@aquex/cmos-mcp 1.0.0

package/dist/intelligence/rsip-loop.js

@@ -0,0 +1,139 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.__test__ = void 0;
+exports.runRSIPLoop = runRSIPLoop;
+const telemetry_1 = require("./telemetry");
+const DEFAULT_OPTIONS = {
+    enabled: true,
+    maxIterations: 5,
+    minIterations: 1,
+    convergenceThreshold: 0.01,
+    stagnationLimit: 2,
+    telemetrySource: 'RSIPLoop',
+    clock: () => new Date(),
+};
+function normalizeOptions(options = {}) {
+    const normalized = {
+        enabled: options.enabled ?? DEFAULT_OPTIONS.enabled,
+        maxIterations: Math.max(1, options.maxIterations ?? DEFAULT_OPTIONS.maxIterations),
+        minIterations: Math.max(0, options.minIterations ?? DEFAULT_OPTIONS.minIterations),
+        convergenceThreshold: options.convergenceThreshold ?? DEFAULT_OPTIONS.convergenceThreshold,
+        stagnationLimit: Math.max(1, options.stagnationLimit ?? DEFAULT_OPTIONS.stagnationLimit),
+        telemetrySource: options.telemetrySource ?? DEFAULT_OPTIONS.telemetrySource,
+        clock: options.clock ?? DEFAULT_OPTIONS.clock,
+    };
+    if (normalized.minIterations > normalized.maxIterations) {
+        normalized.minIterations = normalized.maxIterations;
+    }
+    return normalized;
+}
+async function runRSIPLoop(handlers, options) {
+    const config = normalizeOptions(options);
+    const startedAt = config.clock().toISOString();
+    if (!config.enabled) {
+        const summary = {
+            startedAt,
+            completedAt: startedAt,
+            iterations: [],
+            converged: false,
+            reason: 'disabled',
+            finalState: undefined,
+        };
+        (0, telemetry_1.emitTelemetryInfo)(config.telemetrySource, 'RSIP loop disabled via configuration toggle', {
+            startedAt,
+        });
+        if (handlers.finalize) {
+            await handlers.finalize(summary);
+        }
+        return summary;
+    }
+    (0, telemetry_1.emitTelemetryInfo)(config.telemetrySource, 'RSIP loop started', {
+        maxIterations: config.maxIterations,
+        minIterations: config.minIterations,
+        convergenceThreshold: config.convergenceThreshold,
+        stagnationLimit: config.stagnationLimit,
+        startedAt,
+    });
+    let state;
+    if (handlers.initialize) {
+        state = await handlers.initialize();
+    }
+    const iterations = [];
+    let reason = 'max_iterations';
+    let converged = false;
+    let error;
+    let consecutiveBelowThreshold = 0;
+    try {
+        for (let iteration = 1; iteration <= config.maxIterations; iteration += 1) {
+            const context = {
+                iteration,
+                state,
+                history: iterations,
+            };
+            const result = await handlers.iterate(context);
+            iterations.push(result);
+            state = result.state;
+            if (result.improvementScore < 0) {
+                (0, telemetry_1.emitTelemetryWarning)(config.telemetrySource, 'RSIP iteration regressed', {
+                    iteration,
+                    improvementScore: result.improvementScore,
+                    summary: result.summary,
+                });
+            }
+            (0, telemetry_1.emitTelemetryInfo)(config.telemetrySource, 'RSIP iteration completed', {
+                iteration,
+                improvementScore: result.improvementScore,
+                converged: Boolean(result.converged),
+                summary: result.summary,
+                telemetry: result.telemetry,
+            });
+            if (result.improvementScore < config.convergenceThreshold) {
+                consecutiveBelowThreshold += 1;
+            }
+            else {
+                consecutiveBelowThreshold = 0;
+            }
+            const minSatisfied = iteration >= config.minIterations;
+            const stagnationReached = minSatisfied && consecutiveBelowThreshold >= config.stagnationLimit;
+            const explicitConvergence = Boolean(result.converged);
+            if (explicitConvergence || stagnationReached) {
+                converged = true;
+                reason = 'converged';
+                break;
+            }
+        }
+    }
+    catch (caught) {
+        error = caught instanceof Error ? caught : new Error(String(caught));
+        reason = 'error';
+        (0, telemetry_1.emitTelemetryError)(config.telemetrySource, 'RSIP loop failed', {
+            error: error.message,
+            stack: error.stack,
+        });
+    }
+    const completedAt = config.clock().toISOString();
+    const summary = {
+        startedAt,
+        completedAt,
+        iterations,
+        converged,
+        reason,
+        finalState: state,
+        error,
+    };
+    (0, telemetry_1.emitTelemetryInfo)(config.telemetrySource, 'RSIP loop completed', {
+        completedAt,
+        iterations: iterations.length,
+        converged,
+        reason,
+        error: error?.message,
+    });
+    if (handlers.finalize) {
+        await handlers.finalize(summary);
+    }
+    return summary;
+}
+exports.__test__ = {
+    normalizeOptions,
+};
+//# sourceMappingURL=rsip-loop.js.map

package/dist/intelligence/rsip-loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsip-loop.js","sourceRoot":"","sources":["../../src/intelligence/rsip-loop.ts"],"names":[],"mappings":";;;AAkFA,kCAwHC;AA1MD,2CAA0F;AAsD1F,MAAM,eAAe,GAAsB;IACzC,OAAO,EAAE,IAAI;IACb,aAAa,EAAE,CAAC;IAChB,aAAa,EAAE,CAAC;IAChB,oBAAoB,EAAE,IAAI;IAC1B,eAAe,EAAE,CAAC;IAClB,eAAe,EAAE,UAAU;IAC3B,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;CACxB,CAAC;AAEF,SAAS,gBAAgB,CAAC,UAA2B,EAAE;IACrD,MAAM,UAAU,GAAsB;QACpC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO;QACnD,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC,aAAa,CAAC;QAClF,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC,aAAa,CAAC;QAClF,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,eAAe,CAAC,oBAAoB;QAC1F,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,IAAI,eAAe,CAAC,eAAe,CAAC;QACxF,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,eAAe,CAAC,eAAe;QAC3E,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,eAAe,CAAC,KAAK;KAC9C,CAAC;IAEF,IAAI,UAAU,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC;QACxD,UAAU,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;IACtD,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAEM,KAAK,UAAU,WAAW,CAC/B,QAAkC,EAClC,OAAyB;IAEzB,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;IAE/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,OAAO,GAA4B;YACvC,SAAS;YACT,WAAW,EAAE,SAAS;YACtB,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,SAAS;SACtB,CAAC;QACF,IAAA,6BAAiB,EAAC,MAAM,CAAC,eAAe,EAAE,6CAA6C,EAAE;YACvF,SAAS;SACV,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAA,6BAAiB,EAAC,MAAM,CAAC,eAAe,EAAE,mBAAmB,EAAE;QAC7D,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,SAAS;KACV,CAAC,CAAC;IAEH,IAAI,KAAyB,CAAC;IAC9B,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,UAAU,GAAkC,EAAE,CAAC;IACrD,IAAI,MAAM,GAAmB,gBAAgB,CAAC;IAC9C,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,KAAwB,CAAC;IAC7B,IAAI,yBAAyB,GAAG,CAAC,CAAC;IAElC,IAAI,CAAC;QACH,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,IAAI,MAAM,CAAC,aAAa,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;YAC1E,MAAM,OAAO,GAAiC;gBAC5C,SAAS;gBACT,KAAK;gBACL,OAAO,EAAE,UAAU;aACpB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/C,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAErB,IAAI,MAAM,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBAChC,IAAA,gCAAoB,EAAC,MAAM,CAAC,eAAe,EAAE,0BAA0B,EAAE;oBACvE,SAAS;oBACT,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,CAAC,CAAC;YACL,CAAC;YAED,IAAA,6BAAiB,EAAC,MAAM,CAAC,eAAe,EAAE,0BAA0B,EAAE;gBACpE,SAAS;gBACT,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;gBACpC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBAC1D,yBAAyB,IAAI,CAAC,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,yBAAyB,GAAG,CAAC,CAAC;YAChC,CAAC;YAED,MAAM,YAAY,GAAG,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC;YACvD,MAAM,iBAAiB,GAAG,YAAY,IAAI,yBAAyB,IAAI,MAAM,CAAC,eAAe,CAAC;YAC9F,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAEtD,IAAI,mBAAmB,IAAI,iBAAiB,EAAE,CAAC;gBAC7C,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM,GAAG,WAAW,CAAC;gBACrB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,KAAK,GAAG,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,MAAM,GAAG,OAAO,CAAC;QACjB,IAAA,8BAAkB,EAAC,MAAM,CAAC,eAAe,EAAE,kBAAkB,EAAE;YAC7D,KAAK,EAAE,KAAK,CAAC,OAAO;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,OAAO,GAA4B;QACvC,SAAS;QACT,WAAW;QACX,UAAU;QACV,SAAS;QACT,MAAM;QACN,UAAU,EAAE,KAAK;QACjB,KAAK;KACN,CAAC;IAEF,IAAA,6BAAiB,EAAC,MAAM,CAAC,eAAe,EAAE,qBAAqB,EAAE;QAC/D,WAAW;QACX,UAAU,EAAE,UAAU,CAAC,MAAM;QAC7B,SAAS;QACT,MAAM;QACN,KAAK,EAAE,KAAK,EAAE,OAAO;KACtB,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAEY,QAAA,QAAQ,GAAG;IACtB,gBAAgB;CACjB,CAAC"}

package/dist/intelligence/sender-context.d.ts

@@ -0,0 +1,114 @@
+import { ProjectRegistry } from './project-registry';
+/**
+ * The directory where the compiled server binary lives. Computed at module-import time
+ * via `path.resolve(__dirname, '../..')` — i.e. one level above `dist/intelligence`.
+ *
+ * Exported so the cwd-vs-server-install guard can be tested with overrides and so
+ * callers can emit a startup diagnostic (Sprint 53 m04). Consumers should NEVER
+ * pin tool attribution to this path — it is the one thing we are explicitly trying
+ * to prevent becoming an implicit sender.
+ */
+export declare const SERVER_INSTALL_ROOT: string;
+/** Candidate source labels, ordered highest-to-lowest priority. */
+export type SenderResolutionSource = 'explicit' | 'mcp-roots' | 'cwd' | 'registry-singleton';
+/**
+ * One step in the priority chain. Every attempted source is recorded, whether
+ * accepted or rejected, so `SenderResolutionError.candidates` gives operators a
+ * complete audit trail (echoed by `cmos_message(action='whoami')` in m03).
+ */
+export interface ResolutionCandidate {
+    readonly source: SenderResolutionSource;
+    readonly projectRoot?: string;
+    readonly accepted: boolean;
+    readonly rejectReason?: string;
+}
+/**
+ * Output of `validateProject` — the fact-gathering layer used by the resolver.
+ *
+ * `hasValidSenderIdentity` encodes the fail-closed rule: a project is only a
+ * valid implicit sender when it owns a UUID `dashboard_project_id` AND a non-stale
+ * canonical `cmos_address` (neither empty nor `cmos://unknown/*`). A one-shot
+ * heal via `backfillUnknownCmosAddress` is attempted before rejection.
+ */
+export interface ValidateProjectResult {
+    readonly hasDatabase: boolean;
+    readonly dashboardProjectId: string | null;
+    readonly cmosAddress: string | null;
+    readonly healed?: {
+        previous: string;
+        next: string;
+    };
+    readonly hasValidSenderIdentity: boolean;
+    readonly rejectReason?: string;
+}
+/** Resolved sender identity plus the full audit trail. */
+export interface SenderContext {
+    readonly projectRoot: string;
+    readonly source: SenderResolutionSource;
+    readonly dashboardProjectId: string | null;
+    readonly cmosAddress: string | null;
+    readonly healed?: {
+        previous: string;
+        next: string;
+    };
+    readonly candidates: ReadonlyArray<ResolutionCandidate>;
+}
+/**
+ * Options for `resolveSenderContext`.
+ *
+ * The `*Override` fields exist for tests; production callers only need
+ * `explicitProjectRoot`, `mcpRoots`, and `requireSenderIdentity`.
+ */
+export interface ResolveSenderContextOptions {
+    /** Caller-supplied project root (step 1). */
+    readonly explicitProjectRoot?: string;
+    /** MCP client roots from `server.listRoots()` (step 2). Paths, not `file://` URIs. */
+    readonly mcpRoots?: readonly string[];
+    /**
+     * Whether the caller needs a validated sender identity (UUID + canonical address)
+     * to proceed. Defaults to `true` — the safe choice for any tool that mutates
+     * dashboard state. Set `false` only for read-only local-DB ops that just need
+     * a project root.
+     */
+    readonly requireSenderIdentity?: boolean;
+    readonly cwdOverride?: string;
+    readonly registryOverride?: ProjectRegistry;
+    readonly serverInstallRootOverride?: string;
+}
+/**
+ * Thrown when no candidate in the priority chain produced a project that satisfied
+ * the caller's acceptance bar. Carries the full candidate trace for operator
+ * debugging — exposed via `cmos_message(action='whoami')` in m03.
+ */
+export declare class SenderResolutionError extends Error {
+    readonly code: string;
+    readonly candidates: ReadonlyArray<ResolutionCandidate>;
+    constructor(message: string, candidates: ReadonlyArray<ResolutionCandidate>, code?: string);
+}
+/**
+ * Read the sender-identity facts for a given project root.
+ *
+ * Opens the CMOS SQLite for `projectRoot` (via `withClientAsync({ projectRoot })`,
+ * which bypasses the env-based fallback because the projectRoot is explicit),
+ * reads `metadata.dashboard_project_id` and `project_identity.cmos_address`, and
+ * attempts a one-shot heal when the address is `cmos://unknown/*` and an owner
+ * exists in metadata.
+ *
+ * Returns the gathered facts plus `hasValidSenderIdentity`, the resolver-facing
+ * acceptance verdict.
+ */
+export declare function validateProject(projectRoot: string, options?: {
+    heal?: boolean;
+}): Promise<ValidateProjectResult>;
+/**
+ * Resolve the sender context for an outbound tool call.
+ *
+ * Walks the priority chain described in the module header. Every attempted
+ * candidate is recorded in the returned `candidates` array (or in the thrown
+ * `SenderResolutionError.candidates` when resolution fails), so operators can
+ * see exactly what the server tried and why each option was rejected.
+ *
+ * @throws SenderResolutionError when no candidate is acceptable.
+ */
+export declare function resolveSenderContext(opts?: ResolveSenderContextOptions): Promise<SenderContext>;
+//# sourceMappingURL=sender-context.d.ts.map

package/dist/intelligence/sender-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-context.d.ts","sourceRoot":"","sources":["../../src/intelligence/sender-context.ts"],"names":[],"mappings":"AA0CA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,QAAsC,CAAC;AAIvE,mEAAmE;AACnE,MAAM,MAAM,sBAAsB,GAAG,UAAU,GAAG,WAAW,GAAG,KAAK,GAAG,oBAAoB,CAAC;AAE7F;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,0DAA0D;AAC1D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;CACzD;AAED;;;;;GAKG;AACH,MAAM,WAAW,2BAA2B;IAC1C,6CAA6C;IAC7C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,sFAAsF;IACtF,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;;;OAKG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,eAAe,CAAC;IAC5C,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAC;CAC7C;AAED;;;;GAIG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;gBAGtD,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,aAAa,CAAC,mBAAmB,CAAC,EAC9C,IAAI,SAAwB;CAO/B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/B,OAAO,CAAC,qBAAqB,CAAC,CAsFhC;AAED;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,GAAE,2BAAgC,GACrC,OAAO,CAAC,aAAa,CAAC,CAuHxB"}

package/dist/intelligence/sender-context.js

@@ -0,0 +1,275 @@
+"use strict";
+// ABOUTME: resolveSenderContext — the single audited boundary that answers
+// ABOUTME: "which local project is calling this tool?" for Sprint 53 attribution rebuild.
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SenderResolutionError = exports.SERVER_INSTALL_ROOT = void 0;
+exports.validateProject = validateProject;
+exports.resolveSenderContext = resolveSenderContext;
+/**
+ * Sender Context Resolution (Sprint 53 m01)
+ *
+ * Every Sprint 32 / Sprint 52 / Sprint 53 recurrence of cross-project mis-attribution
+ * traces back to two root causes:
+ *
+ *   (a) the MCP server had two competing resolvers (`resolveCmosProjectRoot` and
+ *       `resolveProjectRootEnhanced`) that disagreed about priority order, and
+ *   (b) one of them silently fell back to the `CMOS_PROJECT_ROOT` env var when no
+ *       caller-provided root was present, causing every downstream project to be
+ *       attributed as cmos-mcp's own project.
+ *
+ * This module replaces both resolvers with one priority chain and a fail-closed
+ * contract: when the server cannot authoritatively identify the caller, we throw
+ * `SenderResolutionError` with a full candidate trace rather than guessing.
+ *
+ * Priority (highest → lowest):
+ *   1. Explicit `explicitProjectRoot` parameter
+ *   2. MCP client roots advertised via `roots/list`
+ *   3. Auto-discovery from cwd (with cwd-vs-SERVER_INSTALL_ROOT guard)
+ *   4. Registry singleton — only when exactly ONE project is registered
+ *   5. Throw `SenderResolutionError`
+ *
+ * The `CMOS_PROJECT_ROOT` env var is NOT consulted here — it is retained only as a
+ * bootstrap hint at `src/index.ts:17` so the server can locate its own `.env`. See
+ * sprint-53-attribution-rebuild.md for the full rationale.
+ *
+ * No caller-wiring happens in this module — m01 ships the pure resolver + tests.
+ * The dispatcher refactor at `src/index.ts` is m02.
+ *
+ * @module intelligence/sender-context
+ */
+const path_1 = __importDefault(require("path"));
+const project_identity_1 = require("../tools/cmos/project-identity");
+const client_1 = require("../tools/cmos/client");
+const cmos_detector_1 = require("./cmos-detector");
+const project_registry_1 = require("./project-registry");
+/**
+ * The directory where the compiled server binary lives. Computed at module-import time
+ * via `path.resolve(__dirname, '../..')` — i.e. one level above `dist/intelligence`.
+ *
+ * Exported so the cwd-vs-server-install guard can be tested with overrides and so
+ * callers can emit a startup diagnostic (Sprint 53 m04). Consumers should NEVER
+ * pin tool attribution to this path — it is the one thing we are explicitly trying
+ * to prevent becoming an implicit sender.
+ */
+exports.SERVER_INSTALL_ROOT = path_1.default.resolve(__dirname, '..', '..');
+const UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/**
+ * Thrown when no candidate in the priority chain produced a project that satisfied
+ * the caller's acceptance bar. Carries the full candidate trace for operator
+ * debugging — exposed via `cmos_message(action='whoami')` in m03.
+ */
+class SenderResolutionError extends Error {
+    constructor(message, candidates, code = 'SENDER_UNRESOLVABLE') {
+        super(message);
+        this.name = 'SenderResolutionError';
+        this.code = code;
+        this.candidates = candidates;
+    }
+}
+exports.SenderResolutionError = SenderResolutionError;
+/**
+ * Read the sender-identity facts for a given project root.
+ *
+ * Opens the CMOS SQLite for `projectRoot` (via `withClientAsync({ projectRoot })`,
+ * which bypasses the env-based fallback because the projectRoot is explicit),
+ * reads `metadata.dashboard_project_id` and `project_identity.cmos_address`, and
+ * attempts a one-shot heal when the address is `cmos://unknown/*` and an owner
+ * exists in metadata.
+ *
+ * Returns the gathered facts plus `hasValidSenderIdentity`, the resolver-facing
+ * acceptance verdict.
+ */
+async function validateProject(projectRoot, options = {}) {
+    const { heal = true } = options;
+    const resolved = path_1.default.resolve(projectRoot);
+    const detector = cmos_detector_1.CmosDetector.getInstance();
+    const detection = await detector.detect(resolved, { forceRefresh: true });
+    if (!detection.hasDatabase || !detection.databasePath) {
+        return {
+            hasDatabase: false,
+            dashboardProjectId: null,
+            cmosAddress: null,
+            hasValidSenderIdentity: false,
+            rejectReason: 'no CMOS database at projectRoot',
+        };
+    }
+    try {
+        const result = await (0, client_1.withClientAsync)(async (db) => {
+            const pidRow = db.getOne("SELECT value FROM metadata WHERE key = 'dashboard_project_id'");
+            const rawProjectId = pidRow.success && pidRow.data?.value ? pidRow.data.value.trim() : '';
+            const dashboardProjectId = rawProjectId.length > 0 ? rawProjectId : null;
+            let identity = (0, project_identity_1.getProjectIdentity)(db);
+            let cmosAddress = identity?.cmos_address?.trim() ?? '';
+            const initialStale = !cmosAddress || cmosAddress.startsWith('cmos://unknown/');
+            let healed;
+            if (initialStale && heal) {
+                const outcome = (0, project_identity_1.backfillUnknownCmosAddress)(db);
+                if (outcome.rewritten && outcome.next && outcome.next !== outcome.previous) {
+                    healed = {
+                        previous: outcome.previous ?? '',
+                        next: outcome.next,
+                    };
+                    identity = (0, project_identity_1.getProjectIdentity)(db);
+                    cmosAddress = identity?.cmos_address?.trim() ?? '';
+                }
+            }
+            const hasCanonicalAddress = cmosAddress.length > 0 && !cmosAddress.startsWith('cmos://unknown/');
+            const hasValidUuid = dashboardProjectId !== null && UUID_REGEX.test(dashboardProjectId);
+            const hasValidSenderIdentity = hasValidUuid && hasCanonicalAddress;
+            let rejectReason;
+            if (!hasValidUuid) {
+                rejectReason = 'dashboard_project_id missing or not a UUID';
+            }
+            else if (!hasCanonicalAddress) {
+                rejectReason = 'project_identity.cmos_address is empty or cmos://unknown/*';
+            }
+            const payload = {
+                hasDatabase: true,
+                dashboardProjectId,
+                cmosAddress: hasCanonicalAddress ? cmosAddress : null,
+                healed,
+                hasValidSenderIdentity,
+                rejectReason,
+            };
+            return { success: true, data: payload };
+        }, { projectRoot: resolved });
+        if (result.success && result.data) {
+            return result.data;
+        }
+        return {
+            hasDatabase: true,
+            dashboardProjectId: null,
+            cmosAddress: null,
+            hasValidSenderIdentity: false,
+            rejectReason: 'failed to open CMOS database',
+        };
+    }
+    catch (err) {
+        return {
+            hasDatabase: true,
+            dashboardProjectId: null,
+            cmosAddress: null,
+            hasValidSenderIdentity: false,
+            rejectReason: `DB read error: ${err instanceof Error ? err.message : 'unknown'}`,
+        };
+    }
+}
+/**
+ * Resolve the sender context for an outbound tool call.
+ *
+ * Walks the priority chain described in the module header. Every attempted
+ * candidate is recorded in the returned `candidates` array (or in the thrown
+ * `SenderResolutionError.candidates` when resolution fails), so operators can
+ * see exactly what the server tried and why each option was rejected.
+ *
+ * @throws SenderResolutionError when no candidate is acceptable.
+ */
+async function resolveSenderContext(opts = {}) {
+    const candidates = [];
+    const requireSenderIdentity = opts.requireSenderIdentity ?? true;
+    const serverInstallRoot = path_1.default.resolve(opts.serverInstallRootOverride ?? exports.SERVER_INSTALL_ROOT);
+    const isAcceptable = (v) => requireSenderIdentity ? v.hasValidSenderIdentity : v.hasDatabase;
+    const accept = (source, projectRoot, v) => {
+        candidates.push({ source, projectRoot, accepted: true });
+        return {
+            projectRoot,
+            source,
+            dashboardProjectId: v.dashboardProjectId,
+            cmosAddress: v.cmosAddress,
+            healed: v.healed,
+            candidates,
+        };
+    };
+    // ─── Step 1: explicit ───────────────────────────────────────────────────
+    if (opts.explicitProjectRoot) {
+        const root = path_1.default.resolve(opts.explicitProjectRoot);
+        const validation = await validateProject(root);
+        if (isAcceptable(validation)) {
+            return accept('explicit', root, validation);
+        }
+        candidates.push({
+            source: 'explicit',
+            projectRoot: root,
+            accepted: false,
+            rejectReason: validation.rejectReason ?? 'explicit projectRoot not acceptable',
+        });
+    }
+    // ─── Step 2: MCP client roots ───────────────────────────────────────────
+    for (const root of opts.mcpRoots ?? []) {
+        const resolved = path_1.default.resolve(root);
+        const validation = await validateProject(resolved);
+        if (isAcceptable(validation)) {
+            return accept('mcp-roots', resolved, validation);
+        }
+        candidates.push({
+            source: 'mcp-roots',
+            projectRoot: resolved,
+            accepted: false,
+            rejectReason: validation.rejectReason ?? 'mcp root not acceptable',
+        });
+    }
+    // ─── Step 3: cwd (with cwd-vs-SERVER_INSTALL_ROOT guard) ────────────────
+    const cwd = path_1.default.resolve(opts.cwdOverride ?? process.cwd());
+    const guardEngaged = cwd === serverInstallRoot && requireSenderIdentity && !opts.explicitProjectRoot;
+    if (guardEngaged) {
+        candidates.push({
+            source: 'cwd',
+            projectRoot: cwd,
+            accepted: false,
+            rejectReason: 'cwd-vs-SERVER_INSTALL_ROOT guard: cmos-mcp must never be implicit sender for another project',
+        });
+    }
+    else {
+        const validation = await validateProject(cwd);
+        if (isAcceptable(validation)) {
+            return accept('cwd', cwd, validation);
+        }
+        candidates.push({
+            source: 'cwd',
+            projectRoot: cwd,
+            accepted: false,
+            rejectReason: validation.rejectReason ?? 'cwd not acceptable',
+        });
+    }
+    // ─── Step 4: registry singleton ─────────────────────────────────────────
+    try {
+        const registry = opts.registryOverride ?? (await project_registry_1.ProjectRegistry.create());
+        const projects = await registry.list();
+        if (projects.length === 1) {
+            const root = path_1.default.resolve(projects[0].projectRoot);
+            const validation = await validateProject(root);
+            if (isAcceptable(validation)) {
+                return accept('registry-singleton', root, validation);
+            }
+            candidates.push({
+                source: 'registry-singleton',
+                projectRoot: root,
+                accepted: false,
+                rejectReason: validation.rejectReason ?? 'registry-singleton not acceptable',
+            });
+        }
+        else {
+            candidates.push({
+                source: 'registry-singleton',
+                accepted: false,
+                rejectReason: projects.length === 0
+                    ? 'registry is empty'
+                    : `registry has ${projects.length} projects; auto-pick only allowed when size === 1`,
+            });
+        }
+    }
+    catch (err) {
+        candidates.push({
+            source: 'registry-singleton',
+            accepted: false,
+            rejectReason: `registry error: ${err instanceof Error ? err.message : 'unknown'}`,
+        });
+    }
+    // ─── Step 5: fail closed ────────────────────────────────────────────────
+    throw new SenderResolutionError('Could not authoritatively resolve sender context. No candidate produced a project ' +
+        'with a valid dashboard identity. See SenderResolutionError.candidates for the full trace.', candidates);
+}
+//# sourceMappingURL=sender-context.js.map

package/dist/intelligence/sender-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-context.js","sourceRoot":"","sources":["../../src/intelligence/sender-context.ts"],"names":[],"mappings":";AAAA,2EAA2E;AAC3E,0FAA0F;;;;;;AA0J1F,0CAyFC;AAYD,oDAyHC;AAtXD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,gDAAwB;AAExB,qEAAgG;AAEhG,iDAAuD;AACvD,mDAA+C;AAC/C,yDAAqD;AAErD;;;;;;;;GAQG;AACU,QAAA,mBAAmB,GAAG,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEvE,MAAM,UAAU,GAAG,iEAAiE,CAAC;AAmErF;;;;GAIG;AACH,MAAa,qBAAsB,SAAQ,KAAK;IAI9C,YACE,OAAe,EACf,UAA8C,EAC9C,IAAI,GAAG,qBAAqB;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAdD,sDAcC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,eAAe,CACnC,WAAmB,EACnB,UAA8B,EAAE;IAEhC,MAAM,EAAE,IAAI,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAChC,MAAM,QAAQ,GAAG,cAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAE3C,MAAM,QAAQ,GAAG,4BAAY,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QACtD,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,kBAAkB,EAAE,IAAI;YACxB,WAAW,EAAE,IAAI;YACjB,sBAAsB,EAAE,KAAK;YAC7B,YAAY,EAAE,iCAAiC;SAChD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAe,EAClC,KAAK,EAAE,EAAsB,EAAE,EAAE;YAC/B,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CACtB,+DAA+D,CAChE,CAAC;YACF,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,MAAM,kBAAkB,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;YAEzE,IAAI,QAAQ,GAAG,IAAA,qCAAkB,EAAC,EAAE,CAAC,CAAC;YACtC,IAAI,WAAW,GAAG,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACvD,MAAM,YAAY,GAAG,CAAC,WAAW,IAAI,WAAW,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAE/E,IAAI,MAAsD,CAAC;YAC3D,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,IAAA,6CAA0B,EAAC,EAAE,CAAC,CAAC;gBAC/C,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;oBAC3E,MAAM,GAAG;wBACP,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;wBAChC,IAAI,EAAE,OAAO,CAAC,IAAI;qBACnB,CAAC;oBACF,QAAQ,GAAG,IAAA,qCAAkB,EAAC,EAAE,CAAC,CAAC;oBAClC,WAAW,GAAG,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,MAAM,mBAAmB,GACvB,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YACvE,MAAM,YAAY,GAAG,kBAAkB,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACxF,MAAM,sBAAsB,GAAG,YAAY,IAAI,mBAAmB,CAAC;YAEnE,IAAI,YAAgC,CAAC;YACrC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,YAAY,GAAG,4CAA4C,CAAC;YAC9D,CAAC;iBAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAChC,YAAY,GAAG,4DAA4D,CAAC;YAC9E,CAAC;YAED,MAAM,OAAO,GAA0B;gBACrC,WAAW,EAAE,IAAI;gBACjB,kBAAkB;gBAClB,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;gBACrD,MAAM;gBACN,sBAAsB;gBACtB,YAAY;aACb,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC1C,CAAC,EACD,EAAE,WAAW,EAAE,QAAQ,EAAE,CAC1B,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QACD,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,kBAAkB,EAAE,IAAI;YACxB,WAAW,EAAE,IAAI;YACjB,sBAAsB,EAAE,KAAK;YAC7B,YAAY,EAAE,8BAA8B;SAC7C,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,kBAAkB,EAAE,IAAI;YACxB,WAAW,EAAE,IAAI;YACjB,sBAAsB,EAAE,KAAK;YAC7B,YAAY,EAAE,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE;SACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,oBAAoB,CACxC,OAAoC,EAAE;IAEtC,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,MAAM,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,IAAI,IAAI,CAAC;IACjE,MAAM,iBAAiB,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,IAAI,2BAAmB,CAAC,CAAC;IAE9F,MAAM,YAAY,GAAG,CAAC,CAAwB,EAAW,EAAE,CACzD,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IAEnE,MAAM,MAAM,GAAG,CACb,MAA8B,EAC9B,WAAmB,EACnB,CAAwB,EACT,EAAE;QACjB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO;YACL,WAAW;YACX,MAAM;YACN,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;YACxC,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU;SACX,CAAC;IACJ,CAAC,CAAC;IAEF,2EAA2E;IAC3E,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAC9C,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,qCAAqC;SAC/E,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACnD,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE,QAAQ;YACrB,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,yBAAyB;SACnE,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5D,MAAM,YAAY,GAChB,GAAG,KAAK,iBAAiB,IAAI,qBAAqB,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;IAClF,IAAI,YAAY,EAAE,CAAC;QACjB,UAAU,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,GAAG;YAChB,QAAQ,EAAE,KAAK;YACf,YAAY,EACV,8FAA8F;SACjG,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,GAAG;YAChB,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,oBAAoB;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,IAAI,CAAC,MAAM,kCAAe,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7B,OAAO,MAAM,CAAC,oBAAoB,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YACxD,CAAC;YACD,UAAU,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,oBAAoB;gBAC5B,WAAW,EAAE,IAAI;gBACjB,QAAQ,EAAE,KAAK;gBACf,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,mCAAmC;aAC7E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,oBAAoB;gBAC5B,QAAQ,EAAE,KAAK;gBACf,YAAY,EACV,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACnB,CAAC,CAAC,mBAAmB;oBACrB,CAAC,CAAC,gBAAgB,QAAQ,CAAC,MAAM,mDAAmD;aACzF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,oBAAoB;YAC5B,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE;SAClF,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,MAAM,IAAI,qBAAqB,CAC7B,oFAAoF;QAClF,2FAA2F,EAC7F,UAAU,CACX,CAAC;AACJ,CAAC"}