@adhd/agent-mcp 2.0.1 → 2.1.0

package/src/engine/orchestrator.js

@@ -1,507 +0,0 @@
-import { logger } from "../logger.js";
-import { config } from "../config.js";
-import { ToolError } from "../validation/errors.js";
-import { generateId } from "../utils/ids.js";
-import { nowIso } from "../utils/timestamps.js";
-import { emitTaskEvent } from "../streaming/event-bus.js";
-import { windowMessages } from "../store/session-store.js";
-// ── HITL (Human-in-the-Loop) support ─────────────────────────────────────────
-/** Built-in tool name intercepted before any MCP client dispatch. */
-const HITL_TOOL_NAME = "request_human_input";
-/**
- * Tool definition advertised to the model when `allowHumanInput === true` on
- * the agent and the task is non-ephemeral.
- *
- * Name encodes as `builtin__request_human_input`:
- *  - server = "builtin"  (both OpenAI and Anthropic split on first "__")
- *  - tool   = "request_human_input"  ← matches HITL_TOOL_NAME
- *
- * The existing Phase-1 intercept (`tc.tool === HITL_TOOL_NAME`) catches it
- * before Phase-2 dispatch, so it is never forwarded to any MCP client.
- */
-const HITL_BUILTIN_TOOL_DEFINITION = {
-    name: "builtin__request_human_input",
-    description: "Pause the task to ask the human operator a question. The task suspends " +
-        "until a human answers via task_resume. Use when you need human confirmation, " +
-        "a decision, or missing information you cannot obtain yourself.",
-    inputSchema: {
-        type: "object",
-        properties: {
-            prompt: {
-                type: "string",
-                description: "The question to ask the human.",
-            },
-        },
-        required: ["prompt"],
-    },
-};
-/**
- * Module-scoped resolver map: taskId → resolver function.
- * Populated when an orchestrator suspends awaiting human input.
- * Entries are cleared when resolved or when the task is cancelled.
- */
-const hitlResolvers = new Map();
-/**
- * Resolve a suspended HITL task with the provided user input.
- * Returns `true` if the resolver was found and called; `false` if the
- * process restarted and the in-memory resolver no longer exists.
- */
-export function resolveHitl(taskId, userInput) {
-    const resolve = hitlResolvers.get(taskId);
-    if (!resolve)
-        return false;
-    hitlResolvers.delete(taskId);
-    resolve(userInput);
-    return true;
-}
-/** Duck-type check — avoids importing the budget plugin to identify its errors. */
-function isEnforcementError(err) {
-    return (typeof err === "object" &&
-        err !== null &&
-        err.isEnforcementError === true);
-}
-/** No-op IHookRegistry used as a fallback when none is provided. */
-const noopHooks = {
-    register: () => undefined,
-    emit: async () => undefined,
-    registerEnforcement: () => undefined,
-    enforce: async () => undefined,
-};
-export class Orchestrator {
-    async run(input) {
-        const { executionContext, registry, provider, policy, taskStore, sessionStore, signal, taskId, hooks = noopHooks, isEphemeral = false, } = input;
-        // Working copy of messages — we append to this as the loop progresses
-        const currentMessages = [...input.messages];
-        const contextLimit = config.server.contextLimit;
-        // BUG-002: track sessions opened by delegation during this task so we can
-        // close them on failure or cancellation, preventing orphaned active sessions
-        // that make sub-agents undeletable (AGENT_HAS_ACTIVE_SESSIONS).
-        // On success we leave them open — the caller has the session IDs and may
-        // want to continue using them. Only failure/cancel paths close them.
-        const delegationSessions = new Set();
-        let taskSucceeded = false;
-        try {
-            // Mark task as running
-            taskStore.updateStatus(taskId, "running");
-            emitTaskEvent({ type: "status_change", taskId, status: "running" });
-            await hooks.emit("task:start", { executionContext, messages: currentMessages, rootTaskId: executionContext.rootTaskId });
-            let finalContent = "";
-            // Tool-use loop — break on "completed" stop reason, throw on cancellation/policy
-            let looping = true;
-            while (looping) {
-                // Check for cancellation at the top of each iteration
-                if (signal.aborted) {
-                    throw new ToolError("PROVIDER_ERROR", "Task was cancelled");
-                }
-                // Compose per-iteration signal: task cancellation OR provider timeout
-                const composedSignal = AbortSignal.any([
-                    signal,
-                    AbortSignal.timeout(executionContext.agentDefinition.provider.timeoutMs ?? 60_000),
-                ]);
-                // Gather available tools from the registry
-                const tools = await registry.listAllTools();
-                // Append the built-in HITL tool when the agent opts in AND the
-                // task is durable (non-ephemeral has a DB row for the resume token).
-                if (executionContext.agentDefinition.allowHumanInput === true && !isEphemeral) {
-                    tools.push(HITL_BUILTIN_TOOL_DEFINITION);
-                }
-                // Emit MODEL_REQUEST event
-                taskStore.appendEvent({
-                    taskId,
-                    type: "MODEL_REQUEST",
-                    payload: { messageCount: currentMessages.length, toolCount: tools.length },
-                });
-                logger.debug({
-                    taskId,
-                    sessionId: executionContext.sessionId,
-                    agentName: executionContext.agentName,
-                    messageCount: currentMessages.length,
-                }, "MODEL_REQUEST");
-                // Emit pre:model_request hook (observational — errors swallowed)
-                await hooks.emit("pre:model_request", { executionContext, messages: currentMessages, tools });
-                // Enforcement hooks — throws propagate; budget violations surface as BUDGET_EXCEEDED
-                try {
-                    await hooks.enforce("pre:model_request", { executionContext, messages: currentMessages, tools });
-                }
-                catch (err) {
-                    if (isEnforcementError(err)) {
-                        throw new ToolError("BUDGET_EXCEEDED", err.message);
-                    }
-                    throw err;
-                }
-                // Call the LLM provider
-                let providerResponse;
-                try {
-                    const messagesToSend = contextLimit > 0
-                        ? windowMessages(currentMessages, contextLimit)
-                        : currentMessages;
-                    providerResponse = await provider.chat({
-                        messages: messagesToSend,
-                        tools: tools.length > 0 ? tools : undefined,
-                        signal: composedSignal,
-                        // executeTool is used by providers (e.g. claudecli) that manage
-                        // their own internal tool loop. Standard providers (anthropic,
-                        // openai) return stopReason "tool_calls" and ignore this.
-                        executeTool: async (server, tool, args) => {
-                            const client = await registry.getClient(server);
-                            try {
-                                const result = await client.callTool(tool, args, composedSignal);
-                                return { result, isError: false };
-                            }
-                            catch (error) {
-                                return {
-                                    result: error instanceof Error ? error.message : String(error),
-                                    isError: true,
-                                };
-                            }
-                        },
-                    });
-                }
-                catch (error) {
-                    // Order matters — see [inv:provider-error-dispatch]:
-                    // cancellation first, then timeout, then auth, then rate-limit, then generic.
-                    // signal.aborted = user-initiated task cancel; composedSignal.aborted-only = timeout.
-                    if (signal.aborted) {
-                        throw new ToolError("PROVIDER_ERROR", "Task was cancelled");
-                    }
-                    if (composedSignal.aborted ||
-                        (error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError"))) {
-                        const ms = executionContext.agentDefinition.provider.timeoutMs ?? 60_000;
-                        throw new ToolError("PROVIDER_TIMEOUT", `Provider call timed out after ${ms}ms. Increase timeoutMs on the agent's provider config.`);
-                    }
-                    if (error instanceof Error && (error.constructor.name === "AuthenticationError" ||
-                        ("status" in error && error.status === 401))) {
-                        throw new ToolError("PROVIDER_AUTH_ERROR", `Provider authentication failed: ${error.message}. ` +
-                            `Set ANTHROPIC_AUTH_TOKEN (run \`claude setup-token\` to obtain an OAuth access token) or use authTokenEnv in the provider config`);
-                    }
-                    if (error instanceof Error && (("status" in error && error.status === 429) ||
-                        error.message?.includes("rate limit") ||
-                        error.message?.includes("429"))) {
-                        throw new ToolError("PROVIDER_RATE_LIMITED", `Provider rate limit exceeded: ${error.message}`);
-                    }
-                    if (error instanceof Error && (("code" in error && error.code === "context_length_exceeded") ||
-                        error.message?.includes("context_length_exceeded") ||
-                        error.message?.includes("prompt is too long"))) {
-                        throw new ToolError("CONTEXT_WINDOW_EXCEEDED", `Context window exceeded. Set AGENT_MCP_CONTEXT_LIMIT to enable automatic truncation.`);
-                    }
-                    throw new ToolError("PROVIDER_ERROR", `Provider call failed: ${error instanceof Error ? error.message : String(error)}`);
-                }
-                const assistantMessage = {
-                    ...providerResponse.message,
-                    sessionId: executionContext.sessionId,
-                };
-                // Persist and append the assistant message
-                await sessionStore.appendMessage(executionContext.sessionId, assistantMessage);
-                currentMessages.push(assistantMessage);
-                await hooks.emit("post:model_response", {
-                    executionContext,
-                    stopReason: providerResponse.stopReason,
-                    toolCallCount: assistantMessage.toolCalls?.length ?? 0,
-                    tokenUsage: providerResponse.usage,
-                });
-                await hooks.emit("message:appended", { executionContext, message: assistantMessage });
-                // Emit MODEL_RESPONSE event
-                taskStore.appendEvent({
-                    taskId,
-                    type: "MODEL_RESPONSE",
-                    payload: {
-                        stopReason: providerResponse.stopReason,
-                        hasContent: !!assistantMessage.content,
-                        toolCallCount: assistantMessage.toolCalls?.length ?? 0,
-                    },
-                });
-                logger.debug({
-                    taskId,
-                    agentName: executionContext.agentName,
-                    stopReason: providerResponse.stopReason,
-                }, "MODEL_RESPONSE");
-                if (providerResponse.stopReason === "completed") {
-                    finalContent = assistantMessage.content ?? "";
-                    looping = false;
-                    continue;
-                }
-                // Process tool calls
-                const toolCalls = assistantMessage.toolCalls ?? [];
-                // Phase 1 — serial pre-dispatch loop (policy + count).
-                // Uses variable name `tc` to distinguish from the old sequential per-tool dispatch
-                // that has been replaced by Phase 2 (Promise.all concurrent execution below).
-                //
-                // HITL intercept: `request_human_input` is intercepted here (before Phase 2)
-                // and never reaches the MCP client. [inv:request-human-input-intercept]
-                const hitlResults = new Map(); // toolCall.id → userInput
-                for (const tc of toolCalls) {
-                    if (signal.aborted) {
-                        throw new ToolError("PROVIDER_ERROR", "Task was cancelled before tool call");
-                    }
-                    // ── HITL intercept ──────────────────────────────────────
-                    if (tc.tool === HITL_TOOL_NAME) {
-                        // Ephemeral tasks have no session row — cannot persist resume_token
-                        // (no DB row means task_resume cannot validate it and HITL cannot
-                        // be resumed after a process restart). Reject via isEphemeral flag.
-                        if (isEphemeral) {
-                            throw new ToolError("VALIDATION_ERROR", "request_human_input is not supported for ephemeral tasks");
-                        }
-                        // 1. Generate a resumeToken
-                        const resumeToken = crypto.randomUUID();
-                        // 2. Persist suspension to DB BEFORE awaiting [inv:resume-token-db-persisted]
-                        //    This ordering ensures the token survives a process restart.
-                        await taskStore.updateStatus(taskId, "awaiting_input", { resumeToken });
-                        emitTaskEvent({ type: "status_change", taskId, status: "awaiting_input" });
-                        // 3. Register resolver and await userInput.
-                        //    Wire into the AbortSignal so task_cancel unblocks this promise —
-                        //    without this, cancelling an awaiting_input task leaves the promise
-                        //    pending forever and the orchestrator's async context leaks.
-                        let abortHandler;
-                        const userInput = await new Promise((resolve, reject) => {
-                            hitlResolvers.set(taskId, resolve);
-                            abortHandler = () => {
-                                hitlResolvers.delete(taskId);
-                                reject(new ToolError("PROVIDER_ERROR", "Task cancelled while awaiting human input"));
-                            };
-                            signal.addEventListener("abort", abortHandler, { once: true });
-                        }).finally(() => {
-                            // Remove the abort listener once the promise settles so a
-                            // later cancellation of this (now-resumed) task does not fire
-                            // a stale handler / leak a listener on the long-lived signal.
-                            if (abortHandler)
-                                signal.removeEventListener("abort", abortHandler);
-                        });
-                        // 4. Mark running again
-                        await taskStore.updateStatus(taskId, "running");
-                        emitTaskEvent({ type: "status_change", taskId, status: "running" });
-                        // 5. Store userInput to inject as tool result in Phase 3
-                        hitlResults.set(tc.id, userInput);
-                        // Return resume token to the caller via event log; continue to next tc
-                        taskStore.appendEvent({
-                            taskId,
-                            type: "TOOL_CALL",
-                            payload: { tool: HITL_TOOL_NAME, callId: tc.id, resumeToken },
-                        });
-                        continue;
-                    }
-                    // ── end HITL intercept ──────────────────────────────────
-                    // Resolve the REAL {server,tool}: OpenAI-compatible/local models
-                    // rewrite '-' → '_' in tool names, so the returned name may not
-                    // match what we advertised. Resolving here keeps the qualified
-                    // name correct for the policy delegation check (otherwise a
-                    // mangled name would bypass the allowedAgents gate) and dispatch.
-                    const resolved = registry.resolveToolName?.(`${tc.server}__${tc.tool}`) ??
-                        { server: tc.server, tool: tc.tool };
-                    const qualifiedToolName = `${resolved.server}__${resolved.tool}`;
-                    await hooks.emit("pre:tool_call", {
-                        executionContext,
-                        toolName: qualifiedToolName,
-                        callId: tc.id,
-                        toolInput: tc.arguments,
-                    });
-                    policy.check({
-                        executionContext,
-                        targetTool: qualifiedToolName,
-                        targetAgentName: qualifiedToolName === "agent-mcp__agent"
-                            ? tc.arguments?.name
-                            : undefined,
-                    });
-                    // Increment AFTER policy.check — see [inv:toolCallCount-increment-after-check].
-                    // policy.check enforces "allow while toolCallCount < max" (it expects the
-                    // count of calls already accounted for), so incrementing BEFORE the check
-                    // fired the cap one call early (effective max-1). Counting per tool here —
-                    // still inside the serial pre-dispatch loop, not Phase 3 — keeps the limit
-                    // enforced WITHIN a single concurrent batch: each tool's check sees the
-                    // running count from prior tools in this same loop.
-                    executionContext.toolCallCount++;
-                }
-                // Phase 2 — Promise.all concurrent execution.
-                // HITL calls are excluded (already handled in Phase 1 — their results
-                // are in hitlResults and will be injected in Phase 3).
-                const nonHitlToolCalls = toolCalls.filter(tc => tc.tool !== HITL_TOOL_NAME);
-                const toolResults = await Promise.all(nonHitlToolCalls.map(async (toolCall) => {
-                    const resolved = registry.resolveToolName?.(`${toolCall.server}__${toolCall.tool}`) ??
-                        { server: toolCall.server, tool: toolCall.tool };
-                    const qualifiedToolName = `${resolved.server}__${resolved.tool}`;
-                    // Emit tool_call SSE event before dispatch
-                    emitTaskEvent({
-                        type: "tool_call",
-                        taskId,
-                        toolName: qualifiedToolName,
-                        toolCallId: toolCall.id,
-                        input: toolCall.arguments,
-                    });
-                    taskStore.appendEvent({
-                        taskId,
-                        type: "TOOL_CALL",
-                        payload: { tool: qualifiedToolName, callId: toolCall.id },
-                    });
-                    logger.info({ taskId, agentName: executionContext.agentName, tool: qualifiedToolName, callId: toolCall.id }, "TOOL_CALL");
-                    let toolResult;
-                    let isError = false;
-                    try {
-                        const client = await registry.getClient(resolved.server);
-                        // Thread the composed task-cancel/timeout signal so a
-                        // cancel mid-batch interrupts this in-flight call
-                        // instead of waiting for the whole batch (DEBT-003).
-                        toolResult = await client.callTool(resolved.tool, toolCall.arguments, composedSignal);
-                        // BUG-002: capture session IDs opened by delegation so we
-                        // can close them on failure, preventing undeletable sub-agents.
-                        if (qualifiedToolName === "agent-mcp__agent" && toolResult != null) {
-                            const maybeId = toolResult["session_id"];
-                            if (typeof maybeId === "string") {
-                                delegationSessions.add(maybeId);
-                            }
-                        }
-                    }
-                    catch (error) {
-                        // Re-throw fatal ToolError codes — these abort the entire task, not just this call.
-                        // See [inv:fatal-policy-codes] in _shared.md.
-                        const FATAL_CODES = ["MAX_DEPTH_EXCEEDED", "MAX_TOOL_LOOPS_EXCEEDED", "DELEGATION_NOT_ALLOWED"];
-                        if (error instanceof ToolError && FATAL_CODES.includes(error.code)) {
-                            throw error;
-                        }
-                        isError = true;
-                        toolResult = error instanceof Error ? error.message : String(error);
-                        logger.warn({ taskId, tool: qualifiedToolName, error: toolResult }, "TOOL_RESULT error");
-                    }
-                    taskStore.appendEvent({
-                        taskId,
-                        type: "TOOL_RESULT",
-                        payload: { callId: toolCall.id, tool: qualifiedToolName, isError },
-                    });
-                    // Emit tool_result SSE event after result received
-                    emitTaskEvent({
-                        type: "tool_result",
-                        taskId,
-                        toolCallId: toolCall.id,
-                        content: toolResult,
-                    });
-                    logger.debug({ taskId, tool: qualifiedToolName, isError }, "TOOL_RESULT");
-                    await hooks.emit("post:tool_call", {
-                        executionContext,
-                        toolName: qualifiedToolName,
-                        callId: toolCall.id,
-                        toolInput: toolCall.arguments,
-                        result: toolResult,
-                        isError,
-                    });
-                    return { toolCall, toolResult, isError };
-                }));
-                // Phase 3 — serial result append (preserves order per [inv:message-order]).
-                // Build a lookup for non-HITL results; then iterate original toolCalls
-                // order so HITL and non-HITL results are interleaved correctly.
-                const toolResultByCallId = new Map(toolResults.map(r => [r.toolCall.id, r]));
-                for (const tc of toolCalls) {
-                    let toolResult;
-                    let isError = false;
-                    if (hitlResults.has(tc.id)) {
-                        // HITL tool: inject userInput as the result
-                        toolResult = hitlResults.get(tc.id);
-                    }
-                    else {
-                        const r = toolResultByCallId.get(tc.id);
-                        if (!r)
-                            continue; // should not happen
-                        toolResult = r.toolResult;
-                        isError = r.isError;
-                    }
-                    const toolResultMessage = {
-                        id: generateId(),
-                        sessionId: executionContext.sessionId,
-                        role: "tool",
-                        toolResults: [{
-                                toolCallId: tc.id, // [inv:call-id-keying]
-                                result: toolResult,
-                                isError,
-                            }],
-                        createdAt: nowIso(),
-                    };
-                    await sessionStore.appendMessage(executionContext.sessionId, toolResultMessage);
-                    currentMessages.push(toolResultMessage);
-                    await hooks.emit("message:appended", { executionContext, message: toolResultMessage });
-                }
-                // Guard: provider signalled tool_calls but sent no tool call blocks —
-                // prevents infinite spin on a malformed response.
-                if (providerResponse.stopReason === "tool_calls" &&
-                    (assistantMessage.toolCalls ?? []).length === 0) {
-                    finalContent = assistantMessage.content ?? "";
-                    looping = false;
-                }
-            }
-            // Task completed successfully
-            taskStore.updateStatus(taskId, "completed", {
-                result: finalContent,
-                completedAt: nowIso(),
-            });
-            emitTaskEvent({ type: "status_change", taskId, status: "completed" });
-            taskStore.appendEvent({
-                taskId,
-                type: "TASK_COMPLETED",
-                payload: { result: finalContent },
-            });
-            logger.info({ taskId, agentName: executionContext.agentName }, "TASK_COMPLETED");
-            await hooks.emit("task:completed", { executionContext, result: finalContent });
-            // Emit done on the successful completion path
-            emitTaskEvent({ type: "done", taskId, result: finalContent, error: null });
-            taskSucceeded = true;
-            return { result: finalContent };
-        }
-        catch (error) {
-            // Determine if this is a cancellation or a real failure
-            const isCancelled = signal.aborted;
-            if (isCancelled) {
-                // Status update handled by TaskStore.cancel() in most cases;
-                // update here only if not already cancelled
-                try {
-                    taskStore.updateStatus(taskId, "cancelled", {
-                        cancelledAt: nowIso(),
-                        // Persist the reason so a later SSE terminal-on-connect read
-                        // surfaces it instead of error:null (matches the live-bus done).
-                        error: "Task was cancelled",
-                    });
-                }
-                catch {
-                    // already cancelled — ignore
-                }
-                emitTaskEvent({ type: "status_change", taskId, status: "cancelled" });
-                taskStore.appendEvent({ taskId, type: "TASK_CANCELLED" });
-                await hooks.emit("task:cancelled", { executionContext });
-                // Emit done on the cancellation path — SSE clients must not hang
-                emitTaskEvent({ type: "done", taskId, result: null, error: "Task was cancelled" });
-            }
-            else {
-                const errorMessage = error instanceof Error ? error.message : String(error);
-                taskStore.updateStatus(taskId, "failed", {
-                    error: errorMessage,
-                });
-                emitTaskEvent({ type: "status_change", taskId, status: "failed" });
-                taskStore.appendEvent({
-                    taskId,
-                    type: "TASK_FAILED",
-                    payload: { error: errorMessage },
-                });
-                logger.error({ taskId, agentName: executionContext.agentName, error }, "TASK_FAILED");
-                await hooks.emit("task:failed", { executionContext, error: errorMessage });
-                // Emit done on the failure path
-                emitTaskEvent({ type: "done", taskId, result: null, error: errorMessage });
-            }
-            throw error;
-        }
-        finally {
-            // BUG-002: close delegation-scoped sessions on failure/cancellation so
-            // sub-agents don't become undeletable (AGENT_HAS_ACTIVE_SESSIONS guard).
-            // On success the caller keeps the session IDs; on failure/cancel they're
-            // orphaned and must be reaped here.
-            if (!taskSucceeded) {
-                for (const sessionId of delegationSessions) {
-                    try {
-                        sessionStore.close(sessionId);
-                    }
-                    catch {
-                        // Already closed or not found — ignore
-                    }
-                }
-            }
-            // Per-task registry teardown — always runs
-            await registry.closeAll();
-            taskStore.unregisterCancellation(taskId);
-        }
-    }
-}
-//# sourceMappingURL=orchestrator.js.map

package/src/engine/orchestrator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../../../../../packages/ai/agent-mcp/src/engine/orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAItC,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAM1D,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,gFAAgF;AAEhF,qEAAqE;AACrE,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAE7C;;;;;;;;;;GAUG;AACH,MAAM,4BAA4B,GAAG;IACjC,IAAI,EAAE,8BAA8B;IACpC,WAAW,EACP,yEAAyE;QACzE,+EAA+E;QAC/E,gEAAgE;IACpE,WAAW,EAAE;QACT,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACR,MAAM,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,gCAAgC;aAChD;SACJ;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACvB;CACK,CAAC;AAEX;;;;GAIG;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuC,CAAC;AAErE;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,SAAiB;IACzD,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,SAAS,CAAC,CAAC;IACnB,OAAO,IAAI,CAAC;AAChB,CAAC;AAyBD,mFAAmF;AACnF,SAAS,kBAAkB,CAAC,GAAY;IACpC,OAAO,CACH,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACX,GAAyB,CAAC,kBAAkB,KAAK,IAAI,CACzD,CAAC;AACN,CAAC;AAED,oEAAoE;AACpE,MAAM,SAAS,GAAkB;IAC7B,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;IACzB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;IAC3B,mBAAmB,EAAE,GAAG,EAAE,CAAC,SAAS;IACpC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;CACjC,CAAC;AAMF,MAAM,OAAO,YAAY;IACrB,KAAK,CAAC,GAAG,CAAC,KAA2B;QACjC,MAAM,EACF,gBAAgB,EAChB,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,SAAS,EACT,YAAY,EACZ,MAAM,EACN,MAAM,EACN,KAAK,GAAG,SAAS,EACjB,WAAW,GAAG,KAAK,GACtB,GAAG,KAAK,CAAC;QAEV,sEAAsE;QACtE,MAAM,eAAe,GAAc,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAEhD,0EAA0E;QAC1E,6EAA6E;QAC7E,gEAAgE;QAChE,yEAAyE;QACzE,qEAAqE;QACrE,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC7C,IAAI,aAAa,GAAG,KAAK,CAAC;QAE1B,IAAI,CAAC;YACD,uBAAuB;YACvB,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC1C,aAAa,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACpE,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,CAAC,UAAU,EAAE,CAAC,CAAC;YAEzH,IAAI,YAAY,GAAG,EAAE,CAAC;YAEtB,iFAAiF;YACjF,IAAI,OAAO,GAAG,IAAI,CAAC;YACnB,OAAO,OAAO,EAAE,CAAC;gBACb,sDAAsD;gBACtD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;gBAChE,CAAC;gBAED,sEAAsE;gBACtE,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,CAAC;oBACnC,MAAM;oBACN,WAAW,CAAC,OAAO,CACf,gBAAgB,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,IAAI,MAAM,CAChE;iBACJ,CAAC,CAAC;gBAEH,2CAA2C;gBAC3C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;gBAE5C,+DAA+D;gBAC/D,qEAAqE;gBACrE,IAAI,gBAAgB,CAAC,eAAe,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC5E,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBAC7C,CAAC;gBAED,2BAA2B;gBAC3B,SAAS,CAAC,WAAW,CAAC;oBAClB,MAAM;oBACN,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,EAAE,YAAY,EAAE,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE;iBAC7E,CAAC,CAAC;gBAEH,MAAM,CAAC,KAAK,CACR;oBACI,MAAM;oBACN,SAAS,EAAE,gBAAgB,CAAC,SAAS;oBACrC,SAAS,EAAE,gBAAgB,CAAC,SAAS;oBACrC,YAAY,EAAE,eAAe,CAAC,MAAM;iBACvC,EACD,eAAe,CAClB,CAAC;gBAEF,iEAAiE;gBACjE,MAAM,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;gBAE9F,qFAAqF;gBACrF,IAAI,CAAC;oBACD,MAAM,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;gBACrG,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACpB,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC1B,MAAM,IAAI,SAAS,CAAC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;oBACxD,CAAC;oBACD,MAAM,GAAG,CAAC;gBACd,CAAC;gBAED,wBAAwB;gBACxB,IAAI,gBAAgB,CAAC;gBACrB,IAAI,CAAC;oBACD,MAAM,cAAc,GAAG,YAAY,GAAG,CAAC;wBACnC,CAAC,CAAC,cAAc,CAAC,eAAe,EAAE,YAAY,CAAC;wBAC/C,CAAC,CAAC,eAAe,CAAC;oBACtB,gBAAgB,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;wBACnC,QAAQ,EAAE,cAAc;wBACxB,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;wBAC3C,MAAM,EAAE,cAAc;wBACtB,gEAAgE;wBAChE,+DAA+D;wBAC/D,0DAA0D;wBAC1D,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;4BACtC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;4BAChD,IAAI,CAAC;gCACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;gCACjE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;4BACtC,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACb,OAAO;oCACH,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oCAC9D,OAAO,EAAE,IAAI;iCAChB,CAAC;4BACN,CAAC;wBACL,CAAC;qBACJ,CAAC,CAAC;gBACP,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACb,qDAAqD;oBACrD,8EAA8E;oBAC9E,sFAAsF;oBACtF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACjB,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;oBAChE,CAAC;oBACD,IACI,cAAc,CAAC,OAAO;wBACtB,CAAC,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,EAC5F,CAAC;wBACC,MAAM,EAAE,GAAG,gBAAgB,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,IAAI,MAAM,CAAC;wBACzE,MAAM,IAAI,SAAS,CACf,kBAAkB,EAClB,iCAAiC,EAAE,wDAAwD,CAC9F,CAAC;oBACN,CAAC;oBACD,IACI,KAAK,YAAY,KAAK,IAAI,CACtB,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,qBAAqB;wBAChD,CAAC,QAAQ,IAAI,KAAK,IAAK,KAA6B,CAAC,MAAM,KAAK,GAAG,CAAC,CACvE,EACH,CAAC;wBACC,MAAM,IAAI,SAAS,CACf,qBAAqB,EACrB,mCAAmC,KAAK,CAAC,OAAO,IAAI;4BACpD,kIAAkI,CACrI,CAAC;oBACN,CAAC;oBACD,IACI,KAAK,YAAY,KAAK,IAAI,CACtB,CAAC,QAAQ,IAAI,KAAK,IAAK,KAA6B,CAAC,MAAM,KAAK,GAAG,CAAC;wBACpE,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC;wBACrC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CACjC,EACH,CAAC;wBACC,MAAM,IAAI,SAAS,CACf,uBAAuB,EACvB,iCAAiC,KAAK,CAAC,OAAO,EAAE,CACnD,CAAC;oBACN,CAAC;oBACD,IACI,KAAK,YAAY,KAAK,IAAI,CACtB,CAAC,MAAM,IAAI,KAAK,IAAK,KAA2B,CAAC,IAAI,KAAK,yBAAyB,CAAC;wBACpF,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,yBAAyB,CAAC;wBAClD,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAChD,EACH,CAAC;wBACC,MAAM,IAAI,SAAS,CACf,yBAAyB,EACzB,sFAAsF,CACzF,CAAC;oBACN,CAAC;oBACD,MAAM,IAAI,SAAS,CACf,gBAAgB,EAChB,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAC;gBACN,CAAC;gBAED,MAAM,gBAAgB,GAAY;oBAC9B,GAAG,gBAAgB,CAAC,OAAO;oBAC3B,SAAS,EAAE,gBAAgB,CAAC,SAAS;iBACxC,CAAC;gBAEF,2CAA2C;gBAC3C,MAAM,YAAY,CAAC,aAAa,CAAC,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;gBAC/E,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBACvC,MAAM,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE;oBACpC,gBAAgB;oBAChB,UAAU,EAAE,gBAAgB,CAAC,UAAU;oBACvC,aAAa,EAAE,gBAAgB,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC;oBACtD,UAAU,EAAE,gBAAgB,CAAC,KAAK;iBACrC,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAEtF,4BAA4B;gBAC5B,SAAS,CAAC,WAAW,CAAC;oBAClB,MAAM;oBACN,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE;wBACL,UAAU,EAAE,gBAAgB,CAAC,UAAU;wBACvC,UAAU,EAAE,CAAC,CAAC,gBAAgB,CAAC,OAAO;wBACtC,aAAa,EAAE,gBAAgB,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC;qBACzD;iBACJ,CAAC,CAAC;gBAEH,MAAM,CAAC,KAAK,CACR;oBACI,MAAM;oBACN,SAAS,EAAE,gBAAgB,CAAC,SAAS;oBACrC,UAAU,EAAE,gBAAgB,CAAC,UAAU;iBAC1C,EACD,gBAAgB,CACnB,CAAC;gBAEF,IAAI,gBAAgB,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;oBAC9C,YAAY,GAAG,gBAAgB,CAAC,OAAO,IAAI,EAAE,CAAC;oBAC9C,OAAO,GAAG,KAAK,CAAC;oBAChB,SAAS;gBACb,CAAC;gBAED,qBAAqB;gBACrB,MAAM,SAAS,GAAG,gBAAgB,CAAC,SAAS,IAAI,EAAE,CAAC;gBAEnD,uDAAuD;gBACvD,mFAAmF;gBACnF,8EAA8E;gBAC9E,EAAE;gBACF,6EAA6E;gBAC7E,wEAAwE;gBACxE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,0BAA0B;gBACzE,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;oBACzB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACjB,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;oBACjF,CAAC;oBAED,2DAA2D;oBAC3D,IAAI,EAAE,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;wBAC7B,oEAAoE;wBACpE,kEAAkE;wBAClE,oEAAoE;wBACpE,IAAI,WAAW,EAAE,CAAC;4BACd,MAAM,IAAI,SAAS,CACf,kBAAkB,EAClB,0DAA0D,CAC7D,CAAC;wBACN,CAAC;wBAED,4BAA4B;wBAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;wBAExC,8EAA8E;wBAC9E,iEAAiE;wBACjE,MAAM,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,gBAAgB,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;wBACxE,aAAa,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;wBAE3E,4CAA4C;wBAC5C,sEAAsE;wBACtE,wEAAwE;wBACxE,iEAAiE;wBACjE,IAAI,YAAsC,CAAC;wBAC3C,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;4BAC5D,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;4BACnC,YAAY,GAAG,GAAG,EAAE;gCAChB,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gCAC7B,MAAM,CAAC,IAAI,SAAS,CAAC,gBAAgB,EAAE,2CAA2C,CAAC,CAAC,CAAC;4BACzF,CAAC,CAAC;4BACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;wBACnE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;4BACZ,0DAA0D;4BAC1D,8DAA8D;4BAC9D,8DAA8D;4BAC9D,IAAI,YAAY;gCAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;wBACxE,CAAC,CAAC,CAAC;wBAEH,wBAAwB;wBACxB,MAAM,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;wBAChD,aAAa,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;wBAEpE,yDAAyD;wBACzD,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;wBAElC,uEAAuE;wBACvE,SAAS,CAAC,WAAW,CAAC;4BAClB,MAAM;4BACN,IAAI,EAAE,WAAW;4BACjB,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE;yBAChE,CAAC,CAAC;wBACH,SAAS;oBACb,CAAC;oBACD,2DAA2D;oBAE3D,iEAAiE;oBACjE,gEAAgE;oBAChE,+DAA+D;oBAC/D,4DAA4D;oBAC5D,kEAAkE;oBAClE,MAAM,QAAQ,GACV,QAAQ,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;wBACtD,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;oBACzC,MAAM,iBAAiB,GAAG,GAAG,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACjE,MAAM,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE;wBAC9B,gBAAgB;wBAChB,QAAQ,EAAE,iBAAiB;wBAC3B,MAAM,EAAE,EAAE,CAAC,EAAE;wBACb,SAAS,EAAE,EAAE,CAAC,SAAS;qBAC1B,CAAC,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC;wBACT,gBAAgB;wBAChB,UAAU,EAAE,iBAAiB;wBAC7B,eAAe,EACX,iBAAiB,KAAK,kBAAkB;4BACpC,CAAC,CAAE,EAAE,CAAC,SAA+B,EAAE,IAAI;4BAC3C,CAAC,CAAC,SAAS;qBACtB,CAAC,CAAC;oBACH,gFAAgF;oBAChF,0EAA0E;oBAC1E,0EAA0E;oBAC1E,2EAA2E;oBAC3E,2EAA2E;oBAC3E,wEAAwE;oBACxE,oDAAoD;oBACpD,gBAAgB,CAAC,aAAa,EAAE,CAAC;gBACrC,CAAC;gBAED,8CAA8C;gBAC9C,sEAAsE;gBACtE,uDAAuD;gBACvD,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;gBAC5E,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;oBACpC,MAAM,QAAQ,GACV,QAAQ,CAAC,eAAe,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;wBAClE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACrD,MAAM,iBAAiB,GAAG,GAAG,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAEjE,2CAA2C;oBAC3C,aAAa,CAAC;wBACV,IAAI,EAAE,WAAW;wBACjB,MAAM;wBACN,QAAQ,EAAE,iBAAiB;wBAC3B,UAAU,EAAE,QAAQ,CAAC,EAAE;wBACvB,KAAK,EAAE,QAAQ,CAAC,SAAS;qBAC5B,CAAC,CAAC;oBAEH,SAAS,CAAC,WAAW,CAAC;wBAClB,MAAM;wBACN,IAAI,EAAE,WAAW;wBACjB,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE;qBAC5D,CAAC,CAAC;oBAEH,MAAM,CAAC,IAAI,CACP,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,EAC/F,WAAW,CACd,CAAC;oBAEF,IAAI,UAAmB,CAAC;oBACxB,IAAI,OAAO,GAAG,KAAK,CAAC;oBACpB,IAAI,CAAC;wBACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;wBACzD,sDAAsD;wBACtD,kDAAkD;wBAClD,qDAAqD;wBACrD,UAAU,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;wBAEtF,0DAA0D;wBAC1D,gEAAgE;wBAChE,IAAI,iBAAiB,KAAK,kBAAkB,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;4BACjE,MAAM,OAAO,GAAI,UAAsC,CAAC,YAAY,CAAC,CAAC;4BACtE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gCAC9B,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;4BACpC,CAAC;wBACL,CAAC;oBACL,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACb,oFAAoF;wBACpF,8CAA8C;wBAC9C,MAAM,WAAW,GAAG,CAAC,oBAAoB,EAAE,yBAAyB,EAAE,wBAAwB,CAAC,CAAC;wBAChG,IAAI,KAAK,YAAY,SAAS,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;4BACjE,MAAM,KAAK,CAAC;wBAChB,CAAC;wBACD,OAAO,GAAG,IAAI,CAAC;wBACf,UAAU,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBACpE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,mBAAmB,CAAC,CAAC;oBAC7F,CAAC;oBAED,SAAS,CAAC,WAAW,CAAC;wBAClB,MAAM;wBACN,IAAI,EAAE,aAAa;wBACnB,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE;qBACrE,CAAC,CAAC;oBAEH,mDAAmD;oBACnD,aAAa,CAAC;wBACV,IAAI,EAAE,aAAa;wBACnB,MAAM;wBACN,UAAU,EAAE,QAAQ,CAAC,EAAE;wBACvB,OAAO,EAAE,UAAU;qBACtB,CAAC,CAAC;oBAEH,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;oBAE1E,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE;wBAC/B,gBAAgB;wBAChB,QAAQ,EAAE,iBAAiB;wBAC3B,MAAM,EAAE,QAAQ,CAAC,EAAE;wBACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;wBAC7B,MAAM,EAAE,UAAU;wBAClB,OAAO;qBACV,CAAC,CAAC;oBAEH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;gBAC7C,CAAC,CAAC,CACL,CAAC;gBAEF,4EAA4E;gBAC5E,uEAAuE;gBACvE,gEAAgE;gBAChE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7E,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;oBACzB,IAAI,UAAmB,CAAC;oBACxB,IAAI,OAAO,GAAG,KAAK,CAAC;oBAEpB,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;wBACzB,4CAA4C;wBAC5C,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;oBACxC,CAAC;yBAAM,CAAC;wBACJ,MAAM,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;wBACxC,IAAI,CAAC,CAAC;4BAAE,SAAS,CAAC,oBAAoB;wBACtC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;wBAC1B,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;oBACxB,CAAC;oBAED,MAAM,iBAAiB,GAAY;wBAC/B,EAAE,EAAE,UAAU,EAAE;wBAChB,SAAS,EAAE,gBAAgB,CAAC,SAAS;wBACrC,IAAI,EAAE,MAAM;wBACZ,WAAW,EAAE,CAAC;gCACV,UAAU,EAAE,EAAE,CAAC,EAAE,EAAG,uBAAuB;gCAC3C,MAAM,EAAE,UAAU;gCAClB,OAAO;6BACV,CAAC;wBACF,SAAS,EAAE,MAAM,EAAE;qBACtB,CAAC;oBACF,MAAM,YAAY,CAAC,aAAa,CAAC,gBAAgB,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;oBAChF,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;oBACxC,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC3F,CAAC;gBAED,sEAAsE;gBACtE,kDAAkD;gBAClD,IACI,gBAAgB,CAAC,UAAU,KAAK,YAAY;oBAC5C,CAAC,gBAAgB,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EACjD,CAAC;oBACC,YAAY,GAAG,gBAAgB,CAAC,OAAO,IAAI,EAAE,CAAC;oBAC9C,OAAO,GAAG,KAAK,CAAC;gBACpB,CAAC;YACL,CAAC;YAED,8BAA8B;YAC9B,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE;gBACxC,MAAM,EAAE,YAAY;gBACpB,WAAW,EAAE,MAAM,EAAE;aACxB,CAAC,CAAC;YACH,aAAa,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YAEtE,SAAS,CAAC,WAAW,CAAC;gBAClB,MAAM;gBACN,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;aACpC,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CACP,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,SAAS,EAAE,EACjD,gBAAgB,CACnB,CAAC;YAEF,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YAE/E,8CAA8C;YAC9C,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAE3E,aAAa,GAAG,IAAI,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,wDAAwD;YACxD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC;YAEnC,IAAI,WAAW,EAAE,CAAC;gBACd,6DAA6D;gBAC7D,4CAA4C;gBAC5C,IAAI,CAAC;oBACD,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE;wBACxC,WAAW,EAAE,MAAM,EAAE;wBACrB,6DAA6D;wBAC7D,iEAAiE;wBACjE,KAAK,EAAE,oBAAoB;qBAC9B,CAAC,CAAC;gBACP,CAAC;gBAAC,MAAM,CAAC;oBACL,6BAA6B;gBACjC,CAAC;gBACD,aAAa,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;gBAEtE,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAC1D,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAEzD,iEAAiE;gBACjE,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACvF,CAAC;iBAAM,CAAC;gBACJ,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAE5E,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE;oBACrC,KAAK,EAAE,YAAY;iBACtB,CAAC,CAAC;gBACH,aAAa,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAEnE,SAAS,CAAC,WAAW,CAAC;oBAClB,MAAM;oBACN,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;iBACnC,CAAC,CAAC;gBAEH,MAAM,CAAC,KAAK,CACR,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,SAAS,EAAE,KAAK,EAAE,EACxD,aAAa,CAChB,CAAC;gBACF,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;gBAE3E,gCAAgC;gBAChC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YAC/E,CAAC;YAED,MAAM,KAAK,CAAC;QAChB,CAAC;gBAAS,CAAC;YACP,uEAAuE;YACvE,yEAAyE;YACzE,yEAAyE;YACzE,oCAAoC;YACpC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACjB,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;oBACzC,IAAI,CAAC;wBACD,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBAClC,CAAC;oBAAC,MAAM,CAAC;wBACL,uCAAuC;oBAC3C,CAAC;gBACL,CAAC;YACL,CAAC;YACD,2CAA2C;YAC3C,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC1B,SAAS,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;CACJ"}

package/src/engine/policy.d.ts

@@ -1,66 +0,0 @@
-import type { ExecutionContext } from "../validation/index.js";
-/** Minimal PolicyTemplate shape consumed from @adhd/agent-policy. */
-export interface AgentPolicyTemplateRule {
-    /** Policy type slug — "rate" | "permission" (others are ignored here). */
-    type: string;
-    /** Structured rule parameters deserialized from the JSON column. */
-    rules: Record<string, unknown>;
-}
-export interface PolicyConfig {
-    /** Absolute maximum recursion depth. Agent definitions cannot exceed this. */
-    serverMaxDepth: number;
-    /** Absolute maximum tool call loops per task. Agent definitions cannot exceed this. */
-    serverMaxToolLoops: number;
-    /**
-     * Server-level allowed agents allowlist.
-     * - undefined → unrestricted (any agent may be called)
-     * - string[]  → only agents in this list may be called
-     * Per-agent allowedAgents takes full precedence over this when defined.
-     */
-    serverAllowedAgents?: string[];
-    /**
-     * Agent-policy template rules resolved for the current agent.
-     *
-     * When present, PolicyEngine reads rate/permission limits from these
-     * templates and falls back to the serverMax* defaults only when no
-     * matching template rule supplies the limit. Consuming the @adhd/agent-policy
-     * template SHAPE here keeps policy semantics in one place.
-     *
-     * Pass the output of `AgentPolicyStore.resolveForAgent(agentSlug)` merged
-     * with `PolicyTemplateStore.read(policySlug)` to supply template rules.
-     */
-    policyTemplateRules?: AgentPolicyTemplateRule[];
-}
-export interface PolicyCheckInput {
-    executionContext: ExecutionContext;
-    /**
-     * The fully-qualified tool name being invoked: "<server>__<tool>".
-     * The allowedAgents check only applies when this is "agent-mcp__agent".
-     */
-    targetTool: string;
-    /**
-     * When targetTool === "agent-mcp__agent", the name of the target agent.
-     * Used for the allowedAgents check (#3).
-     */
-    targetAgentName?: string;
-}
-/**
- * PolicyEngine enforces the three SPEC §9 safety invariants:
- *
- *  1. Recursion depth limit
- *  2. Tool call loop limit
- *  3. AllowedAgents list (per-agent override takes full precedence over server default)
- *
- * Limits are resolved in priority order:
- *   1. Per-agent agentDefinition fields (highest — always wins)
- *   2. @adhd/agent-policy template rules (when policyTemplateRules is supplied)
- *   3. PolicyConfig server defaults (hardcoded fallback)
- *
- * Throws ToolError on any violation. Does not mutate state.
- */
-export declare class PolicyEngine {
-    private readonly config;
-    constructor(config: PolicyConfig);
-    check(input: PolicyCheckInput): void;
-}
-//# sourceMappingURL=policy.d.ts.map

package/src/engine/policy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../../../../packages/ai/agent-mcp/src/engine/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAqB/D,qEAAqE;AACrE,MAAM,WAAW,uBAAuB;IACpC,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IACzB,8EAA8E;IAC9E,cAAc,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,EAAE,uBAAuB,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,gBAAgB;IAC7B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC5B;AAyCD;;;;;;;;;;;;;GAaG;AACH,qBAAa,YAAY;IACT,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,YAAY;IAEjD,KAAK,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;CA2EvC"}