@cleocode/cleo 2026.2.5 → 2026.2.6

package/dist/mcp/lib/router.js

@@ -1,298 +0,0 @@
-/**
- * Domain Router for CLEO MCP Server
- *
- * Routes operations to appropriate domain handlers based on:
- * 1. Gateway type (query vs mutate)
- * 2. Domain (tasks, session, orchestrate, etc.)
- * 3. Operation (get, list, create, update, etc.)
- *
- * @task T2911
- * @task T2912
- * @task T3144 - Security hardening integration
- */
-import { TasksHandler } from '../domains/tasks.js';
-import { SessionHandler } from '../domains/session.js';
-import { OrchestrateHandler } from '../domains/orchestrate.js';
-import { ResearchHandler } from '../domains/research.js';
-import { LifecycleHandler } from '../domains/lifecycle.js';
-import { ValidateHandler } from '../domains/validate.js';
-import { ReleaseHandler } from '../domains/release.js';
-import { SystemHandler } from '../domains/system.js';
-import { IssuesHandler } from '../domains/issues.js';
-import { SkillsHandler } from '../domains/skills.js';
-import { ProvidersHandler } from '../domains/providers.js';
-import { formatError, createError } from './formatter.js';
-import { protocolEnforcer, ProtocolType } from './protocol-enforcement.js';
-import { VerificationGate } from './verification-gates.js';
-import { sanitizeParams, SecurityError } from './security.js';
-import { RateLimiter } from './rate-limiter.js';
-/**
- * Domain routing validation error
- */
-export class RouterError extends Error {
-    code;
-    exitCode;
-    constructor(message, code = 'E_ROUTING_ERROR', exitCode = 1) {
-        super(message);
-        this.code = code;
-        this.exitCode = exitCode;
-        this.name = 'RouterError';
-    }
-}
-/**
- * Main domain router that dispatches operations to appropriate handlers
- */
-export class DomainRouter {
-    handlers;
-    useProtocolEnforcement;
-    verificationGate;
-    rateLimiter;
-    constructor(executor, useProtocolEnforcement = true, rateLimitConfig, executionMode = 'cli') {
-        // Initialize all domain handlers with execution mode
-        this.handlers = new Map([
-            ['tasks', new TasksHandler(executor, undefined, executionMode)],
-            ['session', new SessionHandler(executor, executionMode)],
-            ['orchestrate', new OrchestrateHandler(executor)],
-            ['research', new ResearchHandler(executor)],
-            ['lifecycle', new LifecycleHandler(executor)],
-            ['validate', new ValidateHandler(executor)],
-            ['release', new ReleaseHandler(executor)],
-            ['system', new SystemHandler(executor, undefined, executionMode)],
-            ['issues', new IssuesHandler(executor, executionMode)],
-            ['skills', new SkillsHandler(executor)],
-            ['providers', new ProvidersHandler(executor)],
-        ]);
-        this.useProtocolEnforcement = useProtocolEnforcement;
-        this.verificationGate = new VerificationGate(useProtocolEnforcement);
-        this.rateLimiter = new RateLimiter(rateLimitConfig);
-    }
-    /**
-     * Domain alias map: singular CLI names → plural MCP domain names
-     * CLI uses 'issue' (singular), MCP uses 'issues' (plural).
-     * @task T4494
-     */
-    static DOMAIN_ALIASES = {
-        issue: 'issues',
-    };
-    /**
-     * Normalize domain name, resolving aliases to canonical names.
-     */
-    normalizeDomain(domain) {
-        return DomainRouter.DOMAIN_ALIASES[domain] ?? domain;
-    }
-    /**
-     * Route an operation to the appropriate domain handler
-     */
-    async routeOperation(request) {
-        const startTime = Date.now();
-        // Normalize domain aliases (e.g. 'issue' → 'issues')
-        request = { ...request, domain: this.normalizeDomain(request.domain) };
-        try {
-            // Validate the route
-            this.validateRoute(request);
-            // Rate limiting check (Section 13.3)
-            // Support bypassRateLimit param for testing
-            const bypassRateLimit = !!request.params?.bypassRateLimit;
-            const rateLimitResult = bypassRateLimit
-                ? { allowed: true, remaining: Infinity, limit: Infinity, resetMs: 0, category: 'bypassed' }
-                : this.rateLimiter.check(request.gateway, request.domain, request.operation);
-            if (!rateLimitResult.allowed) {
-                return {
-                    _meta: {
-                        gateway: request.gateway,
-                        domain: request.domain,
-                        operation: request.operation,
-                        version: '1.0.0',
-                        timestamp: new Date().toISOString(),
-                        duration_ms: Date.now() - startTime,
-                        rateLimit: {
-                            limit: rateLimitResult.limit,
-                            remaining: rateLimitResult.remaining,
-                            resetMs: rateLimitResult.resetMs,
-                            category: rateLimitResult.category,
-                        },
-                    },
-                    success: false,
-                    error: {
-                        code: 'E_RATE_LIMITED',
-                        exitCode: 429,
-                        message: `Rate limit exceeded for ${rateLimitResult.category} operations. Limit: ${rateLimitResult.limit}/min. Retry after ${Math.ceil(rateLimitResult.resetMs / 1000)}s.`,
-                        details: {
-                            category: rateLimitResult.category,
-                            limit: rateLimitResult.limit,
-                            resetMs: rateLimitResult.resetMs,
-                        },
-                        fix: `Wait ${Math.ceil(rateLimitResult.resetMs / 1000)} seconds before retrying`,
-                    },
-                };
-            }
-            // Sanitize input parameters (T3144)
-            if (request.params) {
-                try {
-                    request = {
-                        ...request,
-                        params: sanitizeParams(request.params),
-                    };
-                }
-                catch (sanitizeError) {
-                    if (sanitizeError instanceof SecurityError) {
-                        const response = formatError(`${request.domain}.${request.operation}`, createError(sanitizeError.code, sanitizeError.message, 2, { context: { field: sanitizeError.field } }));
-                        response._meta.duration_ms = Date.now() - startTime;
-                        return response;
-                    }
-                    throw sanitizeError;
-                }
-            }
-            // Get the handler
-            const handler = this.handlers.get(request.domain);
-            if (!handler) {
-                throw new RouterError(`Unknown domain: ${request.domain}`, 'E_INVALID_DOMAIN', 2);
-            }
-            // Apply verification gate middleware if enabled
-            if (this.useProtocolEnforcement && request.gateway === 'cleo_mutate') {
-                // Build operation context for verification
-                const context = {
-                    domain: request.domain,
-                    operation: request.operation,
-                    gateway: request.gateway,
-                    params: request.params,
-                    taskId: request.params?.taskId,
-                    protocolType: this.inferProtocolType(request),
-                };
-                // Run 4-layer verification gate
-                const gateResult = await this.verificationGate.verifyOperation(context);
-                // If verification fails, return error response
-                if (!gateResult.passed) {
-                    const failedLayer = gateResult.layers[gateResult.blockedAt];
-                    const response = formatError(`${request.domain}.${request.operation}`, createError(failedLayer.violations[0]?.code || 'E_VERIFICATION_FAILED', gateResult.summary, gateResult.exitCode));
-                    response._meta.duration_ms = Date.now() - startTime;
-                    response._meta.verificationGate = {
-                        blockedAt: gateResult.blockedAt,
-                        violations: failedLayer.violations,
-                    };
-                    return response;
-                }
-                // Verification passed, apply protocol enforcement
-                const response = await protocolEnforcer.enforceProtocol(request, async () => {
-                    // Dispatch to appropriate gateway method
-                    if (request.gateway === 'cleo_query') {
-                        return await handler.query(request.operation, request.params);
-                    }
-                    else {
-                        return await handler.mutate(request.operation, request.params);
-                    }
-                });
-                // Add duration and rate limit metadata
-                response._meta.duration_ms = Date.now() - startTime;
-                this.addRateLimitMeta(response, rateLimitResult);
-                return response;
-            }
-            // Dispatch without middleware
-            let response;
-            if (request.gateway === 'cleo_query') {
-                response = await handler.query(request.operation, request.params);
-            }
-            else {
-                response = await handler.mutate(request.operation, request.params);
-            }
-            // Add duration and rate limit metadata
-            response._meta.duration_ms = Date.now() - startTime;
-            this.addRateLimitMeta(response, rateLimitResult);
-            return response;
-        }
-        catch (error) {
-            // Handle routing errors
-            if (error instanceof RouterError) {
-                const response = formatError(`${request.domain}.${request.operation}`, createError(error.code, error.message, error.exitCode));
-                response._meta.duration_ms = Date.now() - startTime;
-                return response;
-            }
-            // Handle unexpected errors
-            const response = formatError(`${request.domain}.${request.operation}`, createError('E_INTERNAL_ERROR', error instanceof Error ? error.message : String(error), 1));
-            response._meta.duration_ms = Date.now() - startTime;
-            return response;
-        }
-    }
-    /**
-     * Validate that the domain/operation combination is valid
-     */
-    validateRoute(request) {
-        const { gateway, domain, operation } = request;
-        // Validate domain exists
-        const handler = this.handlers.get(domain);
-        if (!handler) {
-            throw new RouterError(`Unknown domain: ${domain}`, 'E_INVALID_DOMAIN', 2);
-        }
-        // Get supported operations for this domain
-        const supported = handler.getSupportedOperations();
-        // Validate operation for gateway type
-        const gatewayType = gateway === 'cleo_query' ? 'query' : 'mutate';
-        const validOps = supported[gatewayType];
-        if (!validOps.includes(operation)) {
-            throw new RouterError(`Operation '${operation}' not supported for ${gateway} in domain '${domain}'`, 'E_INVALID_OPERATION', 2);
-        }
-        // Validate gateway/domain combination
-        if (gateway === 'cleo_query' && domain === 'release') {
-            throw new RouterError(`Domain 'release' only supports mutate operations`, 'E_INVALID_GATEWAY', 2);
-        }
-    }
-    /**
-     * Get list of all domains
-     */
-    getDomains() {
-        return Array.from(this.handlers.keys());
-    }
-    /**
-     * Get supported operations for a specific domain
-     */
-    getDomainOperations(domain) {
-        const handler = this.handlers.get(domain);
-        return handler ? handler.getSupportedOperations() : null;
-    }
-    /**
-     * Get the rate limiter instance (for testing/diagnostics)
-     */
-    getRateLimiter() {
-        return this.rateLimiter;
-    }
-    /**
-     * Add rate limit metadata to response _meta
-     */
-    addRateLimitMeta(response, rateLimitResult) {
-        response._meta.rateLimit = {
-            limit: rateLimitResult.limit,
-            remaining: rateLimitResult.remaining,
-            resetMs: rateLimitResult.resetMs,
-            category: rateLimitResult.category,
-        };
-    }
-    /**
-     * Infer protocol type from request context
-     *
-     * Used to determine which protocol validation rules apply.
-     */
-    inferProtocolType(request) {
-        // Orchestrate domain operations map to protocol types
-        if (request.domain === 'orchestrate' && request.operation === 'spawn') {
-            return request.params?.protocolType;
-        }
-        // Research domain operations
-        if (request.domain === 'research') {
-            return ProtocolType.RESEARCH;
-        }
-        // Lifecycle domain operations map to lifecycle stages
-        if (request.domain === 'lifecycle') {
-            return request.params?.stage;
-        }
-        // Release domain operations
-        if (request.domain === 'release') {
-            return ProtocolType.RELEASE;
-        }
-        // Validate domain operations
-        if (request.domain === 'validate') {
-            return ProtocolType.VALIDATION;
-        }
-        return undefined;
-    }
-}
-//# sourceMappingURL=router.js.map

package/dist/mcp/lib/router.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"router.js","sourceRoot":"","sources":["../../../src/mcp/lib/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG1D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAoB,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAuC,MAAM,mBAAmB,CAAC;AAkErF;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAG3B;IACA;IAHT,YACE,OAAe,EACR,OAAe,iBAAiB,EAChC,WAAmB,CAAC;QAE3B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAJ,IAAI,CAA4B;QAChC,aAAQ,GAAR,QAAQ,CAAY;QAG3B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAY;IACf,QAAQ,CAA6B;IACrC,sBAAsB,CAAU;IAChC,gBAAgB,CAAmB;IACnC,WAAW,CAAc;IAEjC,YACE,QAAqB,EACrB,yBAAkC,IAAI,EACtC,eAA6C,EAC7C,gBAA8B,KAAK;QAEnC,qDAAqD;QACrD,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAwB;YAC7C,CAAC,OAAO,EAAE,IAAI,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;YAC/D,CAAC,SAAS,EAAE,IAAI,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACxD,CAAC,aAAa,EAAE,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC,UAAU,EAAE,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC3C,CAAC,WAAW,EAAE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC7C,CAAC,UAAU,EAAE,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC3C,CAAC,SAAS,EAAE,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;YACzC,CAAC,QAAQ,EAAE,IAAI,aAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;YACjE,CAAC,QAAQ,EAAE,IAAI,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACtD,CAAC,QAAQ,EAAE,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;YACvC,CAAC,WAAW,EAAE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;QACrD,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrE,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,eAAe,CAAC,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAU,cAAc,GAA2B;QAC/D,KAAK,EAAE,QAAQ;KAChB,CAAC;IAEF;;OAEG;IACK,eAAe,CAAC,MAAc;QACpC,OAAO,YAAY,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,OAAsB;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,qDAAqD;QACrD,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAEvE,IAAI,CAAC;YACH,qBAAqB;YACrB,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAE5B,qCAAqC;YACrC,4CAA4C;YAC5C,MAAM,eAAe,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC;YAC1D,MAAM,eAAe,GAAG,eAAe;gBACrC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAmB,EAAE;gBACpG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAE/E,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;gBAC7B,OAAO;oBACL,KAAK,EAAE;wBACL,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,OAAO,EAAE,OAAO;wBAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACnC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;wBACnC,SAAS,EAAE;4BACT,KAAK,EAAE,eAAe,CAAC,KAAK;4BAC5B,SAAS,EAAE,eAAe,CAAC,SAAS;4BACpC,OAAO,EAAE,eAAe,CAAC,OAAO;4BAChC,QAAQ,EAAE,eAAe,CAAC,QAAQ;yBACnC;qBACF;oBACD,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,gBAAgB;wBACtB,QAAQ,EAAE,GAAG;wBACb,OAAO,EAAE,2BAA2B,eAAe,CAAC,QAAQ,uBAAuB,eAAe,CAAC,KAAK,qBAAqB,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI;wBAC1K,OAAO,EAAE;4BACP,QAAQ,EAAE,eAAe,CAAC,QAAQ;4BAClC,KAAK,EAAE,eAAe,CAAC,KAAK;4BAC5B,OAAO,EAAE,eAAe,CAAC,OAAO;yBACjC;wBACD,GAAG,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,GAAG,IAAI,CAAC,0BAA0B;qBACjF;iBACF,CAAC;YACJ,CAAC;YAED,oCAAoC;YACpC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,OAAO,GAAG;wBACR,GAAG,OAAO;wBACV,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;qBACvC,CAAC;gBACJ,CAAC;gBAAC,OAAO,aAAa,EAAE,CAAC;oBACvB,IAAI,aAAa,YAAY,aAAa,EAAE,CAAC;wBAC3C,MAAM,QAAQ,GAAG,WAAW,CAC1B,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,EAAE,EACxC,WAAW,CACT,aAAa,CAAC,IAAI,EAClB,aAAa,CAAC,OAAO,EACrB,CAAC,EACD,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,EAAE,CAC5C,CACK,CAAC;wBACT,QAAQ,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;wBACpD,OAAO,QAA0B,CAAC;oBACpC,CAAC;oBACD,MAAM,aAAa,CAAC;gBACtB,CAAC;YACH,CAAC;YAED,kBAAkB;YAClB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,WAAW,CACnB,mBAAmB,OAAO,CAAC,MAAM,EAAE,EACnC,kBAAkB,EAClB,CAAC,CACF,CAAC;YACJ,CAAC;YAED,gDAAgD;YAChD,IAAI,IAAI,CAAC,sBAAsB,IAAI,OAAO,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;gBACrE,2CAA2C;gBAC3C,MAAM,OAAO,GAAqB;oBAChC,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAA4B;oBACpD,YAAY,EAAE,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;iBAC9C,CAAC;gBAEF,gCAAgC;gBAChC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;gBAExE,+CAA+C;gBAC/C,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;oBACvB,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,SAAU,CAAC,CAAC;oBAC7D,MAAM,QAAQ,GAAG,WAAW,CAC1B,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,EAAE,EACxC,WAAW,CACT,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,uBAAuB,EAC1D,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,QAAQ,CACpB,CACK,CAAC;oBACT,QAAQ,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;oBACpD,QAAQ,CAAC,KAAK,CAAC,gBAAgB,GAAG;wBAChC,SAAS,EAAE,UAAU,CAAC,SAAS;wBAC/B,UAAU,EAAE,WAAW,CAAC,UAAU;qBACnC,CAAC;oBACF,OAAO,QAA0B,CAAC;gBACpC,CAAC;gBAED,kDAAkD;gBAClD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;oBAC1E,yCAAyC;oBACzC,IAAI,OAAO,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;wBACrC,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;oBAChE,CAAC;yBAAM,CAAC;wBACN,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;oBACjE,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,uCAAuC;gBACtC,QAAgB,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAC7D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;gBACjD,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,8BAA8B;YAC9B,IAAI,QAAwB,CAAC;YAC7B,IAAI,OAAO,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;gBACrC,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACrE,CAAC;YAED,uCAAuC;YACtC,QAAgB,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC7D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAEjD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wBAAwB;YACxB,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,WAAW,CAC1B,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,EAAE,EACxC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAChD,CAAC;gBACT,QAAQ,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACpD,OAAO,QAA0B,CAAC;YACpC,CAAC;YAED,2BAA2B;YAC3B,MAAM,QAAQ,GAAG,WAAW,CAC1B,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,EAAE,EACxC,WAAW,CACT,kBAAkB,EAClB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACtD,CAAC,CACF,CACK,CAAC;YACT,QAAQ,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACpD,OAAO,QAA0B,CAAC;QACpC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,OAAsB;QAClC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;QAE/C,yBAAyB;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CACnB,mBAAmB,MAAM,EAAE,EAC3B,kBAAkB,EAClB,CAAC,CACF,CAAC;QACJ,CAAC;QAED,2CAA2C;QAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;QAEnD,sCAAsC;QACtC,MAAM,WAAW,GAAG,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClE,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QAExC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,WAAW,CACnB,cAAc,SAAS,uBAAuB,OAAO,eAAe,MAAM,GAAG,EAC7E,qBAAqB,EACrB,CAAC,CACF,CAAC;QACJ,CAAC;QAED,sCAAsC;QACtC,IAAI,OAAO,KAAK,YAAY,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACrD,MAAM,IAAI,WAAW,CACnB,kDAAkD,EAClD,mBAAmB,EACnB,CAAC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,MAAc;QAIhC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,QAAwB,EAAE,eAAgC;QAChF,QAAQ,CAAC,KAAa,CAAC,SAAS,GAAG;YAClC,KAAK,EAAE,eAAe,CAAC,KAAK;YAC5B,SAAS,EAAE,eAAe,CAAC,SAAS;YACpC,OAAO,EAAE,eAAe,CAAC,OAAO;YAChC,QAAQ,EAAE,eAAe,CAAC,QAAQ;SACnC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,iBAAiB,CAAC,OAAsB;QAC9C,sDAAsD;QACtD,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACtE,OAAO,OAAO,CAAC,MAAM,EAAE,YAAwC,CAAC;QAClE,CAAC;QAED,6BAA6B;QAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAClC,OAAO,YAAY,CAAC,QAAQ,CAAC;QAC/B,CAAC;QAED,sDAAsD;QACtD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,MAAM,EAAE,KAAiC,CAAC;QAC3D,CAAC;QAED,4BAA4B;QAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,YAAY,CAAC,OAAO,CAAC;QAC9B,CAAC;QAED,6BAA6B;QAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAClC,OAAO,YAAY,CAAC,UAAU,CAAC;QACjC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC"}

package/dist/mcp/lib/schema.d.ts

@@ -1,55 +0,0 @@
-/**
- * JSON Schema constants and validation helpers for CLEO MCP Server
- *
- * Defines schema URLs and validation utilities for CLEO data structures.
- *
- * @task T2912
- */
-/**
- * Schema URL for output response envelope
- */
-export declare const SCHEMA_URL_OUTPUT = "https://cleo-dev.com/schemas/v1/output.schema.json";
-/**
- * Schema URL for task objects
- */
-export declare const SCHEMA_URL_TASK = "https://cleo-dev.com/schemas/v1/task.schema.json";
-/**
- * Schema URL for session objects
- */
-export declare const SCHEMA_URL_SESSION = "https://cleo-dev.com/schemas/v1/session.schema.json";
-/**
- * Schema URL for manifest entries
- */
-export declare const SCHEMA_URL_MANIFEST = "https://cleo-dev.com/schemas/v1/manifest.schema.json";
-/**
- * Schema URL for config objects
- */
-export declare const SCHEMA_URL_CONFIG = "https://cleo-dev.com/schemas/v1/config.schema.json";
-/**
- * All schema URLs by type
- */
-export declare const SCHEMA_URLS: {
-    readonly output: "https://cleo-dev.com/schemas/v1/output.schema.json";
-    readonly task: "https://cleo-dev.com/schemas/v1/task.schema.json";
-    readonly session: "https://cleo-dev.com/schemas/v1/session.schema.json";
-    readonly manifest: "https://cleo-dev.com/schemas/v1/manifest.schema.json";
-    readonly config: "https://cleo-dev.com/schemas/v1/config.schema.json";
-};
-/**
- * Get schema URL by type
- */
-export declare function getSchemaUrl(type: keyof typeof SCHEMA_URLS): string;
-/**
- * Validate that an object has the expected schema reference
- */
-export declare function hasValidSchema(obj: unknown, expectedType: keyof typeof SCHEMA_URLS): boolean;
-/**
- * Schema validation error
- */
-export declare class SchemaValidationError extends Error {
-    schemaType: string;
-    field: string;
-    constraint: string;
-    constructor(schemaType: string, field: string, constraint: string);
-}
-//# sourceMappingURL=schema.d.ts.map

package/dist/mcp/lib/schema.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/mcp/lib/schema.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,eAAO,MAAM,iBAAiB,uDAAuD,CAAC;AAEtF;;GAEG;AACH,eAAO,MAAM,eAAe,qDAAqD,CAAC;AAElF;;GAEG;AACH,eAAO,MAAM,kBAAkB,wDAAwD,CAAC;AAExF;;GAEG;AACH,eAAO,MAAM,mBAAmB,yDAAyD,CAAC;AAE1F;;GAEG;AACH,eAAO,MAAM,iBAAiB,uDAAuD,CAAC;AAEtF;;GAEG;AACH,eAAO,MAAM,WAAW;;;;;;CAMd,CAAC;AAEX;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,OAAO,WAAW,GAAG,MAAM,CAEnE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,WAAW,GAAG,OAAO,CAS5F;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAErC,UAAU,EAAE,MAAM;IAClB,KAAK,EAAE,MAAM;IACb,UAAU,EAAE,MAAM;gBAFlB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM;CAK5B"}

package/dist/mcp/lib/schema.js

@@ -1,70 +0,0 @@
-/**
- * JSON Schema constants and validation helpers for CLEO MCP Server
- *
- * Defines schema URLs and validation utilities for CLEO data structures.
- *
- * @task T2912
- */
-/**
- * Schema URL for output response envelope
- */
-export const SCHEMA_URL_OUTPUT = 'https://cleo-dev.com/schemas/v1/output.schema.json';
-/**
- * Schema URL for task objects
- */
-export const SCHEMA_URL_TASK = 'https://cleo-dev.com/schemas/v1/task.schema.json';
-/**
- * Schema URL for session objects
- */
-export const SCHEMA_URL_SESSION = 'https://cleo-dev.com/schemas/v1/session.schema.json';
-/**
- * Schema URL for manifest entries
- */
-export const SCHEMA_URL_MANIFEST = 'https://cleo-dev.com/schemas/v1/manifest.schema.json';
-/**
- * Schema URL for config objects
- */
-export const SCHEMA_URL_CONFIG = 'https://cleo-dev.com/schemas/v1/config.schema.json';
-/**
- * All schema URLs by type
- */
-export const SCHEMA_URLS = {
-    output: SCHEMA_URL_OUTPUT,
-    task: SCHEMA_URL_TASK,
-    session: SCHEMA_URL_SESSION,
-    manifest: SCHEMA_URL_MANIFEST,
-    config: SCHEMA_URL_CONFIG,
-};
-/**
- * Get schema URL by type
- */
-export function getSchemaUrl(type) {
-    return SCHEMA_URLS[type];
-}
-/**
- * Validate that an object has the expected schema reference
- */
-export function hasValidSchema(obj, expectedType) {
-    if (typeof obj !== 'object' || obj === null) {
-        return false;
-    }
-    const record = obj;
-    const expectedUrl = SCHEMA_URLS[expectedType];
-    return record.$schema === expectedUrl;
-}
-/**
- * Schema validation error
- */
-export class SchemaValidationError extends Error {
-    schemaType;
-    field;
-    constraint;
-    constructor(schemaType, field, constraint) {
-        super(`Schema validation failed for ${schemaType}.${field}: ${constraint}`);
-        this.schemaType = schemaType;
-        this.field = field;
-        this.constraint = constraint;
-        this.name = 'SchemaValidationError';
-    }
-}
-//# sourceMappingURL=schema.js.map

package/dist/mcp/lib/schema.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/mcp/lib/schema.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,oDAAoD,CAAC;AAEtF;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,kDAAkD,CAAC;AAElF;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,qDAAqD,CAAC;AAExF;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,sDAAsD,CAAC;AAE1F;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,oDAAoD,CAAC;AAEtF;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,EAAE,iBAAiB;IACzB,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,kBAAkB;IAC3B,QAAQ,EAAE,mBAAmB;IAC7B,MAAM,EAAE,iBAAiB;CACjB,CAAC;AAEX;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAA8B;IACzD,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY,EAAE,YAAsC;IACjF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,MAAM,WAAW,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IAE9C,OAAO,MAAM,CAAC,OAAO,KAAK,WAAW,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAErC;IACA;IACA;IAHT,YACS,UAAkB,EAClB,KAAa,EACb,UAAkB;QAEzB,KAAK,CAAC,gCAAgC,UAAU,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC,CAAC;QAJrE,eAAU,GAAV,UAAU,CAAQ;QAClB,UAAK,GAAL,KAAK,CAAQ;QACb,eAAU,GAAV,UAAU,CAAQ;QAGzB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF"}

package/dist/mcp/lib/security.d.ts

@@ -1,158 +0,0 @@
-/**
- * Security Hardening and Input Sanitization for CLEO MCP Server
- *
- * Provides input validation, path sanitization, content filtering,
- * enum checking, and rate limiting for all MCP operations.
- *
- * @task T3144
- * @epic T3125
- */
-/**
- * Security validation error thrown when input fails sanitization
- */
-export declare class SecurityError extends Error {
-    code: string;
-    field?: string | undefined;
-    constructor(message: string, code?: string, field?: string | undefined);
-}
-/**
- * Sanitize and validate a task ID
- *
- * Validates format: ^T[0-9]+$
- * Rejects empty, malformed, or excessively large IDs
- *
- * @param id - Raw task ID input
- * @returns Sanitized task ID
- * @throws SecurityError if ID is invalid
- */
-export declare function sanitizeTaskId(id: string): string;
-/**
- * Sanitize and validate a file path
- *
- * Prevents path traversal attacks by ensuring the resolved path
- * stays within the project root directory.
- *
- * @param path - Raw path input
- * @param projectRoot - Project root directory (absolute path)
- * @returns Sanitized absolute path within project root
- * @throws SecurityError if path escapes project root or is invalid
- */
-export declare function sanitizePath(path: string, projectRoot: string): string;
-/**
- * Sanitize content string
- *
- * Enforces size limits and strips control characters (except newline, tab, CR).
- *
- * @param content - Raw content string
- * @param maxLength - Maximum allowed length (default: 64KB)
- * @returns Sanitized content string
- * @throws SecurityError if content exceeds size limit
- */
-export declare function sanitizeContent(content: string, maxLength?: number): string;
-/**
- * Validate that a value is in an allowed enum set
- *
- * @param value - Value to validate
- * @param allowed - Array of allowed values
- * @param fieldName - Name of the field (for error messages)
- * @returns The validated value
- * @throws SecurityError if value is not in allowed set
- */
-export declare function validateEnum(value: string, allowed: string[], fieldName: string): string;
-/**
- * Known enum values for CLEO domains
- */
-export declare const VALID_DOMAINS: readonly ["tasks", "session", "orchestrate", "research", "lifecycle", "validate", "release", "system"];
-export declare const VALID_GATEWAYS: readonly ["cleo_query", "cleo_mutate"];
-export declare const VALID_STATUSES: readonly ["pending", "active", "blocked", "done"];
-export declare const VALID_MANIFEST_STATUSES: readonly ["complete", "partial", "blocked"];
-export declare const ALL_VALID_STATUSES: readonly ["pending", "active", "blocked", "done", "complete", "partial"];
-export declare const VALID_PRIORITIES: readonly ["low", "medium", "high", "critical"];
-/**
- * Rate limiter configuration
- */
-export interface RateLimitConfig {
-    /** Maximum requests allowed in the window */
-    maxRequests: number;
-    /** Time window in milliseconds */
-    windowMs: number;
-}
-/**
- * Rate limit check result
- */
-export interface RateLimitResult {
-    /** Whether the request is allowed */
-    allowed: boolean;
-    /** Remaining requests in current window */
-    remaining: number;
-    /** Milliseconds until window resets */
-    resetMs: number;
-    /** Total limit for the window */
-    limit: number;
-}
-/**
- * Default rate limit configurations per operation type
- */
-export declare const DEFAULT_RATE_LIMITS: Record<string, RateLimitConfig>;
-/**
- * In-memory sliding window rate limiter
- *
- * Tracks request timestamps per key and enforces configurable limits.
- */
-export declare class RateLimiter {
-    private windows;
-    private configs;
-    constructor(configs?: Record<string, RateLimitConfig>);
-    /**
-     * Check if a request is allowed under rate limits
-     *
-     * @param key - Rate limit bucket key (e.g., 'query', 'mutate', 'spawn')
-     * @returns Rate limit check result
-     */
-    check(key: string): RateLimitResult;
-    /**
-     * Record a request (call after check returns allowed: true)
-     *
-     * @param key - Rate limit bucket key
-     */
-    record(key: string): void;
-    /**
-     * Check and record in one step
-     *
-     * @param key - Rate limit bucket key
-     * @returns Rate limit check result (recorded if allowed)
-     */
-    consume(key: string): RateLimitResult;
-    /**
-     * Reset rate limit state for a specific key or all keys
-     *
-     * @param key - Optional key to reset (resets all if omitted)
-     */
-    reset(key?: string): void;
-    /**
-     * Get current configuration for a key
-     */
-    getConfig(key: string): RateLimitConfig | undefined;
-    /**
-     * Update configuration for a key
-     */
-    setConfig(key: string, config: RateLimitConfig): void;
-}
-/**
- * Sanitize all params in a DomainRequest before routing
- *
- * Applies appropriate sanitization based on known field names:
- * - taskId, parent, epicId -> sanitizeTaskId
- * - path, file -> sanitizePath (if projectRoot provided)
- * - title, description, notes, content -> sanitizeContent
- * - status -> validateEnum(VALID_STATUSES)
- * - priority -> validateEnum(VALID_PRIORITIES)
- * - domain -> validateEnum(VALID_DOMAINS)
- *
- * @param params - Raw request parameters
- * @param projectRoot - Project root for path sanitization
- * @returns Sanitized parameters
- * @throws SecurityError on validation failure
- */
-export declare function sanitizeParams(params: Record<string, unknown> | undefined, projectRoot?: string): Record<string, unknown> | undefined;
-//# sourceMappingURL=security.d.ts.map

package/dist/mcp/lib/security.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/mcp/lib/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAG7B,IAAI,EAAE,MAAM;IACZ,KAAK,CAAC,EAAE,MAAM;gBAFrB,OAAO,EAAE,MAAM,EACR,IAAI,GAAE,MAA+B,EACrC,KAAK,CAAC,EAAE,MAAM,YAAA;CAKxB;AAsBD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAuCjD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CA4DtE;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,MAAmC,GAC7C,MAAM,CAmBR;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EAAE,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAoBR;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,wGAGhB,CAAC;AAEX,eAAO,MAAM,cAAc,wCAAyC,CAAC;AAErE,eAAO,MAAM,cAAc,mDAAoD,CAAC;AAEhF,eAAO,MAAM,uBAAuB,6CAA8C,CAAC;AAEnF,eAAO,MAAM,kBAAkB,0EAAsD,CAAC;AAEtF,eAAO,MAAM,gBAAgB,gDAAiD,CAAC;AAE/E;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,qCAAqC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAI/D,CAAC;AAEF;;;;GAIG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,OAAO,CAA2C;gBAE9C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;IAQrD;;;;;OAKG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe;IAiCnC;;;;OAIG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAMzB;;;;;OAKG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe;IAUrC;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI;IAQzB;;OAEG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAInD;;OAEG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;CAGtD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC3C,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAkFrC"}