atabey 0.0.37 → 0.1.0

package/dist/atabey-mcp/src/mcp/utils/discipline.js

@@ -0,0 +1,385 @@
+/**
+ * ─── AI DISCIPLINE ENGINE ─────────────────────────────────────────
+ *
+ * Enforces strict rules on AI behavior at the MCP middleware layer.
+ * Unlike agent instructions (which AI can ignore), these are enforced
+ * at the tool level - AI cannot bypass them.
+ *
+ * Features:
+ * - Tool call rate limiting (prevents abuse)
+ * - File size limits (prevents reading/writing huge files)
+ * - Call frequency tracking (detects loops)
+ * - Tool blacklist per agent
+ * - Agent-based tool whitelist
+ * - Response content validation
+ * - Max concurrent operations
+ */
+import fs from "fs";
+import path from "path";
+import { AtabeyStorage } from "../../shared/storage.js";
+// Per-agent discipline tracking
+const agentDiscipline = new Map();
+// ─── Configuration (from env or defaults) ─────────────────────────
+const CONFIG = {
+    MAX_CALLS_PER_MINUTE: parseInt(process.env.MCP_MAX_CALLS_PER_MINUTE || "60", 10),
+    MAX_TOTAL_CALLS: parseInt(process.env.MCP_MAX_TOTAL_CALLS || "500", 10),
+    MAX_FILE_SIZE: parseInt(process.env.MCP_MAX_FILE_SIZE || "1048576", 10),
+    MAX_ARGS_SIZE: parseInt(process.env.MCP_MAX_ARGS_SIZE || "102400", 10),
+    COOLDOWN_MS: parseInt(process.env.MCP_COOLDOWN_MS || "30000", 10),
+    MAX_RESPONSE_SIZE: parseInt(process.env.MCP_MAX_RESPONSE_SIZE || "512000", 10), // 500KB max response
+    MAX_CONSECUTIVE_SAME_TOOL: parseInt(process.env.MCP_MAX_CONSECUTIVE_SAME_TOOL || "10", 10),
+    // Token-economy: require a recent grep_search before a blind full-file read
+    READ_DISCIPLINE_ENFORCE: ["1", "true", "yes", "on"].includes((process.env.ATABEY_DISCIPLINE_ENFORCE_READ || "").toLowerCase()),
+    READ_DISCIPLINE_LINES: parseInt(process.env.MCP_READ_DISCIPLINE_LINES || "400", 10),
+    GREP_RECENCY_MS: parseInt(process.env.MCP_GREP_RECENCY_MS || "300000", 10),
+    RESTRICTED_TOOLS: (process.env.MCP_RESTRICTED_TOOLS || "")
+        .split(",").map(t => t.trim()).filter(Boolean),
+    // Agent-based tool whitelist (format: agent1:tool1,tool2;agent2:tool3,tool4)
+    AGENT_TOOL_WHITELIST: parseAgentWhitelist(process.env.MCP_AGENT_TOOL_WHITELIST || ""),
+};
+function parseAgentWhitelist(input) {
+    const map = new Map();
+    if (!input)
+        return map;
+    input.split(";").forEach(pair => {
+        const [agent, tools] = pair.split(":");
+        if (agent && tools) {
+            map.set(agent.trim(), new Set(tools.split(",").map(t => t.trim())));
+        }
+    });
+    return map;
+}
+const cooldowns = new Map();
+function setCooldown(agent, durationMs) {
+    const until = Date.now() + durationMs;
+    cooldowns.set(agent, until);
+    const discipline = getOrCreateAgent(agent);
+    try {
+        AtabeyStorage.saveDiscipline(agent, {
+            totalCalls: discipline.totalCalls,
+            violations: discipline.violations,
+            lastViolation: discipline.lastViolation,
+            cooldownUntil: until
+        });
+    }
+    catch { /* ignore */ }
+}
+function getOrCreateAgent(agent) {
+    if (!agentDiscipline.has(agent)) {
+        const whitelist = CONFIG.AGENT_TOOL_WHITELIST.get(agent) || null;
+        const record = {
+            totalCalls: 0,
+            calls: [],
+            lastReset: Date.now(),
+            blacklistedTools: new Set(),
+            whitelistedTools: whitelist,
+            violations: 0,
+            lastViolation: null,
+            lastGrepAt: 0,
+        };
+        // Try to restore from database
+        try {
+            const dbState = AtabeyStorage.getDiscipline(agent);
+            if (dbState) {
+                record.totalCalls = dbState.totalCalls;
+                record.violations = dbState.violations;
+                record.lastViolation = dbState.lastViolation;
+                if (dbState.cooldownUntil > Date.now()) {
+                    cooldowns.set(agent, dbState.cooldownUntil);
+                }
+            }
+        }
+        catch { /* ignore */ }
+        // Restore recent call history from SQLite (restart-durable rate limiting).
+        // Keep the last hour so the 60s/minute window survives a restart.
+        try {
+            const since = Date.now() - 3600000;
+            const recent = AtabeyStorage.getRecentDisciplineCalls(agent, since);
+            if (recent.length > 0) {
+                record.calls = recent.map(c => ({ tool: c.tool, timestamp: c.timestamp, argsSize: c.argsSize }));
+            }
+            AtabeyStorage.pruneDisciplineCalls(since);
+        }
+        catch { /* ignore */ }
+        agentDiscipline.set(agent, record);
+    }
+    return agentDiscipline.get(agent);
+}
+function pruneOldCalls(agent, windowMs = 60000) {
+    const cutoff = Date.now() - windowMs;
+    agent.calls = agent.calls.filter(c => c.timestamp > cutoff);
+}
+function isInCooldown(agent) {
+    // Prefer in-memory; hydrate from SQLite if process restarted
+    let until = cooldowns.get(agent);
+    if (!until) {
+        try {
+            const dbState = AtabeyStorage.getDiscipline(agent);
+            if (dbState && dbState.cooldownUntil > Date.now()) {
+                cooldowns.set(agent, dbState.cooldownUntil);
+                until = dbState.cooldownUntil;
+            }
+        }
+        catch { /* ignore */ }
+    }
+    if (!until)
+        return false;
+    if (Date.now() > until) {
+        cooldowns.delete(agent);
+        // Clear durable cooldown so restart does not re-apply expired state
+        try {
+            const discipline = agentDiscipline.get(agent);
+            AtabeyStorage.saveDiscipline(agent, {
+                totalCalls: discipline?.totalCalls ?? 0,
+                violations: discipline?.violations ?? 0,
+                lastViolation: discipline?.lastViolation ?? null,
+                cooldownUntil: 0,
+            });
+        }
+        catch { /* ignore */ }
+        return false;
+    }
+    return true;
+}
+function recordViolation(agent, reason) {
+    const discipline = agentDiscipline.get(agent);
+    if (discipline) {
+        discipline.violations++;
+        discipline.lastViolation = reason;
+        try {
+            const cooldownUntil = cooldowns.get(agent) || 0;
+            AtabeyStorage.saveDiscipline(agent, {
+                totalCalls: discipline.totalCalls,
+                violations: discipline.violations,
+                lastViolation: discipline.lastViolation,
+                cooldownUntil
+            });
+        }
+        catch { /* ignore */ }
+    }
+}
+/**
+ * Enforce discipline on a tool call before execution.
+ * Returns error message if blocked, null if allowed.
+ */
+export async function enforceDiscipline(agent, toolName, args) {
+    const discipline = getOrCreateAgent(agent);
+    // Track grep_search recency for the token-economy read gate.
+    if (toolName === "grep_search") {
+        discipline.lastGrepAt = Date.now();
+    }
+    // 1. Check cooldown
+    if (isInCooldown(agent)) {
+        const until = cooldowns.get(agent);
+        const remaining = Math.ceil((until - Date.now()) / 1000);
+        return `[DISCIPLINE] Agent ${agent} is in cooldown for ${remaining}s. Too many requests.`;
+    }
+    // 2. Check restricted tools (global blacklist)
+    if (CONFIG.RESTRICTED_TOOLS.includes(toolName)) {
+        recordViolation(agent, `Attempted to use restricted tool: ${toolName}`);
+        return `[DISCIPLINE] Tool "${toolName}" is restricted. Agent ${agent} cannot use it.`;
+    }
+    // 3. Check agent-specific whitelist
+    if (discipline.whitelistedTools && !discipline.whitelistedTools.has(toolName)) {
+        recordViolation(agent, `Attempted to use non-whitelisted tool: ${toolName}`);
+        const allowed = Array.from(discipline.whitelistedTools).join(", ");
+        return `[DISCIPLINE] Agent ${agent} is not allowed to use "${toolName}". Allowed tools: ${allowed}`;
+    }
+    // 4. Check total call limit
+    if (discipline.totalCalls >= CONFIG.MAX_TOTAL_CALLS) {
+        setCooldown(agent, CONFIG.COOLDOWN_MS);
+        recordViolation(agent, `Exceeded max total calls (${CONFIG.MAX_TOTAL_CALLS})`);
+        return `[DISCIPLINE] Agent ${agent} exceeded max total calls (${CONFIG.MAX_TOTAL_CALLS}). Cooldown ${CONFIG.COOLDOWN_MS / 1000}s.`;
+    }
+    // 5. Check rate limit (calls per minute)
+    pruneOldCalls(discipline);
+    if (discipline.calls.length >= CONFIG.MAX_CALLS_PER_MINUTE) {
+        setCooldown(agent, CONFIG.COOLDOWN_MS);
+        recordViolation(agent, `Rate limit exceeded (${CONFIG.MAX_CALLS_PER_MINUTE}/min)`);
+        return `[DISCIPLINE] Agent ${agent} exceeded rate limit (${CONFIG.MAX_CALLS_PER_MINUTE}/min). Cooldown ${CONFIG.COOLDOWN_MS / 1000}s.`;
+    }
+    // 6. Check consecutive same tool (prevents loops)
+    if (discipline.calls.length >= CONFIG.MAX_CONSECUTIVE_SAME_TOOL) {
+        const lastCalls = discipline.calls.slice(-CONFIG.MAX_CONSECUTIVE_SAME_TOOL);
+        const allSame = lastCalls.every(c => c.tool === toolName);
+        if (allSame) {
+            setCooldown(agent, CONFIG.COOLDOWN_MS);
+            recordViolation(agent, `Consecutive same tool limit: ${toolName} x${CONFIG.MAX_CONSECUTIVE_SAME_TOOL}`);
+            return `[DISCIPLINE] Agent ${agent} called "${toolName}" ${CONFIG.MAX_CONSECUTIVE_SAME_TOOL} times in a row. Possible loop. Cooldown.`;
+        }
+    }
+    // 7. Check args size
+    const argsStr = JSON.stringify(args);
+    if (argsStr.length > CONFIG.MAX_ARGS_SIZE) {
+        recordViolation(agent, `Args too large: ${argsStr.length} bytes`);
+        return `[DISCIPLINE] Tool call args too large (${argsStr.length} bytes, max: ${CONFIG.MAX_ARGS_SIZE}).`;
+    }
+    // 8. Check file size for read/write operations
+    if ((toolName === "read_file" || toolName === "write_file") && args.path) {
+        try {
+            const projectRoot = process.env.ATABEY_PROJECT_ROOT || process.cwd();
+            const filePath = path.resolve(projectRoot, args.path);
+            if (fs.existsSync(filePath)) {
+                const stat = fs.statSync(filePath);
+                if (stat.size > CONFIG.MAX_FILE_SIZE) {
+                    return `[DISCIPLINE] File too large (${(stat.size / 1024 / 1024).toFixed(1)}MB, max: ${(CONFIG.MAX_FILE_SIZE / 1024 / 1024).toFixed(1)}MB). Use grep_search instead.`;
+                }
+            }
+        }
+        catch { /* ignore */ }
+    }
+    // 9. Token-economy: discourage blind full-file reads (grep first)
+    if (CONFIG.READ_DISCIPLINE_ENFORCE && toolName === "read_file") {
+        const hasRange = typeof args.startLine === "number" || typeof args.endLine === "number";
+        const pathArg = typeof args.path === "string" ? args.path : "";
+        if (!hasRange && pathArg) {
+            try {
+                const projectRoot = process.env.ATABEY_PROJECT_ROOT || process.cwd();
+                const filePath = path.resolve(projectRoot, pathArg);
+                if (fs.existsSync(filePath)) {
+                    const lineCount = fs.readFileSync(filePath, "utf8").split("\n").length;
+                    const recentlySearched = Date.now() - discipline.lastGrepAt < CONFIG.GREP_RECENCY_MS;
+                    if (lineCount > CONFIG.READ_DISCIPLINE_LINES && !recentlySearched) {
+                        recordViolation(agent, `Blind full-file read: ${pathArg} (${lineCount} lines)`);
+                        return `[DISCIPLINE][TOKEN ECONOMY] "${pathArg}" is ${lineCount} lines. Run 'grep_search' first, or read a line range (startLine/endLine), to avoid wasting tokens.`;
+                    }
+                }
+            }
+            catch { /* ignore */ }
+        }
+    }
+    // Record the call
+    discipline.totalCalls++;
+    discipline.calls.push({
+        tool: toolName,
+        timestamp: Date.now(),
+        argsSize: argsStr.length,
+    });
+    // Persist the call event for restart-durable rate limiting.
+    try {
+        AtabeyStorage.recordDisciplineCall(agent, toolName, Date.now(), argsStr.length);
+    }
+    catch { /* ignore */ }
+    try {
+        const cooldownUntil = cooldowns.get(agent) || 0;
+        AtabeyStorage.saveDiscipline(agent, {
+            totalCalls: discipline.totalCalls,
+            violations: discipline.violations,
+            lastViolation: discipline.lastViolation,
+            cooldownUntil
+        });
+    }
+    catch { /* ignore */ }
+    return null;
+}
+// ─── Prompt Injection Patterns ─────────────────────────────────────────────
+// Common adversarial patterns that attempt to override agent instructions.
+// These are checked in tool responses to prevent exfiltrated injection payloads
+// (e.g. from malicious file content, API responses, or external user input)
+// from reaching the AI and overriding the system prompt.
+const PROMPT_INJECTION_PATTERNS = [
+    { pattern: /ignore\s+(previous|prior|above|all)\s+instructions?/i, label: "ignore-instructions" },
+    { pattern: /disregard\s+(previous|prior|above|all)\s+instructions?/i, label: "disregard-instructions" },
+    { pattern: /forget\s+(everything|all|prior|previous)/i, label: "forget-prior" },
+    { pattern: /you\s+are\s+now\s+(a|an)\s+/i, label: "persona-override" },
+    { pattern: /\bsystem\s*:\s*(you|your|ignore|forget|act)/i, label: "system-prompt-inject" },
+    { pattern: /\bnew\s+instructions?\s*:/i, label: "new-instructions" },
+    { pattern: /\bact\s+as\s+(if\s+you\s+are|a|an)\s+/i, label: "act-as-override" },
+    { pattern: /\boverride\s+(safety|rules|guidelines|instructions)/i, label: "safety-override" },
+    { pattern: /\bdo\s+not\s+follow\s+(your|the|any)\s+(rules|instructions)/i, label: "rule-bypass" },
+    { pattern: /\bdeveloper\s+mode\s+(enabled|activated|on)/i, label: "developer-mode" },
+    { pattern: /\bjailbreak/i, label: "jailbreak" },
+    { pattern: /<\|.*?\|>/, label: "token-boundary-inject" },
+    { pattern: /\[INST\]|\[\/?SYS\]|<<SYS>>/, label: "llm-template-inject" },
+];
+/**
+ * Scans a text block for known prompt injection patterns.
+ * Returns the matched pattern label if injection is detected, null otherwise.
+ */
+function scanForPromptInjection(text) {
+    for (const { pattern, label } of PROMPT_INJECTION_PATTERNS) {
+        if (pattern.test(text)) {
+            return label;
+        }
+    }
+    return null;
+}
+/**
+ * Validate tool response content before returning to AI.
+ * Blocks: oversized responses, binary data, and prompt injection attempts.
+ * Returns error message if blocked, null if allowed.
+ */
+export function validateResponse(toolName, result) {
+    if (!result || !result.content)
+        return null;
+    for (const block of result.content) {
+        if (block.type !== "text" || !block.text)
+            continue;
+        // 1. Check response size
+        if (block.text.length > CONFIG.MAX_RESPONSE_SIZE) {
+            return `[DISCIPLINE] Response too large (${(block.text.length / 1024).toFixed(1)}KB, max: ${(CONFIG.MAX_RESPONSE_SIZE / 1024).toFixed(1)}KB).`;
+        }
+        // 2. Block binary/gibberish content in text responses
+        const nonPrintable = (block.text.match(/[^\x20-\x7E\n\r\t]/g) || []).length;
+        if (nonPrintable > block.text.length * 0.3) {
+            return `[DISCIPLINE] Response contains too much binary data (${nonPrintable} non-printable chars). Blocked.`;
+        }
+        // 3. Prompt injection detection — scan for adversarial override patterns
+        // that may have been embedded in file content, API responses, or user input.
+        const injectionLabel = scanForPromptInjection(block.text);
+        if (injectionLabel) {
+            return `[DISCIPLINE] Prompt injection pattern detected in "${toolName}" response (pattern: ${injectionLabel}). Response blocked to protect agent integrity.`;
+        }
+    }
+    return null;
+}
+/**
+ * Get discipline stats for an agent.
+ */
+export function getDisciplineStats(agent) {
+    const discipline = getOrCreateAgent(agent);
+    pruneOldCalls(discipline);
+    const cooldownUntil = cooldowns.get(agent);
+    return {
+        totalCalls: discipline.totalCalls,
+        recentCalls: discipline.calls.length,
+        inCooldown: isInCooldown(agent),
+        cooldownRemaining: cooldownUntil ? Math.max(0, cooldownUntil - Date.now()) : 0,
+        violations: discipline.violations,
+        lastViolation: discipline.lastViolation,
+    };
+}
+/**
+ * Get all agents' discipline stats.
+ */
+export function getAllDisciplineStats() {
+    // Load all from database to sync in-memory cache
+    try {
+        const allDb = AtabeyStorage.getAllDiscipline();
+        for (const item of allDb) {
+            if (!agentDiscipline.has(item.agent)) {
+                getOrCreateAgent(item.agent);
+            }
+        }
+    }
+    catch { /* ignore */ }
+    const stats = {};
+    for (const [agent] of agentDiscipline) {
+        stats[agent] = getDisciplineStats(agent);
+    }
+    return stats;
+}
+/**
+ * Reset discipline for all agents.
+ */
+export function resetDiscipline() {
+    agentDiscipline.clear();
+    cooldowns.clear();
+    try {
+        AtabeyStorage.clearAllDiscipline();
+        AtabeyStorage.clearDisciplineCalls();
+    }
+    catch { /* ignore */ }
+}
+export { CONFIG as DisciplineConfig };
+//# sourceMappingURL=discipline.js.map

package/dist/atabey-mcp/src/mcp/utils/discipline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discipline.js","sourceRoot":"","sources":["../../../../../../atabey-mcp/src/mcp/utils/discipline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAmBxD,gCAAgC;AAChC,MAAM,eAAe,GAAG,IAAI,GAAG,EAA2B,CAAC;AAE3D,qEAAqE;AAErE,MAAM,MAAM,GAAG;IACX,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,IAAI,EAAE,EAAE,CAAC;IAChF,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,KAAK,EAAE,EAAE,CAAC;IACvE,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS,EAAE,EAAE,CAAC;IACvE,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,QAAQ,EAAE,EAAE,CAAC;IACtE,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,EAAE,EAAE,CAAC;IACjE,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,QAAQ,EAAE,EAAE,CAAC,EAAE,qBAAqB;IACrG,yBAAyB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,IAAI,EAAE,EAAE,CAAC;IAE1F,4EAA4E;IAC5E,uBAAuB,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CACxD,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CACnE;IACD,qBAAqB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,KAAK,EAAE,EAAE,CAAC;IACnF,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,QAAQ,EAAE,EAAE,CAAC;IAE1E,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC;SACrD,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;IAElD,6EAA6E;IAC7E,oBAAoB,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;CACxF,CAAC;AAEF,SAAS,mBAAmB,CAAC,KAAa;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAC5B,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;YACjB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACf,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE5C,SAAS,WAAW,CAAC,KAAa,EAAE,UAAkB;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;IACtC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAE5B,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC;QACD,aAAa,CAAC,cAAc,CAAC,KAAK,EAAE;YAChC,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,aAAa,EAAE,KAAK;SACvB,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACnC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;QACjE,MAAM,MAAM,GAAoB;YAC5B,UAAU,EAAE,CAAC;YACb,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,gBAAgB,EAAE,IAAI,GAAG,EAAE;YAC3B,gBAAgB,EAAE,SAAS;YAC3B,UAAU,EAAE,CAAC;YACb,aAAa,EAAE,IAAI;YACnB,UAAU,EAAE,CAAC;SAChB,CAAC;QAEF,+BAA+B;QAC/B,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACnD,IAAI,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;gBACvC,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;gBACvC,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;gBAE7C,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBACrC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;gBAChD,CAAC;YACL,CAAC;QACL,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAExB,2EAA2E;QAC3E,kEAAkE;QAClE,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACnC,MAAM,MAAM,GAAG,aAAa,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACrG,CAAC;YACD,aAAa,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAExB,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC;AACvC,CAAC;AAED,SAAS,aAAa,CAAC,KAAsB,EAAE,WAAmB,KAAK;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;IACrC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IAC/B,6DAA6D;IAC7D,IAAI,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACnD,IAAI,OAAO,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAChD,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;gBAC5C,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC;YAClC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,oEAAoE;QACpE,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9C,aAAa,CAAC,cAAc,CAAC,KAAK,EAAE;gBAChC,UAAU,EAAE,UAAU,EAAE,UAAU,IAAI,CAAC;gBACvC,UAAU,EAAE,UAAU,EAAE,UAAU,IAAI,CAAC;gBACvC,aAAa,EAAE,UAAU,EAAE,aAAa,IAAI,IAAI;gBAChD,aAAa,EAAE,CAAC;aACnB,CAAC,CAAC;QACP,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,MAAc;IAClD,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,UAAU,EAAE,CAAC;QACb,UAAU,CAAC,UAAU,EAAE,CAAC;QACxB,UAAU,CAAC,aAAa,GAAG,MAAM,CAAC;QAElC,IAAI,CAAC;YACD,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChD,aAAa,CAAC,cAAc,CAAC,KAAK,EAAE;gBAChC,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,aAAa;aAChB,CAAC,CAAC;QACP,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,KAAa,EACb,QAAgB,EAChB,IAA6B;IAE7B,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAE3C,6DAA6D;IAC7D,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC7B,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvC,CAAC;IAED,oBAAoB;IACpB,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACzD,OAAO,sBAAsB,KAAK,uBAAuB,SAAS,uBAAuB,CAAC;IAC9F,CAAC;IAED,+CAA+C;IAC/C,IAAI,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,eAAe,CAAC,KAAK,EAAE,qCAAqC,QAAQ,EAAE,CAAC,CAAC;QACxE,OAAO,sBAAsB,QAAQ,0BAA0B,KAAK,iBAAiB,CAAC;IAC1F,CAAC;IAED,oCAAoC;IACpC,IAAI,UAAU,CAAC,gBAAgB,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5E,eAAe,CAAC,KAAK,EAAE,0CAA0C,QAAQ,EAAE,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,OAAO,sBAAsB,KAAK,2BAA2B,QAAQ,qBAAqB,OAAO,EAAE,CAAC;IACxG,CAAC;IAED,4BAA4B;IAC5B,IAAI,UAAU,CAAC,UAAU,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAClD,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,eAAe,CAAC,KAAK,EAAE,6BAA6B,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC;QAC/E,OAAO,sBAAsB,KAAK,8BAA8B,MAAM,CAAC,eAAe,eAAe,MAAM,CAAC,WAAW,GAAC,IAAI,IAAI,CAAC;IACrI,CAAC;IAED,yCAAyC;IACzC,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACzD,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,eAAe,CAAC,KAAK,EAAE,wBAAwB,MAAM,CAAC,oBAAoB,OAAO,CAAC,CAAC;QACnF,OAAO,sBAAsB,KAAK,yBAAyB,MAAM,CAAC,oBAAoB,mBAAmB,MAAM,CAAC,WAAW,GAAC,IAAI,IAAI,CAAC;IACzI,CAAC;IAED,kDAAkD;IAClD,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;QAC9D,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAC1D,IAAI,OAAO,EAAE,CAAC;YACV,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YACvC,eAAe,CAAC,KAAK,EAAE,gCAAgC,QAAQ,KAAK,MAAM,CAAC,yBAAyB,EAAE,CAAC,CAAC;YACxG,OAAO,sBAAsB,KAAK,YAAY,QAAQ,KAAK,MAAM,CAAC,yBAAyB,2CAA2C,CAAC;QAC3I,CAAC;IACL,CAAC;IAED,qBAAqB;IACrB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;QACxC,eAAe,CAAC,KAAK,EAAE,mBAAmB,OAAO,CAAC,MAAM,QAAQ,CAAC,CAAC;QAClE,OAAO,0CAA0C,OAAO,CAAC,MAAM,gBAAgB,MAAM,CAAC,aAAa,IAAI,CAAC;IAC5G,CAAC;IAED,+CAA+C;IAC/C,IAAI,CAAC,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,YAAY,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACvE,IAAI,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAc,CAAC,CAAC;YAChE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;oBACnC,OAAO,gCAAgC,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC;gBAC1K,CAAC;YACL,CAAC;QACL,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;IAED,kEAAkE;IAClE,IAAI,MAAM,CAAC,uBAAuB,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC;QACxF,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC;YACvB,IAAI,CAAC;gBACD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBACpD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1B,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;oBACvE,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC;oBACrF,IAAI,SAAS,GAAG,MAAM,CAAC,qBAAqB,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBAChE,eAAe,CAAC,KAAK,EAAE,yBAAyB,OAAO,KAAK,SAAS,SAAS,CAAC,CAAC;wBAChF,OAAO,gCAAgC,OAAO,QAAQ,SAAS,qGAAqG,CAAC;oBACzK,CAAC;gBACL,CAAC;YACL,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IAED,kBAAkB;IAClB,UAAU,CAAC,UAAU,EAAE,CAAC;IACxB,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;QAClB,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,QAAQ,EAAE,OAAO,CAAC,MAAM;KAC3B,CAAC,CAAC;IAEH,4DAA4D;IAC5D,IAAI,CAAC;QACD,aAAa,CAAC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAExB,IAAI,CAAC;QACD,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChD,aAAa,CAAC,cAAc,CAAC,KAAK,EAAE;YAChC,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,aAAa;SAChB,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAExB,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,gFAAgF;AAChF,4EAA4E;AAC5E,yDAAyD;AACzD,MAAM,yBAAyB,GAA8C;IACzE,EAAE,OAAO,EAAE,sDAAsD,EAAa,KAAK,EAAE,qBAAqB,EAAE;IAC5G,EAAE,OAAO,EAAE,yDAAyD,EAAU,KAAK,EAAE,wBAAwB,EAAE;IAC/G,EAAE,OAAO,EAAE,2CAA2C,EAAyB,KAAK,EAAE,cAAc,EAAE;IACtG,EAAE,OAAO,EAAE,8BAA8B,EAAqC,KAAK,EAAE,kBAAkB,EAAE;IACzG,EAAE,OAAO,EAAE,8CAA8C,EAAqB,KAAK,EAAE,sBAAsB,EAAE;IAC7G,EAAE,OAAO,EAAE,4BAA4B,EAAwC,KAAK,EAAE,kBAAkB,EAAE;IAC1G,EAAE,OAAO,EAAE,wCAAwC,EAA0B,KAAK,EAAE,iBAAiB,EAAE;IACvG,EAAE,OAAO,EAAE,sDAAsD,EAAc,KAAK,EAAE,iBAAiB,EAAE;IACzG,EAAE,OAAO,EAAE,8DAA8D,EAAI,KAAK,EAAE,aAAa,EAAE;IACnG,EAAE,OAAO,EAAE,8CAA8C,EAAqB,KAAK,EAAE,gBAAgB,EAAE;IACvG,EAAE,OAAO,EAAE,cAAc,EAAsD,KAAK,EAAE,WAAW,EAAE;IACnG,EAAE,OAAO,EAAE,WAAW,EAAyD,KAAK,EAAE,uBAAuB,EAAE;IAC/G,EAAE,OAAO,EAAE,6BAA6B,EAAqC,KAAK,EAAE,qBAAqB,EAAE;CAC9G,CAAC;AAEF;;;GAGG;AACH,SAAS,sBAAsB,CAAC,IAAY;IACxC,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,yBAAyB,EAAE,CAAC;QACzD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,MAA0D;IACzG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE5C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,SAAS;QAEnD,yBAAyB;QACzB,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC/C,OAAO,oCAAoC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACnJ,CAAC;QAED,sDAAsD;QACtD,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAC5E,IAAI,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACzC,OAAO,wDAAwD,YAAY,iCAAiC,CAAC;QACjH,CAAC;QAED,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,cAAc,EAAE,CAAC;YACjB,OAAO,sDAAsD,QAAQ,wBAAwB,cAAc,iDAAiD,CAAC;QACjK,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAQ5C,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAE3C,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAE3C,OAAO;QACH,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM;QACpC,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC;QAC/B,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,aAAa,EAAE,UAAU,CAAC,aAAa;KAC1C,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IAOjC,iDAAiD;IACjD,IAAI,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,gBAAgB,EAAE,CAAC;QAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;QACL,CAAC;IACL,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAExB,MAAM,KAAK,GAA0D,EAAE,CAAC;IACxE,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC;QACpC,KAAK,CAAC,KAAK,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC3B,eAAe,CAAC,KAAK,EAAE,CAAC;IACxB,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,IAAI,CAAC;QACD,aAAa,CAAC,kBAAkB,EAAE,CAAC;QACnC,aAAa,CAAC,oBAAoB,EAAE,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AAC5B,CAAC;AAED,OAAO,EAAE,MAAM,IAAI,gBAAgB,EAAE,CAAC"}

package/dist/atabey-mcp/src/mcp/utils/finops.d.ts

@@ -0,0 +1,81 @@
+/**
+ * [FINOPS] Enterprise Token Cost & Budget Management Engine
+ * Real SQLite-backed token and monetary expenditure tracker.
+ * Enforces per-agent and team-wide budget limits with zero mock data.
+ */
+export interface BudgetState {
+    team: string;
+    monthlySpend: number;
+    monthlyBudget: number;
+    budgetLimit: number;
+    agentSpend: Record<string, number>;
+    periodStart: string;
+    periodEnd: string;
+    blocked: boolean;
+    blockReason: string | null;
+    triggeredAlerts: number[];
+    lastSync: string | null;
+}
+export interface AgentBudgetResult {
+    allowed: boolean;
+    monthlySpend: number;
+    monthlyBudget: number;
+    agentSpend: number;
+    agentMaxBudget: number;
+    usagePercent: number;
+    blocked: boolean;
+    blockReason: string | null;
+}
+export interface DailyTokenPoint {
+    day: string;
+    date: string;
+    tokens: number;
+    cost: number;
+    formattedTokens: string;
+    formattedCost: string;
+}
+export declare class FinOpsManager {
+    /**
+     * Records token usage and monetary cost into SQLite costs table.
+     */
+    static recordUsage(params: {
+        agent: string;
+        tokens: number;
+        provider?: string;
+        model?: string;
+        traceId?: string;
+    }): {
+        cost: number;
+        blocked: boolean;
+    };
+    /**
+     * Computes the live budget state from SQLite. Zero mock data.
+     */
+    static getBudgetState(): BudgetState;
+    /**
+     * Checks if a specific agent is within its individual budget limit.
+     */
+    static checkAgentBudget(agent: string): AgentBudgetResult;
+    /**
+     * Resets the budget period (clears current spend metadata and logs reset).
+     */
+    static resetBudgetPeriod(): void;
+    /**
+     * Returns real daily token and cost data for the last N days.
+     * Guaranteed zero mock data: if no usage, returns 0 values for each day.
+     */
+    static getDailyTokenHistory(days?: number): DailyTokenPoint[];
+    static setMonthlyBudget(usd: number): void;
+    static setAgentBudget(agent: string, usd: number): void;
+    /** Per-agent ceilings (falls back to the default when unset). */
+    static getAgentBudgets(): Record<string, number>;
+    static getWebhookUrl(): string | null;
+    static setWebhookUrl(url: string | null): void;
+    /** POST a JSON payload to the configured webhook (best-effort, never throws). */
+    static notifyBudgetWebhook(payload: Record<string, unknown>): Promise<boolean>;
+    /**
+     * Fire webhook alerts for thresholds crossed this month (once per threshold).
+     * Returns the thresholds that fired.
+     */
+    static checkAndNotifyBudgets(agent?: string): Promise<number[]>;
+}