@evalops/maestro 0.10.50 → 0.10.53

package/dist/mcp/workspace-trust.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-trust.js","sourceRoot":"","sources":["../../src/mcp/workspace-trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAe7D,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,SAAS,UAAU;IAClB,OAAO;QACN,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,EAAE;KACX,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IACC,OAAO,YAAY,KAAK,QAAQ;QAChC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAChC,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,CAAC,EAC3D,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO;QACN,YAAY,EAAE,wBAAwB,CAAC,YAAY,CAAC;QACpD,IAAI;QACJ,iBAAiB,EAChB,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;YAC1C,CAAC,CAAC,KAAK,CAAC,iBAAiB;YACzB,CAAC,CAAC,SAAS;QACb,SAAS,EACR,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClE,SAAS,EACR,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClE,SAAS,EACR,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClE,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;KACnE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzE,OAAO,UAAU,EAAE,CAAC;IACrB,CAAC;IACD,MAAM,OAAO,GAA6C,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,SAAS;QACV,CAAC;QACD,MAAM,UAAU,GAAG,OAAO;aACxB,GAAG,CAAC,mBAAmB,CAAC;aACxB,MAAM,CAAC,CAAC,KAAK,EAAmC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;QAClC,CAAC;IACF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,SAAS;IACjB,OAAO,cAAc,CACpB,YAAY,CAAU,KAAK,CAAC,wBAAwB,EAAE;QACrD,QAAQ,EAAE,UAAU,EAAE;KACtB,CAAC,CACF,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAA8B;IACjD,aAAa,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAAC,KAA6B,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACjE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,GAAG,CAAC;AACxD,CAAC;AAED,SAAS,mBAAmB,CAC3B,OAAsD,EACtD,YAAoB,EACpB,UAA0C,EAAE;IAE5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,qBAAqB,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;IACrE,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,SAAS;QACV,CAAC;QACD,IACC,wBAAwB,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,qBAAqB,EACrE,CAAC;YACF,SAAS;QACV,CAAC;QACD,IACC,OAAO,CAAC,iBAAiB;YACzB,KAAK,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,EACpD,CAAC;YACF,IAAI,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACzD,SAAS;YACV,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,kCAAkC,CAAC,OAM3C;IACA,MAAM,iBAAiB,GACtB,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,mBAAmB,CACrC,iBAAiB,EACjB,OAAO,CAAC,YAAY,CACpB,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QAChB,OAAO,UAAU,CAAC,IAAI,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,CAAC,qBAAqB,KAAK,WAAW,EAAE,CAAC;QAC1D,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CACjC,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,EACzC,OAAO,CAAC,YAAY,EACpB,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAChD,CAAC;IACF,IAAI,MAAM,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,qBAAqB,IAAI,KAAK,CAAC;AACtD,CAAC;AAED,SAAS,wBAAwB,CAAC,YAAoB;IACrD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,OAAO,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;QAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,OAAO;aACZ,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC;aACvC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC;AACF,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aACnB,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC;aACpD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;YAC3B,GAAG;YACH,yBAAyB,CAAC,UAAU,CAAC;SACrC,CAAC,CACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAuB;IACpD,MAAM,QAAQ,GAAoB,EAAE,GAAG,MAAM,EAAE,CAAC;IAChD,OAAO,QAAQ,CAAC,QAAQ,CAAC;IACzB,OAAO,QAAQ,CAAC,OAAO,CAAC;IACxB,OAAO,QAAQ,CAAC,KAAK,CAAC;IACtB,OAAO,UAAU,CAAC,QAAQ,CAAC;SACzB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC;SAC3D,MAAM,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE;IAE7B,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpC,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACrC,KAAK,EACL,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,EACpD;YACC,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,MAAM;SAChB,CACD,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,OAAO,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,0DAA0D;IAC3D,CAAC;IACD,OAAO,QAAQ,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,oBAAoB,CAAC,OAO7B;IACA,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,wBAAwB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAC/D,CAAC,KAAK,EAAE,EAAE,CACT,wBAAwB,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,YAAY;QAC7D,KAAK,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,CACtD,CAAC;IACF,OAAO,CAAC,IAAI,CAAC;QACZ,YAAY;QACZ,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC,CAAC;IACH,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC;IAC5C,UAAU,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,OAAsB;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CACxB,CAAC,IAAI,EAAuB,EAAE,CAC7B,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CACtD,EAAE,IAAI,CAAC;IACR,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/D,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACnE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;QACvE,IACC,SAAS,KAAK,YAAY;YAC1B,SAAS,KAAK,cAAc;YAC5B,SAAS,KAAK,OAAO;YACrB,SAAS,KAAK,QAAQ,EACrB,CAAC;YACF,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAK/C;IACA,MAAM,WAAW,GAAG,SAAS,EAAE,CAAC,OAAO,CAAC;IACxC,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC9E,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,kCAAkC,CAAC;QAC/C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;QAC/B,YAAY;QACZ,iBAAiB;QACjB,WAAW;KACX,CAAC,CAAC;IAEH,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;IACR,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACd,eAAe,OAAO,CAAC,MAAM,CAAC,IAAI,kCAAkC,YAAY,GAAG,CACnF,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACd,eAAe,OAAO,CAAC,MAAM,CAAC,IAAI,+CAA+C,OAAO,CAAC,QAAQ,gDAAgD,CACjJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE,EAAE,CAAC;IACzF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,gBAAgB,CAC9D,SAAS,EACT,iBAAiB,EACjB;QACC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;QAC/B,SAAS;QACT,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,qBAAqB,OAAO,CAAC,MAAM,CAAC,IAAI,mBAAmB,YAAY,yBAAyB,OAAO,CAAC,QAAQ,IAAI;QAC7H,eAAe,EAAE;YAChB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACX,QAAQ,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,UAAU;oBACjB,IAAI,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC;iBACvD;aACD;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACtB;KACD,CACD,CAAC;IAEF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACd,uCAAuC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,CAC9D,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,OAAwB,CAAC,CAAC;IAC9D,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO;IACR,CAAC;IACD,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QACjC,oBAAoB,CAAC;YACpB,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;YAC/B,YAAY;YACZ,IAAI,EAAE,SAAS;YACf,iBAAiB;YACjB,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,oCAAoC,OAAO,CAAC,QAAQ,EAAE;SAC9D,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1B,oBAAoB,CAAC;YACpB,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;YAC/B,YAAY;YACZ,IAAI,EAAE,SAAS;YACf,iBAAiB;YACjB,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,mCAAmC,OAAO,CAAC,QAAQ,EAAE;SAC7D,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CACd,eAAe,OAAO,CAAC,MAAM,CAAC,IAAI,mCAAmC,YAAY,GAAG,CACpF,CAAC;AACH,CAAC","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { createHash, randomUUID } from \"node:crypto\";\nimport { resolve } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport type { ClientToolExecutionService } from \"../agent/transport.js\";\nimport type { TextContent } from \"../agent/types.js\";\nimport { PATHS } from \"../config/constants.js\";\nimport { readJsonFile, writeJsonFile } from \"../utils/fs.js\";\nimport type {\n\tMcpConfig,\n\tMcpServerConfig,\n\tMcpWorkspaceTrustEntry,\n\tMcpWorkspaceTrustMode,\n} from \"./types.js\";\n\ntype StoredMcpWorkspaceTrust = {\n\tversion: 1;\n\tservers: Record<string, McpWorkspaceTrustEntry[]>;\n};\n\ntype TrustDecision = \"trust_once\" | \"trust_always\" | \"block\" | \"cancel\";\n\nconst execFileAsync = promisify(execFile);\n\nfunction emptyStore(): StoredMcpWorkspaceTrust {\n\treturn {\n\t\tversion: 1,\n\t\tservers: {},\n\t};\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction normalizeTrustEntry(value: unknown): McpWorkspaceTrustEntry | null {\n\tif (!isRecord(value)) {\n\t\treturn null;\n\t}\n\tconst workspaceUri = value.workspaceUri;\n\tconst mode = value.mode;\n\tif (\n\t\ttypeof workspaceUri !== \"string\" ||\n\t\tworkspaceUri.trim().length === 0 ||\n\t\t(mode !== \"trusted\" && mode !== \"ask\" && mode !== \"blocked\")\n\t) {\n\t\treturn null;\n\t}\n\treturn {\n\t\tworkspaceUri: canonicalizeWorkspaceUri(workspaceUri),\n\t\tmode,\n\t\tserverFingerprint:\n\t\t\ttypeof value.serverFingerprint === \"string\"\n\t\t\t\t? value.serverFingerprint\n\t\t\t\t: undefined,\n\t\tgrantedBy:\n\t\t\ttypeof value.grantedBy === \"string\" ? value.grantedBy : undefined,\n\t\tgrantedAt:\n\t\t\ttypeof value.grantedAt === \"string\" ? value.grantedAt : undefined,\n\t\texpiresAt:\n\t\t\ttypeof value.expiresAt === \"string\" ? value.expiresAt : undefined,\n\t\treason: typeof value.reason === \"string\" ? value.reason : undefined,\n\t};\n}\n\nfunction normalizeStore(value: unknown): StoredMcpWorkspaceTrust {\n\tif (!isRecord(value) || value.version !== 1 || !isRecord(value.servers)) {\n\t\treturn emptyStore();\n\t}\n\tconst servers: Record<string, McpWorkspaceTrustEntry[]> = {};\n\tfor (const [serverName, entries] of Object.entries(value.servers)) {\n\t\tif (!Array.isArray(entries)) {\n\t\t\tcontinue;\n\t\t}\n\t\tconst normalized = entries\n\t\t\t.map(normalizeTrustEntry)\n\t\t\t.filter((entry): entry is McpWorkspaceTrustEntry => !!entry);\n\t\tif (normalized.length > 0) {\n\t\t\tservers[serverName] = normalized;\n\t\t}\n\t}\n\treturn { version: 1, servers };\n}\n\nfunction readStore(): StoredMcpWorkspaceTrust {\n\treturn normalizeStore(\n\t\treadJsonFile<unknown>(PATHS.MCP_WORKSPACE_TRUST_FILE, {\n\t\t\tfallback: emptyStore(),\n\t\t}),\n\t);\n}\n\nfunction writeStore(store: StoredMcpWorkspaceTrust): void {\n\twriteJsonFile(PATHS.MCP_WORKSPACE_TRUST_FILE, store);\n}\n\nfunction isExpired(entry: McpWorkspaceTrustEntry, now = Date.now()): boolean {\n\tif (!entry.expiresAt) {\n\t\treturn false;\n\t}\n\tconst expiresAt = Date.parse(entry.expiresAt);\n\treturn !Number.isFinite(expiresAt) || expiresAt <= now;\n}\n\nfunction latestMatchingEntry(\n\tentries: readonly McpWorkspaceTrustEntry[] | undefined,\n\tworkspaceUri: string,\n\toptions: { serverFingerprint?: string } = {},\n): McpWorkspaceTrustEntry | undefined {\n\tif (!entries) {\n\t\treturn undefined;\n\t}\n\tconst canonicalWorkspaceUri = canonicalizeWorkspaceUri(workspaceUri);\n\tfor (let index = entries.length - 1; index >= 0; index -= 1) {\n\t\tconst entry = entries[index];\n\t\tif (!entry || isExpired(entry)) {\n\t\t\tcontinue;\n\t\t}\n\t\tif (\n\t\t\tcanonicalizeWorkspaceUri(entry.workspaceUri) !== canonicalWorkspaceUri\n\t\t) {\n\t\t\tcontinue;\n\t\t}\n\t\tif (\n\t\t\toptions.serverFingerprint &&\n\t\t\tentry.serverFingerprint !== options.serverFingerprint\n\t\t) {\n\t\t\tif (entry.serverFingerprint || entry.mode !== \"blocked\") {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t}\n\t\treturn entry;\n\t}\n\treturn undefined;\n}\n\nfunction resolveConfiguredMcpWorkspaceTrust(options: {\n\tconfig: Pick<McpConfig, \"trustedWorkspaces\" | \"workspaceTrustDefault\">;\n\tserverName: string;\n\tworkspaceUri: string;\n\tserverFingerprint?: string;\n\tstoredTrust?: Record<string, McpWorkspaceTrustEntry[]>;\n}): McpWorkspaceTrustMode {\n\tconst configuredEntries =\n\t\toptions.config.trustedWorkspaces?.[options.serverName];\n\tconst configured = latestMatchingEntry(\n\t\tconfiguredEntries,\n\t\toptions.workspaceUri,\n\t);\n\tif (configured) {\n\t\treturn configured.mode;\n\t}\n\tif (options.config.workspaceTrustDefault === \"untrusted\") {\n\t\treturn \"untrusted\";\n\t}\n\tconst stored = latestMatchingEntry(\n\t\toptions.storedTrust?.[options.serverName],\n\t\toptions.workspaceUri,\n\t\t{ serverFingerprint: options.serverFingerprint },\n\t);\n\tif (stored) {\n\t\treturn stored.mode;\n\t}\n\treturn options.config.workspaceTrustDefault ?? \"ask\";\n}\n\nfunction canonicalizeWorkspaceUri(workspaceUri: string): string {\n\tconst trimmed = workspaceUri.trim();\n\tif (trimmed.startsWith(\"git:\")) {\n\t\treturn `git:${sanitizeGitRemote(trimmed.slice(\"git:\".length))}`;\n\t}\n\treturn trimmed;\n}\n\nfunction sanitizeGitRemote(remote: string): string {\n\tconst trimmed = remote.trim();\n\ttry {\n\t\tconst url = new URL(trimmed);\n\t\turl.username = \"\";\n\t\turl.password = \"\";\n\t\turl.search = \"\";\n\t\turl.hash = \"\";\n\t\treturn url.toString();\n\t} catch {\n\t\treturn trimmed\n\t\t\t.replace(/^[^/@\\s]+@(?=[^/:]+[:/])/, \"\")\n\t\t\t.replace(/[?#].*$/, \"\");\n\t}\n}\n\nfunction normalizeFingerprintValue(value: unknown): unknown {\n\tif (Array.isArray(value)) {\n\t\treturn value.map(normalizeFingerprintValue);\n\t}\n\tif (isRecord(value)) {\n\t\treturn Object.fromEntries(\n\t\t\tObject.entries(value)\n\t\t\t\t.filter(([, entryValue]) => entryValue !== undefined)\n\t\t\t\t.sort(([left], [right]) => left.localeCompare(right))\n\t\t\t\t.map(([key, entryValue]) => [\n\t\t\t\t\tkey,\n\t\t\t\t\tnormalizeFingerprintValue(entryValue),\n\t\t\t\t]),\n\t\t);\n\t}\n\treturn value;\n}\n\nfunction fingerprintMcpServer(server: McpServerConfig): string {\n\tconst identity: McpServerConfig = { ...server };\n\tdelete identity.disabled;\n\tdelete identity.enabled;\n\tdelete identity.scope;\n\treturn createHash(\"sha256\")\n\t\t.update(JSON.stringify(normalizeFingerprintValue(identity)))\n\t\t.digest(\"hex\");\n}\n\nexport async function resolveMcpWorkspaceUri(\n\tworkspaceRoot = process.cwd(),\n): Promise<string> {\n\tconst root = resolve(workspaceRoot);\n\ttry {\n\t\tconst { stdout } = await execFileAsync(\n\t\t\t\"git\",\n\t\t\t[\"-C\", root, \"config\", \"--get\", \"remote.origin.url\"],\n\t\t\t{\n\t\t\t\ttimeout: 1000,\n\t\t\t\twindowsHide: true,\n\t\t\t\tencoding: \"utf8\",\n\t\t\t},\n\t\t);\n\t\tconst remote = stdout.trim();\n\t\tif (remote.length > 0) {\n\t\t\treturn `git:${sanitizeGitRemote(remote)}`;\n\t\t}\n\t} catch {\n\t\t// Non-git workspaces fall back to a canonical local path.\n\t}\n\treturn `file:${root}`;\n}\n\nfunction setMcpWorkspaceTrust(options: {\n\tserverName: string;\n\tworkspaceUri: string;\n\tmode: Exclude<McpWorkspaceTrustMode, \"untrusted\">;\n\tserverFingerprint?: string;\n\tgrantedBy?: string;\n\treason?: string;\n}): void {\n\tconst store = readStore();\n\tconst workspaceUri = canonicalizeWorkspaceUri(options.workspaceUri);\n\tconst entries = (store.servers[options.serverName] ?? []).filter(\n\t\t(entry) =>\n\t\t\tcanonicalizeWorkspaceUri(entry.workspaceUri) !== workspaceUri ||\n\t\t\tentry.serverFingerprint !== options.serverFingerprint,\n\t);\n\tentries.push({\n\t\tworkspaceUri,\n\t\tmode: options.mode,\n\t\tserverFingerprint: options.serverFingerprint,\n\t\tgrantedBy: options.grantedBy,\n\t\tgrantedAt: new Date().toISOString(),\n\t\treason: options.reason,\n\t});\n\tstore.servers[options.serverName] = entries;\n\twriteStore(store);\n}\n\nfunction getDecision(content: TextContent[]): TrustDecision {\n\tconst text = content.find(\n\t\t(item): item is TextContent =>\n\t\t\titem.type === \"text\" && typeof item.text === \"string\",\n\t)?.text;\n\tif (!text) {\n\t\treturn \"cancel\";\n\t}\n\ttry {\n\t\tconst parsed = JSON.parse(text) as unknown;\n\t\tif (!isRecord(parsed)) {\n\t\t\treturn \"cancel\";\n\t\t}\n\t\tif (parsed.action === \"decline\" || parsed.action === \"cancel\") {\n\t\t\treturn \"cancel\";\n\t\t}\n\t\tconst payload = isRecord(parsed.content) ? parsed.content : parsed;\n\t\tconst candidate = payload.decision ?? payload.choice ?? payload.action;\n\t\tif (\n\t\t\tcandidate === \"trust_once\" ||\n\t\t\tcandidate === \"trust_always\" ||\n\t\t\tcandidate === \"block\" ||\n\t\t\tcandidate === \"cancel\"\n\t\t) {\n\t\t\treturn candidate;\n\t\t}\n\t} catch {\n\t\treturn \"cancel\";\n\t}\n\treturn \"cancel\";\n}\n\nexport async function ensureMcpWorkspaceTrusted(options: {\n\tconfig: McpConfig;\n\tserver: McpServerConfig;\n\ttoolName: string;\n\tclientToolService?: ClientToolExecutionService;\n}): Promise<void> {\n\tconst storedTrust = readStore().servers;\n\tconst workspaceUri = await resolveMcpWorkspaceUri(options.config.projectRoot);\n\tconst serverFingerprint = fingerprintMcpServer(options.server);\n\tconst mode = resolveConfiguredMcpWorkspaceTrust({\n\t\tconfig: options.config,\n\t\tserverName: options.server.name,\n\t\tworkspaceUri,\n\t\tserverFingerprint,\n\t\tstoredTrust,\n\t});\n\n\tif (mode === \"trusted\") {\n\t\treturn;\n\t}\n\tif (mode === \"blocked\" || mode === \"untrusted\") {\n\t\tthrow new Error(\n\t\t\t`MCP server \"${options.server.name}\" is not trusted for workspace ${workspaceUri}.`,\n\t\t);\n\t}\n\tif (!options.clientToolService) {\n\t\tthrow new Error(\n\t\t\t`MCP server \"${options.server.name}\" requires workspace trust before invoking \"${options.toolName}\", but no MCP elicitation client is connected.`,\n\t\t);\n\t}\n\n\tconst requestId = `mcp_trust:${options.server.name}:${options.toolName}:${randomUUID()}`;\n\tconst result = await options.clientToolService.requestExecution(\n\t\trequestId,\n\t\t\"mcp_elicitation\",\n\t\t{\n\t\t\tserverName: options.server.name,\n\t\t\trequestId,\n\t\t\tmode: \"form\",\n\t\t\tmessage: `Trust MCP server \"${options.server.name}\" for workspace ${workspaceUri} before calling tool \"${options.toolName}\"?`,\n\t\t\trequestedSchema: {\n\t\t\t\ttype: \"object\",\n\t\t\t\tproperties: {\n\t\t\t\t\tdecision: {\n\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\ttitle: \"Decision\",\n\t\t\t\t\t\tenum: [\"trust_once\", \"trust_always\", \"block\", \"cancel\"],\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\trequired: [\"decision\"],\n\t\t\t},\n\t\t},\n\t);\n\n\tif (result.isError) {\n\t\tthrow new Error(\n\t\t\t`MCP trust prompt failed for server \"${options.server.name}\".`,\n\t\t);\n\t}\n\n\tconst decision = getDecision(result.content as TextContent[]);\n\tif (decision === \"trust_once\") {\n\t\treturn;\n\t}\n\tif (decision === \"trust_always\") {\n\t\tsetMcpWorkspaceTrust({\n\t\t\tserverName: options.server.name,\n\t\t\tworkspaceUri,\n\t\t\tmode: \"trusted\",\n\t\t\tserverFingerprint,\n\t\t\tgrantedBy: \"user\",\n\t\t\treason: `Accepted MCP tool invocation for ${options.toolName}`,\n\t\t});\n\t\treturn;\n\t}\n\tif (decision === \"block\") {\n\t\tsetMcpWorkspaceTrust({\n\t\t\tserverName: options.server.name,\n\t\t\tworkspaceUri,\n\t\t\tmode: \"blocked\",\n\t\t\tserverFingerprint,\n\t\t\tgrantedBy: \"user\",\n\t\t\treason: `Blocked MCP tool invocation for ${options.toolName}`,\n\t\t});\n\t}\n\tthrow new Error(\n\t\t`MCP server \"${options.server.name}\" was not trusted for workspace ${workspaceUri}.`,\n\t);\n}\n"]}
+{"version":3,"file":"workspace-trust.js","sourceRoot":"","sources":["../../src/mcp/workspace-trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAe5C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,SAAS,UAAU;IAClB,OAAO;QACN,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,EAAE;KACX,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IACC,OAAO,YAAY,KAAK,QAAQ;QAChC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAChC,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,CAAC,EAC3D,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO;QACN,YAAY,EAAE,wBAAwB,CAAC,YAAY,CAAC;QACpD,IAAI;QACJ,iBAAiB,EAChB,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;YAC1C,CAAC,CAAC,KAAK,CAAC,iBAAiB;YACzB,CAAC,CAAC,SAAS;QACb,SAAS,EACR,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClE,SAAS,EACR,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClE,SAAS,EACR,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClE,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;KACnE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzE,OAAO,UAAU,EAAE,CAAC;IACrB,CAAC;IACD,MAAM,OAAO,GAA6C,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,SAAS;QACV,CAAC;QACD,MAAM,UAAU,GAAG,OAAO;aACxB,GAAG,CAAC,mBAAmB,CAAC;aACxB,MAAM,CAAC,CAAC,KAAK,EAAmC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;QAClC,CAAC;IACF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,SAAS;IACjB,OAAO,cAAc,CACpB,YAAY,CAAU,KAAK,CAAC,wBAAwB,EAAE;QACrD,QAAQ,EAAE,UAAU,EAAE;KACtB,CAAC,CACF,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAA8B;IACjD,aAAa,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAAC,KAA6B,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACjE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,GAAG,CAAC;AACxD,CAAC;AAED,SAAS,mBAAmB,CAC3B,OAAsD,EACtD,YAAoB,EACpB,UAA0C,EAAE;IAE5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,qBAAqB,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;IACrE,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,SAAS;QACV,CAAC;QACD,IACC,wBAAwB,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,qBAAqB,EACrE,CAAC;YACF,SAAS;QACV,CAAC;QACD,IACC,OAAO,CAAC,iBAAiB;YACzB,KAAK,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,EACpD,CAAC;YACF,IAAI,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACzD,SAAS;YACV,CAAC;QACF,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,kCAAkC,CAAC,OAM3C;IACA,MAAM,iBAAiB,GACtB,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,mBAAmB,CACrC,iBAAiB,EACjB,OAAO,CAAC,YAAY,CACpB,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QAChB,OAAO,UAAU,CAAC,IAAI,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,CAAC,qBAAqB,KAAK,WAAW,EAAE,CAAC;QAC1D,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CACjC,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,EACzC,OAAO,CAAC,YAAY,EACpB,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAChD,CAAC;IACF,IAAI,MAAM,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,qBAAqB,IAAI,KAAK,CAAC;AACtD,CAAC;AAED,SAAS,wBAAwB,CAAC,YAAoB;IACrD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,OAAO,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;QAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,OAAO;aACZ,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC;aACvC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC;AACF,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aACnB,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC;aACpD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;YAC3B,GAAG;YACH,yBAAyB,CAAC,UAAU,CAAC;SACrC,CAAC,CACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAuB;IACpD,MAAM,QAAQ,GAAoB,EAAE,GAAG,MAAM,EAAE,CAAC;IAChD,OAAO,QAAQ,CAAC,QAAQ,CAAC;IACzB,OAAO,QAAQ,CAAC,OAAO,CAAC;IACxB,OAAO,QAAQ,CAAC,KAAK,CAAC;IACtB,OAAO,UAAU,CAAC,QAAQ,CAAC;SACzB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC;SAC3D,MAAM,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE;IAE7B,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpC,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACrC,KAAK,EACL,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,EACpD;YACC,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,MAAM;SAChB,CACD,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,OAAO,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,0DAA0D;IAC3D,CAAC;IACD,OAAO,QAAQ,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,oBAAoB,CAAC,OAO7B;IACA,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,wBAAwB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAC/D,CAAC,KAAK,EAAE,EAAE,CACT,wBAAwB,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,YAAY;QAC7D,KAAK,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB,CACtD,CAAC;IACF,OAAO,CAAC,IAAI,CAAC;QACZ,YAAY;QACZ,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC,CAAC;IACH,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC;IAC5C,UAAU,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,OAAsB;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CACxB,CAAC,IAAI,EAAuB,EAAE,CAC7B,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CACtD,EAAE,IAAI,CAAC;IACR,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/D,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACnE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;QACvE,IACC,SAAS,KAAK,YAAY;YAC1B,SAAS,KAAK,cAAc;YAC5B,SAAS,KAAK,OAAO;YACrB,SAAS,KAAK,QAAQ,EACrB,CAAC;YACF,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAK/C;IACA,MAAM,WAAW,GAAG,SAAS,EAAE,CAAC,OAAO,CAAC;IACxC,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC9E,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,kCAAkC,CAAC;QAC/C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;QAC/B,YAAY;QACZ,iBAAiB;QACjB,WAAW;KACX,CAAC,CAAC;IAEH,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;IACR,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACd,eAAe,OAAO,CAAC,MAAM,CAAC,IAAI,kCAAkC,YAAY,GAAG,CACnF,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACd,eAAe,OAAO,CAAC,MAAM,CAAC,IAAI,+CAA+C,OAAO,CAAC,QAAQ,gDAAgD,CACjJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE,EAAE,CAAC;IACzF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,gBAAgB,CAC9D,SAAS,EACT,iBAAiB,EACjB;QACC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;QAC/B,SAAS;QACT,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,qBAAqB,OAAO,CAAC,MAAM,CAAC,IAAI,mBAAmB,YAAY,yBAAyB,OAAO,CAAC,QAAQ,IAAI;QAC7H,eAAe,EAAE;YAChB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACX,QAAQ,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,UAAU;oBACjB,IAAI,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC;iBACvD;aACD;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACtB;KACD,CACD,CAAC;IAEF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACd,uCAAuC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,CAC9D,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,OAAwB,CAAC,CAAC;IAC9D,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO;IACR,CAAC;IACD,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QACjC,oBAAoB,CAAC;YACpB,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;YAC/B,YAAY;YACZ,IAAI,EAAE,SAAS;YACf,iBAAiB;YACjB,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,oCAAoC,OAAO,CAAC,QAAQ,EAAE;SAC9D,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1B,oBAAoB,CAAC;YACpB,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;YAC/B,YAAY;YACZ,IAAI,EAAE,SAAS;YACf,iBAAiB;YACjB,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,mCAAmC,OAAO,CAAC,QAAQ,EAAE;SAC7D,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CACd,eAAe,OAAO,CAAC,MAAM,CAAC,IAAI,mCAAmC,YAAY,GAAG,CACpF,CAAC;AACH,CAAC","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { createHash, randomUUID } from \"node:crypto\";\nimport { resolve } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport type { ClientToolExecutionService } from \"../agent/transport.js\";\nimport type { TextContent } from \"../agent/types.js\";\nimport { PATHS } from \"../config/constants.js\";\nimport { readJsonFile, writeJsonFile } from \"../utils/fs.js\";\nimport { isRecord } from \"../utils/json.js\";\nimport type {\n\tMcpConfig,\n\tMcpServerConfig,\n\tMcpWorkspaceTrustEntry,\n\tMcpWorkspaceTrustMode,\n} from \"./types.js\";\n\ntype StoredMcpWorkspaceTrust = {\n\tversion: 1;\n\tservers: Record<string, McpWorkspaceTrustEntry[]>;\n};\n\ntype TrustDecision = \"trust_once\" | \"trust_always\" | \"block\" | \"cancel\";\n\nconst execFileAsync = promisify(execFile);\n\nfunction emptyStore(): StoredMcpWorkspaceTrust {\n\treturn {\n\t\tversion: 1,\n\t\tservers: {},\n\t};\n}\n\nfunction normalizeTrustEntry(value: unknown): McpWorkspaceTrustEntry | null {\n\tif (!isRecord(value)) {\n\t\treturn null;\n\t}\n\tconst workspaceUri = value.workspaceUri;\n\tconst mode = value.mode;\n\tif (\n\t\ttypeof workspaceUri !== \"string\" ||\n\t\tworkspaceUri.trim().length === 0 ||\n\t\t(mode !== \"trusted\" && mode !== \"ask\" && mode !== \"blocked\")\n\t) {\n\t\treturn null;\n\t}\n\treturn {\n\t\tworkspaceUri: canonicalizeWorkspaceUri(workspaceUri),\n\t\tmode,\n\t\tserverFingerprint:\n\t\t\ttypeof value.serverFingerprint === \"string\"\n\t\t\t\t? value.serverFingerprint\n\t\t\t\t: undefined,\n\t\tgrantedBy:\n\t\t\ttypeof value.grantedBy === \"string\" ? value.grantedBy : undefined,\n\t\tgrantedAt:\n\t\t\ttypeof value.grantedAt === \"string\" ? value.grantedAt : undefined,\n\t\texpiresAt:\n\t\t\ttypeof value.expiresAt === \"string\" ? value.expiresAt : undefined,\n\t\treason: typeof value.reason === \"string\" ? value.reason : undefined,\n\t};\n}\n\nfunction normalizeStore(value: unknown): StoredMcpWorkspaceTrust {\n\tif (!isRecord(value) || value.version !== 1 || !isRecord(value.servers)) {\n\t\treturn emptyStore();\n\t}\n\tconst servers: Record<string, McpWorkspaceTrustEntry[]> = {};\n\tfor (const [serverName, entries] of Object.entries(value.servers)) {\n\t\tif (!Array.isArray(entries)) {\n\t\t\tcontinue;\n\t\t}\n\t\tconst normalized = entries\n\t\t\t.map(normalizeTrustEntry)\n\t\t\t.filter((entry): entry is McpWorkspaceTrustEntry => !!entry);\n\t\tif (normalized.length > 0) {\n\t\t\tservers[serverName] = normalized;\n\t\t}\n\t}\n\treturn { version: 1, servers };\n}\n\nfunction readStore(): StoredMcpWorkspaceTrust {\n\treturn normalizeStore(\n\t\treadJsonFile<unknown>(PATHS.MCP_WORKSPACE_TRUST_FILE, {\n\t\t\tfallback: emptyStore(),\n\t\t}),\n\t);\n}\n\nfunction writeStore(store: StoredMcpWorkspaceTrust): void {\n\twriteJsonFile(PATHS.MCP_WORKSPACE_TRUST_FILE, store);\n}\n\nfunction isExpired(entry: McpWorkspaceTrustEntry, now = Date.now()): boolean {\n\tif (!entry.expiresAt) {\n\t\treturn false;\n\t}\n\tconst expiresAt = Date.parse(entry.expiresAt);\n\treturn !Number.isFinite(expiresAt) || expiresAt <= now;\n}\n\nfunction latestMatchingEntry(\n\tentries: readonly McpWorkspaceTrustEntry[] | undefined,\n\tworkspaceUri: string,\n\toptions: { serverFingerprint?: string } = {},\n): McpWorkspaceTrustEntry | undefined {\n\tif (!entries) {\n\t\treturn undefined;\n\t}\n\tconst canonicalWorkspaceUri = canonicalizeWorkspaceUri(workspaceUri);\n\tfor (let index = entries.length - 1; index >= 0; index -= 1) {\n\t\tconst entry = entries[index];\n\t\tif (!entry || isExpired(entry)) {\n\t\t\tcontinue;\n\t\t}\n\t\tif (\n\t\t\tcanonicalizeWorkspaceUri(entry.workspaceUri) !== canonicalWorkspaceUri\n\t\t) {\n\t\t\tcontinue;\n\t\t}\n\t\tif (\n\t\t\toptions.serverFingerprint &&\n\t\t\tentry.serverFingerprint !== options.serverFingerprint\n\t\t) {\n\t\t\tif (entry.serverFingerprint || entry.mode !== \"blocked\") {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t}\n\t\treturn entry;\n\t}\n\treturn undefined;\n}\n\nfunction resolveConfiguredMcpWorkspaceTrust(options: {\n\tconfig: Pick<McpConfig, \"trustedWorkspaces\" | \"workspaceTrustDefault\">;\n\tserverName: string;\n\tworkspaceUri: string;\n\tserverFingerprint?: string;\n\tstoredTrust?: Record<string, McpWorkspaceTrustEntry[]>;\n}): McpWorkspaceTrustMode {\n\tconst configuredEntries =\n\t\toptions.config.trustedWorkspaces?.[options.serverName];\n\tconst configured = latestMatchingEntry(\n\t\tconfiguredEntries,\n\t\toptions.workspaceUri,\n\t);\n\tif (configured) {\n\t\treturn configured.mode;\n\t}\n\tif (options.config.workspaceTrustDefault === \"untrusted\") {\n\t\treturn \"untrusted\";\n\t}\n\tconst stored = latestMatchingEntry(\n\t\toptions.storedTrust?.[options.serverName],\n\t\toptions.workspaceUri,\n\t\t{ serverFingerprint: options.serverFingerprint },\n\t);\n\tif (stored) {\n\t\treturn stored.mode;\n\t}\n\treturn options.config.workspaceTrustDefault ?? \"ask\";\n}\n\nfunction canonicalizeWorkspaceUri(workspaceUri: string): string {\n\tconst trimmed = workspaceUri.trim();\n\tif (trimmed.startsWith(\"git:\")) {\n\t\treturn `git:${sanitizeGitRemote(trimmed.slice(\"git:\".length))}`;\n\t}\n\treturn trimmed;\n}\n\nfunction sanitizeGitRemote(remote: string): string {\n\tconst trimmed = remote.trim();\n\ttry {\n\t\tconst url = new URL(trimmed);\n\t\turl.username = \"\";\n\t\turl.password = \"\";\n\t\turl.search = \"\";\n\t\turl.hash = \"\";\n\t\treturn url.toString();\n\t} catch {\n\t\treturn trimmed\n\t\t\t.replace(/^[^/@\\s]+@(?=[^/:]+[:/])/, \"\")\n\t\t\t.replace(/[?#].*$/, \"\");\n\t}\n}\n\nfunction normalizeFingerprintValue(value: unknown): unknown {\n\tif (Array.isArray(value)) {\n\t\treturn value.map(normalizeFingerprintValue);\n\t}\n\tif (isRecord(value)) {\n\t\treturn Object.fromEntries(\n\t\t\tObject.entries(value)\n\t\t\t\t.filter(([, entryValue]) => entryValue !== undefined)\n\t\t\t\t.sort(([left], [right]) => left.localeCompare(right))\n\t\t\t\t.map(([key, entryValue]) => [\n\t\t\t\t\tkey,\n\t\t\t\t\tnormalizeFingerprintValue(entryValue),\n\t\t\t\t]),\n\t\t);\n\t}\n\treturn value;\n}\n\nfunction fingerprintMcpServer(server: McpServerConfig): string {\n\tconst identity: McpServerConfig = { ...server };\n\tdelete identity.disabled;\n\tdelete identity.enabled;\n\tdelete identity.scope;\n\treturn createHash(\"sha256\")\n\t\t.update(JSON.stringify(normalizeFingerprintValue(identity)))\n\t\t.digest(\"hex\");\n}\n\nexport async function resolveMcpWorkspaceUri(\n\tworkspaceRoot = process.cwd(),\n): Promise<string> {\n\tconst root = resolve(workspaceRoot);\n\ttry {\n\t\tconst { stdout } = await execFileAsync(\n\t\t\t\"git\",\n\t\t\t[\"-C\", root, \"config\", \"--get\", \"remote.origin.url\"],\n\t\t\t{\n\t\t\t\ttimeout: 1000,\n\t\t\t\twindowsHide: true,\n\t\t\t\tencoding: \"utf8\",\n\t\t\t},\n\t\t);\n\t\tconst remote = stdout.trim();\n\t\tif (remote.length > 0) {\n\t\t\treturn `git:${sanitizeGitRemote(remote)}`;\n\t\t}\n\t} catch {\n\t\t// Non-git workspaces fall back to a canonical local path.\n\t}\n\treturn `file:${root}`;\n}\n\nfunction setMcpWorkspaceTrust(options: {\n\tserverName: string;\n\tworkspaceUri: string;\n\tmode: Exclude<McpWorkspaceTrustMode, \"untrusted\">;\n\tserverFingerprint?: string;\n\tgrantedBy?: string;\n\treason?: string;\n}): void {\n\tconst store = readStore();\n\tconst workspaceUri = canonicalizeWorkspaceUri(options.workspaceUri);\n\tconst entries = (store.servers[options.serverName] ?? []).filter(\n\t\t(entry) =>\n\t\t\tcanonicalizeWorkspaceUri(entry.workspaceUri) !== workspaceUri ||\n\t\t\tentry.serverFingerprint !== options.serverFingerprint,\n\t);\n\tentries.push({\n\t\tworkspaceUri,\n\t\tmode: options.mode,\n\t\tserverFingerprint: options.serverFingerprint,\n\t\tgrantedBy: options.grantedBy,\n\t\tgrantedAt: new Date().toISOString(),\n\t\treason: options.reason,\n\t});\n\tstore.servers[options.serverName] = entries;\n\twriteStore(store);\n}\n\nfunction getDecision(content: TextContent[]): TrustDecision {\n\tconst text = content.find(\n\t\t(item): item is TextContent =>\n\t\t\titem.type === \"text\" && typeof item.text === \"string\",\n\t)?.text;\n\tif (!text) {\n\t\treturn \"cancel\";\n\t}\n\ttry {\n\t\tconst parsed = JSON.parse(text) as unknown;\n\t\tif (!isRecord(parsed)) {\n\t\t\treturn \"cancel\";\n\t\t}\n\t\tif (parsed.action === \"decline\" || parsed.action === \"cancel\") {\n\t\t\treturn \"cancel\";\n\t\t}\n\t\tconst payload = isRecord(parsed.content) ? parsed.content : parsed;\n\t\tconst candidate = payload.decision ?? payload.choice ?? payload.action;\n\t\tif (\n\t\t\tcandidate === \"trust_once\" ||\n\t\t\tcandidate === \"trust_always\" ||\n\t\t\tcandidate === \"block\" ||\n\t\t\tcandidate === \"cancel\"\n\t\t) {\n\t\t\treturn candidate;\n\t\t}\n\t} catch {\n\t\treturn \"cancel\";\n\t}\n\treturn \"cancel\";\n}\n\nexport async function ensureMcpWorkspaceTrusted(options: {\n\tconfig: McpConfig;\n\tserver: McpServerConfig;\n\ttoolName: string;\n\tclientToolService?: ClientToolExecutionService;\n}): Promise<void> {\n\tconst storedTrust = readStore().servers;\n\tconst workspaceUri = await resolveMcpWorkspaceUri(options.config.projectRoot);\n\tconst serverFingerprint = fingerprintMcpServer(options.server);\n\tconst mode = resolveConfiguredMcpWorkspaceTrust({\n\t\tconfig: options.config,\n\t\tserverName: options.server.name,\n\t\tworkspaceUri,\n\t\tserverFingerprint,\n\t\tstoredTrust,\n\t});\n\n\tif (mode === \"trusted\") {\n\t\treturn;\n\t}\n\tif (mode === \"blocked\" || mode === \"untrusted\") {\n\t\tthrow new Error(\n\t\t\t`MCP server \"${options.server.name}\" is not trusted for workspace ${workspaceUri}.`,\n\t\t);\n\t}\n\tif (!options.clientToolService) {\n\t\tthrow new Error(\n\t\t\t`MCP server \"${options.server.name}\" requires workspace trust before invoking \"${options.toolName}\", but no MCP elicitation client is connected.`,\n\t\t);\n\t}\n\n\tconst requestId = `mcp_trust:${options.server.name}:${options.toolName}:${randomUUID()}`;\n\tconst result = await options.clientToolService.requestExecution(\n\t\trequestId,\n\t\t\"mcp_elicitation\",\n\t\t{\n\t\t\tserverName: options.server.name,\n\t\t\trequestId,\n\t\t\tmode: \"form\",\n\t\t\tmessage: `Trust MCP server \"${options.server.name}\" for workspace ${workspaceUri} before calling tool \"${options.toolName}\"?`,\n\t\t\trequestedSchema: {\n\t\t\t\ttype: \"object\",\n\t\t\t\tproperties: {\n\t\t\t\t\tdecision: {\n\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\ttitle: \"Decision\",\n\t\t\t\t\t\tenum: [\"trust_once\", \"trust_always\", \"block\", \"cancel\"],\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\trequired: [\"decision\"],\n\t\t\t},\n\t\t},\n\t);\n\n\tif (result.isError) {\n\t\tthrow new Error(\n\t\t\t`MCP trust prompt failed for server \"${options.server.name}\".`,\n\t\t);\n\t}\n\n\tconst decision = getDecision(result.content as TextContent[]);\n\tif (decision === \"trust_once\") {\n\t\treturn;\n\t}\n\tif (decision === \"trust_always\") {\n\t\tsetMcpWorkspaceTrust({\n\t\t\tserverName: options.server.name,\n\t\t\tworkspaceUri,\n\t\t\tmode: \"trusted\",\n\t\t\tserverFingerprint,\n\t\t\tgrantedBy: \"user\",\n\t\t\treason: `Accepted MCP tool invocation for ${options.toolName}`,\n\t\t});\n\t\treturn;\n\t}\n\tif (decision === \"block\") {\n\t\tsetMcpWorkspaceTrust({\n\t\t\tserverName: options.server.name,\n\t\t\tworkspaceUri,\n\t\t\tmode: \"blocked\",\n\t\t\tserverFingerprint,\n\t\t\tgrantedBy: \"user\",\n\t\t\treason: `Blocked MCP tool invocation for ${options.toolName}`,\n\t\t});\n\t}\n\tthrow new Error(\n\t\t`MCP server \"${options.server.name}\" was not trusted for workspace ${workspaceUri}.`,\n\t);\n}\n"]}

package/dist/memory/service-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service-client.d.ts","sourceRoot":"","sources":["../../src/memory/service-client.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAkZlE,wBAAgB,oCAAoC,IAAI,IAAI,CAE3D;AA0SD,wBAAsB,yBAAyB,CAC9C,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IACT,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB,GACC,OAAO,CAAC;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAAC,CAa5E;AAED,wBAAsB,2BAA2B,CAChD,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;IACT,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CACf,GACC,OAAO,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,CAmCtC;AAED,wBAAsB,kCAAkC,CAAC,MAAM,EAAE;IAChE,OAAO,CAAC,EAAE;QACT,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,OAAO,EAAE,KAAK,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;CACH,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CA4CtE"}
+{"version":3,"file":"service-client.d.ts","sourceRoot":"","sources":["../../src/memory/service-client.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA8YlE,wBAAgB,oCAAoC,IAAI,IAAI,CAE3D;AA0SD,wBAAsB,yBAAyB,CAC9C,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IACT,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB,GACC,OAAO,CAAC;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAAC,CAa5E;AAED,wBAAsB,2BAA2B,CAChD,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;IACT,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CACf,GACC,OAAO,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,CAmCtC;AAED,wBAAsB,kCAAkC,CAAC,MAAM,EAAE;IAChE,OAAO,CAAC,EAAE;QACT,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,OAAO,EAAE,KAAK,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;CACH,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CA4CtE"}

package/dist/memory/service-client.js

@@ -2,6 +2,7 @@ import { readFileSync } from "node:fs";
 import { request as httpsRequest, } from "node:https";
 import { EVALOPS_ACCESS_TOKEN_ENV_VARS, EVALOPS_ORGANIZATION_ID_ENV_VARS, } from "../evalops/env-aliases.js";
 import { getEnvValue, parsePositiveInt, resolveOrganizationId, resolvePlatformToken, resolveTeamId, } from "../platform/client.js";
+import { isRecord } from "../utils/json.js";
 import { createLogger } from "../utils/logger.js";
 import { sanitizeWithStaticMask } from "../utils/secret-redactor.js";
 import { MemoryClient, MemoryType } from "./platform-memory-client.js";
@@ -105,9 +106,6 @@ function parseServiceTokenExpiresAt(payload, ttlSeconds) {
     }
     return Date.now() + ttlSeconds * 1000;
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function parseServiceTokenResponseBody(value) {
     if (!isRecord(value)) {
         return {};

package/dist/memory/service-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"service-client.js","sourceRoot":"","sources":["../../src/memory/service-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAEN,OAAO,IAAI,YAAY,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,6BAA6B,EAC7B,gCAAgC,GAChC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAGzD,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAE9C,MAAM,aAAa,GAAG,SAAS,CAAC;AAChC,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AACzD,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAC1C,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AACxD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAC9C,MAAM,2BAA2B,GAAG;IACnC,eAAe;IACf,gBAAgB;CACP,CAAC;AACX,MAAM,wCAAwC,GAAG,GAAG,CAAC;AACrD,MAAM,4BAA4B,GAAG,MAAM,CAAC;AA6D5C,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAA8B,CAAC;AAEtE,SAAS,cAAc,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACxC,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CACjB,OAA2B,EAC3B,IAAwB;IAExB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;SAClD,GAAG,CAAC,YAAY,CAAC;SACjB,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,mBAAmB,CAC3B,GAAG,MAAiC;IAEpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB;IAC5B,OAAO,CACN,WAAW,CAAC,CAAC,yBAAyB,EAAE,kBAAkB,CAAC,CAAC;QAC5D,aAAa,CACb,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B;IACpC,OAAO,WAAW,CAAC;QAClB,4CAA4C;QAC5C,6BAA6B;KAC7B,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC;IAC3C,OAAO,gBAAgB,CACtB,WAAW,CAAC,CAAC,0CAA0C,CAAC,CAAC,EACzD,wCAAwC,CACxC,CAAC;AACH,CAAC;AAED,SAAS,qCAAqC;IAC7C,OAAO,WAAW,CAAC;QAClB,uCAAuC;QACvC,wBAAwB;KACxB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B;IACvC,MAAM,MAAM,GAAG,WAAW,CAAC;QAC1B,qCAAqC;QACrC,6BAA6B;KAC7B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC5B,uCAAuC;QACvC,+BAA+B;KAC/B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,WAAW,CAAC;QAC3B,sCAAsC;QACtC,8BAA8B;KAC9B,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,WAAW,CAAC;QAC9B,yCAAyC;QACzC,iCAAiC;KACjC,CAAC,CAAC;IAEH,OAAO;QACN,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrC,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC9B,MAAsC;IAEtC,OAAO,OAAO,CACb,MAAM,IAAI,MAAM,CAAC,WAAW,GAAG,4BAA4B,GAAG,IAAI,CAAC,GAAG,EAAE,CACxE,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAClC,OAAiC,EACjC,UAAkB;IAElB,MAAM,KAAK,GACV,OAAO,CAAC,UAAU;QAClB,OAAO,CAAC,SAAS;QACjB,OAAO,CAAC,MAAM,EAAE,UAAU;QAC1B,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,IAAI,KAAK,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC;QACf,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,6BAA6B,CACrC,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,OAAO;QACN,KAAK,EAAE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;QACvE,UAAU,EACT,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACpE,SAAS,EACR,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClE,MAAM,EAAE,MAAM;YACb,CAAC,CAAC;gBACA,UAAU,EACT,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;oBACpC,CAAC,CAAC,MAAM,CAAC,UAAU;oBACnB,CAAC,CAAC,SAAS;gBACb,SAAS,EACR,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aACpE;YACF,CAAC,CAAC,SAAS;KACZ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAyB;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAC9C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACvB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACtC,GAAW,EACX,cAAsB,EACtB,UAAkB;IAElB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3B,OAAO,EAAE,aAAa;YACtB,eAAe,EAAE,cAAc;YAC/B,MAAM,EAAE,2BAA2B;YACnC,WAAW,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,YAAY,GAAG,qCAAqC,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,YAAY,CAC3B,SAAS,EACT;YACC,GAAG,+BAA+B,EAAE;YACpC,OAAO,EAAE;gBACR,MAAM,EAAE,kBAAkB;gBAC1B,0BAA0B,EAAE,GAAG;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;gBACpD,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE;YACD,MAAM,EAAE,MAAM;SACd,EACD,KAAK,EAAE,QAAQ,EAAE,EAAE;YAClB,IAAI,CAAC;gBACJ,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACtD,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAChE,MAAM,CACL,IAAI,KAAK,CACR,qDAAqD,QAAQ,CAAC,UAAU,IAAI,SAAS,EAAE,CACvF,CACD,CAAC;oBACF,OAAO;gBACR,CAAC;gBACD,MAAM,MAAM,GAAG,6BAA6B,CAC3C,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CACxB,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC;oBACnE,OAAO;gBACR,CAAC;gBACD,uBAAuB,CAAC,GAAG,CAAC,cAAc,EAAE;oBAC3C,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,WAAW,EAAE,0BAA0B,CAAC,MAAM,EAAE,UAAU,CAAC;iBAC3D,CAAC,CAAC;gBACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CAAC,CAAC;YACf,CAAC;QACF,CAAC,CACD,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,CAAC,GAAG,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CACvC,cAAsB;IAEtB,MAAM,GAAG,GAAG,4BAA4B,EAAE,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO,MAAM,EAAE,KAAK,CAAC;IACtB,CAAC;IAED,MAAM,YAAY,GAAG,qCAAqC,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC5B,uCAAuC;QACvC,+BAA+B;KAC/B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,WAAW,CAAC;QAC3B,sCAAsC;QACtC,8BAA8B;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,OAAO,8BAA8B,CACpC,GAAG,EACH,cAAc,EACd,mCAAmC,EAAE,CACrC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACtC,cAAsB;IAEtB,MAAM,eAAe,GAAG,WAAW,CAAC;QACnC,6BAA6B;QAC7B,GAAG,6BAA6B;KAChC,CAAC,CAAC;IACH,IAAI,eAAe,EAAE,CAAC;QACrB,OAAO,eAAe,CAAC;IACxB,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,cAAc,CAAC,CAAC;QACrE,IAAI,YAAY,EAAE,CAAC;YAClB,OAAO,YAAY,CAAC;QACrB,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CACV,iFAAiF,EACjF,EAAE,KAAK,EAAE,CACT,CAAC;IACH,CAAC;IAED,OAAO,oBAAoB,CAAC,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,yBAAyB;IACvC,MAAM,OAAO,GAAG,WAAW,CAAC;QAC3B,qBAAqB;QACrB,4BAA4B;QAC5B,2BAA2B;QAC3B,0BAA0B;QAC1B,kBAAkB;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,cAAc,GAAG,qBAAqB,CAAC;QAC5C,gCAAgC;QAChC,GAAG,gCAAgC;KACnC,CAAC,CAAC;IACH,IAAI,CAAC,cAAc,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CACV,sFAAsF,CACtF,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,CAAC,IAAI,CACV,mFAAmF,CACnF,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO;QACN,OAAO,EAAE,oBAAoB,EAAE;QAC/B,MAAM,EAAE,IAAI,YAAY,CAAC;YACxB,OAAO;YACP,WAAW,EAAE,KAAK;YAClB,cAAc;SACd,CAAC;QACF,MAAM,EAAE,aAAa,CAAC;YACrB,wBAAwB;YACxB,yBAAyB;YACzB,6BAA6B;SAC7B,CAAC;KACF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oCAAoC;IACnD,uBAAuB,CAAC,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB,CAAC,OAI3B;IACA,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,OAAO;QACN,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC7B,KAAa,EACb,IAAwB,EACxB,WAAoB,EACpB,SAAkB;IAElB,OAAO,CACN,SAAS,CACR;QACC,UAAU;QACV,kBAAkB;QAClB,GAAG,gBAAgB,GAAG,cAAc,CAAC,KAAK,CAAC,EAAE;QAC7C,GAAG,CAAC,WAAW;YACd,CAAC,CAAC,CAAC,GAAG,uBAAuB,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACnE,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,kBAAkB,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,EACD,IAAI,CACJ,IAAI,EAAE,CACP,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC7B,KAAa,EACb,KAAwB,EACxB,OAEC;IAED,MAAM,UAAU,GAA4B;QAC3C;YACC,GAAG,EAAE,KAAK,CAAC,UAAU;gBACpB,CAAC,CAAC,QAAQ,KAAK,CAAC,UAAU,EAAE;gBAC5B,CAAC,CAAC,0BAA0B;YAC7B,KAAK,EAAE,2BAA2B,cAAc,CAAC,KAAK,CAAC,EAAE;YACzD,IAAI,EAAE,wBAAwB;YAC9B,QAAQ,EAAE;gBACT,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;gBAC5B,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D;SACD;KACD,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,SAAS,EAAE,CAAC;QACf,UAAU,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,sBAAsB,SAAS,EAAE;YACtC,KAAK,EAAE,mBAAmB,SAAS,EAAE;YACrC,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE;gBACT,MAAM,EAAE,SAAS;gBACjB,SAAS;gBACT,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;gBAC5B,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D;SACD,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAwB;IACrD,OAAO,IAAI;QACV,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC/D,EAAE,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC;SAC/B,IAAI,EAAE,CAAC;AACV,CAAC;AAED,SAAS,0BAA0B,CAClC,IAAwB;IAExB,OAAO,IAAI;QACV,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;QACtE,EAAE,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC;SACtC,IAAI,EAAE,CAAC;AACV,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAoB;IACnD,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgC;IAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;SAAM,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IACzB,CAAC;SAAM,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CAC1B,MAAoB,EACpB,KAAwB;IAExB,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SAC9B,GAAG,CAAC,YAAY,CAAC;SACjB,MAAM,CACN,CAAC,GAAG,EAAE,EAAE,CACP,GAAG,KAAK,UAAU;QAClB,GAAG,KAAK,kBAAkB;QAC1B,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACjC,CAAC,GAAG,CAAC,UAAU,CAAC,uBAAuB,CAAC;QACxC,CAAC,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,CACpC,CAAC;IAEH,OAAO;QACN,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ;QACpD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACxC,SAAS,EAAE,mBAAmB,CAC7B,KAAK,CAAC,SAAS,EACf,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,UAAU,CACjB;QACD,WAAW,EAAE,mBAAmB,CAC/B,KAAK,CAAC,WAAW,EACjB,0BAA0B,CAAC,MAAM,CAAC,IAAI,CAAC,CACvC;QACD,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,SAAsC,CAAC;QAC3E,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,SAAsC,CAAC;KAC3E,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACrB,KAA+B,EAC/B,SAAiB;IAEjB,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,6BAA6B,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,KAAK,UAAU,yBAAyB,CACvC,MAA0B,EAC1B,KAAwB;IAExB,MAAM,OAAO,GAAsB;QAClC,IAAI,EAAE,UAAU,CAAC,OAAO;QACxB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,YAAY,EAAE,UAAU;KACxB,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,wBAAwB,CAChC,OAAuB,EACvB,KAAa,EACb,OAAe;IAEf,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAClE,OAAO,OAAO,CAAC,IAAI,CAClB,CAAC,MAAM,EAAE,EAAE,CACV,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,eAAe;QACrD,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,iBAAiB,CACrE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mCAAmC,CACjD,MAA0B,EAC1B,KAAwB,EACxB,KAAa,EACb,OAAe,EACf,OAIC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,qBAAqB,CACrC,KAAK,EACL,OAAO,EAAE,IAAI,EACb,KAAK,CAAC,WAAW,EACjB,OAAO,EAAE,SAAS,CAClB,CAAC;IACF,MAAM,eAAe,GACpB,OAAO,EAAE,eAAe;QACxB,CAAC,MAAM,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,wBAAwB,CACxC,eAAe,EACf,KAAK,EACL,WAAW,CACX,CAAC;IAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,OAAO,GAAuB;YACnC,IAAI,EAAE,UAAU,CAAC,OAAO;YACxB,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,QAAQ;YACd,YAAY,EAAE,UAAU;YACxB,gBAAgB,EAAE,qBAAqB,CAAC,KAAK,EAAE,KAAK,EAAE;gBACrD,SAAS,EAAE,OAAO,EAAE,SAAS;aAC7B,CAAC;SACF,CAAC;QACF,MAAM,OAAO,GAAG,aAAa,CAC5B,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAC3C,cAAc,CACd,CAAC;QACF,OAAO;YACN,KAAK,EAAE,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC;YACzC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,KAAK;SACd,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,UAAU,IAAI,EAAE,CAAC;IACxC,MAAM,iBAAiB,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,WAAW,GAChB,cAAc,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM;QAClD,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;IACvE,IAAI,CAAC,WAAW,IAAI,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,WAAW,EAAE,CAAC;QACxE,OAAO;YACN,KAAK,EAAE,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC;YAC1C,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,KAAK;SACd,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAC5B,CACC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1B,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,OAAO,EAAE,WAAW;QACpB,YAAY,EAAE,UAAU;QACxB,gBAAgB,EAAE,qBAAqB,CAAC,KAAK,EAAE,KAAK,EAAE;YACrD,SAAS,EAAE,OAAO,EAAE,SAAS;SAC7B,CAAC;QACF,IAAI,EAAE,UAAU,IAAI,EAAE;KACtB,CAAC,CACF,CAAC,MAAM,EACR,eAAe,CACf,CAAC;IACF,OAAO;QACN,KAAK,EAAE,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC;QACzC,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,IAAI;KACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,KAAa,EACb,OAAe,EACf,OAMC;IAED,MAAM,MAAM,GAAG,MAAM,yBAAyB,EAAE,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,mCAAmC,CACzC,MAAM,EACN,kBAAkB,CAAC,OAAO,CAAC,EAC3B,KAAK,EACL,OAAO,EACP,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CACtD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,KAAa,EACb,OAGC;IAED,MAAM,MAAM,GAAG,MAAM,yBAAyB,EAAE,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC;QACJ,MAAM,OAAO,GAAwB;YACpC,KAAK;YACL,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE;YAC3B,IAAI,EAAE,UAAU,CAAC,OAAO;YACxB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,UAAU;SACxB,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;aAC9B,MAAM,CAAC,sBAAsB,CAAC;aAC9B,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjB,KAAK,EAAE,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC;YACxC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;YAChC,SAAS,EAAE,SAAkB;SAC7B,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;YAChE,KAAK,EAAE,sBAAsB,CAC5B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACtD;YACD,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,MAYxD;IACA,MAAM,MAAM,GAAG,MAAM,yBAAyB,EAAE,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAEvE,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,wBAAwB,CACxC,eAAe,EACf,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACb,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,SAAS;QACV,CAAC;QACD,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,CAAC;IACd,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,mCAAmC,CACvD,MAAM,EACN,KAAK,EACL,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,OAAO,EACd;YACC,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACjE,eAAe;SACf,CACD,CAAC;QACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,KAAK,IAAI,CAAC,CAAC;QACZ,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,CAAC;QACd,CAAC;IACF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC","sourcesContent":["import { readFileSync } from \"node:fs\";\nimport type { IncomingMessage } from \"node:http\";\nimport {\n\ttype RequestOptions as HttpsRequestOptions,\n\trequest as httpsRequest,\n} from \"node:https\";\nimport {\n\tEVALOPS_ACCESS_TOKEN_ENV_VARS,\n\tEVALOPS_ORGANIZATION_ID_ENV_VARS,\n} from \"../evalops/env-aliases.js\";\nimport {\n\tgetEnvValue,\n\tparsePositiveInt,\n\tresolveOrganizationId,\n\tresolvePlatformToken,\n\tresolveTeamId,\n} from \"../platform/client.js\";\nimport { createLogger } from \"../utils/logger.js\";\nimport { sanitizeWithStaticMask } from \"../utils/secret-redactor.js\";\nimport { MemoryClient, MemoryType } from \"./platform-memory-client.js\";\nimport { getMemoryProjectScope } from \"./team-memory.js\";\nimport type { MemoryEntry, MemorySearchResult } from \"./types.js\";\n\nconst logger = createLogger(\"memory:service\");\n\nconst MAESTRO_AGENT = \"maestro\";\nconst DURABLE_MEMORY_TAG = \"maestro-kind:durable-memory\";\nconst SOURCE_TAG = \"source:maestro\";\nconst TOPIC_TAG_PREFIX = \"maestro-topic:\";\nconst PROJECT_NAME_TAG_PREFIX = \"maestro-project-name:\";\nconst SESSION_TAG_PREFIX = \"maestro-session:\";\nconst MEMORY_SERVICE_TOKEN_SCOPES = [\n\t\"memories:read\",\n\t\"memories:write\",\n] as const;\nconst DEFAULT_MEMORY_SERVICE_TOKEN_TTL_SECONDS = 300;\nconst SERVICE_TOKEN_EXPIRY_SKEW_MS = 30_000;\n\ntype RemoteMemoryConfig = {\n\tagentId: string;\n\tclient: MemoryClient;\n\tteamId?: string;\n};\n\ntype RemoteMemoryScope = {\n\tprojectId?: string;\n\tprojectName?: string;\n\trepository?: string;\n};\n\ntype ClientMemory = Awaited<\n\tReturnType<MemoryClient[\"list\"]>\n>[\"memories\"][number];\n\ntype TimestampLike = {\n\tnanos?: number;\n\tseconds?: bigint | number | string;\n};\n\ntype MemorySourceReference = {\n\turi: string;\n\ttitle: string;\n\ttype: string;\n\tmetadata?: Record<string, string>;\n};\n\ntype RemoteStoreRequest = Parameters<MemoryClient[\"store\"]>[0] & {\n\tagentId?: string;\n\treviewStatus?: string;\n\tsourceReferences?: MemorySourceReference[];\n};\n\ntype RemoteListRequest = Parameters<MemoryClient[\"list\"]>[0] & {\n\tagentId?: string;\n\treviewStatus?: string;\n};\n\ntype RemoteRecallRequest = Parameters<MemoryClient[\"recall\"]>[0] & {\n\tagentId?: string;\n\treviewStatus?: string;\n};\n\ntype CachedServiceToken = {\n\texpiresAtMs: number;\n\ttoken: string;\n};\n\ntype ServiceTokenResponseBody = {\n\tclaims?: {\n\t\texpires_at?: string;\n\t\texpiresAt?: string;\n\t};\n\texpires_at?: string;\n\texpiresAt?: string;\n\ttoken?: string;\n};\n\nconst memoryServiceTokenCache = new Map<string, CachedServiceToken>();\n\nfunction normalizeTopic(topic: string): string {\n\treturn topic.toLowerCase().trim();\n}\n\nfunction normalizeContent(content: string): string {\n\treturn content.replace(/\\s+/g, \" \").trim();\n}\n\nfunction normalizeTag(tag: string): string {\n\treturn tag.trim().toLowerCase();\n}\n\nfunction mergeTags(\n\tcurrent?: readonly string[],\n\tnext?: readonly string[],\n): string[] | undefined {\n\tconst values = [...(current ?? []), ...(next ?? [])]\n\t\t.map(normalizeTag)\n\t\t.filter(Boolean);\n\tif (values.length === 0) {\n\t\treturn undefined;\n\t}\n\treturn Array.from(new Set(values)).sort();\n}\n\nfunction firstNonEmptyString(\n\t...values: Array<string | undefined>\n): string | undefined {\n\tfor (const value of values) {\n\t\tif (typeof value === \"string\" && value.trim().length > 0) {\n\t\t\treturn value.trim();\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction resolveMemoryAgentId(): string {\n\treturn (\n\t\tgetEnvValue([\"MAESTRO_MEMORY_AGENT_ID\", \"MAESTRO_AGENT_ID\"]) ??\n\t\tMAESTRO_AGENT\n\t);\n}\n\nfunction resolveMemoryServiceTokenUrl(): string | undefined {\n\treturn getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_SERVICE_TOKENS_URL\",\n\t\t\"IDENTITY_SERVICE_TOKENS_URL\",\n\t]);\n}\n\nfunction resolveMemoryServiceTokenTtlSeconds(): number {\n\treturn parsePositiveInt(\n\t\tgetEnvValue([\"MAESTRO_MEMORY_SERVICE_TOKEN_TTL_SECONDS\"]),\n\t\tDEFAULT_MEMORY_SERVICE_TOKEN_TTL_SECONDS,\n\t);\n}\n\nfunction resolveMemoryServiceTokenBootstrapKey(): string | undefined {\n\treturn getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_BOOTSTRAP_KEY\",\n\t\t\"IDENTITY_BOOTSTRAP_KEY\",\n\t]);\n}\n\nfunction resolveMemoryIdentityTlsOptions(): HttpsRequestOptions {\n\tconst caFile = getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_TLS_CA_FILE\",\n\t\t\"IDENTITY_CLIENT_TLS_CA_FILE\",\n\t]);\n\tconst certFile = getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_TLS_CERT_FILE\",\n\t\t\"IDENTITY_CLIENT_TLS_CERT_FILE\",\n\t]);\n\tconst keyFile = getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_TLS_KEY_FILE\",\n\t\t\"IDENTITY_CLIENT_TLS_KEY_FILE\",\n\t]);\n\tconst servername = getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_TLS_SERVER_NAME\",\n\t\t\"IDENTITY_CLIENT_TLS_SERVER_NAME\",\n\t]);\n\n\treturn {\n\t\t...(caFile ? { ca: readFileSync(caFile, \"utf8\") } : {}),\n\t\t...(certFile ? { cert: readFileSync(certFile, \"utf8\") } : {}),\n\t\t...(keyFile ? { key: readFileSync(keyFile, \"utf8\") } : {}),\n\t\t...(servername ? { servername } : {}),\n\t};\n}\n\nfunction serviceTokenCacheValid(\n\tcached: CachedServiceToken | undefined,\n): boolean {\n\treturn Boolean(\n\t\tcached && cached.expiresAtMs - SERVICE_TOKEN_EXPIRY_SKEW_MS > Date.now(),\n\t);\n}\n\nfunction parseServiceTokenExpiresAt(\n\tpayload: ServiceTokenResponseBody,\n\tttlSeconds: number,\n): number {\n\tconst value =\n\t\tpayload.expires_at ??\n\t\tpayload.expiresAt ??\n\t\tpayload.claims?.expires_at ??\n\t\tpayload.claims?.expiresAt;\n\tif (value) {\n\t\tconst parsed = Date.parse(value);\n\t\tif (Number.isFinite(parsed)) {\n\t\t\treturn parsed;\n\t\t}\n\t}\n\treturn Date.now() + ttlSeconds * 1000;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction parseServiceTokenResponseBody(\n\tvalue: unknown,\n): ServiceTokenResponseBody {\n\tif (!isRecord(value)) {\n\t\treturn {};\n\t}\n\tconst claims = isRecord(value.claims) ? value.claims : undefined;\n\treturn {\n\t\ttoken: typeof value.token === \"string\" ? value.token.trim() : undefined,\n\t\texpires_at:\n\t\t\ttypeof value.expires_at === \"string\" ? value.expires_at : undefined,\n\t\texpiresAt:\n\t\t\ttypeof value.expiresAt === \"string\" ? value.expiresAt : undefined,\n\t\tclaims: claims\n\t\t\t? {\n\t\t\t\t\texpires_at:\n\t\t\t\t\t\ttypeof claims.expires_at === \"string\"\n\t\t\t\t\t\t\t? claims.expires_at\n\t\t\t\t\t\t\t: undefined,\n\t\t\t\t\texpiresAt:\n\t\t\t\t\t\ttypeof claims.expiresAt === \"string\" ? claims.expiresAt : undefined,\n\t\t\t\t}\n\t\t\t: undefined,\n\t};\n}\n\nfunction readResponseBody(response: IncomingMessage): Promise<string> {\n\treturn new Promise((resolve, reject) => {\n\t\tconst chunks: Buffer[] = [];\n\t\tresponse.on(\"data\", (chunk: Buffer | string) => {\n\t\t\tchunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));\n\t\t});\n\t\tresponse.on(\"end\", () => {\n\t\t\tresolve(Buffer.concat(chunks).toString(\"utf8\"));\n\t\t});\n\t\tresponse.on(\"error\", reject);\n\t});\n}\n\nfunction issueMemoryServiceTokenRequest(\n\turl: string,\n\torganizationId: string,\n\tttlSeconds: number,\n): Promise<string> {\n\treturn new Promise((resolve, reject) => {\n\t\tconst body = JSON.stringify({\n\t\t\tservice: MAESTRO_AGENT,\n\t\t\torganization_id: organizationId,\n\t\t\tscopes: MEMORY_SERVICE_TOKEN_SCOPES,\n\t\t\tttl_seconds: ttlSeconds,\n\t\t});\n\t\tconst parsedUrl = new URL(url);\n\t\tconst bootstrapKey = resolveMemoryServiceTokenBootstrapKey();\n\t\tconst request = httpsRequest(\n\t\t\tparsedUrl,\n\t\t\t{\n\t\t\t\t...resolveMemoryIdentityTlsOptions(),\n\t\t\t\theaders: {\n\t\t\t\t\tAccept: \"application/json\",\n\t\t\t\t\t\"Connect-Protocol-Version\": \"1\",\n\t\t\t\t\t\"Content-Length\": Buffer.byteLength(body).toString(),\n\t\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\t...(bootstrapKey ? { \"X-Identity-Bootstrap-Key\": bootstrapKey } : {}),\n\t\t\t\t},\n\t\t\t\tmethod: \"POST\",\n\t\t\t},\n\t\t\tasync (response) => {\n\t\t\t\ttry {\n\t\t\t\t\tconst responseBody = await readResponseBody(response);\n\t\t\t\t\tif (response.statusCode !== 200 && response.statusCode !== 201) {\n\t\t\t\t\t\treject(\n\t\t\t\t\t\t\tnew Error(\n\t\t\t\t\t\t\t\t`identity service token request failed with status ${response.statusCode ?? \"unknown\"}`,\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t);\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tconst parsed = parseServiceTokenResponseBody(\n\t\t\t\t\t\tJSON.parse(responseBody),\n\t\t\t\t\t);\n\t\t\t\t\tif (!parsed.token) {\n\t\t\t\t\t\treject(new Error(\"identity service token response missing token\"));\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tmemoryServiceTokenCache.set(organizationId, {\n\t\t\t\t\t\ttoken: parsed.token,\n\t\t\t\t\t\texpiresAtMs: parseServiceTokenExpiresAt(parsed, ttlSeconds),\n\t\t\t\t\t});\n\t\t\t\t\tresolve(parsed.token);\n\t\t\t\t} catch (error) {\n\t\t\t\t\treject(error);\n\t\t\t\t}\n\t\t\t},\n\t\t);\n\t\trequest.on(\"error\", reject);\n\t\trequest.write(body);\n\t\trequest.end();\n\t});\n}\n\nasync function resolveMemoryServiceToken(\n\torganizationId: string,\n): Promise<string | undefined> {\n\tconst url = resolveMemoryServiceTokenUrl();\n\tif (!url) {\n\t\treturn undefined;\n\t}\n\tconst cached = memoryServiceTokenCache.get(organizationId);\n\tif (serviceTokenCacheValid(cached)) {\n\t\treturn cached?.token;\n\t}\n\n\tconst bootstrapKey = resolveMemoryServiceTokenBootstrapKey();\n\tconst certFile = getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_TLS_CERT_FILE\",\n\t\t\"IDENTITY_CLIENT_TLS_CERT_FILE\",\n\t]);\n\tconst keyFile = getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_TLS_KEY_FILE\",\n\t\t\"IDENTITY_CLIENT_TLS_KEY_FILE\",\n\t]);\n\tif (!bootstrapKey && (!certFile || !keyFile)) {\n\t\treturn undefined;\n\t}\n\n\treturn issueMemoryServiceTokenRequest(\n\t\turl,\n\t\torganizationId,\n\t\tresolveMemoryServiceTokenTtlSeconds(),\n\t);\n}\n\nasync function resolveMemoryAccessToken(\n\torganizationId: string,\n): Promise<string | undefined> {\n\tconst configuredToken = getEnvValue([\n\t\t\"MAESTRO_MEMORY_ACCESS_TOKEN\",\n\t\t...EVALOPS_ACCESS_TOKEN_ENV_VARS,\n\t]);\n\tif (configuredToken) {\n\t\treturn configuredToken;\n\t}\n\n\ttry {\n\t\tconst serviceToken = await resolveMemoryServiceToken(organizationId);\n\t\tif (serviceToken) {\n\t\t\treturn serviceToken;\n\t\t}\n\t} catch (error) {\n\t\tlogger.warn(\n\t\t\t\"Failed to issue identity service token for remote memory; trying OAuth fallback\",\n\t\t\t{ error },\n\t\t);\n\t}\n\n\treturn resolvePlatformToken([]);\n}\n\nasync function resolveRemoteMemoryConfig(): Promise<RemoteMemoryConfig | null> {\n\tconst baseUrl = getEnvValue([\n\t\t\"MAESTRO_MEMORY_BASE\",\n\t\t\"MAESTRO_MEMORY_SERVICE_URL\",\n\t\t\"MAESTRO_PLATFORM_BASE_URL\",\n\t\t\"MAESTRO_EVALOPS_BASE_URL\",\n\t\t\"EVALOPS_BASE_URL\",\n\t]);\n\tif (!baseUrl) {\n\t\treturn null;\n\t}\n\n\tconst organizationId = resolveOrganizationId([\n\t\t\"MAESTRO_MEMORY_ORGANIZATION_ID\",\n\t\t...EVALOPS_ORGANIZATION_ID_ENV_VARS,\n\t]);\n\tif (!organizationId) {\n\t\tlogger.warn(\n\t\t\t\"Remote memory configured without organization id; falling back to local memory store\",\n\t\t);\n\t\treturn null;\n\t}\n\n\tconst token = await resolveMemoryAccessToken(organizationId);\n\tif (!token) {\n\t\tlogger.warn(\n\t\t\t\"Remote memory configured without access token; falling back to local memory store\",\n\t\t);\n\t\treturn null;\n\t}\n\n\treturn {\n\t\tagentId: resolveMemoryAgentId(),\n\t\tclient: new MemoryClient({\n\t\t\tbaseUrl,\n\t\t\taccessToken: token,\n\t\t\torganizationId,\n\t\t}),\n\t\tteamId: resolveTeamId([\n\t\t\t\"MAESTRO_MEMORY_TEAM_ID\",\n\t\t\t\"MAESTRO_EVALOPS_TEAM_ID\",\n\t\t\t\"MAESTRO_LLM_GATEWAY_TEAM_ID\",\n\t\t]),\n\t};\n}\n\nexport function resetMemoryServiceTokenCacheForTests(): void {\n\tmemoryServiceTokenCache.clear();\n}\n\nfunction resolveRemoteScope(options?: {\n\tcwd?: string;\n\tprojectId?: string;\n\tprojectName?: string;\n}): RemoteMemoryScope {\n\tif (options?.projectId !== undefined) {\n\t\treturn {\n\t\t\tprojectId: options.projectId,\n\t\t\tprojectName: options.projectName,\n\t\t\trepository: options.projectId,\n\t\t};\n\t}\n\n\tif (!options?.cwd) {\n\t\treturn {};\n\t}\n\n\tconst scope = getMemoryProjectScope(options.cwd);\n\tif (!scope) {\n\t\treturn {};\n\t}\n\n\treturn {\n\t\tprojectId: scope.projectId,\n\t\tprojectName: scope.projectName,\n\t\trepository: scope.projectId,\n\t};\n}\n\nfunction buildRemoteMemoryTags(\n\ttopic: string,\n\ttags?: readonly string[],\n\tprojectName?: string,\n\tsessionId?: string,\n): string[] {\n\treturn (\n\t\tmergeTags(\n\t\t\t[\n\t\t\t\tSOURCE_TAG,\n\t\t\t\tDURABLE_MEMORY_TAG,\n\t\t\t\t`${TOPIC_TAG_PREFIX}${normalizeTopic(topic)}`,\n\t\t\t\t...(projectName\n\t\t\t\t\t? [`${PROJECT_NAME_TAG_PREFIX}${projectName.trim().toLowerCase()}`]\n\t\t\t\t\t: []),\n\t\t\t\t...(sessionId ? [`${SESSION_TAG_PREFIX}${sessionId.trim()}`] : []),\n\t\t\t],\n\t\t\ttags,\n\t\t) ?? []\n\t);\n}\n\nfunction buildSourceReferences(\n\ttopic: string,\n\tscope: RemoteMemoryScope,\n\toptions?: {\n\t\tsessionId?: string;\n\t},\n): MemorySourceReference[] {\n\tconst references: MemorySourceReference[] = [\n\t\t{\n\t\t\turi: scope.repository\n\t\t\t\t? `repo:${scope.repository}`\n\t\t\t\t: \"maestro://durable-memory\",\n\t\t\ttitle: `Maestro durable memory: ${normalizeTopic(topic)}`,\n\t\t\ttype: \"maestro-durable-memory\",\n\t\t\tmetadata: {\n\t\t\t\tsource: \"maestro\",\n\t\t\t\ttopic: normalizeTopic(topic),\n\t\t\t\t...(scope.projectId ? { projectId: scope.projectId } : {}),\n\t\t\t\t...(scope.projectName ? { projectName: scope.projectName } : {}),\n\t\t\t\t...(scope.repository ? { repository: scope.repository } : {}),\n\t\t\t},\n\t\t},\n\t];\n\tconst sessionId = options?.sessionId?.trim();\n\tif (sessionId) {\n\t\treferences.push({\n\t\t\turi: `maestro://sessions/${sessionId}`,\n\t\t\ttitle: `Maestro session ${sessionId}`,\n\t\t\ttype: \"maestro-session\",\n\t\t\tmetadata: {\n\t\t\t\tsource: \"maestro\",\n\t\t\t\tsessionId,\n\t\t\t\ttopic: normalizeTopic(topic),\n\t\t\t\t...(scope.projectId ? { projectId: scope.projectId } : {}),\n\t\t\t\t...(scope.projectName ? { projectName: scope.projectName } : {}),\n\t\t\t\t...(scope.repository ? { repository: scope.repository } : {}),\n\t\t\t},\n\t\t});\n\t}\n\treturn references;\n}\n\nfunction extractTopicFromTags(tags?: readonly string[]): string | undefined {\n\treturn tags\n\t\t?.find((tag) => normalizeTag(tag).startsWith(TOPIC_TAG_PREFIX))\n\t\t?.slice(TOPIC_TAG_PREFIX.length)\n\t\t.trim();\n}\n\nfunction extractProjectNameFromTags(\n\ttags?: readonly string[],\n): string | undefined {\n\treturn tags\n\t\t?.find((tag) => normalizeTag(tag).startsWith(PROJECT_NAME_TAG_PREFIX))\n\t\t?.slice(PROJECT_NAME_TAG_PREFIX.length)\n\t\t.trim();\n}\n\nfunction isManagedDurableMemory(record: ClientMemory): boolean {\n\treturn (record.tags ?? []).map(normalizeTag).includes(DURABLE_MEMORY_TAG);\n}\n\nfunction timestampToMillis(value: TimestampLike | undefined): number {\n\tif (!value) {\n\t\treturn Date.now();\n\t}\n\n\tlet seconds = 0;\n\tif (typeof value.seconds === \"bigint\") {\n\t\tif (value.seconds > BigInt(Number.MAX_SAFE_INTEGER)) {\n\t\t\treturn Date.now();\n\t\t}\n\t\tseconds = Number(value.seconds);\n\t} else if (typeof value.seconds === \"number\") {\n\t\tseconds = value.seconds;\n\t} else if (typeof value.seconds === \"string\") {\n\t\tseconds = Number.parseInt(value.seconds, 10);\n\t}\n\n\tconst nanos = typeof value.nanos === \"number\" ? value.nanos : 0;\n\tconst millis = seconds * 1000 + Math.floor(nanos / 1_000_000);\n\treturn Number.isFinite(millis) && millis > 0 ? millis : Date.now();\n}\n\nfunction toLocalMemoryEntry(\n\trecord: ClientMemory,\n\tscope: RemoteMemoryScope,\n): MemoryEntry {\n\tconst tags = (record.tags ?? [])\n\t\t.map(normalizeTag)\n\t\t.filter(\n\t\t\t(tag) =>\n\t\t\t\ttag !== SOURCE_TAG &&\n\t\t\t\ttag !== DURABLE_MEMORY_TAG &&\n\t\t\t\t!tag.startsWith(TOPIC_TAG_PREFIX) &&\n\t\t\t\t!tag.startsWith(PROJECT_NAME_TAG_PREFIX) &&\n\t\t\t\t!tag.startsWith(SESSION_TAG_PREFIX),\n\t\t);\n\n\treturn {\n\t\tid: record.id,\n\t\ttopic: extractTopicFromTags(record.tags) ?? \"memory\",\n\t\tcontent: record.content,\n\t\ttags: tags.length > 0 ? tags : undefined,\n\t\tprojectId: firstNonEmptyString(\n\t\t\tscope.projectId,\n\t\t\trecord.projectId,\n\t\t\trecord.repository,\n\t\t),\n\t\tprojectName: firstNonEmptyString(\n\t\t\tscope.projectName,\n\t\t\textractProjectNameFromTags(record.tags),\n\t\t),\n\t\tcreatedAt: timestampToMillis(record.createdAt as TimestampLike | undefined),\n\t\tupdatedAt: timestampToMillis(record.updatedAt as TimestampLike | undefined),\n\t};\n}\n\nfunction requireMemory(\n\tvalue: ClientMemory | undefined,\n\toperation: string,\n): ClientMemory {\n\tif (!value) {\n\t\tthrow new Error(`${operation} returned no memory payload`);\n\t}\n\treturn value;\n}\n\nasync function listRemoteRecordsForScope(\n\tconfig: RemoteMemoryConfig,\n\tscope: RemoteMemoryScope,\n): Promise<ClientMemory[]> {\n\tconst request: RemoteListRequest = {\n\t\ttype: MemoryType.PROJECT,\n\t\tteamId: config.teamId,\n\t\trepository: scope.repository,\n\t\tagent: MAESTRO_AGENT,\n\t\tagentId: config.agentId,\n\t\treviewStatus: \"approved\",\n\t};\n\tconst response = await config.client.list(request);\n\treturn (response.memories ?? []).filter(isManagedDurableMemory);\n}\n\nfunction findMatchingRemoteRecord(\n\trecords: ClientMemory[],\n\ttopic: string,\n\tcontent: string,\n): ClientMemory | undefined {\n\tconst normalizedTopic = normalizeTopic(topic);\n\tconst normalizedContent = normalizeContent(content).toLowerCase();\n\treturn records.find(\n\t\t(record) =>\n\t\t\textractTopicFromTags(record.tags) === normalizedTopic &&\n\t\t\tnormalizeContent(record.content).toLowerCase() === normalizedContent,\n\t);\n}\n\nasync function upsertRemoteDurableMemoryWithConfig(\n\tconfig: RemoteMemoryConfig,\n\tscope: RemoteMemoryScope,\n\ttopic: string,\n\tcontent: string,\n\toptions?: {\n\t\texistingRecords?: ClientMemory[];\n\t\tsessionId?: string;\n\t\ttags?: string[];\n\t},\n): Promise<{ entry: MemoryEntry; created: boolean; updated: boolean }> {\n\tconst nextContent = normalizeContent(content);\n\tconst nextTags = buildRemoteMemoryTags(\n\t\ttopic,\n\t\toptions?.tags,\n\t\tscope.projectName,\n\t\toptions?.sessionId,\n\t);\n\tconst existingRecords =\n\t\toptions?.existingRecords ??\n\t\t(await listRemoteRecordsForScope(config, scope));\n\tconst existing = findMatchingRemoteRecord(\n\t\texistingRecords,\n\t\ttopic,\n\t\tnextContent,\n\t);\n\n\tif (!existing) {\n\t\tconst request: RemoteStoreRequest = {\n\t\t\ttype: MemoryType.PROJECT,\n\t\t\tcontent: nextContent,\n\t\t\tteamId: config.teamId,\n\t\t\trepository: scope.repository,\n\t\t\tagent: MAESTRO_AGENT,\n\t\t\tagentId: config.agentId,\n\t\t\ttags: nextTags,\n\t\t\treviewStatus: \"approved\",\n\t\t\tsourceReferences: buildSourceReferences(topic, scope, {\n\t\t\t\tsessionId: options?.sessionId,\n\t\t\t}),\n\t\t};\n\t\tconst created = requireMemory(\n\t\t\t(await config.client.store(request)).memory,\n\t\t\t\"store memory\",\n\t\t);\n\t\treturn {\n\t\t\tentry: toLocalMemoryEntry(created, scope),\n\t\t\tcreated: true,\n\t\t\tupdated: false,\n\t\t};\n\t}\n\n\tconst mergedTags = mergeTags(existing.tags, nextTags);\n\tconst nextTagsStable = mergedTags ?? [];\n\tconst currentTagsStable = mergeTags(existing.tags) ?? [];\n\tconst tagsChanged =\n\t\tnextTagsStable.length !== currentTagsStable.length ||\n\t\tnextTagsStable.some((tag, index) => currentTagsStable[index] !== tag);\n\tif (!tagsChanged && normalizeContent(existing.content) === nextContent) {\n\t\treturn {\n\t\t\tentry: toLocalMemoryEntry(existing, scope),\n\t\t\tcreated: false,\n\t\t\tupdated: false,\n\t\t};\n\t}\n\n\tconst updated = requireMemory(\n\t\t(\n\t\t\tawait config.client.update({\n\t\t\t\tid: existing.id,\n\t\t\t\tcontent: nextContent,\n\t\t\t\treviewStatus: \"approved\",\n\t\t\t\tsourceReferences: buildSourceReferences(topic, scope, {\n\t\t\t\t\tsessionId: options?.sessionId,\n\t\t\t\t}),\n\t\t\t\ttags: mergedTags ?? [],\n\t\t\t})\n\t\t).memory,\n\t\t\"update memory\",\n\t);\n\treturn {\n\t\tentry: toLocalMemoryEntry(updated, scope),\n\t\tcreated: false,\n\t\tupdated: true,\n\t};\n}\n\nexport async function upsertRemoteDurableMemory(\n\ttopic: string,\n\tcontent: string,\n\toptions?: {\n\t\tcwd?: string;\n\t\tprojectId?: string;\n\t\tprojectName?: string;\n\t\tsessionId?: string;\n\t\ttags?: string[];\n\t},\n): Promise<{ entry: MemoryEntry; created: boolean; updated: boolean } | null> {\n\tconst config = await resolveRemoteMemoryConfig();\n\tif (!config) {\n\t\treturn null;\n\t}\n\n\treturn upsertRemoteDurableMemoryWithConfig(\n\t\tconfig,\n\t\tresolveRemoteScope(options),\n\t\ttopic,\n\t\tcontent,\n\t\t{ sessionId: options?.sessionId, tags: options?.tags },\n\t);\n}\n\nexport async function recallRemoteDurableMemories(\n\tquery: string,\n\toptions?: {\n\t\tcwd?: string;\n\t\tlimit?: number;\n\t},\n): Promise<MemorySearchResult[] | null> {\n\tconst config = await resolveRemoteMemoryConfig();\n\tif (!config) {\n\t\treturn null;\n\t}\n\n\tconst scope = resolveRemoteScope(options);\n\ttry {\n\t\tconst request: RemoteRecallRequest = {\n\t\t\tquery,\n\t\t\tlimit: options?.limit ?? 10,\n\t\t\ttype: MemoryType.PROJECT,\n\t\t\tteamId: config.teamId,\n\t\t\trepository: scope.repository,\n\t\t\tagent: MAESTRO_AGENT,\n\t\t\tagentId: config.agentId,\n\t\t\treviewStatus: \"approved\",\n\t\t};\n\t\tconst response = await config.client.recall(request);\n\t\treturn (response.memories ?? [])\n\t\t\t.filter(isManagedDurableMemory)\n\t\t\t.map((memory) => ({\n\t\t\t\tentry: toLocalMemoryEntry(memory, scope),\n\t\t\t\tscore: Number(memory.score ?? 0),\n\t\t\t\tmatchedOn: \"content\" as const,\n\t\t\t}));\n\t} catch (error) {\n\t\tlogger.warn(\"Remote memory recall failed; using local fallback\", {\n\t\t\terror: sanitizeWithStaticMask(\n\t\t\t\terror instanceof Error ? error.message : String(error),\n\t\t\t),\n\t\t\tprojectId: scope.projectId,\n\t\t});\n\t\treturn null;\n\t}\n}\n\nexport async function applyRemoteAutoMemoryConsolidation(params: {\n\toptions?: {\n\t\tcwd?: string;\n\t\tprojectId?: string;\n\t\tprojectName?: string;\n\t};\n\tremoveEntries: MemoryEntry[];\n\tupserts: Array<{\n\t\tcontent: string;\n\t\ttags?: string[];\n\t\ttopic: string;\n\t}>;\n}): Promise<{ removed: number; added: number; updated: number } | null> {\n\tconst config = await resolveRemoteMemoryConfig();\n\tif (!config) {\n\t\treturn null;\n\t}\n\n\tconst scope = resolveRemoteScope(params.options);\n\tconst existingRecords = await listRemoteRecordsForScope(config, scope);\n\n\tlet removed = 0;\n\tfor (const entry of params.removeEntries) {\n\t\tconst existing = findMatchingRemoteRecord(\n\t\t\texistingRecords,\n\t\t\tentry.topic,\n\t\t\tentry.content,\n\t\t);\n\t\tif (!existing) {\n\t\t\tcontinue;\n\t\t}\n\t\tawait config.client.delete({ id: existing.id });\n\t\tremoved += 1;\n\t}\n\n\tlet added = 0;\n\tlet updated = 0;\n\tfor (const upsert of params.upserts) {\n\t\tconst result = await upsertRemoteDurableMemoryWithConfig(\n\t\t\tconfig,\n\t\t\tscope,\n\t\t\tupsert.topic,\n\t\t\tupsert.content,\n\t\t\t{\n\t\t\t\ttags: [\"auto\", \"durable\", \"consolidated\", ...(upsert.tags ?? [])],\n\t\t\t\texistingRecords,\n\t\t\t},\n\t\t);\n\t\tif (result.created) {\n\t\t\tadded += 1;\n\t\t} else if (result.updated) {\n\t\t\tupdated += 1;\n\t\t}\n\t}\n\n\treturn { removed, added, updated };\n}\n"]}
+{"version":3,"file":"service-client.js","sourceRoot":"","sources":["../../src/memory/service-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAEN,OAAO,IAAI,YAAY,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,6BAA6B,EAC7B,gCAAgC,GAChC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAGzD,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAE9C,MAAM,aAAa,GAAG,SAAS,CAAC;AAChC,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AACzD,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAC1C,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AACxD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAC9C,MAAM,2BAA2B,GAAG;IACnC,eAAe;IACf,gBAAgB;CACP,CAAC;AACX,MAAM,wCAAwC,GAAG,GAAG,CAAC;AACrD,MAAM,4BAA4B,GAAG,MAAM,CAAC;AA6D5C,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAA8B,CAAC;AAEtE,SAAS,cAAc,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACxC,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CACjB,OAA2B,EAC3B,IAAwB;IAExB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;SAClD,GAAG,CAAC,YAAY,CAAC;SACjB,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,mBAAmB,CAC3B,GAAG,MAAiC;IAEpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB;IAC5B,OAAO,CACN,WAAW,CAAC,CAAC,yBAAyB,EAAE,kBAAkB,CAAC,CAAC;QAC5D,aAAa,CACb,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B;IACpC,OAAO,WAAW,CAAC;QAClB,4CAA4C;QAC5C,6BAA6B;KAC7B,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC;IAC3C,OAAO,gBAAgB,CACtB,WAAW,CAAC,CAAC,0CAA0C,CAAC,CAAC,EACzD,wCAAwC,CACxC,CAAC;AACH,CAAC;AAED,SAAS,qCAAqC;IAC7C,OAAO,WAAW,CAAC;QAClB,uCAAuC;QACvC,wBAAwB;KACxB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B;IACvC,MAAM,MAAM,GAAG,WAAW,CAAC;QAC1B,qCAAqC;QACrC,6BAA6B;KAC7B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC5B,uCAAuC;QACvC,+BAA+B;KAC/B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,WAAW,CAAC;QAC3B,sCAAsC;QACtC,8BAA8B;KAC9B,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,WAAW,CAAC;QAC9B,yCAAyC;QACzC,iCAAiC;KACjC,CAAC,CAAC;IAEH,OAAO;QACN,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrC,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC9B,MAAsC;IAEtC,OAAO,OAAO,CACb,MAAM,IAAI,MAAM,CAAC,WAAW,GAAG,4BAA4B,GAAG,IAAI,CAAC,GAAG,EAAE,CACxE,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAClC,OAAiC,EACjC,UAAkB;IAElB,MAAM,KAAK,GACV,OAAO,CAAC,UAAU;QAClB,OAAO,CAAC,SAAS;QACjB,OAAO,CAAC,MAAM,EAAE,UAAU;QAC1B,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,IAAI,KAAK,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC;QACf,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,6BAA6B,CACrC,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,OAAO;QACN,KAAK,EAAE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;QACvE,UAAU,EACT,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACpE,SAAS,EACR,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClE,MAAM,EAAE,MAAM;YACb,CAAC,CAAC;gBACA,UAAU,EACT,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;oBACpC,CAAC,CAAC,MAAM,CAAC,UAAU;oBACnB,CAAC,CAAC,SAAS;gBACb,SAAS,EACR,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aACpE;YACF,CAAC,CAAC,SAAS;KACZ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAyB;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAC9C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACvB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACtC,GAAW,EACX,cAAsB,EACtB,UAAkB;IAElB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3B,OAAO,EAAE,aAAa;YACtB,eAAe,EAAE,cAAc;YAC/B,MAAM,EAAE,2BAA2B;YACnC,WAAW,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,YAAY,GAAG,qCAAqC,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,YAAY,CAC3B,SAAS,EACT;YACC,GAAG,+BAA+B,EAAE;YACpC,OAAO,EAAE;gBACR,MAAM,EAAE,kBAAkB;gBAC1B,0BAA0B,EAAE,GAAG;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;gBACpD,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE;YACD,MAAM,EAAE,MAAM;SACd,EACD,KAAK,EAAE,QAAQ,EAAE,EAAE;YAClB,IAAI,CAAC;gBACJ,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACtD,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAChE,MAAM,CACL,IAAI,KAAK,CACR,qDAAqD,QAAQ,CAAC,UAAU,IAAI,SAAS,EAAE,CACvF,CACD,CAAC;oBACF,OAAO;gBACR,CAAC;gBACD,MAAM,MAAM,GAAG,6BAA6B,CAC3C,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CACxB,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC;oBACnE,OAAO;gBACR,CAAC;gBACD,uBAAuB,CAAC,GAAG,CAAC,cAAc,EAAE;oBAC3C,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,WAAW,EAAE,0BAA0B,CAAC,MAAM,EAAE,UAAU,CAAC;iBAC3D,CAAC,CAAC;gBACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CAAC,CAAC;YACf,CAAC;QACF,CAAC,CACD,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,CAAC,GAAG,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CACvC,cAAsB;IAEtB,MAAM,GAAG,GAAG,4BAA4B,EAAE,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO,MAAM,EAAE,KAAK,CAAC;IACtB,CAAC;IAED,MAAM,YAAY,GAAG,qCAAqC,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC5B,uCAAuC;QACvC,+BAA+B;KAC/B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,WAAW,CAAC;QAC3B,sCAAsC;QACtC,8BAA8B;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,OAAO,8BAA8B,CACpC,GAAG,EACH,cAAc,EACd,mCAAmC,EAAE,CACrC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACtC,cAAsB;IAEtB,MAAM,eAAe,GAAG,WAAW,CAAC;QACnC,6BAA6B;QAC7B,GAAG,6BAA6B;KAChC,CAAC,CAAC;IACH,IAAI,eAAe,EAAE,CAAC;QACrB,OAAO,eAAe,CAAC;IACxB,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,cAAc,CAAC,CAAC;QACrE,IAAI,YAAY,EAAE,CAAC;YAClB,OAAO,YAAY,CAAC;QACrB,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CACV,iFAAiF,EACjF,EAAE,KAAK,EAAE,CACT,CAAC;IACH,CAAC;IAED,OAAO,oBAAoB,CAAC,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,yBAAyB;IACvC,MAAM,OAAO,GAAG,WAAW,CAAC;QAC3B,qBAAqB;QACrB,4BAA4B;QAC5B,2BAA2B;QAC3B,0BAA0B;QAC1B,kBAAkB;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,cAAc,GAAG,qBAAqB,CAAC;QAC5C,gCAAgC;QAChC,GAAG,gCAAgC;KACnC,CAAC,CAAC;IACH,IAAI,CAAC,cAAc,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CACV,sFAAsF,CACtF,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,CAAC,IAAI,CACV,mFAAmF,CACnF,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO;QACN,OAAO,EAAE,oBAAoB,EAAE;QAC/B,MAAM,EAAE,IAAI,YAAY,CAAC;YACxB,OAAO;YACP,WAAW,EAAE,KAAK;YAClB,cAAc;SACd,CAAC;QACF,MAAM,EAAE,aAAa,CAAC;YACrB,wBAAwB;YACxB,yBAAyB;YACzB,6BAA6B;SAC7B,CAAC;KACF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oCAAoC;IACnD,uBAAuB,CAAC,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB,CAAC,OAI3B;IACA,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,OAAO;QACN,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC7B,KAAa,EACb,IAAwB,EACxB,WAAoB,EACpB,SAAkB;IAElB,OAAO,CACN,SAAS,CACR;QACC,UAAU;QACV,kBAAkB;QAClB,GAAG,gBAAgB,GAAG,cAAc,CAAC,KAAK,CAAC,EAAE;QAC7C,GAAG,CAAC,WAAW;YACd,CAAC,CAAC,CAAC,GAAG,uBAAuB,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACnE,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,kBAAkB,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,EACD,IAAI,CACJ,IAAI,EAAE,CACP,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC7B,KAAa,EACb,KAAwB,EACxB,OAEC;IAED,MAAM,UAAU,GAA4B;QAC3C;YACC,GAAG,EAAE,KAAK,CAAC,UAAU;gBACpB,CAAC,CAAC,QAAQ,KAAK,CAAC,UAAU,EAAE;gBAC5B,CAAC,CAAC,0BAA0B;YAC7B,KAAK,EAAE,2BAA2B,cAAc,CAAC,KAAK,CAAC,EAAE;YACzD,IAAI,EAAE,wBAAwB;YAC9B,QAAQ,EAAE;gBACT,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;gBAC5B,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D;SACD;KACD,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,SAAS,EAAE,CAAC;QACf,UAAU,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,sBAAsB,SAAS,EAAE;YACtC,KAAK,EAAE,mBAAmB,SAAS,EAAE;YACrC,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE;gBACT,MAAM,EAAE,SAAS;gBACjB,SAAS;gBACT,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC;gBAC5B,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D;SACD,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAwB;IACrD,OAAO,IAAI;QACV,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC/D,EAAE,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC;SAC/B,IAAI,EAAE,CAAC;AACV,CAAC;AAED,SAAS,0BAA0B,CAClC,IAAwB;IAExB,OAAO,IAAI;QACV,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;QACtE,EAAE,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC;SACtC,IAAI,EAAE,CAAC;AACV,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAoB;IACnD,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgC;IAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;SAAM,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IACzB,CAAC;SAAM,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CAC1B,MAAoB,EACpB,KAAwB;IAExB,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SAC9B,GAAG,CAAC,YAAY,CAAC;SACjB,MAAM,CACN,CAAC,GAAG,EAAE,EAAE,CACP,GAAG,KAAK,UAAU;QAClB,GAAG,KAAK,kBAAkB;QAC1B,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACjC,CAAC,GAAG,CAAC,UAAU,CAAC,uBAAuB,CAAC;QACxC,CAAC,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,CACpC,CAAC;IAEH,OAAO;QACN,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ;QACpD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACxC,SAAS,EAAE,mBAAmB,CAC7B,KAAK,CAAC,SAAS,EACf,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,UAAU,CACjB;QACD,WAAW,EAAE,mBAAmB,CAC/B,KAAK,CAAC,WAAW,EACjB,0BAA0B,CAAC,MAAM,CAAC,IAAI,CAAC,CACvC;QACD,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,SAAsC,CAAC;QAC3E,SAAS,EAAE,iBAAiB,CAAC,MAAM,CAAC,SAAsC,CAAC;KAC3E,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACrB,KAA+B,EAC/B,SAAiB;IAEjB,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,6BAA6B,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,KAAK,UAAU,yBAAyB,CACvC,MAA0B,EAC1B,KAAwB;IAExB,MAAM,OAAO,GAAsB;QAClC,IAAI,EAAE,UAAU,CAAC,OAAO;QACxB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,YAAY,EAAE,UAAU;KACxB,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,wBAAwB,CAChC,OAAuB,EACvB,KAAa,EACb,OAAe;IAEf,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAClE,OAAO,OAAO,CAAC,IAAI,CAClB,CAAC,MAAM,EAAE,EAAE,CACV,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,eAAe;QACrD,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,iBAAiB,CACrE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mCAAmC,CACjD,MAA0B,EAC1B,KAAwB,EACxB,KAAa,EACb,OAAe,EACf,OAIC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,qBAAqB,CACrC,KAAK,EACL,OAAO,EAAE,IAAI,EACb,KAAK,CAAC,WAAW,EACjB,OAAO,EAAE,SAAS,CAClB,CAAC;IACF,MAAM,eAAe,GACpB,OAAO,EAAE,eAAe;QACxB,CAAC,MAAM,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,wBAAwB,CACxC,eAAe,EACf,KAAK,EACL,WAAW,CACX,CAAC;IAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,OAAO,GAAuB;YACnC,IAAI,EAAE,UAAU,CAAC,OAAO;YACxB,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,QAAQ;YACd,YAAY,EAAE,UAAU;YACxB,gBAAgB,EAAE,qBAAqB,CAAC,KAAK,EAAE,KAAK,EAAE;gBACrD,SAAS,EAAE,OAAO,EAAE,SAAS;aAC7B,CAAC;SACF,CAAC;QACF,MAAM,OAAO,GAAG,aAAa,CAC5B,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAC3C,cAAc,CACd,CAAC;QACF,OAAO;YACN,KAAK,EAAE,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC;YACzC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,KAAK;SACd,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,UAAU,IAAI,EAAE,CAAC;IACxC,MAAM,iBAAiB,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,WAAW,GAChB,cAAc,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM;QAClD,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;IACvE,IAAI,CAAC,WAAW,IAAI,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,WAAW,EAAE,CAAC;QACxE,OAAO;YACN,KAAK,EAAE,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC;YAC1C,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,KAAK;SACd,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAC5B,CACC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1B,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,OAAO,EAAE,WAAW;QACpB,YAAY,EAAE,UAAU;QACxB,gBAAgB,EAAE,qBAAqB,CAAC,KAAK,EAAE,KAAK,EAAE;YACrD,SAAS,EAAE,OAAO,EAAE,SAAS;SAC7B,CAAC;QACF,IAAI,EAAE,UAAU,IAAI,EAAE;KACtB,CAAC,CACF,CAAC,MAAM,EACR,eAAe,CACf,CAAC;IACF,OAAO;QACN,KAAK,EAAE,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC;QACzC,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,IAAI;KACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,KAAa,EACb,OAAe,EACf,OAMC;IAED,MAAM,MAAM,GAAG,MAAM,yBAAyB,EAAE,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,mCAAmC,CACzC,MAAM,EACN,kBAAkB,CAAC,OAAO,CAAC,EAC3B,KAAK,EACL,OAAO,EACP,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CACtD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,KAAa,EACb,OAGC;IAED,MAAM,MAAM,GAAG,MAAM,yBAAyB,EAAE,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC;QACJ,MAAM,OAAO,GAAwB;YACpC,KAAK;YACL,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE;YAC3B,IAAI,EAAE,UAAU,CAAC,OAAO;YACxB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,UAAU;SACxB,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;aAC9B,MAAM,CAAC,sBAAsB,CAAC;aAC9B,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjB,KAAK,EAAE,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC;YACxC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;YAChC,SAAS,EAAE,SAAkB;SAC7B,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;YAChE,KAAK,EAAE,sBAAsB,CAC5B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACtD;YACD,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,MAYxD;IACA,MAAM,MAAM,GAAG,MAAM,yBAAyB,EAAE,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAEvE,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,wBAAwB,CACxC,eAAe,EACf,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACb,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,SAAS;QACV,CAAC;QACD,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,CAAC;IACd,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,mCAAmC,CACvD,MAAM,EACN,KAAK,EACL,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,OAAO,EACd;YACC,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACjE,eAAe;SACf,CACD,CAAC;QACF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,KAAK,IAAI,CAAC,CAAC;QACZ,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,CAAC;QACd,CAAC;IACF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC","sourcesContent":["import { readFileSync } from \"node:fs\";\nimport type { IncomingMessage } from \"node:http\";\nimport {\n\ttype RequestOptions as HttpsRequestOptions,\n\trequest as httpsRequest,\n} from \"node:https\";\nimport {\n\tEVALOPS_ACCESS_TOKEN_ENV_VARS,\n\tEVALOPS_ORGANIZATION_ID_ENV_VARS,\n} from \"../evalops/env-aliases.js\";\nimport {\n\tgetEnvValue,\n\tparsePositiveInt,\n\tresolveOrganizationId,\n\tresolvePlatformToken,\n\tresolveTeamId,\n} from \"../platform/client.js\";\nimport { isRecord } from \"../utils/json.js\";\nimport { createLogger } from \"../utils/logger.js\";\nimport { sanitizeWithStaticMask } from \"../utils/secret-redactor.js\";\nimport { MemoryClient, MemoryType } from \"./platform-memory-client.js\";\nimport { getMemoryProjectScope } from \"./team-memory.js\";\nimport type { MemoryEntry, MemorySearchResult } from \"./types.js\";\n\nconst logger = createLogger(\"memory:service\");\n\nconst MAESTRO_AGENT = \"maestro\";\nconst DURABLE_MEMORY_TAG = \"maestro-kind:durable-memory\";\nconst SOURCE_TAG = \"source:maestro\";\nconst TOPIC_TAG_PREFIX = \"maestro-topic:\";\nconst PROJECT_NAME_TAG_PREFIX = \"maestro-project-name:\";\nconst SESSION_TAG_PREFIX = \"maestro-session:\";\nconst MEMORY_SERVICE_TOKEN_SCOPES = [\n\t\"memories:read\",\n\t\"memories:write\",\n] as const;\nconst DEFAULT_MEMORY_SERVICE_TOKEN_TTL_SECONDS = 300;\nconst SERVICE_TOKEN_EXPIRY_SKEW_MS = 30_000;\n\ntype RemoteMemoryConfig = {\n\tagentId: string;\n\tclient: MemoryClient;\n\tteamId?: string;\n};\n\ntype RemoteMemoryScope = {\n\tprojectId?: string;\n\tprojectName?: string;\n\trepository?: string;\n};\n\ntype ClientMemory = Awaited<\n\tReturnType<MemoryClient[\"list\"]>\n>[\"memories\"][number];\n\ntype TimestampLike = {\n\tnanos?: number;\n\tseconds?: bigint | number | string;\n};\n\ntype MemorySourceReference = {\n\turi: string;\n\ttitle: string;\n\ttype: string;\n\tmetadata?: Record<string, string>;\n};\n\ntype RemoteStoreRequest = Parameters<MemoryClient[\"store\"]>[0] & {\n\tagentId?: string;\n\treviewStatus?: string;\n\tsourceReferences?: MemorySourceReference[];\n};\n\ntype RemoteListRequest = Parameters<MemoryClient[\"list\"]>[0] & {\n\tagentId?: string;\n\treviewStatus?: string;\n};\n\ntype RemoteRecallRequest = Parameters<MemoryClient[\"recall\"]>[0] & {\n\tagentId?: string;\n\treviewStatus?: string;\n};\n\ntype CachedServiceToken = {\n\texpiresAtMs: number;\n\ttoken: string;\n};\n\ntype ServiceTokenResponseBody = {\n\tclaims?: {\n\t\texpires_at?: string;\n\t\texpiresAt?: string;\n\t};\n\texpires_at?: string;\n\texpiresAt?: string;\n\ttoken?: string;\n};\n\nconst memoryServiceTokenCache = new Map<string, CachedServiceToken>();\n\nfunction normalizeTopic(topic: string): string {\n\treturn topic.toLowerCase().trim();\n}\n\nfunction normalizeContent(content: string): string {\n\treturn content.replace(/\\s+/g, \" \").trim();\n}\n\nfunction normalizeTag(tag: string): string {\n\treturn tag.trim().toLowerCase();\n}\n\nfunction mergeTags(\n\tcurrent?: readonly string[],\n\tnext?: readonly string[],\n): string[] | undefined {\n\tconst values = [...(current ?? []), ...(next ?? [])]\n\t\t.map(normalizeTag)\n\t\t.filter(Boolean);\n\tif (values.length === 0) {\n\t\treturn undefined;\n\t}\n\treturn Array.from(new Set(values)).sort();\n}\n\nfunction firstNonEmptyString(\n\t...values: Array<string | undefined>\n): string | undefined {\n\tfor (const value of values) {\n\t\tif (typeof value === \"string\" && value.trim().length > 0) {\n\t\t\treturn value.trim();\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction resolveMemoryAgentId(): string {\n\treturn (\n\t\tgetEnvValue([\"MAESTRO_MEMORY_AGENT_ID\", \"MAESTRO_AGENT_ID\"]) ??\n\t\tMAESTRO_AGENT\n\t);\n}\n\nfunction resolveMemoryServiceTokenUrl(): string | undefined {\n\treturn getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_SERVICE_TOKENS_URL\",\n\t\t\"IDENTITY_SERVICE_TOKENS_URL\",\n\t]);\n}\n\nfunction resolveMemoryServiceTokenTtlSeconds(): number {\n\treturn parsePositiveInt(\n\t\tgetEnvValue([\"MAESTRO_MEMORY_SERVICE_TOKEN_TTL_SECONDS\"]),\n\t\tDEFAULT_MEMORY_SERVICE_TOKEN_TTL_SECONDS,\n\t);\n}\n\nfunction resolveMemoryServiceTokenBootstrapKey(): string | undefined {\n\treturn getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_BOOTSTRAP_KEY\",\n\t\t\"IDENTITY_BOOTSTRAP_KEY\",\n\t]);\n}\n\nfunction resolveMemoryIdentityTlsOptions(): HttpsRequestOptions {\n\tconst caFile = getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_TLS_CA_FILE\",\n\t\t\"IDENTITY_CLIENT_TLS_CA_FILE\",\n\t]);\n\tconst certFile = getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_TLS_CERT_FILE\",\n\t\t\"IDENTITY_CLIENT_TLS_CERT_FILE\",\n\t]);\n\tconst keyFile = getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_TLS_KEY_FILE\",\n\t\t\"IDENTITY_CLIENT_TLS_KEY_FILE\",\n\t]);\n\tconst servername = getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_TLS_SERVER_NAME\",\n\t\t\"IDENTITY_CLIENT_TLS_SERVER_NAME\",\n\t]);\n\n\treturn {\n\t\t...(caFile ? { ca: readFileSync(caFile, \"utf8\") } : {}),\n\t\t...(certFile ? { cert: readFileSync(certFile, \"utf8\") } : {}),\n\t\t...(keyFile ? { key: readFileSync(keyFile, \"utf8\") } : {}),\n\t\t...(servername ? { servername } : {}),\n\t};\n}\n\nfunction serviceTokenCacheValid(\n\tcached: CachedServiceToken | undefined,\n): boolean {\n\treturn Boolean(\n\t\tcached && cached.expiresAtMs - SERVICE_TOKEN_EXPIRY_SKEW_MS > Date.now(),\n\t);\n}\n\nfunction parseServiceTokenExpiresAt(\n\tpayload: ServiceTokenResponseBody,\n\tttlSeconds: number,\n): number {\n\tconst value =\n\t\tpayload.expires_at ??\n\t\tpayload.expiresAt ??\n\t\tpayload.claims?.expires_at ??\n\t\tpayload.claims?.expiresAt;\n\tif (value) {\n\t\tconst parsed = Date.parse(value);\n\t\tif (Number.isFinite(parsed)) {\n\t\t\treturn parsed;\n\t\t}\n\t}\n\treturn Date.now() + ttlSeconds * 1000;\n}\n\nfunction parseServiceTokenResponseBody(\n\tvalue: unknown,\n): ServiceTokenResponseBody {\n\tif (!isRecord(value)) {\n\t\treturn {};\n\t}\n\tconst claims = isRecord(value.claims) ? value.claims : undefined;\n\treturn {\n\t\ttoken: typeof value.token === \"string\" ? value.token.trim() : undefined,\n\t\texpires_at:\n\t\t\ttypeof value.expires_at === \"string\" ? value.expires_at : undefined,\n\t\texpiresAt:\n\t\t\ttypeof value.expiresAt === \"string\" ? value.expiresAt : undefined,\n\t\tclaims: claims\n\t\t\t? {\n\t\t\t\t\texpires_at:\n\t\t\t\t\t\ttypeof claims.expires_at === \"string\"\n\t\t\t\t\t\t\t? claims.expires_at\n\t\t\t\t\t\t\t: undefined,\n\t\t\t\t\texpiresAt:\n\t\t\t\t\t\ttypeof claims.expiresAt === \"string\" ? claims.expiresAt : undefined,\n\t\t\t\t}\n\t\t\t: undefined,\n\t};\n}\n\nfunction readResponseBody(response: IncomingMessage): Promise<string> {\n\treturn new Promise((resolve, reject) => {\n\t\tconst chunks: Buffer[] = [];\n\t\tresponse.on(\"data\", (chunk: Buffer | string) => {\n\t\t\tchunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));\n\t\t});\n\t\tresponse.on(\"end\", () => {\n\t\t\tresolve(Buffer.concat(chunks).toString(\"utf8\"));\n\t\t});\n\t\tresponse.on(\"error\", reject);\n\t});\n}\n\nfunction issueMemoryServiceTokenRequest(\n\turl: string,\n\torganizationId: string,\n\tttlSeconds: number,\n): Promise<string> {\n\treturn new Promise((resolve, reject) => {\n\t\tconst body = JSON.stringify({\n\t\t\tservice: MAESTRO_AGENT,\n\t\t\torganization_id: organizationId,\n\t\t\tscopes: MEMORY_SERVICE_TOKEN_SCOPES,\n\t\t\tttl_seconds: ttlSeconds,\n\t\t});\n\t\tconst parsedUrl = new URL(url);\n\t\tconst bootstrapKey = resolveMemoryServiceTokenBootstrapKey();\n\t\tconst request = httpsRequest(\n\t\t\tparsedUrl,\n\t\t\t{\n\t\t\t\t...resolveMemoryIdentityTlsOptions(),\n\t\t\t\theaders: {\n\t\t\t\t\tAccept: \"application/json\",\n\t\t\t\t\t\"Connect-Protocol-Version\": \"1\",\n\t\t\t\t\t\"Content-Length\": Buffer.byteLength(body).toString(),\n\t\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\t...(bootstrapKey ? { \"X-Identity-Bootstrap-Key\": bootstrapKey } : {}),\n\t\t\t\t},\n\t\t\t\tmethod: \"POST\",\n\t\t\t},\n\t\t\tasync (response) => {\n\t\t\t\ttry {\n\t\t\t\t\tconst responseBody = await readResponseBody(response);\n\t\t\t\t\tif (response.statusCode !== 200 && response.statusCode !== 201) {\n\t\t\t\t\t\treject(\n\t\t\t\t\t\t\tnew Error(\n\t\t\t\t\t\t\t\t`identity service token request failed with status ${response.statusCode ?? \"unknown\"}`,\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t);\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tconst parsed = parseServiceTokenResponseBody(\n\t\t\t\t\t\tJSON.parse(responseBody),\n\t\t\t\t\t);\n\t\t\t\t\tif (!parsed.token) {\n\t\t\t\t\t\treject(new Error(\"identity service token response missing token\"));\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tmemoryServiceTokenCache.set(organizationId, {\n\t\t\t\t\t\ttoken: parsed.token,\n\t\t\t\t\t\texpiresAtMs: parseServiceTokenExpiresAt(parsed, ttlSeconds),\n\t\t\t\t\t});\n\t\t\t\t\tresolve(parsed.token);\n\t\t\t\t} catch (error) {\n\t\t\t\t\treject(error);\n\t\t\t\t}\n\t\t\t},\n\t\t);\n\t\trequest.on(\"error\", reject);\n\t\trequest.write(body);\n\t\trequest.end();\n\t});\n}\n\nasync function resolveMemoryServiceToken(\n\torganizationId: string,\n): Promise<string | undefined> {\n\tconst url = resolveMemoryServiceTokenUrl();\n\tif (!url) {\n\t\treturn undefined;\n\t}\n\tconst cached = memoryServiceTokenCache.get(organizationId);\n\tif (serviceTokenCacheValid(cached)) {\n\t\treturn cached?.token;\n\t}\n\n\tconst bootstrapKey = resolveMemoryServiceTokenBootstrapKey();\n\tconst certFile = getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_TLS_CERT_FILE\",\n\t\t\"IDENTITY_CLIENT_TLS_CERT_FILE\",\n\t]);\n\tconst keyFile = getEnvValue([\n\t\t\"MAESTRO_MEMORY_IDENTITY_TLS_KEY_FILE\",\n\t\t\"IDENTITY_CLIENT_TLS_KEY_FILE\",\n\t]);\n\tif (!bootstrapKey && (!certFile || !keyFile)) {\n\t\treturn undefined;\n\t}\n\n\treturn issueMemoryServiceTokenRequest(\n\t\turl,\n\t\torganizationId,\n\t\tresolveMemoryServiceTokenTtlSeconds(),\n\t);\n}\n\nasync function resolveMemoryAccessToken(\n\torganizationId: string,\n): Promise<string | undefined> {\n\tconst configuredToken = getEnvValue([\n\t\t\"MAESTRO_MEMORY_ACCESS_TOKEN\",\n\t\t...EVALOPS_ACCESS_TOKEN_ENV_VARS,\n\t]);\n\tif (configuredToken) {\n\t\treturn configuredToken;\n\t}\n\n\ttry {\n\t\tconst serviceToken = await resolveMemoryServiceToken(organizationId);\n\t\tif (serviceToken) {\n\t\t\treturn serviceToken;\n\t\t}\n\t} catch (error) {\n\t\tlogger.warn(\n\t\t\t\"Failed to issue identity service token for remote memory; trying OAuth fallback\",\n\t\t\t{ error },\n\t\t);\n\t}\n\n\treturn resolvePlatformToken([]);\n}\n\nasync function resolveRemoteMemoryConfig(): Promise<RemoteMemoryConfig | null> {\n\tconst baseUrl = getEnvValue([\n\t\t\"MAESTRO_MEMORY_BASE\",\n\t\t\"MAESTRO_MEMORY_SERVICE_URL\",\n\t\t\"MAESTRO_PLATFORM_BASE_URL\",\n\t\t\"MAESTRO_EVALOPS_BASE_URL\",\n\t\t\"EVALOPS_BASE_URL\",\n\t]);\n\tif (!baseUrl) {\n\t\treturn null;\n\t}\n\n\tconst organizationId = resolveOrganizationId([\n\t\t\"MAESTRO_MEMORY_ORGANIZATION_ID\",\n\t\t...EVALOPS_ORGANIZATION_ID_ENV_VARS,\n\t]);\n\tif (!organizationId) {\n\t\tlogger.warn(\n\t\t\t\"Remote memory configured without organization id; falling back to local memory store\",\n\t\t);\n\t\treturn null;\n\t}\n\n\tconst token = await resolveMemoryAccessToken(organizationId);\n\tif (!token) {\n\t\tlogger.warn(\n\t\t\t\"Remote memory configured without access token; falling back to local memory store\",\n\t\t);\n\t\treturn null;\n\t}\n\n\treturn {\n\t\tagentId: resolveMemoryAgentId(),\n\t\tclient: new MemoryClient({\n\t\t\tbaseUrl,\n\t\t\taccessToken: token,\n\t\t\torganizationId,\n\t\t}),\n\t\tteamId: resolveTeamId([\n\t\t\t\"MAESTRO_MEMORY_TEAM_ID\",\n\t\t\t\"MAESTRO_EVALOPS_TEAM_ID\",\n\t\t\t\"MAESTRO_LLM_GATEWAY_TEAM_ID\",\n\t\t]),\n\t};\n}\n\nexport function resetMemoryServiceTokenCacheForTests(): void {\n\tmemoryServiceTokenCache.clear();\n}\n\nfunction resolveRemoteScope(options?: {\n\tcwd?: string;\n\tprojectId?: string;\n\tprojectName?: string;\n}): RemoteMemoryScope {\n\tif (options?.projectId !== undefined) {\n\t\treturn {\n\t\t\tprojectId: options.projectId,\n\t\t\tprojectName: options.projectName,\n\t\t\trepository: options.projectId,\n\t\t};\n\t}\n\n\tif (!options?.cwd) {\n\t\treturn {};\n\t}\n\n\tconst scope = getMemoryProjectScope(options.cwd);\n\tif (!scope) {\n\t\treturn {};\n\t}\n\n\treturn {\n\t\tprojectId: scope.projectId,\n\t\tprojectName: scope.projectName,\n\t\trepository: scope.projectId,\n\t};\n}\n\nfunction buildRemoteMemoryTags(\n\ttopic: string,\n\ttags?: readonly string[],\n\tprojectName?: string,\n\tsessionId?: string,\n): string[] {\n\treturn (\n\t\tmergeTags(\n\t\t\t[\n\t\t\t\tSOURCE_TAG,\n\t\t\t\tDURABLE_MEMORY_TAG,\n\t\t\t\t`${TOPIC_TAG_PREFIX}${normalizeTopic(topic)}`,\n\t\t\t\t...(projectName\n\t\t\t\t\t? [`${PROJECT_NAME_TAG_PREFIX}${projectName.trim().toLowerCase()}`]\n\t\t\t\t\t: []),\n\t\t\t\t...(sessionId ? [`${SESSION_TAG_PREFIX}${sessionId.trim()}`] : []),\n\t\t\t],\n\t\t\ttags,\n\t\t) ?? []\n\t);\n}\n\nfunction buildSourceReferences(\n\ttopic: string,\n\tscope: RemoteMemoryScope,\n\toptions?: {\n\t\tsessionId?: string;\n\t},\n): MemorySourceReference[] {\n\tconst references: MemorySourceReference[] = [\n\t\t{\n\t\t\turi: scope.repository\n\t\t\t\t? `repo:${scope.repository}`\n\t\t\t\t: \"maestro://durable-memory\",\n\t\t\ttitle: `Maestro durable memory: ${normalizeTopic(topic)}`,\n\t\t\ttype: \"maestro-durable-memory\",\n\t\t\tmetadata: {\n\t\t\t\tsource: \"maestro\",\n\t\t\t\ttopic: normalizeTopic(topic),\n\t\t\t\t...(scope.projectId ? { projectId: scope.projectId } : {}),\n\t\t\t\t...(scope.projectName ? { projectName: scope.projectName } : {}),\n\t\t\t\t...(scope.repository ? { repository: scope.repository } : {}),\n\t\t\t},\n\t\t},\n\t];\n\tconst sessionId = options?.sessionId?.trim();\n\tif (sessionId) {\n\t\treferences.push({\n\t\t\turi: `maestro://sessions/${sessionId}`,\n\t\t\ttitle: `Maestro session ${sessionId}`,\n\t\t\ttype: \"maestro-session\",\n\t\t\tmetadata: {\n\t\t\t\tsource: \"maestro\",\n\t\t\t\tsessionId,\n\t\t\t\ttopic: normalizeTopic(topic),\n\t\t\t\t...(scope.projectId ? { projectId: scope.projectId } : {}),\n\t\t\t\t...(scope.projectName ? { projectName: scope.projectName } : {}),\n\t\t\t\t...(scope.repository ? { repository: scope.repository } : {}),\n\t\t\t},\n\t\t});\n\t}\n\treturn references;\n}\n\nfunction extractTopicFromTags(tags?: readonly string[]): string | undefined {\n\treturn tags\n\t\t?.find((tag) => normalizeTag(tag).startsWith(TOPIC_TAG_PREFIX))\n\t\t?.slice(TOPIC_TAG_PREFIX.length)\n\t\t.trim();\n}\n\nfunction extractProjectNameFromTags(\n\ttags?: readonly string[],\n): string | undefined {\n\treturn tags\n\t\t?.find((tag) => normalizeTag(tag).startsWith(PROJECT_NAME_TAG_PREFIX))\n\t\t?.slice(PROJECT_NAME_TAG_PREFIX.length)\n\t\t.trim();\n}\n\nfunction isManagedDurableMemory(record: ClientMemory): boolean {\n\treturn (record.tags ?? []).map(normalizeTag).includes(DURABLE_MEMORY_TAG);\n}\n\nfunction timestampToMillis(value: TimestampLike | undefined): number {\n\tif (!value) {\n\t\treturn Date.now();\n\t}\n\n\tlet seconds = 0;\n\tif (typeof value.seconds === \"bigint\") {\n\t\tif (value.seconds > BigInt(Number.MAX_SAFE_INTEGER)) {\n\t\t\treturn Date.now();\n\t\t}\n\t\tseconds = Number(value.seconds);\n\t} else if (typeof value.seconds === \"number\") {\n\t\tseconds = value.seconds;\n\t} else if (typeof value.seconds === \"string\") {\n\t\tseconds = Number.parseInt(value.seconds, 10);\n\t}\n\n\tconst nanos = typeof value.nanos === \"number\" ? value.nanos : 0;\n\tconst millis = seconds * 1000 + Math.floor(nanos / 1_000_000);\n\treturn Number.isFinite(millis) && millis > 0 ? millis : Date.now();\n}\n\nfunction toLocalMemoryEntry(\n\trecord: ClientMemory,\n\tscope: RemoteMemoryScope,\n): MemoryEntry {\n\tconst tags = (record.tags ?? [])\n\t\t.map(normalizeTag)\n\t\t.filter(\n\t\t\t(tag) =>\n\t\t\t\ttag !== SOURCE_TAG &&\n\t\t\t\ttag !== DURABLE_MEMORY_TAG &&\n\t\t\t\t!tag.startsWith(TOPIC_TAG_PREFIX) &&\n\t\t\t\t!tag.startsWith(PROJECT_NAME_TAG_PREFIX) &&\n\t\t\t\t!tag.startsWith(SESSION_TAG_PREFIX),\n\t\t);\n\n\treturn {\n\t\tid: record.id,\n\t\ttopic: extractTopicFromTags(record.tags) ?? \"memory\",\n\t\tcontent: record.content,\n\t\ttags: tags.length > 0 ? tags : undefined,\n\t\tprojectId: firstNonEmptyString(\n\t\t\tscope.projectId,\n\t\t\trecord.projectId,\n\t\t\trecord.repository,\n\t\t),\n\t\tprojectName: firstNonEmptyString(\n\t\t\tscope.projectName,\n\t\t\textractProjectNameFromTags(record.tags),\n\t\t),\n\t\tcreatedAt: timestampToMillis(record.createdAt as TimestampLike | undefined),\n\t\tupdatedAt: timestampToMillis(record.updatedAt as TimestampLike | undefined),\n\t};\n}\n\nfunction requireMemory(\n\tvalue: ClientMemory | undefined,\n\toperation: string,\n): ClientMemory {\n\tif (!value) {\n\t\tthrow new Error(`${operation} returned no memory payload`);\n\t}\n\treturn value;\n}\n\nasync function listRemoteRecordsForScope(\n\tconfig: RemoteMemoryConfig,\n\tscope: RemoteMemoryScope,\n): Promise<ClientMemory[]> {\n\tconst request: RemoteListRequest = {\n\t\ttype: MemoryType.PROJECT,\n\t\tteamId: config.teamId,\n\t\trepository: scope.repository,\n\t\tagent: MAESTRO_AGENT,\n\t\tagentId: config.agentId,\n\t\treviewStatus: \"approved\",\n\t};\n\tconst response = await config.client.list(request);\n\treturn (response.memories ?? []).filter(isManagedDurableMemory);\n}\n\nfunction findMatchingRemoteRecord(\n\trecords: ClientMemory[],\n\ttopic: string,\n\tcontent: string,\n): ClientMemory | undefined {\n\tconst normalizedTopic = normalizeTopic(topic);\n\tconst normalizedContent = normalizeContent(content).toLowerCase();\n\treturn records.find(\n\t\t(record) =>\n\t\t\textractTopicFromTags(record.tags) === normalizedTopic &&\n\t\t\tnormalizeContent(record.content).toLowerCase() === normalizedContent,\n\t);\n}\n\nasync function upsertRemoteDurableMemoryWithConfig(\n\tconfig: RemoteMemoryConfig,\n\tscope: RemoteMemoryScope,\n\ttopic: string,\n\tcontent: string,\n\toptions?: {\n\t\texistingRecords?: ClientMemory[];\n\t\tsessionId?: string;\n\t\ttags?: string[];\n\t},\n): Promise<{ entry: MemoryEntry; created: boolean; updated: boolean }> {\n\tconst nextContent = normalizeContent(content);\n\tconst nextTags = buildRemoteMemoryTags(\n\t\ttopic,\n\t\toptions?.tags,\n\t\tscope.projectName,\n\t\toptions?.sessionId,\n\t);\n\tconst existingRecords =\n\t\toptions?.existingRecords ??\n\t\t(await listRemoteRecordsForScope(config, scope));\n\tconst existing = findMatchingRemoteRecord(\n\t\texistingRecords,\n\t\ttopic,\n\t\tnextContent,\n\t);\n\n\tif (!existing) {\n\t\tconst request: RemoteStoreRequest = {\n\t\t\ttype: MemoryType.PROJECT,\n\t\t\tcontent: nextContent,\n\t\t\tteamId: config.teamId,\n\t\t\trepository: scope.repository,\n\t\t\tagent: MAESTRO_AGENT,\n\t\t\tagentId: config.agentId,\n\t\t\ttags: nextTags,\n\t\t\treviewStatus: \"approved\",\n\t\t\tsourceReferences: buildSourceReferences(topic, scope, {\n\t\t\t\tsessionId: options?.sessionId,\n\t\t\t}),\n\t\t};\n\t\tconst created = requireMemory(\n\t\t\t(await config.client.store(request)).memory,\n\t\t\t\"store memory\",\n\t\t);\n\t\treturn {\n\t\t\tentry: toLocalMemoryEntry(created, scope),\n\t\t\tcreated: true,\n\t\t\tupdated: false,\n\t\t};\n\t}\n\n\tconst mergedTags = mergeTags(existing.tags, nextTags);\n\tconst nextTagsStable = mergedTags ?? [];\n\tconst currentTagsStable = mergeTags(existing.tags) ?? [];\n\tconst tagsChanged =\n\t\tnextTagsStable.length !== currentTagsStable.length ||\n\t\tnextTagsStable.some((tag, index) => currentTagsStable[index] !== tag);\n\tif (!tagsChanged && normalizeContent(existing.content) === nextContent) {\n\t\treturn {\n\t\t\tentry: toLocalMemoryEntry(existing, scope),\n\t\t\tcreated: false,\n\t\t\tupdated: false,\n\t\t};\n\t}\n\n\tconst updated = requireMemory(\n\t\t(\n\t\t\tawait config.client.update({\n\t\t\t\tid: existing.id,\n\t\t\t\tcontent: nextContent,\n\t\t\t\treviewStatus: \"approved\",\n\t\t\t\tsourceReferences: buildSourceReferences(topic, scope, {\n\t\t\t\t\tsessionId: options?.sessionId,\n\t\t\t\t}),\n\t\t\t\ttags: mergedTags ?? [],\n\t\t\t})\n\t\t).memory,\n\t\t\"update memory\",\n\t);\n\treturn {\n\t\tentry: toLocalMemoryEntry(updated, scope),\n\t\tcreated: false,\n\t\tupdated: true,\n\t};\n}\n\nexport async function upsertRemoteDurableMemory(\n\ttopic: string,\n\tcontent: string,\n\toptions?: {\n\t\tcwd?: string;\n\t\tprojectId?: string;\n\t\tprojectName?: string;\n\t\tsessionId?: string;\n\t\ttags?: string[];\n\t},\n): Promise<{ entry: MemoryEntry; created: boolean; updated: boolean } | null> {\n\tconst config = await resolveRemoteMemoryConfig();\n\tif (!config) {\n\t\treturn null;\n\t}\n\n\treturn upsertRemoteDurableMemoryWithConfig(\n\t\tconfig,\n\t\tresolveRemoteScope(options),\n\t\ttopic,\n\t\tcontent,\n\t\t{ sessionId: options?.sessionId, tags: options?.tags },\n\t);\n}\n\nexport async function recallRemoteDurableMemories(\n\tquery: string,\n\toptions?: {\n\t\tcwd?: string;\n\t\tlimit?: number;\n\t},\n): Promise<MemorySearchResult[] | null> {\n\tconst config = await resolveRemoteMemoryConfig();\n\tif (!config) {\n\t\treturn null;\n\t}\n\n\tconst scope = resolveRemoteScope(options);\n\ttry {\n\t\tconst request: RemoteRecallRequest = {\n\t\t\tquery,\n\t\t\tlimit: options?.limit ?? 10,\n\t\t\ttype: MemoryType.PROJECT,\n\t\t\tteamId: config.teamId,\n\t\t\trepository: scope.repository,\n\t\t\tagent: MAESTRO_AGENT,\n\t\t\tagentId: config.agentId,\n\t\t\treviewStatus: \"approved\",\n\t\t};\n\t\tconst response = await config.client.recall(request);\n\t\treturn (response.memories ?? [])\n\t\t\t.filter(isManagedDurableMemory)\n\t\t\t.map((memory) => ({\n\t\t\t\tentry: toLocalMemoryEntry(memory, scope),\n\t\t\t\tscore: Number(memory.score ?? 0),\n\t\t\t\tmatchedOn: \"content\" as const,\n\t\t\t}));\n\t} catch (error) {\n\t\tlogger.warn(\"Remote memory recall failed; using local fallback\", {\n\t\t\terror: sanitizeWithStaticMask(\n\t\t\t\terror instanceof Error ? error.message : String(error),\n\t\t\t),\n\t\t\tprojectId: scope.projectId,\n\t\t});\n\t\treturn null;\n\t}\n}\n\nexport async function applyRemoteAutoMemoryConsolidation(params: {\n\toptions?: {\n\t\tcwd?: string;\n\t\tprojectId?: string;\n\t\tprojectName?: string;\n\t};\n\tremoveEntries: MemoryEntry[];\n\tupserts: Array<{\n\t\tcontent: string;\n\t\ttags?: string[];\n\t\ttopic: string;\n\t}>;\n}): Promise<{ removed: number; added: number; updated: number } | null> {\n\tconst config = await resolveRemoteMemoryConfig();\n\tif (!config) {\n\t\treturn null;\n\t}\n\n\tconst scope = resolveRemoteScope(params.options);\n\tconst existingRecords = await listRemoteRecordsForScope(config, scope);\n\n\tlet removed = 0;\n\tfor (const entry of params.removeEntries) {\n\t\tconst existing = findMatchingRemoteRecord(\n\t\t\texistingRecords,\n\t\t\tentry.topic,\n\t\t\tentry.content,\n\t\t);\n\t\tif (!existing) {\n\t\t\tcontinue;\n\t\t}\n\t\tawait config.client.delete({ id: existing.id });\n\t\tremoved += 1;\n\t}\n\n\tlet added = 0;\n\tlet updated = 0;\n\tfor (const upsert of params.upserts) {\n\t\tconst result = await upsertRemoteDurableMemoryWithConfig(\n\t\t\tconfig,\n\t\t\tscope,\n\t\t\tupsert.topic,\n\t\t\tupsert.content,\n\t\t\t{\n\t\t\t\ttags: [\"auto\", \"durable\", \"consolidated\", ...(upsert.tags ?? [])],\n\t\t\t\texistingRecords,\n\t\t\t},\n\t\t);\n\t\tif (result.created) {\n\t\t\tadded += 1;\n\t\t} else if (result.updated) {\n\t\t\tupdated += 1;\n\t\t}\n\t}\n\n\treturn { removed, added, updated };\n}\n"]}

package/dist/models/config-loader.d.ts

@@ -135,12 +135,12 @@ export declare const configValidator: import("ajv/dist/core.js").AnyValidateFunc
                 cacheRead: number;
                 cacheWrite: number;
             } | undefined;
+            input?: ("text" | "image")[] | undefined;
             headers?: {
                 [x: string]: string;
             } | undefined;
-            input?: ("text" | "image")[] | undefined;
-            api?: "openai-completions" | "openai-responses" | "openai-codex-responses" | "openai-codex-app-server" | "anthropic-messages" | "google-generative-ai" | "google-gemini-cli" | "bedrock-converse" | "vertex-ai" | "scripted-replay" | undefined;
             baseUrl?: string | undefined;
+            api?: "openai-completions" | "openai-responses" | "openai-codex-responses" | "openai-codex-app-server" | "anthropic-messages" | "google-generative-ai" | "google-gemini-cli" | "bedrock-converse" | "vertex-ai" | "scripted-replay" | undefined;
             reasoning?: boolean | undefined;
             compat?: {
                 supportsStore?: boolean | undefined;
@@ -155,19 +155,19 @@ export declare const configValidator: import("ajv/dist/core.js").AnyValidateFunc
             } | undefined;
             name: string;
             id: string;
-            contextWindow: number;
             maxTokens: number;
+            contextWindow: number;
         }[] | undefined;
+        apiKey?: string | undefined;
         enabled?: boolean | undefined;
         headers?: {
             [x: string]: string;
         } | undefined;
+        baseUrl?: string | undefined;
         options?: {
             [x: string]: unknown;
         } | undefined;
-        apiKey?: string | undefined;
         api?: "openai-completions" | "openai-responses" | "openai-codex-responses" | "openai-codex-app-server" | "anthropic-messages" | "google-generative-ai" | "google-gemini-cli" | "bedrock-converse" | "vertex-ai" | "scripted-replay" | undefined;
-        baseUrl?: string | undefined;
         apiKeyEnv?: string | undefined;
         name: string;
         id: string;

package/dist/models/config-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../../src/models/config-loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,KAAK,CAAC;AAgBvC,OAAO,EACN,KAAK,0BAA0B,EAG/B,MAAM,iBAAiB,CAAC;AA6BzB;;GAEG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkCtB,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWzB,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAavB,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAqC,CAAC;AAElE,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,YAAY,CAAC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;AAC3D,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,WAAW,CAAC,CAAC;AAErD,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEtE,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;CACjB;AAkBD,UAAU,oBAAoB;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,KAAK,cAAc,GAAG,CAAC,UAAU,EAAE,MAAM,KAAK,oBAAoB,GAAG,IAAI,CAAC;AAE1E,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAoC3D,CAAC;AAMF,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CA4D7D;AAyDD,wBAAgB,YAAY,CAC3B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAKpC;AAMD,wBAAgB,sBAAsB,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,IAAI,GAAG,MAAM,CAS5E;AAMD,yCAAyC;AACzC,eAAO,MAAM,aAAa;aAEd,MAAM;UAAQ,MAAM;EAC7B,CAAC;AAEJ,2BAA2B;AAC3B,eAAO,IAAI,YAAY,EAAE,iBAAiB,GAAG,IAAW,CAAC;AAGzD,wBAAgB,iBAAiB,IAAI,IAAI,CAIxC;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAG/D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,eAAe,EAAE,CAwDxD;AAED,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAEzC;AAED,wBAAgB,UAAU,IAAI,MAAM,CAKnC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CA8B5E;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAc5D;AAyCD,wBAAgB,cAAc,CAC7B,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,GACtC,iBAAiB,GAAG,IAAI,CAE1B;AAED,wBAAgB,8BAA8B,CAC7C,IAAI,EAAE,MAAM,GACV,iBAAiB,GAAG,IAAI,CAmB1B;AAED,wBAAgB,8BAA8B,CAC7C,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,MAAM,GACV,iBAAiB,CAuBnB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAClC,QAAQ,EAAE,cAAc,EACxB,OAAO,CAAC,EAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GACrC,cAAc,GAAG,IAAI,CAoCvB;AAED;;GAEG;AACH,wBAAgB,UAAU,CACzB,eAAe,UAAQ,EACvB,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,0BAA0B,KAAK;IACvD,MAAM,EAAE,iBAAiB,CAAC;IAC1B,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC,GAAG,IAAI,EACR,OAAO,CAAC,EAAE;IACT,YAAY,CAAC,EAAE,OAAO,CAAC;CACvB,GACC,iBAAiB,CAsEnB;AAED,wBAAgB,mCAAmC,IAAI,0BAA0B,CAWhF"}
+{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../../src/models/config-loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,KAAK,CAAC;AAiBvC,OAAO,EACN,KAAK,0BAA0B,EAG/B,MAAM,iBAAiB,CAAC;AA6BzB;;GAEG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkCtB,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWzB,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAavB,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAqC,CAAC;AAElE,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,YAAY,CAAC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;AAC3D,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,WAAW,CAAC,CAAC;AAErD,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEtE,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;CACjB;AAcD,UAAU,oBAAoB;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,KAAK,cAAc,GAAG,CAAC,UAAU,EAAE,MAAM,KAAK,oBAAoB,GAAG,IAAI,CAAC;AAE1E,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAoC3D,CAAC;AAMF,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CA4D7D;AAyDD,wBAAgB,YAAY,CAC3B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAKpC;AAMD,wBAAgB,sBAAsB,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,IAAI,GAAG,MAAM,CAS5E;AAMD,yCAAyC;AACzC,eAAO,MAAM,aAAa;aAEd,MAAM;UAAQ,MAAM;EAC7B,CAAC;AAEJ,2BAA2B;AAC3B,eAAO,IAAI,YAAY,EAAE,iBAAiB,GAAG,IAAW,CAAC;AAGzD,wBAAgB,iBAAiB,IAAI,IAAI,CAIxC;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAG/D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,eAAe,EAAE,CAwDxD;AAED,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAEzC;AAED,wBAAgB,UAAU,IAAI,MAAM,CAKnC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CA8B5E;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAc5D;AAyCD,wBAAgB,cAAc,CAC7B,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,GACtC,iBAAiB,GAAG,IAAI,CAE1B;AAED,wBAAgB,8BAA8B,CAC7C,IAAI,EAAE,MAAM,GACV,iBAAiB,GAAG,IAAI,CAmB1B;AAED,wBAAgB,8BAA8B,CAC7C,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,MAAM,GACV,iBAAiB,CAuBnB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAClC,QAAQ,EAAE,cAAc,EACxB,OAAO,CAAC,EAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GACrC,cAAc,GAAG,IAAI,CAoCvB;AAED;;GAEG;AACH,wBAAgB,UAAU,CACzB,eAAe,UAAQ,EACvB,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,0BAA0B,KAAK;IACvD,MAAM,EAAE,iBAAiB,CAAC;IAC1B,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC,GAAG,IAAI,EACR,OAAO,CAAC,EAAE;IACT,YAAY,CAAC,EAAE,OAAO,CAAC;CACvB,GACC,iBAAiB,CAsEnB;AAED,wBAAgB,mCAAmC,IAAI,0BAA0B,CAWhF"}

package/dist/models/config-loader.js

@@ -8,6 +8,7 @@ import { Type } from "@sinclair/typebox";
 import { PATHS } from "../config/constants.js";
 import { hasAwsCredentials } from "../providers/aws-auth.js";
 import { substituteEnvVars, substituteFileRefs, } from "../utils/config-substitution.js";
+import { isRecord } from "../utils/json.js";
 import { parseJsonc, printParseErrorCode, } from "../utils/jsonc-umd.js";
 import { createLogger } from "../utils/logger.js";
 import { resolveEnvPath } from "../utils/path-expansion.js";
@@ -90,9 +91,6 @@ export const configSchema = Type.Object({
 export const configValidator = compileTypeboxSchema(configSchema);
 const TRUST_PROJECT_MODEL_CONFIG_ENV = "MAESTRO_TRUST_PROJECT_MODEL_CONFIG";
 const TRUE_ENV_VALUES = new Set(["1", "true", "yes", "on"]);
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function isProjectModelConfigTrusted() {
     const value = process.env[TRUST_PROJECT_MODEL_CONFIG_ENV];
     return value !== undefined && TRUE_ENV_VALUES.has(value.toLowerCase());