toolhome 0.5.0

package/dist/server/manage/management-mcp.js

@@ -0,0 +1,431 @@
+import { CallToolRequestParamsSchema } from '@modelcontextprotocol/core';
+import { ProtocolError, ProtocolErrorCode, Server, createMcpHandler, } from '@modelcontextprotocol/server';
+import { z } from 'zod';
+import { AppError } from '../domain/errors.js';
+import { bearerToken } from '../security/auth-service.js';
+const serverIdSchema = z.object({ server_id: z.uuid() });
+const enableSchema = serverIdSchema.extend({ enabled: z.boolean() });
+const marketInstallSchema = z.object({
+    entry_id: z.string().min(1),
+    values: z.record(z.string(), z.string()).optional().default({}),
+});
+const visibilitySchema = z.object({
+    server_id: z.uuid(),
+    tool: z.string().min(1),
+    visibility: z.enum(['inherit', 'visible', 'hidden']),
+});
+const searchSchema = z.object({ query: z.string().optional() });
+const callsSchema = z.object({
+    limit: z.number().int().min(1).max(500).optional().default(50),
+    server_id: z.uuid().optional(),
+    status: z.string().optional(),
+});
+function ok(value) {
+    return {
+        content: [{ type: 'text', text: JSON.stringify(value) }],
+        structuredContent: { ok: true, ...value },
+    };
+}
+function fail(error) {
+    const appError = error instanceof AppError ? error : null;
+    const message = error instanceof Error ? error.message : String(error);
+    const code = appError?.code ?? 'internal_error';
+    return {
+        content: [{ type: 'text', text: message }],
+        structuredContent: { ok: false, error: code, message },
+    };
+}
+/**
+ * The Management MCP is the control plane's MCP surface. It reuses the shared
+ * domain services directly (never internal HTTP) and is served at /manage/mcp,
+ * outside the /mcp aggregate. Only control keys are accepted; the aggregate
+ * endpoint never contains these tools.
+ */
+export class ManagementMCP {
+    #service;
+    #market;
+    #store;
+    #auth;
+    #recorder;
+    #publicUrl;
+    #handler;
+    #server;
+    constructor(options) {
+        this.#service = options.service;
+        this.#market = options.market;
+        this.#store = options.store;
+        this.#auth = options.auth;
+        this.#recorder = options.recorder;
+        this.#publicUrl = options.publicUrl;
+        this.#server = this.#createServer();
+        this.#handler = createMcpHandler(() => this.#server, { legacy: 'reject' });
+    }
+    async serve(request) {
+        const token = bearerToken(request);
+        if (!token) {
+            return jsonResponse({ error: { code: 'unauthorized', message: 'Control credential required' } }, 401);
+        }
+        let principal;
+        try {
+            principal = this.#auth.authenticate('control', token);
+        }
+        catch {
+            // Both invalid credentials and MCP access keys land here: access keys
+            // must never reach the management surface.
+            return jsonResponse({ error: { code: 'unauthorized', message: 'Control credential required' } }, 401);
+        }
+        const contentType = request.headers.get('content-type') ?? '';
+        let parsedBody;
+        if (contentType.includes('application/json')) {
+            parsedBody = await request.clone().json();
+        }
+        const authInfo = this.#auth.toMcpAuthInfo(principal, token, new URL('/manage/mcp', this.#publicUrl));
+        return this.#handler.fetch(request, { authInfo, parsedBody });
+    }
+    async close() {
+        await this.#handler.close();
+    }
+    #createServer() {
+        const server = new Server({ name: 'toolhome-management', version: '0.1.0', title: 'ToolHome Management' }, {
+            capabilities: { tools: {} },
+            instructions: 'Manage a ToolHome instance: inspect servers, search the market, read tool visibility and call history, and run reversible operations (enable/disable/refresh/restart, market install, tool visibility). Secrets are never accepted through tool arguments — installs that need them return a one-time action URL to complete in the web console.',
+        });
+        server.setRequestHandler('tools/list', async () => ({ tools: this.#tools() }));
+        server.setRequestHandler('tools/call', { params: CallToolRequestParamsSchema, result: z.any() }, async (request, context) => this.#dispatch(request.name, request.arguments ?? {}, context));
+        return server;
+    }
+    #tools() {
+        return [
+            {
+                name: 'home_status',
+                description: 'Instance, server, credential and health summary plus management endpoint',
+                inputSchema: { type: 'object', properties: {} },
+            },
+            {
+                name: 'server_list',
+                description: 'List servers with runtime status',
+                inputSchema: { type: 'object', properties: {} },
+            },
+            {
+                name: 'server_get',
+                description: 'Get a single server, runtime status, tool count and last error',
+                inputSchema: {
+                    type: 'object',
+                    properties: { server_id: { type: 'string' } },
+                    required: ['server_id'],
+                },
+            },
+            {
+                name: 'market_search',
+                description: 'Search the curated market catalog with install state',
+                inputSchema: {
+                    type: 'object',
+                    properties: { query: { type: 'string' } },
+                },
+            },
+            {
+                name: 'tool_list',
+                description: 'List a server\'s tools with effective aggregate visibility',
+                inputSchema: {
+                    type: 'object',
+                    properties: { server_id: { type: 'string' } },
+                    required: ['server_id'],
+                },
+            },
+            {
+                name: 'calls_query',
+                description: 'Query metadata-only tool call records',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        limit: { type: 'integer' },
+                        server_id: { type: 'string' },
+                        status: { type: 'string' },
+                    },
+                },
+            },
+            {
+                name: 'server_set_enabled',
+                description: 'Enable or disable a server (idempotent)',
+                inputSchema: {
+                    type: 'object',
+                    properties: { server_id: { type: 'string' }, enabled: { type: 'boolean' } },
+                    required: ['server_id', 'enabled'],
+                },
+            },
+            {
+                name: 'server_refresh',
+                description: 'Re-discover a server\'s capabilities',
+                inputSchema: {
+                    type: 'object',
+                    properties: { server_id: { type: 'string' } },
+                    required: ['server_id'],
+                },
+            },
+            {
+                name: 'server_restart',
+                description: 'Restart a home-hosted server or reconnect a remote one',
+                inputSchema: {
+                    type: 'object',
+                    properties: { server_id: { type: 'string' } },
+                    required: ['server_id'],
+                },
+            },
+            {
+                name: 'market_install',
+                description: 'Install a curated market entry; returns a one-time action URL when a secret is required',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        entry_id: { type: 'string' },
+                        values: { type: 'object', additionalProperties: { type: 'string' } },
+                    },
+                    required: ['entry_id'],
+                },
+            },
+            {
+                name: 'tool_set_visibility',
+                description: 'Set a tool\'s aggregate visibility (inherit/visible/hidden)',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        server_id: { type: 'string' },
+                        tool: { type: 'string' },
+                        visibility: { type: 'string', enum: ['inherit', 'visible', 'hidden'] },
+                    },
+                    required: ['server_id', 'tool', 'visibility'],
+                },
+            },
+        ];
+    }
+    async #dispatch(name, arguments_, context) {
+        switch (name) {
+            case 'home_status':
+                return this.#homeStatus();
+            case 'server_list':
+                return this.#serverList();
+            case 'server_get':
+                return this.#serverGet(serverIdSchema.parse(arguments_));
+            case 'market_search':
+                return this.#marketSearch(searchSchema.parse(arguments_));
+            case 'tool_list':
+                return this.#toolList(serverIdSchema.parse(arguments_));
+            case 'calls_query':
+                return this.#calls(callsSchema.parse(arguments_));
+            case 'server_set_enabled':
+                return this.#serverSetEnabled(enableSchema.parse(arguments_), context);
+            case 'server_refresh':
+                return this.#serverRefresh(serverIdSchema.parse(arguments_), context);
+            case 'server_restart':
+                return this.#serverRestart(serverIdSchema.parse(arguments_), context);
+            case 'market_install':
+                return this.#marketInstall(marketInstallSchema.parse(arguments_), context);
+            case 'tool_set_visibility':
+                return this.#toolSetVisibility(visibilitySchema.parse(arguments_), context);
+            default:
+                throw new ProtocolError(ProtocolErrorCode.MethodNotFound, `Unknown tool: ${name}`);
+        }
+    }
+    #homeStatus() {
+        try {
+            const overview = this.#service.overview();
+            return ok({
+                overview,
+                managementEndpoint: new URL('/manage/mcp', this.#publicUrl).toString(),
+            });
+        }
+        catch (error) {
+            return fail(error);
+        }
+    }
+    #serverList() {
+        try {
+            const servers = this.#service.listServers().map((server) => ({
+                id: server.id,
+                slug: server.slug,
+                name: server.name,
+                kind: server.kind,
+                enabled: server.enabled,
+                status: server.runtime?.status ?? 'unknown',
+                lastError: server.runtime?.lastError ?? null,
+            }));
+            return ok({ servers });
+        }
+        catch (error) {
+            return fail(error);
+        }
+    }
+    #serverGet({ server_id }) {
+        try {
+            const server = this.#service.getServer(server_id);
+            const snapshot = this.#store.getSnapshot(server_id);
+            return ok({
+                server: {
+                    id: server.id,
+                    slug: server.slug,
+                    name: server.name,
+                    kind: server.kind,
+                    enabled: server.enabled,
+                    status: server.runtime?.status ?? 'unknown',
+                    lastError: server.runtime?.lastError ?? null,
+                    toolCount: snapshot?.tools.length ?? 0,
+                },
+            });
+        }
+        catch (error) {
+            return fail(error);
+        }
+    }
+    #marketSearch({ query }) {
+        try {
+            const needle = query?.trim().toLowerCase() ?? '';
+            const entries = this.#market
+                .list()
+                .filter((entry) => needle === '' ||
+                entry.name.toLowerCase().includes(needle) ||
+                entry.id.includes(needle) ||
+                entry.category.includes(needle))
+                .map((entry) => ({
+                id: entry.id,
+                name: entry.name,
+                category: entry.category,
+                kind: entry.kind,
+                installed: entry.installed,
+                version: entry.version ?? null,
+                requiresSecrets: entry.requires.some((requirement) => requirement.secret),
+            }));
+            return ok({ entries });
+        }
+        catch (error) {
+            return fail(error);
+        }
+    }
+    #toolList({ server_id }) {
+        try {
+            const projection = this.#service.getProjection(server_id);
+            return ok({ tools: projection.tools });
+        }
+        catch (error) {
+            return fail(error);
+        }
+    }
+    #calls(params) {
+        try {
+            const result = this.#store.listToolCalls({
+                limit: params.limit,
+                offset: 0,
+                serverId: params.server_id,
+                status: params.status,
+            });
+            return ok({ calls: result });
+        }
+        catch (error) {
+            return fail(error);
+        }
+    }
+    async #serverSetEnabled(params, context) {
+        const startedAt = new Date();
+        try {
+            const server = this.#service.getServer(params.server_id);
+            const result = server.enabled === params.enabled
+                ? { id: server.id, enabled: server.enabled, unchanged: true }
+                : params.enabled
+                    ? await this.#service.enableServer(params.server_id)
+                    : await this.#service.disableServer(params.server_id);
+            this.#record(context, 'server_set_enabled', params.server_id, startedAt, true);
+            return ok({ serverId: params.server_id, enabled: params.enabled, result });
+        }
+        catch (error) {
+            this.#record(context, 'server_set_enabled', params.server_id, startedAt, false, error);
+            return fail(error);
+        }
+    }
+    async #serverRefresh(params, context) {
+        const startedAt = new Date();
+        try {
+            await this.#service.refreshServer(params.server_id);
+            this.#record(context, 'server_refresh', params.server_id, startedAt, true);
+            return ok({ serverId: params.server_id, refreshed: true });
+        }
+        catch (error) {
+            this.#record(context, 'server_refresh', params.server_id, startedAt, false, error);
+            return fail(error);
+        }
+    }
+    async #serverRestart(params, context) {
+        const startedAt = new Date();
+        try {
+            await this.#service.restartServer(params.server_id);
+            this.#record(context, 'server_restart', params.server_id, startedAt, true);
+            return ok({ serverId: params.server_id, restarted: true });
+        }
+        catch (error) {
+            this.#record(context, 'server_restart', params.server_id, startedAt, false, error);
+            return fail(error);
+        }
+    }
+    async #marketInstall(params, context) {
+        const startedAt = new Date();
+        const principalId = context.http?.authInfo?.clientId ?? 'anonymous';
+        try {
+            const result = await this.#market.install(params.entry_id, params.values, principalId);
+            this.#record(context, 'market_install', null, startedAt, true);
+            return ok({ jobId: result.jobId, status: result.status, actionUrl: result.actionUrl });
+        }
+        catch (error) {
+            this.#record(context, 'market_install', null, startedAt, false, error);
+            return fail(error);
+        }
+    }
+    async #toolSetVisibility(params, context) {
+        const startedAt = new Date();
+        try {
+            const current = this.#service.getProjection(params.server_id);
+            const effective = params.visibility === 'inherit'
+                ? null
+                : params.visibility;
+            const override = current.overrides[params.tool] ?? null;
+            const unchanged = override === effective;
+            if (!unchanged) {
+                this.#service.setProjection(params.server_id, {
+                    overrides: [{ tool: params.tool, visibility: params.visibility }],
+                });
+            }
+            this.#record(context, 'tool_set_visibility', params.server_id, startedAt, true);
+            return ok({
+                serverId: params.server_id,
+                tool: params.tool,
+                visibility: params.visibility,
+                unchanged,
+            });
+        }
+        catch (error) {
+            this.#record(context, 'tool_set_visibility', params.server_id, startedAt, false, error);
+            return fail(error);
+        }
+    }
+    #record(context, toolName, serverId, startedAt, success, error) {
+        const completedAt = new Date();
+        const draft = {
+            endpointType: 'management',
+            principalKind: 'control_key',
+            principalId: context.http?.authInfo?.clientId ?? 'anonymous',
+            serverId,
+            exposedToolName: toolName,
+            upstreamToolName: toolName,
+            status: success ? 'success' : 'protocol_error',
+            errorType: success ? null : (error instanceof AppError ? error.code : 'management_error'),
+            startedAt: startedAt.toISOString(),
+            completedAt: completedAt.toISOString(),
+            durationMs: Math.max(0, completedAt.getTime() - startedAt.getTime()),
+        };
+        this.#recorder.record(draft);
+    }
+}
+function jsonResponse(value, status) {
+    return new Response(JSON.stringify(value), {
+        status,
+        headers: { 'content-type': 'application/json', 'cache-control': 'no-store' },
+    });
+}
+//# sourceMappingURL=management-mcp.js.map

package/dist/server/manage/management-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-mcp.js","sourceRoot":"","sources":["../../../src/manage/management-mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,MAAM,EACN,gBAAgB,GAIjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAG/C,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAM1D,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACzD,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACrE,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAChE,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;CACrD,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAChE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAWH,SAAS,EAAE,CAAC,KAA8B;IACxC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,iBAAiB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,MAAM,QAAQ,GAAG,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,gBAAgB,CAAC;IAChD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACnD,iBAAiB,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE;KACvD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IACf,QAAQ,CAAiB;IACzB,OAAO,CAAgB;IACvB,MAAM,CAAQ;IACd,KAAK,CAAc;IACnB,SAAS,CAAe;IACxB,UAAU,CAAM;IAChB,QAAQ,CAAiB;IACzB,OAAO,CAAS;IAEzB,YAAY,OAA0B;QACpC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,2CAA2C;YAC3C,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,UAAmB,CAAC;QACxB,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC7C,UAAU,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CACvC,SAAS,EACT,KAAK,EACL,IAAI,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,CACxC,CAAC;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,aAAa;QACX,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAC/E;YACE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,YAAY,EACV,kVAAkV;SACrV,CACF,CAAC;QACF,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,iBAAiB,CACtB,YAAY,EACZ,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,EACxD,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,OAAO,CAAC,CAC3F,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM;QACJ,OAAO;YACL;gBACE,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,0EAA0E;gBACvF,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;aAChD;YACD;gBACE,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,kCAAkC;gBAC/C,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;aAChD;YACD;gBACE,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,gEAAgE;gBAC7E,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;oBAC7C,QAAQ,EAAE,CAAC,WAAW,CAAC;iBACxB;aACF;YACD;gBACE,IAAI,EAAE,eAAe;gBACrB,WAAW,EAAE,sDAAsD;gBACnE,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBAC1C;aACF;YACD;gBACE,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,4DAA4D;gBACzE,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;oBAC7C,QAAQ,EAAE,CAAC,WAAW,CAAC;iBACxB;aACF;YACD;gBACE,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,uCAAuC;gBACpD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;wBAC1B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC3B;iBACF;aACF;YACD;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,WAAW,EAAE,yCAAyC;gBACtD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;oBAC3E,QAAQ,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC;iBACnC;aACF;YACD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,WAAW,EAAE,sCAAsC;gBACnD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;oBAC7C,QAAQ,EAAE,CAAC,WAAW,CAAC;iBACxB;aACF;YACD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,WAAW,EAAE,wDAAwD;gBACrE,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;oBAC7C,QAAQ,EAAE,CAAC,WAAW,CAAC;iBACxB;aACF;YACD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,WAAW,EAAE,yFAAyF;gBACtG,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;qBACrE;oBACD,QAAQ,EAAE,CAAC,UAAU,CAAC;iBACvB;aACF;YACD;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,WAAW,EAAE,6DAA6D;gBAC1E,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE;qBACvE;oBACD,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC;iBAC9C;aACF;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,UAAmC,EAAE,OAAsB;QACvF,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5B,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5B,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAC3D,KAAK,eAAe;gBAClB,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAC5D,KAAK,WAAW;gBACd,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAC1D,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YACpD,KAAK,oBAAoB;gBACvB,OAAO,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;YACzE,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;YACxE,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;YACxE,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;YAC7E,KAAK,qBAAqB;gBACxB,OAAO,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9E;gBACE,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,cAAc,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,WAAW;QACT,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC1C,OAAO,EAAE,CAAC;gBACR,QAAQ;gBACR,kBAAkB,EAAE,IAAI,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;aACvE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,WAAW;QACT,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC3D,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,SAAS;gBAC3C,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,IAAI,IAAI;aAC7C,CAAC,CAAC,CAAC;YACJ,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,UAAU,CAAC,EAAE,SAAS,EAAyB;QAC7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YACpD,OAAO,EAAE,CAAC;gBACR,MAAM,EAAE;oBACN,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,SAAS;oBAC3C,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,IAAI,IAAI;oBAC5C,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC;iBACvC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,aAAa,CAAC,EAAE,KAAK,EAAsB;QACzC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO;iBACzB,IAAI,EAAE;iBACN,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,MAAM,KAAK,EAAE;gBACb,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACzC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACzB,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClC;iBACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACf,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;gBAC9B,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;aAC1E,CAAC,CAAC,CAAC;YACN,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,SAAS,CAAC,EAAE,SAAS,EAAyB;QAC5C,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAC1D,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,CAAC,MAA8D;QACnE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;gBACvC,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,CAAC;gBACT,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,MAAM,EAAE,MAAM,CAAC,MAAe;aAC/B,CAAC,CAAC;YACH,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAA+C,EAAE,OAAsB;QAC7F,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzD,MAAM,MAAM,GACV,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;gBAC/B,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;gBAC7D,CAAC,CAAC,MAAM,CAAC,OAAO;oBACd,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC;oBACpD,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAC/E,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YACvF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAA6B,EAAE,OAAsB;QACxE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAC3E,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YACnF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAA6B,EAAE,OAAsB;QACxE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAC3E,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YACnF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,MAA4D,EAC5D,OAAsB;QAEtB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,IAAI,WAAW,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACvF,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAC/D,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,MAAyF,EACzF,OAAsB;QAEtB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,KAAK,SAAS;gBAC/C,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;YACxD,MAAM,SAAS,GAAG,QAAQ,KAAK,SAAS,CAAC;YACzC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE;oBAC5C,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;iBAClE,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAChF,OAAO,EAAE,CAAC;gBACR,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YACxF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO,CACL,OAAsB,EACtB,QAAgB,EAChB,QAAuB,EACvB,SAAe,EACf,OAAgB,EAChB,KAAe;QAEf,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAkB;YAC3B,YAAY,EAAE,YAAY;YAC1B,aAAa,EAAE,aAAa;YAC5B,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,IAAI,WAAW;YAC5D,QAAQ;YACR,eAAe,EAAE,QAAQ;YACzB,gBAAgB,EAAE,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB;YAC9C,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;YACzF,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;YACtC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;SACrE,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,MAAc;IAClD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;QACzC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE;KAC7E,CAAC,CAAC;AACL,CAAC"}

package/dist/server/market/catalog.d.ts

@@ -0,0 +1,111 @@
+export interface MarketRequirement {
+    name: string;
+    description: string;
+    secret?: boolean;
+    required?: boolean;
+}
+export type CredentialSpec = {
+    type: 'oauth';
+} | {
+    type: 'env';
+} | {
+    type: 'bearer';
+    tokenKey: string;
+} | {
+    type: 'api-key';
+    headerName: string;
+    valueKey: string;
+} | {
+    type: 'headers';
+    headers: {
+        name: string;
+        valueKey?: string;
+        value?: string;
+    }[];
+};
+export interface MarketEntry {
+    id: string;
+    name: string;
+    description: string;
+    category: string;
+    /** Hosting plane: MCP servers (default) or hosted CLIs */
+    plane?: 'mcp' | 'cli';
+    kind: 'home-stdio' | 'remote' | 'uvx' | 'docker' | 'cli-binary' | 'cli-image';
+    package?: string;
+    bin?: string;
+    /** Pinned exact artifact version (npm `@x.y.z`, uvx `==x.y.z`); installs never drift with latest */
+    version?: string;
+    /** Declarative installation recipe hidden behind the platform product entry. */
+    installer?: {
+        type: 'npm';
+        package: string;
+        bin: string;
+        version?: string;
+    } | {
+        type: 'go';
+        module: string;
+        bin: string;
+        version?: string;
+    } | {
+        type: 'github-release';
+        repository: string;
+        tag: string;
+        asset: string;
+        url: string;
+        bin: string;
+        archive?: 'tar.gz' | 'zip';
+    } | {
+        type: 'uvx';
+        package: string;
+        bin: string;
+        version?: string;
+        with?: string[];
+    } | {
+        type: 'docker';
+        image: string;
+        entrypoint?: string | null;
+        dockerfile?: string;
+    };
+    /** Docker image to run via `docker run --rm -i` (kind: docker); the host socket must be mounted */
+    image?: string;
+    /** Inline Dockerfile used to build the image when it is not present and not pullable */
+    dockerfile?: string;
+    url?: string;
+    /** Extra dependencies pinned into the uv tool env (e.g. ["mcp<2"]) to work around upstream breaks */
+    uvWith?: string[];
+    /** Executed argv prefix baked into every MCP stdio exec (after the binary). */
+    argsTemplate?: string[];
+    /** Explicit argv rules required for hosted CLI execution. */
+    allowList?: {
+        allow: string[][];
+        deny: string[][];
+    };
+    /** Platform identity shown in the CLI plane and used for shared auth metadata. */
+    platform?: string;
+    /** Maps CLI environment names to credential payload sources. */
+    credentialBindings?: Record<string, string>;
+    /** Declarative runtime bootstrap for hosted CLI containers. */
+    cliRuntime?: {
+        authStrategy?: 'none' | 'azure-service-principal' | 'tailscale-auth-key';
+        containerVolumes?: {
+            source: string;
+            target: string;
+            readOnly?: boolean;
+        }[];
+    };
+    credential: CredentialSpec;
+    requires: MarketRequirement[];
+    /** Optional Docker entrypoint used when the image does not declare its CLI binary. */
+    entrypoint?: string;
+    /** Status probe argv for the installed CLI (runs with this entry's command/entrypoint). */
+    probe?: {
+        command: string;
+        args: string[];
+    };
+    /** Per-exec timeout ceiling applied to the installed CLI record (default 120s). */
+    execTimeoutMs?: number;
+    docs?: string;
+}
+export declare function entryPlane(entry: MarketEntry): 'mcp' | 'cli';
+export declare const marketCatalog: MarketEntry[];
+//# sourceMappingURL=catalog.d.ts.map

package/dist/server/market/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../src/market/catalog.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,GACf;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,CAAC;AAExF,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACtB,IAAI,EAAE,YAAY,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,GAAG,YAAY,GAAG,WAAW,CAAC;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oGAAoG;IACpG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,SAAS,CAAC,EACN;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/D;QAAE,IAAI,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7D;QACE,IAAI,EAAE,gBAAgB,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC;KAC5B,GACD;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAChF;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvF,mGAAmG;IACnG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qGAAqG;IACrG,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,6DAA6D;IAC7D,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAA;KAAE,CAAC;IACpD,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,+DAA+D;IAC/D,UAAU,CAAC,EAAE;QACX,YAAY,CAAC,EAAE,MAAM,GAAG,yBAAyB,GAAG,oBAAoB,CAAC;QACzE,gBAAgB,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;SAAE,EAAE,CAAC;KAC7E,CAAC;IACF,UAAU,EAAE,cAAc,CAAC;IAC3B,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2FAA2F;IAC3F,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC5C,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,KAAK,GAAG,KAAK,CAE5D;AAED,eAAO,MAAM,aAAa,EAAE,WAAW,EA6wBtC,CAAC"}