@descryy/mcp 0.11.3 → 0.11.5

package/dist/session.js

@@ -1,602 +0,0 @@
-/**
- * One repo, one graph, one process — owns the SQLite handle, config, sources; tools
- * own nothing. `.descry/config.json` is optional, defaults to local-first, except the
- * source list (this repo names no adapter, `registry.ts`): unconfigured sessions can
- * query, not build. Graph opens lazily so a missing one fails as a tool result, not a crash. */
-import { existsSync } from "node:fs";
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-import { basename, isAbsolute, join, resolve } from "node:path";
-import { isConfirmedFactScope } from "@descryy/ir";
-import { createStoreProvider, gitHead, isGitRepository, NodeSqliteDriver, openStore, rebuildStaleGraph, } from "@descryy/core";
-import { BROWSER_BACKEND_NOT_INSTALLED } from "./browser/provider.js";
-import { createBrowserSessionRegistry } from "./browser/registry.js";
-import { normaliseSpec } from "./registry.js";
-export const CONFIG_RELATIVE_PATH = join(".descry", "config.json");
-export const DEFAULT_GRAPH_RELATIVE_PATH = join(".descry", "graph.db");
-function parseConfirmedIncidents(raw, configPath) {
-    if (raw === undefined)
-        return [];
-    if (!Array.isArray(raw)) {
-        throw new ConfigError(`${configPath}: "confirmedIncidents" must be an array`);
-    }
-    return raw.map((entry, index) => {
-        const e = entry;
-        for (const key of ["repo", "summary", "confirmedBy", "confirmedAt"]) {
-            if (typeof e[key] !== "string" || e[key] === "") {
-                throw new ConfigError(`${configPath}: confirmedIncidents[${index}].${key} must be a non-empty string`);
-            }
-        }
-        const files = e["files"];
-        if (!Array.isArray(files) || files.length === 0 || files.some((f) => typeof f !== "string" || f === "")) {
-            throw new ConfigError(`${configPath}: confirmedIncidents[${index}].files must be a non-empty array of paths — ` +
-                "an incident naming no file has nothing to attach it to");
-        }
-        for (const key of ["errorText", "fixedAtCommit", "observedInRun"]) {
-            if (e[key] !== undefined && (typeof e[key] !== "string" || e[key] === "")) {
-                throw new ConfigError(`${configPath}: confirmedIncidents[${index}].${key} must be a non-empty string when present`);
-            }
-        }
-        const occurrences = e["occurrences"];
-        if (occurrences !== undefined &&
-            (!Array.isArray(occurrences) ||
-                occurrences.length === 0 ||
-                occurrences.some((o) => typeof o !== "string" || o === ""))) {
-            throw new ConfigError(`${configPath}: confirmedIncidents[${index}].occurrences must be a non-empty array of timestamps when present`);
-        }
-        return {
-            repo: e["repo"],
-            summary: e["summary"],
-            files: files,
-            ...(e["errorText"] === undefined ? {} : { errorText: e["errorText"] }),
-            ...(e["fixedAtCommit"] === undefined ? {} : { fixedAtCommit: e["fixedAtCommit"] }),
-            ...(e["observedInRun"] === undefined ? {} : { observedInRun: e["observedInRun"] }),
-            confirmedBy: e["confirmedBy"],
-            confirmedAt: e["confirmedAt"],
-            ...(occurrences === undefined ? {} : { occurrences: occurrences }),
-        };
-    });
-}
-function parseConfirmedFacts(raw, configPath) {
-    if (raw === undefined)
-        return [];
-    if (!Array.isArray(raw)) {
-        throw new ConfigError(`${configPath}: "confirmedFacts" must be an array`);
-    }
-    return raw.map((entry, index) => {
-        const e = entry;
-        for (const key of ["repo", "blockedBy", "value", "confirmedBy", "confirmedAt"]) {
-            if (typeof e[key] !== "string" || e[key] === "") {
-                throw new ConfigError(`${configPath}: confirmedFacts[${index}].${key} must be a non-empty string`);
-            }
-        }
-        for (const key of ["environment", "confirmedAtCommit", "workspace"]) {
-            if (e[key] !== undefined && (typeof e[key] !== "string" || e[key] === "")) {
-                throw new ConfigError(`${configPath}: confirmedFacts[${index}].${key} must be a non-empty string when present`);
-            }
-        }
-        if (e["scope"] !== undefined && !isConfirmedFactScope(e["scope"])) {
-            throw new ConfigError(`${configPath}: confirmedFacts[${index}].scope must be "repo" or "workspace" when present`);
-        }
-        return {
-            repo: e["repo"],
-            blockedBy: e["blockedBy"],
-            value: e["value"],
-            ...(e["environment"] === undefined ? {} : { environment: e["environment"] }),
-            confirmedBy: e["confirmedBy"],
-            confirmedAt: e["confirmedAt"],
-            // Round-tripped rather than dropped — `confirmedAtCommit` was written by
-            // `writeConfirmedFact`; discarding it on reload would silence the staleness disclosure.
-            ...(e["confirmedAtCommit"] === undefined ? {} : { confirmedAtCommit: e["confirmedAtCommit"] }),
-            ...(e["scope"] === undefined ? {} : { scope: e["scope"] }),
-            ...(e["workspace"] === undefined ? {} : { workspace: e["workspace"] }),
-        };
-    });
-}
-/** `(repo, blockedBy, environment)` — `undefined` environment is its own value, never a wildcard. */
-function sameFactKey(a, b) {
-    return a.repo === b.repo && a.blockedBy === b.blockedBy && a.environment === b.environment;
-}
-export class ConfigError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "ConfigError";
-    }
-}
-export async function loadConfig(repoPath) {
-    const configPath = join(repoPath, CONFIG_RELATIVE_PATH);
-    let raw = {};
-    let found = null;
-    try {
-        raw = JSON.parse(await readFile(configPath, "utf8"));
-        found = configPath;
-    }
-    catch (error) {
-        const code = error.code;
-        if (code !== "ENOENT") {
-            // A config that exists and can't be parsed is refused, not defaulted past —
-            // silently falling back would run the session under settings the user thinks they overrode.
-            throw new ConfigError(`${configPath} exists but could not be read: ${error.message}`);
-        }
-    }
-    if (raw.sources !== undefined && !Array.isArray(raw.sources)) {
-        throw new ConfigError(`${configPath}: "sources" must be an array`);
-    }
-    const sources = (raw.sources ?? []).map((entry, index) => {
-        if (typeof entry === "string")
-            return normaliseSpec(entry);
-        if (typeof entry === "object" && entry !== null && typeof entry.module === "string") {
-            return entry;
-        }
-        throw new ConfigError(`${configPath}: sources[${index}] must be a module specifier or an object with a "module" field`);
-    });
-    const workspace = typeof raw.workspace === "string" && raw.workspace !== "" ? raw.workspace : undefined;
-    const workspaceRepos = parseWorkspaceRepos(raw.workspaceRepos, configPath);
-    return {
-        // Directory name is a defensible default and poor identity — changes on clone,
-        // and every repo-scoped node id changes with it. Disclosed in `analyze`, not
-        // discovered when two machines produce different graphs.
-        repo: typeof raw.repo === "string" && raw.repo !== "" ? raw.repo : basename(resolve(repoPath)),
-        workspace,
-        graph: typeof raw.graph === "string" && raw.graph !== "" ? raw.graph : DEFAULT_GRAPH_RELATIVE_PATH,
-        sources,
-        confirmedFacts: parseConfirmedFacts(raw.confirmedFacts, configPath),
-        confirmedIncidents: parseConfirmedIncidents(raw.confirmedIncidents, configPath),
-        workspaceRepos,
-        linkedFacts: await readLinkedFacts(repoPath, workspace, workspaceRepos),
-        configPath: found,
-    };
-}
-/**
- * Fields compared for staleness (13.3.16 / N2). Deliberately excludes `linkedFacts`:
- * it is derived from sibling repos' own files at load time, not something a local
- * edit to *this* repo's config changes, and diffing it here would double-count
- * `workspaceRepos` drift under a second name.
- */
-const DRIFT_FIELDS = [
-    "repo",
-    "workspace",
-    "graph",
-    "sources",
-    "confirmedFacts",
-    "confirmedIncidents",
-    "workspaceRepos",
-    "configPath",
-];
-function driftedKeys(onDisk, loaded) {
-    return DRIFT_FIELDS.filter((key) => JSON.stringify(onDisk[key]) !== JSON.stringify(loaded[key]));
-}
-/**
- * 13.3.16 (N2): a count match on `sources` is not a content match — two sessions
- * swapping one adapter for another, or changing an adapter's options, leave
- * `sources.length` unchanged, which is exactly the gap that let a concurrent edit
- * go undetected and left a graph stuck at R0 with no disclosure of why. Every
- * field is compared by value, and the note names which ones actually changed —
- * `graph`, `confirmedFacts`/`confirmedIncidents` and `workspaceRepos` were
- * previously not compared at all.
- */
-export function configDriftNote(onDisk, loaded) {
-    if (onDisk === null)
-        return undefined;
-    const changed = driftedKeys(onDisk, loaded);
-    if (changed.length === 0)
-        return undefined;
-    return ("The on-disk .descry/config.json no longer matches what this server loaded at startup " +
-        `(changed: ${changed.join(", ")}). Configuration is read once per process, not on every call ` +
-        "(session.ts) — this run is still using the configuration this server started with, not the " +
-        "current file. Restart the MCP server for on-disk changes to take effect; the notes below " +
-        "describe the stale, running configuration, not what is actually on disk now.");
-}
-/**
- * 13.3.16 (N2) steps 2-3: called once per tool call from `server.ts`, not only from
- * `analyze`, so every reply discloses a stale session rather than the one tool that
- * happened to re-read the config. A config that cannot even be read right now
- * (deleted mid-session, or edited into something `loadConfig` refuses) is itself
- * drift and must not read as "no drift" merely because there is nothing to diff
- * against — the previous `.catch(() => null)` collapsed that case into silence.
- */
-export async function checkConfigDrift(session) {
-    if (!existsSync(session.repoPath))
-        return { stale: false, note: undefined };
-    try {
-        const onDisk = await loadConfig(session.repoPath);
-        const note = configDriftNote(onDisk, session.config);
-        return { stale: note !== undefined, note };
-    }
-    catch (error) {
-        const reason = error instanceof Error ? error.message : String(error);
-        return {
-            stale: true,
-            note: `The on-disk .descry/config.json could not be read as of this call (${reason}). This run ` +
-                "is still using the configuration loaded at startup; whether that configuration still " +
-                "matches what is on disk now cannot be determined.",
-        };
-    }
-}
-function parseWorkspaceRepos(raw, configPath) {
-    if (raw === undefined)
-        return [];
-    if (!Array.isArray(raw)) {
-        throw new ConfigError(`${configPath}: "workspaceRepos" must be an array`);
-    }
-    return raw.map((entry, index) => {
-        const e = entry;
-        for (const key of ["path", "repo"]) {
-            if (typeof e[key] !== "string" || e[key] === "") {
-                throw new ConfigError(`${configPath}: workspaceRepos[${index}].${key} must be a non-empty string`);
-            }
-        }
-        return { path: e["path"], repo: e["repo"] };
-    });
-}
-/** Workspace-scoped facts from this workspace's *other* repos, one level only (no
- *  recursive follow of a sibling's own `workspaceRepos`). Every failure here is silent
- *  by design — a broken/uncloned sibling must not block this session; `questions` discloses it. */
-async function readLinkedFacts(repoPath, workspace, repos) {
-    if (workspace === undefined || repos.length === 0)
-        return [];
-    const self = resolve(repoPath);
-    const out = [];
-    for (const entry of repos) {
-        if (resolve(entry.path) === self)
-            continue;
-        const path = join(entry.path, CONFIG_RELATIVE_PATH);
-        let facts;
-        try {
-            const raw = JSON.parse(await readFile(path, "utf8"));
-            facts = parseConfirmedFacts(raw.confirmedFacts, path);
-        }
-        catch {
-            continue;
-        }
-        // Checked on the fact itself, not inferred from being found in a linked repo —
-        // a repo-scoped fact in a linked config still does not cross.
-        for (const fact of facts) {
-            if (fact.scope === "workspace" && fact.workspace === workspace)
-                out.push(fact);
-        }
-    }
-    return out;
-}
-/** `.descry/config.json`'s writer, paired with `loadConfig`. One writer used by both
- *  `descry init` and `link_workspace` so they can't drift into writing different
- *  shapes. Patches `repo`/`workspace` only — other fields survive untouched. */
-export async function writeConfig(repoPath, patch) {
-    const path = join(repoPath, CONFIG_RELATIVE_PATH);
-    let existing = {};
-    try {
-        existing = JSON.parse(await readFile(path, "utf8"));
-    }
-    catch (error) {
-        // An unparseable config is fixed here (start from empty), unlike `loadConfig`
-        // which refuses — this writer's job is to repair, not run a session. ENOENT
-        // takes the same path.
-        void error;
-        existing = {};
-    }
-    const previousWorkspace = typeof existing.workspace === "string" ? existing.workspace : undefined;
-    const next = { ...existing, repo: patch.repo };
-    if (patch.workspace !== undefined)
-        next.workspace = patch.workspace;
-    await mkdir(join(repoPath, ".descry"), { recursive: true });
-    await writeFile(path, `${JSON.stringify(next, null, 2)}\n`, "utf8");
-    return { path, previousWorkspace };
-}
-/** `workspaceRepos`' writer — one writer per field a shared file owns (see
- *  `writeConfig`, `writeConfirmedFact`, `writeSources`). Replaces the whole list
- *  rather than merging: membership is one declaration made at one moment. */
-export async function writeWorkspaceRepos(repoPath, repos) {
-    const path = join(repoPath, CONFIG_RELATIVE_PATH);
-    let existing = {};
-    try {
-        existing = JSON.parse(await readFile(path, "utf8"));
-    }
-    catch (error) {
-        void error;
-        existing = {};
-    }
-    const next = {
-        ...existing,
-        workspaceRepos: repos.map((r) => ({ path: r.path, repo: r.repo })),
-    };
-    await mkdir(join(repoPath, ".descry"), { recursive: true });
-    await writeFile(path, `${JSON.stringify(next, null, 2)}\n`, "utf8");
-    return { path };
-}
-/** `confirmedFacts`' writer, separate from `writeConfig` (one writer per field). Keyed
- *  on exact `(repo, blockedBy, environment)` (DEC-223 §3) — undefined environment is its
- *  own key, not a wildcard. Same key replaces; a different environment adds a new fact. */
-export async function writeConfirmedFact(repoPath, fact) {
-    const path = join(repoPath, CONFIG_RELATIVE_PATH);
-    let existing = {};
-    try {
-        existing = JSON.parse(await readFile(path, "utf8"));
-    }
-    catch (error) {
-        void error;
-        existing = {};
-    }
-    const priorRaw = Array.isArray(existing["confirmedFacts"]) ? existing["confirmedFacts"] : [];
-    const prior = parseConfirmedFacts(priorRaw, path);
-    const replaced = prior.find((f) => sameFactKey(f, fact)) ?? null;
-    const rest = prior.filter((f) => !sameFactKey(f, fact));
-    const next = { ...existing, confirmedFacts: [...rest, fact] };
-    await mkdir(join(repoPath, ".descry"), { recursive: true });
-    await writeFile(path, `${JSON.stringify(next, null, 2)}\n`, "utf8");
-    return { path, replaced };
-}
-/** `confirmedIncidents`' writer — appends a genuinely new incident, but merges a
- *  resubmission of the same content into the record already on file (UAT phase 5,
- *  F9). `confirmedAt` used to be the dedup key alongside `summary`, and a retried
- *  submission always carries a fresh timestamp — so every retry minted a second
- *  `INCIDENT` node, silently doubling its weight in blast-radius bias and
- *  `similar_incidents` scoring. Identity is now content (`repo` + `summary` +
- *  `errorText`, matching `confirmedIncidentId`), and a match appends this call's
- *  timestamp to `occurrences` and unions `files` rather than minting a new record.
- *  A retry and a genuine recurrence look identical from content alone; both are
- *  representable and countable this way, and neither doubles the graph. */
-export async function writeConfirmedIncident(repoPath, incident) {
-    const path = join(repoPath, CONFIG_RELATIVE_PATH);
-    let existing = {};
-    try {
-        existing = JSON.parse(await readFile(path, "utf8"));
-    }
-    catch (error) {
-        void error;
-        existing = {};
-    }
-    const priorRaw = Array.isArray(existing["confirmedIncidents"]) ? existing["confirmedIncidents"] : [];
-    const prior = parseConfirmedIncidents(priorRaw, path);
-    const same = (a) => a.repo === incident.repo &&
-        a.summary === incident.summary &&
-        (a.errorText ?? "") === (incident.errorText ?? "");
-    const match = prior.find(same) ?? null;
-    let next;
-    let record;
-    let occurrences;
-    if (match === null) {
-        next = [...prior, incident];
-        record = incident;
-        occurrences = 1;
-    }
-    else {
-        record = {
-            ...match,
-            // The incident may have been reported with a narrower or wider file list
-            // each time — the union is what it has ever been correlated to.
-            files: [...new Set([...match.files, ...incident.files])].sort(),
-            ...(incident.fixedAtCommit === undefined ? {} : { fixedAtCommit: incident.fixedAtCommit }),
-            occurrences: [...(match.occurrences ?? [match.confirmedAt]), incident.confirmedAt],
-        };
-        next = [...prior.filter((i) => !same(i)), record];
-        occurrences = record.occurrences.length;
-    }
-    await mkdir(join(repoPath, ".descry"), { recursive: true });
-    await writeFile(path, `${JSON.stringify({ ...existing, confirmedIncidents: next }, null, 2)}\n`, "utf8");
-    return { path, total: next.length, merged: match !== null, occurrences, record, records: next };
-}
-/** `sources`' writer, one writer per field like the others. Unconditional — the caller
- *  (`descry init`) decides whether overwriting is appropriate, not this primitive. */
-export async function writeSources(repoPath, sources) {
-    const path = join(repoPath, CONFIG_RELATIVE_PATH);
-    let existing = {};
-    try {
-        existing = JSON.parse(await readFile(path, "utf8"));
-    }
-    catch (error) {
-        void error;
-        existing = {};
-    }
-    const next = { ...existing, sources: [...sources] };
-    await mkdir(join(repoPath, ".descry"), { recursive: true });
-    await writeFile(path, `${JSON.stringify(next, null, 2)}\n`, "utf8");
-    return { path };
-}
-export class Session {
-    repoPath;
-    // Not `readonly` — `reloadConfig()` is the one caller-initiated exception to
-    // "configuration is read once per process" (UAT phase 5, §0 gap 2). Every
-    // other read of this field still sees whatever `reloadConfig()` last set,
-    // exactly as it did the config loaded at startup.
-    config;
-    #store = null;
-    #provider = null;
-    #browserSessions = null;
-    #browserDriverFactory = null;
-    /**
-     * Literal credential values a browser session on this connection was seeded
-     * with — B1.
-     *
-     * Held so the things this server *writes* can be checked against them. Exact
-     * values, never patterns, because `@descryy/core`'s redactor is
-     * literal-substring for the reason its own header gives: a "looks like a
-     * token" regex either destroys real data or misses a secret shaped unlike
-     * it. Per connection, in memory only, and compared against rather than
-     * printed at every call site that reads it.
-     */
-    #browserSecrets = new Set();
-    #openGraph;
-    #calls = [];
-    #nextCallId = 1;
-    /**
-     * Where a `${credential:NAME}` step resolves its value, for a
-     * `browser_run_scenario` replay on this connection — RG-1(4) / lane
-     * "delivery". Mutable, not constructor-injected, and `undefined` by
-     * default: every existing `new Session(...)` call site (54 of them at
-     * last count) stays unchanged, and a caller that wants sign-in-by-profile
-     * sets it after construction, the same way `config` is mutated in place
-     * by `reloadConfig()`. `replayScenario` (`browser/scenario-runner.ts`)
-     * already accepts this exact type and already refuses a `${credential:...}`
-     * step by name when it is `undefined` — this field is what lets
-     * `browser-run-scenario.ts`'s tool actually have one to pass, which
-     * nothing did before.
-     */
-    credentialStore = undefined;
-    constructor(repoPath, config, openGraph) {
-        this.repoPath = repoPath;
-        this.config = config;
-        this.#openGraph = openGraph ?? ((path) => openStore(path));
-    }
-    static async open(options) {
-        const repoPath = resolve(options.repoPath);
-        const config = options.config ?? (await loadConfig(repoPath));
-        return new Session(repoPath, config, options.openGraph);
-    }
-    /**
-     * Re-reads `.descry/config.json` from disk and replaces `config` in place —
-     * the explicit, caller-initiated reload UAT phase 5 (§0 gap 2) asked for.
-     *
-     * Deliberately not a file watcher: a watcher would re-run every trust check
-     * (`module-trust.ts`) on a specifier the instant a file the *scanned
-     * repository* controls changes, with no human in the loop — exactly the
-     * hazard those checks exist to gate. This method exists so a caller (a
-     * tool's own `reload` argument) can ask for the same effect on purpose,
-     * with an addressee for the trust decision that follows.
-     *
-     * Returns which top-level fields actually changed, using the identical
-     * comparison `checkConfigDrift`'s disclosure already makes, so "reload
-     * happened" and "reload changed something" stay distinguishable — a
-     * reload that finds nothing different is not a no-op that failed silently.
-     */
-    async reloadConfig() {
-        const fresh = await loadConfig(this.repoPath);
-        const changed = driftedKeys(fresh, this.config);
-        this.config = fresh;
-        return { changed };
-    }
-    get graphPath() {
-        return isAbsolute(this.config.graph)
-            ? this.config.graph
-            : join(this.repoPath, this.config.graph);
-    }
-    /** Open on first use; reuse thereafter. */
-    store() {
-        if (this.#store === null)
-            this.#store = this.#openGraph(this.graphPath);
-        return this.#store;
-    }
-    /** `analyze`'s own repair path — the only caller entitled to one (others refuse a
-     *  version mismatch per DEC-017). Opens a short-lived driver directly, bypassing an
-     *  injected test store; no-op there since an in-memory fixture is never stale. */
-    repairStaleGraph() {
-        if (this.#store !== null)
-            return { rebuilt: false };
-        const driver = new NodeSqliteDriver();
-        try {
-            driver.open(this.graphPath);
-            return rebuildStaleGraph(driver);
-        }
-        catch {
-            // Anything from opening (missing dir, corrupt file) is not this method's job —
-            // `store()` right after hits the same path via its own disclosed error handling.
-            return { rebuilt: false };
-        }
-        finally {
-            driver.close();
-        }
-    }
-    provider() {
-        if (this.#provider === null)
-            this.#provider = createStoreProvider(this.store().driver);
-        return this.#provider;
-    }
-    /** Repo root for an analysis run. Commit sha comes from git and is never defaulted
-     *  when git is absent — every node/edge is stamped with it, and a placeholder would
-     *  make the staleness stamp a lie nothing downstream could detect. */
-    async root() {
-        if (!(await isGitRepository(this.repoPath))) {
-            throw new ConfigError(`${this.repoPath} is not a git repository. Every node is stamped with the commit it was ` +
-                "read at, so there is nothing honest to record for a directory with no history.");
-        }
-        return {
-            repo: this.config.repo,
-            ...(this.config.workspace === undefined ? {} : { workspace: this.config.workspace }),
-            absolutePath: this.repoPath,
-            commitSha: await gitHead(this.repoPath),
-        };
-    }
-    /** Live browser sessions for this connection (`mcp-browser-tools.md` §4). Created
-     *  lazily, same reason as the graph — most connections never touch a browser tool.
-     *  Lives here, not a module-level map, so "per connection, never global" actually holds. */
-    browserSessions() {
-        if (this.#browserSessions === null)
-            this.#browserSessions = createBrowserSessionRegistry();
-        return this.#browserSessions;
-    }
-    /** The browser this connection drives, or a named reason there is none. Unavailable
-     *  by default — `@descryy/runtime-browser` isn't installed yet — reported as a refusal
-     *  with a remedy, never a silently-empty page (rule 7). */
-    browserBackend() {
-        if (this.#browserDriverFactory === null)
-            return BROWSER_BACKEND_NOT_INSTALLED;
-        return { available: true, createDriver: this.#browserDriverFactory };
-    }
-    /** Installs the driver this connection's browser tools use. A method, not a
-     *  constructor arg — most sessions never touch a browser and shouldn't have to
-     *  name one to be constructed. */
-    useBrowserDriver(driver) {
-        // One-driver form — every test that doesn't care about stack parsing wants this
-        // and shouldn't have to write a factory.
-        this.#browserDriverFactory = () => Promise.resolve(driver);
-    }
-    /** Installs a factory that builds a driver per session. A factory, not a driver,
-     *  because the stack-trace parser (`browser_start_session`'s `stackParser`) is
-     *  language-specific and named per call. */
-    useBrowserDriverFactory(factory) {
-        this.#browserDriverFactory = factory;
-    }
-    /** Record credential values a browser session was seeded with, so anything this server writes can refuse to carry them. */
-    noteBrowserSecrets(values) {
-        for (const value of values)
-            if (value.length > 0)
-                this.#browserSecrets.add(value);
-    }
-    /** The credential values this connection knows about. Compared against, never rendered. */
-    browserSecrets() {
-        return [...this.#browserSecrets];
-    }
-    /** Synchronous teardown, no I/O to wait on. A browser session can't close
-     *  synchronously, so that reap lives in `dispose()` — this stays the method
-     *  every existing no-browser caller keeps using unchanged. */
-    close() {
-        this.#browserSessions?.stop();
-        this.#store?.close();
-        this.#store = null;
-        this.#provider = null;
-    }
-    /** Full teardown, including any live browser — what a client disconnect must
-     *  reach (§4). A leaked Chromium costs the developer's machine, not just a file
-     *  descriptor. Awaits the reap first so the evidence flush has a live registry. */
-    async dispose() {
-        if (this.#browserSessions !== null)
-            await this.#browserSessions.reapAll("clientDisconnect");
-        this.close();
-    }
-    /** Mints the next call id without recording anything yet. `server.ts` calls this
-     *  before render so the reply can carry `callId`, then records under the same id
-     *  with `recordCallWithId` — one id used for both. */
-    allocateCallId() {
-        return `call-${this.#nextCallId++}`;
-    }
-    /** `verify_claim`'s fact boundary — called once per call with the exact
-     *  `structuredContent` the host received. IDs are scoped to this process only, so a
-     *  citation from a different run can't resolve (§2's G1 negative control). */
-    recordCall(tool, args, result) {
-        return this.recordCallWithId(this.allocateCallId(), tool, args, result);
-    }
-    /** `recordCall` under an id minted earlier by `allocateCallId`, not one minted here
-     *  — so `recordedCall(id)` can find the exact id a caller read off the reply's
-     *  `callId`, which didn't exist until after the envelope was built. */
-    recordCallWithId(id, tool, args, result) {
-        const call = { id, tool, args, result, at: Date.now() };
-        this.#calls.push(call);
-        return call;
-    }
-    /** All calls recorded this session, oldest first. */
-    recordedCalls() {
-        return this.#calls;
-    }
-    recordedCall(id) {
-        return this.#calls.find((c) => c.id === id);
-    }
-}
-//# sourceMappingURL=session.js.map

package/dist/session.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;gGAIgG;AAEhG,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEhE,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EACL,mBAAmB,EACnB,OAAO,EACP,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,iBAAiB,GAGlB,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,6BAA6B,EAAkD,MAAM,uBAAuB,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAA+B,MAAM,uBAAuB,CAAC;AAClG,OAAO,EAAE,aAAa,EAAmB,MAAM,eAAe,CAAC;AAsC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAYvE,SAAS,uBAAuB,CAAC,GAAY,EAAE,UAAkB;IAC/D,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CAAC,GAAG,UAAU,yCAAyC,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,CAAU,EAAE,CAAC;YAC7E,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;gBAChD,MAAM,IAAI,WAAW,CACnB,GAAG,UAAU,wBAAwB,KAAK,KAAK,GAAG,6BAA6B,CAChF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YACxG,MAAM,IAAI,WAAW,CACnB,GAAG,UAAU,wBAAwB,KAAK,+CAA+C;gBACvF,wDAAwD,CAC3D,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,eAAe,CAAU,EAAE,CAAC;YAC3E,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,WAAW,CACnB,GAAG,UAAU,wBAAwB,KAAK,KAAK,GAAG,0CAA0C,CAC7F,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;QACrC,IACE,WAAW,KAAK,SAAS;YACzB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC1B,WAAW,CAAC,MAAM,KAAK,CAAC;gBACxB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAC7D,CAAC;YACD,MAAM,IAAI,WAAW,CACnB,GAAG,UAAU,wBAAwB,KAAK,oEAAoE,CAC/G,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,MAAM,CAAW;YACzB,OAAO,EAAE,CAAC,CAAC,SAAS,CAAW;YAC/B,KAAK,EAAE,KAA0B;YACjC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAW,EAAE,CAAC;YAChF,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,eAAe,CAAW,EAAE,CAAC;YAC5F,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,eAAe,CAAW,EAAE,CAAC;YAC5F,WAAW,EAAE,CAAC,CAAC,aAAa,CAAW;YACvC,WAAW,EAAE,CAAC,CAAC,aAAa,CAAW;YACvC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAgC,EAAE,CAAC;SACxF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY,EAAE,UAAkB;IAC3D,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CAAC,GAAG,UAAU,qCAAqC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,CAAU,EAAE,CAAC;YACxF,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;gBAChD,MAAM,IAAI,WAAW,CAAC,GAAG,UAAU,oBAAoB,KAAK,KAAK,GAAG,6BAA6B,CAAC,CAAC;YACrG,CAAC;QACH,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,mBAAmB,EAAE,WAAW,CAAU,EAAE,CAAC;YAC7E,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,WAAW,CACnB,GAAG,UAAU,oBAAoB,KAAK,KAAK,GAAG,0CAA0C,CACzF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,WAAW,CACnB,GAAG,UAAU,oBAAoB,KAAK,oDAAoD,CAC3F,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,MAAM,CAAW;YACzB,SAAS,EAAE,CAAC,CAAC,WAAW,CAAW;YACnC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAW;YAC3B,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,aAAa,CAAW,EAAE,CAAC;YACtF,WAAW,EAAE,CAAC,CAAC,aAAa,CAAW;YACvC,WAAW,EAAE,CAAC,CAAC,aAAa,CAAW;YACvC,yEAAyE;YACzE,wFAAwF;YACxF,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,mBAAmB,CAAW,EAAE,CAAC;YACxG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAuB,EAAE,CAAC;YAChF,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAW,EAAE,CAAC;SACjF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qGAAqG;AACrG,SAAS,WAAW,CAAC,CAAgB,EAAE,CAAgB;IACrD,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,CAAC;AAC7F,CAAC;AAED,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IACxD,IAAI,GAAG,GAAc,EAAE,CAAC;IACxB,IAAI,KAAK,GAAkB,IAAI,CAAC;IAEhC,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAc,CAAC;QAClE,KAAK,GAAG,UAAU,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,4EAA4E;YAC5E,4FAA4F;YAC5F,MAAM,IAAI,WAAW,CACnB,GAAG,UAAU,kCAAmC,KAAe,CAAC,OAAO,EAAE,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,WAAW,CAAC,GAAG,UAAU,8BAA8B,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,OAAO,GAAI,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACtE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAQ,KAAoB,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpG,OAAO,KAAmB,CAAC;QAC7B,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,GAAG,UAAU,aAAa,KAAK,iEAAiE,CACjG,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GACb,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,cAAc,GAAG,mBAAmB,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAE3E,OAAO;QACL,+EAA+E;QAC/E,6EAA6E;QAC7E,yDAAyD;QACzD,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9F,SAAS;QACT,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,2BAA2B;QAClG,OAAO;QACP,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC;QACnE,kBAAkB,EAAE,uBAAuB,CAAC,GAAG,CAAC,kBAAkB,EAAE,UAAU,CAAC;QAC/E,cAAc;QACd,WAAW,EAAE,MAAM,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC;QACvE,UAAU,EAAE,KAAK;KAClB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,YAAY,GAAG;IACnB,MAAM;IACN,WAAW;IACX,OAAO;IACP,SAAS;IACT,gBAAgB;IAChB,oBAAoB;IACpB,gBAAgB;IAChB,YAAY;CACsC,CAAC;AAErD,SAAS,WAAW,CAAC,MAAoB,EAAE,MAAoB;IAC7D,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACnG,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,MAA2B,EAAE,MAAoB;IAC/E,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,CACL,uFAAuF;QACvF,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,+DAA+D;QAC9F,6FAA6F;QAC7F,2FAA2F;QAC3F,8EAA8E,CAC/E,CAAC;AACJ,CAAC;AAOD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgB;IACrD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACrD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO;YACL,KAAK,EAAE,IAAI;YACX,IAAI,EACF,sEAAsE,MAAM,cAAc;gBAC1F,uFAAuF;gBACvF,mDAAmD;SACtD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY,EAAE,UAAkB;IAC3D,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CAAC,GAAG,UAAU,qCAAqC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAU,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;gBAChD,MAAM,IAAI,WAAW,CAAC,GAAG,UAAU,oBAAoB,KAAK,KAAK,GAAG,6BAA6B,CAAC,CAAC;YACrG,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAW,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAW,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;mGAEmG;AACnG,KAAK,UAAU,eAAe,CAC5B,QAAgB,EAChB,SAA6B,EAC7B,KAA+B;IAE/B,IAAI,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE7D,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;QACpD,IAAI,KAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAc,CAAC;YAClE,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,+EAA+E;QAC/E,8DAA8D;QAC9D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD;;gFAEgF;AAChF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAgB,EAChB,KAAkB;IAElB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAClD,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,8EAA8E;QAC9E,4EAA4E;QAC5E,uBAAuB;QACvB,KAAK,KAAK,CAAC;QACX,QAAQ,GAAG,EAAE,CAAC;IAChB,CAAC;IACD,MAAM,iBAAiB,GAAG,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAElG,MAAM,IAAI,GAA4B,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAEpE,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;AACrC,CAAC;AAED;;6EAE6E;AAC7E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,KAA+B;IAE/B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAClD,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,KAAK,CAAC;QACX,QAAQ,GAAG,EAAE,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,GAA4B;QACpC,GAAG,QAAQ;QACX,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;KACnE,CAAC;IACF,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED;;2FAE2F;AAC3F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,IAAmB;IAEnB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAClD,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,KAAK,CAAC;QACX,QAAQ,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,MAAM,KAAK,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC;IACjE,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAExD,MAAM,IAAI,GAA4B,EAAE,GAAG,QAAQ,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;IAEvF,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;;;2EAS2E;AAC3E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB,EAChB,QAA2B;IAe3B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAClD,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,KAAK,CAAC;QACX,QAAQ,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrG,MAAM,KAAK,GAAG,uBAAuB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,CAAC,CAAoB,EAAW,EAAE,CAC7C,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QACxB,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QAC9B,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IAEvC,IAAI,IAAkC,CAAC;IACvC,IAAI,MAAyB,CAAC;IAC9B,IAAI,WAAmB,CAAC;IACxB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,GAAG,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5B,MAAM,GAAG,QAAQ,CAAC;QAClB,WAAW,GAAG,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG;YACP,GAAG,KAAK;YACR,yEAAyE;YACzE,gEAAgE;YAChE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;YAC/D,GAAG,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC1F,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC;SACnF,CAAC;QACF,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAClD,WAAW,GAAG,MAAM,CAAC,WAAY,CAAC,MAAM,CAAC;IAC3C,CAAC;IAED,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzG,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,KAAK,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClG,CAAC;AAED;sFACsF;AACtF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,OAA0B;IAE1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAClD,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,KAAK,CAAC;QACX,QAAQ,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAA4B,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;IAE7E,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAqBD,MAAM,OAAO,OAAO;IACT,QAAQ,CAAS;IAC1B,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,kDAAkD;IAClD,MAAM,CAAe;IAErB,MAAM,GAAiB,IAAI,CAAC;IAC5B,SAAS,GAA6B,IAAI,CAAC;IAC3C,gBAAgB,GAAkC,IAAI,CAAC;IACvD,qBAAqB,GAAgC,IAAI,CAAC;IAC1D;;;;;;;;;;OAUG;IACH,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3B,UAAU,CAA0B;IACpC,MAAM,GAAuB,EAAE,CAAC;IACzC,WAAW,GAAG,CAAC,CAAC;IAChB;;;;;;;;;;;;OAYG;IACH,eAAe,GAAoC,SAAS,CAAC;IAE7D,YAAY,QAAgB,EAAE,MAAoB,EAAE,SAAmC;QACrF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAuB;QACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9D,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;IAED,IAAI,SAAS;QACX,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAClC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK;YACnB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,2CAA2C;IAC3C,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;sFAEkF;IAClF,gBAAgB;QACd,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5B,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,+EAA+E;YAC/E,iFAAiF;YACjF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,QAAQ;QACN,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;YAAE,IAAI,CAAC,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;0EAEsE;IACtE,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,WAAW,CACnB,GAAG,IAAI,CAAC,QAAQ,yEAAyE;gBACvF,gFAAgF,CACnF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACpF,YAAY,EAAE,IAAI,CAAC,QAAQ;YAC3B,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;SACxC,CAAC;IACJ,CAAC;IAED;;gGAE4F;IAC5F,eAAe;QACb,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI;YAAE,IAAI,CAAC,gBAAgB,GAAG,4BAA4B,EAAE,CAAC;QAC3F,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED;;+DAE2D;IAC3D,cAAc;QACZ,IAAI,IAAI,CAAC,qBAAqB,KAAK,IAAI;YAAE,OAAO,6BAA6B,CAAC;QAC9E,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,qBAAqB,EAAE,CAAC;IACvE,CAAC;IAED;;sCAEkC;IAClC,gBAAgB,CAAC,MAAqB;QACpC,gFAAgF;QAChF,yCAAyC;QACzC,IAAI,CAAC,qBAAqB,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED;;gDAE4C;IAC5C,uBAAuB,CAAC,OAA6B;QACnD,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC;IACvC,CAAC;IAED,2HAA2H;IAC3H,kBAAkB,CAAC,MAAyB;QAC1C,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpF,CAAC;IAED,2FAA2F;IAC3F,cAAc;QACZ,OAAO,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED;;kEAE8D;IAC9D,KAAK;QACH,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED;;uFAEmF;IACnF,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI;YAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC5F,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;0DAEsD;IACtD,cAAc;QACZ,OAAO,QAAQ,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;IACtC,CAAC;IAED;;kFAE8E;IAC9E,UAAU,CAAC,IAAY,EAAE,IAA6B,EAAE,MAA+B;QACrF,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IAED;;2EAEuE;IACvE,gBAAgB,CACd,EAAU,EACV,IAAY,EACZ,IAA6B,EAC7B,MAA+B;QAE/B,MAAM,IAAI,GAAqB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qDAAqD;IACrD,aAAa;QACX,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,YAAY,CAAC,EAAU;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;CACF"}