@brainmcp/brainmcp 0.1.11 → 0.1.13

package/dist/runtime/hook-dispatcher.js

@@ -0,0 +1,381 @@
+import crypto from 'node:crypto';
+import { filterRelativePaths } from '../lib/cli-contracts.js';
+import { emitHostOutput } from '../hooks/adapters.js';
+import { markSessionNudged, queueSessionCapture, recordSessionEvent } from './session.js';
+import { logRuntimeEvent } from './diagnostics.js';
+import { readPreferences, resolveStateDir } from './storage.js';
+import { pruneLocalState } from './retention.js';
+import { withRequestDeadline } from '../lib/http.js';
+import { captureTriggerForEvent, captureProjectKey, buildDigestPayload, collectGitMetadata, isCaptureEligible, isStopEvent, readProjectCaptureRestrictions, resolveCaptureWorkspaceId, serializeDigestPayload, } from './capture.js';
+import { canEnqueueCapture, flushCaptureQueue } from './flush.js';
+import { isSessionStartEvent, isUserPromptEvent, loginOrientationMessage, safeSessionStartOrientation, readProjectWorkspaceId, } from './orient.js';
+import { ApiClient } from '../lib/api-client.js';
+import { createDefaultCredentialStore } from '../lib/credentials.js';
+export const MAX_STDIN_BYTES = 1024 * 1024; // 1 MB
+export const DEFAULT_EVENT_TIMEOUT_MS = 1000;
+export const SESSION_END_TIMEOUT_MS = 3000;
+function isSessionEndEvent(event) {
+    return event === 'SessionEnd' || event === 'sessionEnd' || event === 'session_end';
+}
+function editedPathFromEvent(event) {
+    if (!event.cwd || !event.toolInput || typeof event.toolInput !== 'object')
+        return undefined;
+    const input = event.toolInput;
+    const candidate = [input.file_path, input.filePath, input.path].find((value) => typeof value === 'string' && value.trim().length > 0);
+    return candidate ? filterRelativePaths([candidate], event.cwd)[0] : undefined;
+}
+/**
+ * Strict bounded stdin reader with length check.
+ */
+export async function readBoundedStdin(stream = process.stdin, maxBytes = MAX_STDIN_BYTES, signal) {
+    return new Promise((resolve, reject) => {
+        let totalBytes = 0;
+        const chunks = [];
+        let settled = false;
+        const cleanup = () => {
+            stream.removeListener('data', data);
+            stream.removeListener('end', end);
+            stream.removeListener('error', fail);
+            signal?.removeEventListener('abort', abort);
+            stream.pause();
+        };
+        const fail = (err) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            reject(err);
+        };
+        const abort = () => fail(new Error('Hook input timed out'));
+        const data = (chunk) => {
+            const buf = typeof chunk === 'string' ? Buffer.from(chunk) : chunk;
+            totalBytes += buf.length;
+            if (totalBytes > maxBytes) {
+                fail(new Error(`Input exceeded maximum size limit of ${maxBytes} bytes`));
+                return;
+            }
+            chunks.push(buf);
+        };
+        const end = () => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            resolve(Buffer.concat(chunks).toString('utf8'));
+        };
+        stream.on('data', data);
+        stream.on('end', end);
+        stream.on('error', fail);
+        signal?.addEventListener('abort', abort, { once: true });
+        if (signal?.aborted)
+            abort();
+    });
+}
+function hostOutput(event, additionalContext) {
+    try {
+        return emitHostOutput(event.client, event, additionalContext);
+    }
+    catch {
+        return {};
+    }
+}
+async function loadRuntimeClient(options) {
+    if (options?.apiClient) {
+        return {
+            apiClient: options.apiClient,
+            creds: options.credentials === undefined ? await options.apiClient.getEffectiveCredentials() : options.credentials,
+        };
+    }
+    try {
+        const { store } = await createDefaultCredentialStore({
+            baseDir: options?.baseDir,
+            warn: () => undefined,
+        });
+        const apiClient = new ApiClient({ store });
+        return { apiClient, creds: await apiClient.getEffectiveCredentials() };
+    }
+    catch {
+        return { apiClient: null, creds: null };
+    }
+}
+/**
+ * Dispatches a normalized HookEvent under deadline/abort control (AHI-053).
+ * Always fails open with empty success on error or timeout.
+ *
+ * Stop/SessionStop never queues or flushes digests (AHI-D03).
+ * Capture queue writes require user-local consent (AHI-D01) and are further
+ * restrictable by project `.brainmcp.json` (AHI-D02).
+ */
+export async function dispatchHookEvent(event, options) {
+    const timeoutMs = options?.timeoutMs ??
+        (isSessionEndEvent(event.event)
+            ? SESSION_END_TIMEOUT_MS
+            : DEFAULT_EVENT_TIMEOUT_MS);
+    const controller = new AbortController();
+    const onExternalAbort = () => controller.abort();
+    options?.signal?.addEventListener('abort', onExternalAbort, { once: true });
+    if (options?.signal?.aborted)
+        controller.abort();
+    const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
+    // Keep credential lookup rooted at the Brain home; the pinned account
+    // directory below is only for this event's local state.
+    const credentialOptions = options;
+    try {
+        // Never persist host IDs or share ledgers across hosts/projects. A missing
+        // session ID permits orientation only, never a shared fallback ledger.
+        if ((!event.sessionKey || event.sessionKey === 'default_session') && !isSessionStartEvent(event.event)) {
+            return { handled: false, emptyFallback: true, outputPayload: {} };
+        }
+        event = { ...event, sessionKey: crypto.createHash('sha256').update(JSON.stringify([
+                event.client, event.sessionKey, event.workspaceRoots?.length ? [...event.workspaceRoots].sort() : [event.cwd ?? ''],
+            ])).digest('hex') };
+        options = { ...options, baseDir: resolveStateDir(options?.baseDir) };
+        if (controller.signal.aborted) {
+            throw new Error('Hook dispatch timed out');
+        }
+        const prefs = readPreferences(options?.baseDir);
+        const roots = event.workspaceRoots?.length ? event.workspaceRoots : event.cwd ? [event.cwd] : [];
+        const policies = roots.map(readProjectCaptureRestrictions);
+        const projectWorkspaces = roots.map(readProjectWorkspaceId);
+        const projectPolicy = {
+            captureDisabled: policies.some((policy) => policy.captureDisabled) || projectWorkspaces.some((workspace) => workspace.kind === 'invalid' || (workspace.kind === 'workspace' && workspace.workspaceId !== prefs?.enabledWorkspaceId)),
+            promptsDisabled: policies.some((policy) => policy.promptsDisabled),
+        };
+        const persistPrompts = Boolean(prefs?.consent?.captureEnabled &&
+            prefs?.consent?.includePrompts &&
+            !projectPolicy.promptsDisabled);
+        const captureRuntimeEnabled = Boolean(prefs?.consent?.captureEnabled && !projectPolicy.captureDisabled);
+        // Stop is a hard zero-persistence and zero-egress boundary. StopNudge is a
+        // separate, explicitly installed command and only reads bounded local state.
+        if (event.event !== 'StopNudge' && isStopEvent(event.event, event.stopHookActive)) {
+            logRuntimeEvent('info', 'hook_stop_ignored', { event: event.event, sessionKey: event.sessionKey, client: event.client }, options?.baseDir);
+            return {
+                handled: true,
+                emptyFallback: false,
+                outputPayload: hostOutput(event),
+            };
+        }
+        // Init installs dormant lifecycle boundaries so a later capture opt-in can
+        // work without rewriting every host config. Until then they persist no
+        // prompt, tool, path, summary, or session ledger data. The nudge ledger is
+        // separately tagged in the managed command and never enables capture.
+        if (!isSessionStartEvent(event.event) &&
+            !captureRuntimeEnabled &&
+            !event.nudgeLedger &&
+            event.event !== 'StopNudge') {
+            return {
+                handled: true,
+                emptyFallback: false,
+                outputPayload: hostOutput(event),
+            };
+        }
+        // Orientation-only SessionStart must not create a session ledger before
+        // capture consent. It may read or refresh the authorization-scoped orient
+        // cache, but it stores no session, prompt, tool, path, or summary record.
+        if (isSessionStartEvent(event.event) && !captureRuntimeEnabled && !event.nudgeLedger) {
+            const { apiClient, creds } = await withRequestDeadline(timeoutMs, controller.signal, () => loadRuntimeClient(credentialOptions));
+            const additionalContext = apiClient
+                ? await safeSessionStartOrientation({
+                    apiClient,
+                    creds,
+                    signal: controller.signal,
+                    baseDir: options?.baseDir,
+                    cwd: event.cwd,
+                    workspaceRoots: event.workspaceRoots,
+                })
+                : loginOrientationMessage();
+            if (controller.signal.aborted)
+                throw new Error('Hook dispatch timed out');
+            return {
+                handled: true,
+                emptyFallback: false,
+                outputPayload: hostOutput(event, additionalContext),
+            };
+        }
+        const isMeaningful = Boolean(event.prompt ||
+            event.assistantText ||
+            event.event === 'UserPrompt' ||
+            event.event === 'prompt' ||
+            (event.toolName && !/read|list/i.test(event.toolName)));
+        if (isSessionStartEvent(event.event))
+            pruneLocalState({ baseDir: options.baseDir });
+        const ledger = await recordSessionEvent({
+            sessionKey: event.sessionKey,
+            baseDir: options?.baseDir,
+            isMeaningful,
+            editedPath: captureRuntimeEnabled ? editedPathFromEvent(event) : undefined,
+            prompt: persistPrompts ? event.prompt : undefined,
+            assistantSummary: captureRuntimeEnabled ? event.assistantText : undefined,
+            model: captureRuntimeEnabled ? event.model : undefined,
+            persistPrompts,
+            captureRevision: captureRuntimeEnabled ? prefs?.consent.revision ?? 0 : undefined,
+            workspaceId: captureRuntimeEnabled ? prefs?.enabledWorkspaceId : undefined,
+            projectKey: event.cwd ? captureProjectKey(event.cwd) : undefined,
+            toolResult: event.toolName
+                ? {
+                    toolName: event.toolName,
+                    result: event.toolResult,
+                }
+                : undefined,
+        });
+        if (controller.signal.aborted) {
+            throw new Error('Hook dispatch timed out');
+        }
+        if (event.event === 'StopNudge') {
+            const lastMeaningful = ledger.lastMeaningfulSequence ?? 0;
+            const alreadyHandledThrough = Math.max(ledger.lastSuccessfulWriteBackSequence ?? 0, ledger.lastNudgedSequence ?? 0);
+            if (!event.stopHookActive && lastMeaningful > alreadyHandledThrough) {
+                await markSessionNudged({
+                    sessionKey: event.sessionKey,
+                    nudgedThroughSequence: lastMeaningful,
+                    baseDir: options?.baseDir,
+                });
+                return {
+                    handled: true,
+                    emptyFallback: false,
+                    outputPayload: hostOutput(event, 'Before finishing, consider whether this work produced genuinely new durable project knowledge. If so, use brain_remember, brain_amend, or brain_change_propose; otherwise continue without writing.'),
+                };
+            }
+            return { handled: true, emptyFallback: false, outputPayload: {} };
+        }
+        // Defensive invariant for any future stop alias added after the early gate.
+        if (isStopEvent(event.event, event.stopHookActive)) {
+            logRuntimeEvent('info', 'hook_stop_ignored', {
+                event: event.event,
+                sessionKey: event.sessionKey,
+                client: event.client,
+            }, options?.baseDir);
+            return {
+                handled: true,
+                emptyFallback: false,
+                outputPayload: hostOutput(event),
+            };
+        }
+        const { apiClient, creds } = await withRequestDeadline(timeoutMs, controller.signal, () => loadRuntimeClient(credentialOptions));
+        let additionalContext;
+        if (isSessionStartEvent(event.event)) {
+            additionalContext = apiClient
+                ? await safeSessionStartOrientation({
+                    apiClient,
+                    creds,
+                    signal: controller.signal,
+                    baseDir: options?.baseDir,
+                    cwd: event.cwd,
+                    workspaceRoots: event.workspaceRoots,
+                })
+                : loginOrientationMessage();
+        }
+        else if (isUserPromptEvent(event.event)) {
+            // AHI-D18: never transmit prompt text as an /orient query.
+            additionalContext = undefined;
+        }
+        if (controller.signal.aborted) {
+            throw new Error('Hook dispatch timed out');
+        }
+        const trigger = captureTriggerForEvent(event.event);
+        const hasUncapturedMeaningfulSlice = (ledger.lastMeaningfulSequence ?? 0) > (ledger.lastCapturedSequence ?? 0);
+        if (trigger &&
+            isCaptureEligible(event.event, prefs, projectPolicy) &&
+            hasUncapturedMeaningfulSlice) {
+            const workspaceId = resolveCaptureWorkspaceId(prefs);
+            if (!workspaceId) {
+                logRuntimeEvent('warn', 'capture_workspace_unresolved', {
+                    event: event.event,
+                    sessionKey: event.sessionKey,
+                }, options?.baseDir);
+            }
+            else if (!canEnqueueCapture(options?.baseDir)) {
+                logRuntimeEvent('warn', 'capture_queue_capped', { event: event.event, sessionKey: event.sessionKey }, options?.baseDir);
+            }
+            else {
+                if (creds?.authType !== 'oauth' ||
+                    !creds.authorizationId ||
+                    !creds.scopes?.includes('digests:write') ||
+                    !creds.workspaces?.includes(workspaceId)) {
+                    logRuntimeEvent('warn', 'capture_authorization_unresolved', { event: event.event, sessionKey: event.sessionKey }, options?.baseDir);
+                }
+                else {
+                    const payload = buildDigestPayload({
+                        trigger,
+                        workspaceId,
+                        host: event.client,
+                        model: event.model ?? ledger.model,
+                        summary: ledger.assistantSummary,
+                        paths: ledger.editedPaths,
+                        gitMetadata: collectGitMetadata(event.cwd ?? event.workspaceRoots?.[0]),
+                        prompts: ledger.prompts,
+                        includePrompts: Boolean(prefs?.consent?.includePrompts && !projectPolicy.promptsDisabled),
+                    });
+                    const digestId = payload.clientDigestId;
+                    await queueSessionCapture({
+                        sessionKey: event.sessionKey,
+                        capturedThroughSequence: ledger.lastMeaningfulSequence ?? ledger.eventSequence,
+                        baseDir: options?.baseDir,
+                        item: {
+                            digestId,
+                            workspaceId,
+                            captureTrigger: trigger,
+                            policyVersion: prefs?.consent?.policyVersion ?? '2026-09-02.capture-v1',
+                            digestText: serializeDigestPayload(payload),
+                            authorizationId: creds.authorizationId,
+                            consentRevision: prefs?.consent?.revision ?? 0,
+                        },
+                    });
+                    logRuntimeEvent('info', 'capture_queued', {
+                        sessionKey: event.sessionKey,
+                        digestId,
+                        trigger,
+                    }, options?.baseDir);
+                }
+            }
+        }
+        const canFlush = Boolean(apiClient) &&
+            creds?.authType === 'oauth' &&
+            Boolean(creds.accessToken) &&
+            Boolean(creds.authorizationId) &&
+            Array.isArray(creds.scopes) &&
+            creds.scopes.includes('digests:write');
+        const isSessionEnd = isSessionEndEvent(event.event);
+        if (canFlush &&
+            apiClient &&
+            !controller.signal.aborted &&
+            !isSessionStartEvent(event.event) &&
+            !isSessionEnd) {
+            await flushCaptureQueue({
+                apiClient,
+                baseDir: options?.baseDir,
+                signal: controller.signal,
+                allowAutomatic: prefs?.consent?.captureEnabled === true && !projectPolicy.captureDisabled,
+                credentials: creds,
+            }).catch(() => undefined);
+        }
+        logRuntimeEvent('info', 'hook_event_processed', {
+            event: event.event,
+            sessionKey: event.sessionKey,
+            client: event.client,
+        }, options?.baseDir);
+        return {
+            handled: true,
+            emptyFallback: false,
+            outputPayload: hostOutput(event, additionalContext),
+        };
+    }
+    catch (err) {
+        logRuntimeEvent('warn', 'hook_dispatch_failed', {
+            event: event.event,
+            sessionKey: event.sessionKey,
+            error: err instanceof Error ? err.message : String(err),
+        }, options?.baseDir);
+        return {
+            handled: false,
+            emptyFallback: true,
+            outputPayload: {},
+            error: err instanceof Error ? err.message : String(err),
+        };
+    }
+    finally {
+        clearTimeout(timeoutId);
+        options?.signal?.removeEventListener('abort', onExternalAbort);
+    }
+}
+//# sourceMappingURL=hook-dispatcher.js.map

package/dist/runtime/hook-dispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-dispatcher.js","sourceRoot":"","sources":["../../src/runtime/hook-dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAuC,MAAM,yBAAyB,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,EACX,8BAA8B,EAC9B,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,4BAA4B,EAA0B,MAAM,uBAAuB,CAAC;AAE7F,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AACnD,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAC7C,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,aAAa,CAAC;AACrF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAgB;IAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5F,MAAM,KAAK,GAAG,KAAK,CAAC,SAAoC,CAAC;IACzD,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAClE,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CACjF,CAAC;IACF,OAAO,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChF,CAAC;AASD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAgC,OAAO,CAAC,KAAK,EAC7C,QAAQ,GAAG,eAAe,EAC1B,MAAoB;IAEpB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAClC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACrC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,CAAC,GAAU,EAAE,EAAE;YAC1B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,CAAC,KAAsB,EAAE,EAAE;YACtC,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACnE,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC;YACzB,IAAI,UAAU,GAAG,QAAQ,EAAE,CAAC;gBAC1B,IAAI,CAAC,IAAI,KAAK,CAAC,wCAAwC,QAAQ,QAAQ,CAAC,CAAC,CAAC;gBAC1E,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC,CAAC;QAEF,MAAM,GAAG,GAAG,GAAG,EAAE;YACf,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzB,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAgB,EAAE,iBAA0B;IAC9D,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,iBAAiB,CAA4B,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,OAIhC;IACC,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW;SACnH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,4BAA4B,CAAC;YACnD,OAAO,EAAE,OAAO,EAAE,OAAO;YACzB,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;SACtB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC,uBAAuB,EAAE,EAAE,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAgB,EAChB,OAMC;IAED,MAAM,SAAS,GACb,OAAO,EAAE,SAAS;QAClB,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC;YAC7B,CAAC,CAAC,sBAAsB;YACxB,CAAC,CAAC,wBAAwB,CAAC,CAAC;IAEhC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACjD,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO;QAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IACjD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAClE,sEAAsE;IACtE,wDAAwD;IACxD,MAAM,iBAAiB,GAAG,OAAO,CAAC;IAElC,IAAI,CAAC;QACH,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,KAAK,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACvG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;QACpE,CAAC;QACD,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;gBAChF,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC;aACpH,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;QACrE,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC3D,MAAM,iBAAiB,GAAG,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG;YACpB,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACzG,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,IAAI,SAAS,CAAC,WAAW,KAAK,KAAK,EAAE,kBAAkB,CAAC,CAAC;YAC1H,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC;SACnE,CAAC;QACF,MAAM,cAAc,GAAG,OAAO,CAC5B,KAAK,EAAE,OAAO,EAAE,cAAc;YAC5B,KAAK,EAAE,OAAO,EAAE,cAAc;YAC9B,CAAC,aAAa,CAAC,eAAe,CACjC,CAAC;QACF,MAAM,qBAAqB,GAAG,OAAO,CACnC,KAAK,EAAE,OAAO,EAAE,cAAc,IAAI,CAAC,aAAa,CAAC,eAAe,CACjE,CAAC;QAEF,2EAA2E;QAC3E,6EAA6E;QAC7E,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YAClF,eAAe,CACb,MAAM,EACN,mBAAmB,EACnB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC1E,OAAO,EAAE,OAAO,CACjB,CAAC;YACF,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,KAAK;gBACpB,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC;aACjC,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,uEAAuE;QACvE,2EAA2E;QAC3E,sEAAsE;QACtE,IACE,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC;YACjC,CAAC,qBAAqB;YACtB,CAAC,KAAK,CAAC,WAAW;YAClB,KAAK,CAAC,KAAK,KAAK,WAAW,EAC3B,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,KAAK;gBACpB,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC;aACjC,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACrF,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACjI,MAAM,iBAAiB,GAAG,SAAS;gBACjC,CAAC,CAAC,MAAM,2BAA2B,CAAC;oBAChC,SAAS;oBACT,KAAK;oBACL,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,OAAO,EAAE,OAAO,EAAE,OAAO;oBACzB,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,cAAc,EAAE,KAAK,CAAC,cAAc;iBACrC,CAAC;gBACJ,CAAC,CAAC,uBAAuB,EAAE,CAAC;YAC9B,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC1E,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,KAAK;gBACpB,aAAa,EAAE,UAAU,CAAC,KAAK,EAAE,iBAAiB,CAAC;aACpD,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,CAC1B,KAAK,CAAC,MAAM;YACV,KAAK,CAAC,aAAa;YACnB,KAAK,CAAC,KAAK,KAAK,YAAY;YAC5B,KAAK,CAAC,KAAK,KAAK,QAAQ;YACxB,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CACzD,CAAC;QAEF,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,eAAe,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;YACtC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,OAAO,EAAE,OAAO;YACzB,YAAY;YACZ,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;YAC1E,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACjD,gBAAgB,EAAE,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;YACzE,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YACtD,cAAc;YACd,eAAe,EAAE,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YACjF,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS;YAC1E,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;YAChE,UAAU,EAAE,KAAK,CAAC,QAAQ;gBACxB,CAAC,CAAC;oBACE,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,KAAK,CAAC,UAAU;iBACzB;gBACH,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAChC,MAAM,cAAc,GAAG,MAAM,CAAC,sBAAsB,IAAI,CAAC,CAAC;YAC1D,MAAM,qBAAqB,GAAG,IAAI,CAAC,GAAG,CACpC,MAAM,CAAC,+BAA+B,IAAI,CAAC,EAC3C,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAC/B,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,cAAc,GAAG,qBAAqB,EAAE,CAAC;gBACpE,MAAM,iBAAiB,CAAC;oBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,qBAAqB,EAAE,cAAc;oBACrC,OAAO,EAAE,OAAO,EAAE,OAAO;iBAC1B,CAAC,CAAC;gBACH,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,aAAa,EAAE,KAAK;oBACpB,aAAa,EAAE,UAAU,CACvB,KAAK,EACL,qMAAqM,CACtM;iBACF,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;QACpE,CAAC;QAED,4EAA4E;QAC5E,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YACnD,eAAe,CACb,MAAM,EACN,mBAAmB,EACnB;gBACE,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,OAAO,EAAE,OAAO,CACjB,CAAC;YACF,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,KAAK;gBACpB,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC;aACjC,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAEjI,IAAI,iBAAqC,CAAC;QAC1C,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,iBAAiB,GAAG,SAAS;gBAC3B,CAAC,CAAC,MAAM,2BAA2B,CAAC;oBAChC,SAAS;oBACT,KAAK;oBACL,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,OAAO,EAAE,OAAO,EAAE,OAAO;oBACzB,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,cAAc,EAAE,KAAK,CAAC,cAAc;iBACrC,CAAC;gBACJ,CAAC,CAAC,uBAAuB,EAAE,CAAC;QAChC,CAAC;aAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,2DAA2D;YAC3D,iBAAiB,GAAG,SAAS,CAAC;QAChC,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,OAAO,GAA0B,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3E,MAAM,4BAA4B,GAChC,CAAC,MAAM,CAAC,sBAAsB,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,CAAC,CAAC;QAC5E,IACE,OAAO;YACP,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC;YACpD,4BAA4B,EAC5B,CAAC;YACD,MAAM,WAAW,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;YACrD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,eAAe,CACb,MAAM,EACN,8BAA8B,EAC9B;oBACE,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,UAAU,EAAE,KAAK,CAAC,UAAU;iBAC7B,EACD,OAAO,EAAE,OAAO,CACjB,CAAC;YACJ,CAAC;iBAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAChD,eAAe,CACb,MAAM,EACN,sBAAsB,EACtB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EACpD,OAAO,EAAE,OAAO,CACjB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IACE,KAAK,EAAE,QAAQ,KAAK,OAAO;oBAC3B,CAAC,KAAK,CAAC,eAAe;oBACtB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC;oBACxC,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,WAAW,CAAC,EACxC,CAAC;oBACD,eAAe,CACb,MAAM,EACN,kCAAkC,EAClC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EACpD,OAAO,EAAE,OAAO,CACjB,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACR,MAAM,OAAO,GAAG,kBAAkB,CAAC;wBACjC,OAAO;wBACP,WAAW;wBACX,IAAI,EAAE,KAAK,CAAC,MAAM;wBAClB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;wBAClC,OAAO,EAAE,MAAM,CAAC,gBAAgB;wBAChC,KAAK,EAAE,MAAM,CAAC,WAAW;wBACzB,WAAW,EAAE,kBAAkB,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;wBACvE,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,cAAc,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;qBAC1F,CAAC,CAAC;oBACH,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC;oBACxC,MAAM,mBAAmB,CAAC;wBACxB,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,uBAAuB,EAAE,MAAM,CAAC,sBAAsB,IAAI,MAAM,CAAC,aAAa;wBAC9E,OAAO,EAAE,OAAO,EAAE,OAAO;wBACzB,IAAI,EAAE;4BACJ,QAAQ;4BACR,WAAW;4BACX,cAAc,EAAE,OAAO;4BACvB,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,IAAI,uBAAuB;4BACvE,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC;4BAC3C,eAAe,EAAE,KAAK,CAAC,eAAe;4BACtC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,IAAI,CAAC;yBAC/C;qBACF,CAAC,CAAC;oBAEH,eAAe,CACb,MAAM,EACN,gBAAgB,EAChB;wBACE,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,QAAQ;wBACR,OAAO;qBACR,EACD,OAAO,EAAE,OAAO,CACjB,CAAC;gBACF,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GACZ,OAAO,CAAC,SAAS,CAAC;YAClB,KAAK,EAAE,QAAQ,KAAK,OAAO;YAC3B,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC;YAC9B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAC3B,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAEzC,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpD,IACE,QAAQ;YACR,SAAS;YACT,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;YAC1B,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC;YACjC,CAAC,YAAY,EACb,CAAC;YACD,MAAM,iBAAiB,CAAC;gBACtB,SAAS;gBACT,OAAO,EAAE,OAAO,EAAE,OAAO;gBACzB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,cAAc,EACZ,KAAK,EAAE,OAAO,EAAE,cAAc,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,eAAe;gBAC3E,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QAED,eAAe,CACb,MAAM,EACN,sBAAsB,EACtB;YACE,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,EACD,OAAO,EAAE,OAAO,CACjB,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,KAAK;YACpB,aAAa,EAAE,UAAU,CAAC,KAAK,EAAE,iBAAiB,CAAC;SACpD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAe,CACb,MAAM,EACN,sBAAsB,EACtB;YACE,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,EACD,OAAO,EAAE,OAAO,CACjB,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,IAAI;YACnB,aAAa,EAAE,EAAE;YACjB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}

package/dist/runtime/index.d.ts

@@ -0,0 +1,12 @@
+export * from './storage.js';
+export * from './lock.js';
+export * from './session.js';
+export * from './queue.js';
+export * from './retention.js';
+export * from './installer.js';
+export * from './diagnostics.js';
+export * from './hook-dispatcher.js';
+/**
+ * Main execution function when runtime script is called directly by agent host hooks.
+ */
+export declare function runHookRuntimeCli(args?: string[]): Promise<void>;

package/dist/runtime/index.js

@@ -0,0 +1,69 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { readBoundedStdin, dispatchHookEvent } from './hook-dispatcher.js';
+import { parseHostEvent } from '../hooks/adapters.js';
+import { withRequestDeadline } from '../lib/http.js';
+import { logRuntimeEvent } from './diagnostics.js';
+export * from './storage.js';
+export * from './lock.js';
+export * from './session.js';
+export * from './queue.js';
+export * from './retention.js';
+export * from './installer.js';
+export * from './diagnostics.js';
+export * from './hook-dispatcher.js';
+/**
+ * Main execution function when runtime script is called directly by agent host hooks.
+ */
+export async function runHookRuntimeCli(args = process.argv.slice(2)) {
+    try {
+        await withRequestDeadline(args[1]?.toLowerCase().includes('sessionend') ? 2500 : 1500, undefined, async (signal) => {
+            const rawInput = await readBoundedStdin(process.stdin, undefined, signal);
+            if (!rawInput.trim()) {
+                process.stdout.write('{}\n');
+                process.exitCode = 0;
+                return;
+            }
+            let parsed;
+            try {
+                parsed = JSON.parse(rawInput);
+            }
+            catch {
+                process.stdout.write('{}\n');
+                process.exitCode = 0;
+                return;
+            }
+            const host = String(args[0] || parsed.client || 'claude-code');
+            const eventName = String(args[1] || parsed.event || parsed.hook_event_name || 'GenericEvent');
+            if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+                throw new Error('Invalid hook input');
+            const normalizedEvent = parseHostEvent(host, parsed, eventName);
+            normalizedEvent.nudgeLedger = args.includes('--nudge-ledger');
+            const res = await dispatchHookEvent(normalizedEvent, { signal });
+            signal.throwIfAborted();
+            process.stdout.write(JSON.stringify(res.outputPayload ?? {}) + '\n');
+            process.exitCode = 0;
+        });
+    }
+    catch {
+        logRuntimeEvent('warn', 'hook_input_or_deadline_failed');
+        process.stdout.write('{}\n');
+        process.exitCode = 0;
+    }
+}
+function isMainModule() {
+    const entry = process.argv[1];
+    if (!entry)
+        return false;
+    try {
+        return fs.realpathSync(fileURLToPath(import.meta.url)) === fs.realpathSync(path.resolve(entry));
+    }
+    catch {
+        return false;
+    }
+}
+if (isMainModule()) {
+    void runHookRuntimeCli();
+}
+//# sourceMappingURL=index.js.map

package/dist/runtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AAErC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAiB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YAC1E,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC7B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,IAAI,MAA+B,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC7B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC;YAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,eAAe,IAAI,cAAc,CAAC,CAAC;YAE9F,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC1G,MAAM,eAAe,GAAc,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC3E,eAAe,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YAE9D,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,eAAe,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,IAAI,YAAY,EAAE,EAAE,CAAC;IACnB,KAAK,iBAAiB,EAAE,CAAC;AAC3B,CAAC"}

package/dist/runtime/installer.d.ts

@@ -0,0 +1,26 @@
+export declare function normalizeRuntimeVersion(version: string): string;
+export interface InstalledRuntime {
+    version: string;
+    runtimePath: string;
+    installedAt: string;
+}
+export declare function getRuntimesDir(baseDir?: string): string;
+export declare function getVersionedRuntimeDir(version: string, baseDir?: string): string;
+export declare function getVersionedRuntimePath(version: string, baseDir?: string): string;
+/**
+ * Installs runtime bundle atomically to ~/.brainmcp/runtime/v<version>/brainmcp-hook-runtime.mjs (AHI-052).
+ */
+export declare function installRuntimeBundle(version: string, bundleContent: string, baseDir?: string): InstalledRuntime;
+/**
+ * Lists all currently installed runtime versions.
+ */
+export declare function listInstalledRuntimes(baseDir?: string): InstalledRuntime[];
+/**
+ * Removes an old runtime version, but BLOCKS removal if any known config references it (AHI-052).
+ */
+export declare function removeRuntimeVersion(version: string, referencedPaths: string[], baseDir?: string): {
+    removed: boolean;
+    blockedReason?: string;
+};
+export declare function cliPackageVersion(): string;
+export declare function loadPackagedRuntimeBundle(): string | null;

package/dist/runtime/installer.js

@@ -0,0 +1,134 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { createRequire } from 'node:module';
+import { fileURLToPath } from 'node:url';
+import { getBrainHome, ensureDirectory0700, assertNotSymlink } from './storage.js';
+const RUNTIME_VERSION_RE = /^[0-9A-Za-z][0-9A-Za-z._-]{0,63}$/;
+export function normalizeRuntimeVersion(version) {
+    const normalized = version.trim().replace(/^v/, '');
+    if (!RUNTIME_VERSION_RE.test(normalized) || normalized.includes('..')) {
+        throw new Error(`Invalid BrainMCP runtime version: ${version}`);
+    }
+    return normalized;
+}
+export function getRuntimesDir(baseDir) {
+    const home = baseDir ?? getBrainHome();
+    const runtimesDir = path.join(home, 'runtime');
+    ensureDirectory0700(runtimesDir);
+    return runtimesDir;
+}
+export function getVersionedRuntimeDir(version, baseDir) {
+    const runtimesDir = getRuntimesDir(baseDir);
+    const versionDir = path.join(runtimesDir, `v${normalizeRuntimeVersion(version)}`);
+    ensureDirectory0700(versionDir);
+    return versionDir;
+}
+export function getVersionedRuntimePath(version, baseDir) {
+    const versionDir = getVersionedRuntimeDir(version, baseDir);
+    return path.join(versionDir, 'brainmcp-hook-runtime.mjs');
+}
+/**
+ * Installs runtime bundle atomically to ~/.brainmcp/runtime/v<version>/brainmcp-hook-runtime.mjs (AHI-052).
+ */
+export function installRuntimeBundle(version, bundleContent, baseDir) {
+    const versionDir = getVersionedRuntimeDir(version, baseDir);
+    const targetPath = path.join(versionDir, 'brainmcp-hook-runtime.mjs');
+    assertNotSymlink(targetPath);
+    const tmpPath = `${targetPath}.tmp.${crypto.randomUUID()}`;
+    try {
+        fs.writeFileSync(tmpPath, bundleContent, { flag: 'wx', mode: 0o755 });
+        fs.renameSync(tmpPath, targetPath);
+    }
+    catch (error) {
+        try {
+            fs.unlinkSync(tmpPath);
+        }
+        catch {
+            // Best-effort cleanup.
+        }
+        throw error;
+    }
+    return {
+        version,
+        runtimePath: targetPath,
+        installedAt: new Date().toISOString(),
+    };
+}
+/**
+ * Lists all currently installed runtime versions.
+ */
+export function listInstalledRuntimes(baseDir) {
+    const runtimesDir = getRuntimesDir(baseDir);
+    const entries = fs.readdirSync(runtimesDir);
+    const runtimes = [];
+    for (const entry of entries) {
+        if (!entry.startsWith('v'))
+            continue;
+        const versionDir = path.join(runtimesDir, entry);
+        const runtimePath = path.join(versionDir, 'brainmcp-hook-runtime.mjs');
+        if (fs.existsSync(runtimePath)) {
+            try {
+                const stat = fs.lstatSync(runtimePath);
+                if (!stat.isSymbolicLink()) {
+                    runtimes.push({
+                        version: entry.replace(/^v/, ''),
+                        runtimePath,
+                        installedAt: stat.mtime.toISOString(),
+                    });
+                }
+            }
+            catch {
+                // Ignore
+            }
+        }
+    }
+    return runtimes;
+}
+/**
+ * Removes an old runtime version, but BLOCKS removal if any known config references it (AHI-052).
+ */
+export function removeRuntimeVersion(version, referencedPaths, baseDir) {
+    const targetPath = getVersionedRuntimePath(version, baseDir);
+    const normalizedTarget = path.resolve(targetPath);
+    // Check if any referenced path in host configs references this runtime
+    const isReferenced = referencedPaths.some((ref) => {
+        const normRef = path.resolve(ref);
+        return normRef === normalizedTarget || normRef.includes(`/v${normalizeRuntimeVersion(version)}/`);
+    });
+    if (isReferenced) {
+        return {
+            removed: false,
+            blockedReason: `Runtime v${version} is still referenced by an active host configuration`,
+        };
+    }
+    const versionDir = getVersionedRuntimeDir(version, baseDir);
+    if (fs.existsSync(versionDir)) {
+        fs.rmSync(versionDir, { recursive: true, force: true });
+        return { removed: true };
+    }
+    return { removed: false, blockedReason: `Runtime v${version} does not exist` };
+}
+export function cliPackageVersion() {
+    try {
+        const require = createRequire(import.meta.url);
+        return String(require('../../package.json').version);
+    }
+    catch {
+        return '0.1.13';
+    }
+}
+export function loadPackagedRuntimeBundle() {
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    const candidates = [
+        path.join(here, 'brainmcp-hook-runtime.mjs'),
+        path.join(here, '../../dist/runtime/brainmcp-hook-runtime.mjs'),
+    ];
+    for (const candidate of candidates) {
+        if (fs.existsSync(candidate)) {
+            return fs.readFileSync(candidate, 'utf8');
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=installer.js.map