@zivis/mcp 0.1.0-alpha.1

package/dist/tools/security-review.d.ts

@@ -0,0 +1,65 @@
+/**
+ * zivis_security_review — AI-powered security code review with ZIVIS intelligence
+ *
+ * Composite tool that gathers security context from multiple ZIVIS sources
+ * and returns it as structured input for Claude to use during code review.
+ *
+ * Sources:
+ * 1. Historical findings (resolved) — regression check patterns
+ * 2. Open findings — known vulnerabilities to verify aren't reintroduced
+ * 3. Threat model security controls — what's expected to be in place
+ * 4. Threat model attack scenarios — known attack vectors
+ * 5. OSS trust data — dependency risk signals
+ *
+ * This tool does NOT run scans itself. It assembles intelligence from ZIVIS
+ * so Claude can perform an informed, context-aware code review.
+ */
+import { z } from "zod";
+import type { ApiClient } from "../api-client.js";
+import type { ZivisConfig } from "../types.js";
+export declare const SECURITY_REVIEW_NAME = "zivis_security_review";
+export declare const SECURITY_REVIEW_DESCRIPTION = "Gather ZIVIS security intelligence for an AI-powered code review.\n\nPulls historical findings, open vulnerabilities, threat model controls, and attack scenarios to give you comprehensive security context. Use this BEFORE reviewing code to understand:\n\n1. **Regression risks** \u2014 Previously fixed vulnerabilities that could be reintroduced\n2. **Known vulnerabilities** \u2014 Open findings that may be relevant to the code being reviewed\n3. **Security controls** \u2014 What controls are expected (input validation, auth, rate limiting, etc.)\n4. **Attack scenarios** \u2014 Known attack vectors for this application (STRIDE-categorized)\n5. **Dependency risks** \u2014 OSS trust scores for dependencies in the code\n\nReturns structured security context that you should reference during code review. Focus on:\n- Code that touches areas where historical findings were fixed (regression check)\n- Missing or weak implementations of expected security controls\n- Code patterns that match known attack scenarios\n- Use of low-trust dependencies\n\nProvide at least one of: repo, application_id, threat_model_id, or campaign_id.";
+export declare const SECURITY_REVIEW_SCHEMA: {
+    repo: z.ZodOptional<z.ZodString>;
+    application_id: z.ZodOptional<z.ZodString>;
+    threat_model_id: z.ZodOptional<z.ZodString>;
+    campaign_id: z.ZodOptional<z.ZodString>;
+    focus_areas: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        regression: "regression";
+        controls: "controls";
+        attack_scenarios: "attack_scenarios";
+        dependencies: "dependencies";
+        all: "all";
+    }>>>;
+    severity_threshold: z.ZodOptional<z.ZodEnum<{
+        critical: "critical";
+        high: "high";
+        medium: "medium";
+        low: "low";
+        info: "info";
+    }>>;
+    include_resolved: z.ZodDefault<z.ZodBoolean>;
+    dependency_list: z.ZodOptional<z.ZodArray<z.ZodString>>;
+};
+export declare function createSecurityReviewHandler(apiClient: ApiClient, config: ZivisConfig): (params: {
+    repo?: string;
+    application_id?: string;
+    threat_model_id?: string;
+    campaign_id?: string;
+    focus_areas?: string[];
+    severity_threshold?: string;
+    include_resolved?: boolean;
+    dependency_list?: string[];
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;

package/dist/tools/security-review.js

@@ -0,0 +1,378 @@
+/**
+ * zivis_security_review — AI-powered security code review with ZIVIS intelligence
+ *
+ * Composite tool that gathers security context from multiple ZIVIS sources
+ * and returns it as structured input for Claude to use during code review.
+ *
+ * Sources:
+ * 1. Historical findings (resolved) — regression check patterns
+ * 2. Open findings — known vulnerabilities to verify aren't reintroduced
+ * 3. Threat model security controls — what's expected to be in place
+ * 4. Threat model attack scenarios — known attack vectors
+ * 5. OSS trust data — dependency risk signals
+ *
+ * This tool does NOT run scans itself. It assembles intelligence from ZIVIS
+ * so Claude can perform an informed, context-aware code review.
+ */
+import { z } from "zod";
+import { resolveApplicationId } from "../resolve-application-id.js";
+import { sanitizeResponse } from "../sanitize.js";
+export const SECURITY_REVIEW_NAME = "zivis_security_review";
+export const SECURITY_REVIEW_DESCRIPTION = `Gather ZIVIS security intelligence for an AI-powered code review.
+
+Pulls historical findings, open vulnerabilities, threat model controls, and attack scenarios to give you comprehensive security context. Use this BEFORE reviewing code to understand:
+
+1. **Regression risks** — Previously fixed vulnerabilities that could be reintroduced
+2. **Known vulnerabilities** — Open findings that may be relevant to the code being reviewed
+3. **Security controls** — What controls are expected (input validation, auth, rate limiting, etc.)
+4. **Attack scenarios** — Known attack vectors for this application (STRIDE-categorized)
+5. **Dependency risks** — OSS trust scores for dependencies in the code
+
+Returns structured security context that you should reference during code review. Focus on:
+- Code that touches areas where historical findings were fixed (regression check)
+- Missing or weak implementations of expected security controls
+- Code patterns that match known attack scenarios
+- Use of low-trust dependencies
+
+Provide at least one of: repo, application_id, threat_model_id, or campaign_id.`;
+export const SECURITY_REVIEW_SCHEMA = {
+    repo: z.string().optional().describe("Repository name (owner/repo) — pulls findings and OSS trust data"),
+    application_id: z
+        .string()
+        .optional()
+        .describe("Application UUID — pulls findings scoped to this app. If omitted, uses applicationId from .zivis/project.json when set."),
+    threat_model_id: z.string().optional().describe("Threat model UUID — pulls controls, attack scenarios, and findings"),
+    campaign_id: z.string().optional().describe("Campaign UUID — pulls campaign-specific findings"),
+    focus_areas: z
+        .array(z.enum(["regression", "controls", "attack_scenarios", "dependencies", "all"]))
+        .optional()
+        .describe("Which intelligence to gather (default: all)"),
+    severity_threshold: z
+        .enum(["critical", "high", "medium", "low", "info"])
+        .optional()
+        .describe("Minimum severity to include (default: low)"),
+    include_resolved: z
+        .boolean()
+        .default(true)
+        .describe("Include resolved findings for regression checking (default: true)"),
+    dependency_list: z
+        .array(z.string())
+        .optional()
+        .describe("Specific dependencies to check trust scores for (owner/repo format)"),
+};
+// Severity ordering for threshold filtering
+const SEVERITY_ORDER = {
+    critical: 5,
+    high: 4,
+    medium: 3,
+    low: 2,
+    info: 1,
+};
+export function createSecurityReviewHandler(apiClient, config) {
+    return async (params) => {
+        const { repo, application_id: application_idParam, threat_model_id, campaign_id, focus_areas = ["all"], severity_threshold = "low", include_resolved = true, dependency_list, } = params;
+        const application_id = resolveApplicationId(application_idParam);
+        if (!repo && !application_id && !threat_model_id && !campaign_id) {
+            return {
+                content: [{
+                        type: "text",
+                        text: "Error: Provide at least one of: repo, application_id, threat_model_id, or campaign_id " +
+                            "(or set applicationId in .zivis/project.json for default app scope)",
+                    }],
+                isError: true,
+            };
+        }
+        const shouldInclude = (area) => focus_areas.includes("all") || focus_areas.includes(area);
+        const context = {
+            _description: "ZIVIS Security Review Context — use this intelligence during code review",
+            generatedAt: new Date().toISOString(),
+            parameters: { repo, application_id, threat_model_id, campaign_id },
+        };
+        const errors = [];
+        // ── 1. Historical findings (regression check) ──
+        if (shouldInclude("regression") && (repo || application_id)) {
+            try {
+                const resolvedFindings = await fetchFindings(apiClient, {
+                    repo,
+                    status: "resolved",
+                    limit: 50,
+                });
+                const dismissedFindings = await fetchFindings(apiClient, {
+                    repo,
+                    status: "false_positive",
+                    limit: 20,
+                });
+                // Build regression patterns: group by category/CWE
+                const regressionPatterns = buildRegressionPatterns(resolvedFindings);
+                context.regressionCheck = {
+                    _instruction: "Check code changes against these previously fixed vulnerabilities. Flag if similar patterns appear.",
+                    resolvedCount: resolvedFindings.length,
+                    patterns: regressionPatterns,
+                    recentlyFixed: resolvedFindings.slice(0, 10).map(summarizeFinding),
+                    falsePositives: dismissedFindings.slice(0, 5).map(summarizeFinding),
+                };
+            }
+            catch (err) {
+                errors.push(`Regression data: ${err instanceof Error ? err.message : "failed"}`);
+            }
+        }
+        // ── 2. Open findings (known vulnerabilities) ──
+        if (shouldInclude("regression") && (repo || application_id)) {
+            try {
+                const minSeverity = SEVERITY_ORDER[severity_threshold] || 2;
+                const openFindings = await fetchFindings(apiClient, {
+                    repo,
+                    status: "open",
+                    limit: 50,
+                });
+                // Filter by severity threshold
+                const filtered = openFindings.filter((f) => (SEVERITY_ORDER[f.severity] || 1) >= minSeverity);
+                context.openVulnerabilities = {
+                    _instruction: "These are KNOWN open vulnerabilities. Check if code changes interact with or worsen these issues.",
+                    count: filtered.length,
+                    bySeverity: countBySeverity(filtered),
+                    findings: filtered.slice(0, 20).map(summarizeFinding),
+                };
+            }
+            catch (err) {
+                errors.push(`Open findings: ${err instanceof Error ? err.message : "failed"}`);
+            }
+        }
+        // ── 3. Threat model: security controls ──
+        if (shouldInclude("controls") && threat_model_id) {
+            try {
+                const tm = await apiClient.get(`/api/threat-models/${threat_model_id}?include=all`);
+                const controls = tm.securityControls || [];
+                const notImplemented = controls.filter((c) => c.status === "not_implemented");
+                const partial = controls.filter((c) => c.status === "partial");
+                const implemented = controls.filter((c) => c.status === "implemented");
+                context.securityControls = {
+                    _instruction: "Verify that code implements these expected security controls. Flag missing or weak implementations.",
+                    summary: {
+                        implemented: implemented.length,
+                        partial: partial.length,
+                        notImplemented: notImplemented.length,
+                    },
+                    gapControls: [...notImplemented, ...partial].map((c) => ({
+                        name: c.name,
+                        type: c.controlType,
+                        status: c.status,
+                        description: c.description,
+                        effectiveness: c.effectivenessRating,
+                    })),
+                    implementedControls: implemented.map((c) => ({
+                        name: c.name,
+                        type: c.controlType,
+                        description: c.description,
+                    })),
+                };
+            }
+            catch (err) {
+                errors.push(`Security controls: ${err instanceof Error ? err.message : "failed"}`);
+            }
+        }
+        // ── 4. Threat model: attack scenarios ──
+        if (shouldInclude("attack_scenarios") && threat_model_id) {
+            try {
+                const tm = await apiClient.get(`/api/threat-models/${threat_model_id}?include=all`);
+                const scenarios = tm.attackScenarios || [];
+                const minSeverity = SEVERITY_ORDER[severity_threshold] || 2;
+                const filtered = scenarios.filter((s) => (SEVERITY_ORDER[s.severity] || 1) >= minSeverity);
+                context.attackScenarios = {
+                    _instruction: "Review code for susceptibility to these known attack vectors. Check that mitigations are in place.",
+                    count: filtered.length,
+                    scenarios: filtered.map((s) => ({
+                        name: s.name,
+                        strideCategory: s.strideCategory,
+                        severity: s.severity,
+                        likelihood: s.likelihood,
+                        attackVector: s.attackVector,
+                        description: s.description,
+                    })),
+                };
+            }
+            catch (err) {
+                errors.push(`Attack scenarios: ${err instanceof Error ? err.message : "failed"}`);
+            }
+        }
+        // ── 5. Dependency trust scores ──
+        if (shouldInclude("dependencies") && dependency_list && dependency_list.length > 0) {
+            const depResults = [];
+            const baseUrl = config.apiBaseUrl;
+            for (const dep of dependency_list.slice(0, 10)) {
+                try {
+                    const parsed = parseRepo(dep);
+                    if (!parsed) {
+                        depResults.push({ repo: dep, error: "Invalid format" });
+                        continue;
+                    }
+                    const res = await fetch(`${baseUrl}/api/oss-trust/repos/${parsed.owner}/${parsed.repo}`);
+                    if (res.ok) {
+                        const entry = await res.json();
+                        depResults.push({
+                            repo: dep,
+                            trustGrade: entry.trustGrade,
+                            trustScore: entry.trustScore,
+                            findings: {
+                                critical: entry.findingsCritical ?? 0,
+                                high: entry.findingsHigh ?? 0,
+                                medium: entry.findingsMedium ?? 0,
+                                low: entry.findingsLow ?? 0,
+                            },
+                            lastScanned: entry.lastScannedAt,
+                        });
+                    }
+                    else {
+                        depResults.push({ repo: dep, trustGrade: "unscanned", trustScore: null });
+                    }
+                }
+                catch {
+                    depResults.push({ repo: dep, error: "Failed to fetch" });
+                }
+            }
+            const risky = depResults.filter((d) => d.trustScore != null && d.trustScore < 70);
+            context.dependencyRisks = {
+                _instruction: "Flag usage of low-trust dependencies. Consider alternatives for dependencies with grade C or below.",
+                checked: depResults.length,
+                riskyCount: risky.length,
+                dependencies: depResults,
+            };
+        }
+        // ── 6. Campaign findings (if campaign_id provided) ──
+        if (campaign_id) {
+            try {
+                const campaignFindings = await apiClient.get(`/api/campaigns/${campaign_id}/findings?limit=50`);
+                const findings = campaignFindings.findings || [];
+                const minSeverity = SEVERITY_ORDER[severity_threshold] || 2;
+                const filtered = findings.filter((f) => (SEVERITY_ORDER[f.severity] || 1) >= minSeverity);
+                context.campaignFindings = {
+                    _instruction: "These findings are from active security testing campaigns. Check if code changes address or affect these.",
+                    count: filtered.length,
+                    bySeverity: countBySeverity(filtered),
+                    findings: filtered.slice(0, 20).map(summarizeFinding),
+                };
+            }
+            catch (err) {
+                errors.push(`Campaign findings: ${err instanceof Error ? err.message : "failed"}`);
+            }
+        }
+        // ── Build review guidance ──
+        context.reviewGuidance = buildReviewGuidance(context);
+        if (errors.length > 0) {
+            context.warnings = errors;
+        }
+        return {
+            content: [{
+                    type: "text",
+                    text: JSON.stringify(sanitizeResponse(context), null, 2),
+                }],
+        };
+    };
+}
+// ── Helpers ──
+async function fetchFindings(apiClient, params) {
+    const query = new URLSearchParams();
+    if (params.repo)
+        query.set("resourceName", params.repo);
+    if (params.status)
+        query.set("status", params.status);
+    if (params.limit)
+        query.set("limit", String(params.limit));
+    const path = `/api/findings/unified?${query.toString()}`;
+    const data = await apiClient.get(path);
+    return data.findings || [];
+}
+function summarizeFinding(f) {
+    return {
+        title: f.title,
+        severity: f.severity,
+        category: f.category,
+        cweId: f.cweId,
+        status: f.status,
+        targetUrl: f.targetUrl,
+        description: f.description?.substring(0, 300),
+        remediation: f.recommendation?.substring(0, 300) || f.remediation?.substring(0, 300),
+    };
+}
+function countBySeverity(findings) {
+    const counts = { critical: 0, high: 0, medium: 0, low: 0, info: 0 };
+    for (const f of findings) {
+        const sev = f.severity || "info";
+        counts[sev] = (counts[sev] || 0) + 1;
+    }
+    return counts;
+}
+function buildRegressionPatterns(resolvedFindings) {
+    // Group by category + CWE to find recurring vulnerability patterns
+    const patternMap = new Map();
+    for (const f of resolvedFindings) {
+        const key = `${f.category || "uncategorized"}::${f.cweId || "no-cwe"}`;
+        const existing = patternMap.get(key);
+        if (existing) {
+            existing.count++;
+            if (existing.titles.length < 3)
+                existing.titles.push(f.title);
+        }
+        else {
+            patternMap.set(key, {
+                count: 1,
+                titles: [f.title],
+                cweId: f.cweId,
+                category: f.category,
+            });
+        }
+    }
+    return Array.from(patternMap.values())
+        .sort((a, b) => b.count - a.count)
+        .slice(0, 15)
+        .map((p) => ({
+        category: p.category,
+        cweId: p.cweId,
+        occurrences: p.count,
+        examples: p.titles,
+        _check: `Previously fixed ${p.count}x — verify this pattern is not reintroduced`,
+    }));
+}
+function buildReviewGuidance(context) {
+    const guidance = [];
+    const regression = context.regressionCheck;
+    if (regression?.resolvedCount > 0) {
+        guidance.push(`REGRESSION: ${regression.resolvedCount} previously fixed vulnerabilities. Check ${regression.patterns?.length || 0} recurring patterns.`);
+    }
+    const open = context.openVulnerabilities;
+    if (open?.count > 0) {
+        guidance.push(`OPEN VULNS: ${open.count} known vulnerabilities (${open.bySeverity?.critical || 0} critical, ${open.bySeverity?.high || 0} high). Verify changes don't worsen these.`);
+    }
+    const controls = context.securityControls;
+    if (controls) {
+        const gaps = controls.summary?.notImplemented + controls.summary?.partial;
+        if (gaps > 0) {
+            guidance.push(`CONTROL GAPS: ${gaps} security controls are missing or partial. Check if code should implement them.`);
+        }
+    }
+    const attacks = context.attackScenarios;
+    if (attacks?.count > 0) {
+        guidance.push(`ATTACK VECTORS: ${attacks.count} known attack scenarios. Verify code is resilient to these.`);
+    }
+    const deps = context.dependencyRisks;
+    if (deps?.riskyCount > 0) {
+        guidance.push(`RISKY DEPS: ${deps.riskyCount} dependencies with low trust scores. Consider alternatives.`);
+    }
+    if (guidance.length === 0) {
+        guidance.push("No significant security context found. Perform standard code review best practices.");
+    }
+    return guidance;
+}
+function parseRepo(input) {
+    const trimmed = input.trim();
+    const urlMatch = trimmed.match(/^https?:\/\/(?:www\.)?github\.com\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+)/);
+    if (urlMatch) {
+        return { owner: urlMatch[1], repo: urlMatch[2].replace(/\.git$/, "") };
+    }
+    const slashMatch = trimmed.match(/^([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+)$/);
+    if (slashMatch) {
+        return { owner: slashMatch[1], repo: slashMatch[2] };
+    }
+    return null;
+}
+//# sourceMappingURL=security-review.js.map

package/dist/tools/security-review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-review.js","sourceRoot":"","sources":["../../src/tools/security-review.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGlD,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;;;;;;;;;;;;;gFAgBqC,CAAC;AAEjF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kEAAkE,CAAC;IACxG,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,yHAAyH,CAC1H;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IACrH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;IAC/F,WAAW,EAAE,CAAC;SACX,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;SACpF,QAAQ,EAAE;SACV,QAAQ,CAAC,6CAA6C,CAAC;IAC1D,kBAAkB,EAAE,CAAC;SAClB,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;SACnD,QAAQ,EAAE;SACV,QAAQ,CAAC,4CAA4C,CAAC;IACzD,gBAAgB,EAAE,CAAC;SAChB,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,mEAAmE,CAAC;IAChF,eAAe,EAAE,CAAC;SACf,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,qEAAqE,CAAC;CACnF,CAAC;AAEF,4CAA4C;AAC5C,MAAM,cAAc,GAA2B;IAC7C,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,UAAU,2BAA2B,CAAC,SAAoB,EAAE,MAAmB;IACnF,OAAO,KAAK,EAAE,MASb,EAAE,EAAE;QACH,MAAM,EACJ,IAAI,EACJ,cAAc,EAAE,mBAAmB,EACnC,eAAe,EACf,WAAW,EACX,WAAW,GAAG,CAAC,KAAK,CAAC,EACrB,kBAAkB,GAAG,KAAK,EAC1B,gBAAgB,GAAG,IAAI,EACvB,eAAe,GAChB,GAAG,MAAM,CAAC;QAEX,MAAM,cAAc,GAAG,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;QAEjE,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW,EAAE,CAAC;YACjE,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EACF,wFAAwF;4BACxF,qEAAqE;qBACxE,CAAC;gBACF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE,CACrC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE5D,MAAM,OAAO,GAA4B;YACvC,YAAY,EAAE,0EAA0E;YACxF,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,WAAW,EAAE;SACnE,CAAC;QAEF,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,kDAAkD;QAClD,IAAI,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC;gBACH,MAAM,gBAAgB,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE;oBACtD,IAAI;oBACJ,MAAM,EAAE,UAAU;oBAClB,KAAK,EAAE,EAAE;iBACV,CAAC,CAAC;gBAEH,MAAM,iBAAiB,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE;oBACvD,IAAI;oBACJ,MAAM,EAAE,gBAAgB;oBACxB,KAAK,EAAE,EAAE;iBACV,CAAC,CAAC;gBAEH,mDAAmD;gBACnD,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;gBAErE,OAAO,CAAC,eAAe,GAAG;oBACxB,YAAY,EAAE,qGAAqG;oBACnH,aAAa,EAAE,gBAAgB,CAAC,MAAM;oBACtC,QAAQ,EAAE,kBAAkB;oBAC5B,aAAa,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;oBAClE,cAAc,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;iBACpE,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,oBAAoB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAED,iDAAiD;QACjD,IAAI,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBAC5D,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE;oBAClD,IAAI;oBACJ,MAAM,EAAE,MAAM;oBACd,KAAK,EAAE,EAAE;iBACV,CAAC,CAAC;gBAEH,+BAA+B;gBAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAClC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,WAAW,CAC7D,CAAC;gBAEF,OAAO,CAAC,mBAAmB,GAAG;oBAC5B,YAAY,EAAE,mGAAmG;oBACjH,KAAK,EAAE,QAAQ,CAAC,MAAM;oBACtB,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC;oBACrC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;iBACtD,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,eAAe,EAAE,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAC5B,sBAAsB,eAAe,cAAc,CACpD,CAAC;gBAEF,MAAM,QAAQ,GAAI,EAAU,CAAC,gBAAgB,IAAI,EAAE,CAAC;gBACpD,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC;gBACnF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;gBACpE,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC;gBAE5E,OAAO,CAAC,gBAAgB,GAAG;oBACzB,YAAY,EAAE,qGAAqG;oBACnH,OAAO,EAAE;wBACP,WAAW,EAAE,WAAW,CAAC,MAAM;wBAC/B,OAAO,EAAE,OAAO,CAAC,MAAM;wBACvB,cAAc,EAAE,cAAc,CAAC,MAAM;qBACtC;oBACD,WAAW,EAAE,CAAC,GAAG,cAAc,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;wBAC5D,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,IAAI,EAAE,CAAC,CAAC,WAAW;wBACnB,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,aAAa,EAAE,CAAC,CAAC,mBAAmB;qBACrC,CAAC,CAAC;oBACH,mBAAmB,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;wBAChD,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,IAAI,EAAE,CAAC,CAAC,WAAW;wBACnB,WAAW,EAAE,CAAC,CAAC,WAAW;qBAC3B,CAAC,CAAC;iBACJ,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,IAAI,aAAa,CAAC,kBAAkB,CAAC,IAAI,eAAe,EAAE,CAAC;YACzD,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAC5B,sBAAsB,eAAe,cAAc,CACpD,CAAC;gBAEF,MAAM,SAAS,GAAI,EAAU,CAAC,eAAe,IAAI,EAAE,CAAC;gBACpD,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBAC5D,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAC/B,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,WAAW,CAC7D,CAAC;gBAEF,OAAO,CAAC,eAAe,GAAG;oBACxB,YAAY,EAAE,oGAAoG;oBAClH,KAAK,EAAE,QAAQ,CAAC,MAAM;oBACtB,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;wBACnC,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,cAAc,EAAE,CAAC,CAAC,cAAc;wBAChC,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,YAAY,EAAE,CAAC,CAAC,YAAY;wBAC5B,WAAW,EAAE,CAAC,CAAC,WAAW;qBAC3B,CAAC,CAAC;iBACJ,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,IAAI,aAAa,CAAC,cAAc,CAAC,IAAI,eAAe,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnF,MAAM,UAAU,GAA8B,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC;YAElC,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;oBAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;wBACxD,SAAS;oBACX,CAAC;oBAED,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,OAAO,wBAAwB,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAChE,CAAC;oBAEF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;wBACX,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;wBAC/B,UAAU,CAAC,IAAI,CAAC;4BACd,IAAI,EAAE,GAAG;4BACT,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,QAAQ,EAAE;gCACR,QAAQ,EAAE,KAAK,CAAC,gBAAgB,IAAI,CAAC;gCACrC,IAAI,EAAE,KAAK,CAAC,YAAY,IAAI,CAAC;gCAC7B,MAAM,EAAE,KAAK,CAAC,cAAc,IAAI,CAAC;gCACjC,GAAG,EAAE,KAAK,CAAC,WAAW,IAAI,CAAC;6BAC5B;4BACD,WAAW,EAAE,KAAK,CAAC,aAAa;yBACjC,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC5E,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAC7B,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,CAAC,UAAU,GAAG,EAAE,CACtD,CAAC;YAEF,OAAO,CAAC,eAAe,GAAG;gBACxB,YAAY,EAAE,qGAAqG;gBACnH,OAAO,EAAE,UAAU,CAAC,MAAM;gBAC1B,UAAU,EAAE,KAAK,CAAC,MAAM;gBACxB,YAAY,EAAE,UAAU;aACzB,CAAC;QACJ,CAAC;QAED,uDAAuD;QACvD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,GAAG,CAC1C,kBAAkB,WAAW,oBAAoB,CAClD,CAAC;gBAEF,MAAM,QAAQ,GAAI,gBAAwB,CAAC,QAAQ,IAAI,EAAE,CAAC;gBAC1D,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAC9B,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,WAAW,CAC7D,CAAC;gBAEF,OAAO,CAAC,gBAAgB,GAAG;oBACzB,YAAY,EAAE,2GAA2G;oBACzH,KAAK,EAAE,QAAQ,CAAC,MAAM;oBACtB,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC;oBACrC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;iBACtD,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,OAAO,CAAC,cAAc,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAEtD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC;QAC5B,CAAC;QAED,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;iBACzD,CAAC;SACH,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,gBAAgB;AAEhB,KAAK,UAAU,aAAa,CAC1B,SAAoB,EACpB,MAA0D;IAE1D,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,IAAI,MAAM,CAAC,IAAI;QAAE,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM;QAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,KAAK;QAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAE3D,MAAM,IAAI,GAAG,yBAAyB,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;IACzD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAA0C,IAAI,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAM;IAC9B,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;QAC7C,WAAW,EAAE,CAAC,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;KACrF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAe;IACtC,MAAM,MAAM,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5F,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,gBAAuB;IACtD,mEAAmE;IACnE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkF,CAAC;IAE7G,KAAK,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,eAAe,KAAK,CAAC,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;QACvE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE;gBAClB,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;gBACjB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;SACnC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;SACjC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,WAAW,EAAE,CAAC,CAAC,KAAK;QACpB,QAAQ,EAAE,CAAC,CAAC,MAAM;QAClB,MAAM,EAAE,oBAAoB,CAAC,CAAC,KAAK,6CAA6C;KACjF,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgC;IAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,MAAM,UAAU,GAAG,OAAO,CAAC,eAAsB,CAAC;IAClD,IAAI,UAAU,EAAE,aAAa,GAAG,CAAC,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CACX,eAAe,UAAU,CAAC,aAAa,4CAA4C,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,sBAAsB,CAC1I,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,mBAA0B,CAAC;IAChD,IAAI,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;QACpB,QAAQ,CAAC,IAAI,CACX,eAAe,IAAI,CAAC,KAAK,2BAA2B,IAAI,CAAC,UAAU,EAAE,QAAQ,IAAI,CAAC,cAAc,IAAI,CAAC,UAAU,EAAE,IAAI,IAAI,CAAC,4CAA4C,CACvK,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAuB,CAAC;IACjD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1E,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CACX,iBAAiB,IAAI,iFAAiF,CACvG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,eAAsB,CAAC;IAC/C,IAAI,OAAO,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CACX,mBAAmB,OAAO,CAAC,KAAK,6DAA6D,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,eAAsB,CAAC;IAC5C,IAAI,IAAI,EAAE,UAAU,GAAG,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CACX,eAAe,IAAI,CAAC,UAAU,6DAA6D,CAC5F,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IACvG,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAC5B,yEAAyE,CAC1E,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC3E,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/tools/setup-red-team-target.d.ts

@@ -0,0 +1,79 @@
+/**
+ * zivis_setup_red_team_target — One-step red team target setup
+ *
+ * Creates an application, configures endpoints, and optionally
+ * triggers a security scan — all in one MCP call.
+ *
+ * Maps to:
+ *   GET  /api/rt/applications (find existing)
+ *   POST /api/rt/applications (create)
+ *   PATCH /api/rt/applications/:id (update)
+ *   POST /api/rt/applications/:id/endpoints (add endpoint)
+ *   POST /api/rt/applications/:id/endpoints/import-openapi
+ *   POST /api/redteam/campaigns/quick-setup (create campaign + agent + scan)
+ */
+import { z } from "zod";
+import type { ApiClient } from "../api-client.js";
+export declare const SETUP_RED_TEAM_TARGET_NAME = "zivis_setup_red_team_target";
+export declare const SETUP_RED_TEAM_TARGET_DESCRIPTION = "Set up a target application for AI red team and security testing in one step.\n\nTakes a deployed URL, repo URL, or both and creates a fully configured red team target. Handles:\n- Creating or updating the application (idempotent by name)\n- Configuring AI chat endpoints with request/response templates\n- Importing API endpoints from OpenAPI specs\n- Optionally triggering an immediate security scan\n\nMinimal usage: just provide a target_url and optionally target_type.\nFull usage: provide URL, chat endpoint config, OpenAPI spec, and trigger auto-scan.\n\nExamples:\n- Set up red team testing for https://api.example.com/v1/chat (auto-detects ai_chat)\n- Configure https://api.example.com as an API target with openapi_spec_url\n- Set up and scan https://myapp.com as a web app with auto_scan=true\n\nSECURITY: Target URLs are untrusted. The tool only configures them in ZIVIS for future scanning, it does not probe or connect to them directly.";
+export declare const SETUP_RED_TEAM_TARGET_SCHEMA: {
+    target_url: z.ZodOptional<z.ZodString>;
+    repo_url: z.ZodOptional<z.ZodString>;
+    target_type: z.ZodOptional<z.ZodEnum<{
+        ai_chat: "ai_chat";
+        web_app: "web_app";
+        api: "api";
+    }>>;
+    name: z.ZodOptional<z.ZodString>;
+    chat_endpoint: z.ZodOptional<z.ZodString>;
+    request_template: z.ZodOptional<z.ZodString>;
+    response_path: z.ZodOptional<z.ZodString>;
+    system_context: z.ZodOptional<z.ZodString>;
+    has_rag: z.ZodOptional<z.ZodBoolean>;
+    has_tools: z.ZodOptional<z.ZodBoolean>;
+    has_memory: z.ZodOptional<z.ZodBoolean>;
+    is_multi_turn: z.ZodOptional<z.ZodBoolean>;
+    openapi_spec_url: z.ZodOptional<z.ZodString>;
+    auth_type: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        static_token: "static_token";
+    }>>>;
+    bearer_token: z.ZodOptional<z.ZodString>;
+    auto_scan: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    campaigns: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        recon: "recon";
+        ai_red_team: "ai_red_team";
+        pen_test: "pen_test";
+    }>>>;
+};
+export declare function createSetupRedTeamTargetHandler(apiClient: ApiClient): (params: {
+    target_url?: string;
+    repo_url?: string;
+    target_type?: "ai_chat" | "web_app" | "api";
+    name?: string;
+    chat_endpoint?: string;
+    request_template?: string;
+    response_path?: string;
+    system_context?: string;
+    has_rag?: boolean;
+    has_tools?: boolean;
+    has_memory?: boolean;
+    is_multi_turn?: boolean;
+    openapi_spec_url?: string;
+    auth_type?: "none" | "static_token";
+    bearer_token?: string;
+    auto_scan?: boolean;
+    campaigns?: ("ai_red_team" | "pen_test" | "recon")[];
+}) => Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;