nduka 1.0.0

package/dist/tool-runtime/manifest-loader.d.ts

@@ -0,0 +1,6 @@
+import { type SecureToolManifest } from './manifest.js';
+export declare const EMPTY_SECURE_TOOL_MANIFEST: SecureToolManifest;
+export declare function secureToolManifestPath(): string;
+export declare function loadSecureToolManifest(path?: string): SecureToolManifest;
+export declare function formatSecureToolManifestStatus(manifest: SecureToolManifest): string;
+//# sourceMappingURL=manifest-loader.d.ts.map

package/dist/tool-runtime/manifest-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-loader.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/manifest-loader.ts"],"names":[],"mappings":"AAGA,OAAO,EAA2B,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEjF,eAAO,MAAM,0BAA0B,EAAE,kBAGxC,CAAC;AAEF,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED,wBAAgB,sBAAsB,CAAC,IAAI,SAA2B,GAAG,kBAAkB,CAK1F;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,CAInF"}

package/dist/tool-runtime/manifest-loader.js

@@ -0,0 +1,23 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { parseSecureToolManifest } from './manifest.js';
+export const EMPTY_SECURE_TOOL_MANIFEST = {
+    version: 1,
+    tools: [],
+};
+export function secureToolManifestPath() {
+    return process.env.CHATBOT_SECURE_TOOLS_PATH || process.env.SECURE_TOOLS_PATH || './config/secure-tools.chatbot.json';
+}
+export function loadSecureToolManifest(path = secureToolManifestPath()) {
+    const resolved = resolve(process.cwd(), path);
+    if (!existsSync(resolved))
+        return EMPTY_SECURE_TOOL_MANIFEST;
+    const raw = JSON.parse(readFileSync(resolved, 'utf-8'));
+    return parseSecureToolManifest(raw);
+}
+export function formatSecureToolManifestStatus(manifest) {
+    const enabled = manifest.tools.filter((tool) => tool.enabled !== false);
+    const rows = enabled.map((tool) => `- ${tool.name} (${tool.type}, ${tool.riskLevel}${tool.requiresApproval ? ', approval' : ''})`);
+    return ['🔐 *Secure Tool Manifest*', `Enabled tools: ${enabled.length}`, ...rows].join('\n');
+}
+//# sourceMappingURL=manifest-loader.js.map

package/dist/tool-runtime/manifest-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-loader.js","sourceRoot":"","sources":["../../src/tool-runtime/manifest-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,uBAAuB,EAA2B,MAAM,eAAe,CAAC;AAEjF,MAAM,CAAC,MAAM,0BAA0B,GAAuB;IAC5D,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,EAAE;CACV,CAAC;AAEF,MAAM,UAAU,sBAAsB;IACpC,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,oCAAoC,CAAC;AACxH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAI,GAAG,sBAAsB,EAAE;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,0BAA0B,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAY,CAAC;IACnE,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,QAA4B;IACzE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnI,OAAO,CAAC,2BAA2B,EAAE,kBAAkB,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/F,CAAC"}

package/dist/tool-runtime/manifest.d.ts

@@ -0,0 +1,71 @@
+import type { SecureToolAccessConfig } from './access-policy.js';
+import type { OAuthRefreshConfig } from './oauth.js';
+import { type ToolRiskLevel } from './policy.js';
+import type { SecureToolResponseConfig } from './response-template.js';
+import type { SecureToolMultipartConfig } from './multipart.js';
+import type { ToolDefinition, ToolNaturalLanguageHints, ToolRoutingConfig, ToolVerificationConfig } from './engine.js';
+export type SecureToolType = 'mock' | 'http' | 'webhook' | 'mcp' | 'workflow';
+export type SecureToolMethod = 'GET' | 'POST';
+export type SecureToolBodyType = 'json' | 'multipart';
+export interface SecureToolAuthConfig {
+    mode: 'none' | 'env_ref' | 'oauth_refresh';
+    headerName?: string;
+    envName?: string;
+    oauth?: OAuthRefreshConfig;
+}
+export interface SecureToolMcpConfig {
+    serverName: string;
+    toolName: string;
+    timeoutMs?: number;
+    transport?: 'http';
+    endpointUrl?: string;
+    allowedHosts?: string[];
+    auth?: SecureToolAuthConfig;
+}
+export interface SecureToolApiConfig {
+    url: string;
+    method: SecureToolMethod;
+    allowedHosts: string[];
+    timeoutMs: number;
+    auth?: SecureToolAuthConfig;
+    bodyType?: SecureToolBodyType;
+    multipart?: SecureToolMultipartConfig;
+}
+export interface SecureToolManifestWorkflowStep {
+    tool: string;
+    when?: string;
+    input?: Record<string, unknown>;
+    assign?: Record<string, string>;
+}
+export interface SecureToolManifestWorkflowConfig {
+    steps: SecureToolManifestWorkflowStep[];
+}
+export interface SecureToolManifestTool {
+    type: SecureToolType;
+    name: string;
+    description: string;
+    enabled: boolean;
+    riskLevel: ToolRiskLevel;
+    ownerOnly: boolean;
+    tenantScoped: boolean;
+    requiresApproval: boolean;
+    inputSchema: ToolDefinition['inputSchema'];
+    outputSchema: ToolDefinition['outputSchema'];
+    naturalLanguage?: ToolNaturalLanguageHints;
+    routing?: ToolRoutingConfig;
+    verification?: ToolVerificationConfig;
+    access?: SecureToolAccessConfig;
+    response?: SecureToolResponseConfig;
+    api?: SecureToolApiConfig;
+    mcp?: SecureToolMcpConfig;
+    workflow?: SecureToolManifestWorkflowConfig;
+    mockResponse?: unknown;
+}
+export interface SecureToolManifest {
+    version: 1;
+    tools: SecureToolManifestTool[];
+}
+export declare function validateToolUrl(rawUrl: string, allowedHosts: string[]): URL;
+export declare function parseSecureToolManifest(raw: unknown): SecureToolManifest;
+export declare function toolDefinitionFromManifest(tool: SecureToolManifestTool): ToolDefinition;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/tool-runtime/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/manifest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAwB,MAAM,oBAAoB,CAAC;AACvF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAA0B,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,KAAK,EAAE,yBAAyB,EAAiC,MAAM,gBAAgB,CAAC;AAC/F,OAAO,KAAK,EAAE,cAAc,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,sBAAsB,EAA6E,MAAM,aAAa,CAAC;AAElM,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,GAAG,UAAU,CAAC;AAC9E,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,MAAM,CAAC;AAC9C,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,WAAW,CAAC;AAEtD,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,eAAe,CAAC;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,kBAAkB,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,oBAAoB,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,gBAAgB,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,oBAAoB,CAAC;IAC5B,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,SAAS,CAAC,EAAE,yBAAyB,CAAC;CACvC;AAED,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,gCAAgC;IAC/C,KAAK,EAAE,8BAA8B,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,aAAa,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,WAAW,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC;IAC3C,YAAY,EAAE,cAAc,CAAC,cAAc,CAAC,CAAC;IAC7C,eAAe,CAAC,EAAE,wBAAwB,CAAC;IAC3C,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,YAAY,CAAC,EAAE,sBAAsB,CAAC;IACtC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IACpC,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,QAAQ,CAAC,EAAE,gCAAgC,CAAC;IAC5C,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,sBAAsB,EAAE,CAAC;CACjC;AAwTD,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,GAAG,CAc3E;AA0BD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,kBAAkB,CAyCxE;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,sBAAsB,GAAG,cAAc,CAkBvF"}

package/dist/tool-runtime/manifest.js

@@ -0,0 +1,467 @@
+import { isIP } from 'node:net';
+import { permissionForRiskLevel } from './policy.js';
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function validateId(value, label) {
+    if (!/^[a-z][a-z0-9_]{1,63}$/.test(value))
+        throw new Error(`Invalid ${label}: ${value}`);
+}
+function validateEnvName(value, label) {
+    if (value === undefined)
+        return undefined;
+    if (!/^[A-Z][A-Z0-9_]{1,127}$/.test(value))
+        throw new Error(`Invalid ${label}: ${value}`);
+    return value;
+}
+function parseBool(value, fallback) {
+    return typeof value === 'boolean' ? value : fallback;
+}
+function parseTimeout(value, fallback) {
+    if (typeof value !== 'number' || !Number.isFinite(value))
+        return fallback;
+    return Math.max(1_000, Math.min(Math.round(value), 300_000));
+}
+function parseRiskLevel(value) {
+    if (value === 'public_read' || value === 'owner_read' || value === 'sensitive_read' || value === 'write_action' || value === 'financial_action' || value === 'external_side_effect' || value === 'admin_action')
+        return value;
+    throw new Error(`Invalid riskLevel: ${String(value)}`);
+}
+function parseStringArray(value, label) {
+    if (!Array.isArray(value))
+        throw new Error(`${label} must be an array`);
+    return value.filter((item) => typeof item === 'string' && item.trim().length > 0).map((item) => item.trim());
+}
+function parseOptionalStringArray(value, label) {
+    if (value === undefined)
+        return undefined;
+    return parseStringArray(value, label);
+}
+function parseConfidence(value, fallback) {
+    if (value === undefined)
+        return fallback;
+    if (typeof value !== 'number' || !Number.isFinite(value))
+        return fallback;
+    return Math.max(0, Math.min(1, value));
+}
+function parseRouting(value) {
+    if (value === undefined)
+        return undefined;
+    if (!isRecord(value))
+        throw new Error('routing must be an object');
+    return {
+        minConfidence: parseConfidence(value.minConfidence, 0.75),
+        clarifyBelow: parseConfidence(value.clarifyBelow, 0.75),
+        ignoreBelow: parseConfidence(value.ignoreBelow, 0.35),
+        clarificationPrompt: typeof value.clarificationPrompt === 'string' ? value.clarificationPrompt.trim() : undefined,
+    };
+}
+function parseAccess(value) {
+    if (value === undefined)
+        return undefined;
+    if (!isRecord(value))
+        throw new Error('access must be an object');
+    const mode = value.mode;
+    const allowed = ['public', 'profile', 'allow_list', 'deny_list', 'owner_only'];
+    if (typeof mode !== 'string' || !allowed.includes(mode))
+        throw new Error('access.mode is invalid');
+    const allowJids = parseOptionalStringArray(value.allowJids, 'access.allowJids');
+    const denyJids = parseOptionalStringArray(value.denyJids, 'access.denyJids');
+    if (mode === 'allow_list' && (!allowJids || allowJids.length === 0))
+        throw new Error('access.allowJids is required for allow_list tools');
+    return {
+        mode: mode,
+        allowGroups: value.allowGroups === true,
+        allowJids,
+        denyJids,
+        denyReply: typeof value.denyReply === 'string' ? value.denyReply.trim() : undefined,
+    };
+}
+function parseResponse(value) {
+    if (value === undefined)
+        return undefined;
+    if (!isRecord(value))
+        throw new Error('response must be an object');
+    const fields = value.fields;
+    if (fields !== undefined && !isRecord(fields))
+        throw new Error('response.fields must be an object');
+    return {
+        successTemplate: typeof value.successTemplate === 'string' ? value.successTemplate : undefined,
+        emptyTemplate: typeof value.emptyTemplate === 'string' ? value.emptyTemplate : undefined,
+        errorTemplate: typeof value.errorTemplate === 'string' ? value.errorTemplate : undefined,
+        fields: isRecord(fields)
+            ? Object.fromEntries(Object.entries(fields).filter(([, raw]) => isRecord(raw)).map(([key, raw]) => [key, {
+                    label: typeof raw.label === 'string' ? raw.label : undefined,
+                    format: typeof raw.format === 'string' ? raw.format : undefined,
+                    currencyField: typeof raw.currencyField === 'string' ? raw.currencyField : undefined,
+                }]))
+            : undefined,
+    };
+}
+function parseFieldPresence(value, label) {
+    if (value === undefined)
+        return undefined;
+    const allowed = ['required', 'optional', 'conditional', 'managed'];
+    if (typeof value === 'string' && allowed.includes(value))
+        return value;
+    throw new Error(`${label}.presence is invalid`);
+}
+function parseRequiredWhen(value, label) {
+    if (value === undefined)
+        return undefined;
+    if (!isRecord(value))
+        throw new Error(`${label}.requiredWhen must be an object`);
+    const field = typeof value.field === 'string' ? value.field.trim() : '';
+    if (!field)
+        throw new Error(`${label}.requiredWhen.field is required`);
+    return {
+        field,
+        exists: typeof value.exists === 'boolean' ? value.exists : undefined,
+        equals: typeof value.equals === 'string' || typeof value.equals === 'number' || typeof value.equals === 'boolean' ? value.equals : undefined,
+        notEquals: typeof value.notEquals === 'string' || typeof value.notEquals === 'number' || typeof value.notEquals === 'boolean' ? value.notEquals : undefined,
+    };
+}
+function parseSlotSource(value, label) {
+    if (value === undefined)
+        return undefined;
+    const allowed = ['profile', 'customer', 'customer_secret', 'profile_or_customer', 'env_secret', 'constant', 'system', 'dynamic_variable', 'owner_provided', 'tool_response'];
+    if (typeof value === 'string' && allowed.includes(value))
+        return value;
+    throw new Error(`${label}.source is invalid`);
+}
+function parseVerificationMode(value) {
+    if (value === undefined)
+        return undefined;
+    const allowed = ['none', 'chat_link', 'collect_only', 'collect_and_verify', 'profile_or_collect', 'owner_approval', 'otp', 'api_key'];
+    if (typeof value === 'string' && allowed.includes(value))
+        return value;
+    throw new Error('verification.mode is invalid');
+}
+function parseVerification(value) {
+    if (value === undefined)
+        return undefined;
+    if (!isRecord(value))
+        throw new Error('verification must be an object');
+    const onSuccessAssign = value.onSuccessAssign;
+    if (onSuccessAssign !== undefined && !isRecord(onSuccessAssign))
+        throw new Error('verification.onSuccessAssign must be an object');
+    return {
+        mode: parseVerificationMode(value.mode),
+        identityFields: parseOptionalStringArray(value.identityFields, 'verification.identityFields'),
+        secretFields: parseOptionalStringArray(value.secretFields, 'verification.secretFields'),
+        verifyWithTool: typeof value.verifyWithTool === 'string' ? value.verifyWithTool.trim() : undefined,
+        maxAttempts: typeof value.maxAttempts === 'number' && Number.isFinite(value.maxAttempts) ? Math.max(1, Math.round(value.maxAttempts)) : undefined,
+        onSuccessAssign: isRecord(onSuccessAssign) ? Object.fromEntries(Object.entries(onSuccessAssign).filter(([, v]) => typeof v === 'string')) : undefined,
+    };
+}
+function parseOAuth(value) {
+    if (!isRecord(value))
+        throw new Error('auth.oauth must be an object');
+    const tokenUrl = typeof value.tokenUrl === 'string' ? value.tokenUrl.trim() : '';
+    const allowedHosts = parseRequiredStringArray(value.allowedHosts, 'auth.oauth.allowedHosts');
+    validateToolUrl(tokenUrl, allowedHosts);
+    const refreshTokenEnvName = validateEnvName(typeof value.refreshTokenEnvName === 'string' ? value.refreshTokenEnvName : undefined, 'auth.oauth.refreshTokenEnvName');
+    if (!refreshTokenEnvName)
+        throw new Error('auth.oauth.refreshTokenEnvName is required');
+    return {
+        tokenUrl,
+        allowedHosts,
+        refreshTokenEnvName,
+        clientIdEnvName: validateEnvName(typeof value.clientIdEnvName === 'string' ? value.clientIdEnvName : undefined, 'auth.oauth.clientIdEnvName'),
+        clientSecretEnvName: validateEnvName(typeof value.clientSecretEnvName === 'string' ? value.clientSecretEnvName : undefined, 'auth.oauth.clientSecretEnvName'),
+        scope: typeof value.scope === 'string' ? value.scope.trim() : undefined,
+    };
+}
+function parseAuth(value, label = 'api.auth') {
+    if (value === undefined)
+        return undefined;
+    if (!isRecord(value))
+        throw new Error(`${label} must be an object`);
+    const mode = value.mode;
+    if (mode !== 'none' && mode !== 'env_ref' && mode !== 'oauth_refresh')
+        throw new Error(`${label}.mode must be none, env_ref, or oauth_refresh`);
+    const headerName = typeof value.headerName === 'string' ? value.headerName.trim() : undefined;
+    const envName = validateEnvName(typeof value.envName === 'string' ? value.envName.trim() : undefined, `${label}.envName`);
+    if (mode === 'env_ref') {
+        if (!headerName)
+            throw new Error(`${label}.headerName is required`);
+        if (!envName)
+            throw new Error(`${label}.envName is required`);
+        if (!/^[A-Za-z0-9-]{1,64}$/.test(headerName))
+            throw new Error(`Invalid ${label}.headerName: ${headerName}`);
+    }
+    if (mode === 'oauth_refresh' && !value.oauth)
+        throw new Error(`${label}.oauth is required`);
+    return { mode, headerName, envName, oauth: mode === 'oauth_refresh' ? parseOAuth(value.oauth) : undefined };
+}
+function parseMcp(value) {
+    if (!isRecord(value))
+        throw new Error('mcp must be an object');
+    const serverName = typeof value.serverName === 'string' ? value.serverName.trim() : '';
+    const toolName = typeof value.toolName === 'string' ? value.toolName.trim() : '';
+    if (!serverName)
+        throw new Error('mcp.serverName is required');
+    if (!toolName)
+        throw new Error('mcp.toolName is required');
+    const endpointUrl = typeof value.endpointUrl === 'string' ? value.endpointUrl.trim() : undefined;
+    const allowedHosts = endpointUrl ? parseRequiredStringArray(value.allowedHosts, 'mcp.allowedHosts') : undefined;
+    if (endpointUrl && allowedHosts)
+        validateToolUrl(endpointUrl, allowedHosts);
+    return {
+        serverName,
+        toolName,
+        timeoutMs: parseTimeout(value.timeoutMs, 30_000),
+        transport: value.transport === undefined || value.transport === 'http' ? 'http' : (() => { throw new Error('mcp.transport must be http'); })(),
+        endpointUrl,
+        allowedHosts,
+        auth: parseAuth(value.auth, 'mcp.auth'),
+    };
+}
+function parseRequiredStringArray(value, label) {
+    const values = parseStringArray(value, label).map((item) => item.toLowerCase());
+    if (values.length === 0)
+        throw new Error(`${label} must include at least one value`);
+    return values;
+}
+function parseMultipart(value) {
+    if (value === undefined)
+        return undefined;
+    if (!isRecord(value))
+        throw new Error('api.multipart must be an object');
+    const fields = value.fields;
+    const files = value.files;
+    if (fields !== undefined && !isRecord(fields))
+        throw new Error('api.multipart.fields must be an object');
+    if (files !== undefined && !isRecord(files))
+        throw new Error('api.multipart.files must be an object');
+    return {
+        fields: isRecord(fields) ? Object.fromEntries(Object.entries(fields).filter(([, v]) => typeof v === 'string')) : undefined,
+        files: isRecord(files) ? Object.fromEntries(Object.entries(files).map(([fieldName, raw]) => {
+            if (!isRecord(raw))
+                throw new Error(`api.multipart.files.${fieldName} must be an object`);
+            const source = raw.source;
+            if (source !== 'argument')
+                throw new Error(`api.multipart.files.${fieldName}.source must be argument`);
+            return [fieldName, {
+                    source,
+                    argumentName: typeof raw.argumentName === 'string' ? raw.argumentName : undefined,
+                    allowedMimeTypes: parseOptionalStringArray(raw.allowedMimeTypes, `api.multipart.files.${fieldName}.allowedMimeTypes`),
+                    maxBytes: typeof raw.maxBytes === 'number' && Number.isFinite(raw.maxBytes) ? Math.max(1, Math.round(raw.maxBytes)) : undefined,
+                }];
+        })) : undefined,
+    };
+}
+function parseWorkflow(value) {
+    if (!isRecord(value))
+        throw new Error('workflow must be an object');
+    if (!Array.isArray(value.steps) || value.steps.length === 0)
+        throw new Error('workflow.steps must be a non-empty array');
+    return {
+        steps: value.steps.map((raw, index) => {
+            if (!isRecord(raw))
+                throw new Error(`workflow.steps.${index} must be an object`);
+            const tool = typeof raw.tool === 'string' ? raw.tool.trim() : '';
+            validateId(tool, `workflow.steps.${index}.tool`);
+            return {
+                tool,
+                when: typeof raw.when === 'string' ? raw.when.trim() : undefined,
+                input: isRecord(raw.input) ? raw.input : undefined,
+                assign: isRecord(raw.assign) ? Object.fromEntries(Object.entries(raw.assign).filter(([, v]) => typeof v === 'string')) : undefined,
+            };
+        }),
+    };
+}
+function parseSchema(value, label) {
+    if (!isRecord(value))
+        throw new Error(`${label} must be an object`);
+    const out = {};
+    for (const [name, raw] of Object.entries(value)) {
+        validateId(name, `${label} field`);
+        if (!isRecord(raw))
+            throw new Error(`${label}.${name} must be an object`);
+        const type = raw.type;
+        if (type !== 'string' && type !== 'number' && type !== 'boolean' && type !== 'object' && type !== 'array')
+            throw new Error(`${label}.${name}.type is invalid`);
+        const enumValue = raw.enum;
+        if (enumValue !== undefined && !Array.isArray(enumValue))
+            throw new Error(`${label}.${name}.enum must be an array`);
+        out[name] = {
+            type,
+            required: raw.required === true,
+            optionalPrompt: typeof raw.optionalPrompt === 'string' ? raw.optionalPrompt : undefined,
+            label: typeof raw.label === 'string' ? raw.label : undefined,
+            requiredWhen: parseRequiredWhen(raw.requiredWhen, `${label}.${name}`),
+            presence: parseFieldPresence(raw.presence, `${label}.${name}`),
+            description: typeof raw.description === 'string' ? raw.description : undefined,
+            source: parseSlotSource(raw.source, `${label}.${name}`),
+            askIfMissing: raw.askIfMissing === true,
+            prompt: typeof raw.prompt === 'string' ? raw.prompt : undefined,
+            secret: raw.secret === true || raw.source === 'customer_secret' || raw.source === 'env_secret',
+            exposeToModel: raw.exposeToModel === true,
+            validationRegex: typeof raw.validationRegex === 'string' ? raw.validationRegex : undefined,
+            validationMessage: typeof raw.validationMessage === 'string' ? raw.validationMessage : undefined,
+            minLength: typeof raw.minLength === 'number' ? raw.minLength : undefined,
+            maxLength: typeof raw.maxLength === 'number' ? raw.maxLength : undefined,
+            maxAttempts: typeof raw.maxAttempts === 'number' ? Math.max(1, Math.round(raw.maxAttempts)) : undefined,
+            enum: Array.isArray(enumValue) ? enumValue.filter((item) => typeof item === 'string' || typeof item === 'number' || typeof item === 'boolean') : undefined,
+            envName: validateEnvName(typeof raw.envName === 'string' ? raw.envName : undefined, `${label}.${name}.envName`),
+            value: typeof raw.value === 'string' || typeof raw.value === 'number' || typeof raw.value === 'boolean' ? raw.value : undefined,
+            systemKey: raw.systemKey === 'chatJid' || raw.systemKey === 'senderJid' || raw.systemKey === 'tenantId' || raw.systemKey === 'userId' || raw.systemKey === 'timestamp' ? raw.systemKey : undefined,
+            dynamicVariableName: typeof raw.dynamicVariableName === 'string' ? raw.dynamicVariableName : undefined,
+        };
+    }
+    return out;
+}
+function parseOutputSchema(value, label) {
+    if (value === undefined)
+        return {};
+    return parseSchema(value, label);
+}
+function parseNaturalLanguage(value) {
+    if (value === undefined)
+        return undefined;
+    if (!isRecord(value))
+        throw new Error('naturalLanguage must be an object');
+    const useWhen = typeof value.useWhen === 'string' ? value.useWhen.trim() : undefined;
+    const customerFacingName = typeof value.customerFacingName === 'string' ? value.customerFacingName.trim() : undefined;
+    const approvalPrompt = typeof value.approvalPrompt === 'string' ? value.approvalPrompt.trim() : undefined;
+    const triggerPhrases = value.triggerPhrases === undefined ? undefined : parseStringArray(value.triggerPhrases, 'naturalLanguage.triggerPhrases');
+    const examples = value.examples === undefined ? undefined : parseStringArray(value.examples, 'naturalLanguage.examples');
+    const tags = value.tags === undefined ? undefined : parseStringArray(value.tags, 'naturalLanguage.tags');
+    if (parseBool(value.enabled, true) && !useWhen && (!triggerPhrases || triggerPhrases.length === 0) && (!examples || examples.length === 0))
+        throw new Error('Enabled naturalLanguage config must include useWhen, triggerPhrases, or examples');
+    return { enabled: parseBool(value.enabled, true), useWhen, triggerPhrases, examples, tags, customerFacingName, approvalPrompt };
+}
+function parseApi(value) {
+    if (!isRecord(value))
+        throw new Error('api must be an object');
+    const url = typeof value.url === 'string' ? value.url.trim() : '';
+    const method = value.method;
+    if (method !== 'GET' && method !== 'POST')
+        throw new Error('api.method must be GET or POST');
+    const allowedHosts = parseRequiredStringArray(value.allowedHosts, 'api.allowedHosts');
+    validateToolUrl(url, allowedHosts);
+    const bodyType = value.bodyType === undefined ? 'json' : value.bodyType;
+    if (bodyType !== 'json' && bodyType !== 'multipart')
+        throw new Error('api.bodyType must be json or multipart');
+    if (bodyType === 'multipart' && method !== 'POST')
+        throw new Error('api.bodyType multipart requires POST');
+    return { url, method, allowedHosts, timeoutMs: parseTimeout(value.timeoutMs, 30_000), auth: parseAuth(value.auth), bodyType, multipart: parseMultipart(value.multipart) };
+}
+export function validateToolUrl(rawUrl, allowedHosts) {
+    let parsed;
+    try {
+        parsed = new URL(rawUrl);
+    }
+    catch {
+        throw new Error(`Invalid tool URL: ${rawUrl}`);
+    }
+    if (parsed.protocol !== 'https:')
+        throw new Error('Tool URLs must use HTTPS');
+    const hostname = normalizeHostname(parsed.hostname);
+    if (!allowedHosts.map((host) => normalizeHostname(host)).includes(hostname))
+        throw new Error(`Tool URL host is not allowlisted: ${hostname}`);
+    if (hostname === 'localhost' || hostname.endsWith('.localhost') || hostname.endsWith('.local'))
+        throw new Error('Tool URL cannot target local hosts');
+    if (isSuspiciousNumericHost(hostname))
+        throw new Error('Tool URL cannot target numeric hosts that may bypass IP validation');
+    if (isPrivateIp(hostname))
+        throw new Error('Tool URL cannot target private or loopback IP ranges');
+    return parsed;
+}
+function normalizeHostname(hostname) {
+    return hostname.trim().toLowerCase().replace(/^\[|\]$/g, '').replace(/\.$/, '');
+}
+function isSuspiciousNumericHost(hostname) {
+    if (/^\d+$/.test(hostname))
+        return true;
+    if (/^0x[0-9a-f]+$/i.test(hostname))
+        return true;
+    if (/^(0[0-7]+)(\.(0[0-7]+)){0,3}$/i.test(hostname))
+        return true;
+    return false;
+}
+function isPrivateIp(hostname) {
+    const version = isIP(hostname);
+    if (version === 0)
+        return false;
+    if (version === 6) {
+        const lower = hostname.toLowerCase();
+        return lower === '::1' || lower.startsWith('fc') || lower.startsWith('fd') || lower.startsWith('fe80:') || lower.startsWith('::ffff:127.') || lower.startsWith('::ffff:10.') || lower.startsWith('::ffff:192.168.');
+    }
+    const parts = hostname.split('.').map((part) => Number(part));
+    if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part)))
+        return true;
+    const [a, b] = parts;
+    return a === 10 || a === 127 || a === 0 || (a === 169 && b === 254) || (a === 172 && b >= 16 && b <= 31) || (a === 192 && b === 168);
+}
+export function parseSecureToolManifest(raw) {
+    if (!isRecord(raw))
+        throw new Error('Tool manifest must be an object');
+    if (raw.version !== 1)
+        throw new Error('Tool manifest version must be 1');
+    if (!Array.isArray(raw.tools))
+        throw new Error('Tool manifest tools must be an array');
+    const names = new Set();
+    const tools = raw.tools.map((item) => {
+        if (!isRecord(item))
+            throw new Error('Tool entry must be an object');
+        const type = item.type;
+        if (type !== 'mock' && type !== 'http' && type !== 'webhook' && type !== 'mcp' && type !== 'workflow')
+            throw new Error('Tool type must be mock, http, webhook, mcp, or workflow');
+        const name = typeof item.name === 'string' ? item.name.trim() : '';
+        validateId(name, 'tool name');
+        if (names.has(name))
+            throw new Error(`Duplicate tool name: ${name}`);
+        names.add(name);
+        const description = typeof item.description === 'string' ? item.description.trim() : '';
+        if (!description)
+            throw new Error(`Tool ${name} is missing description`);
+        const riskLevel = parseRiskLevel(item.riskLevel);
+        const requiresApproval = parseBool(item.requiresApproval, false);
+        if ((riskLevel === 'write_action' || riskLevel === 'financial_action' || riskLevel === 'external_side_effect') && !requiresApproval)
+            throw new Error(`Tool ${name} must require approval for ${riskLevel}`);
+        return {
+            type,
+            name,
+            description,
+            enabled: parseBool(item.enabled, true),
+            riskLevel,
+            ownerOnly: parseBool(item.ownerOnly, false),
+            tenantScoped: parseBool(item.tenantScoped, true),
+            requiresApproval,
+            inputSchema: parseSchema(item.inputSchema, `${name}.inputSchema`),
+            outputSchema: parseOutputSchema(item.outputSchema, `${name}.outputSchema`),
+            naturalLanguage: parseNaturalLanguage(item.naturalLanguage),
+            routing: parseRouting(item.routing),
+            verification: parseVerification(item.verification),
+            access: parseAccess(item.access),
+            response: parseResponse(item.response),
+            api: type === 'http' || type === 'webhook' ? parseApi(item.api) : undefined,
+            mcp: type === 'mcp' ? parseMcp(item.mcp) : undefined,
+            workflow: type === 'workflow' ? parseWorkflow(item.workflow) : undefined,
+            mockResponse: type === 'mock' ? item.mockResponse ?? {} : undefined,
+        };
+    });
+    return { version: 1, tools };
+}
+export function toolDefinitionFromManifest(tool) {
+    return {
+        name: tool.name,
+        description: tool.description,
+        permission: permissionForRiskLevel(tool.riskLevel),
+        riskLevel: tool.riskLevel,
+        ownerOnly: tool.ownerOnly,
+        enabled: tool.enabled,
+        inputSchema: tool.inputSchema,
+        outputSchema: tool.outputSchema,
+        timeoutMs: tool.api?.timeoutMs || tool.mcp?.timeoutMs || 30_000,
+        maxRetries: tool.type === 'http' || tool.type === 'webhook' ? 1 : 0,
+        tenantScoped: tool.tenantScoped,
+        requiresApproval: tool.requiresApproval,
+        naturalLanguage: tool.naturalLanguage,
+        routing: tool.routing,
+        verification: tool.verification,
+    };
+}
+//# sourceMappingURL=manifest.js.map

package/dist/tool-runtime/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/tool-runtime/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAIhC,OAAO,EAAE,sBAAsB,EAAsB,MAAM,aAAa,CAAC;AA0EzE,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa;IAC9C,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB,EAAE,KAAa;IAC/D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,QAAiB;IAClD,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,QAAgB;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1E,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,gBAAgB,IAAI,KAAK,KAAK,cAAc,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,sBAAsB,IAAI,KAAK,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAC9N,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/H,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc,EAAE,KAAa;IAC7D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,QAAgB;IACvD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACnE,OAAO;QACL,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC;QACzD,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC;QACvD,WAAW,EAAE,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC;QACrD,mBAAmB,EAAE,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;KAClH,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,OAAO,GAA2B,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IACvG,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAA4B,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC3H,MAAM,SAAS,GAAG,wBAAwB,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC7E,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC1I,OAAO;QACL,IAAI,EAAE,IAA4B;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW,KAAK,IAAI;QACvC,SAAS;QACT,QAAQ;QACR,SAAS,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACpG,OAAO;QACL,eAAe,EAAE,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;QAC9F,aAAa,EAAE,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QACxF,aAAa,EAAE,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QACxF,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;YACtB,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE;oBACvG,KAAK,EAAE,OAAQ,GAA+B,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA+B,CAAC,KAAe,CAAC,CAAC,CAAC,SAAS;oBAChI,MAAM,EAAE,OAAQ,GAA+B,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA+B,CAAC,MAA4D,CAAC,CAAC,CAAC,SAAS;oBAC/K,aAAa,EAAE,OAAQ,GAA+B,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA+B,CAAC,aAAuB,CAAC,CAAC,CAAC,SAAS;iBACzJ,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAa;IACvD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,OAAO,GAAwB,CAAC,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;IACxF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAA0B,CAAC;QAAE,OAAO,KAA0B,CAAC;IACjH,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACtD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IACvE,OAAO;QACL,KAAK;QACL,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACpE,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAC5I,SAAS,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KAC5J,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAa;IACpD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,OAAO,GAAqB,CAAC,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC;IAC/L,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAuB,CAAC;QAAE,OAAO,KAAuB,CAAC;IAC3G,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,OAAO,GAA2B,CAAC,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC9J,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAA6B,CAAC;QAAE,OAAO,KAA6B,CAAC;IACvH,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACxE,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;IAC9C,IAAI,eAAe,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnI,OAAO;QACL,IAAI,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC;QACvC,cAAc,EAAE,wBAAwB,CAAC,KAAK,CAAC,cAAc,EAAE,6BAA6B,CAAC;QAC7F,YAAY,EAAE,wBAAwB,CAAC,KAAK,CAAC,YAAY,EAAE,2BAA2B,CAAC;QACvF,cAAc,EAAE,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;QAClG,WAAW,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACjJ,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAA2B,CAAC,CAAC,CAAC,SAAS;KAChL,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,MAAM,YAAY,GAAG,wBAAwB,CAAC,KAAK,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;IAC7F,eAAe,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACxC,MAAM,mBAAmB,GAAG,eAAe,CAAC,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;IACrK,IAAI,CAAC,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACxF,OAAO;QACL,QAAQ;QACR,YAAY;QACZ,mBAAmB;QACnB,eAAe,EAAE,eAAe,CAAC,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,EAAE,4BAA4B,CAAC;QAC7I,mBAAmB,EAAE,eAAe,CAAC,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,EAAE,gCAAgC,CAAC;QAC7J,KAAK,EAAE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAK,GAAG,UAAU;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+CAA+C,CAAC,CAAC;IAChJ,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,KAAK,UAAU,CAAC,CAAC;IAC1H,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;QAC9D,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,gBAAgB,UAAU,EAAE,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,IAAI,KAAK,eAAe,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC5F,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAC9G,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACjG,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChH,IAAI,WAAW,IAAI,YAAY;QAAE,eAAe,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC5E,OAAO;QACL,UAAU;QACV,QAAQ;QACR,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC;QAChD,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;QAC9I,WAAW;QACX,YAAY;QACZ,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc,EAAE,KAAa;IAC7D,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACzG,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACtG,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAA2B,CAAC,CAAC,CAAC,SAAS;QACpJ,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE;YACzF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,oBAAoB,CAAC,CAAC;YAC1F,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1B,IAAI,MAAM,KAAK,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,0BAA0B,CAAC,CAAC;YACvG,OAAO,CAAC,SAAS,EAAE;oBACjB,MAAM;oBACN,YAAY,EAAE,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;oBACjF,gBAAgB,EAAE,wBAAwB,CAAC,GAAG,CAAC,gBAAgB,EAAE,uBAAuB,SAAS,mBAAmB,CAAC;oBACrH,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;iBACxF,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACpE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACzH,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,oBAAoB,CAAC,CAAC;YACjF,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,UAAU,CAAC,IAAI,EAAE,kBAAkB,KAAK,OAAO,CAAC,CAAC;YACjD,OAAO;gBACL,IAAI;gBACJ,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;gBAChE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBAClD,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAA2B,CAAC,CAAC,CAAC,SAAS;aAC7J,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACpE,MAAM,GAAG,GAAkC,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,UAAU,CAAC,IAAI,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,oBAAoB,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,kBAAkB,CAAC,CAAC;QAC/J,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC;QAC3B,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,wBAAwB,CAAC,CAAC;QACpH,GAAG,CAAC,IAAI,CAAC,GAAG;YACV,IAAI;YACJ,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI;YAC/B,cAAc,EAAE,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;YACvF,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC5D,YAAY,EAAE,iBAAiB,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;YACrE,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;YAC9D,WAAW,EAAE,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAC9E,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;YACvD,YAAY,EAAE,GAAG,CAAC,YAAY,KAAK,IAAI;YACvC,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YAC/D,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY;YAC9F,aAAa,EAAE,GAAG,CAAC,aAAa,KAAK,IAAI;YACzC,eAAe,EAAE,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;YAC1F,iBAAiB,EAAE,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YAChG,SAAS,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACxE,SAAS,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACxE,WAAW,EAAE,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YACvG,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAqC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YAC7L,OAAO,EAAE,eAAe,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,KAAK,IAAI,IAAI,UAAU,CAAC;YAC/G,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC/H,SAAS,EAAE,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,WAAW,IAAI,GAAG,CAAC,SAAS,KAAK,UAAU,IAAI,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAClM,mBAAmB,EAAE,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;SACvG,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACtD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,CAAmC,CAAC;AACrE,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,MAAM,kBAAkB,GAAG,OAAO,KAAK,CAAC,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACtH,MAAM,cAAc,GAAG,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1G,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;IACjJ,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IACzH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IACzG,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IAChP,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,CAAC;AAClI,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC7F,MAAM,YAAY,GAAG,wBAAwB,CAAC,KAAK,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;IACtF,eAAe,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;IACxE,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC/G,IAAI,QAAQ,KAAK,WAAW,IAAI,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC3G,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;AAC5K,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,YAAsB;IACpE,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;IAC9I,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACtJ,IAAI,uBAAuB,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IAC7H,IAAI,WAAW,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACnG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,gCAAgC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACtN,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;IACrB,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;AACvI,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAClL,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;QACrE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,yBAAyB,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,gBAAgB,GAAG,SAAS,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,KAAK,cAAc,IAAI,SAAS,KAAK,kBAAkB,IAAI,SAAS,KAAK,sBAAsB,CAAC,IAAI,CAAC,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,8BAA8B,SAAS,EAAE,CAAC,CAAC;QAC5M,OAAO;YACL,IAAI;YACJ,IAAI;YACJ,WAAW;YACX,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;YACtC,SAAS;YACT,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;YAC3C,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC;YAChD,gBAAgB;YAChB,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,cAAc,CAAC;YACjE,YAAY,EAAE,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,eAAe,CAAC;YAC1E,eAAe,EAAE,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC;YAC3D,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;YACnC,YAAY,EAAE,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC;YAClD,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;YAChC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;YACtC,GAAG,EAAE,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3E,GAAG,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;YACpD,QAAQ,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;YACxE,YAAY,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;SACnC,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAA4B;IACrE,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;QAClD,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,SAAS,IAAI,MAAM;QAC/D,UAAU,EAAE,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC;AACJ,CAAC"}

package/dist/tool-runtime/mcp-executor.d.ts

@@ -0,0 +1,12 @@
+import { type SecureToolMcpConfig } from './manifest.js';
+export type ToolEnvResolver = (name: string) => string | undefined;
+export type ToolFetch = typeof fetch;
+export declare class McpToolExecutor {
+    private resolveEnv;
+    private fetcher;
+    private oauth;
+    constructor(resolveEnv?: ToolEnvResolver, fetcher?: ToolFetch);
+    execute(config: SecureToolMcpConfig, args: Record<string, unknown>): Promise<unknown>;
+    private applyAuth;
+}
+//# sourceMappingURL=mcp-executor.d.ts.map