@zenalexa/unicli 0.225.1 → 0.225.2

package/dist/mcp/http-transport.js

@@ -10,9 +10,15 @@
  * that. Most clients that "speak HTTP" to MCP only need request/response,
  * and starting with the simpler shape means zero new dependencies and a
  * tiny attack surface.
+ *
+ * Every request passes the shared `isOriginAllowed` DNS-rebinding guard
+ * (`./origin-guard.ts`) before routing, so a browser page on a foreign
+ * origin cannot reach the JSON-RPC dispatcher even though the socket binds
+ * to loopback.
  */
 import { createServer, } from "node:http";
 import { getAllAdapters, listCommands } from "../registry.js";
+import { isOriginAllowed } from "./origin-guard.js";
 import { handleOAuthRoute, createOAuthMiddleware } from "./oauth.js";
 import { VERSION } from "../constants.js";
 import { buildDefaultTools } from "./tools.js";
@@ -94,6 +100,16 @@ async function dispatchPost(req, res, handler) {
 export async function startHttp(handler, port, authEnabled = false) {
     const oauthMiddleware = authEnabled ? createOAuthMiddleware() : null;
     const server = createServer((req, res) => {
+        // DNS-rebinding guard: reject browser pages on a non-loopback origin
+        // before any routing, so a malicious site cannot drive tools/call.
+        if (!isOriginAllowed(req)) {
+            writeJson(res, 403, {
+                jsonrpc: "2.0",
+                id: null,
+                error: { code: -32600, message: "Forbidden: invalid Origin" },
+            });
+            return;
+        }
         if (authEnabled && handleOAuthRoute(req, res))
             return;
         if (req.method === "GET" &&
@@ -116,6 +132,9 @@ export async function startHttp(handler, port, authEnabled = false) {
             resolve();
         });
     });
-    process.stderr.write(`unicli MCP server v${VERSION} — HTTP transport on http://127.0.0.1:${port}/mcp\n`);
+    const addr = server.address();
+    const boundPort = addr && typeof addr === "object" ? addr.port : port;
+    process.stderr.write(`unicli MCP server v${VERSION} — HTTP transport on http://127.0.0.1:${boundPort}/mcp\n`);
+    return server;
 }
 //# sourceMappingURL=http-transport.js.map

package/dist/mcp/http-transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"http-transport.js","sourceRoot":"","sources":["../../src/mcp/http-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,YAAY,GAGb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,OAAO;AAEnC,SAAS,SAAS,CAAC,GAAmB,EAAE,IAAY,EAAE,OAAgB;IACpE,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC5D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,WAAW,CAAC,GAAmB;IACtC,MAAM,YAAY,GAAG,cAAc,EAAE,CAAC,MAAM,CAAC;IAC7C,MAAM,YAAY,GAAG,YAAY,EAAE,CAAC,MAAM,CAAC;IAC3C,MAAM,gBAAgB,GAAG,iBAAiB,EAAE,CAAC,MAAM,CAAC;IACpD,MAAM,aAAa,GAAG,YAAY,GAAG,gBAAgB,CAAC;IACtD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;QAClB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,YAAY;QACtB,KAAK,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE;QAC7D,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAoB,EACpB,GAAmB;IAEnB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QAClD,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;YACzB,IAAI,QAAQ,GAAG,QAAQ,EAAE,CAAC;gBACxB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;oBAClB,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE;iBACtD,CAAC,CAAC;gBACH,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAoB,EACpB,GAAmB,EACnB,OAAwC;IAExC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,IAAI;YACrB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,OAAO,EAAE,EAAE;SAC/D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAwC,EACxC,IAAY,EACZ,WAAW,GAAG,KAAK;IAEnB,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAErE,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,IAAI,WAAW,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACtD,IACE,GAAG,CAAC,MAAM,KAAK,KAAK;YACpB,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,EAChE,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;YAChD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,IAAI,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACxC,KAAK,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sBAAsB,OAAO,yCAAyC,IAAI,QAAQ,CACnF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"http-transport.js","sourceRoot":"","sources":["../../src/mcp/http-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EACL,YAAY,GAIb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,OAAO;AAEnC,SAAS,SAAS,CAAC,GAAmB,EAAE,IAAY,EAAE,OAAgB;IACpE,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC5D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,WAAW,CAAC,GAAmB;IACtC,MAAM,YAAY,GAAG,cAAc,EAAE,CAAC,MAAM,CAAC;IAC7C,MAAM,YAAY,GAAG,YAAY,EAAE,CAAC,MAAM,CAAC;IAC3C,MAAM,gBAAgB,GAAG,iBAAiB,EAAE,CAAC,MAAM,CAAC;IACpD,MAAM,aAAa,GAAG,YAAY,GAAG,gBAAgB,CAAC;IACtD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;QAClB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,YAAY;QACtB,KAAK,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE;QAC7D,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAoB,EACpB,GAAmB;IAEnB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QAClD,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;YACzB,IAAI,QAAQ,GAAG,QAAQ,EAAE,CAAC;gBACxB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;oBAClB,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE;iBACtD,CAAC,CAAC;gBACH,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAoB,EACpB,GAAmB,EACnB,OAAwC;IAExC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,IAAI;YACrB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,OAAO,EAAE,EAAE;SAC/D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAwC,EACxC,IAAY,EACZ,WAAW,GAAG,KAAK;IAEnB,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAErE,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,qEAAqE;QACrE,mEAAmE;QACnE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;gBAClB,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE;aAC9D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,WAAW,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACtD,IACE,GAAG,CAAC,MAAM,KAAK,KAAK;YACpB,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,EAChE,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;YAChD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,IAAI,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACxC,KAAK,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sBAAsB,OAAO,yCAAyC,SAAS,QAAQ,CACxF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/mcp/jsonrpc.d.ts

@@ -0,0 +1,27 @@
+/**
+ * JSON-RPC 2.0 wire types — single source of truth for the MCP surface.
+ *
+ * The request/response envelope is shared by the dispatcher (`handler.ts`)
+ * and every transport (stdio, legacy HTTP, Streamable HTTP). Defining it
+ * once here keeps the transports from re-declaring drifting copies, the same
+ * class of divergence that left the legacy HTTP transport without an origin
+ * guard. Both `handler.ts` and `streamable-http/session.ts` re-export these
+ * so existing import paths stay stable.
+ */
+export interface JsonRpcRequest {
+    jsonrpc: "2.0";
+    id?: number | string | null;
+    method: string;
+    params?: Record<string, unknown>;
+}
+export interface JsonRpcResponse {
+    jsonrpc: "2.0";
+    id: number | string | null;
+    result?: unknown;
+    error?: {
+        code: number;
+        message: string;
+        data?: unknown;
+    };
+}
+//# sourceMappingURL=jsonrpc.d.ts.map

package/dist/mcp/jsonrpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonrpc.d.ts","sourceRoot":"","sources":["../../src/mcp/jsonrpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC3D"}

package/dist/mcp/jsonrpc.js

@@ -0,0 +1,12 @@
+/**
+ * JSON-RPC 2.0 wire types — single source of truth for the MCP surface.
+ *
+ * The request/response envelope is shared by the dispatcher (`handler.ts`)
+ * and every transport (stdio, legacy HTTP, Streamable HTTP). Defining it
+ * once here keeps the transports from re-declaring drifting copies, the same
+ * class of divergence that left the legacy HTTP transport without an origin
+ * guard. Both `handler.ts` and `streamable-http/session.ts` re-export these
+ * so existing import paths stay stable.
+ */
+export {};
+//# sourceMappingURL=jsonrpc.js.map

package/dist/mcp/jsonrpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonrpc.js","sourceRoot":"","sources":["../../src/mcp/jsonrpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/mcp/origin-guard.d.ts

@@ -0,0 +1,26 @@
+/**
+ * MCP origin guard — DNS-rebinding protection shared by every HTTP transport.
+ *
+ * A local MCP server bound to loopback is unreachable from the network but
+ * still reachable from a browser the user is running: a malicious page can
+ * issue a CORS "simple request" to http://127.0.0.1:<port>/mcp. The browser
+ * attaches the page's `Origin` and the page's script cannot forge or suppress
+ * it, so validating `Origin` is the spec-mandated defense against that pivot.
+ *
+ * This is the single source of truth for the policy. Both the legacy
+ * `http-transport.ts` and the Streamable HTTP transport import it so the two
+ * paths can never drift apart again.
+ */
+import type { IncomingMessage } from "node:http";
+/** Origins explicitly trusted regardless of the loopback-hostname check. */
+export declare const ALLOWED_ORIGINS: Set<string>;
+/**
+ * Validate the `Origin` header for DNS-rebinding protection.
+ *
+ * Requests with no `Origin` are non-browser clients (CLI, MCP host, curl) and
+ * are allowed — a browser cannot omit `Origin` on a cross-origin request, so
+ * this does not weaken the browser-threat defense. Any loopback origin is
+ * allowed regardless of port; everything else is rejected.
+ */
+export declare function isOriginAllowed(req: IncomingMessage): boolean;
+//# sourceMappingURL=origin-guard.d.ts.map

package/dist/mcp/origin-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-guard.d.ts","sourceRoot":"","sources":["../../src/mcp/origin-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD,4EAA4E;AAC5E,eAAO,MAAM,eAAe,aAG1B,CAAC;AAEH;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAY7D"}

package/dist/mcp/origin-guard.js

@@ -0,0 +1,42 @@
+/**
+ * MCP origin guard — DNS-rebinding protection shared by every HTTP transport.
+ *
+ * A local MCP server bound to loopback is unreachable from the network but
+ * still reachable from a browser the user is running: a malicious page can
+ * issue a CORS "simple request" to http://127.0.0.1:<port>/mcp. The browser
+ * attaches the page's `Origin` and the page's script cannot forge or suppress
+ * it, so validating `Origin` is the spec-mandated defense against that pivot.
+ *
+ * This is the single source of truth for the policy. Both the legacy
+ * `http-transport.ts` and the Streamable HTTP transport import it so the two
+ * paths can never drift apart again.
+ */
+/** Origins explicitly trusted regardless of the loopback-hostname check. */
+export const ALLOWED_ORIGINS = new Set([
+    "http://localhost",
+    "http://127.0.0.1",
+]);
+/**
+ * Validate the `Origin` header for DNS-rebinding protection.
+ *
+ * Requests with no `Origin` are non-browser clients (CLI, MCP host, curl) and
+ * are allowed — a browser cannot omit `Origin` on a cross-origin request, so
+ * this does not weaken the browser-threat defense. Any loopback origin is
+ * allowed regardless of port; everything else is rejected.
+ */
+export function isOriginAllowed(req) {
+    const origin = req.headers.origin;
+    if (!origin)
+        return true; // Non-browser clients omit Origin
+    try {
+        const url = new URL(origin);
+        if (url.hostname === "localhost" || url.hostname === "127.0.0.1") {
+            return true;
+        }
+    }
+    catch {
+        // Malformed origin — reject
+    }
+    return ALLOWED_ORIGINS.has(origin);
+}
+//# sourceMappingURL=origin-guard.js.map

package/dist/mcp/origin-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin-guard.js","sourceRoot":"","sources":["../../src/mcp/origin-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IACrC,kBAAkB;IAClB,kBAAkB;CACnB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,GAAoB;IAClD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,CAAC,kCAAkC;IAC5D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;IACD,OAAO,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/mcp/profiles/computer-use.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"computer-use.d.ts","sourceRoot":"","sources":["../../../src/mcp/profiles/computer-use.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AA+XtD,eAAO,MAAM,oBAAoB,EAAE,SAAS,EAc3C,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,OAAO,EAsCrC,CAAC"}
+{"version":3,"file":"computer-use.d.ts","sourceRoot":"","sources":["../../../src/mcp/profiles/computer-use.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAuHtD,eAAO,MAAM,oBAAoB,EAAE,SAAS,EAc3C,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,OAAO,EAsCrC,CAAC"}

package/dist/mcp/profiles/computer-use.js

@@ -4,57 +4,13 @@ import { captureComputeContext } from "../../compute/capture.js";
 import { copyReferenceMarkupToClipboard, saveComputeCaptureReference, } from "../../compute/capture-reference.js";
 import { createPlatformComputeOverlayProvider } from "../../compute/platform-overlays.js";
 import { buildComputeActionVisualEvidence } from "../../compute/visual-timeline.js";
+import { buildComputeInputSchema, getComputeCommandContract, } from "../../compute/contracts.js";
 import { err, exitCodeFor } from "../../core/envelope.js";
-const REF = {
-    type: "string",
-    description: 'Element ref returned by computer-use.snapshot or computer-use.find, e.g. "@e7"',
-};
-const APP = {
-    type: "string",
-    description: 'App name, bundle id, or process name, e.g. "Slack"',
-};
-const FOCUS = { type: "boolean", default: false };
-const OVERLAY = {
-    type: "boolean",
-    default: false,
-    description: "Render the system-level virtual cursor HUD for this action.",
-};
 const DEFINITIONS = [
+    computeToolDef("apps"),
+    computeToolDef("windows"),
     {
-        suffix: "apps",
-        description: "List currently running applications visible to the native computer-control layer.",
-        kind: "compute_apps",
-        inputSchema: { type: "object", properties: {} },
-        readOnly: true,
-    },
-    {
-        suffix: "windows",
-        description: "List top-level windows, optionally scoped to an app.",
-        kind: "compute_windows",
-        inputSchema: { type: "object", properties: { app: APP } },
-        readOnly: true,
-    },
-    {
-        suffix: "capture",
-        description: "Capture a reusable app context packet with snapshot refs and/or screenshot evidence.",
-        kind: "compute_capture",
-        inputSchema: {
-            type: "object",
-            properties: {
-                app: APP,
-                include: { type: "string", default: "snapshot,screenshot" },
-                format: {
-                    type: "string",
-                    enum: ["compact", "tree", "json"],
-                    default: "compact",
-                },
-                maxDepth: { type: "integer", default: 64 },
-                screenshotPath: { type: "string" },
-                saveReference: { type: "boolean", default: false },
-                copyReference: { type: "boolean", default: false },
-                referenceRoot: { type: "string" },
-            },
-        },
+        ...computeToolDef("capture"),
         handler: async (input, def) => {
             const format = readCaptureFormat(input.format);
             if (!format.ok) {
@@ -119,234 +75,25 @@ const DEFINITIONS = [
             }, def);
         },
     },
+    computeToolDef("snapshot"),
+    computeToolDef("find"),
+    computeToolDef("click"),
+    computeToolDef("type"),
+    computeToolDef("press"),
+    computeToolDef("scroll"),
+    computeToolDef("launch"),
+    computeToolDef("screenshot"),
+    computeToolDef("attach"),
     {
-        suffix: "snapshot",
-        description: "Capture a compact accessibility snapshot. Use returned @e refs for later actions.",
-        kind: "compute_snapshot",
-        inputSchema: {
-            type: "object",
-            properties: {
-                app: APP,
-                format: {
-                    type: "string",
-                    enum: ["compact", "tree", "json"],
-                    default: "compact",
-                },
-                interactiveOnly: { type: "boolean", default: false },
-                maxDepth: { type: "integer", default: 64 },
-            },
-        },
-        readOnly: true,
-    },
-    {
-        suffix: "find",
-        description: "Find elements from the latest snapshot by role, name, or visible/current text value.",
-        kind: "compute_find",
-        inputSchema: {
-            type: "object",
-            properties: {
-                role: {
-                    type: "string",
-                    enum: [
-                        "button",
-                        "input",
-                        "textarea",
-                        "text",
-                        "menuitem",
-                        "checkbox",
-                        "radio",
-                        "link",
-                        "image",
-                        "window",
-                        "group",
-                        "list",
-                        "listitem",
-                        "tab",
-                        "tree",
-                        "treeitem",
-                        "slider",
-                        "combobox",
-                        "spinbutton",
-                    ],
-                },
-                name: { type: "string" },
-                text: { type: "string" },
-                app: APP,
-                first: { type: "boolean", default: false },
-            },
-            required: ["role"],
-        },
-        readOnly: true,
-    },
-    {
-        suffix: "click",
-        description: "Click an element by ref.",
-        kind: "compute_click",
-        inputSchema: {
-            type: "object",
-            properties: {
-                ref: REF,
-                button: { type: "string", enum: ["left", "right", "middle"] },
-                double: { type: "boolean", default: false },
-                focus: FOCUS,
-                overlay: OVERLAY,
-            },
-            required: ["ref"],
-        },
-    },
-    {
-        suffix: "type",
-        description: "Type text into an element ref.",
-        kind: "compute_type",
-        inputSchema: {
-            type: "object",
-            properties: {
-                ref: REF,
-                text: { type: "string" },
-                clear: { type: "boolean", default: false },
-                focus: FOCUS,
-                overlay: OVERLAY,
-            },
-            required: ["ref", "text"],
-        },
-    },
-    {
-        suffix: "press",
-        description: 'Press a keyboard combo, e.g. "cmd+s" or "ctrl+shift+p".',
-        kind: "compute_press",
-        inputSchema: {
-            type: "object",
-            properties: {
-                combo: { type: "string" },
-                app: APP,
-                focus: FOCUS,
-            },
-            required: ["combo"],
-        },
-    },
-    {
-        suffix: "scroll",
-        description: "Scroll an element or the active view.",
-        kind: "compute_scroll",
-        inputSchema: {
-            type: "object",
-            properties: {
-                ref: REF,
-                direction: {
-                    type: "string",
-                    enum: ["up", "down", "left", "right"],
-                    default: "down",
-                },
-                amount: { type: "integer", default: 300 },
-                focus: FOCUS,
-                overlay: OVERLAY,
-            },
-        },
-    },
-    {
-        suffix: "launch",
-        description: "Launch an app by name, bundle id, process name, or path.",
-        kind: "compute_launch",
-        inputSchema: {
-            type: "object",
-            properties: {
-                app: APP,
-                debugPort: { type: "integer" },
-            },
-            required: ["app"],
-        },
-    },
-    {
-        suffix: "screenshot",
-        description: "Capture a pixel screenshot. Prefer snapshot unless accessibility data is unavailable.",
-        kind: "compute_screenshot",
-        inputSchema: {
-            type: "object",
-            properties: {
-                app: APP,
-                path: { type: "string", description: "Optional output path" },
-            },
-        },
-        readOnly: true,
-    },
-    {
-        suffix: "attach",
-        description: "Attach to an Electron app or explicit CDP port.",
-        kind: "compute_cdp_attach",
-        inputSchema: {
-            type: "object",
-            properties: {
-                app: APP,
-                port: { type: "integer" },
-                confirmRelaunch: { type: "boolean", default: false },
-            },
-        },
-    },
-    {
-        suffix: "evaluate",
-        description: "Run JavaScript in the attached CDP renderer.",
-        kind: "compute_evaluate",
-        inputSchema: {
-            type: "object",
-            properties: {
-                js: { type: "string" },
-                targetId: { type: "string" },
-            },
-            required: ["js"],
-        },
+        ...computeToolDef("eval"),
         transform: (input) => ({
             ...input,
             ...(typeof input.js === "string" ? { script: input.js } : {}),
         }),
     },
-    {
-        suffix: "wait",
-        description: "Wait for a ref, text, or state condition.",
-        kind: "compute_wait",
-        inputSchema: {
-            type: "object",
-            properties: {
-                ref: REF,
-                text: { type: "string" },
-                app: APP,
-                state: { type: "string", enum: ["appear", "disappear", "focused"] },
-                timeoutMs: { type: "integer", default: 10_000 },
-            },
-        },
-        readOnly: true,
-    },
-    {
-        suffix: "observe",
-        description: "Rank candidate refs for a natural-language goal from the latest snapshot.",
-        kind: "compute_observe",
-        inputSchema: {
-            type: "object",
-            properties: {
-                goal: { type: "string" },
-                app: APP,
-                topK: { type: "integer", default: 5 },
-            },
-            required: ["goal"],
-        },
-        readOnly: true,
-    },
-    {
-        suffix: "assert",
-        description: "Assert a UI condition by ref, text, or state.",
-        kind: "compute_assert",
-        inputSchema: {
-            type: "object",
-            properties: {
-                ref: REF,
-                text: { type: "string" },
-                state: {
-                    type: "string",
-                    enum: ["enabled", "focused", "checked", "visible"],
-                },
-            },
-        },
-        readOnly: true,
-    },
+    computeToolDef("wait"),
+    computeToolDef("observe"),
+    computeToolDef("assert"),
 ];
 export const COMPUTER_USE_PROMPTS = [
     {
@@ -394,6 +141,19 @@ export const COMPUTER_USE_TOOLS = DEFINITIONS.map((def) => ({
         }
     },
 }));
+function computeToolDef(command) {
+    const contract = getComputeCommandContract(command);
+    if (!contract) {
+        throw new Error(`missing compute command contract for ${command}`);
+    }
+    return {
+        suffix: contract.mcpSuffix,
+        description: contract.description,
+        kind: contract.kind,
+        inputSchema: buildComputeInputSchema(contract.args),
+        readOnly: contract.readOnly,
+    };
+}
 function actionResultToMcp(result, def, params = {}, evidence) {
     const data = result.ok ? result.data : result.error;
     const transport = result.ok

package/dist/mcp/profiles/computer-use.js.map

@@ -1 +1 @@
-{"version":3,"file":"computer-use.js","sourceRoot":"","sources":["../../../src/mcp/profiles/computer-use.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EACL,oBAAoB,GAErB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,oCAAoC,EAAE,MAAM,oCAAoC,CAAC;AAC1F,OAAO,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAK1D,MAAM,GAAG,GAAG;IACV,IAAI,EAAE,QAAQ;IACd,WAAW,EACT,gFAAgF;CACnF,CAAC;AAEF,MAAM,GAAG,GAAG;IACV,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,oDAAoD;CAClE,CAAC;AAEF,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAClD,MAAM,OAAO,GAAG;IACd,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,KAAK;IACd,WAAW,EAAE,6DAA6D;CAC3E,CAAC;AAcF,MAAM,WAAW,GAAc;IAC7B;QACE,MAAM,EAAE,MAAM;QACd,WAAW,EACT,mFAAmF;QACrF,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;QAC/C,QAAQ,EAAE,IAAI;KACf;IACD;QACE,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,sDAAsD;QACnE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACzD,QAAQ,EAAE,IAAI;KACf;IACD;QACE,MAAM,EAAE,SAAS;QACjB,WAAW,EACT,sFAAsF;QACxF,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,GAAG;gBACR,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE;gBAC3D,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;oBACjC,OAAO,EAAE,SAAS;iBACnB;gBACD,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC1C,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAClC,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;gBAClD,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;gBAClD,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAClC;SACF;QACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,iBAAiB,CACtB,GAAG,CAAC;oBACF,SAAS,EAAE,YAAY;oBACvB,IAAI,EAAE,CAAC;oBACP,MAAM,EAAE,iBAAiB;oBACzB,MAAM,EAAE,4BAA4B,MAAM,CAAC,KAAK,EAAE;oBAClD,UAAU,EAAE,mCAAmC;oBAC/C,kBAAkB,EAAE,iBAAiB;oBACrC,SAAS,EAAE,WAAW,CAAC,aAAa,CAAC;iBACtC,CAAC,EACF,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,EAAE;gBACnD,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;oBACnC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;oBAC5B,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,QAAQ,EACN,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;oBACnE,CAAC,CAAC,KAAK,CAAC,QAAQ;oBAChB,CAAC,CAAC,EAAE;gBACR,GAAG,CAAC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;oBAC1C,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;oBAC1C,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YACH,MAAM,mBAAmB,GACvB,KAAK,CAAC,aAAa,KAAK,IAAI,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACvC,OAAO,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,aAAa,GACjB,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa;gBAC5D,CAAC,CAAC,KAAK,CAAC,aAAa;gBACrB,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,SAAS,GAAG,MAAM,2BAA2B,CACjD,MAAM,CAAC,IAAI,EACX,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAChD,CAAC;YACF,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,8BAA8B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACzD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,iBAAiB,CACtB,GAAG,CAAC;wBACF,SAAS,EAAE,YAAY;wBACvB,IAAI,EAAE,CAAC;wBACP,MAAM,EAAE,gCAAgC;wBACxC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC;wBAC3B,UAAU,EACR,gEAAgE;wBAClE,kBAAkB,EAAE,gCAAgC;wBACpD,SAAS,EAAE,WAAW,CAAC,qBAAqB,CAAC;qBAC9C,CAAC,EACF,GAAG,CACJ,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,iBAAiB,CACtB;gBACE,GAAG,MAAM;gBACT,IAAI,EAAE;oBACJ,GAAG,MAAM,CAAC,IAAI;oBACd,SAAS,EAAE;wBACT,GAAG,SAAS;wBACZ,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,IAAI;4BAC9B,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;4BAC7B,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF;aACF,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;KACF;IACD;QACE,MAAM,EAAE,UAAU;QAClB,WAAW,EACT,mFAAmF;QACrF,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,GAAG;gBACR,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;oBACjC,OAAO,EAAE,SAAS;iBACnB;gBACD,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;gBACpD,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE;aAC3C;SACF;QACD,QAAQ,EAAE,IAAI;KACf;IACD;QACE,MAAM,EAAE,MAAM;QACd,WAAW,EACT,sFAAsF;QACxF,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE;wBACJ,QAAQ;wBACR,OAAO;wBACP,UAAU;wBACV,MAAM;wBACN,UAAU;wBACV,UAAU;wBACV,OAAO;wBACP,MAAM;wBACN,OAAO;wBACP,QAAQ;wBACR,OAAO;wBACP,MAAM;wBACN,UAAU;wBACV,KAAK;wBACL,MAAM;wBACN,UAAU;wBACV,QAAQ;wBACR,UAAU;wBACV,YAAY;qBACb;iBACF;gBACD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,GAAG,EAAE,GAAG;gBACR,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;aAC3C;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;QACD,QAAQ,EAAE,IAAI;KACf;IACD;QACE,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0BAA0B;QACvC,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,GAAG;gBACR,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;gBAC7D,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC3C,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,OAAO;aACjB;YACD,QAAQ,EAAE,CAAC,KAAK,CAAC;SAClB;KACF;IACD;QACE,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,gCAAgC;QAC7C,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,GAAG;gBACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC1C,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,OAAO;aACjB;YACD,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;SAC1B;KACF;IACD;QACE,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,yDAAyD;QACtE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,GAAG,EAAE,GAAG;gBACR,KAAK,EAAE,KAAK;aACb;YACD,QAAQ,EAAE,CAAC,OAAO,CAAC;SACpB;KACF;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,uCAAuC;QACpD,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,GAAG;gBACR,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;oBACrC,OAAO,EAAE,MAAM;iBAChB;gBACD,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE;gBACzC,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,OAAO;aACjB;SACF;KACF;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,0DAA0D;QACvE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,GAAG;gBACR,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;aAC/B;YACD,QAAQ,EAAE,CAAC,KAAK,CAAC;SAClB;KACF;IACD;QACE,MAAM,EAAE,YAAY;QACpB,WAAW,EACT,uFAAuF;QACzF,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,GAAG;gBACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;aAC9D;SACF;QACD,QAAQ,EAAE,IAAI;KACf;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,iDAAiD;QAC9D,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,GAAG;gBACR,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBACzB,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;aACrD;SACF;KACF;IACD;QACE,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,8CAA8C;QAC3D,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACtB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC7B;YACD,QAAQ,EAAE,CAAC,IAAI,CAAC;SACjB;QACD,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACrB,GAAG,KAAK;YACR,GAAG,CAAC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC;KACH;IACD;QACE,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,2CAA2C;QACxD,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,GAAG;gBACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,GAAG,EAAE,GAAG;gBACR,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE;gBACnE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;aAChD;SACF;QACD,QAAQ,EAAE,IAAI;KACf;IACD;QACE,MAAM,EAAE,SAAS;QACjB,WAAW,EACT,2EAA2E;QAC7E,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,GAAG,EAAE,GAAG;gBACR,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;aACtC;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;QACD,QAAQ,EAAE,IAAI;KACf;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,+CAA+C;QAC5D,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,GAAG;gBACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;iBACnD;aACF;SACF;QACD,QAAQ,EAAE,IAAI;KACf;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAC/C;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,mDAAmD;QAChE,IAAI,EAAE;YACJ,mDAAmD;YACnD,mFAAmF;YACnF,gFAAgF;YAChF,iHAAiH;YACjH,gEAAgE;YAChE,qFAAqF;YACrF,iFAAiF;SAClF,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAc,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrE,IAAI,EAAE,gBAAgB,GAAG,CAAC,MAAM,EAAE;IAClC,WAAW,EAAE,GAAG,CAAC,WAAW;IAC5B,WAAW,EAAE,GAAG,CAAC,WAAW;IAC5B,WAAW,EAAE;QACX,YAAY,EAAE,GAAG,CAAC,QAAQ,IAAI,KAAK;QACnC,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,GAAG,CAAC,QAAQ,IAAI,KAAK;KACtC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,eAAe,GACnB,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,oCAAoC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAC1C,MAAM,EAAE,EACR;gBACE,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM;aACP,EACD;gBACE,IAAI,EAAE,gBAAgB,GAAG,CAAC,MAAM,EAAE;gBAClC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD,CACF,CAAC;YACF,OAAO,iBAAiB,CACtB,SAAS,CAAC,MAAM,EAChB,GAAG,EACH,MAAM,EACN,SAAS,CAAC,QAAQ,CACnB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;CACF,CAAC,CAAC,CAAC;AAEJ,SAAS,iBAAiB,CACxB,MAA6B,EAC7B,GAAY,EACZ,SAAiB,EAAE,EACnB,QAA6C;IAE7C,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IACpD,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE;QACzB,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC;QAClC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;IAC3B,MAAM,iBAAiB,GAAG,gCAAgC,CAAC;QACzD,IAAI,EAAE,gBAAgB,GAAG,CAAC,MAAM,EAAE;QAClC,MAAM,EAAE,GAAG,CAAC,IAAI;QAChB,MAAM;QACN,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,cAAc,GAClB,wBAAwB,CAAC,IAAI,CAAC;QAC9B,QAAQ,EAAE,eAAe;QACzB,iBAAiB,CAAC,eAAe,CAAC;IACpC,MAAM,YAAY,GAChB,sBAAsB,CAAC,IAAI,CAAC;QAC5B,QAAQ,EAAE,aAAa;QACvB,iBAAiB,CAAC,aAAa,CAAC;IAClC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAChE,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QACzC,KAAK,EAAE;YACL,QAAQ,EAAE;gBACR,aAAa,EAAE,qBAAqB;gBACpC,IAAI,EAAE,gBAAgB,GAAG,CAAC,MAAM,EAAE;gBAClC,MAAM,EAAE,GAAG,CAAC,IAAI;gBAChB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,eAAe,EAAE,cAAc;gBAC/B,aAAa,EAAE,YAAY;gBAC3B,GAAG,CAAC,MAAM,CAAC,EAAE;oBACX,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;wBACjC,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB;wBACnD,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;wBACjC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;qBAClC,CAAC;aACP;SACF;QACD,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAa;IACxC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5E,OAAO,IAAI,CAAC,SAAS,CAAC;AACxB,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAa;IAC7C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,OAAO,IAAI,CAAC,eAAe,CAAC;AAC9B,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAa;IAC3C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,OAAO,IAAI,CAAC,aAAa,CAAC;AAC5B,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc;IAIxC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IACpC,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,OAAO,KAAK,IAAI;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAc;IAId,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC/D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"computer-use.js","sourceRoot":"","sources":["../../../src/mcp/profiles/computer-use.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EACL,oBAAoB,GAErB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,oCAAoC,EAAE,MAAM,oCAAoC,CAAC;AAC1F,OAAO,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EACL,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAiB1D,MAAM,WAAW,GAAc;IAC7B,cAAc,CAAC,MAAM,CAAC;IACtB,cAAc,CAAC,SAAS,CAAC;IACzB;QACE,GAAG,cAAc,CAAC,SAAS,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,iBAAiB,CACtB,GAAG,CAAC;oBACF,SAAS,EAAE,YAAY;oBACvB,IAAI,EAAE,CAAC;oBACP,MAAM,EAAE,iBAAiB;oBACzB,MAAM,EAAE,4BAA4B,MAAM,CAAC,KAAK,EAAE;oBAClD,UAAU,EAAE,mCAAmC;oBAC/C,kBAAkB,EAAE,iBAAiB;oBACrC,SAAS,EAAE,WAAW,CAAC,aAAa,CAAC;iBACtC,CAAC,EACF,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,EAAE;gBACnD,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;oBACnC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;oBAC5B,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,QAAQ,EACN,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;oBACnE,CAAC,CAAC,KAAK,CAAC,QAAQ;oBAChB,CAAC,CAAC,EAAE;gBACR,GAAG,CAAC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;oBAC1C,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;oBAC1C,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YACH,MAAM,mBAAmB,GACvB,KAAK,CAAC,aAAa,KAAK,IAAI,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACvC,OAAO,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,aAAa,GACjB,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa;gBAC5D,CAAC,CAAC,KAAK,CAAC,aAAa;gBACrB,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,SAAS,GAAG,MAAM,2BAA2B,CACjD,MAAM,CAAC,IAAI,EACX,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAChD,CAAC;YACF,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,8BAA8B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACzD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,iBAAiB,CACtB,GAAG,CAAC;wBACF,SAAS,EAAE,YAAY;wBACvB,IAAI,EAAE,CAAC;wBACP,MAAM,EAAE,gCAAgC;wBACxC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC;wBAC3B,UAAU,EACR,gEAAgE;wBAClE,kBAAkB,EAAE,gCAAgC;wBACpD,SAAS,EAAE,WAAW,CAAC,qBAAqB,CAAC;qBAC9C,CAAC,EACF,GAAG,CACJ,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,iBAAiB,CACtB;gBACE,GAAG,MAAM;gBACT,IAAI,EAAE;oBACJ,GAAG,MAAM,CAAC,IAAI;oBACd,SAAS,EAAE;wBACT,GAAG,SAAS;wBACZ,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,IAAI;4BAC9B,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;4BAC7B,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF;aACF,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;KACF;IACD,cAAc,CAAC,UAAU,CAAC;IAC1B,cAAc,CAAC,MAAM,CAAC;IACtB,cAAc,CAAC,OAAO,CAAC;IACvB,cAAc,CAAC,MAAM,CAAC;IACtB,cAAc,CAAC,OAAO,CAAC;IACvB,cAAc,CAAC,QAAQ,CAAC;IACxB,cAAc,CAAC,QAAQ,CAAC;IACxB,cAAc,CAAC,YAAY,CAAC;IAC5B,cAAc,CAAC,QAAQ,CAAC;IACxB;QACE,GAAG,cAAc,CAAC,MAAM,CAAC;QACzB,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACrB,GAAG,KAAK;YACR,GAAG,CAAC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC;KACH;IACD,cAAc,CAAC,MAAM,CAAC;IACtB,cAAc,CAAC,SAAS,CAAC;IACzB,cAAc,CAAC,QAAQ,CAAC;CACzB,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAC/C;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,mDAAmD;QAChE,IAAI,EAAE;YACJ,mDAAmD;YACnD,mFAAmF;YACnF,gFAAgF;YAChF,iHAAiH;YACjH,gEAAgE;YAChE,qFAAqF;YACrF,iFAAiF;SAClF,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAc,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrE,IAAI,EAAE,gBAAgB,GAAG,CAAC,MAAM,EAAE;IAClC,WAAW,EAAE,GAAG,CAAC,WAAW;IAC5B,WAAW,EAAE,GAAG,CAAC,WAAW;IAC5B,WAAW,EAAE;QACX,YAAY,EAAE,GAAG,CAAC,QAAQ,IAAI,KAAK;QACnC,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,GAAG,CAAC,QAAQ,IAAI,KAAK;KACtC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,eAAe,GACnB,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,oCAAoC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAC1C,MAAM,EAAE,EACR;gBACE,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM;aACP,EACD;gBACE,IAAI,EAAE,gBAAgB,GAAG,CAAC,MAAM,EAAE;gBAClC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD,CACF,CAAC;YACF,OAAO,iBAAiB,CACtB,SAAS,CAAC,MAAM,EAChB,GAAG,EACH,MAAM,EACN,SAAS,CAAC,QAAQ,CACnB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;CACF,CAAC,CAAC,CAAC;AAEJ,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,SAAS;QAC1B,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,MAA6B,EAC7B,GAAY,EACZ,SAAiB,EAAE,EACnB,QAA6C;IAE7C,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IACpD,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE;QACzB,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC;QAClC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;IAC3B,MAAM,iBAAiB,GAAG,gCAAgC,CAAC;QACzD,IAAI,EAAE,gBAAgB,GAAG,CAAC,MAAM,EAAE;QAClC,MAAM,EAAE,GAAG,CAAC,IAAI;QAChB,MAAM;QACN,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,cAAc,GAClB,wBAAwB,CAAC,IAAI,CAAC;QAC9B,QAAQ,EAAE,eAAe;QACzB,iBAAiB,CAAC,eAAe,CAAC;IACpC,MAAM,YAAY,GAChB,sBAAsB,CAAC,IAAI,CAAC;QAC5B,QAAQ,EAAE,aAAa;QACvB,iBAAiB,CAAC,aAAa,CAAC;IAClC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAChE,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QACzC,KAAK,EAAE;YACL,QAAQ,EAAE;gBACR,aAAa,EAAE,qBAAqB;gBACpC,IAAI,EAAE,gBAAgB,GAAG,CAAC,MAAM,EAAE;gBAClC,MAAM,EAAE,GAAG,CAAC,IAAI;gBAChB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,eAAe,EAAE,cAAc;gBAC/B,aAAa,EAAE,YAAY;gBAC3B,GAAG,CAAC,MAAM,CAAC,EAAE;oBACX,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;wBACjC,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB;wBACnD,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;wBACjC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;qBAClC,CAAC;aACP;SACF;QACD,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAa;IACxC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5E,OAAO,IAAI,CAAC,SAAS,CAAC;AACxB,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAa;IAC7C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,OAAO,IAAI,CAAC,eAAe,CAAC;AAC9B,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAa;IAC3C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,OAAO,IAAI,CAAC,aAAa,CAAC;AAC5B,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc;IAIxC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IACpC,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,OAAO,KAAK,IAAI;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAc;IAId,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC/D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/mcp/streamable-http/session.d.ts

@@ -7,22 +7,10 @@
  * `index.ts` can both import from the same SSOT without circular deps.
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
-export interface JsonRpcRequest {
-    jsonrpc: "2.0";
-    id?: number | string | null;
-    method: string;
-    params?: Record<string, unknown>;
-}
-export interface JsonRpcResponse {
-    jsonrpc: "2.0";
-    id: number | string | null;
-    result?: unknown;
-    error?: {
-        code: number;
-        message: string;
-        data?: unknown;
-    };
-}
+import { isOriginAllowed, ALLOWED_ORIGINS } from "../origin-guard.js";
+import type { JsonRpcRequest, JsonRpcResponse } from "../jsonrpc.js";
+export { isOriginAllowed, ALLOWED_ORIGINS };
+export type { JsonRpcRequest, JsonRpcResponse };
 /**
  * Handler returns `undefined` for JSON-RPC notifications (no `id`). The
  * widened type (P3 MN1 closeout) matches how `buildHandler` in
@@ -56,7 +44,6 @@ export declare const MAX_BODY = 1048576;
 export declare const SESSION_TTL_MS = 3600000;
 export declare const PRUNE_INTERVAL_MS = 300000;
 export declare const HEARTBEAT_MS = 30000;
-export declare const ALLOWED_ORIGINS: Set<string>;
 export declare const MAX_SESSIONS = 100;
 export declare const MAX_ASYNC_TASKS = 200;
 /**
@@ -76,10 +63,5 @@ export declare function corsHeaders(req?: IncomingMessage): Record<string, strin
 export declare function jsonResponse(res: ServerResponse, status: number, body: JsonRpcResponse | Record<string, unknown>, extraHeaders?: Record<string, string>, req?: IncomingMessage): void;
 export declare function readBody(req: IncomingMessage): Promise<string>;
 export declare function pruneStaleSessions(): void;
-/**
- * Validate Origin header for DNS rebinding protection.
- * Allow requests with no Origin (non-browser clients) or from localhost.
- */
-export declare function isOriginAllowed(req: IncomingMessage): boolean;
 export declare function clientAcceptsSSE(req: IncomingMessage): boolean;
 //# sourceMappingURL=session.d.ts.map

package/dist/mcp/streamable-http/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/mcp/streamable-http/session.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAIjE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC3D;AAED;;;;;;GAMG;AACH,MAAM,MAAM,OAAO,GAAG,CACpB,GAAG,EAAE,cAAc,KAChB,eAAe,GAAG,SAAS,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAC;AAExE,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IACzD,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChE,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAID,eAAO,MAAM,QAAQ,UAAY,CAAC;AAClC,eAAO,MAAM,cAAc,UAAY,CAAC;AACxC,eAAO,MAAM,iBAAiB,SAAU,CAAC;AACzC,eAAO,MAAM,YAAY,QAAS,CAAC;AACnC,eAAO,MAAM,eAAe,aAG1B,CAAC;AACH,eAAO,MAAM,YAAY,MAAM,CAAC;AAChC,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC;;;GAGG;AACH,eAAO,MAAM,iBAAiB,aAA0B,CAAC;AAIzD,eAAO,MAAM,QAAQ,sBAA6B,CAAC;AACnD,eAAO,MAAM,UAAU,wBAA+B,CAAC;AAIvD,sFAAsF;AACtF,wBAAgB,WAAW,CAAC,GAAG,CAAC,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOzE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACrC,GAAG,CAAC,EAAE,eAAe,GACpB,IAAI,CAQN;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAgB9D;AAED,wBAAgB,kBAAkB,IAAI,IAAI,CAQzC;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAa7D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAG9D"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/mcp/streamable-http/session.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIrE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC;AAC5C,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;AAIhD;;;;;;GAMG;AACH,MAAM,MAAM,OAAO,GAAG,CACpB,GAAG,EAAE,cAAc,KAChB,eAAe,GAAG,SAAS,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAC;AAExE,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IACzD,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChE,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAID,eAAO,MAAM,QAAQ,UAAY,CAAC;AAClC,eAAO,MAAM,cAAc,UAAY,CAAC;AACxC,eAAO,MAAM,iBAAiB,SAAU,CAAC;AACzC,eAAO,MAAM,YAAY,QAAS,CAAC;AACnC,eAAO,MAAM,YAAY,MAAM,CAAC;AAChC,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC;;;GAGG;AACH,eAAO,MAAM,iBAAiB,aAA0B,CAAC;AAIzD,eAAO,MAAM,QAAQ,sBAA6B,CAAC;AACnD,eAAO,MAAM,UAAU,wBAA+B,CAAC;AAIvD,sFAAsF;AACtF,wBAAgB,WAAW,CAAC,GAAG,CAAC,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOzE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACrC,GAAG,CAAC,EAAE,eAAe,GACpB,IAAI,CAQN;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAgB9D;AAED,wBAAgB,kBAAkB,IAAI,IAAI,CAQzC;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAG9D"}