ft-scout 9.0.7 → 9.0.8

package/bin/src/mcp/manager.js

@@ -0,0 +1,535 @@
+/**
+ * Scout MCP Ecosystem - Central Connection Manager
+ * Coordinates lifecycle, connection pools, tool execution, permissions, health, and persistence.
+ */
+import crypto from 'crypto';
+import { loadMCPServers, saveMCPServers, saveServerSecret, getServerSecret, deleteServerSecret, sanitizeServerConfig, } from './persistence.js';
+import { HttpMcpTransport, StdioMcpTransport } from './transport.js';
+import { MCPClient } from './client.js';
+import { normalizeMCPTool } from './discovery.js';
+import { MCPPermissionManager } from './permissions.js';
+import { MCPToolRouter } from './toolRouter.js';
+import { MCPTelemetry } from './telemetry.js';
+import { MCPHealthMonitor } from './health.js';
+import { MCPRecovery } from './recovery.js';
+export class MCPManager {
+    static instance = null;
+    servers = new Map();
+    clients = new Map();
+    initialized = false;
+    constructor() {
+        this.loadState();
+    }
+    static getInstance() {
+        if (!MCPManager.instance) {
+            MCPManager.instance = new MCPManager();
+        }
+        return MCPManager.instance;
+    }
+    loadState() {
+        const saved = loadMCPServers();
+        this.servers.clear();
+        for (const s of saved) {
+            // Reset in-memory volatile status on startup if was previously connecting
+            if (s.status === 'connecting' || s.status === 'reconnecting') {
+                s.status = 'disconnected';
+            }
+            this.servers.set(s.id, s);
+        }
+        this.initialized = true;
+    }
+    persistState() {
+        const list = Array.from(this.servers.values());
+        saveMCPServers(list);
+    }
+    /**
+     * Find server by ID or case-insensitive Name
+     */
+    getServer(idOrName) {
+        if (!idOrName)
+            return undefined;
+        // Direct ID lookup
+        const byId = this.servers.get(idOrName);
+        if (byId)
+            return byId;
+        // Name lookup
+        const lower = idOrName.toLowerCase().trim();
+        for (const s of this.servers.values()) {
+            if (s.name.toLowerCase() === lower || s.id.toLowerCase() === lower) {
+                return s;
+            }
+        }
+        return undefined;
+    }
+    /**
+     * List all registered MCP servers (with secrets sanitized)
+     */
+    listServers() {
+        return Array.from(this.servers.values()).map((s) => sanitizeServerConfig(s));
+    }
+    /**
+     * Register a new MCP server configuration and optionally store credentials
+     */
+    async addServer(config, secret) {
+        const name = config.name.trim();
+        const existing = this.getServer(name);
+        if (existing) {
+            throw new Error(`An MCP server with name "${name}" already exists.`);
+        }
+        const id = config.id || name.toLowerCase().replace(/[^a-z0-9]/g, '-') || `mcp-${Date.now()}`;
+        const now = new Date().toISOString();
+        const defaultPermissions = {
+            enabled: true,
+            allowedTools: [],
+            disabledTools: [],
+            requireConfirmationForDestructive: true,
+            autoApproveSafe: true,
+            ...config.permissions,
+        };
+        const server = {
+            id,
+            name,
+            description: config.description || '',
+            transport: config.transport,
+            endpoint: config.endpoint,
+            command: config.command,
+            args: config.args || [],
+            env: config.env || {},
+            authType: config.authType || (secret ? 'bearer' : 'none'),
+            authHeader: config.authHeader,
+            status: 'disconnected',
+            health: {
+                status: 'disconnected',
+            },
+            tools: [],
+            permissions: defaultPermissions,
+            createdAt: now,
+            updatedAt: now,
+        };
+        this.servers.set(id, server);
+        if (secret) {
+            saveServerSecret(id, secret);
+            server.hasSecret = true;
+        }
+        this.persistState();
+        return sanitizeServerConfig(server);
+    }
+    /**
+     * Remove an MCP server and its stored secrets
+     */
+    async removeServer(idOrName) {
+        const server = this.getServer(idOrName);
+        if (!server)
+            return false;
+        await this.disconnectServer(server.id).catch(() => { });
+        deleteServerSecret(server.id);
+        this.servers.delete(server.id);
+        this.clients.delete(server.id);
+        this.persistState();
+        return true;
+    }
+    /**
+     * Create an IMCPTransport instance for the given server config
+     */
+    createTransport(server) {
+        if (server.transport === 'http') {
+            if (!server.endpoint) {
+                throw new Error(`HTTP MCP server "${server.name}" requires an endpoint URL.`);
+            }
+            const headers = {};
+            const secret = getServerSecret(server.id);
+            if (secret) {
+                const headerName = server.authHeader || 'Authorization';
+                if (server.authType === 'bearer' || server.authType === 'oauth') {
+                    headers[headerName] = `Bearer ${secret}`;
+                }
+                else if (server.authType === 'api-key') {
+                    headers[headerName] = secret;
+                }
+                else {
+                    headers[headerName] = secret;
+                }
+            }
+            return new HttpMcpTransport(server.endpoint, headers);
+        }
+        else {
+            if (!server.command) {
+                throw new Error(`stdio MCP server "${server.name}" requires a command.`);
+            }
+            return new StdioMcpTransport(server.command, server.args || [], server.env || {});
+        }
+    }
+    /**
+     * Connect to an MCP server, perform initialize handshake, and discover tools
+     */
+    async connectServer(idOrName) {
+        const server = this.getServer(idOrName);
+        if (!server) {
+            throw new Error(`MCP server "${idOrName}" not found.`);
+        }
+        server.status = 'connecting';
+        this.persistState();
+        try {
+            // Disconnect old client if present
+            if (this.clients.has(server.id)) {
+                await this.clients.get(server.id)?.disconnect().catch(() => { });
+                this.clients.delete(server.id);
+            }
+            const transport = this.createTransport(server);
+            const client = new MCPClient(transport);
+            const initResult = await client.connectAndInitialize();
+            server.capabilities = initResult.capabilities;
+            // Discover and normalize tools
+            const rawTools = await client.listTools();
+            const normalizedTools = rawTools.map((rt) => normalizeMCPTool(rt, server.id, server.name));
+            // Restore disabled state if previously set
+            const disabledSet = new Set(server.permissions.disabledTools || []);
+            for (const t of normalizedTools) {
+                if (disabledSet.has(t.name)) {
+                    t.enabled = false;
+                }
+            }
+            server.tools = normalizedTools;
+            server.status = 'connected';
+            server.lastConnectedAt = new Date().toISOString();
+            server.updatedAt = new Date().toISOString();
+            // Ping for initial latency check
+            try {
+                const latency = await client.ping();
+                server.health = {
+                    status: 'connected',
+                    latencyMs: latency,
+                    lastCheckedAt: new Date().toISOString(),
+                };
+            }
+            catch {
+                server.health = {
+                    status: 'connected',
+                    lastCheckedAt: new Date().toISOString(),
+                };
+            }
+            this.clients.set(server.id, client);
+            this.persistState();
+            return sanitizeServerConfig(server);
+        }
+        catch (err) {
+            server.status = 'error';
+            server.health = {
+                status: 'error',
+                error: err?.message || String(err),
+                lastCheckedAt: new Date().toISOString(),
+            };
+            this.persistState();
+            throw err;
+        }
+    }
+    /**
+     * Disconnect an active MCP server
+     */
+    async disconnectServer(idOrName) {
+        const server = this.getServer(idOrName);
+        if (!server) {
+            throw new Error(`MCP server "${idOrName}" not found.`);
+        }
+        const client = this.clients.get(server.id);
+        if (client) {
+            await client.disconnect().catch(() => { });
+            this.clients.delete(server.id);
+        }
+        server.status = 'disconnected';
+        server.health = {
+            status: 'disconnected',
+            lastCheckedAt: new Date().toISOString(),
+        };
+        server.updatedAt = new Date().toISOString();
+        this.persistState();
+        return sanitizeServerConfig(server);
+    }
+    /**
+     * Reconnect to an MCP server
+     */
+    async reconnectServer(idOrName) {
+        const server = this.getServer(idOrName);
+        if (!server) {
+            throw new Error(`MCP server "${idOrName}" not found.`);
+        }
+        await this.disconnectServer(server.id).catch(() => { });
+        return await this.connectServer(server.id);
+    }
+    /**
+     * Check health and latency for a server, or all connected servers
+     */
+    async checkHealth(idOrName) {
+        const results = {};
+        const targets = idOrName
+            ? [this.getServer(idOrName)].filter(Boolean)
+            : Array.from(this.servers.values());
+        for (const server of targets) {
+            const client = this.clients.get(server.id);
+            const health = await MCPHealthMonitor.checkHealth(server, client);
+            server.health = health;
+            server.status = health.status;
+            results[server.id] = health;
+        }
+        this.persistState();
+        return results;
+    }
+    /**
+     * Retrieve all discovered tools for a server
+     */
+    getToolsForServer(idOrName) {
+        const server = this.getServer(idOrName);
+        return server ? server.tools : [];
+    }
+    /**
+     * Retrieve all discovered tools across all servers
+     */
+    getAllTools(options = {}) {
+        const list = [];
+        for (const server of this.servers.values()) {
+            if (options.onlyEnabled && (server.status !== 'connected' || !server.permissions.enabled)) {
+                continue;
+            }
+            for (const tool of server.tools) {
+                if (options.onlyEnabled && !tool.enabled)
+                    continue;
+                list.push(tool);
+            }
+        }
+        return list;
+    }
+    /**
+     * Enable or disable an individual tool on a server
+     */
+    setToolEnabled(serverId, toolName, enabled) {
+        const server = this.getServer(serverId);
+        if (!server)
+            return false;
+        const tool = server.tools.find((t) => t.name === toolName || t.qualifiedName === toolName);
+        if (!tool)
+            return false;
+        tool.enabled = enabled;
+        const disabledSet = new Set(server.permissions.disabledTools || []);
+        if (enabled) {
+            disabledSet.delete(tool.name);
+        }
+        else {
+            disabledSet.add(tool.name);
+        }
+        server.permissions.disabledTools = Array.from(disabledSet);
+        server.updatedAt = new Date().toISOString();
+        this.persistState();
+        return true;
+    }
+    /**
+     * Update permissions for an MCP server
+     */
+    setServerPermissions(serverId, permissions) {
+        const server = this.getServer(serverId);
+        if (!server)
+            return false;
+        server.permissions = {
+            ...server.permissions,
+            ...permissions,
+        };
+        server.updatedAt = new Date().toISOString();
+        this.persistState();
+        return true;
+    }
+    /**
+     * Toggle a tool enabled/disabled state for a given server
+     */
+    toggleTool(serverId, toolName, enabled) {
+        const server = this.getServer(serverId);
+        if (!server)
+            return undefined;
+        const targetTool = server.tools.find((t) => t.originalName === toolName || t.name === toolName);
+        if (!targetTool)
+            return undefined;
+        targetTool.enabled = enabled !== undefined ? enabled : !targetTool.enabled;
+        const disabledList = new Set(server.permissions.disabledTools || []);
+        if (targetTool.enabled) {
+            disabledList.delete(targetTool.originalName);
+            disabledList.delete(targetTool.name);
+        }
+        else {
+            disabledList.add(targetTool.originalName);
+        }
+        server.permissions.disabledTools = Array.from(disabledList);
+        server.updatedAt = new Date().toISOString();
+        this.persistState();
+        return sanitizeServerConfig(server);
+    }
+    /**
+     * Route user request to relevant MCP tools
+     */
+    routeTools(userGoal) {
+        return MCPToolRouter.routeTools(userGoal, Array.from(this.servers.values()));
+    }
+    /**
+     * Find tool by either its qualified name (mcp__<serverId>__<toolName>) or its original name
+     */
+    findTool(nameOrQualified) {
+        for (const server of this.servers.values()) {
+            for (const tool of server.tools) {
+                if (tool.qualifiedName === nameOrQualified || tool.name === nameOrQualified) {
+                    return { tool, server };
+                }
+            }
+        }
+        return undefined;
+    }
+    /**
+     * Execute an MCP tool by name, handling permissions, connection, retry, and telemetry
+     */
+    async executeTool(nameOrQualified, args = {}) {
+        const startedAt = new Date().toISOString();
+        const startTime = Date.now();
+        const invocationId = `mcp_inv_${Date.now()}_${Math.random().toString(36).slice(2, 7)}`;
+        const target = this.findTool(nameOrQualified);
+        if (!target) {
+            const err = `Tool "${nameOrQualified}" is not registered on any connected MCP server.`;
+            const result = {
+                serverId: 'unknown',
+                serverName: 'Unknown',
+                toolName: nameOrQualified,
+                invocationId,
+                startedAt,
+                completedAt: new Date().toISOString(),
+                status: 'error',
+                inputSummary: JSON.stringify(args),
+                outputSummary: err,
+                result: null,
+                error: err,
+                executionDurationMs: Date.now() - startTime,
+            };
+            MCPTelemetry.recordResult(result);
+            return result;
+        }
+        const { tool, server } = target;
+        // 1. Enforce Permissions
+        const perm = MCPPermissionManager.checkToolAccess(server, tool);
+        if (!perm.allowed) {
+            const blockedReason = perm.reason || `Tool "${tool.name}" is restricted by Scout permissions.`;
+            const result = {
+                serverId: server.id,
+                serverName: server.name,
+                toolName: tool.name,
+                invocationId,
+                startedAt,
+                completedAt: new Date().toISOString(),
+                status: 'blocked',
+                inputSummary: JSON.stringify(args),
+                outputSummary: `[MCP PERMISSION BLOCKED]: ${blockedReason}`,
+                result: { success: false, error: 'PermissionBlocked', message: blockedReason },
+                error: blockedReason,
+                executionDurationMs: Date.now() - startTime,
+            };
+            MCPTelemetry.recordResult(result);
+            return result;
+        }
+        // 2. Ensure Client is connected
+        let client = this.clients.get(server.id);
+        if (!client || !client.isConnected()) {
+            try {
+                await this.connectServer(server.id);
+                client = this.clients.get(server.id);
+            }
+            catch (connErr) {
+                const classified = MCPRecovery.classifyError(connErr, server.name, tool.permissionLevel === 'destructive');
+                const result = {
+                    serverId: server.id,
+                    serverName: server.name,
+                    toolName: tool.name,
+                    invocationId,
+                    startedAt,
+                    completedAt: new Date().toISOString(),
+                    status: 'error',
+                    inputSummary: JSON.stringify(args),
+                    outputSummary: classified.userFriendlyMessage,
+                    result: null,
+                    error: classified.originalError,
+                    executionDurationMs: Date.now() - startTime,
+                };
+                MCPTelemetry.recordResult(result);
+                return result;
+            }
+        }
+        if (!client) {
+            throw new Error(`Could not obtain active client for MCP server "${server.name}".`);
+        }
+        // 3. Execute with bounded recovery
+        let execResult = null;
+        let execError = null;
+        const maxRetries = tool.permissionLevel === 'read' ? 1 : 0;
+        for (let attempt = 0; attempt <= maxRetries; attempt++) {
+            try {
+                execResult = await client.callTool(tool.originalName, args);
+                execError = null;
+                break;
+            }
+            catch (callErr) {
+                execError = callErr;
+                const classified = MCPRecovery.classifyError(callErr, server.name, tool.permissionLevel === 'destructive');
+                if (classified.isRecoverable && classified.canRetry && attempt < maxRetries) {
+                    // Try reconnecting once before final retry
+                    await this.reconnectServer(server.id).catch(() => { });
+                    client = this.clients.get(server.id) || client;
+                    continue;
+                }
+                break;
+            }
+        }
+        server.lastActivityAt = new Date().toISOString();
+        this.persistState();
+        const completedAt = new Date().toISOString();
+        const duration = Date.now() - startTime;
+        if (execError) {
+            const classified = MCPRecovery.classifyError(execError, server.name, tool.permissionLevel === 'destructive');
+            const result = {
+                serverId: server.id,
+                serverName: server.name,
+                toolName: tool.name,
+                invocationId,
+                startedAt,
+                completedAt,
+                status: classified.category === 'TIMEOUT' ? 'timeout' : 'error',
+                inputSummary: JSON.stringify(args),
+                outputSummary: classified.userFriendlyMessage,
+                result: null,
+                error: classified.originalError,
+                executionDurationMs: duration,
+            };
+            MCPTelemetry.recordResult(result);
+            return result;
+        }
+        const outSummary = typeof execResult === 'string'
+            ? execResult.slice(0, 300)
+            : (execResult?.text ? String(execResult.text).slice(0, 300) : JSON.stringify(execResult).slice(0, 300));
+        const successRecord = {
+            serverId: server.id,
+            serverName: server.name,
+            toolName: tool.name,
+            invocationId,
+            startedAt,
+            completedAt,
+            status: 'success',
+            inputSummary: JSON.stringify(args),
+            outputSummary: outSummary,
+            result: execResult,
+            executionDurationMs: duration,
+        };
+        MCPTelemetry.recordResult(successRecord);
+        return successRecord;
+    }
+    /**
+     * Get recent observable activity
+     */
+    getActivityLog(limit = 50) {
+        return MCPTelemetry.loadActivity(limit);
+    }
+}
+export function getMCPManager() {
+    return MCPManager.getInstance();
+}
+//# sourceMappingURL=manager.js.map

package/bin/src/mcp/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["manager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAQ5B,OAAO,EACH,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,oBAAoB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAsB,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,aAAa,EAA4B,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,OAAO,UAAU;IACX,MAAM,CAAC,QAAQ,GAAsB,IAAI,CAAC;IAC1C,OAAO,GAAiC,IAAI,GAAG,EAAE,CAAC;IAClD,OAAO,GAA2B,IAAI,GAAG,EAAE,CAAC;IAC5C,WAAW,GAAY,KAAK,CAAC;IAErC;QACI,IAAI,CAAC,SAAS,EAAE,CAAC;IACrB,CAAC;IAEM,MAAM,CAAC,WAAW;QACrB,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACvB,UAAU,CAAC,QAAQ,GAAG,IAAI,UAAU,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAEO,SAAS;QACb,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACpB,0EAA0E;YAC1E,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;gBAC3D,CAAC,CAAC,MAAM,GAAG,cAAc,CAAC;YAC9B,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC5B,CAAC;IAEO,YAAY;QAChB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/C,cAAc,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACI,SAAS,CAAC,QAAgB;QAC7B,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,mBAAmB;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAEtB,cAAc;QACd,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;gBACjE,OAAO,CAAC,CAAC;YACb,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;OAEG;IACI,WAAW;QACd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CAClB,MAIC,EACD,MAAe;QAEf,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,QAAQ,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,mBAAmB,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7F,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,MAAM,kBAAkB,GAAyB;YAC7C,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,EAAE;YAChB,aAAa,EAAE,EAAE;YACjB,iCAAiC,EAAE,IAAI;YACvC,eAAe,EAAE,IAAI;YACrB,GAAG,MAAM,CAAC,WAAW;SACxB,CAAC;QAEF,MAAM,MAAM,GAAoB;YAC5B,EAAE;YACF,IAAI;YACJ,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YACrC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;YACvB,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;YACzD,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE;gBACJ,MAAM,EAAE,cAAc;aACzB;YACD,KAAK,EAAE,EAAE;YACT,WAAW,EAAE,kBAAkB;YAC/B,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACjB,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAE7B,IAAI,MAAM,EAAE,CAAC;YACT,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QAC5B,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY,CAAC,QAAgB;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAExD,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,MAAuB;QAC3C,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,IAAI,6BAA6B,CAAC,CAAC;YAClF,CAAC;YAED,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAE1C,IAAI,MAAM,EAAE,CAAC;gBACT,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,eAAe,CAAC;gBACxD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAC9D,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,MAAM,EAAE,CAAC;gBAC7C,CAAC;qBAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACvC,OAAO,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC;gBACjC,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC;gBACjC,CAAC;YACL,CAAC;YAED,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,IAAI,uBAAuB,CAAC,CAAC;YAC7E,CAAC;YACD,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACtF,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,aAAa,CAAC,QAAgB;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,eAAe,QAAQ,cAAc,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC;QAC7B,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,IAAI,CAAC;YACD,mCAAmC;YACnC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;gBACjE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC;YAExC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACvD,MAAM,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;YAE9C,+BAA+B;YAC/B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1C,MAAM,eAAe,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAE3F,2CAA2C;YAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YACpE,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;gBAC9B,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1B,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC;gBACtB,CAAC;YACL,CAAC;YAED,MAAM,CAAC,KAAK,GAAG,eAAe,CAAC;YAC/B,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;YAC5B,MAAM,CAAC,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAE5C,iCAAiC;YACjC,IAAI,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpC,MAAM,CAAC,MAAM,GAAG;oBACZ,MAAM,EAAE,WAAW;oBACnB,SAAS,EAAE,OAAO;oBAClB,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBAC1C,CAAC;YACN,CAAC;YAAC,MAAM,CAAC;gBACL,MAAM,CAAC,MAAM,GAAG;oBACZ,MAAM,EAAE,WAAW;oBACnB,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBAC1C,CAAC;YACN,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,YAAY,EAAE,CAAC;YAEpB,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;YACxB,MAAM,CAAC,MAAM,GAAG;gBACZ,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC;gBAClC,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC1C,CAAC;YACF,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,eAAe,QAAQ,cAAc,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,MAAM,EAAE,CAAC;YACT,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,CAAC,MAAM,GAAG,cAAc,CAAC;QAC/B,MAAM,CAAC,MAAM,GAAG;YACZ,MAAM,EAAE,cAAc;YACtB,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC1C,CAAC;QACF,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE5C,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,eAAe,CAAC,QAAgB;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,eAAe,QAAQ,cAAc,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,WAAW,CAAC,QAAiB;QACtC,MAAM,OAAO,GAAoC,EAAE,CAAC;QAEpD,MAAM,OAAO,GAAG,QAAQ;YACpB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAsB;YACjE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAExC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAClE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;QAChC,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;;OAEG;IACI,iBAAiB,CAAC,QAAgB;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACI,WAAW,CAAC,OAAO,GAA8B,EAAE;QACtD,MAAM,IAAI,GAAwB,EAAE,CAAC;QACrC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxF,SAAS;YACb,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC9B,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACnD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACI,cAAc,CAAC,QAAgB,EAAE,QAAgB,EAAE,OAAgB;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC;QAC3F,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAExB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,OAAO,EAAE,CAAC;YACV,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACJ,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,CAAC,WAAW,CAAC,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE5C,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACI,oBAAoB,CAAC,QAAgB,EAAE,WAA0C;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,MAAM,CAAC,WAAW,GAAG;YACjB,GAAG,MAAM,CAAC,WAAW;YACrB,GAAG,WAAW;SACjB,CAAC;QACF,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACI,UAAU,CAAC,QAAgB,EAAE,QAAgB,EAAE,OAAiB;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAE9B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAChG,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAElC,UAAU,CAAC,OAAO,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;QAE3E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACrE,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACrB,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC7C,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACJ,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,CAAC,WAAW,CAAC,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5D,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACI,UAAU,CAAC,QAAgB;QAC9B,OAAO,aAAa,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjF,CAAC;IAED;;OAEG;IACI,QAAQ,CAAC,eAAuB;QACnC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,aAAa,KAAK,eAAe,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC5B,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,WAAW,CACpB,eAAuB,EACvB,IAAI,GAAwB,EAAE;QAE9B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAEvF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,GAAG,GAAG,SAAS,eAAe,kDAAkD,CAAC;YACvF,MAAM,MAAM,GAAkB;gBAC1B,QAAQ,EAAE,SAAS;gBACnB,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,eAAe;gBACzB,YAAY;gBACZ,SAAS;gBACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,MAAM,EAAE,OAAO;gBACf,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAClC,aAAa,EAAE,GAAG;gBAClB,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,GAAG;gBACV,mBAAmB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aAC9C,CAAC;YACF,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QAEhC,yBAAyB;QACzB,MAAM,IAAI,GAAG,oBAAoB,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,IAAI,CAAC,IAAI,uCAAuC,CAAC;YAC/F,MAAM,MAAM,GAAkB;gBAC1B,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,YAAY;gBACZ,SAAS;gBACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAClC,aAAa,EAAE,6BAA6B,aAAa,EAAE;gBAC3D,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,aAAa,EAAE;gBAC9E,KAAK,EAAE,aAAa;gBACpB,mBAAmB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aAC9C,CAAC;YACF,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,gCAAgC;QAChC,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC;gBACD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACpC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,OAAY,EAAE,CAAC;gBACpB,MAAM,UAAU,GAAG,WAAW,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,KAAK,aAAa,CAAC,CAAC;gBAC3G,MAAM,MAAM,GAAkB;oBAC1B,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,YAAY;oBACZ,SAAS;oBACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACrC,MAAM,EAAE,OAAO;oBACf,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAClC,aAAa,EAAE,UAAU,CAAC,mBAAmB;oBAC7C,MAAM,EAAE,IAAI;oBACZ,KAAK,EAAE,UAAU,CAAC,aAAa;oBAC/B,mBAAmB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBAC9C,CAAC;gBACF,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAClC,OAAO,MAAM,CAAC;YAClB,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,kDAAkD,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;QACvF,CAAC;QAED,mCAAmC;QACnC,IAAI,UAAU,GAAQ,IAAI,CAAC;QAC3B,IAAI,SAAS,GAAQ,IAAI,CAAC;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE3D,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YACrD,IAAI,CAAC;gBACD,UAAU,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;gBAC5D,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM;YACV,CAAC;YAAC,OAAO,OAAY,EAAE,CAAC;gBACpB,SAAS,GAAG,OAAO,CAAC;gBACpB,MAAM,UAAU,GAAG,WAAW,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,KAAK,aAAa,CAAC,CAAC;gBAC3G,IAAI,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC,QAAQ,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;oBAC1E,2CAA2C;oBAC3C,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;oBACvD,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC;oBAC/C,SAAS;gBACb,CAAC;gBACD,MAAM;YACV,CAAC;QACL,CAAC;QAED,MAAM,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,IAAI,SAAS,EAAE,CAAC;YACZ,MAAM,UAAU,GAAG,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,KAAK,aAAa,CAAC,CAAC;YAC7G,MAAM,MAAM,GAAkB;gBAC1B,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,YAAY;gBACZ,SAAS;gBACT,WAAW;gBACX,MAAM,EAAE,UAAU,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;gBAC/D,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAClC,aAAa,EAAE,UAAU,CAAC,mBAAmB;gBAC7C,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,UAAU,CAAC,aAAa;gBAC/B,mBAAmB,EAAE,QAAQ;aAChC,CAAC;YACF,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,UAAU,KAAK,QAAQ;YAC7C,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC1B,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAE5G,MAAM,aAAa,GAAkB;YACjC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,YAAY;YACZ,SAAS;YACT,WAAW;YACX,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAClC,aAAa,EAAE,UAAU;YACzB,MAAM,EAAE,UAAU;YAClB,mBAAmB,EAAE,QAAQ;SAChC,CAAC;QAEF,YAAY,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QACzC,OAAO,aAAa,CAAC;IACzB,CAAC;IAED;;OAEG;IACI,cAAc,CAAC,KAAK,GAAW,EAAE;QACpC,OAAO,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;CACJ;AAED,MAAM,UAAU,aAAa;IACzB,OAAO,UAAU,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC"}

package/bin/src/mcp/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["permissions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEzF,MAAM,WAAW,wBAAwB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,kBAAkB,CAAC;CACvC;AAED,qBAAa,oBAAoB;IAC7B;;OAEG;IACH,OAAc,eAAe,CACzB,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,iBAAiB,GACxB,wBAAwB,CA+C1B;CACJ"}

package/bin/src/mcp/permissions.js

@@ -0,0 +1,50 @@
+/**
+ * Scout MCP Ecosystem - Permission Boundary Engine
+ * Enforces server-level and tool-level permission rules before execution or model exposure.
+ */
+export class MCPPermissionManager {
+    /**
+     * Check if a tool can be made available to the agent or executed
+     */
+    static checkToolAccess(server, tool) {
+        // 1. Server-level disabled check
+        if (server.permissions.enabled === false) {
+            return {
+                allowed: false,
+                reason: `MCP server "${server.name}" is currently disabled in Scout settings.`,
+                requiresApproval: false,
+                permissionLevel: tool.permissionLevel,
+            };
+        }
+        // 2. Individual tool disabled check
+        if (tool.enabled === false ||
+            (server.permissions.disabledTools && server.permissions.disabledTools.includes(tool.name))) {
+            return {
+                allowed: false,
+                reason: `Tool "${tool.name}" on server "${server.name}" has been disabled by the user.`,
+                requiresApproval: false,
+                permissionLevel: tool.permissionLevel,
+            };
+        }
+        // 3. Whitelist check (if configured)
+        if (Array.isArray(server.permissions.allowedTools) &&
+            server.permissions.allowedTools.length > 0 &&
+            !server.permissions.allowedTools.includes(tool.name)) {
+            return {
+                allowed: false,
+                reason: `Tool "${tool.name}" is not included in the allowed tools whitelist for "${server.name}".`,
+                requiresApproval: false,
+                permissionLevel: tool.permissionLevel,
+            };
+        }
+        // 4. Approval requirements for destructive or admin actions
+        const isDestructive = tool.permissionLevel === 'destructive' || tool.permissionLevel === 'admin';
+        const requiresApproval = isDestructive && server.permissions.requireConfirmationForDestructive;
+        return {
+            allowed: true,
+            requiresApproval,
+            permissionLevel: tool.permissionLevel,
+        };
+    }
+}
+//# sourceMappingURL=permissions.js.map

package/bin/src/mcp/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["permissions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,MAAM,OAAO,oBAAoB;IAC7B;;OAEG;IACI,MAAM,CAAC,eAAe,CACzB,MAAuB,EACvB,IAAuB;QAEvB,iCAAiC;QACjC,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACvC,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,eAAe,MAAM,CAAC,IAAI,4CAA4C;gBAC9E,gBAAgB,EAAE,KAAK;gBACvB,eAAe,EAAE,IAAI,CAAC,eAAe;aACxC,CAAC;QACN,CAAC;QAED,oCAAoC;QACpC,IACI,IAAI,CAAC,OAAO,KAAK,KAAK;YACtB,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,IAAI,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAC5F,CAAC;YACC,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,SAAS,IAAI,CAAC,IAAI,gBAAgB,MAAM,CAAC,IAAI,kCAAkC;gBACvF,gBAAgB,EAAE,KAAK;gBACvB,eAAe,EAAE,IAAI,CAAC,eAAe;aACxC,CAAC;QACN,CAAC;QAED,qCAAqC;QACrC,IACI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC;YAC9C,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YAC1C,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EACtD,CAAC;YACC,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,SAAS,IAAI,CAAC,IAAI,yDAAyD,MAAM,CAAC,IAAI,IAAI;gBAClG,gBAAgB,EAAE,KAAK;gBACvB,eAAe,EAAE,IAAI,CAAC,eAAe;aACxC,CAAC;QACN,CAAC;QAED,4DAA4D;QAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,KAAK,aAAa,IAAI,IAAI,CAAC,eAAe,KAAK,OAAO,CAAC;QACjG,MAAM,gBAAgB,GAAG,aAAa,IAAI,MAAM,CAAC,WAAW,CAAC,iCAAiC,CAAC;QAE/F,OAAO;YACH,OAAO,EAAE,IAAI;YACb,gBAAgB;YAChB,eAAe,EAAE,IAAI,CAAC,eAAe;SACxC,CAAC;IACN,CAAC;CACJ"}

package/bin/src/mcp/persistence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence.d.ts","sourceRoot":"","sources":["persistence.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAmBlD;;GAEG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAQvD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAoB9D;AAqBD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAKhE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM/D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,QAMlD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGzD;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,eAAe,EAAE,CAalD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE,QAKxD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,GAAG,eAAe,CAS7E"}