@cybedefend/vibedefend 1.6.0 → 1.8.0

package/README.md

@@ -31,7 +31,11 @@ The installer is fully interactive, and signs you in **first**:
 5. **MCP proxy** — put the VibeDefend proxy in front of your other MCP
    servers (yes by default), so each tool is checked against your
    organization policy before your agent calls it. CybeDefend's own MCP
-   server is never wrapped.
+   server is never wrapped. The proxy also reports to your organization the
+   MCP servers it sees and the calls it refused, asked about, warned on or
+   whose result it flagged (never their arguments or results), and it
+   applies your organization's blocks within 15 minutes; this needs the
+   CybeDefend gateway of 2026-10-28.
 6. **MCP sign-ins** — the sign-ins Claude Code or Codex already hold for
    those servers are taken over on their own. Your browser opens only for the
    servers left without one, if you say yes (or later:
@@ -55,16 +59,16 @@ npm  install -g @cybedefend/vibedefend && vibedefend install
 
 VibeDefend auto-detects and wires whichever of these you have installed.
 
-| Capability | Claude Code | Cursor | OpenAI Codex | Windsurf | VS Code Copilot |
-|---|:---:|:---:|:---:|:---:|:---:|
-| **MCP server install** | ✅ | ✅ | ✅ | ✅ | ✅ |
-| **Business + Security Rules** *(injected pre-write)* | ✅ edit + shell⁴ | ✅ | ✅ edit + shell⁴ | ⚠️ writes only | ✅ |
-| **Action Guards** *(hard block on deny)* | ✅ all tools | ✅ all tools | ✅ all tools | ⚠️ writes + MCP fallback¹ | ❌ not yet wired |
-| **Session Start** *(loads doctrine + proposals inbox)* | ✅ | ✅ | ✅ | ⚠️ proxied² | ✅ |
-| **Session Review** *(end-of-session gap analysis + pre-commit diff scan)* | ✅ | ✅ | ✅ | ✅ | ✅ |
-| **PreCompact** *(long-session gap analysis)* | ✅ | ✅ | ❌ no event | ❌ no event | ✅ |
-| **Doctrine backstop** *(per-prompt reminder)* | ✅ | ❌ | ✱ via MCP³ | ❌ | ❌ |
-| **Min version** | latest | ≥ 1.7 | latest | latest | ≥ 1.110 |
+| Capability | Claude Code | Cursor | OpenAI Codex | Windsurf | VS Code Copilot | Google Antigravity |
+|---|:---:|:---:|:---:|:---:|:---:|:---:|
+| **MCP server install** | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
+| **Business + Security Rules** *(injected pre-write)* | ✅ edit + shell⁴ | ✅ | ✅ edit + shell⁴ | ⚠️ writes only | ✅ | ⚠️ edit + shell⁴, after the edit⁵ |
+| **Action Guards** *(hard block on deny)* | ✅ all tools | ✅ all tools | ✅ all tools | ⚠️ writes + MCP fallback¹ | ❌ not yet wired | ✅ all tools⁶ |
+| **Session Start** *(loads doctrine + proposals inbox)* | ✅ | ✅ | ✅ | ⚠️ proxied² | ✅ | ✅ |
+| **Session Review** *(end-of-session gap analysis + pre-commit diff scan)* | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
+| **PreCompact** *(long-session gap analysis)* | ✅ | ✅ | ❌ no event | ❌ no event | ✅ | ❌ no event |
+| **Doctrine backstop** *(per-prompt reminder)* | ✅ | ❌ | ✱ via MCP³ | ❌ | ❌ | ❌ |
+| **Min version** | latest | ≥ 1.7 | latest | latest | ≥ 1.110 | ≥ 2.0 (app / IDE) |
 
 **Legend** — ✅ supported · ⚠️ supported with caveats · ❌ not exposed by the agent · ✱ alternate mechanism
 
@@ -74,7 +78,11 @@ VibeDefend auto-detects and wires whichever of these you have installed.
 
 ³ Codex follows the doctrine via the MCP server's `Server.instructions` field on each session, removing the need for a per-prompt reminder hook.
 
-⁴ On Claude Code and Codex the rules hook also fires on shell commands that write files (`>` / `>>` redirections, heredocs, `tee`, `sed -i`, `perl -pi`, `cp` / `mv`, `dd of=`, `bash -c '…'`), so an agent that edits through the shell gets the same rules as one using the edit tool. Read-only commands fetch nothing. Inline interpreters (`python -c`, `node -e`) and `git apply` / `patch` are not inspected. Cursor, Windsurf and VS Code Copilot: edit tools only.
+⁴ On Claude Code, Codex and Antigravity (its `run_command` tool) the rules hook also fires on shell commands that write files (`>` / `>>` redirections, heredocs, `tee`, `sed -i`, `perl -pi`, `cp` / `mv`, `dd of=`, `bash -c '…'`), so an agent that edits through the shell gets the same rules as one using the edit tool. Read-only commands fetch nothing. Inline interpreters (`python -c`, `node -e`) and `git apply` / `patch` are not inspected. Cursor, Windsurf and VS Code Copilot: edit tools only.
+
+⁵ Antigravity has no channel to inject context into the model from its PreToolUse hook, so rules fetched before a write are held and delivered at the agent's next model call (its PreInvocation event) instead — one step later than on every other client, but before the agent acts on what it just read.
+
+⁶ `agy --dangerously-skip-permissions` runs no hook at all, on any event. On Windows, a home path with a space in it is not supported — Antigravity has no way to quote the hook command it runs, so the installer detects this and refuses to wire a dead command rather than silently blocking every tool call. Antigravity's MCP servers are **not** wrapped by the VibeDefend MCP proxy (like Codex today): the CybeDefend server is registered directly against the region's URL.
 
 **Codex setup gotcha:** Codex 0.131+ requires you to approve each hook via the `/hooks` panel inside Codex *before* they fire. After running `vibedefend install`, open Codex, run `/hooks`, and trust the `cybedefend` entries — until you do that the panel will show `Installed N / Active 0`.
 
@@ -272,7 +280,10 @@ deletes `~/.cybedefend/`, keeping only your own `~/.cybedefend/regions.json`.
 Repositories keep their committed `.cybedefend/config.json`. A Windsurf
 `.windsurfrules` block is removed from the current directory only: in any other
 repo you wired for Windsurf, delete it by hand. Codex's `[features] hooks = true`
-flag stays set, since other hooks may rely on it.
+flag stays set, since other hooks may rely on it. Antigravity's `hooks.json` and
+`mcp_config.json` are user-global (shared by the app, the IDE extension and
+`agy`, never per-project), so uninstall drops our `cybedefend-*` groups and MCP
+server from there once, for every project — there is no per-repo cleanup to do.
 
 ## Sibling: `cybedefend-cli`
 

package/dist/clients/antigravity.js

@@ -0,0 +1,327 @@
+/**
+ * Google Antigravity adapter.
+ *
+ * Antigravity shares one hooks file between the app, the IDE extension and
+ * `agy` — global, never per-project: `~/.gemini/config/hooks.json` (Windows:
+ * `%USERPROFILE%\.gemini\config\hooks.json`). Its top-level keys are hook
+ * GROUP names, not event names (contrast Cursor/Codex/Windsurf, which key by
+ * event). Each group nests its handlers under the events it fires on:
+ *
+ *   PreToolUse (and other tool events):
+ *     { "<group>": { "PreToolUse": [{ "matcher": "<regex>", "hooks": [
+ *         { "type": "command", "command": "…", "timeout": 30 } ] }] } }
+ *   Every other event (SessionStart, PreInvocation, Stop, …) lists the
+ *   handler directly, with no matcher/hooks nesting:
+ *     { "<group>": { "SessionStart": [
+ *         { "type": "command", "command": "…", "timeout": 30 } ] } }
+ * A group may also carry a sibling `"enabled"` boolean, which the user can
+ * flip in the Antigravity UI; `writeSettings` preserves it across a
+ * reinstall (see `writeSettings` below).
+ *
+ * We write 5 groups, one per moment, all prefixed `cybedefend-`:
+ *   - cybedefend-session-start   SessionStart  → session-start
+ *   - cybedefend-rules           PreToolUse    → fetch-rules   (matcher "*", self-filtered)
+ *   - cybedefend-rules-delivery  PreInvocation → pre-invocation (injects stashed rules)
+ *   - cybedefend-guards          PreToolUse    → guard-check   (matcher "*", every tool)
+ *   - cybedefend-session-review  Stop          → session-review (only when enabled)
+ *
+ * A top-level key is OURS when its name starts with `cybedefend-` AND its
+ * JSON references our managed hook dir (`textReferencesHookRunner`). That
+ * is a stronger bar than the prefix alone — a user's own `cybedefend-mine`
+ * group, wired to a command of their own, is never touched. `writeSettings`
+ * drops our groups wholesale and rewrites them fresh (so a re-install can
+ * never duplicate a handler inside a group — there's nothing to dedupe,
+ * each key is written exactly once, and an old group of ours under a
+ * command shape a previous version wrote is replaced, never kept alongside
+ * the new one), and `uninstall` only drops them.
+ *
+ * Hook commands: Antigravity runs a POSIX hook through `sh -c "<command>"`
+ * and a Windows one through `cmd /C "<command>"` — never execve directly —
+ * so:
+ *   - POSIX: `node <runner> <sub> --client antigravity || echo '<fallback>'`.
+ *     A missing `node`/runner (or any runner crash) then answers the same
+ *     fallback a healthy run would print on its own early-exit path, instead
+ *     of blocking every tool call fail-closed forever.
+ *   - Windows: `node <runner> <sub> --client antigravity`, no quoting and no
+ *     `|| echo '<fallback>'`. `agy` escapes embedded quotes, and the
+ *     fallback JSON (`{"decision":"allow"}`) is itself quote-bearing, so
+ *     there is no way to nest it inside the already-quoted `cmd /C "…"`
+ *     invocation without `agy` mangling it on the way in. The runner path
+ *     can't be quoted either, so a path containing whitespace can't be
+ *     spawned at all — `detect()`, AND `writeSettings()` itself (belt and
+ *     suspenders: a manually-ticked client that `detect()` never got to
+ *     veto, or `vibedefend doctor` re-wiring from `detect().installed`
+ *     alone), both check this (`antigravityWindowsBlock`) and refuse to
+ *     wire a command that would never run.
+ *
+ * The fallback is `{"decision":"allow"}` for the two PreToolUse subcommands
+ * (fetch-rules, guard-check) — a dead runner must fail OPEN there, exactly
+ * like every other client's hook does when it can't execute — and `{}` for
+ * every other subcommand, which Antigravity expects verbatim on success.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { readJson, writeJson } from '../json-file.js';
+import { home, log, stripBom } from '../utils.js';
+import { HOOK_RUNNER_PATH, toPosixPath, quoteCommandPath, textReferencesHookRunner } from '../hooks/install.js';
+import { PRE_TOOL_USE_SUBCOMMANDS } from '../hooks/runtime/emit.js';
+import { mcpStatus, readJsonServerEntry } from './mcp-url.js';
+import { deleteKeys, editJsonFile } from './unwire.js';
+import { configDirExists, probeBinaryVersion } from './detect.js';
+const ANTIGRAVITY_HOOKS = home('.gemini', 'config', 'hooks.json');
+const ANTIGRAVITY_MCP = home('.gemini', 'config', 'mcp_config.json');
+/**
+ * The `command` field of an Antigravity hook handler, targeting `sub` on
+ * `--client antigravity`. `--client` and `antigravity` are two separate
+ * argv tokens — the runner's arg parser skips anything before the
+ * subcommand and ignores a combined `--client=antigravity`.
+ */
+export function antigravityHookCommand(sub, opts = {}) {
+    const platform = opts.platform ?? process.platform;
+    // Forward-slash first (Windows-shell safe), as `hookCommand` does.
+    const runnerPath = toPosixPath(opts.runnerPath ?? HOOK_RUNNER_PATH);
+    if (platform === 'win32') {
+        // No quoting (a quoted path can't be spawned) and no `|| echo` fallback:
+        // the fallback JSON is quote-bearing and `agy` escapes embedded quotes,
+        // so nesting it inside the already-quoted `cmd /C "…"` invocation would
+        // be mangled rather than run.
+        return `node ${runnerPath} ${sub} --client antigravity`;
+    }
+    const fallback = PRE_TOOL_USE_SUBCOMMANDS.has(sub) ? '{"decision":"allow"}' : '{}';
+    return `node ${quoteCommandPath(runnerPath)} ${sub} --client antigravity || echo '${fallback}'`;
+}
+/**
+ * `null` unless Antigravity on Windows cannot spawn `runnerPath` at all — a
+ * whitespace path with no safe quoting mechanism available. Used by both
+ * `detect()` and `writeSettings()` (to report/refuse instead of wiring a
+ * dead command) and by tests.
+ */
+export function antigravityWindowsBlock(platform, runnerPath) {
+    if (platform !== 'win32')
+        return null;
+    if (!/\s/.test(runnerPath))
+        return null;
+    return `Antigravity on Windows cannot run a hook whose path contains a space: ${runnerPath}`;
+}
+/**
+ * The 5 (or 4, with session review off) `cybedefend-*` hook groups, keyed by
+ * group name — ready to be merged as whole top-level keys into `hooks.json`.
+ */
+export function buildAntigravityHookGroups(opts) {
+    const cmd = (sub) => antigravityHookCommand(sub, { platform: opts.platform, runnerPath: opts.runnerPath });
+    const groups = {
+        'cybedefend-session-start': {
+            SessionStart: [{ type: 'command', command: cmd('session-start'), timeout: 30 }],
+        },
+        'cybedefend-rules': {
+            PreToolUse: [
+                {
+                    // Every tool (Ruling R14): Antigravity's tool names change with the
+                    // model (`write_to_file` or `write_file`, `replace_file_content` or
+                    // `edit_file`, …), and a matcher that missed one silently dropped
+                    // the rules for every write. fetch-rules keeps only the write and
+                    // shell tools itself and answers `allow` at once on any other.
+                    matcher: '*',
+                    hooks: [{ type: 'command', command: cmd('fetch-rules'), timeout: 30 }],
+                },
+            ],
+        },
+        'cybedefend-rules-delivery': {
+            PreInvocation: [{ type: 'command', command: cmd('pre-invocation'), timeout: 10 }],
+        },
+        'cybedefend-guards': {
+            PreToolUse: [
+                {
+                    matcher: '*',
+                    hooks: [{ type: 'command', command: cmd('guard-check'), timeout: 30 }],
+                },
+            ],
+        },
+    };
+    if (opts.enableSessionReview) {
+        groups['cybedefend-session-review'] = {
+            Stop: [{ type: 'command', command: cmd('session-review'), timeout: 30 }],
+        };
+    }
+    return groups;
+}
+/** Top-level keys of `file` that are ours: prefix `cybedefend-` AND the JSON references our managed hook dir. */
+function ourGroupKeys(file) {
+    return Object.keys(file).filter((key) => key.startsWith('cybedefend-') && textReferencesHookRunner(JSON.stringify(file[key])));
+}
+/**
+ * Delete every top-level key of `file` that is ours (prefix `cybedefend-`
+ * AND its JSON references our managed hook dir). A user's own
+ * `cybedefend-*` group that doesn't mention our runner is left alone — the
+ * prefix alone is not a strong enough signal to delete someone else's
+ * config. Returns whether anything was removed.
+ */
+function dropOurGroups(file) {
+    const keys = ourGroupKeys(file);
+    for (const key of keys)
+        delete file[key];
+    return keys.length > 0;
+}
+/**
+ * The names of our groups the user has switched off (`"enabled": false`,
+ * Antigravity's own per-group toggle) before they get dropped and rewritten
+ * — so `writeSettings` can carry that flag over onto the fresh replacement
+ * instead of silently re-enabling a group the user turned off.
+ */
+function disabledOurGroups(file) {
+    const disabled = new Set();
+    for (const key of ourGroupKeys(file)) {
+        const group = file[key];
+        if (group && typeof group === 'object' && group.enabled === false) {
+            disabled.add(key);
+        }
+    }
+    return disabled;
+}
+function detect() {
+    const version = probeBinaryVersion('agy') ?? undefined;
+    const hasConfigDir = configDirExists(home('.gemini', 'antigravity')) ||
+        configDirExists(home('.gemini', 'antigravity-ide')) ||
+        configDirExists(home('.gemini', 'antigravity-cli'));
+    const hasApp = process.platform === 'darwin' && existsSync('/Applications/Antigravity.app');
+    const installed = version !== undefined || hasConfigDir || hasApp;
+    // Computed regardless of `installed`: a Windows home with a whitespace
+    // path is the more actionable reason to surface, and `writeSettings` is
+    // reachable even from a "not installed" detection (a client manually
+    // ticked in the install picker, or `vibedefend doctor` re-wiring from
+    // `detect().installed` alone without re-checking `supportsHooks`).
+    const windowsBlock = antigravityWindowsBlock(process.platform, HOOK_RUNNER_PATH);
+    if (!installed) {
+        return {
+            installed: false,
+            supportsHooks: false,
+            reason: windowsBlock ??
+                '`agy` CLI not on PATH, no ~/.gemini/antigravity(-ide|-cli)/ directory, ' +
+                    'and no /Applications/Antigravity.app.',
+        };
+    }
+    // No version gate — hooks shipped with Antigravity's first release.
+    if (windowsBlock) {
+        return { installed: true, version, supportsHooks: false, reason: windowsBlock };
+    }
+    return { installed: true, version, supportsHooks: true };
+}
+function supports(event) {
+    // Antigravity has no PreCompact and no UserPromptSubmit event. Action
+    // Guards (guard-check) and rules delivery (pre-invocation) are wired
+    // unconditionally below — they aren't part of the LifecycleEvent surface
+    // `supports()` is asked about.
+    return event === 'fetch-rules' || event === 'session-start' || event === 'stop';
+}
+function writeSettings(opts) {
+    // Belt and suspenders: `detect()` is what normally keeps this adapter out
+    // of the picker on an unspawnable Windows path, but `writeSettings` can
+    // still be reached directly (a client ticked by hand before `detect()`
+    // ran, or a re-wire driven only by `detect().installed`). Never wire a
+    // command that would block every Antigravity tool call for want of a
+    // runnable hook — and clean up anything an earlier, unguarded install
+    // left behind.
+    const windowsBlock = antigravityWindowsBlock(process.platform, HOOK_RUNNER_PATH);
+    if (windowsBlock) {
+        log.warn(windowsBlock);
+        editJsonFile(ANTIGRAVITY_HOOKS, dropOurGroups);
+        return;
+    }
+    const file = readJson(ANTIGRAVITY_HOOKS, {});
+    const disabled = disabledOurGroups(file);
+    dropOurGroups(file);
+    const groups = buildAntigravityHookGroups({ enableSessionReview: opts.enableSessionReview });
+    for (const key of disabled) {
+        const group = groups[key];
+        if (group && typeof group === 'object') {
+            group.enabled = false;
+        }
+    }
+    Object.assign(file, groups);
+    writeJson(ANTIGRAVITY_HOOKS, file);
+    log.ok(`Antigravity hooks wired into ${ANTIGRAVITY_HOOKS}`);
+    log.hint('`agy --dangerously-skip-permissions` runs no hook at all.');
+    log.hint('Rules reach the agent at its next model call (PreInvocation), not immediately after the edit that triggered them.');
+}
+/**
+ * Register the CybeDefend MCP server in `~/.gemini/config/mcp_config.json`.
+ * This is NOT wrapped by the VibeDefend MCP proxy (like Codex today) — the
+ * entry points straight at the region's URL.
+ */
+function registerMcp(opts) {
+    log.step(`Registering MCP "${opts.region.mcpName}" in Antigravity`);
+    log.hint(`URL: ${opts.region.mcpUrl}`);
+    const file = readJson(ANTIGRAVITY_MCP, {});
+    file.mcpServers ??= {};
+    file.mcpServers[opts.region.mcpName] = { serverUrl: opts.region.mcpUrl };
+    writeJson(ANTIGRAVITY_MCP, file);
+    log.ok(`MCP "${opts.region.mcpName}" registered in ${ANTIGRAVITY_MCP}`);
+    log.hint('Antigravity opens a browser sign-in the first time it connects.');
+    return true;
+}
+/**
+ * Pure introspection — never throws, as Windsurf's does. `hooksWired` from a
+ * raw-text marker check on `hooks.json`, `mcpRegistered` from the
+ * `serverUrl` of our entry in `mcp_config.json` — it must point at this
+ * region, not just exist. Both reads strip a leading BOM first, since
+ * either file may carry one.
+ */
+function inspect(region) {
+    let hooksWired = false;
+    try {
+        if (existsSync(ANTIGRAVITY_HOOKS)) {
+            hooksWired = textReferencesHookRunner(stripBom(readFileSync(ANTIGRAVITY_HOOKS, 'utf8')));
+        }
+    }
+    catch {
+        /* missing/unreadable → false */
+    }
+    const entry = readJsonServerEntry(() => stripBom(readFileSync(ANTIGRAVITY_MCP, 'utf8')), 'mcpServers', region.mcpName);
+    return { hooksWired, ...mcpStatus(entry?.serverUrl, region) };
+}
+/**
+ * Drop our `cybedefend-*` groups from `hooks.json` (whole top-level keys —
+ * see `dropOurGroups`) and our servers from `mcp_config.json`. Every other
+ * key / server is left untouched.
+ *
+ * The two files are independent, so both steps always run even when one
+ * throws (a malformed `hooks.json` must not leave our MCP server behind) —
+ * only once both have been attempted does this re-throw the FIRST error, if
+ * any.
+ */
+function uninstall(opts) {
+    let hooksRemoved = false;
+    let hooksError;
+    try {
+        hooksRemoved = editJsonFile(ANTIGRAVITY_HOOKS, dropOurGroups);
+    }
+    catch (err) {
+        hooksError = err;
+    }
+    let mcpRemoved = [];
+    let mcpError;
+    try {
+        editJsonFile(ANTIGRAVITY_MCP, (file) => {
+            mcpRemoved = deleteKeys(file.mcpServers, opts.mcpNames);
+            return mcpRemoved.length > 0;
+        });
+    }
+    catch (err) {
+        mcpError = err;
+    }
+    if (hooksError)
+        throw hooksError;
+    if (mcpError)
+        throw mcpError;
+    return { hookFiles: hooksRemoved ? [ANTIGRAVITY_HOOKS] : [], mcpRemoved };
+}
+export const antigravityAdapter = {
+    id: 'antigravity',
+    label: 'Google Antigravity',
+    detect,
+    supports,
+    writeSettings,
+    registerMcp,
+    inspect,
+    uninstall,
+};
+//# sourceMappingURL=antigravity.js.map

package/dist/clients/antigravity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"antigravity.js","sourceRoot":"","sources":["../../src/clients/antigravity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAChH,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAYpE,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAElE,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AAClE,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;AAcrE;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAA0B,EAC1B,OAA4D,EAAE;IAE9D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,mEAAmE;IACnE,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAC;IAEpE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,8BAA8B;QAC9B,OAAO,QAAQ,UAAU,IAAI,GAAG,uBAAuB,CAAC;IAC1D,CAAC;IAED,MAAM,QAAQ,GAAG,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,OAAO,QAAQ,gBAAgB,CAAC,UAAU,CAAC,IAAI,GAAG,kCAAkC,QAAQ,GAAG,CAAC;AAClG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAyB,EACzB,UAAkB;IAElB,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,yEAAyE,UAAU,EAAE,CAAC;AAC/F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAI1C;IACC,MAAM,GAAG,GAAG,CAAC,GAA0B,EAAU,EAAE,CACjD,sBAAsB,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAExF,MAAM,MAAM,GAA4B;QACtC,0BAA0B,EAAE;YAC1B,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;SAChF;QACD,kBAAkB,EAAE;YAClB,UAAU,EAAE;gBACV;oBACE,oEAAoE;oBACpE,oEAAoE;oBACpE,kEAAkE;oBAClE,kEAAkE;oBAClE,+DAA+D;oBAC/D,OAAO,EAAE,GAAG;oBACZ,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;iBACvE;aACF;SACF;QACD,2BAA2B,EAAE;YAC3B,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;SAClF;QACD,mBAAmB,EAAE;YACnB,UAAU,EAAE;gBACV;oBACE,OAAO,EAAE,GAAG;oBACZ,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;iBACvE;aACF;SACF;KACF,CAAC;IAEF,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,MAAM,CAAC,2BAA2B,CAAC,GAAG;YACpC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iHAAiH;AACjH,SAAS,YAAY,CAAC,IAA6B;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAC7B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,IAA6B;IAClD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,IAA6B;IACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAAiC,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC/F,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,MAAM;IACb,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;IACvD,MAAM,YAAY,GAChB,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC/C,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QACnD,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;IAC5F,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,IAAI,YAAY,IAAI,MAAM,CAAC;IAElE,uEAAuE;IACvE,wEAAwE;IACxE,qEAAqE;IACrE,sEAAsE;IACtE,mEAAmE;IACnE,MAAM,YAAY,GAAG,uBAAuB,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAEjF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,KAAK;YACpB,MAAM,EACJ,YAAY;gBACZ,yEAAyE;oBACvE,uCAAuC;SAC5C,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClF,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAqB;IACrC,sEAAsE;IACtE,qEAAqE;IACrE,yEAAyE;IACzE,+BAA+B;IAC/B,OAAO,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,MAAM,CAAC;AAClF,CAAC;AAED,SAAS,aAAa,CAAC,IAAiB;IACtC,0EAA0E;IAC1E,wEAAwE;IACxE,uEAAuE;IACvE,uEAAuE;IACvE,qEAAqE;IACrE,sEAAsE;IACtE,eAAe;IACf,MAAM,YAAY,GAAG,uBAAuB,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACjF,IAAI,YAAY,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvB,YAAY,CAA0B,iBAAiB,EAAE,aAAa,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAA0B,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,aAAa,CAAC,IAAI,CAAC,CAAC;IAEpB,MAAM,MAAM,GAAG,0BAA0B,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAC7F,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACtC,KAAiC,CAAC,OAAO,GAAG,KAAK,CAAC;QACrD,CAAC;IACH,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5B,SAAS,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAEnC,GAAG,CAAC,EAAE,CAAC,gCAAgC,iBAAiB,EAAE,CAAC,CAAC;IAC5D,GAAG,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IACtE,GAAG,CAAC,IAAI,CACN,mHAAmH,CACpH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAA8B;IACjD,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;IACpE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAqB,eAAe,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC;IACvB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACzE,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IACjC,GAAG,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,mBAAmB,eAAe,EAAE,CAAC,CAAC;IACxE,GAAG,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;IAC5E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,MAAoB;IACnC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAClC,UAAU,GAAG,wBAAwB,CAAC,QAAQ,CAAC,YAAY,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IAED,MAAM,KAAK,GAAG,mBAAmB,CAC/B,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,EACrD,YAAY,EACZ,MAAM,CAAC,OAAO,CACf,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,IAAmB;IACpC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,UAAmB,CAAC;IACxB,IAAI,CAAC;QACH,YAAY,GAAG,YAAY,CAA0B,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,GAAG,GAAG,CAAC;IACnB,CAAC;IAED,IAAI,UAAU,GAAa,EAAE,CAAC;IAC9B,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,YAAY,CAAqB,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE;YACzD,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,IAAI,UAAU;QAAE,MAAM,UAAU,CAAC;IACjC,IAAI,QAAQ;QAAE,MAAM,QAAQ,CAAC;IAE7B,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAkB;IAC/C,EAAE,EAAE,aAAa;IACjB,KAAK,EAAE,oBAAoB;IAC3B,MAAM;IACN,QAAQ;IACR,aAAa;IACb,WAAW;IACX,OAAO;IACP,SAAS;CACV,CAAC"}

package/dist/clients/registry.js

@@ -6,6 +6,7 @@
  * order. Claude Code first because it has the most mature hook surface
  * and is the assumed default; the others follow alphabetically.
  */
+import { antigravityAdapter } from './antigravity.js';
 import { claudeCodeAdapter } from './claude-code.js';
 import { codexAdapter } from './codex.js';
 import { cursorAdapter } from './cursor.js';
@@ -17,6 +18,7 @@ export const ALL_ADAPTERS = [
     vscodeAdapter,
     windsurfAdapter,
     codexAdapter,
+    antigravityAdapter,
 ];
 /** Look up an adapter by ID. Throws if not found (programming error). */
 export function adapterFor(id) {

package/dist/clients/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/clients/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIhD,MAAM,CAAC,MAAM,YAAY,GAA6B;IACpD,iBAAiB;IACjB,aAAa;IACb,aAAa;IACb,eAAe;IACf,YAAY;CACJ,CAAC;AAEX,yEAAyE;AACzE,MAAM,UAAU,UAAU,CAAC,EAAY;IACrC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,wCAAwC,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS;IAIvB,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACpC,OAAO;QACP,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE;KAC5B,CAAC,CAAC,CAAC;AACN,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/clients/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIhD,MAAM,CAAC,MAAM,YAAY,GAA6B;IACpD,iBAAiB;IACjB,aAAa;IACb,aAAa;IACb,eAAe;IACf,YAAY;IACZ,kBAAkB;CACV,CAAC;AAEX,yEAAyE;AACzE,MAAM,UAAU,UAAU,CAAC,EAAY;IACrC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,wCAAwC,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS;IAIvB,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACpC,OAAO;QACP,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE;KAC5B,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/commands/mcp/proxy.js

@@ -3,7 +3,15 @@ import { createTokenSource } from '../../mcp/auth/tokenSource.js';
 import { connectCommandFor, createAuthInterceptor } from '../../mcp/proxy/authInterceptor.js';
 import { createAudit } from '../../mcp/proxy/audit.js';
 import { createVerifyInterceptor } from '../../mcp/proxy/verifyInterceptor.js';
+import { startServerCheckTimer } from '../../mcp/proxy/serverCheckTimer.js';
+import { createSessionLifecycle } from '../../mcp/proxy/sessionLifecycle.js';
+import { makeReportBuffer } from '../../mcp/report/buffer.js';
+import { resolveReportProjectId } from '../../mcp/report/project.js';
+import { McpReporter } from '../../mcp/report/reporter.js';
+import { postMcpReport } from '../../mcp/verify/api.js';
 import { buildVerifier } from '../../mcp/verify/factory.js';
+import { reportServerIdentity } from '../../mcp/verify/identity.js';
+import { verifyTokenResolver } from '../../mcp/verify/token.js';
 import { isProxyInstalled } from '../../mcp/config/installed.js';
 import { withSyncLock } from '../../mcp/config/lock.js';
 import { checkProxyBinary } from '../../mcp/config/proxyBinary.js';
@@ -31,6 +39,9 @@ export async function runMcpProxyCommand(options, runtime) {
     // see the conformance test that pins it.
     let spec;
     let identitySpec;
+    // The client whose config this server was read from; the agent's own
+    // `clientInfo` wins when it names itself.
+    let fallbackClientName;
     // Variable references the originating client would have resolved. Names
     // only — these are logged, and one of them is an API key.
     let expansion = { resolved: [], missing: [] };
@@ -44,6 +55,7 @@ export async function runMcpProxyCommand(options, runtime) {
             const expanded = expandedSpecOf(entry, runtime.env);
             spec = expanded.value;
             identitySpec = specOf(entry);
+            fallbackClientName = entry.source?.client;
             expansion = { resolved: expanded.resolved, missing: expanded.missing };
         }
         else {
@@ -83,10 +95,12 @@ export async function runMcpProxyCommand(options, runtime) {
         logger.warn('a variable referenced by this server is not set and has no default; ' +
             'the literal text is passed through, exactly as the client would', { variable: name });
     }
+    const built = buildInterceptor(spec, identitySpec, options.name, logger, runtime, fallbackClientName);
+    const backgroundSyncOff = runtime.env[`${PROXY_ENV_PREFIX}NO_SYNC`] === '1';
     const proxy = new Proxy({
         spec,
         logger,
-        interceptor: buildInterceptor(spec, identitySpec, options.name, logger, runtime),
+        interceptor: built.interceptor,
         stdin: runtime.stdin,
         stdout: runtime.stdout,
         stderr: runtime.stderr,
@@ -99,9 +113,14 @@ export async function runMcpProxyCommand(options, runtime) {
                 onLookup: (outcome) => logger.info('credential lookup', { outcome }),
             })
             : undefined,
-        afterInitialize: runtime.env[`${PROXY_ENV_PREFIX}NO_SYNC`] === '1'
+        afterInitialize: backgroundSyncOff && !built.lifecycle
             ? undefined
-            : () => backgroundSync(options, runtime, logger),
+            : async (client) => {
+                built.lifecycle?.start(client);
+                if (!backgroundSyncOff)
+                    await backgroundSync(options, runtime, logger);
+            },
+        onExit: built.lifecycle ? () => built.lifecycle?.stop() : undefined,
         agentInitializeDeadlineMs: positiveMs(runtime.env[`${PROXY_ENV_PREFIX}INIT_DEADLINE_MS`]),
         upstreamInitializeTimeoutMs: positiveMs(runtime.env[`${PROXY_ENV_PREFIX}UPSTREAM_INIT_TIMEOUT_MS`]),
     });
@@ -204,7 +223,7 @@ async function backgroundSync(options, runtime, logger) {
  * says, because it is not verification: it is section 0's rule that
  * `initialize` is always answered.
  */
-function buildInterceptor(spec, identitySpec, name, logger, runtime) {
+function buildInterceptor(spec, identitySpec, name, logger, runtime, fallbackClientName) {
     const interceptors = [];
     if (spec.transport === 'http') {
         interceptors.push(createAuthInterceptor({
@@ -216,12 +235,16 @@ function buildInterceptor(spec, identitySpec, name, logger, runtime) {
             logger,
         }));
     }
-    const verify = buildVerifyInterceptor(identitySpec, name, logger, runtime);
+    const verify = buildVerifyInterceptor(identitySpec, name, logger, runtime, fallbackClientName);
     if (verify)
-        interceptors.push(verify);
+        interceptors.push(verify.interceptor);
+    const lifecycle = verify?.lifecycle;
     if (interceptors.length === 0)
-        return undefined;
-    return interceptors.length === 1 ? interceptors[0] : chain(interceptors);
+        return { lifecycle };
+    return {
+        interceptor: interceptors.length === 1 ? interceptors[0] : chain(interceptors),
+        lifecycle,
+    };
 }
 /**
  * The verification seam, wired to the local cache and to the CybeDefend
@@ -233,7 +256,7 @@ function buildInterceptor(spec, identitySpec, name, logger, runtime) {
  * indistinguishable from the server, and a `vibedefend_alert` appended to a
  * tool list is, correctly, a difference.
  */
-function buildVerifyInterceptor(spec, name, logger, runtime) {
+function buildVerifyInterceptor(spec, name, logger, runtime, fallbackClientName) {
     if (runtime.env[`${PROXY_ENV_PREFIX}NO_VERIFY`] === '1') {
         logger.info('verification disabled by the environment');
         return undefined;
@@ -249,7 +272,26 @@ function buildVerifyInterceptor(spec, name, logger, runtime) {
         backend: backend !== null,
         organization: backend?.organizationId ? 'persisted' : backend ? 'resolved-at-first-call' : 'none',
     });
-    return createVerifyInterceptor({
+    const env = runtime.env;
+    // What a report says of this server: a host, a package or a label, and a
+    // key. A URL that does not canonicalise gives no identity and no report.
+    const identity = reportServerIdentity(spec, name);
+    const reporter = identity
+        ? new McpReporter({
+            identity,
+            vibedefendVersion: runtime.version,
+            fallbackClientName,
+            snapshot: () => verifier.inventorySnapshot(),
+            backendContext: () => verifier.backendContext(),
+            projectId: (clientName) => resolveReportProjectId({ env, clientName }),
+            buffer: makeReportBuffer({ env }),
+            post: (ctx, body) => postMcpReport(ctx, body, { resolveTokenFn: verifyTokenResolver({ env }) }),
+            logger,
+            firstDelayMs: positiveMs(env[`${PROXY_ENV_PREFIX}REPORT_DELAY_MS`]),
+            minIntervalMs: positiveMs(env[`${PROXY_ENV_PREFIX}REPORT_MIN_INTERVAL_MS`]),
+        })
+        : undefined;
+    const verify = createVerifyInterceptor({
         verifier,
         logger,
         spec,
@@ -258,7 +300,21 @@ function buildVerifyInterceptor(spec, name, logger, runtime) {
         // Sizes and rule names, never arguments and never results: the plan's
         // rule is that nothing from a `tools/call` leaves the machine, and a file
         // quoting them would be a second copy of everything the user has done.
-        audit: createAudit({ env: runtime.env }),
+        audit: createAudit({ env }),
+        report: reporter,
     });
+    return {
+        interceptor: verify,
+        lifecycle: createSessionLifecycle({
+            reporter,
+            refreshServerGate: () => verify.refreshServerGate(),
+            startTimer: (onChange) => startServerCheckTimer({
+                verifier,
+                logger,
+                intervalMs: positiveMs(env[`${PROXY_ENV_PREFIX}SERVER_CHECK_INTERVAL_MS`]),
+                onChange,
+            }),
+        }),
+    };
 }
 //# sourceMappingURL=proxy.js.map

package/dist/commands/mcp/proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../../src/commands/mcp/proxy.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,KAAK,EAAoB,MAAM,8BAA8B,CAAC;AAEvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAA4B,MAAM,iCAAiC,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,aAAa,EAA8B,MAAM,wBAAwB,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,GAGlB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,MAAM,EACN,oBAAoB,GACrB,MAAM,8BAA8B,CAAC;AAoBtC,wEAAwE;AACxE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAE5B,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA+B,EAC/B,OAAwB;IAExB,+CAA+C;IAC/C,EAAE;IACF,2EAA2E;IAC3E,8DAA8D;IAC9D,EAAE;IACF,+DAA+D;IAC/D,2EAA2E;IAC3E,uEAAuE;IACvE,sEAAsE;IACtE,sEAAsE;IACtE,wEAAwE;IACxE,yCAAyC;IACzC,IAAI,IAAkB,CAAC;IACvB,IAAI,YAA0B,CAAC;IAC/B,wEAAwE;IACxE,0DAA0D;IAC1D,IAAI,SAAS,GAA8C,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzF,IAAI,CAAC;QACH,0EAA0E;QAC1E,qDAAqD;QACrD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,EAAE,KAAK,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAClE,mEAAmE;YACnE,+CAA+C;YAC/C,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC;YACtB,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,SAAS,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACpC,wDAAwD;YACxD,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;YAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YAC3D,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAa,OAAO,CAAC,QAAQ;QACtC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;QACjC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,WAAW,CAAC,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ;QAC7B,CAAC,CAAC,YAAY,CAAC;YACX,KAAK;YACL,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;YAC5B,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE;YAC5D,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,YAAY,CAAC,KAAK,GAAG;SACrE,CAAC;QACJ,CAAC,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAEvF,2EAA2E;IAC3E,qEAAqE;IACrE,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;YAChE,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,aAAa,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM;YACxC,OAAO,EAAE,SAAS,CAAC,OAAO;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CACT,sEAAsE;YACpE,iEAAiE,EACnE,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,IAAI;QACJ,MAAM;QACN,WAAW,EAAE,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC;QAChF,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAA+B;QAC/C,YAAY,EAAE,OAAO,CAAC,OAAO;QAC7B,2EAA2E;QAC3E,yEAAyE;QACzE,kCAAkC;QAClC,IAAI,EACF,IAAI,CAAC,SAAS,KAAK,MAAM;YACvB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1B,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,CAAC;aACrE,CAAC;YACJ,CAAC,CAAC,SAAS;QACf,eAAe,EACb,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,SAAS,CAAC,KAAK,GAAG;YAC/C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;QACpD,yBAAyB,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,kBAAkB,CAAC,CAAC;QACzF,2BAA2B,EAAE,UAAU,CACrC,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,0BAA0B,CAAC,CAC3D;KACF,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAChD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE;QAClB,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7C,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC,GAAG,EAAE,CAAC;AACrB,CAAC;AAED,iFAAiF;AACjF,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAID;;;;;;;;;;GAUG;AACH,SAAS,wBAAwB,CAC/B,OAA+B,EAC/B,OAAwB;IAExB,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IACnC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC;IAC3D,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9F,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,MAAM,IAAI,kBAAkB,CAAC;IAC9D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,UAAU,cAAc,CAC3B,OAA+B,EAC/B,OAAwB,EACxB,MAAc;IAEd,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,yBAAyB,EAAE;YAC5E,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAEZ,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACnF,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACvF,IAAI,OAAO,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;QAC7B,OAAO;QACP,SAAS;QACT,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;QAChC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO;KAC1B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CACvB,IAAkB,EAClB,YAA0B,EAC1B,IAAwB,EACxB,MAAc,EACd,OAAwB;IAExB,MAAM,YAAY,GAAkB,EAAE,CAAC;IACvC,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC9B,YAAY,CAAC,IAAI,CACf,qBAAqB,CAAC;YACpB,iEAAiE;YACjE,mDAAmD;YACnD,UAAU,EAAE,IAAI,IAAI,gBAAgB,CAAC,YAAY,CAAC;YAClD,cAAc,EAAE,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAC/D,YAAY,EAAE,OAAO,CAAC,OAAO;YAC7B,MAAM;SACP,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,IAAI,MAAM;QAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,sBAAsB,CAC7B,IAAkB,EAClB,IAAwB,EACxB,MAAc,EACd,OAAwB;IAExB,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,WAAW,CAAC,KAAK,GAAG,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,8CAA8C;IAC9C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,aAAa,CAC/D,IAAI,EACJ,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAC9B,MAAM,EACN,OAAO,CAAC,GAAG,CACZ,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;QAClC,QAAQ;QACR,OAAO,EAAE,OAAO,KAAK,IAAI;QACzB,YAAY,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,MAAM;KAClG,CAAC,CAAC;IACH,OAAO,uBAAuB,CAAC;QAC7B,QAAQ;QACR,MAAM;QACN,IAAI;QACJ,QAAQ;QACR,UAAU;QACV,sEAAsE;QACtE,0EAA0E;QAC1E,uEAAuE;QACvE,KAAK,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;KACzC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../../src/commands/mcp/proxy.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,KAAK,EAAoB,MAAM,8BAA8B,CAAC;AAEvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAyB,MAAM,qCAAqC,CAAC;AACpG,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAA4B,MAAM,iCAAiC,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,aAAa,EAA8B,MAAM,wBAAwB,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,GAGlB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,MAAM,EACN,oBAAoB,GACrB,MAAM,8BAA8B,CAAC;AAoBtC,wEAAwE;AACxE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAE5B,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA+B,EAC/B,OAAwB;IAExB,+CAA+C;IAC/C,EAAE;IACF,2EAA2E;IAC3E,8DAA8D;IAC9D,EAAE;IACF,+DAA+D;IAC/D,2EAA2E;IAC3E,uEAAuE;IACvE,sEAAsE;IACtE,sEAAsE;IACtE,wEAAwE;IACxE,yCAAyC;IACzC,IAAI,IAAkB,CAAC;IACvB,IAAI,YAA0B,CAAC;IAC/B,qEAAqE;IACrE,0CAA0C;IAC1C,IAAI,kBAAsC,CAAC;IAC3C,wEAAwE;IACxE,0DAA0D;IAC1D,IAAI,SAAS,GAA8C,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzF,IAAI,CAAC;QACH,0EAA0E;QAC1E,qDAAqD;QACrD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,EAAE,KAAK,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAClE,mEAAmE;YACnE,+CAA+C;YAC/C,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC;YACtB,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,kBAAkB,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;YAC1C,SAAS,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACpC,wDAAwD;YACxD,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;YAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YAC3D,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAa,OAAO,CAAC,QAAQ;QACtC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;QACjC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,WAAW,CAAC,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ;QAC7B,CAAC,CAAC,YAAY,CAAC;YACX,KAAK;YACL,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;YAC5B,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE;YAC5D,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,YAAY,CAAC,KAAK,GAAG;SACrE,CAAC;QACJ,CAAC,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAEvF,2EAA2E;IAC3E,qEAAqE;IACrE,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;YAChE,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,aAAa,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM;YACxC,OAAO,EAAE,SAAS,CAAC,OAAO;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CACT,sEAAsE;YACpE,iEAAiE,EACnE,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACtG,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,SAAS,CAAC,KAAK,GAAG,CAAC;IAC5E,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,IAAI;QACJ,MAAM;QACN,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAA+B;QAC/C,YAAY,EAAE,OAAO,CAAC,OAAO;QAC7B,2EAA2E;QAC3E,yEAAyE;QACzE,kCAAkC;QAClC,IAAI,EACF,IAAI,CAAC,SAAS,KAAK,MAAM;YACvB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1B,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,CAAC;aACrE,CAAC;YACJ,CAAC,CAAC,SAAS;QACf,eAAe,EACb,iBAAiB,IAAI,CAAC,KAAK,CAAC,SAAS;YACnC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACf,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC/B,IAAI,CAAC,iBAAiB;oBAAE,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACzE,CAAC;QACP,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;QACnE,yBAAyB,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,kBAAkB,CAAC,CAAC;QACzF,2BAA2B,EAAE,UAAU,CACrC,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,0BAA0B,CAAC,CAC3D;KACF,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAChD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE;QAClB,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7C,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC,GAAG,EAAE,CAAC;AACrB,CAAC;AAED,iFAAiF;AACjF,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAID;;;;;;;;;;GAUG;AACH,SAAS,wBAAwB,CAC/B,OAA+B,EAC/B,OAAwB;IAExB,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IACnC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC;IAC3D,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9F,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,MAAM,IAAI,kBAAkB,CAAC;IAC9D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,UAAU,cAAc,CAC3B,OAA+B,EAC/B,OAAwB,EACxB,MAAc;IAEd,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,yBAAyB,EAAE;YAC5E,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAEZ,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACnF,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACvF,IAAI,OAAO,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;QAC7B,OAAO;QACP,SAAS;QACT,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;QAChC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO;KAC1B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CACvB,IAAkB,EAClB,YAA0B,EAC1B,IAAwB,EACxB,MAAc,EACd,OAAwB,EACxB,kBAA2B;IAE3B,MAAM,YAAY,GAAkB,EAAE,CAAC;IACvC,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC9B,YAAY,CAAC,IAAI,CACf,qBAAqB,CAAC;YACpB,iEAAiE;YACjE,mDAAmD;YACnD,UAAU,EAAE,IAAI,IAAI,gBAAgB,CAAC,YAAY,CAAC;YAClD,cAAc,EAAE,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAC/D,YAAY,EAAE,OAAO,CAAC,OAAO;YAC7B,MAAM;SACP,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC/F,IAAI,MAAM;QAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,CAAC;IACpC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACpD,OAAO;QACL,WAAW,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;QAC9E,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,sBAAsB,CAC7B,IAAkB,EAClB,IAAwB,EACxB,MAAc,EACd,OAAwB,EACxB,kBAA2B;IAE3B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,WAAW,CAAC,KAAK,GAAG,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,8CAA8C;IAC9C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,aAAa,CAC/D,IAAI,EACJ,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAC9B,MAAM,EACN,OAAO,CAAC,GAAG,CACZ,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;QAClC,QAAQ;QACR,OAAO,EAAE,OAAO,KAAK,IAAI;QACzB,YAAY,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,MAAM;KAClG,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,QAAQ;QACvB,CAAC,CAAC,IAAI,WAAW,CAAC;YACd,QAAQ;YACR,iBAAiB,EAAE,OAAO,CAAC,OAAO;YAClC,kBAAkB;YAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,iBAAiB,EAAE;YAC5C,cAAc,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE;YAC/C,SAAS,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,sBAAsB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;YACtE,MAAM,EAAE,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC;YACjC,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YAC/F,MAAM;YACN,YAAY,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,gBAAgB,iBAAiB,CAAC,CAAC;YACnE,aAAa,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,gBAAgB,wBAAwB,CAAC,CAAC;SAC5E,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,MAAM,GAAG,uBAAuB,CAAC;QACrC,QAAQ;QACR,MAAM;QACN,IAAI;QACJ,QAAQ;QACR,UAAU;QACV,sEAAsE;QACtE,0EAA0E;QAC1E,uEAAuE;QACvE,KAAK,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC;QAC3B,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,WAAW,EAAE,MAAM;QACnB,SAAS,EAAE,sBAAsB,CAAC;YAChC,QAAQ;YACR,iBAAiB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE;YACnD,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CACvB,qBAAqB,CAAC;gBACpB,QAAQ;gBACR,MAAM;gBACN,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,gBAAgB,0BAA0B,CAAC,CAAC;gBAC1E,QAAQ;aACT,CAAC;SACL,CAAC;KACH,CAAC;AACJ,CAAC"}