@getmarrow/mcp 3.9.88 → 3.9.89

package/dist/session-loop-guard.js

@@ -0,0 +1,414 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UnsafeLoopGuardStateError = void 0;
+exports.consultSessionLoopGuard = consultSessionLoopGuard;
+exports.recordSessionLoopOutcome = recordSessionLoopOutcome;
+exports.advanceSessionInstructionEpoch = advanceSessionInstructionEpoch;
+exports.clearSessionLoopGuard = clearSessionLoopGuard;
+exports.sessionLoopGuardPath = sessionLoopGuardPath;
+exports.sessionLoopGuardEnabled = sessionLoopGuardEnabled;
+exports.runSessionLoopGuardSelfTest = runSessionLoopGuardSelfTest;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const hook_tool_policy_1 = require("./hook-tool-policy");
+const STATE_VERSION = 1;
+const STATE_DIRECTORY = 'session-loop-guard';
+const STATE_FILENAME = 'state.json';
+const STATE_MAX_BYTES = 256 * 1024;
+const STATE_TTL_MS = 24 * 60 * 60 * 1000;
+const MAX_SESSIONS = 64;
+const MAX_ENTRIES_PER_SESSION = 256;
+class UnsafeLoopGuardStateError extends Error {
+    constructor() {
+        super('Local Marrow session loop-guard state is unsafe or invalid. Repair ~/.marrow/session-loop-guard before retrying.');
+        this.name = 'UnsafeLoopGuardStateError';
+    }
+}
+exports.UnsafeLoopGuardStateError = UnsafeLoopGuardStateError;
+function unsafe() { throw new UnsafeLoopGuardStateError(); }
+function uid() {
+    return typeof process.getuid === 'function' ? process.getuid() : null;
+}
+function owned(stat) {
+    const current = uid();
+    return current == null || stat.uid === current;
+}
+function exactPrivate(stat, mode) {
+    return owned(stat) && !stat.isSymbolicLink() && (stat.mode & 0o777) === mode;
+}
+function canonical(value, depth = 0) {
+    if (depth > 8)
+        return '[depth]';
+    if (value === null || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'number')
+        return Number.isFinite(value) ? value : String(value);
+    if (typeof value === 'string')
+        return value.slice(0, 16_384);
+    if (Array.isArray(value))
+        return value.slice(0, 128).map((item) => canonical(item, depth + 1));
+    if (value && typeof value === 'object') {
+        const source = value;
+        return Object.fromEntries(Object.keys(source).sort().slice(0, 128).map((key) => [key.slice(0, 128), canonical(source[key], depth + 1)]));
+    }
+    return String(value).slice(0, 256);
+}
+function keyedHash(secret, value) {
+    return (0, node_crypto_1.createHmac)('sha256', Buffer.from(secret, 'base64url'))
+        .update(JSON.stringify(canonical(value)))
+        .digest('hex');
+}
+function paths(home = (0, node_os_1.homedir)()) {
+    const marrow = (0, node_path_1.join)(home, '.marrow');
+    const directory = (0, node_path_1.join)(marrow, STATE_DIRECTORY);
+    return { marrow, directory, target: (0, node_path_1.join)(directory, STATE_FILENAME) };
+}
+function ensureDirectories(home = (0, node_os_1.homedir)()) {
+    const result = paths(home);
+    if (!(0, node_fs_1.existsSync)(result.marrow))
+        (0, node_fs_1.mkdirSync)(result.marrow, { mode: 0o700 });
+    const marrowStat = (0, node_fs_1.lstatSync)(result.marrow);
+    if (!marrowStat.isDirectory() || marrowStat.isSymbolicLink() || !owned(marrowStat) || (marrowStat.mode & 0o022) !== 0)
+        unsafe();
+    if (!(0, node_fs_1.existsSync)(result.directory))
+        (0, node_fs_1.mkdirSync)(result.directory, { mode: 0o700 });
+    const directoryStat = (0, node_fs_1.lstatSync)(result.directory);
+    if (!directoryStat.isDirectory() || !exactPrivate(directoryStat, 0o700))
+        unsafe();
+    return result;
+}
+function withStateLock(home, callback) {
+    const { directory } = ensureDirectories(home);
+    const lock = (0, node_path_1.join)(directory, '.state.lock');
+    let fd = -1;
+    for (let attempt = 0; attempt < 40; attempt += 1) {
+        try {
+            fd = (0, node_fs_1.openSync)(lock, node_fs_1.constants.O_WRONLY | node_fs_1.constants.O_CREAT | node_fs_1.constants.O_EXCL | (node_fs_1.constants.O_NOFOLLOW || 0), 0o600);
+            const opened = (0, node_fs_1.fstatSync)(fd);
+            if (!opened.isFile() || !exactPrivate(opened, 0o600))
+                return unsafe();
+            break;
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                return unsafe();
+            const stat = (0, node_fs_1.lstatSync)(lock);
+            if (!stat.isFile() || !exactPrivate(stat, 0o600))
+                return unsafe();
+            if (Date.now() - stat.mtimeMs > 30_000) {
+                (0, node_fs_1.unlinkSync)(lock);
+                continue;
+            }
+            Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 5);
+        }
+    }
+    if (fd < 0)
+        return unsafe();
+    try {
+        return callback();
+    }
+    finally {
+        (0, node_fs_1.closeSync)(fd);
+        try {
+            (0, node_fs_1.unlinkSync)(lock);
+        }
+        catch { /* a stopped process leaves a bounded stale lock */ }
+    }
+}
+function emptyState() {
+    return { version: STATE_VERSION, secret: (0, node_crypto_1.randomBytes)(32).toString('base64url'), sessions: {} };
+}
+function validEntry(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const entry = value;
+    return /^[a-f0-9]{64}$/.test(entry.fingerprint)
+        && ['poll', 'verification', 'read', 'mutation'].includes(entry.kind)
+        && (entry.outcome === null || entry.outcome === 'success' || entry.outcome === 'failure')
+        && (entry.result_hash === null || /^[a-f0-9]{64}$/.test(entry.result_hash))
+        && Number.isSafeInteger(entry.unchanged_count) && entry.unchanged_count >= 0 && entry.unchanged_count <= 1_000_000
+        && Number.isSafeInteger(entry.attempts) && entry.attempts >= 0 && entry.attempts <= 1_000_000
+        && Number.isSafeInteger(entry.updated_at) && entry.updated_at > 0
+        && /^lgr_[a-f0-9]{24}$/.test(entry.receipt);
+}
+function validateState(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return unsafe();
+    const state = value;
+    if (state.version !== STATE_VERSION || !/^[A-Za-z0-9_-]{43}$/.test(state.secret) || !state.sessions || typeof state.sessions !== 'object' || Array.isArray(state.sessions))
+        unsafe();
+    const sessions = Object.entries(state.sessions);
+    if (sessions.length > MAX_SESSIONS || sessions.some(([key]) => !/^[a-f0-9]{64}$/.test(key)))
+        unsafe();
+    for (const [, session] of sessions) {
+        if (!session || typeof session !== 'object' || Array.isArray(session)
+            || !Number.isSafeInteger(session.work_epoch) || session.work_epoch < 0
+            || !Number.isSafeInteger(session.instruction_epoch) || session.instruction_epoch < 0
+            || !Number.isSafeInteger(session.updated_at) || session.updated_at <= 0
+            || !session.entries || typeof session.entries !== 'object' || Array.isArray(session.entries)
+            || !session.invocations || typeof session.invocations !== 'object' || Array.isArray(session.invocations)
+            || Object.keys(session.invocations).length > MAX_ENTRIES_PER_SESSION
+            || Object.entries(session.invocations).some(([key, fingerprint]) => !/^[a-f0-9]{64}$/.test(key) || !/^[a-f0-9]{64}$/.test(fingerprint))
+            || Object.keys(session.entries).length > MAX_ENTRIES_PER_SESSION
+            || Object.entries(session.entries).some(([key, entry]) => !/^[a-f0-9]{64}$/.test(key) || !validEntry(entry)))
+            unsafe();
+    }
+    return state;
+}
+function readState(home = (0, node_os_1.homedir)()) {
+    const { target, directory } = ensureDirectories(home);
+    if (!(0, node_fs_1.existsSync)(target))
+        return { state: emptyState(), target, directory };
+    const stat = (0, node_fs_1.lstatSync)(target);
+    if (!stat.isFile() || !exactPrivate(stat, 0o600) || stat.size < 2 || stat.size > STATE_MAX_BYTES)
+        return unsafe();
+    let fd = -1;
+    try {
+        fd = (0, node_fs_1.openSync)(target, node_fs_1.constants.O_RDONLY | (node_fs_1.constants.O_NOFOLLOW || 0));
+        const opened = (0, node_fs_1.fstatSync)(fd);
+        if (!opened.isFile() || opened.ino !== stat.ino || !exactPrivate(opened, 0o600))
+            return unsafe();
+        const raw = (0, node_fs_1.readFileSync)(fd, 'utf8');
+        if (Buffer.byteLength(raw) > STATE_MAX_BYTES)
+            return unsafe();
+        return { state: validateState(JSON.parse(raw)), target, directory };
+    }
+    catch (error) {
+        if (error instanceof UnsafeLoopGuardStateError)
+            throw error;
+        return unsafe();
+    }
+    finally {
+        if (fd >= 0)
+            (0, node_fs_1.closeSync)(fd);
+    }
+}
+function prune(state, now) {
+    for (const [sessionKey, session] of Object.entries(state.sessions)) {
+        if (now - session.updated_at > STATE_TTL_MS)
+            delete state.sessions[sessionKey];
+        else
+            for (const [key, entry] of Object.entries(session.entries)) {
+                if (now - entry.updated_at > STATE_TTL_MS)
+                    delete session.entries[key];
+            }
+    }
+    const sessions = Object.entries(state.sessions).sort((a, b) => b[1].updated_at - a[1].updated_at);
+    for (const [key] of sessions.slice(MAX_SESSIONS))
+        delete state.sessions[key];
+    for (const session of Object.values(state.sessions)) {
+        const entries = Object.entries(session.entries).sort((a, b) => b[1].updated_at - a[1].updated_at);
+        for (const [key] of entries.slice(MAX_ENTRIES_PER_SESSION))
+            delete session.entries[key];
+        const liveFingerprints = new Set(Object.keys(session.entries));
+        for (const [key, fingerprint] of Object.entries(session.invocations)) {
+            if (!liveFingerprints.has(fingerprint))
+                delete session.invocations[key];
+        }
+        for (const key of Object.keys(session.invocations).slice(0, Math.max(0, Object.keys(session.invocations).length - MAX_ENTRIES_PER_SESSION))) {
+            delete session.invocations[key];
+        }
+    }
+}
+function writeState(state, target, directory) {
+    prune(state, Date.now());
+    const raw = `${JSON.stringify(state)}\n`;
+    if (Buffer.byteLength(raw) > STATE_MAX_BYTES)
+        unsafe();
+    const temporary = (0, node_path_1.join)(directory, `.state-${process.pid}-${(0, node_crypto_1.randomBytes)(8).toString('hex')}.tmp`);
+    let fd = -1;
+    try {
+        fd = (0, node_fs_1.openSync)(temporary, node_fs_1.constants.O_WRONLY | node_fs_1.constants.O_CREAT | node_fs_1.constants.O_EXCL | (node_fs_1.constants.O_NOFOLLOW || 0), 0o600);
+        (0, node_fs_1.writeFileSync)(fd, raw, 'utf8');
+        (0, node_fs_1.closeSync)(fd);
+        fd = -1;
+        (0, node_fs_1.renameSync)(temporary, target);
+    }
+    finally {
+        if (fd >= 0)
+            (0, node_fs_1.closeSync)(fd);
+        try {
+            if ((0, node_fs_1.existsSync)(temporary))
+                (0, node_fs_1.unlinkSync)(temporary);
+        }
+        catch { /* best effort cleanup */ }
+    }
+}
+function sessionKey(state, operation) {
+    return keyedHash(state.secret, ['session', operation.sessionId || 'workspace-session', operation.agentId || 'credential-agent', operation.harness]);
+}
+function getSession(state, operation, now) {
+    const key = sessionKey(state, operation);
+    const existing = state.sessions[key];
+    if (existing)
+        return existing;
+    const session = { work_epoch: 0, instruction_epoch: 0, updated_at: now, entries: {}, invocations: {} };
+    state.sessions[key] = session;
+    return session;
+}
+function operationKind(operation) {
+    if (!operation.readOnly)
+        return 'mutation';
+    const tool = (0, hook_tool_policy_1.normalizeHookToolName)(operation.toolName);
+    const command = (0, hook_tool_policy_1.hookToolCommand)({ tool_name: operation.toolName, tool_input: operation.toolInput }).toLowerCase();
+    if (/(?:^|[_:.-])(?:status|poll|wait|watch|health)(?:$|[_:.-])/.test(tool)
+        || /\b(?:status|poll|health|wait|watch)\b/.test(command))
+        return 'poll';
+    if (/(?:^|[_:.-])(?:test|check|audit|verify|lint|typecheck)(?:$|[_:.-])/.test(tool)
+        || /\b(?:test|check|audit|verify|lint|typecheck)\b/.test(command))
+        return 'verification';
+    return 'read';
+}
+function operationIdentity(state, session, operation) {
+    return keyedHash(state.secret, [
+        'operation',
+        operation.harness,
+        operation.agentId || 'credential-agent',
+        (0, hook_tool_policy_1.normalizeHookToolName)(operation.toolName) || 'tool',
+        canonical(operation.toolInput ?? null),
+        session.work_epoch,
+        session.instruction_epoch,
+    ]);
+}
+function denial(entry) {
+    const result = entry.outcome === 'success' ? 'passed' : 'failed';
+    return `Marrow local loop guard: this operation already ${result} with an unchanged result. Reuse the recorded result instead of repeating it. Receipt: ${entry.receipt}.`;
+}
+function consultSessionLoopGuard(operation, options = {}) {
+    return withStateLock(options.home, () => {
+        const now = options.now ?? Date.now();
+        const loaded = readState(options.home);
+        const session = getSession(loaded.state, operation, now);
+        const fingerprint = operationIdentity(loaded.state, session, operation);
+        const kind = operationKind(operation);
+        const existing = session.entries[fingerprint];
+        if (existing) {
+            const threshold = existing.kind === 'poll' || existing.outcome === 'failure' ? 2 : 1;
+            if (existing.outcome && existing.unchanged_count >= threshold) {
+                return { allow: false, receipt: existing.receipt, reason: denial(existing), fingerprint };
+            }
+            existing.attempts += 1;
+            existing.updated_at = now;
+        }
+        else {
+            const receipt = `lgr_${keyedHash(loaded.state.secret, ['receipt', fingerprint]).slice(0, 24)}`;
+            session.entries[fingerprint] = {
+                fingerprint,
+                kind,
+                outcome: null,
+                result_hash: null,
+                unchanged_count: 0,
+                attempts: 1,
+                updated_at: now,
+                receipt,
+            };
+        }
+        session.updated_at = now;
+        if (operation.invocationId) {
+            session.invocations[keyedHash(loaded.state.secret, ['invocation', operation.invocationId])] = fingerprint;
+        }
+        writeState(loaded.state, loaded.target, loaded.directory);
+        return { allow: true, receipt: session.entries[fingerprint].receipt, fingerprint };
+    });
+}
+function recordSessionLoopOutcome(operation, success, result, options = {}) {
+    withStateLock(options.home, () => {
+        const now = options.now ?? Date.now();
+        const loaded = readState(options.home);
+        const session = getSession(loaded.state, operation, now);
+        const invocationKey = operation.invocationId
+            ? keyedHash(loaded.state.secret, ['invocation', operation.invocationId])
+            : null;
+        const fingerprint = invocationKey && session.invocations[invocationKey]
+            ? session.invocations[invocationKey]
+            : operationIdentity(loaded.state, session, operation);
+        const entry = session.entries[fingerprint];
+        if (!entry)
+            return;
+        const outcome = success ? 'success' : 'failure';
+        const resultHash = keyedHash(loaded.state.secret, ['result', canonical(result ?? null)]);
+        entry.unchanged_count = entry.outcome === outcome && entry.result_hash === resultHash
+            ? entry.unchanged_count + 1
+            : 1;
+        entry.outcome = outcome;
+        entry.result_hash = resultHash;
+        entry.updated_at = now;
+        session.updated_at = now;
+        if (!operation.readOnly && success) {
+            session.work_epoch += 1;
+            session.entries = {};
+            session.invocations = {};
+        }
+        writeState(loaded.state, loaded.target, loaded.directory);
+    });
+}
+function advanceSessionInstructionEpoch(operation, options = {}) {
+    withStateLock(options.home, () => {
+        const now = options.now ?? Date.now();
+        const loaded = readState(options.home);
+        const session = getSession(loaded.state, operation, now);
+        session.instruction_epoch += 1;
+        session.entries = {};
+        session.invocations = {};
+        session.updated_at = now;
+        writeState(loaded.state, loaded.target, loaded.directory);
+    });
+}
+function clearSessionLoopGuard(operation, options = {}) {
+    withStateLock(options.home, () => {
+        const loaded = readState(options.home);
+        delete loaded.state.sessions[sessionKey(loaded.state, operation)];
+        writeState(loaded.state, loaded.target, loaded.directory);
+    });
+}
+function sessionLoopGuardPath(home = (0, node_os_1.homedir)()) {
+    return paths(home).target;
+}
+function sessionLoopGuardEnabled(autoHook, localControlEnabled) {
+    return autoHook !== 'false' && localControlEnabled;
+}
+function runSessionLoopGuardSelfTest() {
+    const root = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'marrow-loop-guard-self-test-'));
+    const operation = {
+        sessionId: 'self-test-session',
+        agentId: 'self-test-agent',
+        harness: 'self-test',
+        toolName: 'Bash',
+        toolInput: { command: 'npm test' },
+        readOnly: true,
+    };
+    try {
+        const first = consultSessionLoopGuard(operation, { home: root });
+        recordSessionLoopOutcome(operation, true, { status: 'passed' }, { home: root });
+        const repeat = consultSessionLoopGuard(operation, { home: root });
+        if (!first.allow || repeat.allow)
+            throw new Error('repeat denial was not enforced');
+        const mutation = {
+            ...operation,
+            toolName: 'Edit',
+            toolInput: { patch_hash: 'self-test' },
+            readOnly: false,
+        };
+        if (!consultSessionLoopGuard(mutation, { home: root }).allow)
+            throw new Error('mutation was unexpectedly denied');
+        recordSessionLoopOutcome(mutation, true, { changed: true }, { home: root });
+        if (!consultSessionLoopGuard(operation, { home: root }).allow)
+            throw new Error('mutation did not advance the work epoch');
+        if (sessionLoopGuardEnabled('true', false))
+            throw new Error('owner-disabled loop guard did not bypass');
+        return {
+            pass: true,
+            isolated: true,
+            live_hook_observed: false,
+            repeat_denied: true,
+            mutation_reset: true,
+            owner_disabled_bypass: true,
+        };
+    }
+    finally {
+        (0, node_fs_1.rmSync)(root, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=session-loop-guard.js.map

package/dist/session-loop-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-loop-guard.js","sourceRoot":"","sources":["../src/session-loop-guard.ts"],"names":[],"mappings":";;;AA8SA,0DAmCC;AAED,4DAkCC;AAED,wEAcC;AAED,sDASC;AAED,oDAEC;AAED,0DAEC;AAED,kEA2CC;AArcD,6CAAsD;AACtD,qCAeiB;AACjB,qCAA0C;AAC1C,yCAAiC;AACjC,yDAA4E;AAE5E,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAC7C,MAAM,cAAc,GAAG,YAAY,CAAC;AACpC,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,CAAC;AACnC,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,uBAAuB,GAAG,GAAG,CAAC;AA+CpC,MAAa,yBAA0B,SAAQ,KAAK;IAClD;QACE,KAAK,CAAC,kHAAkH,CAAC,CAAC;QAC1H,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AALD,8DAKC;AAED,SAAS,MAAM,KAAY,MAAM,IAAI,yBAAyB,EAAE,CAAC,CAAC,CAAC;AAEnE,SAAS,GAAG;IACV,OAAO,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,SAAS,KAAK,CAAC,IAAW;IACxB,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;IACtB,OAAO,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,IAAW,EAAE,IAAY;IAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC;AAC/E,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC1C,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/F,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3I,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,KAAc;IAC/C,OAAO,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;SAC1D,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;SACxC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,KAAK,CAAC,IAAI,GAAG,IAAA,iBAAO,GAAE;IAC7B,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAA,gBAAI,EAAC,SAAS,EAAE,cAAc,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAI,GAAG,IAAA,iBAAO,GAAE;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAA,oBAAU,EAAC,MAAM,CAAC,MAAM,CAAC;QAAE,IAAA,mBAAS,EAAC,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,IAAA,mBAAS,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,EAAE,CAAC;IAChI,IAAI,CAAC,IAAA,oBAAU,EAAC,MAAM,CAAC,SAAS,CAAC;QAAE,IAAA,mBAAS,EAAC,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,MAAM,aAAa,GAAG,IAAA,mBAAS,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,CAAC;IAClF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAI,IAAwB,EAAE,QAAiB;IACnE,MAAM,EAAE,SAAS,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAC5C,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACZ,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,EAAE,GAAG,IAAA,kBAAQ,EAAC,IAAI,EAAE,mBAAS,CAAC,QAAQ,GAAG,mBAAS,CAAC,OAAO,GAAG,mBAAS,CAAC,MAAM,GAAG,CAAC,mBAAS,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACpH,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;gBAAE,OAAO,MAAM,EAAE,CAAC;YACtE,MAAM;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,MAAM,EAAE,CAAC;YACxE,MAAM,IAAI,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC;gBAAE,OAAO,MAAM,EAAE,CAAC;YAClE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC;gBACvC,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,MAAM,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;QACd,IAAI,CAAC;YAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,mDAAmD,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACjG,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,KAAK,GAAG,KAAkB,CAAC;IACjC,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;WAC1C,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;WACjE,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;WACtF,CAAC,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;WACxE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,IAAI,KAAK,CAAC,eAAe,IAAI,SAAS;WAC/G,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,SAAS;WAC1F,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC;WAC9D,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,EAAE,CAAC;IACjF,MAAM,KAAK,GAAG,KAAmB,CAAC;IAClC,IAAI,KAAK,CAAC,OAAO,KAAK,aAAa,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,MAAM,EAAE,CAAC;IACrL,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,MAAM,GAAG,YAAY,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,EAAE,CAAC;IACtG,KAAK,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;eAChE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC;eACnE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,iBAAiB,GAAG,CAAC;eACjF,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC;eACpE,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;eACzF,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;eACrG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,uBAAuB;eACjE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;eACpI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,uBAAuB;eAC7D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,EAAE,CAAC;IAC3H,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,IAAI,GAAG,IAAA,iBAAO,GAAE;IACjC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,IAAA,oBAAU,EAAC,MAAM,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC3E,MAAM,IAAI,GAAG,IAAA,mBAAS,EAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,eAAe;QAAE,OAAO,MAAM,EAAE,CAAC;IAClH,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACZ,IAAI,CAAC;QACH,EAAE,GAAG,IAAA,kBAAQ,EAAC,MAAM,EAAE,mBAAS,CAAC,QAAQ,GAAG,CAAC,mBAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,MAAM,EAAE,CAAC;QACjG,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,eAAe;YAAE,OAAO,MAAM,EAAE,CAAC;QAC9D,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,yBAAyB;YAAE,MAAM,KAAK,CAAC;QAC5D,OAAO,MAAM,EAAE,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,IAAI,CAAC;YAAE,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,KAAiB,EAAE,GAAW;IAC3C,KAAK,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,IAAI,GAAG,GAAG,OAAO,CAAC,UAAU,GAAG,YAAY;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;;YAC1E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChE,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,GAAG,YAAY;oBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzE,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAClG,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7E,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAClG,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,OAAO,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,uBAAuB,CAAC,CAAC,EAAE,CAAC;YAC5I,OAAO,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB,EAAE,MAAc,EAAE,SAAiB;IACtE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;IACzC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,eAAe;QAAE,MAAM,EAAE,CAAC;IACvD,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,UAAU,OAAO,CAAC,GAAG,IAAI,IAAA,yBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACZ,IAAI,CAAC;QACH,EAAE,GAAG,IAAA,kBAAQ,EAAC,SAAS,EAAE,mBAAS,CAAC,QAAQ,GAAG,mBAAS,CAAC,OAAO,GAAG,mBAAS,CAAC,MAAM,GAAG,CAAC,mBAAS,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACzH,IAAA,uBAAa,EAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/B,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;QACd,EAAE,GAAG,CAAC,CAAC,CAAC;QACR,IAAA,oBAAU,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,IAAI,CAAC;YAAE,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC;YAAC,IAAI,IAAA,oBAAU,EAAC,SAAS,CAAC;gBAAE,IAAA,oBAAU,EAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB,EAAE,SAAwE;IAC7G,OAAO,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,mBAAmB,EAAE,SAAS,CAAC,OAAO,IAAI,kBAAkB,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACtJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB,EAAE,SAAwE,EAAE,GAAW;IAC1H,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAiB,EAAE,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACrH,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IAC9B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,SAA6B;IAClD,IAAI,CAAC,SAAS,CAAC,QAAQ;QAAE,OAAO,UAAU,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAA,wCAAqB,EAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAA,kCAAe,EAAC,EAAE,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAClH,IAAI,2DAA2D,CAAC,IAAI,CAAC,IAAI,CAAC;WACrE,uCAAuC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1E,IAAI,oEAAoE,CAAC,IAAI,CAAC,IAAI,CAAC;WAC9E,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,cAAc,CAAC;IAC3F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAiB,EAAE,OAAqB,EAAE,SAA6B;IAChG,OAAO,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE;QAC7B,WAAW;QACX,SAAS,CAAC,OAAO;QACjB,SAAS,CAAC,OAAO,IAAI,kBAAkB;QACvC,IAAA,wCAAqB,EAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM;QACnD,SAAS,CAAC,SAAS,CAAC,SAAS,IAAI,IAAI,CAAC;QACtC,OAAO,CAAC,UAAU;QAClB,OAAO,CAAC,iBAAiB;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,KAAgB;IAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjE,OAAO,mDAAmD,MAAM,0FAA0F,KAAK,CAAC,OAAO,GAAG,CAAC;AAC7K,CAAC;AAED,SAAgB,uBAAuB,CAAC,SAA6B,EAAE,UAA2C,EAAE;IAClH,OAAO,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE;QACtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrF,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,eAAe,IAAI,SAAS,EAAE,CAAC;gBAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;YAC5F,CAAC;YACD,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC;YACvB,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAC/F,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG;gBAC7B,WAAW;gBACX,IAAI;gBACJ,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,IAAI;gBACjB,eAAe,EAAE,CAAC;gBAClB,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,GAAG;gBACf,OAAO;aACR,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC;QACzB,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;YAC3B,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC;QAC5G,CAAC;QACD,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,wBAAwB,CACtC,SAA6B,EAC7B,OAAgB,EAChB,MAAe,EACf,UAA2C,EAAE;IAE7C,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,aAAa,GAAG,SAAS,CAAC,YAAY;YAC1C,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;YACxE,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,WAAW,GAAG,aAAa,IAAI,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC;YACrE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC;YACpC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,OAAO,GAAgB,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;QACzF,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU;YACnF,CAAC,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC;YAC3B,CAAC,CAAC,CAAC,CAAC;QACN,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QACxB,KAAK,CAAC,WAAW,GAAG,UAAU,CAAC;QAC/B,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;QACvB,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC;YACnC,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;YACxB,OAAO,CAAC,OAAO,GAAG,EAAE,CAAC;YACrB,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,8BAA8B,CAC5C,SAAwE,EACxE,UAA2C,EAAE;IAE7C,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACzD,OAAO,CAAC,iBAAiB,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,OAAO,GAAG,EAAE,CAAC;QACrB,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC;QACzB,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC;QACzB,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,qBAAqB,CACnC,SAAwE,EACxE,UAA6B,EAAE;IAE/B,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE;QAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QAClE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,oBAAoB,CAAC,IAAI,GAAG,IAAA,iBAAO,GAAE;IACnD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AAC5B,CAAC;AAED,SAAgB,uBAAuB,CAAC,QAAiB,EAAE,mBAA4B;IACrF,OAAO,QAAQ,KAAK,OAAO,IAAI,mBAAmB,CAAC;AACrD,CAAC;AAED,SAAgB,2BAA2B;IAQzC,MAAM,IAAI,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,8BAA8B,CAAC,CAAC,CAAC;IACzE,MAAM,SAAS,GAAuB;QACpC,SAAS,EAAE,mBAAmB;QAC9B,OAAO,EAAE,iBAAiB;QAC1B,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;QAClC,QAAQ,EAAE,IAAI;KACf,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,uBAAuB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,wBAAwB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAuB;YACnC,GAAG,SAAS;YACZ,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE;YACtC,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAClH,wBAAwB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC1H,IAAI,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACxG,OAAO;YACL,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,KAAK;YACzB,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,IAAI;YACpB,qBAAqB,EAAE,IAAI;SAC5B,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAA,gBAAM,EAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getmarrow/mcp",
-  "version": "3.9.88",
+  "version": "3.9.89",
   "mcpName": "io.github.getmarrow/marrow",
   "description": "Runtime control, proof, and fleet intelligence for MCP-compatible AI agents.",
   "bin": {
@@ -53,6 +53,7 @@
     "category": "agent_fleet_governance_and_control_layer",
     "positioning": "agent_fleet_governance_and_control_layer",
     "role": "mcp-runtime-control-and-proof-server",
+    "localSessionLoopGuard": "default-enabled for supported native hooks; private hashed state; explicit owner opt-out",
     "operatorApprovalRequired": true,
     "privacy": "No raw prompts, source code, credentials, or customer data are accepted by public discovery.",
     "governanceFit": "https://getmarrow.ai/.well-known/marrow.json",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/getmarrow/marrow-mcp",
     "source": "github"
   },
-  "version": "3.9.88",
+  "version": "3.9.89",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@getmarrow/mcp",
-      "version": "3.9.88",
+      "version": "3.9.89",
       "transport": {
         "type": "stdio"
       },