@windagency/valora 2.0.1

package/dist/mcp/external-client/tool-proxy.d.ts

@@ -0,0 +1,103 @@
+/**
+ * External MCP Tool Proxy
+ *
+ * Wraps external tool calls with:
+ * - Execution timeout enforcement
+ * - Audit logging
+ * - Error handling
+ * - Risk assessment
+ */
+import type { MCPAuditLoggerService } from '../mcp-audit-logger.service.js';
+import type { MCPClientManagerService } from '../mcp-client-manager.service.js';
+import type { ExternalMCPServerConfig, ExternalMCPTool, ExternalMCPToolCallResult, MCPRiskLevel } from '../../types/mcp-client.types.js';
+/**
+ * Risk factors for tool assessment
+ */
+interface RiskAssessment {
+    factors: string[];
+    overallRisk: MCPRiskLevel;
+    score: number;
+}
+/**
+ * Tool execution options
+ */
+export interface ToolProxyOptions {
+    /** Override timeout for this call */
+    timeout_ms?: number;
+    /** Skip audit logging */
+    skipAudit?: boolean;
+    /** Allow blocked tools (for emergency use) */
+    allowBlocked?: boolean;
+}
+/**
+ * External MCP Tool Proxy
+ *
+ * Responsibilities:
+ * - Wrap external tool calls with safety measures
+ * - Enforce execution timeouts
+ * - Log all operations for auditing
+ * - Assess and report risk levels
+ */
+export declare class ExternalMCPToolProxy {
+    private clientManager;
+    private auditLogger;
+    constructor(clientManager: MCPClientManagerService, auditLogger: MCPAuditLoggerService);
+    /**
+     * Execute a tool on an external MCP server with safety measures
+     */
+    executeWithProxy(serverId: string, toolName: string, args: Record<string, unknown>, options?: ToolProxyOptions): Promise<ExternalMCPToolCallResult>;
+    /**
+     * Execute multiple tools in sequence
+     */
+    executeSequence(calls: Array<{
+        args: Record<string, unknown>;
+        serverId: string;
+        toolName: string;
+    }>, options?: ToolProxyOptions): Promise<ExternalMCPToolCallResult[]>;
+    /**
+     * Get risk assessment for a tool
+     */
+    assessToolRisk(config: ExternalMCPServerConfig, tool: ExternalMCPTool): RiskAssessment;
+    /**
+     * Assess risk based on server capabilities
+     */
+    private assessCapabilityRisk;
+    /**
+     * Assess risk based on tool name/description patterns
+     */
+    private assessToolPatternRisk;
+    /**
+     * Convert a numeric score to a risk level
+     */
+    private scoreToRiskLevel;
+    /**
+     * Get all available tools from connected servers
+     */
+    getAvailableTools(): ExternalMCPTool[];
+    /**
+     * Get tools from a specific server
+     */
+    getServerTools(serverId: string): ExternalMCPTool[];
+    /**
+     * Validate that a tool can be accessed
+     */
+    private validateToolAccess;
+    /**
+     * Execute a tool call with timeout
+     */
+    private executeWithTimeout;
+    /**
+     * Generate a unique request ID
+     */
+    private generateRequestId;
+}
+/**
+ * Get the External MCP Tool Proxy instance
+ */
+export declare function getExternalMCPToolProxy(clientManager: MCPClientManagerService, auditLogger: MCPAuditLoggerService): ExternalMCPToolProxy;
+/**
+ * Reset the singleton (for testing)
+ */
+export declare function resetExternalMCPToolProxy(): void;
+export {};
+//# sourceMappingURL=tool-proxy.d.ts.map

package/dist/mcp/external-client/tool-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-proxy.d.ts","sourceRoot":"","sources":["../../../src/mcp/external-client/tool-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EACX,uBAAuB,EACvB,eAAe,EAEf,yBAAyB,EACzB,YAAY,EACZ,MAAM,wBAAwB,CAAC;AAmBhC;;GAEG;AACH,UAAU,cAAc;IACvB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,YAAY,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,8CAA8C;IAC9C,YAAY,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,qBAAa,oBAAoB;IAE/B,OAAO,CAAC,aAAa;IACrB,OAAO,CAAC,WAAW;gBADX,aAAa,EAAE,uBAAuB,EACtC,WAAW,EAAE,qBAAqB;IAG3C;;OAEG;IACG,gBAAgB,CACrB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,GAAE,gBAAqB,GAC5B,OAAO,CAAC,yBAAyB,CAAC;IA6GrC;;OAEG;IACG,eAAe,CACpB,KAAK,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KACjB,CAAC,EACF,OAAO,GAAE,gBAAqB,GAC5B,OAAO,CAAC,yBAAyB,EAAE,CAAC;IAgBvC;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,uBAAuB,EAAE,IAAI,EAAE,eAAe,GAAG,cAAc;IAuBtF;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAyB5B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAqB7B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;OAEG;IACH,iBAAiB,IAAI,eAAe,EAAE;IAItC;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,EAAE;IAInD;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAoB1B;;OAEG;YACW,kBAAkB;IAUhC;;OAEG;IACH,OAAO,CAAC,iBAAiB;CAKzB;AAOD;;GAEG;AACH,wBAAgB,uBAAuB,CACtC,aAAa,EAAE,uBAAuB,EACtC,WAAW,EAAE,qBAAqB,GAChC,oBAAoB,CAGtB;AAED;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD"}

package/dist/mcp/external-client/tool-proxy.js

@@ -0,0 +1,291 @@
+/**
+ * External MCP Tool Proxy
+ *
+ * Wraps external tool calls with:
+ * - Execution timeout enforcement
+ * - Audit logging
+ * - Error handling
+ * - Risk assessment
+ */
+import { getLogger } from '../../output/logger.js';
+/**
+ * Risk score thresholds
+ */
+const RISK_SCORES = {
+    critical: 4,
+    high: 3,
+    low: 1,
+    medium: 2
+};
+/**
+ * Default timeout in milliseconds
+ */
+const DEFAULT_TIMEOUT_MS = 30000;
+/**
+ * External MCP Tool Proxy
+ *
+ * Responsibilities:
+ * - Wrap external tool calls with safety measures
+ * - Enforce execution timeouts
+ * - Log all operations for auditing
+ * - Assess and report risk levels
+ */
+export class ExternalMCPToolProxy {
+    clientManager;
+    auditLogger;
+    constructor(clientManager, auditLogger) {
+        this.clientManager = clientManager;
+        this.auditLogger = auditLogger;
+    }
+    /**
+     * Execute a tool on an external MCP server with safety measures
+     */
+    async executeWithProxy(serverId, toolName, args, options = {}) {
+        const logger = getLogger();
+        const requestId = this.generateRequestId();
+        const startTime = Date.now();
+        // Get server configuration
+        const server = this.clientManager.getConnectedServer(serverId);
+        if (!server) {
+            const error = `Server not connected: ${serverId}`;
+            logger.error(error);
+            return {
+                content: null,
+                duration_ms: Date.now() - startTime,
+                error,
+                requestId,
+                success: false
+            };
+        }
+        // Check if tool exists
+        const tool = server.availableTools.find((t) => t.name === toolName);
+        if (!tool) {
+            const error = `Tool not found: ${toolName}`;
+            logger.error(error, undefined, { serverId });
+            return {
+                content: null,
+                duration_ms: Date.now() - startTime,
+                error,
+                requestId,
+                success: false
+            };
+        }
+        // Validate tool access
+        const validation = this.validateToolAccess(server.config, toolName, options);
+        if (!validation.allowed) {
+            logger.warn('Tool access denied', {
+                reason: validation.reason,
+                serverId,
+                toolName
+            });
+            return {
+                content: null,
+                duration_ms: Date.now() - startTime,
+                error: validation.reason,
+                requestId,
+                success: false
+            };
+        }
+        // Assess risk
+        const risk = this.assessToolRisk(server.config, tool);
+        logger.debug('Tool risk assessment', {
+            factors: risk.factors,
+            overallRisk: risk.overallRisk,
+            riskScore: risk.score,
+            serverId,
+            toolName
+        });
+        // Determine timeout
+        const timeoutMs = options.timeout_ms ?? server.config.security.max_execution_ms ?? DEFAULT_TIMEOUT_MS;
+        logger.info('Executing external MCP tool', {
+            requestId,
+            riskLevel: risk.overallRisk,
+            serverId,
+            timeoutMs,
+            toolName
+        });
+        try {
+            // Create the request
+            const request = {
+                args,
+                requestId,
+                serverId,
+                timeout_ms: timeoutMs,
+                toolName
+            };
+            // Execute with timeout
+            const result = await this.executeWithTimeout(request, timeoutMs);
+            // Log success
+            if (!options.skipAudit) {
+                await this.auditLogger.logToolCall(serverId, toolName, result.success, result.duration_ms, result.error);
+            }
+            return result;
+        }
+        catch (error) {
+            const durationMs = Date.now() - startTime;
+            const errorMessage = error.message;
+            // Log error
+            if (!options.skipAudit) {
+                await this.auditLogger.logToolCall(serverId, toolName, false, durationMs, errorMessage);
+            }
+            return {
+                content: null,
+                duration_ms: durationMs,
+                error: errorMessage,
+                requestId,
+                success: false
+            };
+        }
+    }
+    /**
+     * Execute multiple tools in sequence
+     */
+    async executeSequence(calls, options = {}) {
+        const results = [];
+        for (const call of calls) {
+            const result = await this.executeWithProxy(call.serverId, call.toolName, call.args, options);
+            results.push(result);
+            // Stop on first failure if not explicitly continuing
+            if (!result.success) {
+                break;
+            }
+        }
+        return results;
+    }
+    /**
+     * Get risk assessment for a tool
+     */
+    assessToolRisk(config, tool) {
+        const factors = [];
+        let score = RISK_SCORES[config.security.risk_level];
+        // Base risk from server configuration
+        factors.push(`Server risk level: ${config.security.risk_level}`);
+        // Add capability-based risk factors
+        const capabilityResult = this.assessCapabilityRisk(config.security.capabilities);
+        score += capabilityResult.score;
+        factors.push(...capabilityResult.factors);
+        // Add tool-specific risk factors
+        const toolResult = this.assessToolPatternRisk(tool);
+        score += toolResult.score;
+        factors.push(...toolResult.factors);
+        // Determine overall risk level
+        const overallRisk = this.scoreToRiskLevel(score);
+        return { factors, overallRisk, score };
+    }
+    /**
+     * Assess risk based on server capabilities
+     */
+    assessCapabilityRisk(capabilities) {
+        const capabilityRisks = [
+            { capability: 'code_execution', factor: 'Can execute arbitrary code', weight: 2 },
+            { capability: 'file_system', factor: 'Has file system access', weight: 1 },
+            { capability: 'network_requests', factor: 'Can make network requests', weight: 1 },
+            { capability: 'process_spawn', factor: 'Can spawn processes', weight: 2 },
+            { capability: 'system_access', factor: 'Has system-level access', weight: 2 }
+        ];
+        let score = 0;
+        const factors = [];
+        for (const { capability, factor, weight } of capabilityRisks) {
+            if (capabilities.includes(capability)) {
+                score += weight;
+                factors.push(factor);
+            }
+        }
+        return { factors, score };
+    }
+    /**
+     * Assess risk based on tool name/description patterns
+     */
+    assessToolPatternRisk(tool) {
+        const riskyPatterns = [
+            { factor: 'Destructive operation', pattern: /delete|remove|drop|truncate/i, weight: 2 },
+            { factor: 'Command execution', pattern: /exec|run|spawn|shell/i, weight: 2 },
+            { factor: 'Modification operation', pattern: /write|create|modify/i, weight: 1 },
+            { factor: 'Data transfer', pattern: /download|upload|transfer/i, weight: 1 }
+        ];
+        let score = 0;
+        const factors = [];
+        for (const { factor, pattern, weight } of riskyPatterns) {
+            if (pattern.test(tool.name) || pattern.test(tool.description)) {
+                score += weight;
+                factors.push(factor);
+            }
+        }
+        return { factors, score };
+    }
+    /**
+     * Convert a numeric score to a risk level
+     */
+    scoreToRiskLevel(score) {
+        if (score >= 8)
+            return 'critical';
+        if (score >= 5)
+            return 'high';
+        if (score >= 3)
+            return 'medium';
+        return 'low';
+    }
+    /**
+     * Get all available tools from connected servers
+     */
+    getAvailableTools() {
+        return this.clientManager.getAllTools();
+    }
+    /**
+     * Get tools from a specific server
+     */
+    getServerTools(serverId) {
+        return this.clientManager.getServerTools(serverId);
+    }
+    /**
+     * Validate that a tool can be accessed
+     */
+    validateToolAccess(config, toolName, options) {
+        // Check blocklist
+        const blocklist = config.security.tool_blocklist ?? [];
+        if (blocklist.includes(toolName) && !options.allowBlocked) {
+            return { allowed: false, reason: `Tool is blocked by security policy: ${toolName}` };
+        }
+        // Check allowlist if defined
+        const allowlist = config.security.tool_allowlist ?? [];
+        if (allowlist.length > 0 && !allowlist.includes(toolName)) {
+            return { allowed: false, reason: `Tool not in security allowlist: ${toolName}` };
+        }
+        return { allowed: true };
+    }
+    /**
+     * Execute a tool call with timeout
+     */
+    async executeWithTimeout(request, timeoutMs) {
+        return this.clientManager.callTool({
+            ...request,
+            timeout_ms: timeoutMs
+        });
+    }
+    /**
+     * Generate a unique request ID
+     */
+    generateRequestId() {
+        const timestamp = Date.now().toString(36);
+        const random = Math.random().toString(36).substring(2, 8);
+        return `mcp-${timestamp}-${random}`;
+    }
+}
+/**
+ * Singleton instance
+ */
+let instance = null;
+/**
+ * Get the External MCP Tool Proxy instance
+ */
+export function getExternalMCPToolProxy(clientManager, auditLogger) {
+    instance ??= new ExternalMCPToolProxy(clientManager, auditLogger);
+    return instance;
+}
+/**
+ * Reset the singleton (for testing)
+ */
+export function resetExternalMCPToolProxy() {
+    instance = null;
+}
+//# sourceMappingURL=tool-proxy.js.map

package/dist/mcp/external-client/tool-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-proxy.js","sourceRoot":"","sources":["../../../src/mcp/external-client/tool-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAYH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C;;GAEG;AACH,MAAM,WAAW,GAAiC;IACjD,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;CACT,CAAC;AAEF;;GAEG;AACH,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAuBjC;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAoB;IAEvB;IACA;IAFT,YACS,aAAsC,EACtC,WAAkC;QADlC,kBAAa,GAAb,aAAa,CAAyB;QACtC,gBAAW,GAAX,WAAW,CAAuB;IACxC,CAAC;IAEJ;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACrB,QAAgB,EAChB,QAAgB,EAChB,IAA6B,EAC7B,UAA4B,EAAE;QAE9B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,2BAA2B;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,yBAAyB,QAAQ,EAAE,CAAC;YAClD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACnC,KAAK;gBACL,SAAS;gBACT,OAAO,EAAE,KAAK;aACd,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,mBAAmB,QAAQ,EAAE,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7C,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACnC,KAAK;gBACL,SAAS;gBACT,OAAO,EAAE,KAAK;aACd,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7E,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ;gBACR,QAAQ;aACR,CAAC,CAAC;YACH,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACnC,KAAK,EAAE,UAAU,CAAC,MAAM;gBACxB,SAAS;gBACT,OAAO,EAAE,KAAK;aACd,CAAC;QACH,CAAC;QAED,cAAc;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;YACpC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,KAAK;YACrB,QAAQ;YACR,QAAQ;SACR,CAAC,CAAC;QAEH,oBAAoB;QACpB,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,IAAI,kBAAkB,CAAC;QAEtG,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;YAC1C,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,WAAW;YAC3B,QAAQ;YACR,SAAS;YACT,QAAQ;SACR,CAAC,CAAC;QAEH,IAAI,CAAC;YACJ,qBAAqB;YACrB,MAAM,OAAO,GAA+B;gBAC3C,IAAI;gBACJ,SAAS;gBACT,QAAQ;gBACR,UAAU,EAAE,SAAS;gBACrB,QAAQ;aACR,CAAC;YAEF,uBAAuB;YACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAEjE,cAAc;YACd,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1G,CAAC;YAED,OAAO,MAAM,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,MAAM,YAAY,GAAI,KAAe,CAAC,OAAO,CAAC;YAE9C,YAAY;YACZ,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YACzF,CAAC;YAED,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,UAAU;gBACvB,KAAK,EAAE,YAAY;gBACnB,SAAS;gBACT,OAAO,EAAE,KAAK;aACd,CAAC;QACH,CAAC;IACF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACpB,KAIE,EACF,UAA4B,EAAE;QAE9B,MAAM,OAAO,GAAgC,EAAE,CAAC;QAEhD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7F,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAErB,qDAAqD;YACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrB,MAAM;YACP,CAAC;QACF,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAA+B,EAAE,IAAqB;QACpE,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEpD,sCAAsC;QACtC,OAAO,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAEjE,oCAAoC;QACpC,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACjF,KAAK,IAAI,gBAAgB,CAAC,KAAK,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAE1C,iCAAiC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACpD,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAEpC,+BAA+B;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAEjD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACxC,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,YAAiE;QAI7F,MAAM,eAAe,GAAkE;YACtF,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC,EAAE;YACjF,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,CAAC,EAAE;YAC1E,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,CAAC,EAAE;YAClF,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,EAAE;YACzE,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,yBAAyB,EAAE,MAAM,EAAE,CAAC,EAAE;SAC7E,CAAC;QAEF,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,KAAK,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;YAC9D,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAyE,CAAC,EAAE,CAAC;gBACtG,KAAK,IAAI,MAAM,CAAC;gBAChB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;QACF,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,IAAqB;QAClD,MAAM,aAAa,GAAG;YACrB,EAAE,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,CAAC,EAAE;YACvF,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,EAAE;YAC5E,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,CAAC,EAAE;YAChF,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,CAAC,EAAE;SAC5E,CAAC;QAEF,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,KAAK,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;YACzD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/D,KAAK,IAAI,MAAM,CAAC;gBAChB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;QACF,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,KAAa;QACrC,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,UAAU,CAAC;QAClC,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,QAAQ,CAAC;QAChC,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;OAEG;IACH,iBAAiB;QAChB,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,QAAgB;QAC9B,OAAO,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACK,kBAAkB,CACzB,MAA+B,EAC/B,QAAgB,EAChB,OAAyB;QAEzB,kBAAkB;QAClB,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,cAAc,IAAI,EAAE,CAAC;QACvD,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC3D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,QAAQ,EAAE,EAAE,CAAC;QACtF,CAAC;QAED,6BAA6B;QAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,cAAc,IAAI,EAAE,CAAC;QACvD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,QAAQ,EAAE,EAAE,CAAC;QAClF,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAC/B,OAAmC,EACnC,SAAiB;QAEjB,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;YAClC,GAAG,OAAO;YACV,UAAU,EAAE,SAAS;SACrB,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,iBAAiB;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,OAAO,OAAO,SAAS,IAAI,MAAM,EAAE,CAAC;IACrC,CAAC;CACD;AAED;;GAEG;AACH,IAAI,QAAQ,GAAgC,IAAI,CAAC;AAEjD;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACtC,aAAsC,EACtC,WAAkC;IAElC,QAAQ,KAAK,IAAI,oBAAoB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAClE,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACxC,QAAQ,GAAG,IAAI,CAAC;AACjB,CAAC"}

package/dist/mcp/external-mcp-integrator.d.ts

@@ -0,0 +1,70 @@
+/**
+ * External MCP Integrator
+ *
+ * Coordinates external MCP server connections during command execution.
+ * Handles approval workflows and connection lifecycle.
+ */
+import type { ConnectedMCPServer, ExternalMCPRequirement } from '../types/mcp-client.types.js';
+import type { MCPApprovalCacheService } from './mcp-approval-cache.service.js';
+import type { MCPApprovalWorkflow } from './mcp-approval-workflow.js';
+import type { MCPAuditLoggerService } from './mcp-audit-logger.service.js';
+import type { MCPClientManagerService } from './mcp-client-manager.service.js';
+/**
+ * Result of MCP integration check
+ */
+export interface MCPIntegrationResult {
+    /** Connected servers */
+    connectedServers: ConnectedMCPServer[];
+    /** Errors encountered during connection */
+    errors: Array<{
+        error: string;
+        serverId: string;
+    }>;
+    /** Whether all required MCPs were connected successfully */
+    success: boolean;
+}
+/**
+ * External MCP Integrator
+ *
+ * Responsibilities:
+ * - Check command MCP requirements
+ * - Trigger approval workflows for required MCPs
+ * - Connect to approved MCP servers
+ * - Handle optional vs required MCPs
+ */
+export declare class ExternalMCPIntegrator {
+    private clientManager;
+    private approvalCache;
+    private auditLogger;
+    private approvalWorkflow;
+    constructor(clientManager: MCPClientManagerService, approvalCache: MCPApprovalCacheService, auditLogger: MCPAuditLoggerService, approvalWorkflow: MCPApprovalWorkflow);
+    /**
+     * Check and connect external MCPs required by a command
+     */
+    checkAndConnectMCPs(requirements: ExternalMCPRequirement[], requestedBy: string): Promise<MCPIntegrationResult>;
+    /**
+     * Process a single MCP requirement
+     */
+    private processRequirement;
+    /**
+     * Disconnect all connected servers
+     */
+    disconnectAll(): Promise<void>;
+    /**
+     * Get all currently connected servers
+     */
+    getConnectedServers(): ConnectedMCPServer[];
+    /**
+     * Check if a specific server is connected
+     */
+    isConnected(serverId: string): boolean;
+}
+/**
+ * Get the External MCP Integrator instance
+ */
+export declare function getExternalMCPIntegrator(clientManager: MCPClientManagerService, approvalCache: MCPApprovalCacheService, auditLogger: MCPAuditLoggerService, approvalWorkflow: MCPApprovalWorkflow): ExternalMCPIntegrator;
+/**
+ * Reset the singleton (for testing)
+ */
+export declare function resetExternalMCPIntegrator(): void;
+//# sourceMappingURL=external-mcp-integrator.d.ts.map

package/dist/mcp/external-mcp-integrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-mcp-integrator.d.ts","sourceRoot":"","sources":["../../src/mcp/external-mcp-integrator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAoB,MAAM,wBAAwB,CAAC;AAI3G,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAE5E;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,wBAAwB;IACxB,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;IACvC,2CAA2C;IAC3C,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,4DAA4D;IAC5D,OAAO,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,qBAAa,qBAAqB;IAEhC,OAAO,CAAC,aAAa;IACrB,OAAO,CAAC,aAAa;IACrB,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,gBAAgB;gBAHhB,aAAa,EAAE,uBAAuB,EACtC,aAAa,EAAE,uBAAuB,EACtC,WAAW,EAAE,qBAAqB,EAClC,gBAAgB,EAAE,mBAAmB;IAG9C;;OAEG;IACG,mBAAmB,CACxB,YAAY,EAAE,sBAAsB,EAAE,EACtC,WAAW,EAAE,MAAM,GACjB,OAAO,CAAC,oBAAoB,CAAC;IAyChC;;OAEG;YACW,kBAAkB;IA4EhC;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAQpC;;OAEG;IACH,mBAAmB,IAAI,kBAAkB,EAAE;IAI3C;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;CAGtC;AAOD;;GAEG;AACH,wBAAgB,wBAAwB,CACvC,aAAa,EAAE,uBAAuB,EACtC,aAAa,EAAE,uBAAuB,EACtC,WAAW,EAAE,qBAAqB,EAClC,gBAAgB,EAAE,mBAAmB,GACnC,qBAAqB,CAGvB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}

package/dist/mcp/external-mcp-integrator.js

@@ -0,0 +1,161 @@
+/**
+ * External MCP Integrator
+ *
+ * Coordinates external MCP server connections during command execution.
+ * Handles approval workflows and connection lifecycle.
+ */
+import { getLogger } from '../output/logger.js';
+/**
+ * External MCP Integrator
+ *
+ * Responsibilities:
+ * - Check command MCP requirements
+ * - Trigger approval workflows for required MCPs
+ * - Connect to approved MCP servers
+ * - Handle optional vs required MCPs
+ */
+export class ExternalMCPIntegrator {
+    clientManager;
+    approvalCache;
+    auditLogger;
+    approvalWorkflow;
+    constructor(clientManager, approvalCache, auditLogger, approvalWorkflow) {
+        this.clientManager = clientManager;
+        this.approvalCache = approvalCache;
+        this.auditLogger = auditLogger;
+        this.approvalWorkflow = approvalWorkflow;
+    }
+    /**
+     * Check and connect external MCPs required by a command
+     */
+    async checkAndConnectMCPs(requirements, requestedBy) {
+        const logger = getLogger();
+        const connectedServers = [];
+        const errors = [];
+        if (!requirements || requirements.length === 0) {
+            return { connectedServers, errors, success: true };
+        }
+        logger.info('Checking external MCP requirements', {
+            requestedBy,
+            requirementCount: requirements.length
+        });
+        // Load the approval cache
+        await this.approvalCache.loadPersistentCache();
+        for (const requirement of requirements) {
+            const result = await this.processRequirement(requirement, requestedBy);
+            if (result.server) {
+                connectedServers.push(result.server);
+            }
+            if (result.error) {
+                errors.push({ error: result.error, serverId: requirement.serverId });
+                // If required and failed, stop processing
+                if (!requirement.optional) {
+                    logger.error('Required external MCP connection failed', undefined, {
+                        error: result.error,
+                        serverId: requirement.serverId
+                    });
+                    return { connectedServers, errors, success: false };
+                }
+            }
+        }
+        return { connectedServers, errors, success: true };
+    }
+    /**
+     * Process a single MCP requirement
+     */
+    async processRequirement(requirement, requestedBy) {
+        const logger = getLogger();
+        const { serverId } = requirement;
+        // Check if already connected
+        if (this.clientManager.isConnected(serverId)) {
+            logger.debug('Server already connected', { serverId });
+            const server = this.clientManager.getConnectedServer(serverId);
+            return { server: server ?? undefined };
+        }
+        // Get server configuration
+        const config = await this.clientManager.getServerConfig(serverId);
+        if (!config) {
+            return { error: `Server not found in registry: ${serverId}` };
+        }
+        if (config.enabled === false) {
+            return { error: `Server is disabled: ${serverId}` };
+        }
+        // Check if approval is required
+        const needsApproval = await this.clientManager.requiresApproval(serverId);
+        if (needsApproval) {
+            // Get initial tool list by attempting a temporary connection
+            // For security, we first need approval before connecting
+            const accessRequest = {
+                reason: requirement.reason,
+                requestedBy,
+                requestedTools: requirement.requiredTools,
+                serverId,
+                timestamp: new Date()
+            };
+            // Get tools list (might be empty if never connected before)
+            const existingServer = this.clientManager.getConnectedServer(serverId);
+            const availableTools = existingServer?.availableTools ?? [];
+            // Request approval
+            const approvalResult = await this.approvalWorkflow.requestApproval(config, accessRequest, availableTools);
+            // Log the approval decision
+            await this.auditLogger.logApproval(serverId, approvalResult.approved, approvalResult.decision, approvalResult.notes);
+            if (!approvalResult.approved) {
+                return { error: `User denied connection to ${config.name}` };
+            }
+            // Cache the approval
+            await this.approvalCache.cacheApproval(serverId, approvalResult, config.remember_approval);
+        }
+        // Connect to the server
+        try {
+            const server = await this.clientManager.connect(serverId);
+            // Display connection summary
+            this.approvalWorkflow.displayConnectionSummary(serverId, config.name, server.availableTools.length, true);
+            return { server };
+        }
+        catch (error) {
+            const errorMessage = error.message;
+            this.approvalWorkflow.displayError(`Failed to connect to ${config.name}`, errorMessage);
+            return { error: errorMessage };
+        }
+    }
+    /**
+     * Disconnect all connected servers
+     */
+    async disconnectAll() {
+        const servers = this.clientManager.getConnectedServers();
+        for (const server of servers) {
+            await this.clientManager.disconnect(server.serverId);
+            this.approvalWorkflow.displayDisconnectionSummary(server.config.name);
+        }
+    }
+    /**
+     * Get all currently connected servers
+     */
+    getConnectedServers() {
+        return this.clientManager.getConnectedServers();
+    }
+    /**
+     * Check if a specific server is connected
+     */
+    isConnected(serverId) {
+        return this.clientManager.isConnected(serverId);
+    }
+}
+/**
+ * Singleton instance
+ */
+let instance = null;
+/**
+ * Get the External MCP Integrator instance
+ */
+export function getExternalMCPIntegrator(clientManager, approvalCache, auditLogger, approvalWorkflow) {
+    instance ??= new ExternalMCPIntegrator(clientManager, approvalCache, auditLogger, approvalWorkflow);
+    return instance;
+}
+/**
+ * Reset the singleton (for testing)
+ */
+export function resetExternalMCPIntegrator() {
+    instance = null;
+}
+//# sourceMappingURL=external-mcp-integrator.js.map

package/dist/mcp/external-mcp-integrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-mcp-integrator.js","sourceRoot":"","sources":["../../src/mcp/external-mcp-integrator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAmB1C;;;;;;;;GAQG;AACH,MAAM,OAAO,qBAAqB;IAExB;IACA;IACA;IACA;IAJT,YACS,aAAsC,EACtC,aAAsC,EACtC,WAAkC,EAClC,gBAAqC;QAHrC,kBAAa,GAAb,aAAa,CAAyB;QACtC,kBAAa,GAAb,aAAa,CAAyB;QACtC,gBAAW,GAAX,WAAW,CAAuB;QAClC,qBAAgB,GAAhB,gBAAgB,CAAqB;IAC3C,CAAC;IAEJ;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACxB,YAAsC,EACtC,WAAmB;QAEnB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,gBAAgB,GAAyB,EAAE,CAAC;QAClD,MAAM,MAAM,GAA+C,EAAE,CAAC;QAE9D,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACpD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;YACjD,WAAW;YACX,gBAAgB,EAAE,YAAY,CAAC,MAAM;SACrC,CAAC,CAAC;QAEH,0BAA0B;QAC1B,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,EAAE,CAAC;QAE/C,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAEvE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;YAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAErE,0CAA0C;gBAC1C,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;oBAC3B,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,SAAS,EAAE;wBAClE,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,QAAQ,EAAE,WAAW,CAAC,QAAQ;qBAC9B,CAAC,CAAC;oBACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBACrD,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAC/B,WAAmC,EACnC,WAAmB;QAEnB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC;QAEjC,6BAA6B;QAC7B,IAAI,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QACxC,CAAC;QAED,2BAA2B;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,iCAAiC,QAAQ,EAAE,EAAE,CAAC;QAC/D,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,uBAAuB,QAAQ,EAAE,EAAE,CAAC;QACrD,CAAC;QAED,gCAAgC;QAChC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAE1E,IAAI,aAAa,EAAE,CAAC;YACnB,6DAA6D;YAC7D,yDAAyD;YACzD,MAAM,aAAa,GAAqB;gBACvC,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,WAAW;gBACX,cAAc,EAAE,WAAW,CAAC,aAAa;gBACzC,QAAQ;gBACR,SAAS,EAAE,IAAI,IAAI,EAAE;aACrB,CAAC;YAEF,4DAA4D;YAC5D,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACvE,MAAM,cAAc,GAAG,cAAc,EAAE,cAAc,IAAI,EAAE,CAAC;YAE5D,mBAAmB;YACnB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;YAE1G,4BAA4B;YAC5B,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CACjC,QAAQ,EACR,cAAc,CAAC,QAAQ,EACvB,cAAc,CAAC,QAAQ,EACvB,cAAc,CAAC,KAAK,CACpB,CAAC;YAEF,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,6BAA6B,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9D,CAAC;YAED,qBAAqB;YACrB,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC5F,CAAC;QAED,wBAAwB;QACxB,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAE1D,6BAA6B;YAC7B,IAAI,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAE1G,OAAO,EAAE,MAAM,EAAE,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,YAAY,GAAI,KAAe,CAAC,OAAO,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,wBAAwB,MAAM,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC;YACxF,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QAChC,CAAC;IACF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,mBAAmB,EAAE,CAAC;QACzD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrD,IAAI,CAAC,gBAAgB,CAAC,2BAA2B,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvE,CAAC;IACF,CAAC;IAED;;OAEG;IACH,mBAAmB;QAClB,OAAO,IAAI,CAAC,aAAa,CAAC,mBAAmB,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAAgB;QAC3B,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;CACD;AAED;;GAEG;AACH,IAAI,QAAQ,GAAiC,IAAI,CAAC;AAElD;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACvC,aAAsC,EACtC,aAAsC,EACtC,WAAkC,EAClC,gBAAqC;IAErC,QAAQ,KAAK,IAAI,qBAAqB,CAAC,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACpG,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B;IACzC,QAAQ,GAAG,IAAI,CAAC;AACjB,CAAC"}