@bevel-software/platform-core-backend 0.14.0 → 0.19.0

package/dist/modules/tool-manuals/pending-tools.service.js

@@ -0,0 +1,149 @@
+import { PLUGINS_DIR, PLUGIN_MANIFEST_FILE, PLUGIN_MCP_FILE, DEFAULT_BRANCH, pluginOfPath, } from '@bevel-software/platform-shared';
+import { workspaceIdForBranch } from '../../shared/workspace-id.js';
+import { readAt, visibleProposedFiles } from '../../shared/pending-proposals.js';
+import { utcpNamespacePrefix } from '../../shared/utcp-namespace.js';
+import { baseName, normalizeToolManual } from './tool-manuals.service.js';
+import { descriptorsFromMcpJson } from './mcp-json-discovery.js';
+/**
+ * Tools that exist only on an open change request — proposed, not released.
+ *
+ * The exact counterpart of `PendingSkillsService`, and for the same bug: the
+ * catalog is built from the DEFAULT branch, so a tool an agent proposes is
+ * nowhere in the product until somebody merges it — not for the author, who
+ * asked for it, and not for the person who has to approve it. A card here is a
+ * REVIEW surface and nothing more: nothing registers it, nothing calls it, and
+ * the library refuses to open it as a tool page.
+ *
+ * Two declaration surfaces produce a tool, so both produce a proposal:
+ *  - a `.tool` UTCP manual anywhere under the plugins root;
+ *  - a server added to a plugin's `mcp.json` (the authoritative location for
+ *    MCP servers).
+ *
+ * ADDITIONS ONLY. "Added" is judged by the catalog's own identity, the UTCP
+ * NAMESPACE the manual name resolves to: a declaration whose namespace the
+ * default branch already serves is an EDIT of a live tool, and that already has
+ * a home — the tool's own page, which lists the change requests against its
+ * file. Showing it here too would put a second, ghost card beside every tool
+ * under review. The namespace rather than the raw name because that is the
+ * identity `scanDisk` dedups by, and the two are not the same function: an
+ * `mcp.json` server key may carry a `-`, which namespaces to the same `__` as a
+ * `.tool` id's `_`, so `a-b` and `a_b` are one tool as far as the catalog (and
+ * its secret vault) is concerned.
+ *
+ * Who may see a proposal, and how it is read at its own branch, is
+ * `shared/pending-proposals.ts` — one answer for skills and tools alike.
+ */
+export class PendingToolsService {
+    workspaceService;
+    accessControl;
+    toolManuals;
+    workflow;
+    constructor(workspaceService, accessControl, toolManuals, workflow) {
+        this.workspaceService = workspaceService;
+        this.accessControl = accessControl;
+        this.toolManuals = toolManuals;
+        this.workflow = workflow;
+    }
+    async listPendingTools(userEmail) {
+        // The released set, UNFILTERED by the caller's read access — the same
+        // reasoning as the skill surface: a tool someone else can read and this
+        // caller cannot is still released, and counting it as pending would invent
+        // a review that is not happening.
+        let released;
+        try {
+            released = new Set((await this.toolManuals.listAllSummaries()).map((s) => utcpNamespacePrefix(s.name)));
+        }
+        catch {
+            return [];
+        }
+        const proposed = await visibleProposedFiles({
+            workspaceService: this.workspaceService,
+            accessControl: this.accessControl,
+            workflow: this.workflow,
+        }, userEmail, isToolDeclaration);
+        const out = [];
+        for (const { cr, path, content, isAuthor } of proposed) {
+            for (const descriptor of await this.declarationsIn(cr, path, content)) {
+                if (released.has(utcpNamespacePrefix(descriptor.name)))
+                    continue;
+                out.push({
+                    slug: descriptor.slug,
+                    name: descriptor.name,
+                    path: descriptor.path,
+                    type: descriptor.type,
+                    ...(descriptor.description ? { description: descriptor.description } : {}),
+                    plugin: pluginOfPath(descriptor.path),
+                    changeRequestNumber: cr.number,
+                    branch: cr.branch,
+                    authorName: cr.appAuthor?.name ?? cr.author.name ?? 'Someone',
+                    createdAt: cr.createdAt,
+                    isAuthor,
+                });
+            }
+        }
+        // Oldest first, and by name within one request — the request that has been
+        // waiting longest is the one that needs answering, and a list that reorders
+        // as requests arrive moves under the pointer.
+        return out.sort((a, b) => a.createdAt.localeCompare(b.createdAt) || a.name.localeCompare(b.name));
+    }
+    /**
+     * The tools one proposed file declares, parsed exactly as the catalog scanner
+     * would parse it — a `.tool` is one manual, an `mcp.json` is a manual per
+     * server. A file that does not parse declares nothing: a malformed `.tool` is
+     * skipped by the catalog too, and a card for something that will never load
+     * is worse than no card.
+     */
+    async declarationsIn(cr, path, content) {
+        if (!isMcpJson(path)) {
+            let descriptor;
+            try {
+                descriptor = normalizeToolManual(baseName(path), path, content);
+            }
+            catch {
+                return [];
+            }
+            // The filename is only the PROVISIONAL slug the parser needs when the
+            // frontmatter names nothing; the catalog overwrites it with the resolved
+            // manual name and serves that as the route (`scanDisk`). Do the same here
+            // or the two disagree the moment a `.tool` declares its own `id`, or the
+            // moment a filename is not route-safe to begin with (`My Weather.tool`).
+            descriptor.slug = descriptor.name;
+            return [descriptor];
+        }
+        // The plugin's own manifest carries what the portable `mcp.json` may not:
+        // the descriptions and the `local: true` that exempts a localhost server
+        // from the reachability gate. Read at the same branch, best-effort — a
+        // missing manifest costs a sentence, not the card. No separate access
+        // check: this caller already passed the write gate on the `mcp.json`
+        // beside it, which is the plugin folder's own verdict.
+        const pluginFolder = path.slice(`${PLUGINS_DIR}/`.length, -(PLUGIN_MCP_FILE.length + 1));
+        const manifest = await readAt(this.workspaceService, workspaceIdForBranch(DEFAULT_BRANCH), cr.branch, `${PLUGINS_DIR}/${pluginFolder}/${PLUGIN_MANIFEST_FILE}`);
+        return descriptorsFromMcpJson(pluginFolder, content, manifest);
+    }
+}
+/** `Plugins/<…>/mcp.json` — a plugin's MCP server declarations. */
+function isMcpJson(repoRelPath) {
+    const segments = repoRelPath.split('/');
+    return (segments[0] === PLUGINS_DIR &&
+        segments.length >= 3 &&
+        segments[segments.length - 1] === PLUGIN_MCP_FILE);
+}
+/**
+ * Is this touched path something the tool catalog would read?
+ *
+ * A `.tool` anywhere under the plugins root — including one loose at the root,
+ * which the catalog scanner picks up and which therefore has to be reviewable —
+ * or a plugin's `mcp.json`. `Plugins/mcp.json` is not one: there is no plugin
+ * there for its servers to belong to.
+ */
+function isToolDeclaration(repoRelPath) {
+    const segments = repoRelPath.split('/');
+    if (segments[0] !== PLUGINS_DIR || segments.length < 2)
+        return false;
+    const last = segments[segments.length - 1] ?? '';
+    // Case-insensitive, matching the catalog's own walk.
+    if (last.toLowerCase().endsWith('.tool'))
+        return true;
+    return isMcpJson(repoRelPath);
+}
+//# sourceMappingURL=pending-tools.service.js.map

package/dist/modules/tool-manuals/pending-tools.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-tools.service.js","sourceRoot":"","sources":["../../../src/modules/tool-manuals/pending-tools.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,cAAc,EACd,YAAY,GAGb,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAQjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,OAAO,mBAAmB;IAEX;IACA;IACA;IACA;IAJnB,YACmB,gBAAkC,EAClC,aAA6B,EAC7B,WAAyD,EACzD,QAA0B;QAH1B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,kBAAa,GAAb,aAAa,CAAgB;QAC7B,gBAAW,GAAX,WAAW,CAA8C;QACzD,aAAQ,GAAR,QAAQ,CAAkB;IAC1C,CAAC;IAEJ,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QACtC,sEAAsE;QACtE,wEAAwE;QACxE,2EAA2E;QAC3E,kCAAkC;QAClC,IAAI,QAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,GAAG,CAChB,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CACpF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CACzC;YACE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,EACD,SAAS,EACT,iBAAiB,CAClB,CAAC;QAEF,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC;YACvD,KAAK,MAAM,UAAU,IAAI,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBACtE,IAAI,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;oBAAE,SAAS;gBACjE,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1E,MAAM,EAAE,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC;oBACrC,mBAAmB,EAAE,EAAE,CAAC,MAAM;oBAC9B,MAAM,EAAE,EAAE,CAAC,MAAM;oBACjB,UAAU,EAAE,EAAE,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,SAAS;oBAC7D,SAAS,EAAE,EAAE,CAAC,SAAS;oBACvB,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,2EAA2E;QAC3E,4EAA4E;QAC5E,8CAA8C;QAC9C,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpG,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,cAAc,CAC1B,EAAiB,EACjB,IAAY,EACZ,OAAe;QAEf,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,UAAgC,CAAC;YACrC,IAAI,CAAC;gBACH,UAAU,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,sEAAsE;YACtE,yEAAyE;YACzE,0EAA0E;YAC1E,yEAAyE;YACzE,yEAAyE;YACzE,UAAU,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;YAClC,OAAO,CAAC,UAAU,CAAC,CAAC;QACtB,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,uEAAuE;QACvE,sEAAsE;QACtE,qEAAqE;QACrE,uDAAuD;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACzF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC3B,IAAI,CAAC,gBAAgB,EACrB,oBAAoB,CAAC,cAAc,CAAC,EACpC,EAAE,CAAC,MAAM,EACT,GAAG,WAAW,IAAI,YAAY,IAAI,oBAAoB,EAAE,CACzD,CAAC;QACF,OAAO,sBAAsB,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjE,CAAC;CACF;AAED,mEAAmE;AACnE,SAAS,SAAS,CAAC,WAAmB;IACpC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,OAAO,CACL,QAAQ,CAAC,CAAC,CAAC,KAAK,WAAW;QAC3B,QAAQ,CAAC,MAAM,IAAI,CAAC;QACpB,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,eAAe,CAClD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,WAAmB;IAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,qDAAqD;IACrD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,SAAS,CAAC,WAAW,CAAC,CAAC;AAChC,CAAC"}

package/dist/modules/tool-manuals/tool-delete.service.d.ts

@@ -0,0 +1,135 @@
+import { type AuthUser } from '@bevel-software/platform-shared';
+import type { WorkspaceService } from '../workspace/workspace.service.js';
+import type { IAccessControl } from '../access/access-control.interface.js';
+import type { IFsProbe } from '../../shared/fs.contract.js';
+import type { ISkillService } from '../skills/skills.contract.js';
+import type { IPluginIndexService } from '../plugins/plugins.contract.js';
+import type { PluginSource } from '../plugins/discovery/plugin-source.js';
+import type { ISecretsVaultService } from '../secrets-vault/secrets-vault.contract.js';
+import type { IToolManualService } from './tool-manuals.contract.js';
+/**
+ * Deleting ONE tool — a `.tool` manual or one `mcp.json` server entry — from
+ * its tool page, by an owner of the plugin that holds it.
+ *
+ * The OWNER verb, and the same verdict the plugin delete uses: `canOwner` on
+ * the plugin's folder (owner lists only, no admin rescue). A tool inherits its
+ * folder's rules, so the people who may delete the whole plugin are exactly
+ * the people who may delete one thing in it; a writer who merely edits the
+ * server does not get to make it vanish.
+ *
+ * What depends on the tool is said BEFORE it goes ({@link dependents}): the
+ * skills whose `allowed-tools` name it, the other plugins that carry it, and
+ * how many stored secrets sit under its name. Deletion then removes the
+ * definition in one commit and wipes those secrets — every user's, because a
+ * vault row under a namespace nothing declares is a credential nobody can see
+ * or remove, and a later tool reusing the name would inherit it. The skills'
+ * files are NOT touched: their `allowed-tools` entry becomes a dangling name,
+ * which the skill page already surfaces.
+ *
+ * One kind of row is deliberately left behind: a key whose remainder starts
+ * with `_`, which the UTCP encoding makes indistinguishable from a longer
+ * tool's (see `isKeyInNamespace`). It is neither counted nor wiped, so the
+ * dialog's number stays true to what goes.
+ */
+export interface ToolDependents {
+    slug: string;
+    name: string;
+    /** `manual` — a `.tool` file; `server` — an entry in a plugin's mcp.json. */
+    source: 'manual' | 'server';
+    /** The plugin holding the tool — where the page returns after a delete. */
+    plugin: {
+        name: string;
+        displayName: string;
+    };
+    /** Skills (the caller can read) whose `allowed-tools` name this tool. */
+    skills: {
+        name: string;
+        path: string;
+    }[];
+    /** OTHER plugins that carry the tool — linking its folder, or declaring the same server. */
+    plugins: {
+        name: string;
+        displayName: string;
+    }[];
+    /** Stored values and shared client secrets under the tool's name, every user's. */
+    storedKeys: number;
+    /** Per-user sign-ins under the tool's name. */
+    signIns: number;
+}
+export declare class ToolDeleteError extends Error {
+    readonly status: number;
+    constructor(message: string, status: number);
+}
+interface CommitDriver {
+    runPendingCommit(workspaceId: string, branch: string, targetPath: string, user: AuthUser, opts?: {
+        systemAuthorized?: boolean;
+    }): Promise<void>;
+    /** Whether a commit is sitting on the local branch unpushed — see {@link ToolDeleteService.deleteManual}. */
+    hasUnpushedCommits(workspaceId: string): Promise<boolean>;
+}
+/**
+ * Whether a skill's `allowed-tools` entry names the tool — the same rule the
+ * library applies (`neededToolsFor`): the manual name itself, or one of its
+ * tools spelled `<manual>_<tool>` / `<manual>.<tool>`, case-insensitively.
+ */
+export declare function allowedToolNames(entry: string, toolName: string): boolean;
+export declare class ToolDeleteService {
+    private readonly workspaceService;
+    private readonly commits;
+    private readonly accessControl;
+    private readonly toolManuals;
+    private readonly skills;
+    private readonly pluginIndex;
+    private readonly source;
+    private readonly vault;
+    private readonly kbDirName;
+    private readonly disk;
+    constructor(workspaceService: WorkspaceService, commits: CommitDriver, accessControl: IAccessControl, toolManuals: IToolManualService, skills: ISkillService, pluginIndex: IPluginIndexService, source: PluginSource, vault: Pick<ISecretsVaultService, 'countNamespace' | 'removeNamespace'>, kbDirName: string, disk: IFsProbe);
+    /** What deleting `slug` would affect. Owner-gated like the delete itself. */
+    dependents(userEmail: string, slug: string): Promise<ToolDependents>;
+    /** Delete the definition in one commit, then wipe its secrets. Returns the plugin it lived in. */
+    deleteTool(user: AuthUser, slug: string): Promise<{
+        plugin: string;
+    }>;
+    /**
+     * Readable tool → the plugin holding it → the owner verdict on that plugin.
+     * An unreadable tool is a 404 identical to an unknown one; a readable tool
+     * the caller does not own is a 403 — they can already see it exists.
+     */
+    private authorize;
+    /** The plugin whose folder holds `toolPath` — the deepest one — if the caller owns it. */
+    private owningPlugin;
+    /**
+     * Wipe the tool's namespace, RETRIED — the definition is already gone at
+     * HEAD and cannot come back, so a vault that blinks once must not be what
+     * leaves rows under a name nothing declares (a credential nobody can see or
+     * remove, and one a later tool reusing the name would inherit).
+     *
+     * If it still will not go, the caller hears so in those words: the delete
+     * itself happened, and the one action left is a manual one.
+     */
+    private wipeSecrets;
+    private dependentSkills;
+    /**
+     * Other plugins that carry this tool: one linking a root the tool sits under,
+     * or one whose servers declare the same name (a registry profile shared
+     * across bundles). The tool's own plugin is not a dependent — it is the home.
+     */
+    private carryingPlugins;
+    /**
+     * Park-then-commit, as the plugin delete does: the file is renamed to a
+     * dot-prefixed sibling the scanner ignores, the deletion committed, and only
+     * a landed commit lets the parked bytes go. A refused commit renames it
+     * back, so a failed delete is a no-op.
+     */
+    private deleteManual;
+    /**
+     * Remove one server from BOTH files that describe it — the entry in
+     * `mcp.json` and its half in `plugin.json`'s extensions block — and commit
+     * them together, the way a server edit does. Leaving the extensions half
+     * behind would re-declare auth for a server that no longer exists.
+     */
+    private deleteServer;
+}
+export {};
+//# sourceMappingURL=tool-delete.service.d.ts.map

package/dist/modules/tool-manuals/tool-delete.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-delete.service.d.ts","sourceRoot":"","sources":["../../../src/modules/tool-manuals/tool-delete.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAKL,KAAK,QAAQ,EACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAG1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,mBAAmB,EAAsB,MAAM,gCAAgC,CAAC;AAC9F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,KAAK,EAAE,kBAAkB,EAAqB,MAAM,4BAA4B,CAAC;AAExF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,2EAA2E;IAC3E,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,yEAAyE;IACzE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACzC,4FAA4F;IAC5F,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjD,mFAAmF;IACnF,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,eAAgB,SAAQ,KAAK;IAGtC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBADvB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM;CAK1B;AAED,UAAU,YAAY;IACpB,gBAAgB,CACd,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,QAAQ,EACd,IAAI,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE,GACpC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,6GAA6G;IAC7G,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAUD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAIzE;AAYD,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI;gBATJ,gBAAgB,EAAE,gBAAgB,EAClC,OAAO,EAAE,YAAY,EACrB,aAAa,EAAE,cAAc,EAC7B,WAAW,EAAE,kBAAkB,EAC/B,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,mBAAmB,EAChC,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,GAAG,iBAAiB,CAAC,EACvE,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,QAAQ;IAGjC,6EAA6E;IACvE,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAmB1E,kGAAkG;IAC5F,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAyB3E;;;;OAIG;YACW,SAAS;IAevB,0FAA0F;YAC5E,YAAY;IAgB1B;;;;;;;;OAQG;YACW,WAAW;YAmBX,eAAe;IAe7B;;;;OAIG;YACW,eAAe;IAmD7B;;;;;OAKG;YACW,YAAY;IA2B1B;;;;;OAKG;YACW,YAAY;CAkD3B"}

package/dist/modules/tool-manuals/tool-delete.service.js

@@ -0,0 +1,303 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { DEFAULT_BRANCH, HEXIS_EXTENSION_NS, PLUGIN_MANIFEST_FILE, PLUGIN_MCP_FILE, } from '@bevel-software/platform-shared';
+import { workspaceIdForBranch } from '../../shared/workspace-id.js';
+import { utcpNamespacePrefix } from '../../shared/utcp-namespace.js';
+export class ToolDeleteError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+        this.name = 'ToolDeleteError';
+    }
+}
+/**
+ * Whether a skill's `allowed-tools` entry names the tool — the same rule the
+ * library applies (`neededToolsFor`): the manual name itself, or one of its
+ * tools spelled `<manual>_<tool>` / `<manual>.<tool>`, case-insensitively.
+ */
+export function allowedToolNames(entry, toolName) {
+    const e = entry.toLowerCase();
+    const n = toolName.toLowerCase();
+    return e === n || e.startsWith(`${n}_`) || e.startsWith(`${n}.`);
+}
+/**
+ * Own-property membership. `name in obj` answers for the PROTOTYPE too, so a
+ * tool called `toString` or `constructor` would look declared by every
+ * `mcpServers` map on the tree — a dependent list naming unrelated plugins,
+ * and a delete that proceeds against a file the server is no longer in.
+ */
+function hasOwn(obj, name) {
+    return Object.prototype.hasOwnProperty.call(obj, name);
+}
+export class ToolDeleteService {
+    workspaceService;
+    commits;
+    accessControl;
+    toolManuals;
+    skills;
+    pluginIndex;
+    source;
+    vault;
+    kbDirName;
+    disk;
+    constructor(workspaceService, commits, accessControl, toolManuals, skills, pluginIndex, source, vault, kbDirName, disk) {
+        this.workspaceService = workspaceService;
+        this.commits = commits;
+        this.accessControl = accessControl;
+        this.toolManuals = toolManuals;
+        this.skills = skills;
+        this.pluginIndex = pluginIndex;
+        this.source = source;
+        this.vault = vault;
+        this.kbDirName = kbDirName;
+        this.disk = disk;
+    }
+    /** What deleting `slug` would affect. Owner-gated like the delete itself. */
+    async dependents(userEmail, slug) {
+        const { tool, source, plugin, folder } = await this.authorize(userEmail, slug);
+        const [skills, plugins, secrets] = await Promise.all([
+            this.dependentSkills(userEmail, tool.name),
+            this.carryingPlugins(userEmail, tool, folder, plugin),
+            this.vault.countNamespace(utcpNamespacePrefix(tool.name)),
+        ]);
+        return {
+            slug: tool.slug,
+            name: tool.name,
+            source,
+            plugin: { name: plugin.name, displayName: plugin.displayName },
+            skills,
+            plugins,
+            storedKeys: secrets.keys,
+            signIns: secrets.signIns,
+        };
+    }
+    /** Delete the definition in one commit, then wipe its secrets. Returns the plugin it lived in. */
+    async deleteTool(user, slug) {
+        const { tool, source, plugin, folder } = await this.authorize(user.email, slug);
+        if (!plugin.linksAreManaged) {
+            // A plugin read from an external format is edited in its own repository;
+            // removing its file here would be undone by the next sync, or worse.
+            throw new ToolDeleteError("This tool's plugin is managed in another format — delete it there.", 422);
+        }
+        const wsId = workspaceIdForBranch(DEFAULT_BRANCH);
+        await this.workspaceService.getOrCreateForBranch(DEFAULT_BRANCH);
+        const kbRoot = path.join(await this.workspaceService.getWorkspacePath(wsId), this.kbDirName);
+        if (source === 'manual')
+            await this.deleteManual(user, wsId, kbRoot, tool);
+        else
+            await this.deleteServer(user, wsId, kbRoot, tool, folder);
+        // The definition is gone at HEAD; the catalogs learn now rather than at
+        // their TTL, so the cards, the sidebar and the agent's tool list agree on
+        // the very next request.
+        this.toolManuals.invalidate();
+        this.pluginIndex.invalidate();
+        // Only after the commit landed: a refused delete must leave the tool
+        // exactly as it was, credentials included.
+        await this.wipeSecrets(tool);
+        return { plugin: plugin.name };
+    }
+    /**
+     * Readable tool → the plugin holding it → the owner verdict on that plugin.
+     * An unreadable tool is a 404 identical to an unknown one; a readable tool
+     * the caller does not own is a 403 — they can already see it exists.
+     */
+    async authorize(userEmail, slug) {
+        const tool = (await this.toolManuals.listAccessible(userEmail)).find((t) => t.slug === slug);
+        if (!tool)
+            throw new ToolDeleteError('No such tool.', 404);
+        const source = tool.path.endsWith(`/${PLUGIN_MCP_FILE}`)
+            ? 'server'
+            : tool.path.toLowerCase().endsWith('.tool')
+                ? 'manual'
+                : null;
+        const owned = await this.owningPlugin(userEmail, tool.path);
+        if (!source || !owned) {
+            throw new ToolDeleteError("Only the owners of this tool's plugin can delete it.", 403);
+        }
+        return { tool, source, ...owned };
+    }
+    /** The plugin whose folder holds `toolPath` — the deepest one — if the caller owns it. */
+    async owningPlugin(userEmail, toolPath) {
+        let best = null;
+        for (const plugin of await this.pluginIndex.catalog()) {
+            for (const folder of plugin.folders) {
+                if (!toolPath.startsWith(`${folder}/`))
+                    continue;
+                if (!best || folder.length > best.folder.length)
+                    best = { plugin, folder };
+            }
+        }
+        if (!best)
+            return null;
+        const owner = await this.accessControl.canOwner(workspaceIdForBranch(DEFAULT_BRANCH), userEmail, best.folder);
+        return owner ? best : null;
+    }
+    /**
+     * Wipe the tool's namespace, RETRIED — the definition is already gone at
+     * HEAD and cannot come back, so a vault that blinks once must not be what
+     * leaves rows under a name nothing declares (a credential nobody can see or
+     * remove, and one a later tool reusing the name would inherit).
+     *
+     * If it still will not go, the caller hears so in those words: the delete
+     * itself happened, and the one action left is a manual one.
+     */
+    async wipeSecrets(tool) {
+        let last;
+        for (let attempt = 0; attempt < 3; attempt++) {
+            try {
+                await this.vault.removeNamespace(utcpNamespacePrefix(tool.name));
+                return;
+            }
+            catch (err) {
+                last = err;
+                if (attempt < 2)
+                    await new Promise((resolve) => setTimeout(resolve, 50 * (attempt + 1)));
+            }
+        }
+        const why = last instanceof Error ? last.message : String(last);
+        throw new ToolDeleteError(`The ${tool.name} tool was deleted, but its stored credentials could not be wiped (${why}). ` +
+            'Remove them from Secrets before anything reuses the name.', 500);
+    }
+    async dependentSkills(userEmail, toolName) {
+        // The caller's readable skills only: naming a skill somebody cannot read
+        // would confirm it exists. `allowed-tools` has no bulk read, so one load
+        // per skill; a skill that fails to load is not a dependent we can vouch for.
+        const readable = await this.skills.listSkills(userEmail);
+        const loaded = await Promise.all(readable.map(async (s) => {
+            const got = await this.skills.getSkill(userEmail, s.name).catch(() => null);
+            const allowed = got?.ok && got.kind === 'skill' ? (got.skill.allowedTools ?? []) : [];
+            return allowed.some((e) => allowedToolNames(e, toolName)) ? { name: s.name, path: s.path } : null;
+        }));
+        return loaded.filter((s) => s !== null);
+    }
+    /**
+     * Other plugins that carry this tool: one linking a root the tool sits under,
+     * or one whose servers declare the same name (a registry profile shared
+     * across bundles). The tool's own plugin is not a dependent — it is the home.
+     */
+    async carryingPlugins(userEmail, tool, folder, home) {
+        const wsId = workspaceIdForBranch(DEFAULT_BRANCH);
+        let discovered;
+        try {
+            await this.workspaceService.getOrCreateForBranch(DEFAULT_BRANCH);
+            const kbRoot = path.join(await this.workspaceService.getWorkspacePath(wsId), this.kbDirName);
+            discovered = await this.source.discover(kbRoot);
+        }
+        catch (err) {
+            // A partial answer is the one thing this list must never be: "no other
+            // plugin carries it" is what the owner deletes ON, so a scan that did
+            // not finish refuses rather than reassures.
+            throw new ToolDeleteError(`Couldn't read which plugins carry this tool (${err instanceof Error ? err.message : String(err)}) — nothing was deleted.`, 503);
+        }
+        if (discovered.unreadable.length > 0) {
+            // A HOLE is a plugin that exists and could not be read. Listing the
+            // rest as if it were the whole answer would let the dialog vouch for a
+            // tree it never saw.
+            throw new ToolDeleteError(`${discovered.unreadable.length === 1 ? 'A plugin' : `${discovered.unreadable.length} plugins`} could not be read, so what carries this tool cannot be listed in full — nothing was deleted.`, 503);
+        }
+        const catalog = await this.pluginIndex.catalog();
+        const candidates = discovered.plugins.filter((p) => {
+            if (p.folder === folder || p.name === home.name)
+                return false;
+            const links = p.linkedRoots.some((r) => tool.path === r || tool.path.startsWith(`${r.replace(/\/+$/, '')}/`));
+            const declares = p.mcpServers !== null && hasOwn(p.mcpServers, tool.name);
+            return links || declares;
+        });
+        // Named only to a caller who can read the plugin's folder: a dependent
+        // list is not a side door onto which plugins exist.
+        const readable = await Promise.all(candidates.map((p) => this.accessControl.canRead(wsId, userEmail, p.folder)));
+        const out = new Map();
+        candidates.forEach((p, i) => {
+            if (!readable[i])
+                return;
+            const entry = catalog.find((c) => c.name === p.name);
+            out.set(p.name, { name: p.name, displayName: entry?.displayName ?? p.displayName });
+        });
+        return [...out.values()];
+    }
+    /**
+     * Park-then-commit, as the plugin delete does: the file is renamed to a
+     * dot-prefixed sibling the scanner ignores, the deletion committed, and only
+     * a landed commit lets the parked bytes go. A refused commit renames it
+     * back, so a failed delete is a no-op.
+     */
+    async deleteManual(user, wsId, kbRoot, tool) {
+        const abs = path.join(kbRoot, ...tool.path.split('/'));
+        if ((await this.disk.lstatOrNull(abs))?.isFile() !== true)
+            throw new ToolDeleteError('No such tool.', 404);
+        const parked = path.join(path.dirname(abs), `.deleting-${randomUUID()}`);
+        await fs.rename(abs, parked);
+        try {
+            await this.commits.runPendingCommit(wsId, DEFAULT_BRANCH, `${this.kbDirName}/${tool.path}`, user, {
+                // The route authorized the delete with the owner verb; see class note.
+                systemAuthorized: true,
+            });
+        }
+        catch (err) {
+            // Restore ONLY when nothing landed. The pipeline commits locally and
+            // THEN pushes, so a refused push leaves a commit that already removed
+            // the file: renaming it back there would leave the working tree dirty
+            // against HEAD — re-adding, on the next commit, the very tool this one
+            // deleted, which is the state the workflow layer's own recovery
+            // misreads (McpServerEditService refuses to touch the tree for the same
+            // reason). A probe that itself fails counts as "a commit may exist": the
+            // park survives, dot-prefixed and invisible to the scanner, for a person
+            // to clear — a delete must never destroy more than it names.
+            const committed = await this.commits.hasUnpushedCommits(wsId).catch(() => true);
+            if (!committed)
+                await fs.rename(parked, abs).catch(() => { });
+            throw err;
+        }
+        await fs.rm(parked, { force: true }).catch(() => { });
+    }
+    /**
+     * Remove one server from BOTH files that describe it — the entry in
+     * `mcp.json` and its half in `plugin.json`'s extensions block — and commit
+     * them together, the way a server edit does. Leaving the extensions half
+     * behind would re-declare auth for a server that no longer exists.
+     */
+    async deleteServer(user, wsId, kbRoot, tool, folder) {
+        const pluginDir = path.join(kbRoot, ...path.posix.dirname(tool.path).split('/'));
+        const mcpAbs = path.join(pluginDir, PLUGIN_MCP_FILE);
+        const manifestAbs = path.join(pluginDir, PLUGIN_MANIFEST_FILE);
+        const mcp = await this.disk.readJsonObject(mcpAbs);
+        const servers = mcp?.mcpServers;
+        if (!servers || typeof servers !== 'object' || Array.isArray(servers) || !hasOwn(servers, tool.name)) {
+            throw new ToolDeleteError('No such server.', 404);
+        }
+        delete servers[tool.name];
+        const manifest = await this.disk.readJsonObject(manifestAbs);
+        const extServers = manifest?.extensions?.[HEXIS_EXTENSION_NS]?.mcpServers;
+        const touchManifest = manifest !== null &&
+            extServers !== null &&
+            typeof extServers === 'object' &&
+            !Array.isArray(extServers) &&
+            hasOwn(extServers, tool.name);
+        if (touchManifest)
+            delete extServers[tool.name];
+        const [mcpBefore, manifestBefore] = await Promise.all([
+            fs.readFile(mcpAbs, 'utf8'),
+            touchManifest ? fs.readFile(manifestAbs, 'utf8') : Promise.resolve(null),
+        ]);
+        try {
+            await fs.writeFile(mcpAbs, `${JSON.stringify(mcp, null, 2)}\n`, 'utf8');
+            if (touchManifest)
+                await fs.writeFile(manifestAbs, `${JSON.stringify(manifest, null, 2)}\n`, 'utf8');
+        }
+        catch (err) {
+            await fs.writeFile(mcpAbs, mcpBefore, 'utf8').catch(() => { });
+            if (manifestBefore !== null)
+                await fs.writeFile(manifestAbs, manifestBefore, 'utf8').catch(() => { });
+            throw err;
+        }
+        // Commit-stage failures propagate as-is: the pipeline may already hold a
+        // local commit, and rewriting the tree under it is the state its own
+        // recovery misreads (same contract as McpServerEditService).
+        await this.commits.runPendingCommit(wsId, DEFAULT_BRANCH, `${this.kbDirName}/${folder}`, user, {
+            systemAuthorized: true,
+        });
+    }
+}
+//# sourceMappingURL=tool-delete.service.js.map

package/dist/modules/tool-manuals/tool-delete.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-delete.service.js","sourceRoot":"","sources":["../../../src/modules/tool-manuals/tool-delete.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,GAEhB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAmDrE,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAG7B;IAFX,YACE,OAAe,EACN,MAAc;QAEvB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,WAAM,GAAN,MAAM,CAAQ;QAGvB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAsBD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,QAAgB;IAC9D,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,SAAS,MAAM,CAAC,GAAW,EAAE,IAAY;IACvC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,OAAO,iBAAiB;IAET;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IAVnB,YACmB,gBAAkC,EAClC,OAAqB,EACrB,aAA6B,EAC7B,WAA+B,EAC/B,MAAqB,EACrB,WAAgC,EAChC,MAAoB,EACpB,KAAuE,EACvE,SAAiB,EACjB,IAAc;QATd,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,YAAO,GAAP,OAAO,CAAc;QACrB,kBAAa,GAAb,aAAa,CAAgB;QAC7B,gBAAW,GAAX,WAAW,CAAoB;QAC/B,WAAM,GAAN,MAAM,CAAe;QACrB,gBAAW,GAAX,WAAW,CAAqB;QAChC,WAAM,GAAN,MAAM,CAAc;QACpB,UAAK,GAAL,KAAK,CAAkE;QACvE,cAAS,GAAT,SAAS,CAAQ;QACjB,SAAI,GAAJ,IAAI,CAAU;IAC9B,CAAC;IAEJ,6EAA6E;IAC7E,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,IAAY;QAC9C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnD,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC;YAC1C,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC;YACrD,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC1D,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM;YACN,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE;YAC9D,MAAM;YACN,OAAO;YACP,UAAU,EAAE,OAAO,CAAC,IAAI;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC;IACJ,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,UAAU,CAAC,IAAc,EAAE,IAAY;QAC3C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5B,yEAAyE;YACzE,qEAAqE;YACrE,MAAM,IAAI,eAAe,CAAC,oEAAoE,EAAE,GAAG,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAE7F,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;;YACtE,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAE/D,wEAAwE;QACxE,0EAA0E;QAC1E,yBAAyB;QACzB,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QAC9B,qEAAqE;QACrE,2CAA2C;QAC3C,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,IAAY;QACrD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC7F,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,eAAe,EAAE,CAAC;YACtD,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACzC,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,eAAe,CAAC,sDAAsD,EAAE,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACpC,CAAC;IAED,0FAA0F;IAClF,KAAK,CAAC,YAAY,CACxB,SAAiB,EACjB,QAAgB;QAEhB,IAAI,IAAI,GAA0D,IAAI,CAAC;QACvE,KAAK,MAAM,MAAM,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;oBAAE,SAAS;gBACjD,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM;oBAAE,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC7E,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,oBAAoB,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9G,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7B,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,WAAW,CAAC,IAAuB;QAC/C,IAAI,IAAa,CAAC;QAClB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,GAAG,CAAC;gBACX,IAAI,OAAO,GAAG,CAAC;oBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,YAAY,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,IAAI,eAAe,CACvB,OAAO,IAAI,CAAC,IAAI,qEAAqE,GAAG,KAAK;YAC3F,2DAA2D,EAC7D,GAAG,CACJ,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,QAAgB;QAC/D,yEAAyE;QACzE,yEAAyE;QACzE,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAG,GAAG,EAAE,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACpG,CAAC,CAAC,CACH,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAC/E,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,eAAe,CAC3B,SAAiB,EACjB,IAAuB,EACvB,MAAc,EACd,IAAwB;QAExB,MAAM,IAAI,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,UAAU,CAAC;QACf,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7F,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,sEAAsE;YACtE,4CAA4C;YAC5C,MAAM,IAAI,eAAe,CACvB,gDAAgD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAC1H,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,oEAAoE;YACpE,uEAAuE;YACvE,qBAAqB;YACrB,MAAM,IAAI,eAAe,CACvB,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,UAAU,+FAA+F,EAC7L,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACjD,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YAC9D,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9G,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1E,OAAO,KAAK,IAAI,QAAQ,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,uEAAuE;QACvE,oDAAoD;QACpD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAC7E,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,GAAG,EAAiD,CAAC;QACrE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC1B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO;YACzB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;YACrD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,YAAY,CAAC,IAAc,EAAE,IAAY,EAAE,MAAc,EAAE,IAAuB;QAC9F,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI;YAAE,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAC3G,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,aAAa,UAAU,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE;gBAChG,uEAAuE;gBACvE,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qEAAqE;YACrE,sEAAsE;YACtE,sEAAsE;YACtE,uEAAuE;YACvE,gEAAgE;YAChE,wEAAwE;YACxE,yEAAyE;YACzE,yEAAyE;YACzE,6DAA6D;YAC7D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAChF,IAAI,CAAC,SAAS;gBAAE,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,YAAY,CACxB,IAAc,EACd,IAAY,EACZ,MAAc,EACd,IAAuB,EACvB,MAAc;QAEd,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,GAAG,EAAE,UAAU,CAAC;QAChC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrG,MAAM,IAAI,eAAe,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,OAAQ,OAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAC7D,MAAM,UAAU,GACb,QAAQ,EAAE,UAAkD,EAAE,CAAC,kBAAkB,CAGnF,EAAE,UAAU,CAAC;QACd,MAAM,aAAa,GACjB,QAAQ,KAAK,IAAI;YACjB,UAAU,KAAK,IAAI;YACnB,OAAO,UAAU,KAAK,QAAQ;YAC9B,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1B,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,aAAa;YAAE,OAAQ,UAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE7E,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpD,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YAC3B,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;SACzE,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACxE,IAAI,aAAa;gBAAE,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC9D,IAAI,cAAc,KAAK,IAAI;gBAAE,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrG,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,yEAAyE;QACzE,qEAAqE;QACrE,6DAA6D;QAC7D,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,EAAE,EAAE,IAAI,EAAE;YAC7F,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;IACL,CAAC;CACF"}