@harperfast/harper 5.0.30 → 5.1.0-beta.2

package/dist/components/mcp/resources.d.ts

@@ -0,0 +1,90 @@
+import type { McpProfile } from './transport.ts';
+type ResourcesType = Map<string, {
+    Resource: unknown;
+    path: string;
+    exportTypes: unknown;
+    hasSubPaths: boolean;
+    relativeURL: string;
+}> & {
+    getMatch?: (path: string, exportType?: string) => {
+        Resource: unknown;
+        path: string;
+    } | undefined;
+};
+type OpenApiGenerator = (resources: ResourcesType, serverHttpURL: string) => unknown;
+export interface AuthedUser {
+    username?: string;
+    role?: {
+        role?: string;
+        permission?: {
+            super_user?: boolean;
+            structure_user?: boolean;
+            operations?: string[];
+            [database: string]: boolean | string[] | undefined | {
+                describe?: boolean;
+                read?: boolean;
+                tables?: {
+                    [table: string]: undefined | {
+                        read?: boolean;
+                        describe?: boolean;
+                        attribute_permissions?: unknown;
+                    };
+                };
+            };
+        };
+    };
+}
+/** Public shape returned by `resources/list`. */
+export interface ResourceDescriptor {
+    uri: string;
+    name: string;
+    description?: string;
+    mimeType?: string;
+}
+/** Public shape inside `resources/read` `contents[]`. */
+export interface ResourceContent {
+    uri: string;
+    mimeType?: string;
+    text?: string;
+    blob?: string;
+}
+/** Public shape returned by `resources/templates/list`. */
+export interface ResourceTemplate {
+    uriTemplate: string;
+    name: string;
+    description?: string;
+    mimeType?: string;
+}
+/** Test seam: replace the Resources registry the module reads. */
+export declare function _setResourcesForTest(r: ResourcesType | undefined): void;
+/** Test seam: replace the openapi generator. */
+export declare function _setOpenApiGeneratorForTest(fn: OpenApiGenerator | undefined): void;
+/** Test seam: replace the inferred application HTTP URL prefix. */
+export declare function _setHttpUrlPrefixForTest(prefix: string | undefined): void;
+export interface ListResourcesArgs {
+    user: AuthedUser;
+    profile: McpProfile;
+    cursor?: string;
+    limit?: number;
+}
+export interface ListResourcesResult {
+    resources: ResourceDescriptor[];
+    nextCursor?: string;
+}
+export declare function listResources(args: ListResourcesArgs): ListResourcesResult;
+export declare function listResourceTemplates(profile: McpProfile): ResourceTemplate[];
+export interface ReadResourceArgs {
+    uri: string;
+    user: AuthedUser;
+    profile: McpProfile;
+}
+export interface ReadResourceOk {
+    ok: true;
+    contents: ResourceContent[];
+}
+export interface ReadResourceFail {
+    ok: false;
+    reason: string;
+}
+export declare function readResource(args: ReadResourceArgs): Promise<ReadResourceOk | ReadResourceFail>;
+export {};

package/dist/components/mcp/resources.js

@@ -0,0 +1,526 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._setResourcesForTest = _setResourcesForTest;
+exports._setOpenApiGeneratorForTest = _setOpenApiGeneratorForTest;
+exports._setHttpUrlPrefixForTest = _setHttpUrlPrefixForTest;
+exports.listResources = listResources;
+exports.listResourceTemplates = listResourceTemplates;
+exports.readResource = readResource;
+/**
+ * MCP resources capability — implements `resources/list`, `resources/read`,
+ * and `resources/templates/list` per MCP §server/resources (rev 2025-06-18).
+ *
+ * Two URI schemes:
+ *   - `https://<host>[:<port>]/<path>` for app-exported Resources. The same
+ *     URL the REST API uses. Resolved **in-process** via
+ *     `Resources.getMatch(path)` — never makes an outbound HTTP request.
+ *   - `harper://...` for synthetic / metadata resources that don't have a
+ *     real HTTP endpoint:
+ *       harper://about              — server version, profile, capabilities
+ *       harper://schema/{database}/{table} — Table.attributes (RBAC-filtered at read time)
+ *       harper://openapi             — OpenAPI 3.0.3 document
+ *       harper://operations          — ops-profile only; canonical ops list
+ *
+ * Unlike the tool registry, resources aren't *registered* — they're
+ * *discovered* at request time. Apps register their `Resource` classes
+ * through Harper's normal flow; this module enumerates the global
+ * `resources` registry and adds the synthetic URIs that v1 exposes.
+ *
+ * Security model: list time only checks REST-method presence on the
+ * Resource class. Resource access is determined programmatically (per-
+ * record `allow{Read,Create,Update,Delete}` predicates), so list-time
+ * RBAC walks would be both incomplete and misleading. Every read goes
+ * through the corresponding read path's permission enforcement.
+ *
+ * For `harper://schema/{database}/{table}`, read enforcement uses the
+ * static `user.role.permission[db].tables[table].{read,describe}` walk —
+ * that's the same path Harper's describe permission uses
+ * (`dataLayer/schemaDescribe.ts:29-49`).
+ */
+const env = __importStar(require("../../utility/environment/environmentManager.js"));
+const hdbTerms_ts_1 = require("../../utility/hdbTerms.js");
+const harper_logger_ts_1 = __importDefault(require("../../utility/logging/harper_logger.js"));
+const lifecycle_ts_1 = require("./lifecycle.js");
+const HARPER_SCHEME = 'harper:';
+const HTTPS_SCHEME = 'https:';
+const HTTP_SCHEME = 'http:';
+const DEFAULT_LIMIT = 200;
+// Test seams. Injecting these lets us unit-test without standing up a full
+// Resources registry or running openapi generation.
+let _resourcesOverride;
+let _openApiOverride;
+let _httpUrlPrefixOverride;
+/** Test seam: replace the Resources registry the module reads. */
+function _setResourcesForTest(r) {
+    _resourcesOverride = r;
+}
+/** Test seam: replace the openapi generator. */
+function _setOpenApiGeneratorForTest(fn) {
+    _openApiOverride = fn;
+}
+/** Test seam: replace the inferred application HTTP URL prefix. */
+function _setHttpUrlPrefixForTest(prefix) {
+    _httpUrlPrefixOverride = prefix;
+}
+function getResources() {
+    if (_resourcesOverride)
+        return _resourcesOverride;
+    // Lazy import — see file-top comment on Harper graph initialization.
+    const { resources } = require('../../resources/Resources.ts');
+    return resources;
+}
+function getOpenApiGenerator() {
+    if (_openApiOverride)
+        return _openApiOverride;
+    const { generateJsonApi } = require('../../resources/openApi.ts');
+    return generateJsonApi;
+}
+function listResources(args) {
+    const all = enumerate(args.profile);
+    const offset = args.cursor ? decodeCursor(args.cursor) : 0;
+    const limit = args.limit && args.limit > 0 ? args.limit : DEFAULT_LIMIT;
+    const slice = all.slice(offset, offset + limit);
+    const next = offset + slice.length;
+    return {
+        resources: slice,
+        nextCursor: next < all.length ? encodeCursor(next) : undefined,
+    };
+}
+function listResourceTemplates(profile) {
+    const templates = [];
+    if (profile === 'application') {
+        templates.push({
+            uriTemplate: 'harper://schema/{database}/{table}',
+            name: 'Table schema',
+            description: 'Attribute definitions for a Harper table, RBAC-filtered by attribute_permissions',
+            mimeType: 'application/json',
+        });
+        const serverHttpURL = guessAppHttpUrlPrefix();
+        if (serverHttpURL) {
+            templates.push({
+                uriTemplate: `${serverHttpURL}/{resourcePath}`,
+                name: 'Application resource',
+                description: 'A Resource exported on the HTTP port. The URI is the canonical REST URL; resolution is in-process.',
+                mimeType: 'application/json',
+            });
+        }
+    }
+    return templates;
+}
+async function readResource(args) {
+    const { uri, user, profile } = args;
+    let parsed;
+    try {
+        parsed = new URL(uri);
+    }
+    catch {
+        return { ok: false, reason: `invalid uri: ${uri}` };
+    }
+    if (parsed.protocol === HARPER_SCHEME) {
+        return readHarperUri(parsed, user, profile);
+    }
+    if (parsed.protocol === HTTPS_SCHEME || parsed.protocol === HTTP_SCHEME) {
+        if (profile !== 'application') {
+            return { ok: false, reason: 'https:// resources are only available on the application profile' };
+        }
+        return readAppResource(parsed);
+    }
+    return { ok: false, reason: `unsupported uri scheme: ${parsed.protocol}` };
+}
+// ─── Enumeration ───────────────────────────────────────────────────────
+function enumerate(profile) {
+    const out = [];
+    // `harper://about` is available on both profiles.
+    out.push({
+        uri: 'harper://about',
+        name: 'Server metadata',
+        description: 'Harper server version, profile, and the MCP protocol versions advertised by this server.',
+        mimeType: 'application/json',
+    });
+    if (profile === 'operations') {
+        out.push({
+            uri: 'harper://operations',
+            name: 'Operations catalog',
+            description: 'User-filtered list of Harper operations with their JSON Schemas.',
+            mimeType: 'application/json',
+        });
+    }
+    if (profile === 'application') {
+        out.push({
+            uri: 'harper://openapi',
+            name: 'OpenAPI document',
+            description: "OpenAPI 3.0.3 spec for the application's HTTP REST surface.",
+            mimeType: 'application/json',
+        });
+        // harper://schema/{database}/{table} — one entry per table backing a Resource.
+        // No list-time RBAC filter; readTableSchema enforces describe/read perms.
+        for (const { db, table, description: tableDoc } of enumerateTableBackedResources()) {
+            const base = `Attribute definitions for ${db}.${table}, filtered at read time by your role's attribute_permissions.`;
+            out.push({
+                uri: `harper://schema/${db}/${table}`,
+                name: `${db}.${table} schema`,
+                description: tableDoc ? `${tableDoc} ${base}` : base,
+                mimeType: 'application/json',
+            });
+        }
+        // https://... — one per exported Resource that has class-level REST methods.
+        // Per-record access is decided by each Resource's `allow{Read,...}` predicate
+        // at read time, so the list filter only checks method presence.
+        for (const entry of enumerateAppHttpResources())
+            out.push(entry);
+    }
+    out.sort((a, b) => (a.uri < b.uri ? -1 : a.uri > b.uri ? 1 : 0));
+    return out;
+}
+function enumerateTableBackedResources() {
+    const seen = new Set();
+    const result = [];
+    for (const entry of getResources().values()) {
+        if (!isMcpExposed(entry))
+            continue;
+        const ResourceClass = entry.Resource;
+        // @hidden suppresses the Resource from descriptive surfaces (MCP + OpenAPI).
+        if (ResourceClass?.hidden === true)
+            continue;
+        const db = ResourceClass?.databaseName;
+        const table = ResourceClass?.tableName;
+        if (!db || !table)
+            continue;
+        const key = `${db}/${table}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        result.push({ db, table, description: ResourceClass?.description });
+    }
+    return result;
+}
+function enumerateAppHttpResources() {
+    const prefix = guessAppHttpUrlPrefix();
+    if (!prefix)
+        return [];
+    const out = [];
+    for (const [path, entry] of getResources()) {
+        if (!isMcpExposed(entry))
+            continue;
+        const ResourceClass = entry.Resource;
+        // @hidden suppresses the Resource from descriptive surfaces (MCP + OpenAPI).
+        if (ResourceClass?.hidden === true)
+            continue;
+        if (!hasRestVerbs(ResourceClass?.prototype))
+            continue;
+        const tableDoc = ResourceClass?.description;
+        const description = tableDoc
+            ? `${tableDoc} Application resource at /${path}. Resolves in-process via Resources.getMatch.`
+            : `Application resource at /${path}. Resolves in-process via Resources.getMatch.`;
+        out.push({
+            uri: `${prefix}/${path}`,
+            name: path,
+            description,
+            mimeType: 'application/json',
+        });
+    }
+    return out;
+}
+/**
+ * Honor the per-protocol export controls operators use to scope a
+ * Resource's surface. A Resource registered with `exportTypes.mcp === false`
+ * is explicitly opted out of MCP enumeration entirely. Missing flag = opted
+ * in (mirror of how `Resources.getMatch` treats unspecified types).
+ */
+function isMcpExposed(entry) {
+    const types = entry.exportTypes;
+    if (!types)
+        return true;
+    return types.mcp !== false;
+}
+/**
+ * Mirrors the verb-presence check at `resources/openApi.ts:149-153`.
+ * Returns true if the Resource subclass defines any REST verb on its
+ * prototype, which is what makes it visible over HTTP. `update()` is
+ * counted because openApi treats it as an implicit POST override.
+ */
+function hasRestVerbs(prototype) {
+    if (!prototype || typeof prototype !== 'object')
+        return false;
+    const p = prototype;
+    return (typeof p.get === 'function' ||
+        typeof p.put === 'function' ||
+        typeof p.post === 'function' ||
+        typeof p.patch === 'function' ||
+        typeof p.delete === 'function' ||
+        typeof p.update === 'function');
+}
+// ─── Read dispatchers ──────────────────────────────────────────────────
+async function readHarperUri(uri, user, profile) {
+    // `harper://about` parses with host='about' (URL treats it like a host).
+    // We use `host + pathname` to recover the full opaque path. Empty host
+    // is also valid (some parsers strip it); fall back to pathname.
+    const opaque = (uri.host || '') + (uri.pathname || '');
+    if (opaque === '' || opaque === 'about')
+        return readAbout(profile, uri.href);
+    if (opaque === 'openapi') {
+        if (profile !== 'application') {
+            return { ok: false, reason: 'harper://openapi is only available on the application profile' };
+        }
+        return readOpenApi(uri.href);
+    }
+    if (opaque === 'operations') {
+        if (profile !== 'operations') {
+            return { ok: false, reason: 'harper://operations is only available on the operations profile' };
+        }
+        return readOperationsCatalog(user, uri.href);
+    }
+    const schemaMatch = /^schema\/([^/]+)\/([^/]+)$/.exec(opaque);
+    if (schemaMatch) {
+        return readTableSchema(schemaMatch[1], schemaMatch[2], user, uri.href);
+    }
+    return { ok: false, reason: `unknown harper:// resource: ${uri.href}` };
+}
+function readAbout(profile, href) {
+    // Reuse the lifecycle module's constants so this resource and the
+    // `initialize` handshake never drift.
+    const body = {
+        serverInfo: lifecycle_ts_1.SERVER_INFO,
+        profile,
+        protocolVersions: lifecycle_ts_1.SUPPORTED_PROTOCOL_VERSIONS,
+        capabilities: lifecycle_ts_1.SERVER_CAPABILITIES,
+    };
+    return jsonContent(href, body);
+}
+function readOpenApi(href) {
+    try {
+        const generator = getOpenApiGenerator();
+        const serverHttpURL = guessAppHttpUrlPrefix() ?? '';
+        const api = generator(getResources(), serverHttpURL);
+        return jsonContent(href, api);
+    }
+    catch (err) {
+        harper_logger_ts_1.default.warn(`MCP harper://openapi generation failed: ${err.message}`);
+        return { ok: false, reason: 'failed to generate openapi document' };
+    }
+}
+function readTableSchema(db, table, user, href) {
+    const perm = userTablePermissions(user, db, table);
+    if (!perm?.read && !perm?.describe) {
+        return { ok: false, reason: `permission denied: cannot describe ${db}.${table}` };
+    }
+    // Find the Resource backing this table.
+    let resource;
+    for (const entry of getResources().values()) {
+        const r = entry.Resource;
+        if (r?.databaseName === db && r?.tableName === table) {
+            resource = r;
+            break;
+        }
+    }
+    if (!resource)
+        return { ok: false, reason: `table not found: ${db}.${table}` };
+    const attributes = resource.attributes ?? [];
+    const filteredAttributes = filterAttributesByPermissions(attributes, perm?.attribute_permissions);
+    const body = {
+        database: db,
+        table,
+        primaryKey: resource.primaryKey,
+        attributes: filteredAttributes,
+        // `attribute_permissions` is forwarded as informational — lets the LLM
+        // surface "fields you can't write to" hints without us having to
+        // pre-compute them.
+        attribute_permissions: perm?.attribute_permissions,
+    };
+    return jsonContent(href, body);
+}
+function readOperationsCatalog(user, href) {
+    const out = [];
+    for (const opName of Object.values(hdbTerms_ts_1.OPERATIONS_ENUM)) {
+        if (canRoleInvokeOperation(user, opName)) {
+            out.push({ name: opName });
+        }
+    }
+    out.sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0));
+    return jsonContent(href, { operations: out });
+}
+async function readAppResource(uri) {
+    // Strip the host:port and leading slash to get the path that
+    // Resources.getMatch expects. Passing the 'mcp' export type runs the
+    // existing per-protocol gate at resources/Resources.ts:97 — an entry
+    // registered with exportTypes.mcp === false short-circuits to "no match".
+    const path = uri.pathname.replace(/^\/+/, '');
+    const entry = getResources().getMatch(path, 'mcp');
+    if (!entry)
+        return { ok: false, reason: `no resource matches: ${uri.href}` };
+    const ResourceClass = entry.Resource;
+    // v1 returns a descriptor of the Resource class — enough for an LLM to
+    // understand what's available. Full content reads (a record fetch, a
+    // search result) go through the tools surface, where each Resource's
+    // existing `transactional()` + `allow{Read,Create,Update,Delete}`
+    // predicates run per-record. This keeps `resources/read` a fast,
+    // side-effect-free metadata view; the descriptor itself isn't a
+    // capability token, just a hint that this URI exists in the registry.
+    const body = {
+        uri: uri.href,
+        path: entry.path,
+        database: ResourceClass?.databaseName,
+        table: ResourceClass?.tableName,
+        hint: 'Use the corresponding `get_*` or `search_*` tool from `tools/list` to fetch records.',
+    };
+    return jsonContent(uri.href, body);
+}
+function isSuperUser(user) {
+    return user?.role?.permission?.super_user === true;
+}
+function userTablePermissions(user, db, table) {
+    if (isSuperUser(user)) {
+        return { read: true, describe: true };
+    }
+    const dbPerm = user?.role?.permission?.[db];
+    if (!dbPerm || typeof dbPerm !== 'object' || Array.isArray(dbPerm))
+        return null;
+    const tablePerm = dbPerm.tables?.[table];
+    if (!tablePerm)
+        return null;
+    return {
+        read: tablePerm.read === true,
+        describe: tablePerm.describe === true,
+        attribute_permissions: tablePerm.attribute_permissions,
+    };
+}
+const SCHEMA_STRUCTURE_OPERATIONS = new Set([
+    'create_schema',
+    'create_database',
+    'drop_schema',
+    'drop_database',
+    'create_table',
+    'drop_table',
+    'create_attribute',
+    'drop_attribute',
+]);
+function canRoleInvokeOperation(user, operation) {
+    if (isSuperUser(user))
+        return true;
+    const perm = user?.role?.permission;
+    if (!perm)
+        return false;
+    if (perm.structure_user && SCHEMA_STRUCTURE_OPERATIONS.has(operation))
+        return true;
+    if (Array.isArray(perm.operations) && perm.operations.includes(operation))
+        return true;
+    return false;
+}
+function filterAttributesByPermissions(attributes, attributePermissions) {
+    if (!attributePermissions || !Array.isArray(attributes))
+        return attributes;
+    // `attribute_permissions` is an array of `{ attribute_name, read, insert,
+    // update }` per Harper's existing role-permissions shape. v1 simply
+    // drops attributes the user has no read on; finer-grained handling
+    // (write-only / partial visibility) is documented but unimplemented.
+    const denied = new Set();
+    if (Array.isArray(attributePermissions)) {
+        for (const ap of attributePermissions) {
+            if (ap && ap.attribute_name && ap.read === false)
+                denied.add(ap.attribute_name);
+        }
+    }
+    if (denied.size === 0)
+        return attributes;
+    return attributes.filter((a) => !denied.has(a?.name));
+}
+function guessAppHttpUrlPrefix() {
+    // Best-effort URL prefix construction. Hostname comes from the server
+    // module post-boot; the port comes from config. In tests where neither
+    // is available we return undefined and skip the https:// enumeration —
+    // callers handle the absence gracefully.
+    if (_httpUrlPrefixOverride !== undefined)
+        return _httpUrlPrefixOverride || undefined;
+    let hostname;
+    try {
+        const { server } = require('../../server/Server.ts');
+        hostname = server?.hostname;
+    }
+    catch {
+        return undefined;
+    }
+    if (!hostname)
+        return undefined;
+    // On Fabric, secure ports are shadowed through Unix domain sockets and
+    // the published surface lives behind a load balancer (9926 → 443). Drop
+    // the port so the URL points at the public surface, not the internal one.
+    if (env.get(hdbTerms_ts_1.CONFIG_PARAMS.TLS_UNIXDOMAINSOCKETS)) {
+        return `https://${hostname}`;
+    }
+    // Standard deployment: prefer the HTTPS port. Fall back to the plain
+    // HTTP port for dev setups that don't configure TLS.
+    const securePort = env.get(hdbTerms_ts_1.CONFIG_PARAMS.HTTP_SECUREPORT);
+    if (securePort)
+        return `https://${hostname}:${securePort}`;
+    const httpPort = env.get(hdbTerms_ts_1.CONFIG_PARAMS.HTTP_PORT);
+    if (httpPort)
+        return `http://${hostname}:${httpPort}`;
+    return undefined;
+}
+function jsonContent(uri, body) {
+    return {
+        ok: true,
+        contents: [
+            {
+                uri,
+                mimeType: 'application/json',
+                text: JSON.stringify(body),
+            },
+        ],
+    };
+}
+function encodeCursor(offset) {
+    return Buffer.from(JSON.stringify({ offset }), 'utf8').toString('base64url');
+}
+function decodeCursor(cursor) {
+    try {
+        const decoded = JSON.parse(Buffer.from(cursor, 'base64url').toString('utf8'));
+        const offset = decoded?.offset;
+        if (typeof offset !== 'number' || offset < 0 || !Number.isFinite(offset) || !Number.isInteger(offset)) {
+            harper_logger_ts_1.default.trace('MCP resources cursor decoded but missing/invalid offset; treating as 0');
+            return 0;
+        }
+        return offset;
+    }
+    catch (err) {
+        harper_logger_ts_1.default.trace(`MCP resources cursor decode failed (${err.message}); treating as 0`);
+        return 0;
+    }
+}
+//# sourceMappingURL=resources.js.map

package/dist/components/mcp/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../../components/mcp/resources.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmHA,oDAEC;AAGD,kEAEC;AAGD,4DAEC;AA6BD,sCAUC;AAED,sDAqBC;AAkBD,oCAmBC;AAlOD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,qFAAuE;AACvE,2DAA2E;AAC3E,8FAAkE;AAClE,iDAA+F;AAoE/F,MAAM,aAAa,GAAG,SAAS,CAAC;AAChC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAC9B,MAAM,WAAW,GAAG,OAAO,CAAC;AAE5B,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,2EAA2E;AAC3E,oDAAoD;AACpD,IAAI,kBAA6C,CAAC;AAClD,IAAI,gBAA8C,CAAC;AACnD,IAAI,sBAA0C,CAAC;AAE/C,kEAAkE;AAClE,SAAgB,oBAAoB,CAAC,CAA4B;IAChE,kBAAkB,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,gDAAgD;AAChD,SAAgB,2BAA2B,CAAC,EAAgC;IAC3E,gBAAgB,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,mEAAmE;AACnE,SAAgB,wBAAwB,CAAC,MAA0B;IAClE,sBAAsB,GAAG,MAAM,CAAC;AACjC,CAAC;AAED,SAAS,YAAY;IACpB,IAAI,kBAAkB;QAAE,OAAO,kBAAkB,CAAC;IAClD,qEAAqE;IACrE,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC9D,OAAO,SAA0B,CAAC;AACnC,CAAC;AAED,SAAS,mBAAmB;IAC3B,IAAI,gBAAgB;QAAE,OAAO,gBAAgB,CAAC;IAC9C,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAClE,OAAO,eAAmC,CAAC;AAC5C,CAAC;AAgBD,SAAgB,aAAa,CAAC,IAAuB;IACpD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC;IACxE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACnC,OAAO;QACN,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9D,CAAC;AACH,CAAC;AAED,SAAgB,qBAAqB,CAAC,OAAmB;IACxD,MAAM,SAAS,GAAuB,EAAE,CAAC;IACzC,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC/B,SAAS,CAAC,IAAI,CAAC;YACd,WAAW,EAAE,oCAAoC;YACjD,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,kFAAkF;YAC/F,QAAQ,EAAE,kBAAkB;SAC5B,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC9C,IAAI,aAAa,EAAE,CAAC;YACnB,SAAS,CAAC,IAAI,CAAC;gBACd,WAAW,EAAE,GAAG,aAAa,iBAAiB;gBAC9C,IAAI,EAAE,sBAAsB;gBAC5B,WAAW,EACV,oGAAoG;gBACrG,QAAQ,EAAE,kBAAkB;aAC5B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAkBM,KAAK,UAAU,YAAY,CAAC,IAAsB;IACxD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACpC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,GAAG,EAAE,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QACvC,OAAO,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,YAAY,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACzE,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kEAAkE,EAAE,CAAC;QAClG,CAAC;QACD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,0EAA0E;AAE1E,SAAS,SAAS,CAAC,OAAmB;IACrC,MAAM,GAAG,GAAyB,EAAE,CAAC;IAErC,kDAAkD;IAClD,GAAG,CAAC,IAAI,CAAC;QACR,GAAG,EAAE,gBAAgB;QACrB,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,0FAA0F;QACvG,QAAQ,EAAE,kBAAkB;KAC5B,CAAC,CAAC;IAEH,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,qBAAqB;YAC1B,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EAAE,kEAAkE;YAC/E,QAAQ,EAAE,kBAAkB;SAC5B,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,kBAAkB;YACvB,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,6DAA6D;YAC1E,QAAQ,EAAE,kBAAkB;SAC5B,CAAC,CAAC;QAEH,+EAA+E;QAC/E,0EAA0E;QAC1E,KAAK,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,6BAA6B,EAAE,EAAE,CAAC;YACpF,MAAM,IAAI,GAAG,6BAA6B,EAAE,IAAI,KAAK,+DAA+D,CAAC;YACrH,GAAG,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,mBAAmB,EAAE,IAAI,KAAK,EAAE;gBACrC,IAAI,EAAE,GAAG,EAAE,IAAI,KAAK,SAAS;gBAC7B,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;gBACpD,QAAQ,EAAE,kBAAkB;aAC5B,CAAC,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,8EAA8E;QAC9E,gEAAgE;QAChE,KAAK,MAAM,KAAK,IAAI,yBAAyB,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,6BAA6B;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAA+D,EAAE,CAAC;IAC9E,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,aAAa,GAAG,KAAK,CAAC,QAK3B,CAAC;QACF,6EAA6E;QAC7E,IAAI,aAAa,EAAE,MAAM,KAAK,IAAI;YAAE,SAAS;QAC7C,MAAM,EAAE,GAAG,aAAa,EAAE,YAAY,CAAC;QACvC,MAAM,KAAK,GAAG,aAAa,EAAE,SAAS,CAAC;QACvC,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK;YAAE,SAAS;QAC5B,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,KAAK,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB;IACjC,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,aAAa,GAAG,KAAK,CAAC,QAAuF,CAAC;QACpH,6EAA6E;QAC7E,IAAI,aAAa,EAAE,MAAM,KAAK,IAAI;YAAE,SAAS;QAC7C,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,SAAS,CAAC;YAAE,SAAS;QACtD,MAAM,QAAQ,GAAG,aAAa,EAAE,WAAW,CAAC;QAC5C,MAAM,WAAW,GAAG,QAAQ;YAC3B,CAAC,CAAC,GAAG,QAAQ,6BAA6B,IAAI,+CAA+C;YAC7F,CAAC,CAAC,4BAA4B,IAAI,+CAA+C,CAAC;QACnF,GAAG,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,GAAG,MAAM,IAAI,IAAI,EAAE;YACxB,IAAI,EAAE,IAAI;YACV,WAAW;YACX,QAAQ,EAAE,kBAAkB;SAC5B,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,KAAgC;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAkD,CAAC;IACvE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,SAAkB;IACvC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,SAAoC,CAAC;IAC/C,OAAO,CACN,OAAO,CAAC,CAAC,GAAG,KAAK,UAAU;QAC3B,OAAO,CAAC,CAAC,GAAG,KAAK,UAAU;QAC3B,OAAO,CAAC,CAAC,IAAI,KAAK,UAAU;QAC5B,OAAO,CAAC,CAAC,KAAK,KAAK,UAAU;QAC7B,OAAO,CAAC,CAAC,MAAM,KAAK,UAAU;QAC9B,OAAO,CAAC,CAAC,MAAM,KAAK,UAAU,CAC9B,CAAC;AACH,CAAC;AAED,0EAA0E;AAE1E,KAAK,UAAU,aAAa,CAC3B,GAAQ,EACR,IAAgB,EAChB,OAAmB;IAEnB,yEAAyE;IACzE,uEAAuE;IACvE,gEAAgE;IAChE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+DAA+D,EAAE,CAAC;QAC/F,CAAC;QACD,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC7B,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;YAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iEAAiE,EAAE,CAAC;QACjG,CAAC;QACD,OAAO,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,WAAW,EAAE,CAAC;QACjB,OAAO,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,OAAmB,EAAE,IAAY;IACnD,kEAAkE;IAClE,sCAAsC;IACtC,MAAM,IAAI,GAAG;QACZ,UAAU,EAAE,0BAAW;QACvB,OAAO;QACP,gBAAgB,EAAE,0CAA2B;QAC7C,YAAY,EAAE,kCAAmB;KACjC,CAAC;IACF,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAChC,IAAI,CAAC;QACJ,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;QACxC,MAAM,aAAa,GAAG,qBAAqB,EAAE,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,EAAE,EAAE,aAAa,CAAC,CAAC;QACrD,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,0BAAY,CAAC,IAAI,CAAC,2CAA4C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IACrE,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CAAC,EAAU,EAAE,KAAa,EAAE,IAAgB,EAAE,IAAY;IACjF,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,IAAI,KAAK,EAAE,EAAE,CAAC;IACnF,CAAC;IACD,wCAAwC;IACxC,IAAI,QAAyB,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,KAAK,CAAC,QAAqE,CAAC;QACtF,IAAI,CAAC,EAAE,YAAY,KAAK,EAAE,IAAI,CAAC,EAAE,SAAS,KAAK,KAAK,EAAE,CAAC;YACtD,QAAQ,GAAG,CAAC,CAAC;YACb,MAAM;QACP,CAAC;IACF,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,KAAK,EAAE,EAAE,CAAC;IAC/E,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC;IAC7C,MAAM,kBAAkB,GAAG,6BAA6B,CAAC,UAAU,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAClG,MAAM,IAAI,GAAG;QACZ,QAAQ,EAAE,EAAE;QACZ,KAAK;QACL,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,UAAU,EAAE,kBAAkB;QAC9B,uEAAuE;QACvE,iEAAiE;QACjE,oBAAoB;QACpB,qBAAqB,EAAE,IAAI,EAAE,qBAAqB;KAClD,CAAC;IACF,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAgB,EAAE,IAAY;IAC5D,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,6BAAe,CAAC,EAAE,CAAC;QACrD,IAAI,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5B,CAAC;IACF,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,WAAW,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAQ;IACtC,6DAA6D;IAC7D,qEAAqE;IACrE,qEAAqE;IACrE,0EAA0E;IAC1E,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;IAE7E,MAAM,aAAa,GAAG,KAAK,CAAC,QAAqE,CAAC;IAClG,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,kEAAkE;IAClE,iEAAiE;IACjE,gEAAgE;IAChE,sEAAsE;IACtE,MAAM,IAAI,GAAG;QACZ,GAAG,EAAE,GAAG,CAAC,IAAI;QACb,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,aAAa,EAAE,YAAY;QACrC,KAAK,EAAE,aAAa,EAAE,SAAS;QAC/B,IAAI,EAAE,sFAAsF;KAC5F,CAAC;IACF,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAUD,SAAS,WAAW,CAAC,IAA4B;IAChD,OAAO,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,KAAK,IAAI,CAAC;AACpD,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAgB,EAAE,EAAU,EAAE,KAAa;IACxE,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO;QACN,IAAI,EAAE,SAAS,CAAC,IAAI,KAAK,IAAI;QAC7B,QAAQ,EAAE,SAAS,CAAC,QAAQ,KAAK,IAAI;QACrC,qBAAqB,EAAE,SAAS,CAAC,qBAAqB;KACtD,CAAC;AACH,CAAC;AAED,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC;IAC3C,eAAe;IACf,iBAAiB;IACjB,aAAa;IACb,eAAe;IACf,cAAc;IACd,YAAY;IACZ,kBAAkB;IAClB,gBAAgB;CAChB,CAAC,CAAC;AAEH,SAAS,sBAAsB,CAAC,IAAgB,EAAE,SAAiB;IAClE,IAAI,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,cAAc,IAAI,2BAA2B,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACnF,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,6BAA6B,CAAC,UAAiB,EAAE,oBAA6B;IACtF,IAAI,CAAC,oBAAoB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAC3E,0EAA0E;IAC1E,oEAAoE;IACpE,mEAAmE;IACnE,qEAAqE;IACrE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACzC,KAAK,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;YACvC,IAAI,EAAE,IAAI,EAAE,CAAC,cAAc,IAAI,EAAE,CAAC,IAAI,KAAK,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QACjF,CAAC;IACF,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IACzC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,qBAAqB;IAC7B,sEAAsE;IACtE,uEAAuE;IACvE,uEAAuE;IACvE,yCAAyC;IACzC,IAAI,sBAAsB,KAAK,SAAS;QAAE,OAAO,sBAAsB,IAAI,SAAS,CAAC;IACrF,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACrD,QAAQ,GAAI,MAAgC,EAAE,QAAQ,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEhC,uEAAuE;IACvE,wEAAwE;IACxE,0EAA0E;IAC1E,IAAI,GAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAClD,OAAO,WAAW,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED,qEAAqE;IACrE,qDAAqD;IACrD,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,eAAe,CAAC,CAAC;IAC1D,IAAI,UAAU;QAAE,OAAO,WAAW,QAAQ,IAAI,UAAU,EAAE,CAAC;IAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,QAAQ;QAAE,OAAO,UAAU,QAAQ,IAAI,QAAQ,EAAE,CAAC;IACtD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,IAAa;IAC9C,OAAO;QACN,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE;YACT;gBACC,GAAG;gBACH,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC1B;SACD;KACD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IACnC,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAyB,CAAC;QACtG,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACvG,0BAAY,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;YAC7F,OAAO,CAAC,CAAC;QACV,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,0BAAY,CAAC,KAAK,CAAC,uCAAwC,GAAa,CAAC,OAAO,kBAAkB,CAAC,CAAC;QACpG,OAAO,CAAC,CAAC;IACV,CAAC;AACF,CAAC"}

package/dist/components/mcp/session.d.ts

@@ -0,0 +1,36 @@
+import { type Table } from '../../resources/databases.ts';
+export interface McpSessionRecord {
+    id: string;
+    protocolVersion: string;
+    initialized: boolean;
+    user: string;
+    createdAt: number;
+    lastActivity: number;
+}
+/**
+ * Initialize the session table. Called from `handleApplication(scope)` and
+ * `registerMcpProfile()` when the MCP component boots. Idempotent.
+ */
+export declare function ensureSessionTable(): Table;
+/** Test seam: allow tests to inject a fake table without touching Harper. */
+export declare function _setSessionTableForTest(fake: Table | undefined): void;
+export declare function createSession({ user, protocolVersion, }: {
+    user: string;
+    protocolVersion: string;
+}): Promise<McpSessionRecord>;
+/**
+ * Look up a session by id. Returns the record if present and not expired,
+ * else `null`. The transport core maps `null` to HTTP 404.
+ */
+export declare function loadSession(id: string): Promise<McpSessionRecord | null>;
+/**
+ * Persist updated session state. Used to bump `lastActivity` (sliding-window
+ * idle reset) and to flip `initialized` after `notifications/initialized`.
+ */
+export declare function saveSession(record: McpSessionRecord): Promise<void>;
+export declare function deleteSession(id: string): Promise<void>;
+/**
+ * Convenience: touch `lastActivity` and persist. Returns the updated
+ * record so the caller doesn't re-fetch.
+ */
+export declare function touchSession(record: McpSessionRecord): Promise<McpSessionRecord>;