@cleocode/cleo 2026.2.5

package/dist/mcp/lib/mode-detector.js

@@ -0,0 +1,184 @@
+/**
+ * Execution Mode Detector
+ *
+ * Detects whether the CLEO CLI is available and determines the execution mode
+ * for the MCP server. Supports three modes:
+ *
+ * - native: TypeScript engine only (cross-platform, no bash needed)
+ * - cli: CLI subprocess only (Unix, requires bash + jq)
+ * - auto: Detect CLI availability; prefer CLI when found, fallback to native
+ *
+ * Controlled by MCP_EXECUTION_MODE environment variable.
+ */
+import { execFileSync } from 'child_process';
+/**
+ * Detect CLI availability and determine execution mode.
+ *
+ * Priority:
+ * 1. MCP_EXECUTION_MODE env: 'cli' (force CLI), 'native' (force native), 'auto' (default)
+ * 2. If auto: check CLEO_MCP_CLI_PATH env -> if set and executable, prefer CLI
+ * 3. If auto: check which/where cleo -> if found, prefer CLI
+ * 4. If auto: no CLI found -> native mode
+ */
+export function detectExecutionMode() {
+    const configuredMode = getConfiguredMode();
+    // Force native mode
+    if (configuredMode === 'native') {
+        return {
+            mode: 'native',
+            configuredMode,
+            cliAvailable: false,
+            cliPath: null,
+            cliVersion: null,
+            reason: 'MCP_EXECUTION_MODE=native (forced)',
+        };
+    }
+    // Check CLI availability
+    const cliCheck = checkCLIAvailability();
+    // Force CLI mode
+    if (configuredMode === 'cli') {
+        if (!cliCheck.available) {
+            return {
+                mode: 'cli',
+                configuredMode,
+                cliAvailable: false,
+                cliPath: null,
+                cliVersion: null,
+                reason: 'MCP_EXECUTION_MODE=cli (forced, but CLI not found - operations will fail)',
+            };
+        }
+        return {
+            mode: 'cli',
+            configuredMode,
+            cliAvailable: true,
+            cliPath: cliCheck.path,
+            cliVersion: cliCheck.version,
+            reason: 'MCP_EXECUTION_MODE=cli (forced)',
+        };
+    }
+    // Auto mode: detect CLI
+    if (cliCheck.available) {
+        return {
+            mode: 'cli',
+            configuredMode: 'auto',
+            cliAvailable: true,
+            cliPath: cliCheck.path,
+            cliVersion: cliCheck.version,
+            reason: `CLI detected at ${cliCheck.path} (auto mode, preferring CLI)`,
+        };
+    }
+    return {
+        mode: 'native',
+        configuredMode: 'auto',
+        cliAvailable: false,
+        cliPath: null,
+        cliVersion: null,
+        reason: 'CLI not found (auto mode, using native TypeScript engine)',
+    };
+}
+/**
+ * Get configured mode from environment
+ */
+function getConfiguredMode() {
+    const env = process.env.MCP_EXECUTION_MODE?.toLowerCase();
+    if (env === 'native' || env === 'cli' || env === 'auto') {
+        return env;
+    }
+    return 'auto';
+}
+/**
+ * Check if CLEO CLI is available
+ */
+function checkCLIAvailability() {
+    // 1. Check CLEO_MCP_CLI_PATH env
+    const envPath = process.env.CLEO_MCP_CLI_PATH;
+    if (envPath) {
+        const result = testCLIPath(envPath);
+        if (result.available) {
+            return result;
+        }
+    }
+    // 2. Check standard CLI path from config
+    const configPath = process.env.CLEO_CLI_PATH;
+    if (configPath) {
+        const result = testCLIPath(configPath);
+        if (result.available) {
+            return result;
+        }
+    }
+    // 3. Try which/where command to find cleo in PATH
+    const isWindows = process.platform === 'win32';
+    const whichCmd = isWindows ? 'where' : 'which';
+    for (const binary of ['cleo', 'ct']) {
+        try {
+            const cliPath = execFileSync(whichCmd, [binary], {
+                encoding: 'utf-8',
+                timeout: 5000,
+                stdio: ['pipe', 'pipe', 'pipe'],
+            }).trim().split('\n')[0];
+            if (cliPath) {
+                const result = testCLIPath(cliPath);
+                if (result.available) {
+                    return result;
+                }
+            }
+        }
+        catch {
+            // Binary not found in PATH
+        }
+    }
+    return { available: false, path: null, version: null };
+}
+/**
+ * Test if a CLI path is executable and returns a version.
+ * Uses execFileSync (no shell) to prevent command injection.
+ */
+function testCLIPath(cliPath) {
+    try {
+        const output = execFileSync(cliPath, ['version', '--json'], {
+            encoding: 'utf-8',
+            timeout: 10000,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        try {
+            const parsed = JSON.parse(output);
+            const version = parsed.version || parsed.data?.version || null;
+            return { available: true, path: cliPath, version };
+        }
+        catch {
+            // Non-JSON output but command succeeded
+            return { available: true, path: cliPath, version: null };
+        }
+    }
+    catch {
+        return { available: false, path: null, version: null };
+    }
+}
+/**
+ * Create the E_CLI_REQUIRED error response
+ */
+export function createCLIRequiredError(domain, operation) {
+    return {
+        success: false,
+        error: {
+            code: 'E_CLI_REQUIRED',
+            message: `Operation '${domain}.${operation}' requires the CLEO CLI (bash). Install with: ./install.sh`,
+            availableInStandaloneMode: false,
+            nativeAlternatives: [],
+        },
+    };
+}
+/**
+ * Create the E_NOT_INITIALIZED error response
+ */
+export function createNotInitializedError() {
+    return {
+        success: false,
+        error: {
+            code: 'E_NOT_INITIALIZED',
+            message: 'CLEO project not initialized. Run system.init or set CLEO_AUTO_INIT=true',
+            fix: "cleo_mutate({domain: 'system', operation: 'init'})",
+        },
+    };
+}
+//# sourceMappingURL=mode-detector.js.map

package/dist/mcp/lib/mode-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mode-detector.js","sourceRoot":"","sources":["../../../src/mcp/lib/mode-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AA8B7C;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;IAE3C,oBAAoB;IACpB,IAAI,cAAc,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,cAAc;YACd,YAAY,EAAE,KAAK;YACnB,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,oCAAoC;SAC7C,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IAExC,iBAAiB;IACjB,IAAI,cAAc,KAAK,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YACxB,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,cAAc;gBACd,YAAY,EAAE,KAAK;gBACnB,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,2EAA2E;aACpF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,KAAK;YACX,cAAc;YACd,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,QAAQ,CAAC,IAAI;YACtB,UAAU,EAAE,QAAQ,CAAC,OAAO;YAC5B,MAAM,EAAE,iCAAiC;SAC1C,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,KAAK;YACX,cAAc,EAAE,MAAM;YACtB,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,QAAQ,CAAC,IAAI;YACtB,UAAU,EAAE,QAAQ,CAAC,OAAO;YAC5B,MAAM,EAAE,mBAAmB,QAAQ,CAAC,IAAI,8BAA8B;SACvE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,cAAc,EAAE,MAAM;QACtB,YAAY,EAAE,KAAK;QACnB,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,2DAA2D;KACpE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,WAAW,EAAE,CAAC;IAC1D,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACxD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB;IAK3B,iCAAiC;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC9C,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC7C,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAE/C,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;gBAC/C,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAEzB,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;gBACpC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACrB,OAAO,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,OAAe;IAKlC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE;YAC1D,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC;YAC/D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;YACxC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,SAAiB;IAStE,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,cAAc,MAAM,IAAI,SAAS,4DAA4D;YACtG,yBAAyB,EAAE,KAAK;YAChC,kBAAkB,EAAE,EAAE;SACvB;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB;IAQvC,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACL,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,0EAA0E;YACnF,GAAG,EAAE,oDAAoD;SAC1D;KACF,CAAC;AACJ,CAAC"}

package/dist/mcp/lib/protocol-enforcement.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Protocol Enforcement Middleware for CLEO MCP Server
+ *
+ * @task T2918
+ * @epic T2908
+ *
+ * Validates RCSD-IVTR lifecycle compliance with exit codes 60-70.
+ * Intercepts domain operations to enforce protocol requirements before execution.
+ *
+ * Reference: lib/protocol-validation.sh, docs/specs/MCP-SERVER-SPECIFICATION.md
+ */
+import { ProtocolViolation, ProtocolValidationResult } from './protocol-rules.js';
+import { DomainRequest, DomainResponse } from './router.js';
+/**
+ * Protocol types aligned with RCSD-IVTR lifecycle
+ */
+export declare enum ProtocolType {
+    RESEARCH = "research",
+    CONSENSUS = "consensus",
+    SPECIFICATION = "specification",
+    DECOMPOSITION = "decomposition",
+    IMPLEMENTATION = "implementation",
+    CONTRIBUTION = "contribution",
+    RELEASE = "release",
+    VALIDATION = "validation",
+    TESTING = "testing"
+}
+/**
+ * Violation log entry
+ */
+export interface ViolationLogEntry {
+    timestamp: string;
+    taskId?: string;
+    protocol: ProtocolType;
+    violations: ProtocolViolation[];
+    score: number;
+    blocked: boolean;
+}
+/**
+ * Main protocol enforcement class
+ */
+export declare class ProtocolEnforcer {
+    private violations;
+    private strictMode;
+    constructor(strictMode?: boolean);
+    /**
+     * Validate protocol compliance for a manifest entry
+     */
+    validateProtocol(protocol: ProtocolType, manifestEntry: Record<string, unknown>, additionalData?: Record<string, unknown>): Promise<ProtocolValidationResult>;
+    /**
+     * Validate a single rule
+     */
+    private validateRule;
+    /**
+     * Check lifecycle gate prerequisites
+     */
+    checkLifecycleGate(_taskId: string, targetStage: string, rcsdManifest?: Record<string, unknown>): Promise<{
+        passed: boolean;
+        missingPrerequisites: string[];
+        message: string;
+    }>;
+    /**
+     * Record a protocol violation
+     */
+    recordViolation(protocol: ProtocolType, violations: ProtocolViolation[], score: number, taskId?: string): void;
+    /**
+     * Get recent violations
+     */
+    getViolations(limit?: number): ViolationLogEntry[];
+    /**
+     * Calculate penalty for violation severity
+     */
+    private calculatePenalty;
+    /**
+     * Middleware function for domain router
+     *
+     * Intercepts operations and validates protocol compliance before execution.
+     */
+    enforceProtocol(request: DomainRequest, next: () => Promise<DomainResponse>): Promise<DomainResponse>;
+    /**
+     * Determine if operation requires protocol validation
+     */
+    private requiresProtocolValidation;
+    /**
+     * Detect protocol type from request/response
+     */
+    private detectProtocol;
+    /**
+     * Extract manifest entry from response
+     */
+    private extractManifestEntry;
+    /**
+     * Set strict mode
+     */
+    setStrictMode(strict: boolean): void;
+    /**
+     * Get strict mode status
+     */
+    isStrictMode(): boolean;
+}
+/**
+ * Default protocol enforcer instance
+ */
+export declare const protocolEnforcer: ProtocolEnforcer;
+//# sourceMappingURL=protocol-enforcement.d.ts.map

package/dist/mcp/lib/protocol-enforcement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-enforcement.d.ts","sourceRoot":"","sources":["../../../src/mcp/lib/protocol-enforcement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAgB,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAEhG,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG5D;;GAEG;AACH,oBAAY,YAAY;IACtB,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IACjC,YAAY,iBAAiB;IAC7B,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,OAAO,YAAY;CACpB;AAgCD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,YAAY,CAAC;IACvB,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,UAAU,CAAU;gBAEhB,UAAU,GAAE,OAAc;IAItC;;OAEG;IACG,gBAAgB,CACpB,QAAQ,EAAE,YAAY,EACtB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvC,OAAO,CAAC,wBAAwB,CAAC;IAoCpC;;OAEG;YACW,YAAY;IA0B1B;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACrC,OAAO,CAAC;QACT,MAAM,EAAE,OAAO,CAAC;QAChB,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IAoCF;;OAEG;IACH,eAAe,CACb,QAAQ,EAAE,YAAY,EACtB,UAAU,EAAE,iBAAiB,EAAE,EAC/B,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,MAAM,GACd,IAAI;IAkBP;;OAEG;IACH,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,iBAAiB,EAAE;IAIlD;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;;;OAIG;IACG,eAAe,CACnB,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,GAClC,OAAO,CAAC,cAAc,CAAC;IA+D1B;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAgBlC;;OAEG;IACH,OAAO,CAAC,cAAc;IAiCtB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAmB5B;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI;IAIpC;;OAEG;IACH,YAAY,IAAI,OAAO;CAGxB;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB,kBAAyB,CAAC"}

package/dist/mcp/lib/protocol-enforcement.js

@@ -0,0 +1,331 @@
+/**
+ * Protocol Enforcement Middleware for CLEO MCP Server
+ *
+ * @task T2918
+ * @epic T2908
+ *
+ * Validates RCSD-IVTR lifecycle compliance with exit codes 60-70.
+ * Intercepts domain operations to enforce protocol requirements before execution.
+ *
+ * Reference: lib/protocol-validation.sh, docs/specs/MCP-SERVER-SPECIFICATION.md
+ */
+import { PROTOCOL_RULES } from './protocol-rules.js';
+import { ExitCode } from './exit-codes.js';
+/**
+ * Protocol types aligned with RCSD-IVTR lifecycle
+ */
+export var ProtocolType;
+(function (ProtocolType) {
+    ProtocolType["RESEARCH"] = "research";
+    ProtocolType["CONSENSUS"] = "consensus";
+    ProtocolType["SPECIFICATION"] = "specification";
+    ProtocolType["DECOMPOSITION"] = "decomposition";
+    ProtocolType["IMPLEMENTATION"] = "implementation";
+    ProtocolType["CONTRIBUTION"] = "contribution";
+    ProtocolType["RELEASE"] = "release";
+    ProtocolType["VALIDATION"] = "validation";
+    ProtocolType["TESTING"] = "testing";
+})(ProtocolType || (ProtocolType = {}));
+/**
+ * Exit code mapping for protocol violations
+ */
+const PROTOCOL_EXIT_CODES = {
+    [ProtocolType.RESEARCH]: ExitCode.E_PROTOCOL_RESEARCH,
+    [ProtocolType.CONSENSUS]: ExitCode.E_PROTOCOL_CONSENSUS,
+    [ProtocolType.SPECIFICATION]: ExitCode.E_PROTOCOL_SPECIFICATION,
+    [ProtocolType.DECOMPOSITION]: ExitCode.E_PROTOCOL_DECOMPOSITION,
+    [ProtocolType.IMPLEMENTATION]: ExitCode.E_PROTOCOL_IMPLEMENTATION,
+    [ProtocolType.CONTRIBUTION]: ExitCode.E_PROTOCOL_CONTRIBUTION,
+    [ProtocolType.RELEASE]: ExitCode.E_PROTOCOL_RELEASE,
+    [ProtocolType.VALIDATION]: ExitCode.E_PROTOCOL_VALIDATION,
+    [ProtocolType.TESTING]: ExitCode.E_TESTS_SKIPPED,
+};
+/**
+ * Lifecycle stage dependencies
+ */
+const LIFECYCLE_GATES = {
+    research: [],
+    consensus: ['research'],
+    specification: ['research', 'consensus'],
+    decomposition: ['research', 'consensus', 'specification'],
+    implementation: ['research', 'consensus', 'specification', 'decomposition'],
+    contribution: [], // Cross-cutting: no strict prerequisites
+    validation: ['implementation'],
+    testing: ['implementation', 'validation'],
+    release: ['implementation', 'validation', 'testing'],
+};
+/**
+ * Main protocol enforcement class
+ */
+export class ProtocolEnforcer {
+    violations = [];
+    strictMode;
+    constructor(strictMode = true) {
+        this.strictMode = strictMode;
+    }
+    /**
+     * Validate protocol compliance for a manifest entry
+     */
+    async validateProtocol(protocol, manifestEntry, additionalData) {
+        const rules = PROTOCOL_RULES[protocol];
+        if (!rules) {
+            return {
+                valid: false,
+                violations: [
+                    {
+                        requirement: 'UNKNOWN',
+                        severity: 'error',
+                        message: `Unknown protocol type: ${protocol}`,
+                        fix: 'Use valid protocol type',
+                    },
+                ],
+                score: 0,
+            };
+        }
+        const violations = [];
+        let score = 100;
+        // Validate each rule
+        for (const rule of rules) {
+            const violation = await this.validateRule(rule, manifestEntry, additionalData);
+            if (violation) {
+                violations.push(violation);
+                score -= this.calculatePenalty(violation.severity);
+            }
+        }
+        return {
+            valid: violations.filter((v) => v.severity === 'error').length === 0,
+            violations,
+            score,
+        };
+    }
+    /**
+     * Validate a single rule
+     */
+    async validateRule(rule, manifestEntry, additionalData) {
+        try {
+            const isValid = await rule.validate(manifestEntry, additionalData);
+            if (!isValid) {
+                return {
+                    requirement: rule.id,
+                    severity: rule.level === 'MUST' ? 'error' : 'warning',
+                    message: rule.message,
+                    fix: rule.fix,
+                };
+            }
+            return null;
+        }
+        catch (error) {
+            return {
+                requirement: rule.id,
+                severity: 'error',
+                message: `Validation error: ${error instanceof Error ? error.message : String(error)}`,
+                fix: rule.fix,
+            };
+        }
+    }
+    /**
+     * Check lifecycle gate prerequisites
+     */
+    async checkLifecycleGate(_taskId, targetStage, rcsdManifest) {
+        const prerequisites = LIFECYCLE_GATES[targetStage] || [];
+        if (!rcsdManifest) {
+            // No manifest available - warn but allow
+            return {
+                passed: true,
+                missingPrerequisites: [],
+                message: 'No RCSD manifest found - skipping gate check',
+            };
+        }
+        const missingPrerequisites = [];
+        for (const prereq of prerequisites) {
+            const stageStatus = rcsdManifest[prereq];
+            if (stageStatus !== 'completed' && stageStatus !== 'skipped') {
+                missingPrerequisites.push(prereq);
+            }
+        }
+        if (missingPrerequisites.length > 0) {
+            return {
+                passed: false,
+                missingPrerequisites,
+                message: `Lifecycle gate failed: missing prerequisites [${missingPrerequisites.join(', ')}]`,
+            };
+        }
+        return {
+            passed: true,
+            missingPrerequisites: [],
+            message: 'All prerequisites met',
+        };
+    }
+    /**
+     * Record a protocol violation
+     */
+    recordViolation(protocol, violations, score, taskId) {
+        const entry = {
+            timestamp: new Date().toISOString(),
+            taskId,
+            protocol,
+            violations,
+            score,
+            blocked: this.strictMode && violations.some((v) => v.severity === 'error'),
+        };
+        this.violations.push(entry);
+        // Keep last 1000 violations
+        if (this.violations.length > 1000) {
+            this.violations.shift();
+        }
+    }
+    /**
+     * Get recent violations
+     */
+    getViolations(limit) {
+        return limit ? this.violations.slice(-limit) : this.violations;
+    }
+    /**
+     * Calculate penalty for violation severity
+     */
+    calculatePenalty(severity) {
+        return severity === 'error' ? 20 : 5;
+    }
+    /**
+     * Middleware function for domain router
+     *
+     * Intercepts operations and validates protocol compliance before execution.
+     */
+    async enforceProtocol(request, next) {
+        // Only enforce on mutate operations that may create outputs
+        if (request.gateway !== 'cleo_mutate') {
+            return next();
+        }
+        // Check if operation requires protocol validation
+        const requiresValidation = this.requiresProtocolValidation(request);
+        if (!requiresValidation) {
+            return next();
+        }
+        // Execute the operation
+        const response = await next();
+        // Skip validation if operation failed
+        if (!response.success) {
+            return response;
+        }
+        // Extract protocol type from request/response
+        const protocol = this.detectProtocol(request, response);
+        if (!protocol) {
+            return response;
+        }
+        // Validate protocol compliance
+        const manifestEntry = this.extractManifestEntry(response);
+        if (!manifestEntry) {
+            return response; // No manifest to validate
+        }
+        const result = await this.validateProtocol(protocol, manifestEntry, request.params);
+        // Record violation
+        const taskId = request.params?.taskId;
+        this.recordViolation(protocol, result.violations, result.score, taskId);
+        // If strict mode and errors found, block the operation
+        if (this.strictMode && !result.valid) {
+            return {
+                _meta: response._meta,
+                success: false,
+                error: {
+                    code: `E_PROTOCOL_${protocol.toUpperCase()}`,
+                    exitCode: PROTOCOL_EXIT_CODES[protocol],
+                    message: `Protocol violation: ${protocol}`,
+                    details: {
+                        violations: result.violations,
+                        score: result.score,
+                    },
+                    fix: result.violations[0]?.fix || 'Fix protocol violations',
+                    alternatives: result.violations.map((v) => ({
+                        action: v.requirement,
+                        command: v.fix,
+                    })),
+                },
+            };
+        }
+        return response;
+    }
+    /**
+     * Determine if operation requires protocol validation
+     */
+    requiresProtocolValidation(request) {
+        // Operations that create outputs requiring validation
+        const validatedOperations = [
+            'research.inject',
+            'research.manifest.append',
+            'orchestrate.spawn',
+            'tasks.complete',
+            'release.prepare',
+            'release.commit',
+            'validate.compliance.record',
+        ];
+        const key = `${request.domain}.${request.operation}`;
+        return validatedOperations.includes(key);
+    }
+    /**
+     * Detect protocol type from request/response
+     */
+    detectProtocol(request, _response) {
+        // Check params for explicit protocol
+        if (request.params?.protocolType) {
+            return request.params.protocolType;
+        }
+        // Infer from domain
+        const domainProtocolMap = {
+            research: ProtocolType.RESEARCH,
+            orchestrate: ProtocolType.DECOMPOSITION,
+            release: ProtocolType.RELEASE,
+            validate: ProtocolType.VALIDATION,
+            testing: ProtocolType.TESTING,
+            contribution: ProtocolType.CONTRIBUTION,
+        };
+        // Infer from operation name
+        if (request.operation) {
+            const opProtocolMap = {
+                'consensus.record': ProtocolType.CONSENSUS,
+                'specification.validate': ProtocolType.SPECIFICATION,
+                'implementation.complete': ProtocolType.IMPLEMENTATION,
+                'contribution.merge': ProtocolType.CONTRIBUTION,
+            };
+            const opKey = `${request.domain}.${request.operation}`;
+            if (opProtocolMap[opKey]) {
+                return opProtocolMap[opKey];
+            }
+        }
+        return domainProtocolMap[request.domain] || null;
+    }
+    /**
+     * Extract manifest entry from response
+     */
+    extractManifestEntry(response) {
+        const data = response.data;
+        if (!data) {
+            return null;
+        }
+        // Check for manifest entry in response
+        if (data.manifestEntry) {
+            return data.manifestEntry;
+        }
+        // Check for entry field
+        if (data.entry) {
+            return data.entry;
+        }
+        return null;
+    }
+    /**
+     * Set strict mode
+     */
+    setStrictMode(strict) {
+        this.strictMode = strict;
+    }
+    /**
+     * Get strict mode status
+     */
+    isStrictMode() {
+        return this.strictMode;
+    }
+}
+/**
+ * Default protocol enforcer instance
+ */
+export const protocolEnforcer = new ProtocolEnforcer();
+//# sourceMappingURL=protocol-enforcement.js.map

package/dist/mcp/lib/protocol-enforcement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-enforcement.js","sourceRoot":"","sources":["../../../src/mcp/lib/protocol-enforcement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C;;GAEG;AACH,MAAM,CAAN,IAAY,YAUX;AAVD,WAAY,YAAY;IACtB,qCAAqB,CAAA;IACrB,uCAAuB,CAAA;IACvB,+CAA+B,CAAA;IAC/B,+CAA+B,CAAA;IAC/B,iDAAiC,CAAA;IACjC,6CAA6B,CAAA;IAC7B,mCAAmB,CAAA;IACnB,yCAAyB,CAAA;IACzB,mCAAmB,CAAA;AACrB,CAAC,EAVW,YAAY,KAAZ,YAAY,QAUvB;AAED;;GAEG;AACH,MAAM,mBAAmB,GAAmC;IAC1D,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,mBAAmB;IACrD,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,oBAAoB;IACvD,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,wBAAwB;IAC/D,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,wBAAwB;IAC/D,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,yBAAyB;IACjE,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,uBAAuB;IAC7D,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,kBAAkB;IACnD,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,qBAAqB;IACzD,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,eAAe;CACjD,CAAC;AAEF;;GAEG;AACH,MAAM,eAAe,GAA6B;IAChD,QAAQ,EAAE,EAAE;IACZ,SAAS,EAAE,CAAC,UAAU,CAAC;IACvB,aAAa,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;IACxC,aAAa,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,eAAe,CAAC;IACzD,cAAc,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,CAAC;IAC3E,YAAY,EAAE,EAAE,EAAE,yCAAyC;IAC3D,UAAU,EAAE,CAAC,gBAAgB,CAAC;IAC9B,OAAO,EAAE,CAAC,gBAAgB,EAAE,YAAY,CAAC;IACzC,OAAO,EAAE,CAAC,gBAAgB,EAAE,YAAY,EAAE,SAAS,CAAC;CACrD,CAAC;AAcF;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACnB,UAAU,GAAwB,EAAE,CAAC;IACrC,UAAU,CAAU;IAE5B,YAAY,aAAsB,IAAI;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,QAAsB,EACtB,aAAsC,EACtC,cAAwC;QAExC,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,UAAU,EAAE;oBACV;wBACE,WAAW,EAAE,SAAS;wBACtB,QAAQ,EAAE,OAAO;wBACjB,OAAO,EAAE,0BAA0B,QAAQ,EAAE;wBAC7C,GAAG,EAAE,yBAAyB;qBAC/B;iBACF;gBACD,KAAK,EAAE,CAAC;aACT,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAwB,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,GAAG,CAAC;QAEhB,qBAAqB;QACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;YAC/E,IAAI,SAAS,EAAE,CAAC;gBACd,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3B,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;YACpE,UAAU;YACV,KAAK;SACN,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CACxB,IAAkB,EAClB,aAAsC,EACtC,cAAwC;QAExC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,WAAW,EAAE,IAAI,CAAC,EAAE;oBACpB,QAAQ,EAAE,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;oBACrD,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,GAAG,EAAE,IAAI,CAAC,GAAG;iBACd,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,EAAE;gBACpB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBACtF,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAe,EACf,WAAmB,EACnB,YAAsC;QAMtC,MAAM,aAAa,GAAG,eAAe,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAEzD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,yCAAyC;YACzC,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,oBAAoB,EAAE,EAAE;gBACxB,OAAO,EAAE,8CAA8C;aACxD,CAAC;QACJ,CAAC;QAED,MAAM,oBAAoB,GAAa,EAAE,CAAC;QAE1C,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,WAAW,KAAK,WAAW,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC7D,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,oBAAoB;gBACpB,OAAO,EAAE,iDAAiD,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aAC7F,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,oBAAoB,EAAE,EAAE;YACxB,OAAO,EAAE,uBAAuB;SACjC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CACb,QAAsB,EACtB,UAA+B,EAC/B,KAAa,EACb,MAAe;QAEf,MAAM,KAAK,GAAsB;YAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM;YACN,QAAQ;YACR,UAAU;YACV,KAAK;YACL,OAAO,EAAE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;SAC3E,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE5B,4BAA4B;QAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAc;QAC1B,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACjE,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,QAA6B;QACpD,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CACnB,OAAsB,EACtB,IAAmC;QAEnC,4DAA4D;QAC5D,IAAI,OAAO,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;YACtC,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,kDAAkD;QAClD,MAAM,kBAAkB,GAAG,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACpE,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,wBAAwB;QACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAE9B,sCAAsC;QACtC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,+BAA+B;QAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,QAAQ,CAAC,CAAC,0BAA0B;QAC7C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAEpF,mBAAmB;QACnB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,MAA4B,CAAC;QAC5D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAExE,uDAAuD;QACvD,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO;gBACL,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,cAAc,QAAQ,CAAC,WAAW,EAAE,EAAE;oBAC5C,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,CAAC;oBACvC,OAAO,EAAE,uBAAuB,QAAQ,EAAE;oBAC1C,OAAO,EAAE;wBACP,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;qBACpB;oBACD,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,yBAAyB;oBAC3D,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC1C,MAAM,EAAE,CAAC,CAAC,WAAW;wBACrB,OAAO,EAAE,CAAC,CAAC,GAAG;qBACf,CAAC,CAAC;iBACJ;aACF,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,0BAA0B,CAAC,OAAsB;QACvD,sDAAsD;QACtD,MAAM,mBAAmB,GAAG;YAC1B,iBAAiB;YACjB,0BAA0B;YAC1B,mBAAmB;YACnB,gBAAgB;YAChB,iBAAiB;YACjB,gBAAgB;YAChB,4BAA4B;SAC7B,CAAC;QAEF,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACrD,OAAO,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,OAAsB,EAAE,SAAyB;QACtE,qCAAqC;QACrC,IAAI,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,MAAM,CAAC,YAA4B,CAAC;QACrD,CAAC;QAED,oBAAoB;QACpB,MAAM,iBAAiB,GAAiC;YACtD,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,WAAW,EAAE,YAAY,CAAC,aAAa;YACvC,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,QAAQ,EAAE,YAAY,CAAC,UAAU;YACjC,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,YAAY,EAAE,YAAY,CAAC,YAAY;SACxC,CAAC;QAEF,4BAA4B;QAC5B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,aAAa,GAAiC;gBAClD,kBAAkB,EAAE,YAAY,CAAC,SAAS;gBAC1C,wBAAwB,EAAE,YAAY,CAAC,aAAa;gBACpD,yBAAyB,EAAE,YAAY,CAAC,cAAc;gBACtD,oBAAoB,EAAE,YAAY,CAAC,YAAY;aAChD,CAAC;YACF,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACvD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,OAAO,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IACnD,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,QAAwB;QACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAA2C,CAAC;QAClE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uCAAuC;QACvC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,aAAwC,CAAC;QACvD,CAAC;QAED,wBAAwB;QACxB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAgC,CAAC;QAC/C,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,MAAe;QAC3B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,EAAE,CAAC"}