@descryy/mcp 0.6.0 → 0.7.1

package/dist/protocol.d.ts

@@ -1,42 +1,8 @@
 /**
- * JSON-RPC 2.0 and the slice of MCP this server speaks.
- *
- * ## Why this is hand-written
- *
- * `@modelcontextprotocol/sdk` is the obvious answer and the blueprint's
- * dependency table names it. It was measured rather than assumed: version 1.30.0
- * declares **seventeen direct dependencies** — `express`, `hono`,
- * `@hono/node-server`, `cors`, `express-rate-limit`, `jose`, `pkce-challenge`,
- * `eventsource`, `ajv`, `zod` — essentially all of which exist to serve the HTTP
- * and OAuth transports. This server speaks stdio to a coding agent on the same
- * machine. It will never open a socket.
- *
- * The rest of this project has made the same call four times — `node:sqlite`
- * over `better-sqlite3`, `node --test` over a test runner, `tsc` over a bundler,
- * `git` invoked directly over a git library — every time on the same grounds:
- * this is a **locally installed developer tool**, and a dependency tree is a
- * distribution problem before it is anything else. Seventeen
- * transitively-hundreds is a large price for newline-delimited JSON.
- *
- * This package no longer has zero runtime dependencies — `observe_runtime`
- * composes `descry-runtime`'s execution and correlation packages, ruled in
- * `DEC-NEXT-mcp-runtime-dependency-boundary-for-r4-evidence` — and the
- * argument above is unaffected, because it was never a vow of zero. It is a
- * cost/benefit about *this* dependency: every package `@descryy/mcp` depends
- * on is one of Descry's own, versioned and published alongside it, and each
- * one is there because a stage of a real run happens inside it. That is a
- * different trade from adding a stack of HTTP and OAuth packages to serve a
- * transport this server will never open a socket for.
- *
- * **The cost is named, not waved away.** Hand-rolling means spec drift is
- * silent: the wire format changes, the client stops working, and nothing in this
- * repository fails. Two things pay it down. `PROTOCOL_VERSION` is pinned and
- * `SUPPORTED_PROTOCOL_VERSIONS` is explicit, so an unknown version is negotiated
- * rather than assumed compatible; and the handshake is covered by tests that
- * assert the exact frames, so a change to the shape is a red test rather than a
- * user-visible mystery. If the protocol moves past what is here, the fix is to
- * add a version to the list — not to discover it from a bug report.
- */
+ * JSON-RPC 2.0 + the MCP slice this server speaks — hand-written, not the SDK:
+ * v1.30.0 pulls 17 deps, nearly all for HTTP/OAuth transports this stdio-only
+ * server never opens (same call as `node:sqlite`, `node --test`, `tsc` elsewhere).
+ * Spec-drift risk is mitigated by a pinned `PROTOCOL_VERSION` and exact-frame tests. */
 /** JSON-RPC 2.0 ids: string or number, never null in a request. */
 export type RpcId = string | number;
 export interface RpcRequest {
@@ -68,24 +34,15 @@ export declare const RPC_INVALID_REQUEST = -32600;
 export declare const RPC_METHOD_NOT_FOUND = -32601;
 export declare const RPC_INVALID_PARAMS = -32602;
 export declare const RPC_INTERNAL_ERROR = -32603;
-/**
- * The version this server implements.
- *
- * Newest first. Negotiation echoes the client's version when it is on this list
- * and otherwise answers with `PROTOCOL_VERSION`, which is what the spec asks for
- * — the client then decides whether it can proceed. Answering with the client's
- * unknown version instead would be a claim of compatibility nobody has checked.
- */
+/** The version this server implements. Negotiation echoes the client's version if
+ *  it's on `SUPPORTED_PROTOCOL_VERSIONS`, else answers with this — never claims
+ *  compatibility with an unchecked client version. */
 export declare const PROTOCOL_VERSION = "2025-06-18";
 export declare const SUPPORTED_PROTOCOL_VERSIONS: readonly string[];
 export declare function negotiateVersion(requested: unknown): string;
-/**
- * A frame that could not be understood well enough to answer.
- *
- * Distinguished from a request that is merely wrong, because JSON-RPC says a
- * message with no usable id gets no response at all — replying to it with a
- * fabricated id would put a frame on the wire the client cannot correlate.
- */
+/** A frame that couldn't be understood well enough to answer. Distinct from a
+ *  merely-wrong request — JSON-RPC says a message with no usable id gets no
+ *  response; replying with a fabricated id would be uncorrelatable. */
 export declare class ProtocolError extends Error {
     readonly code: number;
     /** Null when the frame carried no usable id and must therefore go unanswered. */

package/dist/protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,mEAAmE;AACnE,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;AAEpC,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;CAC3B;AAED,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,eAAe,CAAC;AAEtD,uEAAuE;AACvE,eAAO,MAAM,eAAe,SAAS,CAAC;AACtC,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAC1C,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAC3C,eAAO,MAAM,kBAAkB,SAAS,CAAC;AACzC,eAAO,MAAM,kBAAkB,SAAS,CAAC;AAEzC;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAC7C,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAIxD,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAI3D;AAMD;;;;;;GAMG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,EAAE,KAAK,GAAG,IAAI,CAAC;gBAEd,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,GAAG,IAAI;CAM5D;AAMD,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAsCrD;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,UAAU,CAEpE;AAED,wBAAgB,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,WAAW,CAE1D;AAED,wBAAgB,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,WAAW,CAM1F"}
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;wFAIwF;AAExF,mEAAmE;AACnE,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;AAEpC,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;CAC3B;AAED,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,eAAe,CAAC;AAEtD,uEAAuE;AACvE,eAAO,MAAM,eAAe,SAAS,CAAC;AACtC,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAC1C,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAC3C,eAAO,MAAM,kBAAkB,SAAS,CAAC;AACzC,eAAO,MAAM,kBAAkB,SAAS,CAAC;AAEzC;;sDAEsD;AACtD,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAC7C,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAIxD,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAI3D;AAED;;uEAEuE;AACvE,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,EAAE,KAAK,GAAG,IAAI,CAAC;gBAEd,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,GAAG,IAAI;CAM5D;AAMD,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAsCrD;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,UAAU,CAEpE;AAED,wBAAgB,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,WAAW,CAE1D;AAED,wBAAgB,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,WAAW,CAM1F"}

package/dist/protocol.js

@@ -1,56 +1,17 @@
 /**
- * JSON-RPC 2.0 and the slice of MCP this server speaks.
- *
- * ## Why this is hand-written
- *
- * `@modelcontextprotocol/sdk` is the obvious answer and the blueprint's
- * dependency table names it. It was measured rather than assumed: version 1.30.0
- * declares **seventeen direct dependencies** — `express`, `hono`,
- * `@hono/node-server`, `cors`, `express-rate-limit`, `jose`, `pkce-challenge`,
- * `eventsource`, `ajv`, `zod` — essentially all of which exist to serve the HTTP
- * and OAuth transports. This server speaks stdio to a coding agent on the same
- * machine. It will never open a socket.
- *
- * The rest of this project has made the same call four times — `node:sqlite`
- * over `better-sqlite3`, `node --test` over a test runner, `tsc` over a bundler,
- * `git` invoked directly over a git library — every time on the same grounds:
- * this is a **locally installed developer tool**, and a dependency tree is a
- * distribution problem before it is anything else. Seventeen
- * transitively-hundreds is a large price for newline-delimited JSON.
- *
- * This package no longer has zero runtime dependencies — `observe_runtime`
- * composes `descry-runtime`'s execution and correlation packages, ruled in
- * `DEC-NEXT-mcp-runtime-dependency-boundary-for-r4-evidence` — and the
- * argument above is unaffected, because it was never a vow of zero. It is a
- * cost/benefit about *this* dependency: every package `@descryy/mcp` depends
- * on is one of Descry's own, versioned and published alongside it, and each
- * one is there because a stage of a real run happens inside it. That is a
- * different trade from adding a stack of HTTP and OAuth packages to serve a
- * transport this server will never open a socket for.
- *
- * **The cost is named, not waved away.** Hand-rolling means spec drift is
- * silent: the wire format changes, the client stops working, and nothing in this
- * repository fails. Two things pay it down. `PROTOCOL_VERSION` is pinned and
- * `SUPPORTED_PROTOCOL_VERSIONS` is explicit, so an unknown version is negotiated
- * rather than assumed compatible; and the handshake is covered by tests that
- * assert the exact frames, so a change to the shape is a red test rather than a
- * user-visible mystery. If the protocol moves past what is here, the fix is to
- * add a version to the list — not to discover it from a bug report.
- */
+ * JSON-RPC 2.0 + the MCP slice this server speaks — hand-written, not the SDK:
+ * v1.30.0 pulls 17 deps, nearly all for HTTP/OAuth transports this stdio-only
+ * server never opens (same call as `node:sqlite`, `node --test`, `tsc` elsewhere).
+ * Spec-drift risk is mitigated by a pinned `PROTOCOL_VERSION` and exact-frame tests. */
 /** Standard JSON-RPC codes. MCP adds none of its own at this layer. */
 export const RPC_PARSE_ERROR = -32700;
 export const RPC_INVALID_REQUEST = -32600;
 export const RPC_METHOD_NOT_FOUND = -32601;
 export const RPC_INVALID_PARAMS = -32602;
 export const RPC_INTERNAL_ERROR = -32603;
-/**
- * The version this server implements.
- *
- * Newest first. Negotiation echoes the client's version when it is on this list
- * and otherwise answers with `PROTOCOL_VERSION`, which is what the spec asks for
- * — the client then decides whether it can proceed. Answering with the client's
- * unknown version instead would be a claim of compatibility nobody has checked.
- */
+/** The version this server implements. Negotiation echoes the client's version if
+ *  it's on `SUPPORTED_PROTOCOL_VERSIONS`, else answers with this — never claims
+ *  compatibility with an unchecked client version. */
 export const PROTOCOL_VERSION = "2025-06-18";
 export const SUPPORTED_PROTOCOL_VERSIONS = [
     "2025-06-18",
@@ -62,16 +23,9 @@ export function negotiateVersion(requested) {
         ? requested
         : PROTOCOL_VERSION;
 }
-// ---------------------------------------------------------------------------
-// Parsing
-// ---------------------------------------------------------------------------
-/**
- * A frame that could not be understood well enough to answer.
- *
- * Distinguished from a request that is merely wrong, because JSON-RPC says a
- * message with no usable id gets no response at all — replying to it with a
- * fabricated id would put a frame on the wire the client cannot correlate.
- */
+/** A frame that couldn't be understood well enough to answer. Distinct from a
+ *  merely-wrong request — JSON-RPC says a message with no usable id gets no
+ *  response; replying with a fabricated id would be uncorrelatable. */
 export class ProtocolError extends Error {
     code;
     /** Null when the frame carried no usable id and must therefore go unanswered. */
@@ -98,8 +52,8 @@ export function parseMessage(line) {
     if (!isRecord(raw)) {
         throw new ProtocolError(RPC_INVALID_REQUEST, "message must be a JSON object", null);
     }
-    // Batch requests were removed from MCP in 2025-06-18 and this server never
-    // supported them; an array reaches the same branch as any other non-object.
+    // Batch requests were removed from MCP in 2025-06-18; never supported here anyway —
+    // an array reaches the same branch as any other non-object.
     const id = raw["id"];
     const usableId = typeof id === "string" || typeof id === "number" ? id : null;
     if (raw["jsonrpc"] !== "2.0") {
@@ -110,8 +64,8 @@ export function parseMessage(line) {
     }
     const params = raw["params"];
     if (params !== undefined && !isRecord(params)) {
-        // Positional params are legal JSON-RPC and illegal MCP. Rejected rather than
-        // coerced: an array silently read as an object is a wrong answer, not an error.
+        // Positional params are legal JSON-RPC, illegal MCP. Rejected, not coerced —
+        // an array silently read as an object would be a wrong answer, not an error.
         throw new ProtocolError(RPC_INVALID_PARAMS, "params must be an object", usableId);
     }
     const method = raw["method"];

package/dist/protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAiCH,uEAAuE;AACvE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAK,CAAC;AACtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAC;AAC1C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAK,CAAC;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAC;AACzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAC;AAEzC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAC7C,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,YAAY;IACZ,YAAY;IACZ,YAAY;CACb,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,SAAkB;IACjD,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,2BAA2B,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrF,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,gBAAgB,CAAC;AACvB,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAS;IACtB,iFAAiF;IACxE,EAAE,CAAe;IAE1B,YAAY,IAAY,EAAE,OAAe,EAAE,EAAgB;QACzD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,+BAA+B,EAAE,IAAI,CAAC,CAAC;IACtF,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAE5E,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,MAAM,QAAQ,GACZ,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE/D,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,6EAA6E;QAC7E,gFAAgF;QAChF,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,0BAA0B,EAAE,QAAQ,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,MAAM,GAAW,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpD,OAAO,QAAQ,KAAK,IAAI;QACtB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE;QACrC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAmB;IAC3C,OAAO,IAAI,IAAI,OAAO,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,EAAE,CAAC,EAAS,EAAE,MAAe;IAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,EAAS,EAAE,IAAY,EAAE,OAAe,EAAE,IAAc;IAC3E,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;KAClE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;wFAIwF;AAiCxF,uEAAuE;AACvE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAK,CAAC;AACtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAC;AAC1C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAK,CAAC;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAC;AACzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAC;AAEzC;;sDAEsD;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAC7C,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,YAAY;IACZ,YAAY;IACZ,YAAY;CACb,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,SAAkB;IACjD,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,2BAA2B,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrF,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,gBAAgB,CAAC;AACvB,CAAC;AAED;;uEAEuE;AACvE,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAS;IACtB,iFAAiF;IACxE,EAAE,CAAe;IAE1B,YAAY,IAAY,EAAE,OAAe,EAAE,EAAgB;QACzD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,+BAA+B,EAAE,IAAI,CAAC,CAAC;IACtF,CAAC;IACD,oFAAoF;IACpF,4DAA4D;IAE5D,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,MAAM,QAAQ,GACZ,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE/D,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,6EAA6E;QAC7E,6EAA6E;QAC7E,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,0BAA0B,EAAE,QAAQ,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,MAAM,GAAW,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpD,OAAO,QAAQ,KAAK,IAAI;QACtB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE;QACrC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAmB;IAC3C,OAAO,IAAI,IAAI,OAAO,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,EAAE,CAAC,EAAS,EAAE,MAAe;IAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,EAAS,EAAE,IAAY,EAAE,OAAe,EAAE,IAAc;IAC3E,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;KAClE,CAAC;AACJ,CAAC"}

package/dist/registry.d.ts

@@ -1,47 +1,8 @@
-/**
- * How the server reaches adapters without this repository depending on them.
- *
- * `descry-core` must not import `descry-adapters`: the IR boundary is a
- * dependency-direction fact, and an import here would invert it in the one place
- * where it matters most — the process that runs everything. So sources are named
- * in configuration as module specifiers and loaded at runtime. The engine knows
- * `IRSource`; it never knows the word "python".
- *
- * ## The factory convention, and why it is a convention rather than an interface
- *
- * Every adapter in `descry-adapters` exports `ADAPTER_ID`, `ADAPTER_VERSION` and
- * a factory named `create<Something>Adapter` — `createGoAdapter`,
- * `createTypeScriptAdapter`, `createOpenApiAdapter`. There is no uniform name,
- * and inventing one now would be a breaking change across twelve packages to
- * save a regular expression. So: an explicit `export` in config wins; failing
- * that, the single export matching `create*Adapter` is used; **two matches is an
- * error, not a coin toss.**
- *
- * ## Failing to load a source is a disclosure, never a shrug
- *
- * An adapter that will not import is the difference between "we found no problem
- * in your Python service" and "we could not read your Python service" — §20.2
- * keeps those in different categories, and a registry that quietly skipped a
- * broken specifier would collapse them at the very bottom of the stack, where no
- * layer above could ever recover the distinction. Every failure comes back as a
- * `SourceLoadFailure` carrying the specifier and the reason, and the caller is
- * structurally unable to take the loaded sources without also taking the list of
- * ones that are missing.
- *
- * ## Two places to look, because the server and the repository are not the same tree
- *
- * `import(spec.module)` resolves relative to *this package's* location. That is
- * right for a side-by-side install — `npm i @descryy/mcp @descryy/adapter-x` puts
- * both under the repository's own `node_modules` — and useless under `npx -y
- * @descryy/mcp <repo>`, where the server runs out of an isolated npx cache
- * directory that contains no adapter the user ever installed. So a specifier is
- * resolved from the **repository root first** when one is known: that is where the
- * user installed the adapter and where their lockfile pins its version. The
- * server's own closure stays as the fallback, so the side-by-side install and the
- * absolute-path and `file:` specifiers that never needed a repository keep working
- * unchanged. When both fail, both are disclosed — a resolution nobody attempted is
- * the worst thing to make somebody debug.
- */
+/** How the server reaches adapters without depending on them: `descry-core` must never
+ *  import `descry-adapters` (rule 1, IR boundary) — sources are named as module specifiers
+ *  in config and loaded at runtime via a `create*Adapter` convention (an ambiguous match
+ *  errors, never guesses). A failed load is disclosed as `SourceLoadFailure`, never silently
+ *  skipped (§20.2). Specifiers resolve from the repo root first (npx isolates adapters there), then this package's own closure. */
 import type { IRSource, LanguageAdapter, RepoRoot } from "@descryy/ir";
 /** One entry in the configured source list. A bare string is `{ module }`. */
 export interface SourceSpec {
@@ -56,6 +17,33 @@ export interface LoadedSource {
     readonly source: IRSource;
     /** Present when the source implements `LanguageAdapter`, so `detect` can run. */
     readonly adapter: LanguageAdapter | null;
+    /**
+     * The absolute path this specifier actually resolved to. `null` only when
+     * the server's own module closure resolved it (`via: "server"`) and
+     * `import.meta.resolve` itself could not report where from.
+     *
+     * UAT phase 4 F3/§13.2.2: a bare specifier can resolve to more than one
+     * installed build with the same name (a stray `node_modules` above the
+     * repository shadows the intended one via CJS resolution's upward walk),
+     * and nothing previously said which build actually ran. This is that
+     * disclosure.
+     */
+    readonly resolvedPath: string | null;
+    /**
+     * The version declared by the resolved module's own nearest
+     * `package.json`, walking up from `resolvedPath` — the *installed
+     * artifact's* version. Deliberately not the module's self-declared
+     * version constant (`source.version`, if it sets one): those two can
+     * disagree (an adapter's hardcoded `ADAPTER_VERSION` left stale while its
+     * `package.json` moved on), and conflating them would hide exactly the
+     * drift this field exists to catch. `null` when `resolvedPath` is `null`,
+     * or when no `package.json` encloses it.
+     */
+    readonly packageVersion: string | null;
+    /** Which resolution path found it: the scanned repository's own
+     *  `node_modules` (`"repo"`), or this server's own module closure
+     *  (`"server"`). Both are legitimate — the point is naming which. */
+    readonly via: "repo" | "server";
 }
 export interface SourceLoadFailure {
     readonly spec: SourceSpec;
@@ -66,21 +54,12 @@ export interface RegistryResult {
     readonly failed: readonly SourceLoadFailure[];
 }
 export declare function normaliseSpec(entry: string | SourceSpec): SourceSpec;
-/**
- * @param repoPath Repository being analysed, when one is known. Specifiers are
- * resolved from here first; without it only the server's own closure is searched,
- * which is correct for callers that name modules by absolute path or `file:` URL.
- */
+/** @param repoPath Repo being analysed, when known — specifiers resolve from here first;
+ *  without it only this package's closure is searched (correct for absolute-path/`file:` callers). */
 export declare function loadSources(entries: readonly (string | SourceSpec)[], repoPath?: string): Promise<RegistryResult>;
-/**
- * Ask each loaded adapter whether it claims this repository.
- *
- * A source that is not a `LanguageAdapter` — the git history reader is the
- * standing example — has nothing to detect and always runs. A `detect` that
- * throws is treated as "did not detect", **with the reason recorded**: a broken
- * detector must not be able to fail the whole run, and must not be able to hide
- * either.
- */
+/** Asks each loaded adapter whether it claims this repository. A non-`LanguageAdapter`
+ *  source (the git reader) always runs. A throwing `detect` counts as "did not detect",
+ *  with the reason recorded — it can't fail the whole run, and can't hide either. */
 export declare function detectSources(sources: readonly LoadedSource[], root: RepoRoot): Promise<{
     readonly applicable: readonly LoadedSource[];
     readonly skipped: readonly {

package/dist/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAMH,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvE,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC/C;AAID,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,CAEpE;AAyBD;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,EAAE,EACzC,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,cAAc,CAAC,CAczB;AAwFD;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,IAAI,EAAE,QAAQ,GACb,OAAO,CAAC;IACT,QAAQ,CAAC,UAAU,EAAE,SAAS,YAAY,EAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,MAAM,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACvE,CAAC,CAuBD"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;mIAImI;AAOnI,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAIvE,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC;;;;;;;;;OASG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC;;yEAEqE;IACrE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC/C;AAID,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,CAEpE;AAoBD;sGACsG;AACtG,wBAAsB,WAAW,CAC/B,OAAO,EAAE,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,EAAE,EACzC,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,cAAc,CAAC,CAmBzB;AA6HD;;qFAEqF;AACrF,wBAAsB,aAAa,CACjC,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,IAAI,EAAE,QAAQ,GACb,OAAO,CAAC;IACT,QAAQ,CAAC,UAAU,EAAE,SAAS,YAAY,EAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,MAAM,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACvE,CAAC,CAuBD"}

package/dist/registry.js

@@ -1,47 +1,8 @@
-/**
- * How the server reaches adapters without this repository depending on them.
- *
- * `descry-core` must not import `descry-adapters`: the IR boundary is a
- * dependency-direction fact, and an import here would invert it in the one place
- * where it matters most — the process that runs everything. So sources are named
- * in configuration as module specifiers and loaded at runtime. The engine knows
- * `IRSource`; it never knows the word "python".
- *
- * ## The factory convention, and why it is a convention rather than an interface
- *
- * Every adapter in `descry-adapters` exports `ADAPTER_ID`, `ADAPTER_VERSION` and
- * a factory named `create<Something>Adapter` — `createGoAdapter`,
- * `createTypeScriptAdapter`, `createOpenApiAdapter`. There is no uniform name,
- * and inventing one now would be a breaking change across twelve packages to
- * save a regular expression. So: an explicit `export` in config wins; failing
- * that, the single export matching `create*Adapter` is used; **two matches is an
- * error, not a coin toss.**
- *
- * ## Failing to load a source is a disclosure, never a shrug
- *
- * An adapter that will not import is the difference between "we found no problem
- * in your Python service" and "we could not read your Python service" — §20.2
- * keeps those in different categories, and a registry that quietly skipped a
- * broken specifier would collapse them at the very bottom of the stack, where no
- * layer above could ever recover the distinction. Every failure comes back as a
- * `SourceLoadFailure` carrying the specifier and the reason, and the caller is
- * structurally unable to take the loaded sources without also taking the list of
- * ones that are missing.
- *
- * ## Two places to look, because the server and the repository are not the same tree
- *
- * `import(spec.module)` resolves relative to *this package's* location. That is
- * right for a side-by-side install — `npm i @descryy/mcp @descryy/adapter-x` puts
- * both under the repository's own `node_modules` — and useless under `npx -y
- * @descryy/mcp <repo>`, where the server runs out of an isolated npx cache
- * directory that contains no adapter the user ever installed. So a specifier is
- * resolved from the **repository root first** when one is known: that is where the
- * user installed the adapter and where their lockfile pins its version. The
- * server's own closure stays as the fallback, so the side-by-side install and the
- * absolute-path and `file:` specifiers that never needed a repository keep working
- * unchanged. When both fail, both are disclosed — a resolution nobody attempted is
- * the worst thing to make somebody debug.
- */
+/** How the server reaches adapters without depending on them: `descry-core` must never
+ *  import `descry-adapters` (rule 1, IR boundary) — sources are named as module specifiers
+ *  in config and loaded at runtime via a `create*Adapter` convention (an ambiguous match
+ *  errors, never guesses). A failed load is disclosed as `SourceLoadFailure`, never silently
+ *  skipped (§20.2). Specifiers resolve from the repo root first (npx isolates adapters there), then this package's own closure. */
 var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
     if (typeof path === "string" && /^\.\.?\//.test(path)) {
         return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
@@ -51,20 +12,17 @@ var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExte
     return path;
 };
 import { createRequire } from "node:module";
-import { join } from "node:path";
-import { pathToFileURL } from "node:url";
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { checkModuleTrust, checkRepoResolvedModuleTrust } from "./module-trust.js";
 const FACTORY_PATTERN = /^create[A-Za-z0-9]*Adapter$/;
 export function normaliseSpec(entry) {
     return typeof entry === "string" ? { module: entry } : entry;
 }
-/**
- * A loaded module is a `LanguageAdapter` when it can be asked what it supports.
- *
- * Duck-typed on the two methods that matter rather than on a marker, because the
- * adapters are compiled separately and `instanceof` across package boundaries is
- * a well-known way to be wrong. `detect` and `capabilities` are the two the
- * server actually calls; a source with both is one it can treat as an adapter.
- */
+/** A loaded module is a `LanguageAdapter` when it can be asked what it supports. Duck-typed
+ *  on `detect`/`capabilities` — the two methods the server calls — since `instanceof` across
+ *  separately-compiled adapter packages is unreliable. */
 function asAdapter(source) {
     const candidate = source;
     return typeof candidate.detect === "function" && typeof candidate.capabilities === "function"
@@ -78,18 +36,20 @@ function describe(error) {
     }
     return String(error);
 }
-/**
- * @param repoPath Repository being analysed, when one is known. Specifiers are
- * resolved from here first; without it only the server's own closure is searched,
- * which is correct for callers that name modules by absolute path or `file:` URL.
- */
+/** @param repoPath Repo being analysed, when known — specifiers resolve from here first;
+ *  without it only this package's closure is searched (correct for absolute-path/`file:` callers). */
 export async function loadSources(entries, repoPath) {
     const loaded = [];
     const failed = [];
     for (const entry of entries) {
         const spec = normaliseSpec(entry);
         try {
-            loaded.push({ ...(await instantiate(spec, repoPath)), spec });
+            const instantiated = await instantiate(spec, repoPath);
+            loaded.push({
+                ...instantiated,
+                spec,
+                packageVersion: packageVersionFor(instantiated.resolvedPath),
+            });
         }
         catch (error) {
             failed.push({ spec, reason: describe(error) });
@@ -97,20 +57,9 @@ export async function loadSources(entries, repoPath) {
     }
     return { loaded, failed };
 }
-/**
- * Resolve a specifier as the repository itself would, from its own `node_modules`.
- *
- * `createRequire` anchored at the repository's `package.json` is the resolution a
- * script run inside that repository would get. It is CommonJS resolution, so it
- * reads `exports` under the `require`/`default` conditions — every adapter here
- * publishes a `default`, and one that did not would fall through to the server's
- * closure rather than fail the load. The resolved path is imported as a URL, so
- * the module itself is still loaded as ESM.
- *
- * Returns the reason on failure rather than throwing: a specifier the repository
- * cannot see is not yet a failure, only a fact worth disclosing if the second
- * attempt fails too.
- */
+/** Resolves a specifier as the repo's own `node_modules` would, via `createRequire` anchored
+ *  at its `package.json` (CJS resolution, `require`/`default` conditions), then imports the
+ *  resolved path as ESM. Returns the reason on failure rather than throwing — not yet a failure until the fallback also fails. */
 function resolveFromRepo(specifier, repoPath) {
     try {
         const require = createRequire(pathToFileURL(join(repoPath, "package.json")));
@@ -121,7 +70,8 @@ function resolveFromRepo(specifier, repoPath) {
     }
 }
 async function instantiate(spec, repoPath) {
-    const module = (await importSource(spec.module, repoPath));
+    const imported = await importSource(spec.module, repoPath);
+    const module = imported.module;
     let factoryName = spec.export;
     if (factoryName === undefined) {
         const candidates = Object.keys(module).filter((key) => FACTORY_PATTERN.test(key) && typeof module[key] === "function");
@@ -143,22 +93,70 @@ async function instantiate(spec, repoPath) {
     if (typeof source?.emit !== "function" || typeof source.id !== "string") {
         throw new Error(`"${factoryName}" did not return an IRSource (needs \`id\` and \`emit\`)`);
     }
-    return { source, adapter: asAdapter(source) };
+    return { source, adapter: asAdapter(source), resolvedPath: imported.resolvedPath, via: imported.via };
 }
-/**
- * Repository root first, the server's own closure second.
- *
- * Only a *resolution* failure falls through. A module that resolves and then
- * throws while evaluating is that module's failure, and reporting it as "could
- * not be found" — or quietly loading a different copy from the server's closure
- * instead — would hide a broken adapter behind a wrong explanation.
- */
+/** Reads the version of the nearest enclosing `package.json`, walking up from `startPath`'s
+ *  directory — the *installed artifact's* version, never the module's own self-declared
+ *  constant. `null` when `startPath` is `null` or no `package.json` encloses it (a bare
+ *  path-specifier source with no package boundary at all): a real absence, never a guess. */
+function packageVersionFor(startPath) {
+    if (startPath === null)
+        return null;
+    let dir = dirname(startPath);
+    for (;;) {
+        try {
+            const pkg = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
+            if (typeof pkg.version === "string")
+                return pkg.version;
+            return null;
+        }
+        catch {
+            // Not found at this level, or not parseable — keep walking up; a
+            // malformed package.json above the real one must not stop the search.
+        }
+        const parent = dirname(dir);
+        if (parent === dir)
+            return null; // reached the filesystem root
+        dir = parent;
+    }
+}
+/** Repository root first, the server's own closure second. Only a resolution failure falls
+ *  through — a module that resolves and then throws is that module's own failure, not "could not be found". */
 async function importSource(specifier, repoPath) {
+    // A-F1: specifier can come straight from the repo's own .descry/config.json (module-trust.ts).
+    // Checked on the raw string before either resolution attempt, since `resolveFromRepo` always
+    // turns its result into a `file:` URL regardless of whether the specifier was path-like.
+    const trust = checkModuleTrust(specifier);
+    if (!trust.allowed)
+        throw new Error(trust.reason);
     const fromRepo = repoPath === undefined ? { reason: "no repository root" } : resolveFromRepo(specifier, repoPath);
-    if ("url" in fromRepo)
-        return await import(__rewriteRelativeImportExtension(fromRepo.url));
+    if ("url" in fromRepo) {
+        // A-F1 follow-up: checkModuleTrust only sees the raw specifier, not that it resolves into
+        // the repo's own git-tracked node_modules — closes the gap where a hostile repo commits
+        // node_modules/<name> and delivers a payload on clone alone; override: DESCRY_ALLOW_TRACKED_NODE_MODULES=1.
+        const repoTrust = await checkRepoResolvedModuleTrust({
+            specifier,
+            repoPath: repoPath,
+            resolvedAbsolutePath: fileURLToPath(fromRepo.url),
+        });
+        if (!repoTrust.allowed)
+            throw new Error(repoTrust.reason);
+        const module = await import(__rewriteRelativeImportExtension(fromRepo.url));
+        return { module, resolvedPath: fileURLToPath(fromRepo.url), via: "repo" };
+    }
     try {
-        return await import(__rewriteRelativeImportExtension(specifier));
+        const module = await import(__rewriteRelativeImportExtension(specifier));
+        // Best-effort only — `import.meta.resolve` reports where the server's
+        // own module graph found it, but is not guaranteed to succeed for every
+        // legal specifier shape a runtime `import()` accepts.
+        let resolvedPath = null;
+        try {
+            resolvedPath = fileURLToPath(import.meta.resolve(specifier));
+        }
+        catch {
+            resolvedPath = null;
+        }
+        return { module, resolvedPath, via: "server" };
     }
     catch (error) {
         if (repoPath === undefined)
@@ -167,15 +165,9 @@ async function importSource(specifier, repoPath) {
             `(${fromRepo.reason})`, { cause: error });
     }
 }
-/**
- * Ask each loaded adapter whether it claims this repository.
- *
- * A source that is not a `LanguageAdapter` — the git history reader is the
- * standing example — has nothing to detect and always runs. A `detect` that
- * throws is treated as "did not detect", **with the reason recorded**: a broken
- * detector must not be able to fail the whole run, and must not be able to hide
- * either.
- */
+/** Asks each loaded adapter whether it claims this repository. A non-`LanguageAdapter`
+ *  source (the git reader) always runs. A throwing `detect` counts as "did not detect",
+ *  with the reason recorded — it can't fail the whole run, and can't hide either. */
 export async function detectSources(sources, root) {
     const applicable = [];
     const skipped = [];

package/dist/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;;;;;;;;;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AA8BzC,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAEtD,MAAM,UAAU,aAAa,CAAC,KAA0B;IACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,MAAgB;IACjC,MAAM,SAAS,GAAG,MAAkC,CAAC;IACrD,OAAO,OAAO,SAAS,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,SAAS,CAAC,YAAY,KAAK,UAAU;QAC3F,CAAC,CAAE,MAA0B;QAC7B,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAyC,EACzC,QAAiB;IAEjB,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAwB,EAAE,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,eAAe,CAAC,SAAiB,EAAE,QAAgB;IAC1D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;QAC7E,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACrC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAgB,EAChB,QAAiB;IAEjB,MAAM,MAAM,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAA4B,CAAC;IAEtF,IAAI,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9B,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3C,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,UAAU,CACxE,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,8DAA8D;gBAC5D,gBAAgB,IAAI,CAAC,MAAM,uBAAuB,CACrD,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,CAAC,MAAM,kCAAkC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;gBACrF,uFAAuF,CAC1F,CAAC;QACJ,CAAC;QACD,WAAW,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,WAAW,WAAW,qBAAqB,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,MAAM,GAAI,OAA0C,CAAC,IAAI,CAAC,OAAO,CAAa,CAAC;IACrF,IAAI,OAAO,MAAM,EAAE,IAAI,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,IAAI,WAAW,0DAA0D,CAAC,CAAC;IAC7F,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,QAAiB;IAC9D,MAAM,QAAQ,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClH,IAAI,KAAK,IAAI,QAAQ;QAAE,OAAO,MAAM,MAAM,kCAAC,QAAQ,CAAC,GAAG,EAAC,CAAC;IAEzD,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,kCAAC,SAAS,EAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,CAAC,KAAK,CAAC,sDAAsD,QAAQ,UAAU;YACxF,IAAI,QAAQ,CAAC,MAAM,GAAG,EACxB,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgC,EAChC,IAAc;IAKd,MAAM,UAAU,GAAmB,EAAE,CAAC;IACtC,MAAM,OAAO,GAA+C,EAAE,CAAC;IAE/D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,SAAS,CAAC,QAAQ;gBAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;gBAE7C,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,gDAAgD;iBACzD,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;mIAImI;;;;;;;;;AAEnI,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIxD,OAAO,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAuDnF,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAEtD,MAAM,UAAU,aAAa,CAAC,KAA0B;IACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/D,CAAC;AAED;;0DAE0D;AAC1D,SAAS,SAAS,CAAC,MAAgB;IACjC,MAAM,SAAS,GAAG,MAAkC,CAAC;IACrD,OAAO,OAAO,SAAS,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,SAAS,CAAC,YAAY,KAAK,UAAU;QAC3F,CAAC,CAAE,MAA0B;QAC7B,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;sGACsG;AACtG,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAyC,EACzC,QAAiB;IAEjB,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAwB,EAAE,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,YAAY;gBACf,IAAI;gBACJ,cAAc,EAAE,iBAAiB,CAAC,YAAY,CAAC,YAAY,CAAC;aAC7D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED;;kIAEkI;AAClI,SAAS,eAAe,CAAC,SAAiB,EAAE,QAAgB;IAC1D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;QAC7E,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACrC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAgB,EAChB,QAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAiC,CAAC;IAE1D,IAAI,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9B,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3C,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,UAAU,CACxE,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,8DAA8D;gBAC5D,gBAAgB,IAAI,CAAC,MAAM,uBAAuB,CACrD,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,CAAC,MAAM,kCAAkC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;gBACrF,uFAAuF,CAC1F,CAAC;QACJ,CAAC;QACD,WAAW,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,WAAW,WAAW,qBAAqB,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,MAAM,GAAI,OAA0C,CAAC,IAAI,CAAC,OAAO,CAAa,CAAC;IACrF,IAAI,OAAO,MAAM,EAAE,IAAI,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,IAAI,WAAW,0DAA0D,CAAC,CAAC;IAC7F,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;AACxG,CAAC;AAED;;;6FAG6F;AAC7F,SAAS,iBAAiB,CAAC,SAAwB;IACjD,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7B,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA0B,CAAC;YACjG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO,GAAG,CAAC,OAAO,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,sEAAsE;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,8BAA8B;QAC/D,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;+GAC+G;AAC/G,KAAK,UAAU,YAAY,CACzB,SAAiB,EACjB,QAAiB;IAEjB,+FAA+F;IAC/F,6FAA6F;IAC7F,yFAAyF;IACzF,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClH,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;QACtB,0FAA0F;QAC1F,wFAAwF;QACxF,4GAA4G;QAC5G,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC;YACnD,SAAS;YACT,QAAQ,EAAE,QAAS;YACnB,oBAAoB,EAAE,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC;SAClD,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,MAAM,kCAAC,QAAQ,CAAC,GAAG,EAAC,CAAC;QAC1C,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAC5E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,kCAAC,SAAS,EAAC,CAAC;QACvC,sEAAsE;QACtE,wEAAwE;QACxE,sDAAsD;QACtD,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,IAAI,CAAC;YACH,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,CAAC,KAAK,CAAC,sDAAsD,QAAQ,UAAU;YACxF,IAAI,QAAQ,CAAC,MAAM,GAAG,EACxB,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;qFAEqF;AACrF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgC,EAChC,IAAc;IAKd,MAAM,UAAU,GAAmB,EAAE,CAAC;IACtC,MAAM,OAAO,GAA+C,EAAE,CAAC;IAE/D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,SAAS,CAAC,QAAQ;gBAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;gBAE7C,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,gDAAgD;iBACzD,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC"}