@graphpilot-oss/graphpilot 0.0.1

package/dist/storage.d.ts

@@ -0,0 +1,42 @@
+import type { SymbolRecord } from './symbols.js';
+import type { CallEdge } from './edges.js';
+export interface Graph {
+    version: 1;
+    repoId: string;
+    rootPath: string;
+    indexedAt: string;
+    filesIndexed: number;
+    symbolCount: number;
+    edgeCount: number;
+    symbols: SymbolRecord[];
+    edges: CallEdge[];
+    /**
+     * Optional git provenance — set when the indexed root lives inside a
+     * git worktree. Both fields may be null even within a git repo (e.g.
+     * detached HEAD has no branch; an empty repo has no SHA). Older
+     * graph.json files written before the v0.1.5 pivot won't have these
+     * fields; the schema validator treats them as optional so old graphs
+     * still load.
+     */
+    indexedSha?: string | null;
+    indexedBranch?: string | null;
+}
+export declare function repoIdFor(absRootPath: string): string;
+export declare function repoDir(absRootPath: string): string;
+export declare function graphPath(absRootPath: string): string;
+export declare function saveGraph(graph: Graph): string;
+/**
+ * Load and validate a graph from disk. Returns null if the file is missing,
+ * unparseable, has a wrong schema version, or fails structural validation.
+ *
+ * T4 defence: anything from disk is untrusted. We re-parse and re-shape
+ * every field before exposing the result to query / MCP layers. String
+ * fields are sanitized (control chars stripped, lengths capped) so a
+ * crafted graph.json can't smuggle prompt-injection payloads or fake JSON
+ * Lines into tool output.
+ *
+ * Validation errors are written to stderr for diagnostics. The function
+ * never throws on bad data — it returns null so the MCP tool layer can
+ * surface "no index" cleanly.
+ */
+export declare function loadGraph(absRootPath: string): Graph | null;

package/dist/storage.js

@@ -0,0 +1,85 @@
+import { createHash } from 'node:crypto';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { mkdirSync, writeFileSync, readFileSync, existsSync, chmodSync, renameSync } from 'node:fs';
+import { validateGraph } from './graph-schema.js';
+const isWindows = process.platform === 'win32';
+export function repoIdFor(absRootPath) {
+    return createHash('sha256').update(absRootPath).digest('hex').slice(0, 16);
+}
+export function repoDir(absRootPath) {
+    return join(homedir(), '.graphpilot', repoIdFor(absRootPath));
+}
+export function graphPath(absRootPath) {
+    return join(repoDir(absRootPath), 'graph.json');
+}
+export function saveGraph(graph) {
+    const dir = repoDir(graph.rootPath);
+    // T7 defence: 0700 dir + 0600 file so other users on shared machines can't
+    // read the index. The mkdir/writeFileSync `mode` option only applies on
+    // creation, so we explicitly chmod afterwards to fix permissions on any
+    // pre-existing files (e.g. an index written before this protection landed).
+    // On Windows these modes are silently ignored, which is fine — NTFS ACLs
+    // are handled by the user profile boundary.
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    if (!isWindows)
+        chmodSync(dir, 0o700);
+    const path = graphPath(graph.rootPath);
+    // Atomic write — write to a sibling .tmp file and rename. Crash-safe:
+    // a partial write never produces a corrupt graph.json that would later
+    // fail T4's schema validator and force a full re-index. Defends watch
+    // mode (which writes many times) against ungraceful shutdowns.
+    const tmpPath = path + '.tmp';
+    writeFileSync(tmpPath, JSON.stringify(graph, null, 2), {
+        encoding: 'utf8',
+        mode: 0o600,
+    });
+    if (!isWindows)
+        chmodSync(tmpPath, 0o600);
+    renameSync(tmpPath, path);
+    return path;
+}
+/**
+ * Load and validate a graph from disk. Returns null if the file is missing,
+ * unparseable, has a wrong schema version, or fails structural validation.
+ *
+ * T4 defence: anything from disk is untrusted. We re-parse and re-shape
+ * every field before exposing the result to query / MCP layers. String
+ * fields are sanitized (control chars stripped, lengths capped) so a
+ * crafted graph.json can't smuggle prompt-injection payloads or fake JSON
+ * Lines into tool output.
+ *
+ * Validation errors are written to stderr for diagnostics. The function
+ * never throws on bad data — it returns null so the MCP tool layer can
+ * surface "no index" cleanly.
+ */
+export function loadGraph(absRootPath) {
+    const path = graphPath(absRootPath);
+    if (!existsSync(path))
+        return null;
+    let raw;
+    try {
+        raw = readFileSync(path, 'utf8');
+    }
+    catch {
+        return null;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        process.stderr.write(`[graphpilot] graph.json is not valid JSON: ${path}\n`);
+        return null;
+    }
+    const errors = [];
+    const validated = validateGraph(parsed, errors);
+    if (!validated) {
+        process.stderr.write(`[graphpilot] graph.json failed schema validation: ${path}\n` +
+            errors.map((e) => `  - ${e}`).join('\n') +
+            '\n');
+        return null;
+    }
+    return validated;
+}
+//# sourceMappingURL=storage.js.map

package/dist/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGpG,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAwB/C,MAAM,UAAU,SAAS,CAAC,WAAmB;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,WAAmB;IACzC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,WAAmB;IAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAY;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,2EAA2E;IAC3E,wEAAwE;IACxE,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,4CAA4C;IAC5C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS;QAAE,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAEvC,sEAAsE;IACtE,uEAAuE;IACvE,sEAAsE;IACtE,+DAA+D;IAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,MAAM,CAAC;IAC9B,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QACrD,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,IAAI,CAAC,SAAS;QAAE,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1C,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,SAAS,CAAC,WAAmB;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,IAAI,IAAI,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qDAAqD,IAAI,IAAI;YAC3D,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACxC,IAAI,CACP,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/symbols.d.ts

@@ -0,0 +1,20 @@
+import { type ParsedFile } from './parser.js';
+export type SymbolKind = 'function' | 'class' | 'method' | 'interface' | 'type' | 'variable' | 'enum';
+export interface SymbolRecord {
+    id: string;
+    name: string;
+    kind: SymbolKind;
+    file: string;
+    line: number;
+    column: number;
+    endLine: number;
+    signature: string;
+    exported: boolean;
+    parent?: string;
+}
+/**
+ * Extract every symbol-defining node from a parsed file.
+ * v1 covers: function decls, arrow/function-expr consts, classes, methods,
+ * interfaces, type aliases, enums.
+ */
+export declare function extractSymbols(parsed: ParsedFile): SymbolRecord[];

package/dist/symbols.js

@@ -0,0 +1,140 @@
+import { walk } from './parser.js';
+import { redactSecrets } from './redact.js';
+/**
+ * Extract every symbol-defining node from a parsed file.
+ * v1 covers: function decls, arrow/function-expr consts, classes, methods,
+ * interfaces, type aliases, enums.
+ */
+export function extractSymbols(parsed) {
+    const out = [];
+    for (const node of walk(parsed.tree.rootNode)) {
+        extractFromNode(node, parsed, out);
+    }
+    return out;
+}
+function extractFromNode(node, parsed, out) {
+    switch (node.type) {
+        case 'function_declaration':
+        case 'generator_function_declaration': {
+            const name = node.childForFieldName('name')?.text;
+            if (!name)
+                return;
+            out.push(record(node, parsed, name, 'function'));
+            return;
+        }
+        case 'class_declaration': {
+            const name = node.childForFieldName('name')?.text;
+            if (!name)
+                return;
+            out.push(record(node, parsed, name, 'class'));
+            extractClassMembers(node, parsed, name, out);
+            return;
+        }
+        case 'interface_declaration': {
+            const name = node.childForFieldName('name')?.text;
+            if (!name)
+                return;
+            out.push(record(node, parsed, name, 'interface'));
+            return;
+        }
+        case 'type_alias_declaration': {
+            const name = node.childForFieldName('name')?.text;
+            if (!name)
+                return;
+            out.push(record(node, parsed, name, 'type'));
+            return;
+        }
+        case 'enum_declaration': {
+            const name = node.childForFieldName('name')?.text;
+            if (!name)
+                return;
+            out.push(record(node, parsed, name, 'enum'));
+            return;
+        }
+        case 'variable_declarator': {
+            // Only emit if value is a function-like (matches Day-2 listFunctions logic).
+            const valueNode = node.childForFieldName('value');
+            if (!valueNode ||
+                !(valueNode.type === 'arrow_function' ||
+                    valueNode.type === 'function_expression' ||
+                    valueNode.type === 'function')) {
+                return;
+            }
+            const name = node.childForFieldName('name')?.text;
+            if (!name)
+                return;
+            out.push(record(node, parsed, name, 'variable'));
+            return;
+        }
+        default:
+            return;
+    }
+}
+function extractClassMembers(classNode, parsed, className, out) {
+    const body = classNode.childForFieldName('body');
+    if (!body)
+        return;
+    for (let i = 0; i < body.childCount; i++) {
+        const member = body.child(i);
+        if (!member)
+            continue;
+        if (member.type === 'method_definition' || member.type === 'method_signature') {
+            const name = member.childForFieldName('name')?.text;
+            if (!name)
+                continue;
+            out.push(record(member, parsed, name, 'method', className));
+        }
+    }
+}
+function record(node, parsed, name, kind, parent) {
+    const line = node.startPosition.row + 1;
+    const column = node.startPosition.column + 1;
+    const endLine = node.endPosition.row + 1;
+    const signature = oneLineSignature(node, parsed.source);
+    const exported = isExported(node);
+    const id = `${parsed.path}#${parent ? parent + '.' : ''}${name}@${line}`;
+    return {
+        id,
+        name,
+        kind,
+        file: parsed.path,
+        line,
+        column,
+        endLine,
+        signature,
+        exported,
+        parent,
+    };
+}
+/**
+ * Extract a single-line signature from the node. Takes the first line of
+ * text up to the body/value, capped at 200 chars. Secrets matching known
+ * patterns (T3 defence) are redacted before the line is returned.
+ */
+function oneLineSignature(node, source) {
+    // For variable_declarator, climb to the parent lexical/var declaration so we
+    // capture "export const foo = ..." rather than just "foo = ...".
+    let target = node;
+    if (node.type === 'variable_declarator' && node.parent) {
+        target = node.parent;
+    }
+    const raw = source.slice(target.startIndex, target.endIndex);
+    const firstLine = raw.split('\n')[0].trim();
+    const capped = firstLine.length > 200 ? firstLine.slice(0, 197) + '...' : firstLine;
+    // T3: redact known-format secrets (API keys, tokens, JWTs, PEM headers).
+    return redactSecrets(capped);
+}
+/**
+ * A node is exported if it (or an ancestor variable/lexical decl) is wrapped
+ * in an `export_statement`.
+ */
+function isExported(node) {
+    let cur = node;
+    while (cur) {
+        if (cur.type === 'export_statement')
+            return true;
+        cur = cur.parent;
+    }
+    return false;
+}
+//# sourceMappingURL=symbols.js.map

package/dist/symbols.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"symbols.js","sourceRoot":"","sources":["../src/symbols.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAmB,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAwB5C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,IAAuB,EAAE,MAAkB,EAAE,GAAmB;IACvF,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,sBAAsB,CAAC;QAC5B,KAAK,gCAAgC,CAAC,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;YAClD,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;YAClD,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9C,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;YAClD,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,KAAK,wBAAwB,CAAC,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;YAClD,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;YAClD,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC3B,6EAA6E;YAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAClD,IACE,CAAC,SAAS;gBACV,CAAC,CACC,SAAS,CAAC,IAAI,KAAK,gBAAgB;oBACnC,SAAS,CAAC,IAAI,KAAK,qBAAqB;oBACxC,SAAS,CAAC,IAAI,KAAK,UAAU,CAC9B,EACD,CAAC;gBACD,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;YAClD,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD;YACE,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,SAA4B,EAC5B,MAAkB,EAClB,SAAiB,EACjB,GAAmB;IAEnB,MAAM,IAAI,GAAG,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,MAAM,CAAC,IAAI,KAAK,mBAAmB,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;YACpD,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CACb,IAAuB,EACvB,MAAkB,EAClB,IAAY,EACZ,IAAgB,EAChB,MAAe;IAEf,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACzE,OAAO;QACL,EAAE;QACF,IAAI;QACJ,IAAI;QACJ,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI;QACJ,MAAM;QACN,OAAO;QACP,SAAS;QACT,QAAQ;QACR,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,IAAuB,EAAE,MAAc;IAC/D,6EAA6E;IAC7E,iEAAiE;IACjE,IAAI,MAAM,GAAsB,IAAI,CAAC;IACrC,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACvB,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,yEAAyE;IACzE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAuB;IACzC,IAAI,GAAG,GAA6B,IAAI,CAAC;IACzC,OAAO,GAAG,EAAE,CAAC;QACX,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB;YAAE,OAAO,IAAI,CAAC;QACjD,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/validation.d.ts

@@ -0,0 +1,9 @@
+/** Max bytes per source file we will read. Anything larger is skipped. */
+export declare const MAX_FILE_BYTES: number;
+/** Max number of files we will index in one run. Hard fail above this. */
+export declare const MAX_FILES_PER_INDEX = 50000;
+/**
+ * Returns null if the path is safe to index, or a human-readable reason string
+ * if it should be refused.
+ */
+export declare function validateRootPath(rawPath: string): string | null;

package/dist/validation.js

@@ -0,0 +1,65 @@
+import { realpathSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { resolve } from 'node:path';
+/** Max bytes per source file we will read. Anything larger is skipped. */
+export const MAX_FILE_BYTES = 5 * 1024 * 1024; // 5 MB
+/** Max number of files we will index in one run. Hard fail above this. */
+export const MAX_FILES_PER_INDEX = 50_000;
+/**
+ * System paths we refuse to index. Indexing these by accident would walk the
+ * whole machine, fill disk, and leak system files into ~/.graphpilot/.
+ *
+ * Each entry must match the *realpath* form (after `fs.realpathSync`). macOS
+ * symlinks /etc, /var, /tmp to /private/*, so we include both forms here.
+ */
+const DANGEROUS_PATHS = new Set([
+    '/',
+    '/bin',
+    '/sbin',
+    '/usr',
+    '/usr/bin',
+    '/usr/local',
+    '/etc',
+    '/var',
+    '/tmp',
+    '/private',
+    '/private/etc',
+    '/private/var',
+    '/private/tmp',
+    '/Library',
+    '/System',
+    '/Applications',
+    '/Volumes',
+    '/Users',
+    '/home',
+    'C:\\Windows',
+    'C:\\Windows\\System32',
+    'C:\\Program Files',
+    'C:\\Program Files (x86)',
+]);
+/**
+ * Returns null if the path is safe to index, or a human-readable reason string
+ * if it should be refused.
+ */
+export function validateRootPath(rawPath) {
+    const abs = resolve(rawPath);
+    let real;
+    try {
+        real = realpathSync(abs);
+    }
+    catch {
+        return `Path does not exist or is not accessible: ${abs}`;
+    }
+    // Reject any bare Windows drive root (C:\, D:\, etc.) — not just C:\
+    if (process.platform === 'win32' && /^[A-Za-z]:\\?$/.test(real)) {
+        return `Refusing to index system path: ${real}`;
+    }
+    if (DANGEROUS_PATHS.has(real)) {
+        return `Refusing to index system path: ${real}`;
+    }
+    if (real === homedir()) {
+        return `Refusing to index your home directory directly (${real}). Pass a specific project subdirectory instead.`;
+    }
+    return null;
+}
+//# sourceMappingURL=validation.js.map

package/dist/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAEtD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,GAAG;IACH,MAAM;IACN,OAAO;IACP,MAAM;IACN,UAAU;IACV,YAAY;IACZ,MAAM;IACN,MAAM;IACN,MAAM;IACN,UAAU;IACV,cAAc;IACd,cAAc;IACd,cAAc;IACd,UAAU;IACV,SAAS;IACT,eAAe;IACf,UAAU;IACV,QAAQ;IACR,OAAO;IACP,aAAa;IACb,uBAAuB;IACvB,mBAAmB;IACnB,yBAAyB;CAC1B,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE7B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,6CAA6C,GAAG,EAAE,CAAC;IAC5D,CAAC;IAED,qEAAqE;IACrE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChE,OAAO,kCAAkC,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,kCAAkC,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,EAAE,CAAC;QACvB,OAAO,mDAAmD,IAAI,kDAAkD,CAAC;IACnH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/validators.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Hand-rolled validation for MCP tool inputs. No external deps — three tools,
+ * each with a handful of fields, makes a library overkill.
+ *
+ * Every tool validator returns a tagged result:
+ *   { ok: true,  value: <typed args> }
+ *   { ok: false, error: <human-readable> }
+ *
+ * Rules (defence-in-depth — JSON schema is declared in the tool catalog
+ * too; this is the second wall):
+ *   - Reject extra unknown keys (defends against agent typos & tampering)
+ *   - Type-check every field
+ *   - Range-check numbers (limit is bounded, no NaN)
+ *   - Length-cap strings (no 10MB symbol names)
+ *   - Strict enums (no surprise direction values)
+ */
+export type Result<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    error: string;
+};
+export interface GpIndexArgs {
+    path?: string;
+}
+export declare function validateGpIndex(input: unknown): Result<GpIndexArgs>;
+export interface GpRecallArgs {
+    query: string;
+    limit?: number;
+    substring?: boolean;
+    path?: string;
+}
+export declare function validateGpRecall(input: unknown): Result<GpRecallArgs>;
+export type CallersDirection = 'callers' | 'callees';
+export interface GpCallersArgs {
+    symbol: string;
+    direction?: CallersDirection;
+    limit?: number;
+    includeUnresolved?: boolean;
+    path?: string;
+}
+export declare function validateGpCallers(input: unknown): Result<GpCallersArgs>;
+export type ToolName = 'gp_index' | 'gp_recall' | 'gp_callers' | 'gp_impact' | 'gp_stats';
+export interface GpStatsArgs {
+    path?: string;
+}
+export declare function validateGpStats(input: unknown): Result<GpStatsArgs>;
+export interface GpImpactArgs {
+    symbol: string;
+    depth?: number;
+    path?: string;
+    since?: string;
+}
+export declare function validateGpImpact(input: unknown): Result<GpImpactArgs>;

package/dist/validators.js

@@ -0,0 +1,205 @@
+/**
+ * Hand-rolled validation for MCP tool inputs. No external deps — three tools,
+ * each with a handful of fields, makes a library overkill.
+ *
+ * Every tool validator returns a tagged result:
+ *   { ok: true,  value: <typed args> }
+ *   { ok: false, error: <human-readable> }
+ *
+ * Rules (defence-in-depth — JSON schema is declared in the tool catalog
+ * too; this is the second wall):
+ *   - Reject extra unknown keys (defends against agent typos & tampering)
+ *   - Type-check every field
+ *   - Range-check numbers (limit is bounded, no NaN)
+ *   - Length-cap strings (no 10MB symbol names)
+ *   - Strict enums (no surprise direction values)
+ */
+function ok(value) {
+    return { ok: true, value };
+}
+function fail(error) {
+    return { ok: false, error };
+}
+function isPlainObject(x) {
+    return typeof x === 'object' && x !== null && !Array.isArray(x);
+}
+const MAX_STRING_LEN = 2_000;
+function pickString(obj, key, opts = {}) {
+    const raw = obj[key];
+    if (raw === undefined) {
+        if (opts.required)
+            return fail(`Missing required field: ${key}`);
+        return ok(undefined);
+    }
+    if (typeof raw !== 'string')
+        return fail(`${key} must be a string`);
+    const max = opts.max ?? MAX_STRING_LEN;
+    if (raw.length > max)
+        return fail(`${key} exceeds max length of ${max}`);
+    return ok(raw);
+}
+function pickNumber(obj, key, opts = {}) {
+    const raw = obj[key];
+    if (raw === undefined)
+        return ok(undefined);
+    if (typeof raw !== 'number' || !Number.isFinite(raw)) {
+        return fail(`${key} must be a finite number`);
+    }
+    if (opts.integer && !Number.isInteger(raw)) {
+        return fail(`${key} must be an integer`);
+    }
+    if (opts.min !== undefined && raw < opts.min) {
+        return fail(`${key} must be >= ${opts.min}`);
+    }
+    if (opts.max !== undefined && raw > opts.max) {
+        return fail(`${key} must be <= ${opts.max}`);
+    }
+    return ok(raw);
+}
+function pickBoolean(obj, key) {
+    const raw = obj[key];
+    if (raw === undefined)
+        return ok(undefined);
+    if (typeof raw !== 'boolean')
+        return fail(`${key} must be a boolean`);
+    return ok(raw);
+}
+function pickEnum(obj, key, allowed) {
+    const raw = obj[key];
+    if (raw === undefined)
+        return ok(undefined);
+    if (typeof raw !== 'string' || !allowed.includes(raw)) {
+        return fail(`${key} must be one of: ${allowed.join(', ')}`);
+    }
+    return ok(raw);
+}
+function rejectExtraKeys(obj, allowed) {
+    const extras = Object.keys(obj).filter((k) => !allowed.includes(k));
+    if (extras.length > 0) {
+        return fail(`Unknown field(s): ${extras.join(', ')}. Allowed: ${allowed.join(', ')}`);
+    }
+    return ok(true);
+}
+const GP_INDEX_KEYS = ['path'];
+export function validateGpIndex(input) {
+    if (!isPlainObject(input))
+        return fail('arguments must be an object');
+    const extras = rejectExtraKeys(input, GP_INDEX_KEYS);
+    if (!extras.ok)
+        return fail(extras.error);
+    const path = pickString(input, 'path', { max: 1024 });
+    if (!path.ok)
+        return fail(path.error);
+    return ok({ path: path.value });
+}
+const GP_RECALL_KEYS = ['query', 'limit', 'substring', 'path'];
+export function validateGpRecall(input) {
+    if (!isPlainObject(input))
+        return fail('arguments must be an object');
+    const extras = rejectExtraKeys(input, GP_RECALL_KEYS);
+    if (!extras.ok)
+        return fail(extras.error);
+    const query = pickString(input, 'query', { required: true, max: 200 });
+    if (!query.ok)
+        return fail(query.error);
+    if (!query.value || query.value.trim() === '') {
+        return fail('query must be a non-empty string');
+    }
+    const limit = pickNumber(input, 'limit', { min: 1, max: 50, integer: true });
+    if (!limit.ok)
+        return fail(limit.error);
+    const substring = pickBoolean(input, 'substring');
+    if (!substring.ok)
+        return fail(substring.error);
+    const path = pickString(input, 'path', { max: 1024 });
+    if (!path.ok)
+        return fail(path.error);
+    return ok({
+        query: query.value,
+        limit: limit.value,
+        substring: substring.value,
+        path: path.value,
+    });
+}
+const GP_CALLERS_KEYS = ['symbol', 'direction', 'limit', 'includeUnresolved', 'path'];
+export function validateGpCallers(input) {
+    if (!isPlainObject(input))
+        return fail('arguments must be an object');
+    const extras = rejectExtraKeys(input, GP_CALLERS_KEYS);
+    if (!extras.ok)
+        return fail(extras.error);
+    const symbol = pickString(input, 'symbol', { required: true, max: 500 });
+    if (!symbol.ok)
+        return fail(symbol.error);
+    if (!symbol.value || symbol.value.trim() === '') {
+        return fail('symbol must be a non-empty string');
+    }
+    const direction = pickEnum(input, 'direction', ['callers', 'callees']);
+    if (!direction.ok)
+        return fail(direction.error);
+    const limit = pickNumber(input, 'limit', { min: 1, max: 100, integer: true });
+    if (!limit.ok)
+        return fail(limit.error);
+    const includeUnresolved = pickBoolean(input, 'includeUnresolved');
+    if (!includeUnresolved.ok)
+        return fail(includeUnresolved.error);
+    const path = pickString(input, 'path', { max: 1024 });
+    if (!path.ok)
+        return fail(path.error);
+    return ok({
+        symbol: symbol.value,
+        direction: direction.value,
+        limit: limit.value,
+        includeUnresolved: includeUnresolved.value,
+        path: path.value,
+    });
+}
+export function validateGpStats(input) {
+    if (!isPlainObject(input))
+        return fail('arguments must be an object');
+    const extras = rejectExtraKeys(input, ['path']);
+    if (!extras.ok)
+        return fail(extras.error);
+    const path = pickString(input, 'path', { max: 1024 });
+    if (!path.ok)
+        return fail(path.error);
+    return ok({ path: path.value });
+}
+const GP_IMPACT_KEYS = ['symbol', 'depth', 'path', 'since'];
+export function validateGpImpact(input) {
+    if (!isPlainObject(input))
+        return fail('arguments must be an object');
+    const extras = rejectExtraKeys(input, GP_IMPACT_KEYS);
+    if (!extras.ok)
+        return fail(extras.error);
+    const symbol = pickString(input, 'symbol', { required: true, max: 500 });
+    if (!symbol.ok)
+        return fail(symbol.error);
+    if (!symbol.value || symbol.value.trim() === '') {
+        return fail('symbol must be a non-empty string');
+    }
+    // BFS depth: hard-cap at 5. Deeper traversals explode in big repos and
+    // rarely add value — depth-3 already covers ~99% of real refactors.
+    const depth = pickNumber(input, 'depth', { min: 1, max: 5, integer: true });
+    if (!depth.ok)
+        return fail(depth.error);
+    const path = pickString(input, 'path', { max: 1024 });
+    if (!path.ok)
+        return fail(path.error);
+    // `since` accepts a commit SHA (full or short), tag, or branch name.
+    // Capped at 200 chars — refs are normally under 100, this is a sanity
+    // bound, not a security one (isomorphic-git handles ref resolution).
+    const since = pickString(input, 'since', { max: 200 });
+    if (!since.ok)
+        return fail(since.error);
+    if (since.value !== undefined && since.value.trim() === '') {
+        return fail('since must be a non-empty string when provided');
+    }
+    return ok({
+        symbol: symbol.value,
+        depth: depth.value,
+        path: path.value,
+        since: since.value,
+    });
+}
+//# sourceMappingURL=validators.js.map

package/dist/validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../src/validators.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,SAAS,EAAE,CAAI,KAAQ;IACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AACD,SAAS,IAAI,CAAI,KAAa;IAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B,SAAS,UAAU,CACjB,GAA4B,EAC5B,GAAW,EACX,OAA6C,EAAE;IAE/C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACjE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,GAAG,GAAG,mBAAmB,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,cAAc,CAAC;IACvC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC,GAAG,GAAG,0BAA0B,GAAG,EAAE,CAAC,CAAC;IACzE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CACjB,GAA4B,EAC5B,GAAW,EACX,OAA0D,EAAE;IAE5D,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,GAAG,GAAG,0BAA0B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC,GAAG,GAAG,qBAAqB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC,GAAG,GAAG,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC,GAAG,GAAG,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,GAA4B,EAAE,GAAW;IAC5D,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,OAAO,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,GAAG,GAAG,oBAAoB,CAAC,CAAC;IACtE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CACf,GAA4B,EAC5B,GAAW,EACX,OAAqB;IAErB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAE,OAA6B,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7E,OAAO,IAAI,CAAC,GAAG,GAAG,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,CAAC,GAAQ,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,GAA4B,EAAE,OAA0B;IAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,qBAAqB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;AAClB,CAAC;AASD,MAAM,aAAa,GAAG,CAAC,MAAM,CAAU,CAAC;AAExC,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;AAClC,CAAC;AAQD,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAU,CAAC;AAExE,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE1C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAExC,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAEhD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEtC,OAAO,EAAE,CAAC;QACR,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,SAAS,CAAC,KAAK;QAC1B,IAAI,EAAE,IAAI,CAAC,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAWD,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,CAAU,CAAC;AAE/F,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE1C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,SAAS,EAAE,SAAS,CAAU,CAAC,CAAC;IAChF,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAExC,MAAM,iBAAiB,GAAG,WAAW,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAClE,IAAI,CAAC,iBAAiB,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAEhE,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEtC,OAAO,EAAE,CAAC;QACR,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,SAAS,EAAE,SAAS,CAAC,KAAK;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,iBAAiB,EAAE,iBAAiB,CAAC,KAAK;QAC1C,IAAI,EAAE,IAAI,CAAC,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAQD,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;AAClC,CAAC;AAQD,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC;AAErE,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE1C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAExC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEtC,qEAAqE;IACrE,sEAAsE;IACtE,qEAAqE;IACrE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,CAAC;QACR,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,IAAI,CAAC,KAAK;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;AACL,CAAC"}