@agimon-ai/po-core 0.0.0-alpha.0

package/dist/src/server/sessionMcpHandler.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionMcpHandler.cjs","names":["isDeepStrictEqual","SessionMcpConversationError","ProtocolError","ProtocolErrorCode","Server","sessionMcpConversationDigest","randomUUID","isDoomHeadlessToolBusyError","createMcpHandler"],"sources":["../../../src/server/sessionMcpHandler.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport { isDeepStrictEqual } from 'node:util';\n\nimport {\n  createMcpHandler,\n  ProtocolError,\n  ProtocolErrorCode,\n  Server,\n  type CallToolResult,\n  type Tool,\n} from '@modelcontextprotocol/server';\n\nimport { isDoomHeadlessToolBusyError } from '../schemas/headless';\nimport type { SessionMcpInvocation } from '../schemas/sessionMcpActivity';\nimport type { SessionMcpAccessGrant, SessionMcpAuthorizationService } from '../services/sessionMcpAuthorization';\nimport { sessionMcpConversationDigest, SessionMcpConversationError } from '../services/sessionMcpConversations';\nimport type { SessionToolDescriptor, SessionToolSurface } from '../types/server/sessionToolSurface';\n\n/** Stable transport tools stay available when a conversation changes its MCP composition. */\nexport const SESSION_MCP_EXTRA_TOOLS: readonly Tool[] = [\n  {\n    name: 'load_extra_tools',\n    title: 'Load extra tools',\n    description:\n      'List Po tools and skills added or changed in this conversation after your tool list loaded, for example after a mode change. Takes {}. Empty means nothing was added or changed. Run a returned tool with use_extra_tools.',\n    inputSchema: { type: 'object', properties: {}, additionalProperties: false },\n    annotations: { readOnlyHint: true },\n    _meta: { ui: { visibility: ['model'] } },\n  },\n  {\n    name: 'use_extra_tools',\n    title: 'Use extra tools',\n    description:\n      \"Run a Po tool returned by load_extra_tools, in the session's host repository. Pass { name, arguments }. Check isError in the result.\",\n    inputSchema: {\n      type: 'object',\n      properties: {\n        name: { type: 'string', description: 'Exact name returned by load_extra_tools, including any prefix.' },\n        arguments: {\n          type: 'object',\n          description: \"Arguments object matching that tool's input schema. Defaults to {}.\",\n        },\n      },\n      required: ['name'],\n      additionalProperties: false,\n    },\n    _meta: { ui: { visibility: ['model'] } },\n  },\n  {\n    name: 'session_capabilities',\n    title: 'Session capabilities',\n    description:\n      'List every Po tool and skill this connection is granted now, with input schemas. Takes {}. This is an inventory and does not add tools to your tool list. Call it once when a tool seems missing or the session mode changed.',\n    inputSchema: { type: 'object', properties: {}, additionalProperties: false },\n    annotations: { readOnlyHint: true },\n    _meta: { ui: { visibility: ['model'] } },\n  },\n];\n\nexport interface SessionMcpBaseline {\n  readonly tools: readonly Tool[];\n  readonly skills: readonly { name: string; description: string }[];\n}\n\nfunction presentationMeta(meta: Tool['_meta'], presentation: 'pure' | 'app'): Tool['_meta'] {\n  if (presentation === 'app' || meta === undefined) return meta;\n  return Object.fromEntries(\n    Object.entries(meta)\n      .filter(([key]) => (key !== 'ui' && !key.startsWith('openai/')) || key === 'openai/fileParams')\n      .filter(([key]) => key !== 'po/widget' && key !== 'po/toolName'),\n  );\n}\n\nfunction publicTool(tool: SessionToolDescriptor): Tool {\n  return {\n    name: tool.name,\n    title: tool.label,\n    description: tool.description,\n    inputSchema: tool.parameters as Tool['inputSchema'],\n    ...(tool.annotations === undefined ? {} : { annotations: tool.annotations }),\n    ...(tool.outputSchema === undefined ? {} : { outputSchema: tool.outputSchema }),\n    _meta: {\n      ...tool._meta,\n      ui: { ...tool._meta?.ui, visibility: tool._meta?.ui?.visibility ?? ['model'] },\n    },\n  };\n}\n\nfunction grantedExtraTools(grant: SessionMcpAccessGrant): readonly Tool[] {\n  return grant.scope === 'session'\n    ? SESSION_MCP_EXTRA_TOOLS\n    : SESSION_MCP_EXTRA_TOOLS.filter((tool) => grant.tools.includes(tool.name));\n}\n\nfunction extraTools(\n  baseline: SessionMcpBaseline,\n  tools: readonly SessionToolDescriptor[],\n  presentTool: (tool: Tool) => Tool,\n): Tool[] {\n  return tools\n    .map(publicTool)\n    .map(presentTool)\n    .filter(\n      (tool) =>\n        !SESSION_MCP_EXTRA_TOOLS.some((wrapper) => wrapper.name === tool.name) &&\n        !isDeepStrictEqual(\n          baseline.tools.find((original) => original.name === tool.name),\n          tool,\n        ),\n    );\n}\n\n/** Remote agents see `${prefix}_${name}`; grants, baselines, and history keep internal names. */\nexport function sessionMcpWireName(prefix: string | undefined, name: string): string {\n  return prefix === undefined ? name : `${prefix}_${name}`;\n}\n\n/** Strips the prefix exactly once. A bare name on a prefixed connection maps to nothing. */\nexport function sessionMcpInternalName(prefix: string | undefined, wire: string): string | undefined {\n  if (prefix === undefined) return wire;\n  const head = `${prefix}_`;\n  return wire.startsWith(head) && wire.length > head.length ? wire.slice(head.length) : undefined;\n}\n\nfunction wireTool(prefix: string | undefined, tool: Tool): Tool {\n  return prefix === undefined ? tool : { ...tool, name: sessionMcpWireName(prefix, tool.name) };\n}\n\n/** Kept at or under 512 characters with a 24-character prefix. */\nfunction sessionMcpInstructions(prefix: string | undefined): string {\n  return (\n    (prefix === undefined ? '' : `Tool names here start with '${prefix}_'. `) +\n    'Use only this Po session; tools run in its host repository, not locally. ' +\n    'Call load_context first and after selection changes. session_capabilities lists granted tools; ' +\n    'load_extra_tools lists additions or changes, run with use_extra_tools; load_skill loads guidance. ' +\n    'Inspect before editing; follow repository checks. Assume no UI, downloads, or notifications. ' +\n    'Read saved logs, do not relaunch work. Saving a plan does not authorize implementation.'\n  );\n}\n\nfunction toolArguments(\n  name: string,\n  value: unknown,\n  wire: (name: string) => string,\n): { name?: string; arguments?: Record<string, unknown> } {\n  const invalid = (problem: string): SessionMcpConversationError =>\n    new SessionMcpConversationError('TOOL_ARGUMENTS_INVALID', `Invalid arguments for '${wire(name)}': ${problem}`);\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) throw invalid('pass a JSON object.');\n  const args = value as Record<string, unknown>;\n  const keys = Object.keys(args);\n  if (name !== 'use_extra_tools') {\n    if (keys.length !== 0) throw invalid(`it takes no arguments. Remove: ${keys.join(', ')}. Call it with {}.`);\n    return args;\n  }\n  const unexpected = keys.filter((key) => key !== 'name' && key !== 'arguments');\n  if (unexpected.length !== 0)\n    throw invalid(`unexpected keys: ${unexpected.join(', ')}. Pass { \"name\": string, \"arguments\"?: object }.`);\n  if (typeof args.name !== 'string' || args.name.trim() === '')\n    throw invalid(`\"name\" must be a tool name returned by ${wire('load_extra_tools')}.`);\n  if (\n    args.arguments !== undefined &&\n    (typeof args.arguments !== 'object' || args.arguments === null || Array.isArray(args.arguments))\n  )\n    throw invalid('\"arguments\" must be an object.');\n  return args as { name?: string; arguments?: Record<string, unknown> };\n}\nexport interface SessionMcpTarget {\n  readonly generation: number;\n  readonly sessionId?: string;\n  readonly toolSurface: SessionToolSurface;\n  /** Reports whether the session's local agent is blocked from starting turns. */\n  readonly agentLocked?: () => boolean;\n}\n\nconst LOCAL_AGENT_UNLOCKED_NOTICE =\n  'The Po user unlocked the local agent in this session, so it may also act here. Check state before you edit.';\n\nexport interface SessionMcpHttpHandlerOptions {\n  /** Exact HTTPS resource indicator minted into access grants. */\n  readonly audience: string;\n  readonly presentation?: 'pure' | 'app';\n  readonly authorization: Pick<SessionMcpAuthorizationService, 'authenticateAccessToken' | 'authenticateUrlToken'>;\n  readonly onVerified?: (grant: SessionMcpAccessGrant) => void | Promise<void>;\n  readonly resourceMetadataUrl?: string;\n  /** Signed JWT carried as the final URL path segment instead of an Authorization header. */\n  readonly pathToken?: string;\n  readonly baselines?: Map<string, SessionMcpBaseline>;\n  /** Shared only by signed-URL requests in one live session incarnation. */\n  readonly operations?: SessionMcpOperationRegistry;\n  readonly resolveSession: (sessionId: string) => SessionMcpTarget | undefined | Promise<SessionMcpTarget | undefined>;\n  readonly resolveConversation?: (\n    grant: SessionMcpAccessGrant,\n    digest: string,\n    reserve: boolean,\n    signal?: AbortSignal,\n  ) => SessionMcpTarget | Promise<SessionMcpTarget>;\n  /** Only bounded, non-reversible correlation values are reported here. */\n  readonly onNotice?: (message: string) => void;\n  /** Host-only call history, separate from MCP notices and the agent transcript. */\n  readonly onInvocation?: (invocation: SessionMcpInvocation) => void;\n  readonly serverName?: string;\n  readonly serverVersion?: string;\n}\n\nexport type SessionMcpOperationRegistry = Map<\n  string,\n  { controller: AbortController; owner: string; conversation?: string }\n>;\n\nexport type SessionMcpHttpHandler = (request: Request) => Promise<Response>;\n\nfunction jsonError(status: number, message: string, authenticate = false, resourceMetadataUrl?: string): Response {\n  return Response.json(\n    { jsonrpc: '2.0', error: { code: -32_000, message }, id: null },\n    {\n      status,\n      headers: {\n        'cache-control': 'no-store',\n        ...(authenticate\n          ? {\n              'www-authenticate':\n                resourceMetadataUrl === undefined ? 'Bearer' : `Bearer resource_metadata=\"${resourceMetadataUrl}\"`,\n            }\n          : {}),\n      },\n    },\n  );\n}\n\nfunction bearerToken(request: Request): string | undefined {\n  const authorization = request.headers.get('authorization');\n  const match = authorization === null ? undefined : /^Bearer ([A-Za-z0-9_-]+)$/iu.exec(authorization);\n  return match?.[1];\n}\n\nfunction currentUrl(request: Request): string | undefined {\n  try {\n    const url = new URL(request.url);\n    return url.search === '' && url.hash === '' ? url.href : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction grantedSurface(grant: SessionMcpAccessGrant, surface: SessionToolSurface) {\n  const snapshot = surface.readSurface();\n  if (snapshot.tools.some((tool) => SESSION_MCP_EXTRA_TOOLS.some((wrapper) => wrapper.name === tool.name)))\n    throw new ProtocolError(\n      ProtocolErrorCode.InvalidRequest,\n      'A session tool conflicts with a reserved remote tool name.',\n    );\n  const toolNames = new Set(grant.tools);\n  const skillNames = new Set(grant.skills);\n  const tools = grant.scope === 'session' ? snapshot.tools : snapshot.tools.filter((tool) => toolNames.has(tool.name));\n  const resourceUris = new Set(tools.map((tool) => tool._meta?.ui?.resourceUri));\n  return {\n    snapshot,\n    tools,\n    skills: grant.scope === 'session' ? snapshot.skills : snapshot.skills.filter((skill) => skillNames.has(skill.name)),\n    uiResources: (snapshot.uiResources ?? []).filter((resource) => resourceUris.has(resource.uri)),\n  };\n}\n\n/** Identity is supplied by the approved tool descriptor, never by upstream result metadata. */\nfunction widgetResult(\n  tool: SessionToolDescriptor | undefined,\n  result: CallToolResult,\n  prefix: string | undefined,\n): CallToolResult {\n  const widget = tool?._meta?.['po/widget'];\n  return typeof widget !== 'string'\n    ? result\n    : {\n        ...result,\n        // The host compares this with the tool name it called, which is the remote name.\n        _meta: { ...result._meta, 'po/widget': widget, 'po/toolName': sessionMcpWireName(prefix, tool!.name) },\n      };\n}\n\n/** Creates a stateless Streamable HTTP MCP request handler for session capabilities. */\nexport function createSessionMcpHttpHandler(options: SessionMcpHttpHandlerOptions): SessionMcpHttpHandler {\n  const audience = new URL(options.audience);\n  if (\n    audience.protocol !== 'https:' ||\n    audience.username !== '' ||\n    audience.password !== '' ||\n    audience.search !== '' ||\n    audience.hash !== ''\n  ) {\n    throw new Error('Session MCP audience must be an absolute HTTPS URL without credentials, a query, or a fragment.');\n  }\n  const exactAudience = audience.href;\n  if (options.pathToken !== undefined && !/^[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+$/u.test(options.pathToken)) {\n    throw new Error('Session MCP path token must be a compact JWT.');\n  }\n  const presentation = options.presentation ?? 'pure';\n  const resourceAudience = presentation === 'app' ? exactAudience.replace(/\\/mcp$/u, '/mcp-app') : exactAudience;\n  const presentTool = (tool: Tool): Tool => ({ ...tool, _meta: presentationMeta(tool._meta, presentation) });\n  const baselineKey = (clientId: string): string => JSON.stringify([presentation, clientId]);\n  const exactResource = options.pathToken === undefined ? resourceAudience : `${resourceAudience}/${options.pathToken}`;\n  const authenticate =\n    options.pathToken === undefined\n      ? options.authorization.authenticateAccessToken\n      : options.authorization.authenticateUrlToken;\n  const operations: SessionMcpOperationRegistry = options.operations ?? new Map();\n  const baselines = options.baselines ?? new Map<string, SessionMcpBaseline>();\n  const operationOwner = (grant: SessionMcpAccessGrant, requestId: string | number): string =>\n    JSON.stringify([grant.clientId, grant.sessionId, grant.sessionGeneration, grant.id, requestId]);\n\n  return async (request) => {\n    if (currentUrl(request) !== exactResource) return jsonError(404, 'MCP resource not found.');\n    const token = options.pathToken ?? bearerToken(request);\n    if (token === undefined)\n      return jsonError(401, 'A Bearer access token is required.', true, options.resourceMetadataUrl);\n    const grant = authenticate(token, exactAudience);\n    if (grant === undefined)\n      return options.pathToken === undefined\n        ? jsonError(401, 'The Bearer access token is invalid or expired.', true, options.resourceMetadataUrl)\n        : jsonError(401, 'The signed MCP URL is invalid or revoked.');\n    // Bindings are immutable, so the prefix cannot change for the lifetime of this grant.\n    const prefix = grant.toolPrefix;\n    const wire = (name: string): string => sessionMcpWireName(prefix, name);\n    /** Names a wrapper as the next call only when this grant can use it. */\n    const nextCall = (tool: string, text: string): string =>\n      grantedExtraTools(grant).some((wrapper) => wrapper.name === tool) ? ` Call ${wire(tool)}${text}` : '';\n    const surfaceChanged = (): SessionMcpConversationError =>\n      new SessionMcpConversationError(\n        'SESSION_TOOL_SURFACE_CHANGED',\n        `The session tools changed before this call ran.${nextCall('session_capabilities', ', then retry.')}`,\n      );\n    const authorizeOperation = async (): Promise<{\n      grant: SessionMcpAccessGrant;\n      target: SessionMcpTarget;\n    }> => {\n      const activeGrant = authenticate(token, exactAudience);\n      if (activeGrant === undefined || activeGrant.id !== grant.id) {\n        throw new ProtocolError(ProtocolErrorCode.InvalidRequest, 'The session grant is no longer active.');\n      }\n      const target = await options.resolveSession(activeGrant.sessionId);\n      const recheckedGrant = authenticate(token, exactAudience);\n      if (\n        recheckedGrant === undefined ||\n        recheckedGrant.id !== activeGrant.id ||\n        target === undefined ||\n        target.generation !== recheckedGrant.sessionGeneration\n      ) {\n        throw new ProtocolError(ProtocolErrorCode.InvalidRequest, 'The session grant is no longer active.');\n      }\n      return { grant: recheckedGrant, target };\n    };\n    try {\n      await authorizeOperation();\n    } catch {\n      return options.pathToken === undefined\n        ? jsonError(401, 'The session grant is no longer active.', true, options.resourceMetadataUrl)\n        : jsonError(401, 'The signed MCP URL is invalid or revoked.');\n    }\n\n    const server = new Server(\n      { name: options.serverName ?? 'po-session', version: options.serverVersion ?? '1.0.0' },\n      {\n        capabilities: { tools: {}, resources: {} },\n        instructions: sessionMcpInstructions(prefix),\n      },\n    );\n    server.setNotificationHandler('notifications/cancelled', async (notification) => {\n      const active = await authorizeOperation();\n      if (notification.params.requestId === undefined) return;\n      const owner = operationOwner(active.grant, notification.params.requestId);\n      const conversation = sessionMcpConversationDigest(notification.params._meta);\n      // A notification without a conversation identity cannot safely cancel one\n      // of several child runtimes that may reuse its request ID.\n      if (conversation === undefined) return;\n      const candidates = [...operations.values()].filter(\n        (operation) => operation.owner === owner && operation.conversation === conversation,\n      );\n      if (candidates.length === 1) candidates[0]!.controller.abort();\n    });\n    server.setRequestHandler('tools/list', async () => {\n      const active = await authorizeOperation();\n      await options.onVerified?.(active.grant);\n      const { tools, skills } = grantedSurface(active.grant, active.target.toolSurface);\n      const parentTools = tools.map(publicTool).map(presentTool);\n      const wrappers = grantedExtraTools(active.grant);\n      const baseline = structuredClone({\n        tools: parentTools,\n        skills: skills.map(({ name, description }) => ({ name, description })),\n      });\n      await authorizeOperation();\n      baselines.set(baselineKey(active.grant.clientId), baseline);\n      return { tools: [...parentTools, ...wrappers].map((tool) => wireTool(prefix, presentTool(tool))) };\n    });\n    server.setRequestHandler('tools/call', async (message, ctx): Promise<CallToolResult> => {\n      const conversation = sessionMcpConversationDigest(\n        ctx.mcpReq._meta ?? (message.params as { _meta?: unknown })._meta,\n      );\n      const owner = operationOwner(grant, ctx.mcpReq.id);\n      const key = JSON.stringify([owner, conversation]);\n      if (operations.has(key))\n        throw new ProtocolError(\n          ProtocolErrorCode.InvalidRequest,\n          'A tool call with this request identity is already active.',\n        );\n      if (options.operations !== undefined && operations.size >= 1024)\n        throw new ProtocolError(ProtocolErrorCode.InvalidRequest, 'Too many active MCP tool calls. Retry later.');\n      const controller = new AbortController();\n      operations.set(key, { controller, owner, conversation });\n      const signal = AbortSignal.any([request.signal, ctx.mcpReq.signal, controller.signal]);\n      const invocationId = randomUUID();\n      let skillAccessOpen = true;\n      let widgetTool: SessionToolDescriptor | undefined;\n      let invocation: SessionMcpInvocation | undefined;\n      let fileTransfer = false;\n      const publishInvocation = (): void => {\n        if (invocation?.sessionId === undefined) return;\n        try {\n          options.onInvocation?.(\n            fileTransfer\n              ? {\n                  ...invocation,\n                  input: { redacted: 'file transfer' },\n                  ...(invocation.output === undefined ? {} : { output: { redacted: 'file transfer' } }),\n                }\n              : { ...invocation },\n          );\n        } catch {\n          // Observability failures must not turn an already executed tool into a retryable failure.\n          options.onNotice?.('session MCP call history could not be saved');\n        }\n      };\n      const completeInvocation = (result: CallToolResult): CallToolResult => {\n        if (invocation !== undefined) {\n          invocation = {\n            ...invocation,\n            status: signal.aborted ? 'cancelled' : result.isError ? 'failed' : 'succeeded',\n            finishedAt: Date.now(),\n            output: result.structuredContent ?? result.content,\n          };\n          publishInvocation();\n        }\n        return { ...result, _meta: presentationMeta(result._meta, presentation) };\n      };\n      try {\n        const parent = await authorizeOperation();\n        const requested = sessionMcpInternalName(prefix, message.params.name);\n        invocation = {\n          id: invocationId,\n          parentSessionId: parent.grant.sessionId,\n          clientId: parent.grant.clientId,\n          conversationDigest: conversation,\n          toolName: requested ?? message.params.name,\n          startedAt: Date.now(),\n          status: 'running',\n          input: { redacted: 'pending tool authorization' },\n        };\n        const wrapper = grantedExtraTools(parent.grant).some((tool) => tool.name === requested);\n        const advertised = wrapper\n          ? undefined\n          : grantedSurface(parent.grant, parent.target.toolSurface).tools.find((tool) => tool.name === requested);\n        if (!wrapper && !advertised)\n          throw new SessionMcpConversationError(\n            'TOOL_NOT_AVAILABLE',\n            `Tool '${message.params.name}' is not available on this connection.` +\n              (prefix === undefined ? '' : ` Tool names here start with '${prefix}_'.`) +\n              nextCall('session_capabilities', ' for the current list.'),\n          );\n        const transferName =\n          requested === 'use_extra_tools' && typeof message.params.arguments?.name === 'string'\n            ? sessionMcpInternalName(prefix, message.params.arguments.name)\n            : requested;\n        fileTransfer = grantedSurface(parent.grant, parent.target.toolSurface).tools.some(\n          (tool) => tool.name === transferName && tool._meta?.['doompi/fileTransfer'] === true,\n        );\n        publishInvocation();\n        widgetTool = advertised;\n        const wrapperArgs = wrapper ? toolArguments(requested!, message.params.arguments ?? {}, wire) : undefined;\n        // A binding must not outlive an unpersisted registration when tools/call precedes tools/list.\n        await options.onVerified?.(parent.grant);\n        options.onNotice?.(`session MCP invocation id=${invocationId} lifecycle=started`);\n        const resolveTarget = async (reserve: boolean) => {\n          const active = await authorizeOperation();\n          if (!conversation)\n            throw new SessionMcpConversationError(\n              'CONVERSATION_ID_REQUIRED',\n              'This connection requires conversation metadata. Use a compatible ChatGPT conversation and retry.',\n            );\n          if (!options.resolveConversation)\n            throw new SessionMcpConversationError(\n              'CONVERSATION_ROUTING_UNAVAILABLE',\n              'Conversation routing is unavailable in this host.',\n            );\n          signal.throwIfAborted();\n          const target = await options.resolveConversation(active.grant, conversation, reserve, signal);\n          await authorizeOperation();\n          signal.throwIfAborted();\n          return { grant: active.grant, target };\n        };\n        if (wrapper && !conversation)\n          throw new SessionMcpConversationError(\n            'CONVERSATION_ID_REQUIRED',\n            'This connection requires conversation metadata. Use a compatible ChatGPT conversation and retry.',\n          );\n        if (\n          (requested === 'load_extra_tools' || requested === 'use_extra_tools') &&\n          !baselines.has(baselineKey(parent.grant.clientId))\n        )\n          throw new SessionMcpConversationError(\n            'SESSION_MCP_BASELINE_REQUIRED',\n            'Refresh this MCP connection tool catalog before loading or using extra tools.',\n          );\n        const active = await resolveTarget(true);\n        invocation = { ...invocation, sessionId: active.target.sessionId ?? parent.grant.sessionId };\n        publishInvocation();\n        const { snapshot, tools, skills } = grantedSurface(active.grant, active.target.toolSurface);\n        const baseline = baselines.get(baselineKey(parent.grant.clientId));\n        const extras = wrapper && baseline ? extraTools(baseline, tools, presentTool) : [];\n        if (requested === 'session_capabilities' && wrapper) {\n          const capabilities = {\n            sessionId: active.target.sessionId ?? parent.grant.sessionId,\n            generation: active.target.generation,\n            revision: snapshot.revision,\n            baseline: baseline === undefined ? 'missing' : 'available',\n            inventory: 'active_surface',\n            discovery: 'unknown',\n            tools: [...tools.map(publicTool).map(presentTool), ...grantedExtraTools(active.grant)].map((tool) =>\n              wireTool(prefix, presentTool(tool)),\n            ),\n            skills: skills.map(({ name, description }) => ({ name, description })),\n            ...(active.target.agentLocked === undefined\n              ? {}\n              : { localAgent: active.target.agentLocked() ? 'locked' : 'unlocked' }),\n          };\n          const current = await resolveTarget(false);\n          if (\n            current.target.toolSurface !== active.target.toolSurface ||\n            current.target.generation !== active.target.generation ||\n            current.target.sessionId !== active.target.sessionId ||\n            current.target.toolSurface.readSurface().revision !== snapshot.revision\n          )\n            throw surfaceChanged();\n          options.onNotice?.(`session MCP invocation id=${invocationId} lifecycle=succeeded`);\n          return completeInvocation({\n            content: [{ type: 'text', text: JSON.stringify(capabilities) }],\n            structuredContent: capabilities,\n            isError: false,\n          });\n        }\n        if (requested === 'load_extra_tools' && wrapper) {\n          const discovery = {\n            tools: extras.map((tool) => wireTool(prefix, presentTool(tool))),\n            skills: (tools.some((tool) => tool.name === 'load_skill') ? skills : [])\n              .map(({ name, description }) => ({ name, description }))\n              .filter(\n                (skill) =>\n                  !isDeepStrictEqual(\n                    baseline!.skills.find((original) => original.name === skill.name),\n                    skill,\n                  ),\n              ),\n          };\n          const current = await resolveTarget(false);\n          if (\n            current.target.toolSurface !== active.target.toolSurface ||\n            current.target.generation !== active.target.generation ||\n            current.target.sessionId !== active.target.sessionId ||\n            current.target.toolSurface.readSurface().revision !== snapshot.revision\n          )\n            throw surfaceChanged();\n          options.onNotice?.(`session MCP invocation id=${invocationId} lifecycle=succeeded`);\n          return completeInvocation({\n            content: [{ type: 'text', text: JSON.stringify(discovery) }],\n            structuredContent: discovery,\n            isError: false,\n          });\n        }\n        const name = wrapper ? sessionMcpInternalName(prefix, wrapperArgs!.name!) : requested;\n        const selected = tools.find((tool) => tool.name === name);\n        if (name === undefined || (wrapper && (!extras.some((tool) => tool.name === name) || !selected)))\n          throw new SessionMcpConversationError(\n            'TOOL_NOT_AVAILABLE',\n            `Extra tool '${wrapperArgs?.name ?? message.params.name}' is not available.` +\n              nextCall('load_extra_tools', ' and pass a name it returns.'),\n          );\n        if (\n          !wrapper &&\n          (!selected ||\n            !isDeepStrictEqual(selected.parameters, advertised!.parameters) ||\n            !isDeepStrictEqual(selected.outputSchema, advertised!.outputSchema) ||\n            !isDeepStrictEqual(selected.annotations, advertised!.annotations) ||\n            !isDeepStrictEqual(selected._meta, advertised!._meta))\n        )\n          throw new SessionMcpConversationError(\n            'SESSION_TOOL_SURFACE_CHANGED',\n            `This tool changed or was removed after your tool list loaded.${nextCall(\n              'load_extra_tools',\n              grantedExtraTools(grant).some((tool) => tool.name === 'use_extra_tools')\n                ? ', and if it lists the tool, run it with ' + wire('use_extra_tools') + '.'\n                : ', then refresh the connection to call a returned tool.',\n            )}`,\n          );\n        fileTransfer ||= selected?._meta?.['doompi/fileTransfer'] === true;\n        widgetTool = wrapper ? undefined : selected;\n        const recheck = async () => {\n          const current = await resolveTarget(false);\n          if (\n            current.target.toolSurface !== active.target.toolSurface ||\n            current.target.generation !== active.target.generation ||\n            current.target.sessionId !== active.target.sessionId\n          )\n            throw surfaceChanged();\n          if (wrapper) {\n            if (!grantedExtraTools(current.grant).some((tool) => tool.name === requested)) throw surfaceChanged();\n          } else {\n            const currentAdvertised = grantedSurface(current.grant, parent.target.toolSurface).tools.find(\n              (tool) => tool.name === requested,\n            );\n            if (!currentAdvertised || !isDeepStrictEqual(currentAdvertised, advertised)) throw surfaceChanged();\n          }\n          return current;\n        };\n        const authorizedSkills = async () => {\n          if (!skillAccessOpen)\n            throw new ProtocolError(ProtocolErrorCode.InvalidRequest, 'Remote skill access is no longer active.');\n          signal.throwIfAborted();\n          const current = await recheck();\n          signal.throwIfAborted();\n          return grantedSurface(current.grant, current.target.toolSurface);\n        };\n        const mcpSkills = {\n          async list() {\n            const { skills } = await authorizedSkills();\n            return skills.map(({ name, description }) => ({ name, description }));\n          },\n          async read(name: string) {\n            const current = await authorizedSkills();\n            const skill = current.skills.find((candidate) => candidate.name === name);\n            if (!skill)\n              throw new ProtocolError(\n                ProtocolErrorCode.InvalidParams,\n                `Skill '${name}' is not granted or active on this connection.${nextCall('session_capabilities', ' to see available skills.')} Continue without it if unavailable.`,\n              );\n            const text = await active.target.toolSurface.readSkill(current.snapshot.revision, skill.uri);\n            signal.throwIfAborted();\n            const after = await authorizedSkills();\n            if (after.snapshot.revision !== current.snapshot.revision) throw surfaceChanged();\n            return text;\n          },\n        };\n        invocation = {\n          ...invocation,\n          toolName: name,\n          input: wrapper ? (wrapperArgs!.arguments ?? {}) : (message.params.arguments ?? {}),\n        };\n        publishInvocation();\n        let result: Awaited<ReturnType<SessionToolSurface['invokeTool']>>;\n        try {\n          result = await active.target.toolSurface.invokeTool({\n            revision: snapshot.revision,\n            name,\n            arguments: wrapper ? (wrapperArgs!.arguments ?? {}) : (message.params.arguments ?? {}),\n            signal,\n            mcpSkills,\n            authorize: async () => {\n              const current = await recheck();\n              if (wrapper) {\n                const currentTool = grantedSurface(current.grant, current.target.toolSurface).tools.find(\n                  (tool) => tool.name === name,\n                );\n                if (!currentTool || !isDeepStrictEqual(currentTool, selected)) throw surfaceChanged();\n              }\n            },\n          });\n        } catch (error) {\n          if (signal.aborted || error instanceof ProtocolError || error instanceof SessionMcpConversationError)\n            throw error;\n          if (isDoomHeadlessToolBusyError(error))\n            throw new SessionMcpConversationError(\n              'SESSION_BUSY',\n              `The session stayed busy for 30 seconds, so ${wire(name)} did not start. Wait for the current turn to finish, then retry once.`,\n            );\n          // After-hooks can fail once execution finished, so never claim the call did not run.\n          throw new SessionMcpConversationError(\n            'TOOL_CALL_FAILED',\n            `${wire(name)} did not return a result: ${error instanceof Error ? error.message : 'unknown error'}. ` +\n              'If the tool changes files or state, inspect before retrying.',\n          );\n        }\n        try {\n          await recheck();\n        } catch (error) {\n          if (!(error instanceof SessionMcpConversationError)) throw error;\n          throw new SessionMcpConversationError(\n            'SESSION_RESULT_WITHHELD',\n            'The call may have run, but its result was withheld because the session tools or grants changed. ' +\n              'Inspect state before retrying.',\n          );\n        }\n        options.onNotice?.(`session MCP invocation id=${invocationId} lifecycle=succeeded`);\n        const content =\n          result.content.length === 0 && result.structuredContent !== undefined\n            ? [{ type: 'text' as const, text: JSON.stringify(result.structuredContent) }]\n            : result.content;\n        return completeInvocation(\n          widgetResult(\n            wrapper ? undefined : selected,\n            {\n              content:\n                active.target.agentLocked?.() === false\n                  ? [...content, { type: 'text', text: LOCAL_AGENT_UNLOCKED_NOTICE }]\n                  : content,\n              ...(result.structuredContent === undefined ? {} : { structuredContent: result.structuredContent }),\n              ...(result._meta === undefined ? {} : { _meta: result._meta }),\n              isError: result.isError ?? false,\n            },\n            prefix,\n          ),\n        );\n      } catch (error) {\n        // The cause is logged because the client may drop the answer, for example on a timeout\n        // during a first call that provisions a worktree, and then nothing else records why. Only a\n        // class or code: a message can carry tool arguments, which notices never do.\n        const cause =\n          error instanceof SessionMcpConversationError\n            ? error.code\n            : signal.aborted\n              ? 'aborted'\n              : error instanceof ProtocolError\n                ? `mcp_${String(error.code)}`\n                : error instanceof Error\n                  ? error.name\n                  : 'unknown';\n        options.onNotice?.(`session MCP invocation id=${invocationId} lifecycle=failed cause=${cause}`);\n        if (invocation !== undefined) {\n          invocation = {\n            ...invocation,\n            status: signal.aborted ? 'cancelled' : 'failed',\n            finishedAt: Date.now(),\n            output: {\n              cause,\n              message: fileTransfer\n                ? 'File transfer failed.'\n                : error instanceof Error\n                  ? error.message\n                  : 'Tool call failed.',\n            },\n          };\n          publishInvocation();\n        }\n        if (!(error instanceof SessionMcpConversationError)) throw error;\n        const failure = widgetResult(\n          widgetTool,\n          {\n            content: [{ type: 'text', text: error.message }],\n            isError: true,\n            structuredContent: {\n              code: error.code,\n              message: error.message,\n              ...(error.bindingId === undefined ? {} : { bindingId: error.bindingId }),\n            },\n          },\n          prefix,\n        );\n        return { ...failure, _meta: presentationMeta(failure._meta, presentation) };\n      } finally {\n        skillAccessOpen = false;\n        operations.delete(key);\n      }\n    });\n    server.setRequestHandler('resources/list', async () => {\n      const active = await authorizeOperation();\n      const { uiResources } = grantedSurface(active.grant, active.target.toolSurface);\n      return {\n        resources: presentation === 'app' ? [...uiResources] : [],\n      };\n    });\n    server.setRequestHandler('resources/read', async (message, ctx) => {\n      const conversation = sessionMcpConversationDigest(\n        ctx.mcpReq._meta ?? (message.params as { _meta?: unknown })._meta,\n      );\n      const active = await authorizeOperation();\n      const { snapshot, skills, uiResources } = grantedSurface(active.grant, active.target.toolSurface);\n      const skill = skills.find((candidate) => candidate.uri === message.params.uri);\n      if (skill !== undefined) {\n        if (!conversation)\n          throw new ProtocolError(\n            ProtocolErrorCode.InvalidParams,\n            `Use ${wire('load_skill')} with conversation metadata to read target-session guidance.`,\n          );\n        if (!options.resolveConversation)\n          throw new ProtocolError(\n            ProtocolErrorCode.InvalidRequest,\n            'Conversation routing is unavailable in this host.',\n          );\n        const target = await options.resolveConversation(active.grant, conversation, false, request.signal);\n        const text = await target.toolSurface.readSkill(snapshot.revision, skill.uri);\n        await authorizeOperation();\n        return { contents: [{ uri: skill.uri, mimeType: 'text/markdown', text }] };\n      }\n      const resource = uiResources.find((candidate) => candidate.uri === message.params.uri);\n      if (presentation === 'app' && resource !== undefined && active.target.toolSurface.readUiResource !== undefined) {\n        // Templates are immutable and session-independent, so hosts may prefetch them without a conversation ID.\n        request.signal.throwIfAborted();\n        const text = await active.target.toolSurface.readUiResource(snapshot.revision, resource.uri);\n        request.signal.throwIfAborted();\n        const current = await authorizeOperation();\n        const after = grantedSurface(current.grant, current.target.toolSurface);\n        if (\n          current.target.toolSurface !== active.target.toolSurface ||\n          after.snapshot.revision !== snapshot.revision ||\n          !isDeepStrictEqual(\n            after.uiResources.find((candidate) => candidate.uri === resource.uri),\n            resource,\n          )\n        )\n          throw new ProtocolError(ProtocolErrorCode.InvalidRequest, 'The session UI resource surface has changed.');\n        return { contents: [{ ...resource, text }] };\n      }\n      if (message.params.uri.startsWith('ui:'))\n        throw new ProtocolError(ProtocolErrorCode.InvalidParams, 'UI resource is not granted or active.');\n      throw new ProtocolError(\n        ProtocolErrorCode.InvalidParams,\n        `Use ${wire('load_skill')} with conversation metadata to read target-session guidance.`,\n      );\n    });\n\n    // One server per request, as before. Only the 2026-07-28 revision is served; a 2025-era request\n    // is refused with the versions this endpoint supports.\n    const handler = createMcpHandler(() => server, { legacy: 'reject' });\n    try {\n      return await handler.fetch(request, {\n        authInfo: {\n          token,\n          clientId: grant.clientId,\n          scopes:\n            grant.scope === 'session'\n              ? ['session']\n              : [...grant.tools.map((name) => `tool:${name}`), ...grant.skills.map((name) => `skill:${name}`)],\n          expiresAt: Math.floor(grant.expiresAt / 1000),\n          resource: new URL(exactResource),\n        },\n      });\n    } catch {\n      return jsonError(500, 'Internal MCP server error.');\n    }\n  };\n}\n"],"mappings":";;;;;;;AAmBA,MAAa,0BAA2C;CACtD;EACE,MAAM;EACN,OAAO;EACP,aACE;EACF,aAAa;GAAE,MAAM;GAAU,YAAY,CAAC;GAAG,sBAAsB;EAAM;EAC3E,aAAa,EAAE,cAAc,KAAK;EAClC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,EAAE,EAAE;CACzC;CACA;EACE,MAAM;EACN,OAAO;EACP,aACE;EACF,aAAa;GACX,MAAM;GACN,YAAY;IACV,MAAM;KAAE,MAAM;KAAU,aAAa;IAAiE;IACtG,WAAW;KACT,MAAM;KACN,aAAa;IACf;GACF;GACA,UAAU,CAAC,MAAM;GACjB,sBAAsB;EACxB;EACA,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,EAAE,EAAE;CACzC;CACA;EACE,MAAM;EACN,OAAO;EACP,aACE;EACF,aAAa;GAAE,MAAM;GAAU,YAAY,CAAC;GAAG,sBAAsB;EAAM;EAC3E,aAAa,EAAE,cAAc,KAAK;EAClC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,EAAE,EAAE;CACzC;AACF;AAOA,SAAS,iBAAiB,MAAqB,cAA6C;CAC1F,IAAI,iBAAiB,SAAS,SAAS,KAAA,GAAW,OAAO;CACzD,OAAO,OAAO,YACZ,OAAO,QAAQ,IAAI,CAAC,CACjB,QAAQ,CAAC,SAAU,QAAQ,QAAQ,CAAC,IAAI,WAAW,SAAS,KAAM,QAAQ,mBAAmB,CAAC,CAC9F,QAAQ,CAAC,SAAS,QAAQ,eAAe,QAAQ,aAAa,CACnE;AACF;AAEA,SAAS,WAAW,MAAmC;CACrD,OAAO;EACL,MAAM,KAAK;EACX,OAAO,KAAK;EACZ,aAAa,KAAK;EAClB,aAAa,KAAK;EAClB,GAAI,KAAK,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,KAAK,YAAY;EAC1E,GAAI,KAAK,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,cAAc,KAAK,aAAa;EAC7E,OAAO;GACL,GAAG,KAAK;GACR,IAAI;IAAE,GAAG,KAAK,OAAO;IAAI,YAAY,KAAK,OAAO,IAAI,cAAc,CAAC,OAAO;GAAE;EAC/E;CACF;AACF;AAEA,SAAS,kBAAkB,OAA+C;CACxE,OAAO,MAAM,UAAU,YACnB,0BACA,wBAAwB,QAAQ,SAAS,MAAM,MAAM,SAAS,KAAK,IAAI,CAAC;AAC9E;AAEA,SAAS,WACP,UACA,OACA,aACQ;CACR,OAAO,MACJ,IAAI,UAAU,CAAC,CACf,IAAI,WAAW,CAAC,CAChB,QACE,SACC,CAAC,wBAAwB,MAAM,YAAY,QAAQ,SAAS,KAAK,IAAI,KACrE,EAAA,GAACA,UAAAA,kBAAAA,CACC,SAAS,MAAM,MAAM,aAAa,SAAS,SAAS,KAAK,IAAI,GAC7D,IACF,CACJ;AACJ;;AAGA,SAAgB,mBAAmB,QAA4B,MAAsB;CACnF,OAAO,WAAW,KAAA,IAAY,OAAO,GAAG,OAAO,GAAG;AACpD;;AAGA,SAAgB,uBAAuB,QAA4B,MAAkC;CACnG,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,MAAM,OAAO,GAAG,OAAO;CACvB,OAAO,KAAK,WAAW,IAAI,KAAK,KAAK,SAAS,KAAK,SAAS,KAAK,MAAM,KAAK,MAAM,IAAI,KAAA;AACxF;AAEA,SAAS,SAAS,QAA4B,MAAkB;CAC9D,OAAO,WAAW,KAAA,IAAY,OAAO;EAAE,GAAG;EAAM,MAAM,mBAAmB,QAAQ,KAAK,IAAI;CAAE;AAC9F;;AAGA,SAAS,uBAAuB,QAAoC;CAClE,QACG,WAAW,KAAA,IAAY,KAAK,+BAA+B,OAAO,SACnE;AAMJ;AAEA,SAAS,cACP,MACA,OACA,MACwD;CACxD,MAAM,WAAW,YACf,IAAIC,cAAAA,4BAA4B,0BAA0B,0BAA0B,KAAK,IAAI,EAAE,KAAK,SAAS;CAC/G,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GAAG,MAAM,QAAQ,qBAAqB;CAC5G,MAAM,OAAO;CACb,MAAM,OAAO,OAAO,KAAK,IAAI;CAC7B,IAAI,SAAS,mBAAmB;EAC9B,IAAI,KAAK,WAAW,GAAG,MAAM,QAAQ,kCAAkC,KAAK,KAAK,IAAI,EAAE,mBAAmB;EAC1G,OAAO;CACT;CACA,MAAM,aAAa,KAAK,QAAQ,QAAQ,QAAQ,UAAU,QAAQ,WAAW;CAC7E,IAAI,WAAW,WAAW,GACxB,MAAM,QAAQ,oBAAoB,WAAW,KAAK,IAAI,EAAE,iDAAiD;CAC3G,IAAI,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,MAAM,IACxD,MAAM,QAAQ,0CAA0C,KAAK,kBAAkB,EAAE,EAAE;CACrF,IACE,KAAK,cAAc,KAAA,MAClB,OAAO,KAAK,cAAc,YAAY,KAAK,cAAc,QAAQ,MAAM,QAAQ,KAAK,SAAS,IAE9F,MAAM,QAAQ,kCAAgC;CAChD,OAAO;AACT;AASA,MAAM,8BACJ;AAoCF,SAAS,UAAU,QAAgB,SAAiB,eAAe,OAAO,qBAAwC;CAChH,OAAO,SAAS,KACd;EAAE,SAAS;EAAO,OAAO;GAAE,MAAM;GAAS;EAAQ;EAAG,IAAI;CAAK,GAC9D;EACE;EACA,SAAS;GACP,iBAAiB;GACjB,GAAI,eACA,EACE,oBACE,wBAAwB,KAAA,IAAY,WAAW,6BAA6B,oBAAoB,GACpG,IACA,CAAC;EACP;CACF,CACF;AACF;AAEA,SAAS,YAAY,SAAsC;CACzD,MAAM,gBAAgB,QAAQ,QAAQ,IAAI,eAAe;CAEzD,QADc,kBAAkB,OAAO,KAAA,IAAY,8BAA8B,KAAK,aAAa,EAAA,GACpF;AACjB;AAEA,SAAS,WAAW,SAAsC;CACxD,IAAI;EACF,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;EAC/B,OAAO,IAAI,WAAW,MAAM,IAAI,SAAS,KAAK,IAAI,OAAO,KAAA;CAC3D,QAAQ;EACN;CACF;AACF;AAEA,SAAS,eAAe,OAA8B,SAA6B;CACjF,MAAM,WAAW,QAAQ,YAAY;CACrC,IAAI,SAAS,MAAM,MAAM,SAAS,wBAAwB,MAAM,YAAY,QAAQ,SAAS,KAAK,IAAI,CAAC,GACrG,MAAM,IAAIC,6BAAAA,cACRC,6BAAAA,kBAAkB,gBAClB,4DACF;CACF,MAAM,YAAY,IAAI,IAAI,MAAM,KAAK;CACrC,MAAM,aAAa,IAAI,IAAI,MAAM,MAAM;CACvC,MAAM,QAAQ,MAAM,UAAU,YAAY,SAAS,QAAQ,SAAS,MAAM,QAAQ,SAAS,UAAU,IAAI,KAAK,IAAI,CAAC;CACnH,MAAM,eAAe,IAAI,IAAI,MAAM,KAAK,SAAS,KAAK,OAAO,IAAI,WAAW,CAAC;CAC7E,OAAO;EACL;EACA;EACA,QAAQ,MAAM,UAAU,YAAY,SAAS,SAAS,SAAS,OAAO,QAAQ,UAAU,WAAW,IAAI,MAAM,IAAI,CAAC;EAClH,cAAc,SAAS,eAAe,CAAC,EAAA,CAAG,QAAQ,aAAa,aAAa,IAAI,SAAS,GAAG,CAAC;CAC/F;AACF;;AAGA,SAAS,aACP,MACA,QACA,QACgB;CAChB,MAAM,SAAS,MAAM,QAAQ;CAC7B,OAAO,OAAO,WAAW,WACrB,SACA;EACE,GAAG;EAEH,OAAO;GAAE,GAAG,OAAO;GAAO,aAAa;GAAQ,eAAe,mBAAmB,QAAQ,KAAM,IAAI;EAAE;CACvG;AACN;;AAGA,SAAgB,4BAA4B,SAA8D;CACxG,MAAM,WAAW,IAAI,IAAI,QAAQ,QAAQ;CACzC,IACE,SAAS,aAAa,YACtB,SAAS,aAAa,MACtB,SAAS,aAAa,MACtB,SAAS,WAAW,MACpB,SAAS,SAAS,IAElB,MAAM,IAAI,MAAM,iGAAiG;CAEnH,MAAM,gBAAgB,SAAS;CAC/B,IAAI,QAAQ,cAAc,KAAA,KAAa,CAAC,oDAAoD,KAAK,QAAQ,SAAS,GAChH,MAAM,IAAI,MAAM,+CAA+C;CAEjE,MAAM,eAAe,QAAQ,gBAAgB;CAC7C,MAAM,mBAAmB,iBAAiB,QAAQ,cAAc,QAAQ,WAAW,UAAU,IAAI;CACjG,MAAM,eAAe,UAAsB;EAAE,GAAG;EAAM,OAAO,iBAAiB,KAAK,OAAO,YAAY;CAAE;CACxG,MAAM,eAAe,aAA6B,KAAK,UAAU,CAAC,cAAc,QAAQ,CAAC;CACzF,MAAM,gBAAgB,QAAQ,cAAc,KAAA,IAAY,mBAAmB,GAAG,iBAAiB,GAAG,QAAQ;CAC1G,MAAM,eACJ,QAAQ,cAAc,KAAA,IAClB,QAAQ,cAAc,0BACtB,QAAQ,cAAc;CAC5B,MAAM,aAA0C,QAAQ,8BAAc,IAAI,IAAI;CAC9E,MAAM,YAAY,QAAQ,6BAAa,IAAI,IAAgC;CAC3E,MAAM,kBAAkB,OAA8B,cACpD,KAAK,UAAU;EAAC,MAAM;EAAU,MAAM;EAAW,MAAM;EAAmB,MAAM;EAAI;CAAS,CAAC;CAEhG,OAAO,OAAO,YAAY;EACxB,IAAI,WAAW,OAAO,MAAM,eAAe,OAAO,UAAU,KAAK,yBAAyB;EAC1F,MAAM,QAAQ,QAAQ,aAAa,YAAY,OAAO;EACtD,IAAI,UAAU,KAAA,GACZ,OAAO,UAAU,KAAK,sCAAsC,MAAM,QAAQ,mBAAmB;EAC/F,MAAM,QAAQ,aAAa,OAAO,aAAa;EAC/C,IAAI,UAAU,KAAA,GACZ,OAAO,QAAQ,cAAc,KAAA,IACzB,UAAU,KAAK,kDAAkD,MAAM,QAAQ,mBAAmB,IAClG,UAAU,KAAK,2CAA2C;EAEhE,MAAM,SAAS,MAAM;EACrB,MAAM,QAAQ,SAAyB,mBAAmB,QAAQ,IAAI;;EAEtE,MAAM,YAAY,MAAc,SAC9B,kBAAkB,KAAK,CAAC,CAAC,MAAM,YAAY,QAAQ,SAAS,IAAI,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS;EACrG,MAAM,uBACJ,IAAIF,cAAAA,4BACF,gCACA,kDAAkD,SAAS,wBAAwB,eAAe,GACpG;EACF,MAAM,qBAAqB,YAGrB;GACJ,MAAM,cAAc,aAAa,OAAO,aAAa;GACrD,IAAI,gBAAgB,KAAA,KAAa,YAAY,OAAO,MAAM,IACxD,MAAM,IAAIC,6BAAAA,cAAcC,6BAAAA,kBAAkB,gBAAgB,wCAAwC;GAEpG,MAAM,SAAS,MAAM,QAAQ,eAAe,YAAY,SAAS;GACjE,MAAM,iBAAiB,aAAa,OAAO,aAAa;GACxD,IACE,mBAAmB,KAAA,KACnB,eAAe,OAAO,YAAY,MAClC,WAAW,KAAA,KACX,OAAO,eAAe,eAAe,mBAErC,MAAM,IAAID,6BAAAA,cAAcC,6BAAAA,kBAAkB,gBAAgB,wCAAwC;GAEpG,OAAO;IAAE,OAAO;IAAgB;GAAO;EACzC;EACA,IAAI;GACF,MAAM,mBAAmB;EAC3B,QAAQ;GACN,OAAO,QAAQ,cAAc,KAAA,IACzB,UAAU,KAAK,0CAA0C,MAAM,QAAQ,mBAAmB,IAC1F,UAAU,KAAK,2CAA2C;EAChE;EAEA,MAAM,SAAS,IAAIC,6BAAAA,OACjB;GAAE,MAAM,QAAQ,cAAc;GAAc,SAAS,QAAQ,iBAAiB;EAAQ,GACtF;GACE,cAAc;IAAE,OAAO,CAAC;IAAG,WAAW,CAAC;GAAE;GACzC,cAAc,uBAAuB,MAAM;EAC7C,CACF;EACA,OAAO,uBAAuB,2BAA2B,OAAO,iBAAiB;GAC/E,MAAM,SAAS,MAAM,mBAAmB;GACxC,IAAI,aAAa,OAAO,cAAc,KAAA,GAAW;GACjD,MAAM,QAAQ,eAAe,OAAO,OAAO,aAAa,OAAO,SAAS;GACxE,MAAM,eAAeC,cAAAA,6BAA6B,aAAa,OAAO,KAAK;GAG3E,IAAI,iBAAiB,KAAA,GAAW;GAChC,MAAM,aAAa,CAAC,GAAG,WAAW,OAAO,CAAC,CAAC,CAAC,QACzC,cAAc,UAAU,UAAU,SAAS,UAAU,iBAAiB,YACzE;GACA,IAAI,WAAW,WAAW,GAAG,WAAW,EAAE,CAAE,WAAW,MAAM;EAC/D,CAAC;EACD,OAAO,kBAAkB,cAAc,YAAY;GACjD,MAAM,SAAS,MAAM,mBAAmB;GACxC,MAAM,QAAQ,aAAa,OAAO,KAAK;GACvC,MAAM,EAAE,OAAO,WAAW,eAAe,OAAO,OAAO,OAAO,OAAO,WAAW;GAChF,MAAM,cAAc,MAAM,IAAI,UAAU,CAAC,CAAC,IAAI,WAAW;GACzD,MAAM,WAAW,kBAAkB,OAAO,KAAK;GAC/C,MAAM,WAAW,gBAAgB;IAC/B,OAAO;IACP,QAAQ,OAAO,KAAK,EAAE,MAAM,mBAAmB;KAAE;KAAM;IAAY,EAAE;GACvE,CAAC;GACD,MAAM,mBAAmB;GACzB,UAAU,IAAI,YAAY,OAAO,MAAM,QAAQ,GAAG,QAAQ;GAC1D,OAAO,EAAE,OAAO,CAAC,GAAG,aAAa,GAAG,QAAQ,CAAC,CAAC,KAAK,SAAS,SAAS,QAAQ,YAAY,IAAI,CAAC,CAAC,EAAE;EACnG,CAAC;EACD,OAAO,kBAAkB,cAAc,OAAO,SAAS,QAAiC;GACtF,MAAM,eAAeA,cAAAA,6BACnB,IAAI,OAAO,SAAU,QAAQ,OAA+B,KAC9D;GACA,MAAM,QAAQ,eAAe,OAAO,IAAI,OAAO,EAAE;GACjD,MAAM,MAAM,KAAK,UAAU,CAAC,OAAO,YAAY,CAAC;GAChD,IAAI,WAAW,IAAI,GAAG,GACpB,MAAM,IAAIH,6BAAAA,cACRC,6BAAAA,kBAAkB,gBAClB,2DACF;GACF,IAAI,QAAQ,eAAe,KAAA,KAAa,WAAW,QAAQ,MACzD,MAAM,IAAID,6BAAAA,cAAcC,6BAAAA,kBAAkB,gBAAgB,8CAA8C;GAC1G,MAAM,aAAa,IAAI,gBAAgB;GACvC,WAAW,IAAI,KAAK;IAAE;IAAY;IAAO;GAAa,CAAC;GACvD,MAAM,SAAS,YAAY,IAAI;IAAC,QAAQ;IAAQ,IAAI,OAAO;IAAQ,WAAW;GAAM,CAAC;GACrF,MAAM,gBAAA,GAAeG,YAAAA,WAAAA,CAAW;GAChC,IAAI,kBAAkB;GACtB,IAAI;GACJ,IAAI;GACJ,IAAI,eAAe;GACnB,MAAM,0BAAgC;IACpC,IAAI,YAAY,cAAc,KAAA,GAAW;IACzC,IAAI;KACF,QAAQ,eACN,eACI;MACE,GAAG;MACH,OAAO,EAAE,UAAU,gBAAgB;MACnC,GAAI,WAAW,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,gBAAgB,EAAE;KACrF,IACA,EAAE,GAAG,WAAW,CACtB;IACF,QAAQ;KAEN,QAAQ,WAAW,6CAA6C;IAClE;GACF;GACA,MAAM,sBAAsB,WAA2C;IACrE,IAAI,eAAe,KAAA,GAAW;KAC5B,aAAa;MACX,GAAG;MACH,QAAQ,OAAO,UAAU,cAAc,OAAO,UAAU,WAAW;MACnE,YAAY,KAAK,IAAI;MACrB,QAAQ,OAAO,qBAAqB,OAAO;KAC7C;KACA,kBAAkB;IACpB;IACA,OAAO;KAAE,GAAG;KAAQ,OAAO,iBAAiB,OAAO,OAAO,YAAY;IAAE;GAC1E;GACA,IAAI;IACF,MAAM,SAAS,MAAM,mBAAmB;IACxC,MAAM,YAAY,uBAAuB,QAAQ,QAAQ,OAAO,IAAI;IACpE,aAAa;KACX,IAAI;KACJ,iBAAiB,OAAO,MAAM;KAC9B,UAAU,OAAO,MAAM;KACvB,oBAAoB;KACpB,UAAU,aAAa,QAAQ,OAAO;KACtC,WAAW,KAAK,IAAI;KACpB,QAAQ;KACR,OAAO,EAAE,UAAU,6BAA6B;IAClD;IACA,MAAM,UAAU,kBAAkB,OAAO,KAAK,CAAC,CAAC,MAAM,SAAS,KAAK,SAAS,SAAS;IACtF,MAAM,aAAa,UACf,KAAA,IACA,eAAe,OAAO,OAAO,OAAO,OAAO,WAAW,CAAC,CAAC,MAAM,MAAM,SAAS,KAAK,SAAS,SAAS;IACxG,IAAI,CAAC,WAAW,CAAC,YACf,MAAM,IAAIL,cAAAA,4BACR,sBACA,SAAS,QAAQ,OAAO,KAAK,2CAC1B,WAAW,KAAA,IAAY,KAAK,gCAAgC,OAAO,QACpE,SAAS,wBAAwB,wBAAwB,CAC7D;IACF,MAAM,eACJ,cAAc,qBAAqB,OAAO,QAAQ,OAAO,WAAW,SAAS,WACzE,uBAAuB,QAAQ,QAAQ,OAAO,UAAU,IAAI,IAC5D;IACN,eAAe,eAAe,OAAO,OAAO,OAAO,OAAO,WAAW,CAAC,CAAC,MAAM,MAC1E,SAAS,KAAK,SAAS,gBAAgB,KAAK,QAAQ,2BAA2B,IAClF;IACA,kBAAkB;IAClB,aAAa;IACb,MAAM,cAAc,UAAU,cAAc,WAAY,QAAQ,OAAO,aAAa,CAAC,GAAG,IAAI,IAAI,KAAA;IAEhG,MAAM,QAAQ,aAAa,OAAO,KAAK;IACvC,QAAQ,WAAW,6BAA6B,aAAa,mBAAmB;IAChF,MAAM,gBAAgB,OAAO,YAAqB;KAChD,MAAM,SAAS,MAAM,mBAAmB;KACxC,IAAI,CAAC,cACH,MAAM,IAAIA,cAAAA,4BACR,4BACA,kGACF;KACF,IAAI,CAAC,QAAQ,qBACX,MAAM,IAAIA,cAAAA,4BACR,oCACA,mDACF;KACF,OAAO,eAAe;KACtB,MAAM,SAAS,MAAM,QAAQ,oBAAoB,OAAO,OAAO,cAAc,SAAS,MAAM;KAC5F,MAAM,mBAAmB;KACzB,OAAO,eAAe;KACtB,OAAO;MAAE,OAAO,OAAO;MAAO;KAAO;IACvC;IACA,IAAI,WAAW,CAAC,cACd,MAAM,IAAIA,cAAAA,4BACR,4BACA,kGACF;IACF,KACG,cAAc,sBAAsB,cAAc,sBACnD,CAAC,UAAU,IAAI,YAAY,OAAO,MAAM,QAAQ,CAAC,GAEjD,MAAM,IAAIA,cAAAA,4BACR,iCACA,+EACF;IACF,MAAM,SAAS,MAAM,cAAc,IAAI;IACvC,aAAa;KAAE,GAAG;KAAY,WAAW,OAAO,OAAO,aAAa,OAAO,MAAM;IAAU;IAC3F,kBAAkB;IAClB,MAAM,EAAE,UAAU,OAAO,WAAW,eAAe,OAAO,OAAO,OAAO,OAAO,WAAW;IAC1F,MAAM,WAAW,UAAU,IAAI,YAAY,OAAO,MAAM,QAAQ,CAAC;IACjE,MAAM,SAAS,WAAW,WAAW,WAAW,UAAU,OAAO,WAAW,IAAI,CAAC;IACjF,IAAI,cAAc,0BAA0B,SAAS;KACnD,MAAM,eAAe;MACnB,WAAW,OAAO,OAAO,aAAa,OAAO,MAAM;MACnD,YAAY,OAAO,OAAO;MAC1B,UAAU,SAAS;MACnB,UAAU,aAAa,KAAA,IAAY,YAAY;MAC/C,WAAW;MACX,WAAW;MACX,OAAO,CAAC,GAAG,MAAM,IAAI,UAAU,CAAC,CAAC,IAAI,WAAW,GAAG,GAAG,kBAAkB,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,SAC1F,SAAS,QAAQ,YAAY,IAAI,CAAC,CACpC;MACA,QAAQ,OAAO,KAAK,EAAE,MAAM,mBAAmB;OAAE;OAAM;MAAY,EAAE;MACrE,GAAI,OAAO,OAAO,gBAAgB,KAAA,IAC9B,CAAC,IACD,EAAE,YAAY,OAAO,OAAO,YAAY,IAAI,WAAW,WAAW;KACxE;KACA,MAAM,UAAU,MAAM,cAAc,KAAK;KACzC,IACE,QAAQ,OAAO,gBAAgB,OAAO,OAAO,eAC7C,QAAQ,OAAO,eAAe,OAAO,OAAO,cAC5C,QAAQ,OAAO,cAAc,OAAO,OAAO,aAC3C,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,aAAa,SAAS,UAE/D,MAAM,eAAe;KACvB,QAAQ,WAAW,6BAA6B,aAAa,qBAAqB;KAClF,OAAO,mBAAmB;MACxB,SAAS,CAAC;OAAE,MAAM;OAAQ,MAAM,KAAK,UAAU,YAAY;MAAE,CAAC;MAC9D,mBAAmB;MACnB,SAAS;KACX,CAAC;IACH;IACA,IAAI,cAAc,sBAAsB,SAAS;KAC/C,MAAM,YAAY;MAChB,OAAO,OAAO,KAAK,SAAS,SAAS,QAAQ,YAAY,IAAI,CAAC,CAAC;MAC/D,SAAS,MAAM,MAAM,SAAS,KAAK,SAAS,YAAY,IAAI,SAAS,CAAC,EAAA,CACnE,KAAK,EAAE,MAAM,mBAAmB;OAAE;OAAM;MAAY,EAAE,CAAC,CACvD,QACE,UACC,EAAA,GAACD,UAAAA,kBAAAA,CACC,SAAU,OAAO,MAAM,aAAa,SAAS,SAAS,MAAM,IAAI,GAChE,KACF,CACJ;KACJ;KACA,MAAM,UAAU,MAAM,cAAc,KAAK;KACzC,IACE,QAAQ,OAAO,gBAAgB,OAAO,OAAO,eAC7C,QAAQ,OAAO,eAAe,OAAO,OAAO,cAC5C,QAAQ,OAAO,cAAc,OAAO,OAAO,aAC3C,QAAQ,OAAO,YAAY,YAAY,CAAC,CAAC,aAAa,SAAS,UAE/D,MAAM,eAAe;KACvB,QAAQ,WAAW,6BAA6B,aAAa,qBAAqB;KAClF,OAAO,mBAAmB;MACxB,SAAS,CAAC;OAAE,MAAM;OAAQ,MAAM,KAAK,UAAU,SAAS;MAAE,CAAC;MAC3D,mBAAmB;MACnB,SAAS;KACX,CAAC;IACH;IACA,MAAM,OAAO,UAAU,uBAAuB,QAAQ,YAAa,IAAK,IAAI;IAC5E,MAAM,WAAW,MAAM,MAAM,SAAS,KAAK,SAAS,IAAI;IACxD,IAAI,SAAS,KAAA,KAAc,YAAY,CAAC,OAAO,MAAM,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,WACpF,MAAM,IAAIC,cAAAA,4BACR,sBACA,eAAe,aAAa,QAAQ,QAAQ,OAAO,KAAK,uBACtD,SAAS,oBAAoB,8BAA8B,CAC/D;IACF,IACE,CAAC,YACA,CAAC,YACA,EAAA,GAACD,UAAAA,kBAAAA,CAAkB,SAAS,YAAY,WAAY,UAAU,KAC9D,EAAA,GAACA,UAAAA,kBAAAA,CAAkB,SAAS,cAAc,WAAY,YAAY,KAClE,EAAA,GAACA,UAAAA,kBAAAA,CAAkB,SAAS,aAAa,WAAY,WAAW,KAChE,EAAA,GAACA,UAAAA,kBAAAA,CAAkB,SAAS,OAAO,WAAY,KAAK,IAEtD,MAAM,IAAIC,cAAAA,4BACR,gCACA,gEAAgE,SAC9D,oBACA,kBAAkB,KAAK,CAAC,CAAC,MAAM,SAAS,KAAK,SAAS,iBAAiB,IACnE,6CAA6C,KAAK,iBAAiB,IAAI,MACvE,wDACN,GACF;IACF,iBAAiB,UAAU,QAAQ,2BAA2B;IAC9D,aAAa,UAAU,KAAA,IAAY;IACnC,MAAM,UAAU,YAAY;KAC1B,MAAM,UAAU,MAAM,cAAc,KAAK;KACzC,IACE,QAAQ,OAAO,gBAAgB,OAAO,OAAO,eAC7C,QAAQ,OAAO,eAAe,OAAO,OAAO,cAC5C,QAAQ,OAAO,cAAc,OAAO,OAAO,WAE3C,MAAM,eAAe;KACvB,IAAI,SACE;UAAA,CAAC,kBAAkB,QAAQ,KAAK,CAAC,CAAC,MAAM,SAAS,KAAK,SAAS,SAAS,GAAG,MAAM,eAAe;KAAA,OAC/F;MACL,MAAM,oBAAoB,eAAe,QAAQ,OAAO,OAAO,OAAO,WAAW,CAAC,CAAC,MAAM,MACtF,SAAS,KAAK,SAAS,SAC1B;MACA,IAAI,CAAC,qBAAqB,EAAA,GAACD,UAAAA,kBAAAA,CAAkB,mBAAmB,UAAU,GAAG,MAAM,eAAe;KACpG;KACA,OAAO;IACT;IACA,MAAM,mBAAmB,YAAY;KACnC,IAAI,CAAC,iBACH,MAAM,IAAIE,6BAAAA,cAAcC,6BAAAA,kBAAkB,gBAAgB,0CAA0C;KACtG,OAAO,eAAe;KACtB,MAAM,UAAU,MAAM,QAAQ;KAC9B,OAAO,eAAe;KACtB,OAAO,eAAe,QAAQ,OAAO,QAAQ,OAAO,WAAW;IACjE;IACA,MAAM,YAAY;KAChB,MAAM,OAAO;MACX,MAAM,EAAE,WAAW,MAAM,iBAAiB;MAC1C,OAAO,OAAO,KAAK,EAAE,MAAM,mBAAmB;OAAE;OAAM;MAAY,EAAE;KACtE;KACA,MAAM,KAAK,MAAc;MACvB,MAAM,UAAU,MAAM,iBAAiB;MACvC,MAAM,QAAQ,QAAQ,OAAO,MAAM,cAAc,UAAU,SAAS,IAAI;MACxE,IAAI,CAAC,OACH,MAAM,IAAID,6BAAAA,cACRC,6BAAAA,kBAAkB,eAClB,UAAU,KAAK,gDAAgD,SAAS,wBAAwB,2BAA2B,EAAE,qCAC/H;MACF,MAAM,OAAO,MAAM,OAAO,OAAO,YAAY,UAAU,QAAQ,SAAS,UAAU,MAAM,GAAG;MAC3F,OAAO,eAAe;MAEtB,KAAI,MADgB,iBAAiB,EAAA,CAC3B,SAAS,aAAa,QAAQ,SAAS,UAAU,MAAM,eAAe;MAChF,OAAO;KACT;IACF;IACA,aAAa;KACX,GAAG;KACH,UAAU;KACV,OAAO,UAAW,YAAa,aAAa,CAAC,IAAM,QAAQ,OAAO,aAAa,CAAC;IAClF;IACA,kBAAkB;IAClB,IAAI;IACJ,IAAI;KACF,SAAS,MAAM,OAAO,OAAO,YAAY,WAAW;MAClD,UAAU,SAAS;MACnB;MACA,WAAW,UAAW,YAAa,aAAa,CAAC,IAAM,QAAQ,OAAO,aAAa,CAAC;MACpF;MACA;MACA,WAAW,YAAY;OACrB,MAAM,UAAU,MAAM,QAAQ;OAC9B,IAAI,SAAS;QACX,MAAM,cAAc,eAAe,QAAQ,OAAO,QAAQ,OAAO,WAAW,CAAC,CAAC,MAAM,MACjF,SAAS,KAAK,SAAS,IAC1B;QACA,IAAI,CAAC,eAAe,EAAA,GAACH,UAAAA,kBAAAA,CAAkB,aAAa,QAAQ,GAAG,MAAM,eAAe;OACtF;MACF;KACF,CAAC;IACH,SAAS,OAAO;KACd,IAAI,OAAO,WAAW,iBAAiBE,6BAAAA,iBAAiB,iBAAiBD,cAAAA,6BACvE,MAAM;KACR,IAAIM,iBAAAA,4BAA4B,KAAK,GACnC,MAAM,IAAIN,cAAAA,4BACR,gBACA,8CAA8C,KAAK,IAAI,EAAE,sEAC3D;KAEF,MAAM,IAAIA,cAAAA,4BACR,oBACA,GAAG,KAAK,IAAI,EAAE,4BAA4B,iBAAiB,QAAQ,MAAM,UAAU,gBAAgB,+DAErG;IACF;IACA,IAAI;KACF,MAAM,QAAQ;IAChB,SAAS,OAAO;KACd,IAAI,EAAE,iBAAiBA,cAAAA,8BAA8B,MAAM;KAC3D,MAAM,IAAIA,cAAAA,4BACR,2BACA,gIAEF;IACF;IACA,QAAQ,WAAW,6BAA6B,aAAa,qBAAqB;IAClF,MAAM,UACJ,OAAO,QAAQ,WAAW,KAAK,OAAO,sBAAsB,KAAA,IACxD,CAAC;KAAE,MAAM;KAAiB,MAAM,KAAK,UAAU,OAAO,iBAAiB;IAAE,CAAC,IAC1E,OAAO;IACb,OAAO,mBACL,aACE,UAAU,KAAA,IAAY,UACtB;KACE,SACE,OAAO,OAAO,cAAc,MAAM,QAC9B,CAAC,GAAG,SAAS;MAAE,MAAM;MAAQ,MAAM;KAA4B,CAAC,IAChE;KACN,GAAI,OAAO,sBAAsB,KAAA,IAAY,CAAC,IAAI,EAAE,mBAAmB,OAAO,kBAAkB;KAChG,GAAI,OAAO,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;KAC5D,SAAS,OAAO,WAAW;IAC7B,GACA,MACF,CACF;GACF,SAAS,OAAO;IAId,MAAM,QACJ,iBAAiBA,cAAAA,8BACb,MAAM,OACN,OAAO,UACL,YACA,iBAAiBC,6BAAAA,gBACf,OAAO,OAAO,MAAM,IAAI,MACxB,iBAAiB,QACf,MAAM,OACN;IACZ,QAAQ,WAAW,6BAA6B,aAAa,0BAA0B,OAAO;IAC9F,IAAI,eAAe,KAAA,GAAW;KAC5B,aAAa;MACX,GAAG;MACH,QAAQ,OAAO,UAAU,cAAc;MACvC,YAAY,KAAK,IAAI;MACrB,QAAQ;OACN;OACA,SAAS,eACL,0BACA,iBAAiB,QACf,MAAM,UACN;MACR;KACF;KACA,kBAAkB;IACpB;IACA,IAAI,EAAE,iBAAiBD,cAAAA,8BAA8B,MAAM;IAC3D,MAAM,UAAU,aACd,YACA;KACE,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,MAAM;KAAQ,CAAC;KAC/C,SAAS;KACT,mBAAmB;MACjB,MAAM,MAAM;MACZ,SAAS,MAAM;MACf,GAAI,MAAM,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,MAAM,UAAU;KACxE;IACF,GACA,MACF;IACA,OAAO;KAAE,GAAG;KAAS,OAAO,iBAAiB,QAAQ,OAAO,YAAY;IAAE;GAC5E,UAAU;IACR,kBAAkB;IAClB,WAAW,OAAO,GAAG;GACvB;EACF,CAAC;EACD,OAAO,kBAAkB,kBAAkB,YAAY;GACrD,MAAM,SAAS,MAAM,mBAAmB;GACxC,MAAM,EAAE,gBAAgB,eAAe,OAAO,OAAO,OAAO,OAAO,WAAW;GAC9E,OAAO,EACL,WAAW,iBAAiB,QAAQ,CAAC,GAAG,WAAW,IAAI,CAAC,EAC1D;EACF,CAAC;EACD,OAAO,kBAAkB,kBAAkB,OAAO,SAAS,QAAQ;GACjE,MAAM,eAAeI,cAAAA,6BACnB,IAAI,OAAO,SAAU,QAAQ,OAA+B,KAC9D;GACA,MAAM,SAAS,MAAM,mBAAmB;GACxC,MAAM,EAAE,UAAU,QAAQ,gBAAgB,eAAe,OAAO,OAAO,OAAO,OAAO,WAAW;GAChG,MAAM,QAAQ,OAAO,MAAM,cAAc,UAAU,QAAQ,QAAQ,OAAO,GAAG;GAC7E,IAAI,UAAU,KAAA,GAAW;IACvB,IAAI,CAAC,cACH,MAAM,IAAIH,6BAAAA,cACRC,6BAAAA,kBAAkB,eAClB,OAAO,KAAK,YAAY,EAAE,6DAC5B;IACF,IAAI,CAAC,QAAQ,qBACX,MAAM,IAAID,6BAAAA,cACRC,6BAAAA,kBAAkB,gBAClB,mDACF;IAEF,MAAM,OAAO,OAAM,MADE,QAAQ,oBAAoB,OAAO,OAAO,cAAc,OAAO,QAAQ,MAAM,EAAA,CACxE,YAAY,UAAU,SAAS,UAAU,MAAM,GAAG;IAC5E,MAAM,mBAAmB;IACzB,OAAO,EAAE,UAAU,CAAC;KAAE,KAAK,MAAM;KAAK,UAAU;KAAiB;IAAK,CAAC,EAAE;GAC3E;GACA,MAAM,WAAW,YAAY,MAAM,cAAc,UAAU,QAAQ,QAAQ,OAAO,GAAG;GACrF,IAAI,iBAAiB,SAAS,aAAa,KAAA,KAAa,OAAO,OAAO,YAAY,mBAAmB,KAAA,GAAW;IAE9G,QAAQ,OAAO,eAAe;IAC9B,MAAM,OAAO,MAAM,OAAO,OAAO,YAAY,eAAe,SAAS,UAAU,SAAS,GAAG;IAC3F,QAAQ,OAAO,eAAe;IAC9B,MAAM,UAAU,MAAM,mBAAmB;IACzC,MAAM,QAAQ,eAAe,QAAQ,OAAO,QAAQ,OAAO,WAAW;IACtE,IACE,QAAQ,OAAO,gBAAgB,OAAO,OAAO,eAC7C,MAAM,SAAS,aAAa,SAAS,YACrC,EAAA,GAACH,UAAAA,kBAAAA,CACC,MAAM,YAAY,MAAM,cAAc,UAAU,QAAQ,SAAS,GAAG,GACpE,QACF,GAEA,MAAM,IAAIE,6BAAAA,cAAcC,6BAAAA,kBAAkB,gBAAgB,8CAA8C;IAC1G,OAAO,EAAE,UAAU,CAAC;KAAE,GAAG;KAAU;IAAK,CAAC,EAAE;GAC7C;GACA,IAAI,QAAQ,OAAO,IAAI,WAAW,KAAK,GACrC,MAAM,IAAID,6BAAAA,cAAcC,6BAAAA,kBAAkB,eAAe,uCAAuC;GAClG,MAAM,IAAID,6BAAAA,cACRC,6BAAAA,kBAAkB,eAClB,OAAO,KAAK,YAAY,EAAE,6DAC5B;EACF,CAAC;EAID,MAAM,WAAA,GAAUK,6BAAAA,iBAAAA,OAAuB,QAAQ,EAAE,QAAQ,SAAS,CAAC;EACnE,IAAI;GACF,OAAO,MAAM,QAAQ,MAAM,SAAS,EAClC,UAAU;IACR;IACA,UAAU,MAAM;IAChB,QACE,MAAM,UAAU,YACZ,CAAC,SAAS,IACV,CAAC,GAAG,MAAM,MAAM,KAAK,SAAS,QAAQ,MAAM,GAAG,GAAG,MAAM,OAAO,KAAK,SAAS,SAAS,MAAM,CAAC;IACnG,WAAW,KAAK,MAAM,MAAM,YAAY,GAAI;IAC5C,UAAU,IAAI,IAAI,aAAa;GACjC,EACF,CAAC;EACH,QAAQ;GACN,OAAO,UAAU,KAAK,4BAA4B;EACpD;CACF;AACF"}

package/dist/src/server/sessionMcpHandler.d.mts

@@ -0,0 +1,50 @@
+import { SessionToolSurface } from "../types/server/sessionToolSurface.mjs";
+import { SessionMcpInvocation } from "../schemas/sessionMcpActivity.mjs";
+import { SessionMcpAccessGrant, SessionMcpAuthorizationService } from "../services/sessionMcpAuthorization/index.mjs";
+import { Tool } from "@modelcontextprotocol/server";
+//#region src/server/sessionMcpHandler.d.ts
+export interface SessionMcpBaseline {
+  readonly tools: readonly Tool[];
+  readonly skills: readonly {
+    name: string;
+    description: string;
+  }[];
+}
+export interface SessionMcpTarget {
+  readonly generation: number;
+  readonly sessionId?: string;
+  readonly toolSurface: SessionToolSurface;
+  /** Reports whether the session's local agent is blocked from starting turns. */
+  readonly agentLocked?: () => boolean;
+}
+export interface SessionMcpHttpHandlerOptions {
+  /** Exact HTTPS resource indicator minted into access grants. */
+  readonly audience: string;
+  readonly presentation?: 'pure' | 'app';
+  readonly authorization: Pick<SessionMcpAuthorizationService, 'authenticateAccessToken' | 'authenticateUrlToken'>;
+  readonly onVerified?: (grant: SessionMcpAccessGrant) => void | Promise<void>;
+  readonly resourceMetadataUrl?: string;
+  /** Signed JWT carried as the final URL path segment instead of an Authorization header. */
+  readonly pathToken?: string;
+  readonly baselines?: Map<string, SessionMcpBaseline>;
+  /** Shared only by signed-URL requests in one live session incarnation. */
+  readonly operations?: SessionMcpOperationRegistry;
+  readonly resolveSession: (sessionId: string) => SessionMcpTarget | undefined | Promise<SessionMcpTarget | undefined>;
+  readonly resolveConversation?: (grant: SessionMcpAccessGrant, digest: string, reserve: boolean, signal?: AbortSignal) => SessionMcpTarget | Promise<SessionMcpTarget>;
+  /** Only bounded, non-reversible correlation values are reported here. */
+  readonly onNotice?: (message: string) => void;
+  /** Host-only call history, separate from MCP notices and the agent transcript. */
+  readonly onInvocation?: (invocation: SessionMcpInvocation) => void;
+  readonly serverName?: string;
+  readonly serverVersion?: string;
+}
+export type SessionMcpOperationRegistry = Map<string, {
+  controller: AbortController;
+  owner: string;
+  conversation?: string;
+}>;
+export type SessionMcpHttpHandler = (request: Request) => Promise<Response>;
+/** Creates a stateless Streamable HTTP MCP request handler for session capabilities. */
+export declare function createSessionMcpHttpHandler(options: SessionMcpHttpHandlerOptions): SessionMcpHttpHandler;
+//#endregion
+//# sourceMappingURL=sessionMcpHandler.d.mts.map

package/dist/src/server/sessionMcpHandler.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionMcpHandler.d.mts","names":[],"sources":["../../../src/server/sessionMcpHandler.ts"],"mappings":";;;;;iBA2DiB;WACN,gBAAgB;WAChB;IAAmB;IAAc;;;iBAyG3B;WACN;WACA;WACA,aAAa;;WAEb;;iBAMM;;WAEN;WACA;WACA,eAAe,KAAK;WACpB,cAAc,OAAO,iCAAiC;WACtD;;WAEA;WACA,YAAY,YAAY;;WAExB,aAAa;WACb,iBAAiB,sBAAsB,+BAA+B,QAAQ;WAC9E,uBACP,OAAO,uBACP,gBACA,kBACA,SAAS,gBACN,mBAAmB,QAAQ;;WAEvB,YAAY;;WAEZ,gBAAgB,YAAY;WAC5B;WACA;;YAGC,8BAA8B;EAEtC,YAAY;EAAiB;EAAe;;YAGpC,yBAAyB,SAAS,YAAY,QAAQ;;wBAuElD,4BAA4B,SAAS,+BAA+B"}