@ashlr/hub 3.4.0 → 3.5.1

package/dist/core/verse/workspaces.js

@@ -0,0 +1,501 @@
+/**
+ * core/verse/workspaces.ts — the workspace registry.
+ *
+ *   <root>/workspaces.json   0600, atomic temp + rename
+ *
+ * WHAT THIS FILE IS NOT: it is not `~/.ashlr/enrollment.json`, it never writes
+ * that file, and nothing here can put a path into it. That separation is the
+ * whole security design.
+ *
+ *   enrollment.json  — WHAT THE AUTONOMOUS LANE MAY MUTATE. `assertMayMutate`
+ *                      reads it, exact-match per repo, and refuses anything
+ *                      absent. Untouched by this feature.
+ *   workspaces.json  — WHAT AN INTERACTIVE SESSION MAY REACH, plus ordering
+ *                      and grouping hints for the autonomous lane.
+ *
+ * So a workspace can hand a chat five folders without any of them becoming
+ * autonomously writable, and a "section" can rank repos the fleet already had
+ * without adding one. `buildAutonomyScopeView` enforces that in code: it
+ * INTERSECTS section membership with the enrollment registry and can only
+ * ever return a subset of it.
+ *
+ * Every root is validated through `path-guard.ts` — the same forbidden roots
+ * enrollment uses (`/`, `$HOME`, `~/.ashlr`, `~/.codex/artifacts`), checked
+ * both lexically and physically so a symlink cannot smuggle one in.
+ */
+import { closeSync, constants as fsConstants, existsSync, fchmodSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, writeSync, } from 'node:fs';
+import { randomBytes, randomUUID } from 'node:crypto';
+import { homedir } from 'node:os';
+import { basename, join } from 'node:path';
+import { getGitStatus, isRepo, resolveGitHubOriginAuthority } from '../git.js';
+import { isEnrolled, readEnrollmentRegistry } from '../sandbox/policy.js';
+import { checkWorkspaceRootPath, isDirectoryPath } from './path-guard.js';
+import { VERSE_DEFAULT_ROOT_PRIORITY, VERSE_MAX_WORKSPACE_ROOTS, VERSE_ROOT_PRIORITY_RANK, VERSE_ROOT_PRIORITIES, } from './types.js';
+const WORKSPACES_FILE = 'workspaces.json';
+const MAX_WORKSPACES = 64;
+const MAX_NAME_CHARS = 120;
+const MAX_REGISTRY_BYTES = 1024 * 1024;
+const WORKSPACE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;
+export class VerseWorkspaceError extends Error {
+    code = 'VERSE_INVALID';
+    constructor(message) {
+        super(message);
+        this.name = 'VerseWorkspaceError';
+    }
+}
+function emptyRegistry() {
+    return { version: 1, workspaces: [], priorities: {}, focusSectionId: null };
+}
+function isObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isPriority(value) {
+    return typeof value === 'string' && VERSE_ROOT_PRIORITIES.includes(value);
+}
+function parseRoot(value) {
+    if (!isObject(value))
+        return null;
+    const path = value['path'];
+    if (typeof path !== 'string' || path.length === 0)
+        return null;
+    const name = typeof value['name'] === 'string' && value['name'].length > 0
+        ? value['name']
+        : basename(path) || path;
+    return { path, name, primary: value['primary'] === true };
+}
+/**
+ * Parse one stored workspace, repairing what can be repaired rather than
+ * dropping the operator's record: a set that somehow lost its primary (hand
+ * edit, an older writer) gets the first root promoted, because a workspace
+ * with no cwd cannot start a session and silently vanishing is worse.
+ */
+function parseWorkspace(value) {
+    if (!isObject(value))
+        return null;
+    const id = value['id'];
+    const name = value['name'];
+    if (typeof id !== 'string' || !WORKSPACE_ID_RE.test(id))
+        return null;
+    if (typeof name !== 'string' || name.length === 0)
+        return null;
+    const rawRoots = Array.isArray(value['roots']) ? value['roots'] : [];
+    const roots = [];
+    for (const raw of rawRoots) {
+        const root = parseRoot(raw);
+        if (root && !roots.some((r) => r.path === root.path))
+            roots.push(root);
+    }
+    if (roots.length === 0)
+        return null;
+    const primaries = roots.filter((r) => r.primary);
+    if (primaries.length !== 1) {
+        for (const root of roots)
+            root.primary = false;
+        roots[0].primary = true;
+    }
+    // Primary first, so `roots[0]` is always the session's cwd.
+    roots.sort((a, b) => Number(b.primary) - Number(a.primary));
+    const at = typeof value['createdAt'] === 'string' ? value['createdAt'] : new Date(0).toISOString();
+    return {
+        id,
+        name,
+        roots: roots.slice(0, VERSE_MAX_WORKSPACE_ROOTS),
+        section: value['section'] === true,
+        createdAt: at,
+        updatedAt: typeof value['updatedAt'] === 'string' ? value['updatedAt'] : at,
+    };
+}
+function parseRegistry(raw) {
+    if (!isObject(raw))
+        return emptyRegistry();
+    const workspaces = [];
+    const rawWorkspaces = Array.isArray(raw['workspaces']) ? raw['workspaces'] : [];
+    for (const entry of rawWorkspaces) {
+        const parsed = parseWorkspace(entry);
+        if (parsed && !workspaces.some((w) => w.id === parsed.id))
+            workspaces.push(parsed);
+        if (workspaces.length >= MAX_WORKSPACES)
+            break;
+    }
+    const priorities = {};
+    if (isObject(raw['priorities'])) {
+        for (const [path, priority] of Object.entries(raw['priorities'])) {
+            if (typeof path === 'string' && path.length > 0 && isPriority(priority)) {
+                priorities[path] = priority;
+            }
+        }
+    }
+    const focus = raw['focusSectionId'];
+    const focusSectionId = typeof focus === 'string' && workspaces.some((w) => w.id === focus && w.section)
+        ? focus
+        : null;
+    return { version: 1, workspaces, priorities, focusSectionId };
+}
+// ---------------------------------------------------------------------------
+// Private, atomic write (same recipe as session-store.ts)
+// ---------------------------------------------------------------------------
+function writeAtomically(target, content) {
+    const temp = `${target}.${process.pid}.${randomBytes(8).toString('hex')}.tmp`;
+    const noFollow = typeof fsConstants.O_NOFOLLOW === 'number' ? fsConstants.O_NOFOLLOW : 0;
+    const fd = openSync(temp, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL | noFollow, 0o600);
+    let published = false;
+    try {
+        const bytes = Buffer.from(content, 'utf8');
+        let offset = 0;
+        while (offset < bytes.length) {
+            const written = writeSync(fd, bytes, offset, bytes.length - offset, offset);
+            if (written <= 0)
+                throw new Error('workspace registry write made no progress');
+            offset += written;
+        }
+        fchmodSync(fd, 0o600);
+        fsyncSync(fd);
+        renameSync(temp, target);
+        published = true;
+    }
+    finally {
+        closeSync(fd);
+        if (!published) {
+            try {
+                rmSync(temp, { force: true });
+            }
+            catch { /* best effort */ }
+        }
+    }
+}
+/**
+ * Validate and canonicalise a root list.
+ *
+ * The first entry is the primary. Every entry goes through the same deny-root
+ * guard enrollment uses, is realpath'd, and is deduplicated AFTER resolution —
+ * so two spellings of one directory (a symlink and its target) collapse to one
+ * root rather than being granted twice.
+ */
+export function resolveWorkspaceRoots(roots, opts = {}) {
+    if (!Array.isArray(roots) || roots.length === 0) {
+        throw new VerseWorkspaceError('a workspace needs at least one root');
+    }
+    if (roots.length > VERSE_MAX_WORKSPACE_ROOTS) {
+        throw new VerseWorkspaceError(`a workspace may have at most ${VERSE_MAX_WORKSPACE_ROOTS} roots`);
+    }
+    const resolved = [];
+    for (const raw of roots) {
+        const check = checkWorkspaceRootPath(raw, opts.artifactsRoot);
+        if (!check.ok)
+            throw new VerseWorkspaceError(check.error);
+        if (!resolved.includes(check.path))
+            resolved.push(check.path);
+    }
+    const [primary, ...extra] = resolved;
+    return { primary: primary, extra };
+}
+// ---------------------------------------------------------------------------
+// Per-root live facts
+// ---------------------------------------------------------------------------
+/**
+ * Branch, dirty state and remote for one root.
+ *
+ * `remote` is the canonical `owner/repo` for a GitHub origin, NOT the raw
+ * remote URL: an https remote can carry credentials in its userinfo, and this
+ * value reaches an API response.
+ */
+export function rootGitIdentity(path) {
+    if (!isRepo(path))
+        return null;
+    const status = getGitStatus(path);
+    if (!status)
+        return null;
+    return {
+        branch: status.branch,
+        dirty: status.dirty,
+        ahead: status.ahead,
+        behind: status.behind,
+        remote: resolveGitHubOriginAuthority(path),
+    };
+}
+/**
+ * Which engines can actually be granted a root beyond their cwd.
+ *
+ * VERIFIED against each CLI's own `--help` on the installed versions, not
+ * from memory (see `adapters/claude.ts` and `adapters/codex.ts` for the exact
+ * flags and how they were checked):
+ *
+ *   claude / local  `--add-dir <directories...>`  — yes
+ *   codex           `--add-dir <DIR>` on `exec`, `sandbox_workspace_write.
+ *                   writable_roots` on `exec resume` — yes
+ *   grok            NOTHING. `grok --help` and `grok agent --help` expose
+ *                   `--cwd` and a `--sandbox <PROFILE>` NAME, and no flag
+ *                   that adds a directory. So a Grok seat gets the primary
+ *                   root and nothing else, and we say so instead of inventing
+ *                   a flag that would fail the turn before inference.
+ */
+export function engineSupportsExtraRoots(engine) {
+    return engine === 'claude' || engine === 'local' || engine === 'codex';
+}
+/** Project one root list into the status rows a client renders. */
+export function describeRoots(roots, opts = {}) {
+    const multiRoot = opts.engine === undefined || engineSupportsExtraRoots(opts.engine);
+    return roots.map((path, index) => {
+        const primary = index === 0;
+        return {
+            path,
+            name: basename(path) || path,
+            primary,
+            exists: isDirectoryPath(path),
+            // READ, never written by anything in this module.
+            enrolled: safeIsEnrolled(path),
+            git: rootGitIdentity(path),
+            reachable: primary || multiRoot,
+        };
+    });
+}
+function safeIsEnrolled(path) {
+    try {
+        return isEnrolled(path);
+    }
+    catch {
+        // A degraded registry is not evidence of enrollment. Fail closed.
+        return false;
+    }
+}
+/**
+ * The plain-language facts a client must show rather than imply: roots the
+ * engine cannot reach, and roots the autonomous lane will refuse.
+ */
+export function rootNotes(statuses, engine) {
+    const notes = [];
+    const unreachable = statuses.filter((r) => !r.reachable);
+    if (unreachable.length > 0) {
+        notes.push(`${engine === 'grok' ? 'The Grok CLI' : 'This engine'} takes no additional-directory flag, so ` +
+            `${unreachable.map((r) => r.name).join(', ')} ${unreachable.length === 1 ? 'is' : 'are'} ` +
+            'not reachable from this chat — only the primary root is.');
+    }
+    const unenrolled = statuses.filter((r) => !r.enrolled);
+    if (unenrolled.length > 0) {
+        notes.push(`Not enrolled: ${unenrolled.map((r) => r.name).join(', ')}. ` +
+            'This chat can still edit them; the autonomous lane refuses them until each is enrolled on its own.');
+    }
+    return notes;
+}
+export function createVerseWorkspaceStore(opts = {}) {
+    const root = opts.root ?? join(homedir(), '.ashlr', 'verse');
+    const now = opts.now ?? (() => new Date());
+    const file = join(root, WORKSPACES_FILE);
+    const rootOpts = opts.artifactsRoot === undefined ? {} : { artifactsRoot: opts.artifactsRoot };
+    function read() {
+        try {
+            if (!existsSync(file))
+                return emptyRegistry();
+            const raw = readFileSync(file, 'utf8');
+            if (raw.length > MAX_REGISTRY_BYTES)
+                return emptyRegistry();
+            return parseRegistry(JSON.parse(raw));
+        }
+        catch {
+            // A corrupt registry reads as "no workspaces", never as an error that
+            // would take the whole Verse surface down with it.
+            return emptyRegistry();
+        }
+    }
+    function write(registry) {
+        mkdirSync(root, { recursive: true, mode: 0o700 });
+        writeAtomically(file, `${JSON.stringify(registry, null, 2)}\n`);
+    }
+    function checkName(raw) {
+        if (typeof raw !== 'string')
+            throw new VerseWorkspaceError('name is required');
+        const name = raw.replace(/\s+/g, ' ').trim();
+        if (name.length === 0)
+            throw new VerseWorkspaceError('name is required');
+        if (name.length > MAX_NAME_CHARS) {
+            throw new VerseWorkspaceError(`name must be at most ${MAX_NAME_CHARS} characters`);
+        }
+        return name;
+    }
+    function toRoots(paths) {
+        return [paths.primary, ...paths.extra].map((path, index) => ({
+            path,
+            name: basename(path) || path,
+            primary: index === 0,
+        }));
+    }
+    return {
+        path: file,
+        list() {
+            return read().workspaces;
+        },
+        get(id) {
+            if (typeof id !== 'string')
+                return null;
+            return read().workspaces.find((w) => w.id === id) ?? null;
+        },
+        create(name, roots, section = false) {
+            const registry = read();
+            if (registry.workspaces.length >= MAX_WORKSPACES) {
+                throw new VerseWorkspaceError(`at most ${MAX_WORKSPACES} workspaces`);
+            }
+            const at = now().toISOString();
+            const workspace = {
+                id: randomUUID(),
+                name: checkName(name),
+                roots: toRoots(resolveWorkspaceRoots(roots, rootOpts)),
+                section: section === true,
+                createdAt: at,
+                updatedAt: at,
+            };
+            registry.workspaces.push(workspace);
+            write(registry);
+            return workspace;
+        },
+        update(id, patch) {
+            const registry = read();
+            const index = registry.workspaces.findIndex((w) => w.id === id);
+            if (index < 0)
+                throw new VerseWorkspaceError(`workspace not found: ${String(id)}`);
+            const current = registry.workspaces[index];
+            const next = {
+                ...current,
+                ...(patch.name === undefined ? {} : { name: checkName(patch.name) }),
+                ...(patch.roots === undefined ? {} : { roots: toRoots(resolveWorkspaceRoots(patch.roots, rootOpts)) }),
+                ...(patch.section === undefined ? {} : { section: patch.section === true }),
+                updatedAt: now().toISOString(),
+            };
+            registry.workspaces[index] = next;
+            // A section that stops being one cannot stay the focus.
+            if (!next.section && registry.focusSectionId === next.id)
+                registry.focusSectionId = null;
+            write(registry);
+            return next;
+        },
+        remove(id) {
+            const registry = read();
+            const before = registry.workspaces.length;
+            registry.workspaces = registry.workspaces.filter((w) => w.id !== id);
+            if (registry.workspaces.length === before)
+                return false;
+            if (registry.focusSectionId === id)
+                registry.focusSectionId = null;
+            write(registry);
+            return true;
+        },
+        priorities() {
+            return read().priorities;
+        },
+        setPriority(path, priority) {
+            if (!isPriority(priority)) {
+                throw new VerseWorkspaceError(`priority must be one of ${VERSE_ROOT_PRIORITIES.join(', ')}`);
+            }
+            // A priority is an ordering hint over a path, so the path only has to be
+            // a legal, canonical path — NOT enrolled, and NOT existing. Ranking a
+            // repo does not reach it, and enrolling it later must find the rank
+            // already there rather than silently dropped.
+            const check = checkWorkspaceRootPath(path, opts.artifactsRoot);
+            if (!check.ok)
+                throw new VerseWorkspaceError(check.error);
+            const registry = read();
+            if (priority === VERSE_DEFAULT_ROOT_PRIORITY)
+                delete registry.priorities[check.path];
+            else
+                registry.priorities[check.path] = priority;
+            write(registry);
+            return registry.priorities;
+        },
+        focusSectionId() {
+            return read().focusSectionId;
+        },
+        setFocusSection(id) {
+            const registry = read();
+            if (id === null) {
+                registry.focusSectionId = null;
+            }
+            else {
+                const target = registry.workspaces.find((w) => w.id === id);
+                if (!target)
+                    throw new VerseWorkspaceError(`workspace not found: ${String(id)}`);
+                if (!target.section) {
+                    throw new VerseWorkspaceError(`workspace ${target.name} is not a section`);
+                }
+                registry.focusSectionId = id;
+            }
+            write(registry);
+            return registry.focusSectionId;
+        },
+    };
+}
+/**
+ * Rank the autonomous lane's scope.
+ *
+ * THE INVARIANT, AND THE REASON THIS FUNCTION EXISTS RATHER THAN A FIELD ON
+ * THE WORKSPACE: `entries` is derived from `enrolledRepos` and nothing else
+ * can add to it. Sections and priorities are read to ORDER and GROUP that
+ * list; a repo a section names but enrollment does not carry appears only in
+ * `unenrolledSectionRoots`, which is a disclosure, not a grant.
+ *
+ * Order: focused section first (when a focus is set), then priority, then
+ * name — so the ordering is total and stable rather than dependent on the
+ * registry's insertion order.
+ */
+export function rankAutonomyScope(input) {
+    const sections = input.workspaces.filter((w) => w.section);
+    const focus = input.focusSectionId === null
+        ? null
+        : sections.find((w) => w.id === input.focusSectionId) ?? null;
+    const enrolled = new Set(input.enrolledRepos);
+    const membership = new Map();
+    const unenrolledSectionRoots = [];
+    for (const section of sections) {
+        for (const root of section.roots) {
+            if (!enrolled.has(root.path)) {
+                if (!unenrolledSectionRoots.includes(root.path))
+                    unenrolledSectionRoots.push(root.path);
+                continue;
+            }
+            const list = membership.get(root.path) ?? [];
+            list.push({ id: section.id, name: section.name });
+            membership.set(root.path, list);
+        }
+    }
+    const focusMembers = new Set(focus === null ? [] : focus.roots.map((r) => r.path).filter((p) => enrolled.has(p)));
+    const entries = input.enrolledRepos.map((path) => ({
+        path,
+        name: basename(path) || path,
+        priority: input.priorities[path] ?? VERSE_DEFAULT_ROOT_PRIORITY,
+        sections: membership.get(path) ?? [],
+        outsideFocus: focus !== null && !focusMembers.has(path),
+    }));
+    entries.sort((a, b) => {
+        if (a.outsideFocus !== b.outsideFocus)
+            return a.outsideFocus ? 1 : -1;
+        const rank = VERSE_ROOT_PRIORITY_RANK[a.priority] - VERSE_ROOT_PRIORITY_RANK[b.priority];
+        if (rank !== 0)
+            return rank;
+        return a.name.localeCompare(b.name) || a.path.localeCompare(b.path);
+    });
+    return {
+        focusSectionId: focus?.id ?? null,
+        focusSectionName: focus?.name ?? null,
+        entries,
+        unenrolledSectionRoots,
+    };
+}
+/** `rankAutonomyScope` against the live enrollment registry. Never throws. */
+export function buildAutonomyScopeView(store) {
+    let enrolledRepos = [];
+    try {
+        const snapshot = readEnrollmentRegistry();
+        // A degraded read carries NO repos by construction, which is the honest
+        // answer: we do not know what is enrolled, so we claim nothing is.
+        if (snapshot.state === 'ready')
+            enrolledRepos = snapshot.repos;
+    }
+    catch {
+        enrolledRepos = [];
+    }
+    return rankAutonomyScope({
+        workspaces: store.list(),
+        priorities: store.priorities(),
+        focusSectionId: store.focusSectionId(),
+        enrolledRepos,
+    });
+}
+//# sourceMappingURL=workspaces.js.map

package/dist/core/verse/workspaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../../../src/core/verse/workspaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EACL,SAAS,EACT,SAAS,IAAI,WAAW,EACxB,UAAU,EACV,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,MAAM,EACN,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,wBAAwB,EACxB,qBAAqB,GAQtB,MAAM,YAAY,CAAC;AAEpB,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAC1C,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,eAAe,GAAG,mCAAmC,CAAC;AAE5D,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,GAAG,eAAwB,CAAC;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAeD,SAAS,aAAa;IACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,qBAA2C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;QACxE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QACf,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IAC3B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QAC/C,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,4DAA4D;IAC5D,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,MAAM,EAAE,GAAG,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACnG,OAAO;QACL,EAAE;QACF,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,yBAAyB,CAAC;QAChD,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI;QAClC,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;KAC5E,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,EAAE,CAAC;IAC3C,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnF,IAAI,UAAU,CAAC,MAAM,IAAI,cAAc;YAAE,MAAM;IACjD,CAAC;IACD,MAAM,UAAU,GAAsC,EAAE,CAAC;IACzD,IAAI,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACjE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxE,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACpC,MAAM,cAAc,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC;QACrG,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,CAAC;IACT,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AAChE,CAAC;AAED,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E,SAAS,eAAe,CAAC,MAAc,EAAE,OAAe;IACtD,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAC9E,MAAM,QAAQ,GAAG,OAAO,WAAW,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,MAAM,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7G,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5E,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/E,MAAM,IAAI,OAAO,CAAC;QACpB,CAAC;QACD,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACtB,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzB,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC;gBAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;AACH,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAwB,EACxB,OAAmC,EAAE;IAErC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,mBAAmB,CAAC,qCAAqC,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QAC7C,MAAM,IAAI,mBAAmB,CAAC,gCAAgC,yBAAyB,QAAQ,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,MAAM,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,QAAQ,CAAC;IACrC,OAAO,EAAE,OAAO,EAAE,OAAQ,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,4BAA4B,CAAC,IAAI,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,OAAO,CAAC;AACzE,CAAC;AAOD,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAC3B,KAAwB,EACxB,OAA0B,EAAE;IAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC/B,MAAM,OAAO,GAAG,KAAK,KAAK,CAAC,CAAC;QAC5B,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI;YAC5B,OAAO;YACP,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC;YAC7B,kDAAkD;YAClD,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC;YAC9B,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC;YAC1B,SAAS,EAAE,OAAO,IAAI,SAAS;SAChC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,QAAoC,EAAE,MAAe;IAC7E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,0CAA0C;YAC/F,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;YAC1F,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CACR,iBAAiB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC7D,oGAAoG,CACrG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AA2BD,MAAM,UAAU,yBAAyB,CAAC,OAAmC,EAAE;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;IAE/F,SAAS,IAAI;QACX,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,aAAa,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,GAAG,CAAC,MAAM,GAAG,kBAAkB;gBAAE,OAAO,aAAa,EAAE,CAAC;YAC5D,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,mDAAmD;YACnD,OAAO,aAAa,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,SAAS,KAAK,CAAC,QAA2B;QACxC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IAED,SAAS,SAAS,CAAC,GAAY;QAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YACjC,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,cAAc,aAAa,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,OAAO,CAAC,KAAoB;QACnC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAC3D,IAAI;YACJ,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI;YAC5B,OAAO,EAAE,KAAK,KAAK,CAAC;SACrB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI;QAEV,IAAI;YACF,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC;QAC3B,CAAC;QAED,GAAG,CAAC,EAAU;YACZ,IAAI,OAAO,EAAE,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACxC,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;QAC5D,CAAC;QAED,MAAM,CAAC,IAAY,EAAE,KAAwB,EAAE,OAAO,GAAG,KAAK;YAC5D,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC;YACxB,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;gBACjD,MAAM,IAAI,mBAAmB,CAAC,WAAW,cAAc,aAAa,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAmB;gBAChC,EAAE,EAAE,UAAU,EAAE;gBAChB,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC;gBACrB,KAAK,EAAE,OAAO,CAAC,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBACtD,OAAO,EAAE,OAAO,KAAK,IAAI;gBACzB,SAAS,EAAE,EAAE;gBACb,SAAS,EAAE,EAAE;aACd,CAAC;YACF,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,CAAC,EAAE,EAAE,KAAK;YACd,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAChE,IAAI,KAAK,GAAG,CAAC;gBAAE,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACnF,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAE,CAAC;YAC5C,MAAM,IAAI,GAAmB;gBAC3B,GAAG,OAAO;gBACV,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;gBACtG,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC3E,SAAS,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;aAC/B,CAAC;YACF,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;YAClC,wDAAwD;YACxD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,EAAE;gBAAE,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC;YACzF,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,EAAU;YACf,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAC1C,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YACxD,IAAI,QAAQ,CAAC,cAAc,KAAK,EAAE;gBAAE,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC;YACnE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,UAAU;YACR,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC;QAC3B,CAAC;QAED,WAAW,CAAC,IAAY,EAAE,QAA2B;YACnD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/F,CAAC;YACD,yEAAyE;YACzE,sEAAsE;YACtE,oEAAoE;YACpE,8CAA8C;YAC9C,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YAC/D,IAAI,CAAC,KAAK,CAAC,EAAE;gBAAE,MAAM,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC;YACxB,IAAI,QAAQ,KAAK,2BAA2B;gBAAE,OAAO,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;gBAChF,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;YAChD,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChB,OAAO,QAAQ,CAAC,UAAU,CAAC;QAC7B,CAAC;QAED,cAAc;YACZ,OAAO,IAAI,EAAE,CAAC,cAAc,CAAC;QAC/B,CAAC;QAED,eAAe,CAAC,EAAiB;YAC/B,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC;YACxB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC5D,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACjF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,IAAI,mBAAmB,CAAC,aAAa,MAAM,CAAC,IAAI,mBAAmB,CAAC,CAAC;gBAC7E,CAAC;gBACD,QAAQ,CAAC,cAAc,GAAG,EAAE,CAAC;YAC/B,CAAC;YACD,KAAK,CAAC,QAAQ,CAAC,CAAC;YAChB,OAAO,QAAQ,CAAC,cAAc,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC;AAcD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAA0B;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,KAAK,IAAI;QACzC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC;IAEhE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+C,CAAC;IAC1E,MAAM,sBAAsB,GAAa,EAAE,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxF,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CACpF,CAAC;IAEF,MAAM,OAAO,GAA8B,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,IAAI;QACJ,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI;QAC5B,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,2BAA2B;QAC/D,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QACpC,YAAY,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;KACxD,CAAC,CAAC,CAAC;IAEJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;YAAE,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,wBAAwB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,wBAAwB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACzF,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,cAAc,EAAE,KAAK,EAAE,EAAE,IAAI,IAAI;QACjC,gBAAgB,EAAE,KAAK,EAAE,IAAI,IAAI,IAAI;QACrC,OAAO;QACP,sBAAsB;KACvB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,sBAAsB,CAAC,KAA0B;IAC/D,IAAI,aAAa,GAAa,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,sBAAsB,EAAE,CAAC;QAC1C,wEAAwE;QACxE,mEAAmE;QACnE,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO;YAAE,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,GAAG,EAAE,CAAC;IACrB,CAAC;IACD,OAAO,iBAAiB,CAAC;QACvB,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;QACtC,aAAa;KACd,CAAC,CAAC;AACL,CAAC"}

package/dist/core/web/api.js

@@ -93,6 +93,10 @@ import { handleRunEventsSse, RUN_EVENTS_PATH_RE } from './run-stream.js';
 import { handleVerseApi, isVerseApiPath, verseSessionsDigest, verseSessionsSnapshot } from '../verse/verse-api.js';
 // V2 autonomy control plane (mounted BEFORE handleVerseApi — see handleApi).
 import { handleVerseControlApi, isVerseControlPath } from '../verse/control-api.js';
+// GitHub, reachable from Verse (docs/VERSE-WORKSPACES.md §2) — also BEFORE handleVerseApi.
+import { handleVerseGithubApi, isVerseGithubPath } from '../verse/github-api.js';
+// MCP + per-account CLI management (mounted BEFORE both — see handleApi).
+import { handleVerseMcpApi, isVerseMcpPath } from '../verse/mcp-control-api.js';
 // ---------------------------------------------------------------------------
 // SSE registry — shared across all open SSE connections so server.ts can
 // drain them on close(). Module-level so the close() callback in server.ts
@@ -1953,6 +1957,17 @@ export async function handleApi(req, res, cfg, ctx) {
             });
             return true;
         }
+        // ── /api/verse/mcp[/...] (MCP + per-account CLI management) ─────────────
+        // MUST come before BOTH verse handlers below. isVerseApiPath() matches
+        // every /api/verse/* path and 404s what it does not recognize, and the
+        // control handler's own route Set does not contain these paths — so an
+        // MCP request would never be reached if this sat any later. GETs ride the
+        // read-session boundary; every POST is behind ctx.allowDispatch +
+        // passesMutationGate inside handleVerseMcpApi, including the one that
+        // spawns provider CLIs to read their versions.
+        if (isVerseMcpPath(path)) {
+            return handleVerseMcpApi({ cfg, token: ctx.token, allowDispatch: ctx.allowDispatch, readSession: ctx.readSession }, req, res, path, method);
+        }
         // ── /api/verse/{control,caps,scope,audit,daemon,safety} (V2 control) ────
         // MUST come before the V1 verse handler below: isVerseApiPath() matches
         // every /api/verse/* path and 404s what it does not recognize, so the
@@ -1962,6 +1977,14 @@ export async function handleApi(req, res, cfg, ctx) {
         if (isVerseControlPath(path)) {
             return handleVerseControlApi({ cfg, token: ctx.token, allowDispatch: ctx.allowDispatch, readSession: ctx.readSession }, req, res, path, method);
         }
+        // ── /api/verse/github{,/pr-plan} (docs/VERSE-WORKSPACES.md §2) ──────────
+        // Same ordering rule as the control plane above: the V1 handler below
+        // matches every /api/verse/* path and 404s what it does not recognize.
+        // Both routes are GET-only reads behind the read-session boundary; there
+        // is no POST half, so no dispatch gate is needed here.
+        if (isVerseGithubPath(path)) {
+            return handleVerseGithubApi({ readSession: ctx.readSession }, req, res, path, method);
+        }
         // ── /api/verse/* (Ashlr Verse — src/core/verse/verse-api.ts) ────────────
         // GETs are already behind the read-session boundary (server.ts); POSTs
         // apply ctx.allowDispatch + passesMutationGate inside handleVerseApi.