { resourceId?: string; body: unknown } = !derivedUploadGrant && isMcpValueWrappedRequestDto(operation.requestDto)\n ? { body: unwrapMcpValueEnvelope(operation.requestDto, toolArgs) }\n : this.extractResourceId(resourceType, toolArgs);\n\n try {\n const executionContext = await this.executionContextCreator.buildContextFromSocketAuth(auth, operation, contextIds);\n const result = await this.mcpServer.callTool(toolName, body, executionContext, { ...(resourceId ? { resourceId } : {}), instanceRef });\n // ── MCP tool-result envelope ──────────────────────────────────────────────────────────────\n //\n // BOTH representations, deliberately:\n //\n // - `structuredContent` — the result as a JSON VALUE. Every tool here returns a resource DTO,\n // which is structured data by construction, so shipping it only as prose forced every agent\n // to parse JSON back out of a string it was told was text. The spec exists for exactly this\n // shape (its own worked example is a `list_users` array).\n // - `content` — the same payload serialized, kept because the spec asks for it:\n // \"For backwards compatibility, a tool that returns structured content SHOULD also return\n // the serialized JSON in a TextContent block.\"\n // spec-cite: MCP 2026-07-28 — Tools § Tool Result → Structured Content\n //\n // No `outputSchema` is advertised, and that is why `structuredContent` can be sent\n // unconditionally: the conformance obligation is one-directional — \"If an output schema is\n // provided: Servers MUST provide structured results that conform to this schema\"\n // (spec-cite: same page, § Output Schema). Structured content without a declared schema is\n // explicitly permitted, so this is additive and commits us to nothing we cannot yet derive.\n //\n // `text` is stringified defensively: `toResponseSafeToolOutput` passes `undefined` straight\n // through for a void operation, and `JSON.stringify(undefined)` is `undefined` — which would\n // have emitted a TextContent block whose REQUIRED `text` field was absent. `'null'` is the\n // honest JSON rendering of \"no result\", and `structuredContent` is omitted entirely in that\n // case rather than carrying a null that the agent would read as a value.\n const serializedResult = JSON.stringify(result.result) ?? 'null';\n // `withResultEnvelope` — NOT optional here, and its absence was a real gap found by reviewing\n // this block after adding `structuredContent` to it. Under the stateless revision every result\n // carries `resultType`, and on a TOOL result that field is load-bearing rather than decorative:\n // it is the discriminator between a completed call and `input_required`, the multi-round-trip\n // shape. A client switching on `resultType` received `undefined` from every tool call we\n // served, while `server/discover` and `tools/list` both carried it — the invariant had been\n // applied at two of its three sites, and the migration ledger recorded it as done.\n // spec-cite: MCP 2026-07-28 — Tools § Calling Tools (the CallToolResult example carries\n // `\"resultType\": \"complete\"`), and § Input Required Tool Results for the value it discriminates.\n //\n // No cache hints: a tool call mutates or reads live state per caller and is never cacheable —\n // which is why the envelope takes them as an explicit argument rather than always adding them.\n this.sendRpcResult(req, res, id, this.withResultEnvelope({\n content: [{ type: 'text', text: serializedResult }],\n ...(result.result === undefined ? {} : { structuredContent: result.result }),\n isError: false,\n }, effectiveVersion));\n } catch (error) {\n this.sendToolError(req, res, id, error, effectiveVersion);\n }\n }\n\n // ── helpers ───────────────────────────────────────────────────────────────\n\n /\n The MCP endpoint's absolute URI (`${apiAudience}/mcp`) — this resource server's identity and the\n * `aud` an audience-bound token must carry. Delegates to the single audience authority\n * (`resolveResourceServerAudience(MCP)`) so the token MINT (which validates a requested `resource`\n * against the SAME function) and this verify-side audience cannot drift. `undefined` when the app\n * public base URL is unresolvable (→ the caller fails closed with 503 / INTERNAL_ERROR).\n /\n private mcpResourceUri(instanceRef?: string): string \| undefined {\n return this.appConfigService.resolveResourceServerAudience(ResourceServerKind.MCP, instanceRef);\n }\n\n private extractBearerToken(req: Request): string \| undefined {\n const header = req.headers['authorization'];\n if (typeof header !== 'string' \|\| !header.startsWith('Bearer ')) return undefined;\n const token = header.slice('Bearer '.length).trim();\n return token.length > 0 ? token : undefined;\n }\n\n /* Split `<resource>__<operation>` on the FIRST `__` (resource ids use single underscores). /\n private parseToolName(toolName: string): { resourceType: ResourceType \| undefined; operationIdentifier: string \| undefined } {\n const at = toolName.indexOf(MCP_TOOL_NAME_SEPARATOR);\n if (at <= 0 \|\| at + MCP_TOOL_NAME_SEPARATOR.length >= toolName.length) {\n return { resourceType: undefined, operationIdentifier: undefined };\n }\n return {\n resourceType: toolName.slice(0, at) as ResourceType,\n operationIdentifier: toolName.slice(at + MCP_TOOL_NAME_SEPARATOR.length),\n };\n }\n\n /\n Pull the resource's own id field out of the tool arguments. When present it becomes\n * the service call's `resourceId` (path-param analogue) and is removed from the body;\n * otherwise the call is a collection operation (no id).\n /\n private extractResourceId(\n resourceType: ResourceType,\n args: Record<string, unknown> \| undefined,\n ): { resourceId?: string; body: unknown } {\n if (!args) return { body: args };\n const fieldIdentifier = this.resourcesRegistry.getAllResourceFieldIdentifiers()[resourceType];\n if (fieldIdentifier && typeof args[fieldIdentifier] === 'string') {\n const { [fieldIdentifier]: id, ...rest } = args;\n return { resourceId: id as string, body: rest };\n }\n return { body: args };\n }\n\n /\n Whether to answer in the Streamable-HTTP SSE response mode rather than `application/json`.\n \n JSON WINS A TIE — deliberately, and this is load-bearing. The MCP Streamable-HTTP spec REQUIRES a\n * client to advertise BOTH (`Accept: application/json, text/event-stream`) and leaves the choice to the\n * server. The previous implementation was a bare `includes('text/event-stream')`, which matched that\n * spec-mandated header — so EVERY conformant MCP client was served SSE. A client that then parsed the\n * body as JSON (the reasonable default for a synchronous JSON-RPC call) got `{}`: the\n * `client-integration-app` integrator's `tools/list` silently returned an empty result, its agent saw no\n * tools, and both real-LLM integration scenarios degraded to INCONCLUSIVE — reading as \"no LLM credits\"\n * while actually being this defect. It went unnoticed because the SSE proof used\n * `Accept: text/event-stream` ALONE, which no conformant client sends.\n \n spec-cite: MCP 2025-06-18 §Transports → Streamable HTTP → \"Sending Messages to the Server\", item 2:\n * \"The client MUST include an `Accept` header, listing both `application/json` and `text/event-stream`\n * as supported content types.\" Item 5 is what leaves the choice to the server: it \"MUST either return\n * `Content-Type: text/event-stream` … or `Content-Type: application/json`\", and \"The client MUST\n * support both these cases.\" Checked against the revision this server advertises — `MCP_PROTOCOL_VERSION`\n * is `2025-06-18`. https://modelcontextprotocol.io/specification/2025-06-18/basic/transports\n \n The rules, in order:\n * 1. the client must accept `text/event-stream` at all — otherwise JSON;\n * 2. if it ALSO accepts JSON (explicitly, via `* / `, or by sending no `Accept` at all), JSON wins.\n Our results are synchronous single-message payloads, so JSON is the cheaper, more interoperable\n * representation and the right default;\n * 3. UNLESS the client explicitly ranks SSE above JSON with RFC 9110 `q` values\n * (`application/json;q=0.1, text/event-stream;q=0.9`). That keeps the SSE path REACHABLE — without\n * it, rule 2 would make SSE dead code for every spec-conformant client — and it honours a genuine,\n * explicitly-stated client preference rather than inventing a Wildo-specific opt-in.\n /\n private acceptsEventStream(req: Request): boolean {\n const header = String(req.headers['accept'] ?? '').toLowerCase().trim();\n // No `Accept` at all ⇒ the client expressed no preference ⇒ JSON (the default representation).\n if (!header) return false;\n\n // RFC 9110 §12.5.1: `q=0` means \"NOT acceptable\", not \"acceptable but least preferred\". A client\n // that explicitly refuses SSE must never be served SSE, even when it names no alternative.\n const sseQuality = this.acceptQuality(header, 'text/event-stream');\n if (sseQuality === undefined \|\| sseQuality === 0) return false;\n\n // `/` makes JSON acceptable just as much as an explicit `application/json` does.\n const jsonQuality = this.acceptQuality(header, 'application/json') ?? this.acceptQuality(header, '/');\n if (jsonQuality === undefined) return true; // SSE is the only representation the client will take.\n\n // Both acceptable ⇒ JSON unless the client explicitly ranked SSE higher. (A `q=0` on JSON makes it\n // unacceptable, and `sseQuality > 0` at this point, so SSE correctly wins that case too.)\n return sseQuality > jsonQuality;\n }\n\n /\n The RFC 9110 quality value this `Accept` header assigns to one media type, or `undefined` when the\n * type is not present. A media range with no explicit `q` parameter defaults to `1.0`. Deliberately a\n * narrow lookup rather than a general `Accept` parser: only two media types are ever negotiated here.\n /\n private acceptQuality(header: string, mediaType: string): number \| undefined {\n for (const part of header.split(',')) {\n const [type, ...params] = part.split(';').map((segment) => segment.trim());\n if (type !== mediaType) continue;\n const qParam = params.find((param) => param.startsWith('q='));\n if (!qParam) return 1;\n const parsed = Number.parseFloat(qParam.slice('q='.length));\n return Number.isFinite(parsed) ? parsed : 1;\n }\n return undefined;\n }\n\n /\n Write a single JSON-RPC message as a Streamable-HTTP SSE stream, then close it. Our tool calls are\n * synchronous (one response, no progress/notifications/server-initiated messages), so the stream\n * carries exactly one message event and ends — spec-compliant for a synchronous request/response over\n * the SSE response mode. (When a long-running tool or notifications land, this becomes multi-event.)\n /\n private writeSseMessage(res: Response, payload: unknown): void {\n res.status(200).set({\n 'Content-Type': 'text/event-stream',\n 'Cache-Control': 'no-cache, no-transform',\n Connection: 'keep-alive',\n // \"When initiating an SSE stream, servers SHOULD include the `X-Accel-Buffering: no` header in\n // the HTTP response. This instructs reverse proxies (such as nginx) to disable response\n // buffering, ensuring that SSE events are delivered to clients immediately rather than being\n // held in a buffer.\"\n // spec-cite: MCP 2026-07-28 — Streamable HTTP § Receiving Messages\n //\n // Applied to EVERY revision: a buffering proxy does not care which protocol version is in the\n // body, and the failure it causes — a stream that arrives all at once at the end, or not at\n // all — looks like a server hang rather than a proxy setting. `no-transform` above already\n // asks intermediaries not to modify the payload; this asks them not to hold it.\n 'X-Accel-Buffering': 'no',\n });\n res.write(`data: ${JSON.stringify(payload)}\\n\\n`);\n res.end();\n }\n\n /\n Send a 200 JSON-RPC result — as an SSE stream when the client negotiated `text/event-stream`\n * (Streamable-HTTP response mode), else as `application/json`. Both are spec-compliant.\n /\n /\n Add the `2026-07-28` result envelope — and ONLY for a request written against it.\n \n \"All results now carry a required `resultType` field: `\"complete\"` for ordinary results […]\n * Clients MUST treat results from earlier-protocol servers that omit the field as\n * `\"complete\"`.\"\n * spec-cite: MCP 2026-07-28 — Key Changes § Major changes item 8\n \n \"Servers MUST include caching hints on results with `resultType: \"complete\"` returned by […]\n * `server/discover`, `tools/list` […]\"\n * spec-cite: MCP 2026-07-28 — Caching § Cacheable Results\n \n Gated on the revision because the envelope is the visible half of Hazard 1: stamping fields from\n * a newer revision onto a response to an older client is the mirror image of demanding headers it\n * never sends. The spec's own instruction — treat an omitted `resultType` as complete — is what\n * makes omission the correct behaviour there, not a shortcut.\n /\n private withResultEnvelope(\n result: Record<string, unknown>,\n effectiveVersion: string,\n cache?: { ttlMs: number; cacheScope: Mcp_CacheScope },\n ): Record<string, unknown> {\n if (!isStatelessMcpProtocolVersion(effectiveVersion)) return result;\n return { ...result, resultType: 'complete', ...(cache ? { ttlMs: cache.ttlMs, cacheScope: cache.cacheScope } : {}) };\n }\n\n private sendRpcResult(req: Request, res: Response, id: JsonRpcId, result: unknown): void {\n const payload = { jsonrpc: '2.0', id, result };\n if (this.acceptsEventStream(req)) { this.writeSseMessage(res, payload); return; }\n res.status(200).json(payload);\n }\n\n /\n Send a JSON-RPC error. A 200-status APPLICATION error is SSE-framed when the client negotiated it\n * (same as a result); a TRANSPORT-level error (401 / 429 / 503) is ALWAYS a plain HTTP response with\n * that status, never SSE — the client must observe it at the HTTP layer.\n /\n private sendRpcError(req: Request, res: Response, id: JsonRpcId, code: Mcp_JsonRpcErrorCode, message: string, httpStatus = 200): void {\n const payload = { jsonrpc: '2.0', id, error: { code, message } };\n if (httpStatus === 200 && this.acceptsEventStream(req)) { this.writeSseMessage(res, payload); return; }\n res.status(httpStatus).json(payload);\n }\n\n /\n RFC 9728 challenge: 401 + `WWW-Authenticate` naming the protected-resource metadata of the SERVER THE\n * CLIENT ACTUALLY ADDRESSED (transport-level; plain HTTP).\n \n The `instanceRef` is load-bearing, not cosmetic. This pointer is the ONLY discovery route a client\n * has: Wildo's PRM lives at a NON-STANDARD path (`…/mcp/<ref>/.well-known/oauth-protected-resource`\n * rather than the RFC's origin-root `/.well-known/oauth-protected-resource/<path>`), so a client cannot\n * derive it from the request URL and must follow this header. Pointing every 401 at the DEFAULT\n * metadata made named instances undiscoverable AND unusable: the client would read the default PRM,\n * mint a token for the DEFAULT audience, present it at `/mcp/<ref>`, be rejected on the audience check,\n * re-read the same default metadata, and loop forever — with each iteration looking like a plain auth\n * failure rather than a discovery bug.\n /\n private sendUnauthenticated(\n req: Request,\n res: Response,\n id: JsonRpcId,\n apiAudience: string,\n instanceRef: string \| undefined,\n message: string,\n /\n RFC 6750 § 3.1 `error` code. Supply `invalid_token` when the caller DID present a credential\n * and it failed — the distinction is actionable: a client seeing `invalid_token` refreshes, while\n * a bare challenge means \"you have not authorized yet\" and starts the whole flow. Omitted for the\n * no-credentials case, which is the bare challenge.\n /\n oauthError?: string,\n ): void {\n // `scope` accompanies the metadata pointer because it is the FIRST rung of the client's\n // scope-selection ladder — a client takes the challenge's `scope` and only falls back to the\n // protected-resource document's `scopes_supported`. Carrying neither is what left Cursor with no\n // authorization request to build on 2026-08-11, so it silently skipped the browser leg entirely.\n // The value is the identity set a delegated client is actually granted, kept identical to the\n // metadata document's so the two rungs can never disagree.\n // spec-cite: MCP 2026-07-28 — Authorization § Scope Selection Strategy; RFC 6750 § 3.\n const challengeScope = OIDC_SUPPORTED_IDENTITY_SCOPES.join(' ');\n res.set(\n 'WWW-Authenticate',\n [\n 'Bearer',\n [\n ...(oauthError ? [`error=\"${oauthError}\"`] : []),\n `resource_metadata=\"${this.mcpProtectedResourceMetadataUri(apiAudience, instanceRef)}\"`,\n `scope=\"${challengeScope}\"`,\n ].join(', '),\n ].join(' '),\n );\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.UNAUTHENTICATED, message, 401);\n }\n\n /\n The absolute RFC 9728 metadata URL for one MCP surface. Built from the SAME two route constants\n * `setupRoutes` composes the metadata routes from, so the advertised URL and the mounted route cannot\n * drift — change the constants and both move together.\n \n Note the deliberate asymmetry: the DEFAULT server's metadata hangs off the API audience root, while a\n * named instance's hangs off that instance's own audience (`…/mcp/<ref>`). That mirrors how the routes\n * are actually mounted.\n /\n private mcpProtectedResourceMetadataUri(apiAudience: string, instanceRef?: string): string {\n const metadataRoute = MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.MCP_PROTECTED_RESOURCE_METADATA];\n if (!instanceRef) return `${apiAudience}${metadataRoute}`;\n return `${apiAudience}${MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.MCP_ENDPOINT]}/${instanceRef}${metadataRoute}`;\n }\n\n /\n Transport-level throttle response: HTTP 429 + `Retry-After`, carrying a valid JSON-RPC\n * error envelope with `RATE_LIMITED`. Distinct from the 200-envelope app errors because\n * rate-limiting is a transport concern a client should honor at the HTTP layer (so never SSE).\n /\n private sendRateLimited(req: Request, res: Response, id: JsonRpcId, retryAfterSeconds: number): void {\n res.set('Retry-After', String(retryAfterSeconds));\n this.sendRpcError(req, res, id, Mcp_JsonRpcErrorCode.RATE_LIMITED, 'Rate limit exceeded; retry after the indicated delay.', 429);\n }\n\n /\n A thrown `callTool` failure → JSON-RPC error (a 200 envelope: the call transported OK, the tool\n * failed). An authorization/authentication denial (the fail-closed path) surfaces as UNAUTHENTICATED\n * so the caller sees the rejection; anything else is an INTERNAL_ERROR carrying the classified type.\n * SSE-framed when the client negotiated it (same as any 200 result).\n */\n private sendToolError(req: Request, res: Response, id: JsonRpcId, error: unknown, effectiveVersion = MCP_PROTOCOL_VERSION): void {\n const wildo = this.asWildoError(error);\n const type = wildo?.type;\n const message = (wildo?.customMessageReference as string) ?? (error instanceof Error ? error.message : 'tool execution failed');\n this.logDebug('MCP tools/call failed', { type, message });\n\n // ── THROTTLE REFUSAL ──────────────────────────────────────────────────────────────────────\n //\n // `callTool` enforces the operation's OWN declared `rateLimit` policy (the per-endpoint budget\n // the HTTP seam has always enforced, previously bypassed on this plane) and signals a refusal\n // by throwing RATE_LIMIT. That is the same EVENT the per-principal cap raises above, so it\n // must leave through the same door: HTTP 429 + `Retry-After` + JSON-RPC `RATE_LIMITED`.\n //\n // Without this branch it would fall through to the default arm and surface as a 200-framed\n // INTERNAL_ERROR — one refusal wearing two shapes, with the operator-authored one wearing the\n // shape that tells a client \"the server broke, nothing you can do\" instead of \"wait N seconds\".\n // A well-behaved agent would have retried immediately and forever.\n //\n // The retry hint rides `context.retryAfterSeconds` on the raw error (the sanitiser strips\n // context for non-VALIDATION types, so it is read BEFORE that boundary); the declared window\n // is the floor when the limiter could not report a live TTL.\n if (type === ErrorType.RATE_LIMIT) {\n const hinted = Number(wildo?.context?.retryAfterSeconds);\n this.sendRateLimited(req, res, id, Number.isFinite(hinted) && hinted > 0 ? hinted : 60);\n return;\n }\n\n // ── TOOL EXECUTION ERROR vs PROTOCOL ERROR ────────────────────────────────────────────────\n //\n // The specification splits these by WHO CAN FIX IT, and the split decides whether the agent is\n // ever shown the reason: \"Clients MAY provide protocol errors to language models, though these\n // are less likely to result in successful recovery. Clients SHOULD provide tool execution errors\n // to language models to enable self-correction.\"\n // spec-cite: MCP 2026-07-28 — Tools § Error Handling\n //\n // Every failure used to leave here as a protocol error, so a bad field produced a reply the\n // client was entitled to withhold from the model — which then retried the same call unchanged.\n if (type && MCP_TOOL_EXECUTION_ERROR_TYPES.has(type)) {\n // Sanitised through the SAME boundary the HTTP path uses, so a tool caller learns exactly what\n // a REST caller would and not one field more. That boundary deliberately preserves `zodIssues`\n // and `fieldName` for VALIDATION — the field-level detail that makes the error actionable — while\n // stripping internal context. Re-deriving a bespoke projection here would be a second disclosure\n // policy for the same errors, and the two would drift.\n const safe = wildo ? this.errorBuilder.sanitizeErrorForClient(wildo) : undefined;\n const detail = safe?.context ? ` ${JSON.stringify(safe.context)}` : '';\n this.sendRpcResult(req, res, id, this.withResultEnvelope({\n content: [{ type: 'text', text: `${message}${detail}` }],\n isError: true,\n }, effectiveVersion));\n return;\n }\n\n // Everything else stays a PROTOCOL error. AUTHENTICATION / AUTHORIZATION in particular: a client\n // opens its OAuth window on an authentication failure, so returning one as a successful result\n // carrying an apology would remove the only signal that drives authorization.\n const isAuthDenial = type === ErrorType.AUTHENTICATION \|\| type === ErrorType.AUTHORIZATION;\n const code = isAuthDenial ? Mcp_JsonRpcErrorCode.UNAUTHENTICATED : Mcp_JsonRpcErrorCode.INTERNAL_ERROR;\n const payload = { jsonrpc: '2.0', id, error: { code, message, data: type ? { type } : undefined } };\n if (this.acceptsEventStream(req)) { this.writeSseMessage(res, payload); return; }\n res.status(200).json(payload);\n }\n\n private asWildoError(error: unknown): WildoError_Backend \| undefined {\n return !!error && typeof error === 'object' && 'statusCode' in error && 'type' in error\n ? (error as WildoError_Backend)\n : undefined;\n }\n}\n"]}