ssh-mcp-pro 1.0.0

package/dist/process.js

@@ -0,0 +1,212 @@
+import { createSudoError, wrapError, createTimeoutError } from "./errors.js";
+import { logger, createTimer } from "./logging.js";
+import { buildRemoteCommandWithTimeout, buildSudoCommand } from "./shell.js";
+import { ErrorCode } from "./types.js";
+function truncateText(value, maxBytes) {
+    const valueBytes = Buffer.byteLength(value, "utf8");
+    if (valueBytes <= maxBytes) {
+        return value;
+    }
+    const marker = `\n[ssh-mcp-pro: output truncated after ${maxBytes} bytes]\n`;
+    const markerBytes = Buffer.byteLength(marker, "utf8");
+    const budget = Math.max(0, maxBytes - markerBytes);
+    let output = "";
+    let used = 0;
+    for (const char of value) {
+        const charBytes = Buffer.byteLength(char, "utf8");
+        if (used + charBytes > budget) {
+            break;
+        }
+        output += char;
+        used += charBytes;
+    }
+    return `${output}${marker}`;
+}
+async function execWithTimeout(work, timeoutMs, label) {
+    let timeout;
+    try {
+        return await Promise.race([
+            work,
+            new Promise((_, reject) => {
+                timeout = setTimeout(() => {
+                    reject(createTimeoutError(`${label} timed out after ${timeoutMs}ms`, "Increase timeout or optimize the command"));
+                }, timeoutMs);
+            }),
+        ]);
+    }
+    finally {
+        if (timeout) {
+            clearTimeout(timeout);
+        }
+    }
+}
+export function createProcessService({ sessionManager, config, policy, }) {
+    async function execCommand(sessionId, command, cwd, env, timeoutMs) {
+        logger.debug("Executing command", { sessionId, command, cwd, timeoutMs });
+        const session = sessionManager.getSession(sessionId);
+        if (!session) {
+            throw new Error(`Session ${sessionId} not found or expired`);
+        }
+        const decision = policy.assertAllowed({
+            action: "proc.exec",
+            command,
+            mode: session.info.policyMode,
+        });
+        if (decision.mode === "explain") {
+            return {
+                code: 0,
+                stdout: JSON.stringify({ wouldExecute: true, command, policy: decision }, null, 2),
+                stderr: "",
+                durationMs: 0,
+            };
+        }
+        const osInfo = await sessionManager.getOSInfo(sessionId);
+        const timer = createTimer();
+        const effectiveTimeoutMs = timeoutMs ?? config.commandTimeoutMs;
+        try {
+            const shellCommand = buildRemoteCommandWithTimeout(command, osInfo, effectiveTimeoutMs, cwd, env);
+            const result = await execWithTimeout(session.ssh.execCommand(shellCommand), effectiveTimeoutMs, "Command");
+            const execResult = {
+                code: result.code ?? 0,
+                stdout: truncateText(result.stdout ?? "", config.maxCommandOutputBytes),
+                stderr: truncateText(result.stderr ?? "", config.maxCommandOutputBytes),
+                durationMs: timer.elapsed(),
+            };
+            if (execResult.code === 124 || execResult.code === 137 || execResult.code === 143) {
+                throw createTimeoutError(`Command timed out after ${effectiveTimeoutMs}ms and remote termination was requested`, "Increase timeout or optimize the command");
+            }
+            logger.debug("Command execution completed", {
+                sessionId,
+                code: execResult.code,
+                durationMs: execResult.durationMs,
+            });
+            return execResult;
+        }
+        catch (error) {
+            logger.error("Command execution failed", { sessionId, command, error });
+            if (error?.code === ErrorCode.ETIMEOUT) {
+                throw error;
+            }
+            throw wrapError(error, ErrorCode.ECONN, "Failed to execute command on remote system");
+        }
+    }
+    async function execSudo(sessionId, command, password, cwd, timeoutMs, policyOptions = {}) {
+        logger.debug("Executing sudo command", {
+            sessionId,
+            command,
+            cwd,
+            timeoutMs,
+        });
+        const session = sessionManager.getSession(sessionId);
+        if (!session) {
+            throw new Error(`Session ${sessionId} not found or expired`);
+        }
+        const decision = policy.assertAllowed({
+            action: policyOptions.policyAction ?? "proc.sudo",
+            command,
+            mode: session.info.policyMode,
+            rawSudo: policyOptions.rawSudo ?? true,
+            ...(policyOptions.path ? { path: policyOptions.path } : {}),
+            ...(policyOptions.destructive !== undefined
+                ? { destructive: policyOptions.destructive }
+                : {}),
+        });
+        if (decision.mode === "explain") {
+            return {
+                code: 0,
+                stdout: JSON.stringify({ wouldExecute: true, command, sudo: true, policy: decision }, null, 2),
+                stderr: "",
+                durationMs: 0,
+            };
+        }
+        const osInfo = await sessionManager.getOSInfo(sessionId);
+        if (osInfo.platform === "windows") {
+            throw createSudoError("Sudo is not supported on Windows hosts", "Use an elevated session instead of sudo commands");
+        }
+        const timer = createTimer();
+        const effectiveTimeoutMs = timeoutMs ?? config.commandTimeoutMs;
+        try {
+            if (password !== undefined) {
+                throw createSudoError("Password-based sudo through MCP inputs is disabled", "Configure a restricted NOPASSWD sudoers allowlist for approved commands.");
+            }
+            const fullCommand = buildSudoCommand(command, osInfo, cwd);
+            const result = await execWithTimeout(session.ssh.execCommand(fullCommand), effectiveTimeoutMs, "Sudo command");
+            if ((result.code ?? 0) !== 0 && result.stderr) {
+                const stderrLower = result.stderr.toLowerCase();
+                if (stderrLower.includes("password") ||
+                    stderrLower.includes("authentication") ||
+                    stderrLower.includes("sorry")) {
+                    throw createSudoError("Sudo authentication failed", "Configure a restricted NOPASSWD sudoers profile for approved commands.");
+                }
+            }
+            const execResult = {
+                code: result.code ?? 0,
+                stdout: truncateText(result.stdout ?? "", config.maxCommandOutputBytes),
+                stderr: truncateText(result.stderr ?? "", config.maxCommandOutputBytes),
+                durationMs: timer.elapsed(),
+            };
+            logger.debug("Sudo command execution completed", {
+                sessionId,
+                code: execResult.code,
+                durationMs: execResult.durationMs,
+            });
+            return execResult;
+        }
+        catch (error) {
+            if (error?.code === ErrorCode.ETIMEOUT) {
+                throw error;
+            }
+            if (error instanceof Error && error.message.includes("sudo")) {
+                throw error;
+            }
+            logger.error("Sudo command execution failed", {
+                sessionId,
+                command,
+                error,
+            });
+            throw wrapError(error, ErrorCode.ENOSUDO, "Failed to execute sudo command on remote system");
+        }
+    }
+    async function commandExists(sessionId, command) {
+        try {
+            const result = await execCommand(sessionId, `which ${command}`);
+            return result.code === 0;
+        }
+        catch {
+            return false;
+        }
+    }
+    async function getAvailableShell(sessionId) {
+        const shells = ["bash", "zsh", "sh"];
+        for (const shell of shells) {
+            if (await commandExists(sessionId, shell)) {
+                logger.debug("Found available shell", { sessionId, shell });
+                return shell;
+            }
+        }
+        logger.warn("No standard shell found, defaulting to sh", { sessionId });
+        return "sh";
+    }
+    async function execWithShell(sessionId, command, cwd, env) {
+        const shell = await getAvailableShell(sessionId);
+        let fullCommand = command;
+        if (env && Object.keys(env).length > 0) {
+            const envVars = Object.entries(env)
+                .map(([key, value]) => `${key}=${JSON.stringify(value)}`)
+                .join(" ");
+            fullCommand = `${envVars} ${command}`;
+        }
+        if (cwd) {
+            fullCommand = `cd ${JSON.stringify(cwd)} && ${fullCommand}`;
+        }
+        return execCommand(sessionId, `${shell} -lc ${JSON.stringify(fullCommand)}`);
+    }
+    return {
+        execCommand,
+        execSudo,
+        commandExists,
+        getAvailableShell,
+        execWithShell,
+    };
+}
+//# sourceMappingURL=process.js.map

package/dist/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../src/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGnD,OAAO,EAAE,6BAA6B,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG7E,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAyCvC,SAAS,YAAY,CAAC,KAAa,EAAE,QAAgB;IACnD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,UAAU,IAAI,QAAQ,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,0CAA0C,QAAQ,WAAW,CAAC;IAC7E,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC,CAAC;IACnD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAAC;YAC9B,MAAM;QACR,CAAC;QACD,MAAM,IAAI,IAAI,CAAC;QACf,IAAI,IAAI,SAAS,CAAC;IACpB,CAAC;IACD,OAAO,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,eAAe,CAAI,IAAgB,EAAE,SAAiB,EAAE,KAAa;IAClF,IAAI,OAAmC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,IAAI;YACJ,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;oBACxB,MAAM,CACJ,kBAAkB,CAChB,GAAG,KAAK,oBAAoB,SAAS,IAAI,EACzC,0CAA0C,CAC3C,CACF,CAAC;gBACJ,CAAC,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,EAAE,CAAC;YACZ,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,EACnC,cAAc,EACd,MAAM,EACN,MAAM,GACa;IACnB,KAAK,UAAU,WAAW,CACxB,SAAiB,EACjB,OAAe,EACf,GAAY,EACZ,GAA4B,EAC5B,SAAkB;QAElB,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QAE1E,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,uBAAuB,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC;YACpC,MAAM,EAAE,WAAW;YACnB,OAAO;YACP,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU;SAC9B,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO;gBACL,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClF,MAAM,EAAE,EAAE;gBACV,UAAU,EAAE,CAAC;aACd,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;QAC5B,MAAM,kBAAkB,GAAG,SAAS,IAAI,MAAM,CAAC,gBAAgB,CAAC;QAEhE,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,6BAA6B,CAChD,OAAO,EACP,MAAM,EACN,kBAAkB,EAClB,GAAG,EACH,GAAG,CACJ,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,EACrC,kBAAkB,EAClB,SAAS,CACV,CAAC;YAEF,MAAM,UAAU,GAAe;gBAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC;gBACtB,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,CAAC,qBAAqB,CAAC;gBACvE,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,CAAC,qBAAqB,CAAC;gBACvE,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE;aAC5B,CAAC;YAEF,IAAI,UAAU,CAAC,IAAI,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAClF,MAAM,kBAAkB,CACtB,2BAA2B,kBAAkB,yCAAyC,EACtF,0CAA0C,CAC3C,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC1C,SAAS;gBACT,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,UAAU,EAAE,UAAU,CAAC,UAAU;aAClC,CAAC,CAAC;YAEH,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACxE,IAAK,KAA0C,EAAE,IAAI,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC;gBAC7E,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,4CAA4C,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,KAAK,UAAU,QAAQ,CACrB,SAAiB,EACjB,OAAe,EACf,QAAiB,EACjB,GAAY,EACZ,SAAkB,EAClB,gBAAmC,EAAE;QAErC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;YACrC,SAAS;YACT,OAAO;YACP,GAAG;YACH,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,uBAAuB,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC;YACpC,MAAM,EAAE,aAAa,CAAC,YAAY,IAAI,WAAW;YACjD,OAAO;YACP,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU;YAC7B,OAAO,EAAE,aAAa,CAAC,OAAO,IAAI,IAAI;YACtC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,aAAa,CAAC,WAAW,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO;gBACL,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,IAAI,CAAC,SAAS,CACpB,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAC7D,IAAI,EACJ,CAAC,CACF;gBACD,MAAM,EAAE,EAAE;gBACV,UAAU,EAAE,CAAC;aACd,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,eAAe,CACnB,wCAAwC,EACxC,kDAAkD,CACnD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;QAC5B,MAAM,kBAAkB,GAAG,SAAS,IAAI,MAAM,CAAC,gBAAgB,CAAC;QAEhE,IAAI,CAAC;YACH,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,eAAe,CACnB,oDAAoD,EACpD,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,EACpC,kBAAkB,EAClB,cAAc,CACf,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBAChD,IACE,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;oBAChC,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC;oBACtC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC7B,CAAC;oBACD,MAAM,eAAe,CACnB,4BAA4B,EAC5B,wEAAwE,CACzE,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAe;gBAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC;gBACtB,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,CAAC,qBAAqB,CAAC;gBACvE,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,CAAC,qBAAqB,CAAC;gBACvE,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE;aAC5B,CAAC;YAEF,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE;gBAC/C,SAAS;gBACT,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,UAAU,EAAE,UAAU,CAAC,UAAU;aAClC,CAAC,CAAC;YAEH,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA0C,EAAE,IAAI,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC;gBAC7E,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7D,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;gBAC5C,SAAS;gBACT,OAAO;gBACP,KAAK;aACN,CAAC,CAAC;YACH,MAAM,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,OAAO,EAAE,iDAAiD,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,SAAiB,EAAE,OAAe;QAC7D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,SAAS,OAAO,EAAE,CAAC,CAAC;YAChE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,UAAU,iBAAiB,CAAC,SAAiB;QAChD,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAErC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,MAAM,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC5D,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,aAAa,CAC1B,SAAiB,EACjB,OAAe,EACf,GAAY,EACZ,GAA4B;QAE5B,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,WAAW,GAAG,OAAO,CAAC;QAE1B,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;iBAChC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;iBACxD,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,WAAW,GAAG,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;QACxC,CAAC;QAED,IAAI,GAAG,EAAE,CAAC;YACR,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,WAAW,EAAE,CAAC;QAC9D,CAAC;QAED,OAAO,WAAW,CAAC,SAAS,EAAE,GAAG,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO;QACL,WAAW;QACX,QAAQ;QACR,aAAa;QACb,iBAAiB;QACjB,aAAa;KACd,CAAC;AACJ,CAAC"}

package/dist/prompts.d.ts

@@ -0,0 +1,49 @@
+import { type ToolProfile } from "./connector-profile.js";
+/**
+ * Prompt suggestions for AI assistants (ChatGPT, Claude, etc.)
+ * These help users understand what they can do with the SSH MCP tool
+ */
+export interface PromptSuggestion {
+    name: string;
+    description: string;
+    prompt: string;
+    category: "session" | "command" | "file" | "system" | "package";
+}
+export interface MCPPromptDefinition {
+    name: string;
+    title: string;
+    description: string;
+    arguments?: Array<{
+        name: string;
+        description: string;
+        required?: boolean;
+    }>;
+}
+export declare const PROMPT_SUGGESTIONS: PromptSuggestion[];
+export declare const MCP_PROMPTS: MCPPromptDefinition[];
+export declare function listMCPPrompts(profile?: ToolProfile): {
+    prompts: MCPPromptDefinition[];
+};
+export declare function getMCPPrompt(name: string, args?: Record<string, string>, profile?: ToolProfile): {
+    description: string;
+    messages: {
+        role: "user";
+        content: {
+            type: "text";
+            text: string;
+        };
+    }[];
+};
+/**
+ * Get prompts by category
+ */
+export declare function getPromptsByCategory(category: PromptSuggestion["category"]): PromptSuggestion[];
+/**
+ * Get a random subset of prompts for initial suggestions
+ */
+export declare function getRandomPrompts(count?: number): PromptSuggestion[];
+/**
+ * Format prompts for display in AI assistant
+ */
+export declare function formatPromptsForDisplay(): string;
+//# sourceMappingURL=prompts.d.ts.map

package/dist/prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,wBAAwB,CAAC;AAEhC;;;GAGG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;CACjE;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,KAAK,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;CACJ;AAED,eAAO,MAAM,kBAAkB,EAAE,gBAAgB,EA0EhD,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,mBAAmB,EA6B5C,CAAC;AAEF,wBAAgB,cAAc,CAAC,OAAO,GAAE,WAAoB;;EAO3D;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,EACjC,OAAO,GAAE,WAAoB;;;;;;;;;EAwB9B;AAkCD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,GAAG,gBAAgB,EAAE,CAE/F;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,SAAI,GAAG,gBAAgB,EAAE,CAG9D;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAgBhD"}

package/dist/prompts.js

@@ -0,0 +1,191 @@
+import { filterPromptsForProfile, isPromptAllowedForProfile, } from "./connector-profile.js";
+export const PROMPT_SUGGESTIONS = [
+    // Session management
+    {
+        name: "Connect to Server",
+        description: "Open an SSH connection to a remote server",
+        prompt: "Connect to my server at hostname with username user1",
+        category: "session",
+    },
+    {
+        name: "List Active Sessions",
+        description: "Show all currently active SSH sessions",
+        prompt: "Show me all my active SSH sessions",
+        category: "session",
+    },
+    {
+        name: "Check Server Health",
+        description: "Ping a session to verify the connection is alive",
+        prompt: "Check if my SSH session is still connected",
+        category: "session",
+    },
+    // Command execution
+    {
+        name: "Run Command",
+        description: "Execute a command on the remote server",
+        prompt: 'Run "ls -la /var/log" on my server',
+        category: "command",
+    },
+    {
+        name: "Check Disk Space",
+        description: "Check available disk space on the server",
+        prompt: "How much disk space is left on my server?",
+        category: "command",
+    },
+    {
+        name: "Get System Info",
+        description: "Detect OS, architecture, and system details",
+        prompt: "What operating system is running on my server?",
+        category: "system",
+    },
+    // File operations
+    {
+        name: "Read Configuration",
+        description: "Read contents of a configuration file",
+        prompt: "Show me the contents of /etc/nginx/nginx.conf",
+        category: "file",
+    },
+    {
+        name: "Edit File",
+        description: "Modify a configuration file on the server",
+        prompt: "Add a new server block to my nginx config",
+        category: "file",
+    },
+    {
+        name: "List Directory",
+        description: "List files and directories in a path",
+        prompt: "List all files in /var/www",
+        category: "file",
+    },
+    // Package management
+    {
+        name: "Install Package",
+        description: "Install a software package on the server",
+        prompt: "Install nginx on my server",
+        category: "package",
+    },
+    {
+        name: "Manage Service",
+        description: "Start, stop, or restart a service",
+        prompt: "Restart the nginx service",
+        category: "package",
+    },
+];
+export const MCP_PROMPTS = [
+    {
+        name: "safe-connect",
+        title: "Safely connect to an SSH host",
+        description: "Open an SSH session using strict host-key verification and explain the safety posture.",
+        arguments: [
+            { name: "host", description: "SSH hostname, IP, or configured host alias", required: true },
+            { name: "username", description: "SSH username", required: true },
+        ],
+    },
+    {
+        name: "inspect-host-capabilities",
+        title: "Inspect remote host capabilities",
+        description: "Detect OS, package manager, init system, SFTP availability, and active policy.",
+    },
+    {
+        name: "plan-mutation",
+        title: "Plan a remote change before executing",
+        description: "Use explain mode and policy resources to summarize a risky remote change first.",
+        arguments: [{ name: "goal", description: "Desired remote change", required: true }],
+    },
+    {
+        name: "managed-config-change",
+        title: "Apply a managed config change",
+        description: "Read a config, produce a minimal patch, dry-run it, and apply only if policy allows it.",
+        arguments: [{ name: "path", description: "Remote configuration file path", required: true }],
+    },
+];
+export function listMCPPrompts(profile = "full") {
+    return {
+        prompts: filterPromptsForProfile(MCP_PROMPTS.map((prompt) => ({ ...prompt })), profile),
+    };
+}
+export function getMCPPrompt(name, args = {}, profile = "full") {
+    if (!isPromptAllowedForProfile(name, profile)) {
+        throw new Error(`Prompt ${name} is not exposed by the ${profile} connector profile`);
+    }
+    const prompt = MCP_PROMPTS.find((item) => item.name === name);
+    if (!prompt) {
+        throw new Error(`Unknown prompt: ${name}`);
+    }
+    const text = renderPrompt(name, args);
+    return {
+        description: prompt.description,
+        messages: [
+            {
+                role: "user",
+                content: {
+                    type: "text",
+                    text,
+                },
+            },
+        ],
+    };
+}
+function renderPrompt(name, args) {
+    switch (name) {
+        case "safe-connect":
+            return [
+                "Open a safe SSH session using ssh-mcp-pro.",
+                `Host: ${args.host ?? "<host>"}`,
+                `Username: ${args.username ?? "<username>"}`,
+                "Prefer hostKeyPolicy=strict, verify known_hosts, and do not request root login unless policy explicitly allows it.",
+            ].join("\n");
+        case "inspect-host-capabilities":
+            return [
+                "Inspect the current SSH MCP environment.",
+                "List active sessions, read the effective policy resource, then run os_detect for the chosen session.",
+                "Summarize supported tools, SFTP availability, package manager, init system, and any policy restrictions.",
+            ].join("\n");
+        case "plan-mutation":
+            return [
+                `Goal: ${args.goal ?? "<describe change>"}`,
+                "Before executing, use explain mode or read policy resources to produce a concise action plan.",
+                "Call out destructive operations, sudo needs, path policy, rollback, and commands/files that would change.",
+            ].join("\n");
+        case "managed-config-change":
+            return [
+                `Remote file: ${args.path ?? "<path>"}`,
+                "Read the file, propose a minimal unified diff, dry-run the patch, then apply only if policy permits.",
+                "If the path is denied or the file is too large, stop and explain the safer alternative.",
+            ].join("\n");
+        default:
+            return "Use ssh-mcp-pro safely and prefer explain mode before mutations.";
+    }
+}
+/**
+ * Get prompts by category
+ */
+export function getPromptsByCategory(category) {
+    return PROMPT_SUGGESTIONS.filter((p) => p.category === category);
+}
+/**
+ * Get a random subset of prompts for initial suggestions
+ */
+export function getRandomPrompts(count = 5) {
+    const shuffled = [...PROMPT_SUGGESTIONS].sort(() => Math.random() - 0.5);
+    return shuffled.slice(0, count);
+}
+/**
+ * Format prompts for display in AI assistant
+ */
+export function formatPromptsForDisplay() {
+    const categories = ["session", "command", "file", "system", "package"];
+    const lines = ["## ssh-mcp-pro - What You Can Do\n"];
+    for (const category of categories) {
+        const prompts = getPromptsByCategory(category);
+        if (prompts.length > 0) {
+            lines.push(`### ${category.charAt(0).toUpperCase() + category.slice(1)} Operations`);
+            for (const p of prompts) {
+                lines.push(`- **${p.name}**: "${p.prompt}"`);
+            }
+            lines.push("");
+        }
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=prompts.js.map

package/dist/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,yBAAyB,GAE1B,MAAM,wBAAwB,CAAC;AAyBhC,MAAM,CAAC,MAAM,kBAAkB,GAAuB;IACpD,qBAAqB;IACrB;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,2CAA2C;QACxD,MAAM,EAAE,sDAAsD;QAC9D,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,wCAAwC;QACrD,MAAM,EAAE,oCAAoC;QAC5C,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,kDAAkD;QAC/D,MAAM,EAAE,4CAA4C;QACpD,QAAQ,EAAE,SAAS;KACpB;IAED,oBAAoB;IACpB;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,wCAAwC;QACrD,MAAM,EAAE,oCAAoC;QAC5C,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,0CAA0C;QACvD,MAAM,EAAE,2CAA2C;QACnD,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,6CAA6C;QAC1D,MAAM,EAAE,gDAAgD;QACxD,QAAQ,EAAE,QAAQ;KACnB;IAED,kBAAkB;IAClB;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,uCAAuC;QACpD,MAAM,EAAE,+CAA+C;QACvD,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,2CAA2C;QACxD,MAAM,EAAE,2CAA2C;QACnD,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,sCAAsC;QACnD,MAAM,EAAE,4BAA4B;QACpC,QAAQ,EAAE,MAAM;KACjB;IAED,qBAAqB;IACrB;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,0CAA0C;QACvD,MAAM,EAAE,4BAA4B;QACpC,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,mCAAmC;QAChD,MAAM,EAAE,2BAA2B;QACnC,QAAQ,EAAE,SAAS;KACpB;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAA0B;IAChD;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,wFAAwF;QAC1F,SAAS,EAAE;YACT,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,4CAA4C,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC3F,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE;SAClE;KACF;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,gFAAgF;KAC9F;IACD;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EAAE,iFAAiF;QAC9F,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KACpF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,yFAAyF;QAC3F,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,gCAAgC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KAC7F;CACF,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,UAAuB,MAAM;IAC1D,OAAO;QACL,OAAO,EAAE,uBAAuB,CAC9B,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,EAC5C,OAAO,CACR;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,OAA+B,EAAE,EACjC,UAAuB,MAAM;IAE7B,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,0BAA0B,OAAO,oBAAoB,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAe;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI;iBACL;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,IAA4B;IAC9D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc;YACjB,OAAO;gBACL,4CAA4C;gBAC5C,SAAS,IAAI,CAAC,IAAI,IAAI,QAAQ,EAAE;gBAChC,aAAa,IAAI,CAAC,QAAQ,IAAI,YAAY,EAAE;gBAC5C,oHAAoH;aACrH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,KAAK,2BAA2B;YAC9B,OAAO;gBACL,0CAA0C;gBAC1C,sGAAsG;gBACtG,0GAA0G;aAC3G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,KAAK,eAAe;YAClB,OAAO;gBACL,SAAS,IAAI,CAAC,IAAI,IAAI,mBAAmB,EAAE;gBAC3C,+FAA+F;gBAC/F,2GAA2G;aAC5G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,KAAK,uBAAuB;YAC1B,OAAO;gBACL,gBAAgB,IAAI,CAAC,IAAI,IAAI,QAAQ,EAAE;gBACvC,sGAAsG;gBACtG,yFAAyF;aAC1F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf;YACE,OAAO,kEAAkE,CAAC;IAC9E,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAsC;IACzE,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAK,GAAG,CAAC;IACxC,MAAM,QAAQ,GAAG,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;IACzE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;IAChF,MAAM,KAAK,GAAa,CAAC,oCAAoC,CAAC,CAAC;IAE/D,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YACrF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/C,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/rate-limiter.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Configuration for rate limiter
+ */
+export interface RateLimiterConfig {
+    /** Maximum number of requests in the window */
+    maxRequests: number;
+    /** Time window in milliseconds */
+    windowMs: number;
+    /** Whether to block requests that exceed the limit */
+    blockOnLimit: boolean;
+}
+/**
+ * Rate limit check result
+ */
+export interface RateLimitResult {
+    allowed: boolean;
+    remaining: number;
+    resetIn: number;
+    blocked: boolean;
+}
+export type RateLimitCheckOptions = Partial<Pick<RateLimiterConfig, "maxRequests" | "windowMs">>;
+/**
+ * Rate limiter using the Sliding Window Log algorithm.
+ */
+export declare class RateLimiter {
+    private readonly logs;
+    private readonly keyWindowMs;
+    private readonly config;
+    private cleanupTimer;
+    private destroyed;
+    constructor(config?: Partial<RateLimiterConfig>);
+    /**
+     * Check if request is allowed under the rate limit
+     */
+    check(key: string, options?: RateLimitCheckOptions): RateLimitResult;
+    /**
+     * Reset rate limit for a specific key
+     */
+    reset(key: string): void;
+    /**
+     * Get current usage for a key
+     */
+    getUsage(key: string, options?: RateLimitCheckOptions): {
+        count: number;
+        remaining: number;
+        resetIn: number;
+    } | null;
+    /**
+     * Cleanup expired logs
+     */
+    private pruneExpiredLogs;
+    /**
+     * Destroy the rate limiter
+     */
+    destroy(): void;
+}
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../src/rate-limiter.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC;AAEjG;;GAEG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA+B;IACpD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;IACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,SAAS,CAAS;gBAEd,MAAM,GAAE,OAAO,CAAC,iBAAiB,CAAM;IAWnD;;OAEG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,eAAe;IA6DxE;;OAEG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAMxB;;OAEG;IACH,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,qBAA0B,GAClC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAuB/D;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAsBxB;;OAEG;IACH,OAAO,IAAI,IAAI;CAShB"}