@ia-qa/qa-discovery 0.1.0

package/dist/index.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.collect = exports.validate = exports.parseClassifications = exports.buildPrompt = exports.entryPointsOf = exports.classifyPage = exports.taxonomyForPrompt = exports.securityToolsFor = exports.isSensitivity = exports.isIntent = exports.TAXONOMY_VERSION = exports.UNKNOWN_INTENT = exports.SENSITIVITY_IDS = exports.INTENT_IDS = exports.SENSITIVITIES = exports.INTENTS = exports.SHARED_REF = exports.loadCaptureIndex = exports.verifyClaim = exports.verifyCitation = exports.DEFAULT_SAFE_QUERY_PARAMS = exports.apiCallFingerprint = exports.normalizeApiUrl = exports.SESSION_FILENAME = exports.CONFIG_DIR = exports.resolveSession = exports.sessionTarget = exports.sessionPath = exports.configPath = exports.captureDir = exports.setBaseDir = exports.baseDir = exports.configExists = exports.saveConfig = exports.loadConfig = exports.renderScanReport = exports.OVERVIEW_FILENAME = exports.renderOverview = exports.compareCaptures = exports.SHARED_CALLS_SCHEMA = exports.PAGE_CAPTURE_SCHEMA = exports.capturePage = exports.HISTORY_LIMIT = exports.historyPath = exports.appendHistory = exports.readHistory = exports.SURFACE_SCHEMA = exports.scanApp = void 0;
+var scan_1 = require("./scan");
+Object.defineProperty(exports, "scanApp", { enumerable: true, get: function () { return scan_1.scanApp; } });
+var scan_2 = require("./scan");
+Object.defineProperty(exports, "SURFACE_SCHEMA", { enumerable: true, get: function () { return scan_2.SURFACE_SCHEMA; } });
+var history_1 = require("./history");
+Object.defineProperty(exports, "readHistory", { enumerable: true, get: function () { return history_1.readHistory; } });
+Object.defineProperty(exports, "appendHistory", { enumerable: true, get: function () { return history_1.appendHistory; } });
+Object.defineProperty(exports, "historyPath", { enumerable: true, get: function () { return history_1.historyPath; } });
+Object.defineProperty(exports, "HISTORY_LIMIT", { enumerable: true, get: function () { return history_1.HISTORY_LIMIT; } });
+var page_1 = require("./capture/page");
+Object.defineProperty(exports, "capturePage", { enumerable: true, get: function () { return page_1.capturePage; } });
+Object.defineProperty(exports, "PAGE_CAPTURE_SCHEMA", { enumerable: true, get: function () { return page_1.PAGE_CAPTURE_SCHEMA; } });
+var sharedCalls_1 = require("./sharedCalls");
+Object.defineProperty(exports, "SHARED_CALLS_SCHEMA", { enumerable: true, get: function () { return sharedCalls_1.SHARED_CALLS_SCHEMA; } });
+var diff_1 = require("./diff");
+Object.defineProperty(exports, "compareCaptures", { enumerable: true, get: function () { return diff_1.compareCaptures; } });
+var overview_1 = require("./overview");
+Object.defineProperty(exports, "renderOverview", { enumerable: true, get: function () { return overview_1.renderOverview; } });
+Object.defineProperty(exports, "OVERVIEW_FILENAME", { enumerable: true, get: function () { return overview_1.OVERVIEW_FILENAME; } });
+var htmlReport_1 = require("./htmlReport");
+Object.defineProperty(exports, "renderScanReport", { enumerable: true, get: function () { return htmlReport_1.renderScanReport; } });
+var config_1 = require("./config");
+Object.defineProperty(exports, "loadConfig", { enumerable: true, get: function () { return config_1.loadConfig; } });
+Object.defineProperty(exports, "saveConfig", { enumerable: true, get: function () { return config_1.saveConfig; } });
+Object.defineProperty(exports, "configExists", { enumerable: true, get: function () { return config_1.configExists; } });
+Object.defineProperty(exports, "baseDir", { enumerable: true, get: function () { return config_1.baseDir; } });
+Object.defineProperty(exports, "setBaseDir", { enumerable: true, get: function () { return config_1.setBaseDir; } });
+Object.defineProperty(exports, "captureDir", { enumerable: true, get: function () { return config_1.captureDir; } });
+Object.defineProperty(exports, "configPath", { enumerable: true, get: function () { return config_1.configPath; } });
+Object.defineProperty(exports, "sessionPath", { enumerable: true, get: function () { return config_1.sessionPath; } });
+Object.defineProperty(exports, "sessionTarget", { enumerable: true, get: function () { return config_1.sessionTarget; } });
+Object.defineProperty(exports, "resolveSession", { enumerable: true, get: function () { return config_1.resolveSession; } });
+Object.defineProperty(exports, "CONFIG_DIR", { enumerable: true, get: function () { return config_1.CONFIG_DIR; } });
+Object.defineProperty(exports, "SESSION_FILENAME", { enumerable: true, get: function () { return config_1.SESSION_FILENAME; } });
+var network_1 = require("./network");
+Object.defineProperty(exports, "normalizeApiUrl", { enumerable: true, get: function () { return network_1.normalizeApiUrl; } });
+Object.defineProperty(exports, "apiCallFingerprint", { enumerable: true, get: function () { return network_1.apiCallFingerprint; } });
+Object.defineProperty(exports, "DEFAULT_SAFE_QUERY_PARAMS", { enumerable: true, get: function () { return network_1.DEFAULT_SAFE_QUERY_PARAMS; } });
+var citations_1 = require("./citations");
+Object.defineProperty(exports, "verifyCitation", { enumerable: true, get: function () { return citations_1.verifyCitation; } });
+Object.defineProperty(exports, "verifyClaim", { enumerable: true, get: function () { return citations_1.verifyClaim; } });
+Object.defineProperty(exports, "loadCaptureIndex", { enumerable: true, get: function () { return citations_1.loadCaptureIndex; } });
+Object.defineProperty(exports, "SHARED_REF", { enumerable: true, get: function () { return citations_1.SHARED_REF; } });
+var taxonomy_1 = require("./taxonomy");
+Object.defineProperty(exports, "INTENTS", { enumerable: true, get: function () { return taxonomy_1.INTENTS; } });
+Object.defineProperty(exports, "SENSITIVITIES", { enumerable: true, get: function () { return taxonomy_1.SENSITIVITIES; } });
+Object.defineProperty(exports, "INTENT_IDS", { enumerable: true, get: function () { return taxonomy_1.INTENT_IDS; } });
+Object.defineProperty(exports, "SENSITIVITY_IDS", { enumerable: true, get: function () { return taxonomy_1.SENSITIVITY_IDS; } });
+Object.defineProperty(exports, "UNKNOWN_INTENT", { enumerable: true, get: function () { return taxonomy_1.UNKNOWN_INTENT; } });
+Object.defineProperty(exports, "TAXONOMY_VERSION", { enumerable: true, get: function () { return taxonomy_1.TAXONOMY_VERSION; } });
+Object.defineProperty(exports, "isIntent", { enumerable: true, get: function () { return taxonomy_1.isIntent; } });
+Object.defineProperty(exports, "isSensitivity", { enumerable: true, get: function () { return taxonomy_1.isSensitivity; } });
+Object.defineProperty(exports, "securityToolsFor", { enumerable: true, get: function () { return taxonomy_1.securityToolsFor; } });
+Object.defineProperty(exports, "taxonomyForPrompt", { enumerable: true, get: function () { return taxonomy_1.taxonomyForPrompt; } });
+var classify_1 = require("./ai/classify");
+Object.defineProperty(exports, "classifyPage", { enumerable: true, get: function () { return classify_1.classifyPage; } });
+Object.defineProperty(exports, "entryPointsOf", { enumerable: true, get: function () { return classify_1.entryPointsOf; } });
+Object.defineProperty(exports, "buildPrompt", { enumerable: true, get: function () { return classify_1.buildPrompt; } });
+Object.defineProperty(exports, "parseClassifications", { enumerable: true, get: function () { return classify_1.parseClassifications; } });
+Object.defineProperty(exports, "validate", { enumerable: true, get: function () { return classify_1.validate; } });
+Object.defineProperty(exports, "collect", { enumerable: true, get: function () { return classify_1.collect; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,+BAAiC;AAAxB,+FAAA,OAAO,OAAA;AAEhB,+BAAwC;AAA/B,sGAAA,cAAc,OAAA;AAEvB,qCAAmF;AAA1E,sGAAA,WAAW,OAAA;AAAE,wGAAA,aAAa,OAAA;AAAE,sGAAA,WAAW,OAAA;AAAE,wGAAA,aAAa,OAAA;AAG/D,uCAAkE;AAAzD,mGAAA,WAAW,OAAA;AAAE,2GAAA,mBAAmB,OAAA;AAGzC,6CAAoD;AAA3C,kHAAA,mBAAmB,OAAA;AAG5B,+BAAyC;AAAhC,uGAAA,eAAe,OAAA;AAGxB,uCAA+D;AAAtD,0GAAA,cAAc,OAAA;AAAE,6GAAA,iBAAiB,OAAA;AAE1C,2CAAgD;AAAvC,8GAAA,gBAAgB,OAAA;AAEzB,mCAakB;AAZhB,oGAAA,UAAU,OAAA;AACV,oGAAA,UAAU,OAAA;AACV,sGAAA,YAAY,OAAA;AACZ,iGAAA,OAAO,OAAA;AACP,oGAAA,UAAU,OAAA;AACV,oGAAA,UAAU,OAAA;AACV,oGAAA,UAAU,OAAA;AACV,qGAAA,WAAW,OAAA;AACX,uGAAA,aAAa,OAAA;AACb,wGAAA,cAAc,OAAA;AACd,oGAAA,UAAU,OAAA;AACV,0GAAA,gBAAgB,OAAA;AAIlB,qCAA2F;AAAlF,0GAAA,eAAe,OAAA;AAAE,6GAAA,kBAAkB,OAAA;AAAE,oHAAA,yBAAyB,OAAA;AAGvE,yCAAwF;AAA/E,2GAAA,cAAc,OAAA;AAAE,wGAAA,WAAW,OAAA;AAAE,6GAAA,gBAAgB,OAAA;AAAE,uGAAA,UAAU,OAAA;AAGlE,uCAAiL;AAAxK,mGAAA,OAAO,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,sGAAA,UAAU,OAAA;AAAE,2GAAA,eAAe,OAAA;AAAE,0GAAA,cAAc,OAAA;AAAE,4GAAA,gBAAgB,OAAA;AAAE,oGAAA,QAAQ,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,4GAAA,gBAAgB,OAAA;AAAE,6GAAA,iBAAiB,OAAA;AAG5J,0CAAkH;AAAzG,wGAAA,YAAY,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,uGAAA,WAAW,OAAA;AAAE,gHAAA,oBAAoB,OAAA;AAAE,oGAAA,QAAQ,OAAA;AAAE,mGAAA,OAAO,OAAA"}

package/dist/mcp/sandbox.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Refuse any path that resolves outside the project root, and any URL that
+ * isn't same-origin with the configured baseUrl. Mirrors
+ * `@ia-qa/self-healing`'s `mcp/sandbox.ts`: MCP arguments come from an agent,
+ * potentially steered by third-party content (prompt injection), unlike a CLI
+ * typed by a human in their own shell.
+ */
+export declare function assertInsideProject(candidate: string, label: string, root?: string): string;
+export declare function assertUrlAllowed(url: string, baseUrl?: string): void;

package/dist/mcp/sandbox.js

@@ -0,0 +1,82 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertInsideProject = assertInsideProject;
+exports.assertUrlAllowed = assertUrlAllowed;
+const path = __importStar(require("path"));
+/**
+ * Refuse any path that resolves outside the project root, and any URL that
+ * isn't same-origin with the configured baseUrl. Mirrors
+ * `@ia-qa/self-healing`'s `mcp/sandbox.ts`: MCP arguments come from an agent,
+ * potentially steered by third-party content (prompt injection), unlike a CLI
+ * typed by a human in their own shell.
+ */
+function assertInsideProject(candidate, label, root = process.cwd()) {
+    if (process.env.IAQA_ALLOW_OUTSIDE_PATHS === '1') {
+        return path.resolve(root, candidate);
+    }
+    const resolved = path.resolve(root, candidate);
+    const rootWithSep = root.endsWith(path.sep) ? root : root + path.sep;
+    if (resolved !== root && !resolved.startsWith(rootWithSep)) {
+        throw new Error(`${label} "${candidate}" resolves to "${resolved}", outside the project root "${root}". ` +
+            `Refusing for safety — an MCP tool call can originate from agent-interpreted content, not just ` +
+            `a trusted human shell. Set IAQA_ALLOW_OUTSIDE_PATHS=1 to override if this is intentional.`);
+    }
+    return resolved;
+}
+function assertUrlAllowed(url, baseUrl) {
+    if (process.env.IAQA_ALLOW_ANY_URL === '1' || !baseUrl)
+        return;
+    let target, base;
+    try {
+        target = new URL(url);
+    }
+    catch {
+        throw new Error(`scan_app: "${url}" is not a valid URL.`);
+    }
+    try {
+        base = new URL(baseUrl);
+    }
+    catch {
+        return;
+    }
+    if (target.origin !== base.origin) {
+        throw new Error(`scan_app refused "${url}": not same-origin as the configured baseUrl "${baseUrl}". ` +
+            `This guards against an agent being steered (prompt injection) toward an internal-only ` +
+            `endpoint reachable from this machine. Set IAQA_ALLOW_ANY_URL=1 to lift this for legitimate ` +
+            `multi-origin apps.`);
+    }
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/mcp/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/mcp/sandbox.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,kDAcC;AAED,4CAqBC;AA9CD,2CAA6B;AAE7B;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,SAAiB,EAAE,KAAa,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE;IACxF,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,GAAG,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;IACrE,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,KAAK,SAAS,kBAAkB,QAAQ,gCAAgC,IAAI,KAAK;YACvF,gGAAgG;YAChG,2FAA2F,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAW,EAAE,OAAgB;IAC5D,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,GAAG,IAAI,CAAC,OAAO;QAAE,OAAO;IAC/D,IAAI,MAAW,EAAE,IAAS,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,uBAAuB,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,qBAAqB,GAAG,iDAAiD,OAAO,KAAK;YACnF,wFAAwF;YACxF,6FAA6F;YAC7F,oBAAoB,CACvB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/mcp/server.d.ts

@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+declare const TOOLS: ({
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            url: {
+                type: string;
+                description: string;
+            };
+            max_depth: {
+                type: string;
+                description: string;
+            };
+            max_pages: {
+                type: string;
+                description: string;
+            };
+            reveal: {
+                type: string;
+                description: string;
+            };
+            session: {
+                type: string;
+                description: string;
+            };
+            network: {
+                type: string;
+                description: string;
+            };
+            network_threshold: {
+                type: string;
+                description: string;
+            };
+            out_dir: {
+                type: string;
+                description: string;
+            };
+            write: {
+                type: string;
+                description: string;
+            };
+            page?: undefined;
+            provider?: undefined;
+            model?: undefined;
+            api_key_env?: undefined;
+            limit?: undefined;
+        };
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            page: {
+                type: string;
+                description: string;
+            };
+            provider: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            model: {
+                type: string;
+                description: string;
+            };
+            api_key_env: {
+                type: string;
+                description: string;
+            };
+            write: {
+                type: string;
+                description: string;
+            };
+            out_dir: {
+                type: string;
+                description: string;
+            };
+            url?: undefined;
+            max_depth?: undefined;
+            max_pages?: undefined;
+            reveal?: undefined;
+            session?: undefined;
+            network?: undefined;
+            network_threshold?: undefined;
+            limit?: undefined;
+        };
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            limit: {
+                type: string;
+                description: string;
+            };
+            url?: undefined;
+            max_depth?: undefined;
+            max_pages?: undefined;
+            reveal?: undefined;
+            session?: undefined;
+            network?: undefined;
+            network_threshold?: undefined;
+            out_dir?: undefined;
+            write?: undefined;
+            page?: undefined;
+            provider?: undefined;
+            model?: undefined;
+            api_key_env?: undefined;
+        };
+    };
+})[];
+export declare function callTool(name: string, args: any): Promise<string>;
+declare function main(): void;
+export { TOOLS, main };

package/dist/mcp/server.js

@@ -0,0 +1,315 @@
+#!/usr/bin/env node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOOLS = void 0;
+exports.callTool = callTool;
+exports.main = main;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const scan_1 = require("../scan");
+const history_1 = require("../history");
+const config_1 = require("../config");
+const citations_1 = require("../citations");
+const classify_1 = require("../ai/classify");
+const taxonomy_1 = require("../taxonomy");
+const sandbox_1 = require("./sandbox");
+/** Where each provider's key is looked up when nothing names one explicitly. */
+const DEFAULT_KEY_ENV = {
+    anthropic: 'ANTHROPIC_API_KEY',
+    openai: 'OPENAI_API_KEY',
+    google: 'GEMINI_API_KEY',
+};
+/**
+ * @ia-qa/qa-discovery — local stdio MCP server.
+ *
+ * Dependency-free JSON-RPC 2.0 over stdio, same shape as
+ * `@ia-qa/self-healing`'s `mcp/server.ts` — runs on the end user's machine,
+ * launches its own headless Chromium, and exposes the SAME operation the CLI
+ * exposes (`scan`), so a human and an agent get an identical contract. Also
+ * corrects a gap in self-healing (its own `discover` has no MCP tool — this
+ * one does, from day one).
+ *
+ * `login` is deliberately NOT a tool here. It opens a visible browser and waits
+ * for a person at it, then at the keyboard — an agent cannot perform either
+ * step, and exposing it would hang the caller. When `scan_app` reports pages in
+ * `loginWall`, the answer is to ask the human to run `ia-qa-discover login` and
+ * then call `scan_app` again; a session can also be passed via `session`.
+ *
+ * stdout carries the protocol only; all logs go to stderr.
+ */
+const PROTOCOL_VERSION = '2024-11-05';
+const SERVER_INFO = { name: 'ia-qa-qa-discovery', version: require('../../package.json').version };
+const TOOLS = [
+    {
+        name: 'scan_app',
+        description: "Crawl an app's same-origin pages from a URL (or the configured baseUrl) and capture each page's structural surface — title, meta description, heading hierarchy, forms, and observed same-/cross-origin API calls. Local headless browser; nothing leaves this machine. Deterministic, no LLM, no verdict — this is recon, not a gate. Diffs against the previous capture and returns a structured summary. IMPORTANT: check `loginWall` in the result before reporting coverage — pages listed there still show a login form, which means the scan measured the login wall rather than the app (an app whose catch-all route renders the login page answers HTTP 200 at every URL, so the page count alone looks like success). The fix is a human running `ia-qa-discover login` in their own terminal — you cannot run it, it waits for a person at a browser — or passing an existing storageState via `session`.",
+        inputSchema: {
+            type: 'object',
+            properties: {
+                url: { type: 'string', description: 'Start URL. Omit to reuse the saved baseUrl in .ia-qa-discovery/config.json.' },
+                max_depth: { type: 'integer', description: 'Crawl link-depth. Default 2.' },
+                max_pages: { type: 'integer', description: 'Hard cap on pages visited. Default 60.' },
+                reveal: { type: 'boolean', description: 'Open menus/dropdowns to harvest hidden links. Default true.' },
+                session: { type: 'string', description: 'Path to an existing Playwright storageState file to reuse (e.g. from `ia-qa-heal login`).' },
+                network: { type: 'boolean', description: 'Observe API/network calls per page. Default true.' },
+                network_threshold: { type: 'number', description: 'Fraction of pages (0-1) a call must appear on to be promoted as shared. Default 0.6.' },
+                out_dir: { type: 'string', description: 'Resolve .ia-qa-discovery/ under this directory instead of the current one.' },
+                write: { type: 'boolean', description: 'Persist capture/ + history.jsonl to disk. Default true — set false for an in-memory preview.' },
+            },
+        },
+    },
+    {
+        name: 'classify_app',
+        description: "OPTIONAL, BYOK. Classify the entry points in a capture that scan_app already wrote: what each one is FOR (authentication, payment, search, data-entry…) and how sensitive what it handles is. Reads the capture offline — no browser, your app is never touched. \"Offline\" here means no browser, NOT that nothing leaves: this is the only tool on this server that sends anything anywhere. What goes to the model provider is each page's full URL, title, description, headings, the observed API calls (method, normalised path, status) and each form field's name, type, label and selector — live text from the user's app, including any `q=` search value. Page HTML, cookies and the session file never leave. Tell the user that before you call it on an app that is private or authenticated. Every classification carries a sentence a human reads AND a path into the capture that this server resolves and CHECKS before keeping it; a claim citing something that does not exist, or misdescribing what it cites, is dropped and the drop is reported. That check proves the premise, never the conclusion — a model can cite a real password field and still call the page a checkout, so present the `why` and the `confidence`, never the label alone. Entry points under `refused` are ones the model declined to label: that is an answer needing a person, not a retry. IMPORTANT: if `failed` is set on a page, the model call did not succeed — say so; it is not a finding about the app. The API key is read from an environment variable on THIS machine (api_key_env) — do NOT pass a raw key in the call. This is not a gate and produces no verdict.",
+        inputSchema: {
+            type: 'object',
+            properties: {
+                page: { type: 'string', description: 'Classify just this page from the capture. Omit for all of them.' },
+                provider: { type: 'string', enum: ['anthropic', 'openai', 'google'], description: 'Overrides the "ai" block in config.json. Omit to use what the project already configured.' },
+                model: { type: 'string', description: 'Pinned model id, e.g. claude-haiku-4-5, gpt-4o-mini. Runs at temperature 0.' },
+                api_key_env: { type: 'string', description: 'Name of the environment variable on this machine holding the API key. The raw key is never passed through a tool call.' },
+                write: { type: 'boolean', description: 'Persist .ia-qa-discovery/classification.json. Default true.' },
+                out_dir: { type: 'string', description: 'Resolve .ia-qa-discovery/ under this directory instead of the current one.' },
+            },
+        },
+    },
+    {
+        name: 'discovery_history',
+        description: 'Read-only. The recon trend no single scan can reconstruct — pages/forms/API-surface over time, what changed run over run. Reads .ia-qa-discovery/history.jsonl, written by every scan_app call that persists.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                limit: { type: 'integer', description: 'How many recorded runs to read back, newest last. Default 500.' },
+            },
+        },
+    },
+];
+exports.TOOLS = TOOLS;
+async function callTool(name, args) {
+    if (name === 'scan_app') {
+        const outDir = args?.out_dir;
+        if (outDir)
+            (0, config_1.setBaseDir)((0, sandbox_1.assertInsideProject)(outDir, 'out_dir'));
+        try {
+            if (args?.session)
+                (0, sandbox_1.assertInsideProject)(args.session, 'session');
+            if (args?.url) {
+                const configuredBaseUrl = (0, config_1.configExists)() ? (0, config_1.loadConfig)().baseUrl : undefined;
+                (0, sandbox_1.assertUrlAllowed)(args.url, configuredBaseUrl);
+            }
+            const result = await (0, scan_1.scanApp)({
+                url: args?.url,
+                maxDepth: args?.max_depth,
+                maxPages: args?.max_pages,
+                reveal: args?.reveal,
+                session: args?.session,
+                network: args?.network,
+                networkThreshold: args?.network_threshold,
+                write: args?.write,
+            });
+            return JSON.stringify(result, null, 2);
+        }
+        finally {
+            if (outDir)
+                (0, config_1.setBaseDir)(null);
+        }
+    }
+    if (name === 'classify_app') {
+        const outDir = args?.out_dir;
+        if (outDir)
+            (0, config_1.setBaseDir)((0, sandbox_1.assertInsideProject)(outDir, 'out_dir'));
+        try {
+            const index = (0, citations_1.loadCaptureIndex)();
+            if (index.pages.size === 0) {
+                throw new Error('No capture to classify. Run scan_app first — this reads what that wrote, it does not make one.');
+            }
+            // Config first, arguments as override. An agent on a configured project
+            // calls this with no arguments at all.
+            const configured = ((0, config_1.configExists)() ? (0, config_1.loadConfig)().ai : undefined) ?? {};
+            const provider = (args?.provider ?? configured.provider);
+            const model = args?.model ?? configured.model;
+            if (!provider || !model) {
+                throw new Error('No model to call. Either add an "ai" block to .ia-qa-discovery/config.json, or pass provider + model + api_key_env. ' +
+                    'The deterministic tools (scan_app, discovery_history) work fully without any of this.');
+            }
+            // The key is read here, from this machine's environment. It is never an
+            // argument: a tool call can be logged, replayed, or composed by an agent
+            // acting on third-party content.
+            const keyEnv = args?.api_key_env ??
+                (configured.apiKey?.source === 'env' ? configured.apiKey.key : undefined) ??
+                DEFAULT_KEY_ENV[provider];
+            const apiKey = process.env[keyEnv];
+            if (!apiKey) {
+                throw new Error(`Environment variable "${keyEnv}" is not set on this machine, so there is no key to call ${provider} with.`);
+            }
+            const pages = [...index.pages.values()].filter((p) => !args?.page || p.page === args.page);
+            if (pages.length === 0) {
+                throw new Error(`No page "${args.page}" in the capture. Have: ${[...index.pages.keys()].join(', ')}`);
+            }
+            const perPage = {};
+            let kept = 0;
+            let refused = 0;
+            let dropped = 0;
+            const failures = [];
+            for (const page of pages) {
+                if ((0, classify_1.entryPointsOf)(page).length === 0)
+                    continue; // takes no input; not sent at all
+                const result = await (0, classify_1.classifyPage)(page, index, { provider, model, apiKey });
+                perPage[page.page] = result;
+                kept += result.kept.length;
+                refused += result.refused.length;
+                dropped += result.dropped.length;
+                if (result.failed)
+                    failures.push(`${page.page}: ${result.failed.reason}`);
+            }
+            const document = {
+                schema: classify_1.CLASSIFICATION_SCHEMA,
+                taxonomyVersion: taxonomy_1.TAXONOMY_VERSION,
+                classifiedAt: new Date().toISOString(),
+                model: `${provider}/${model}`,
+                totals: { kept, refused, dropped },
+                // Named at the top level so a caller cannot summarise the totals without
+                // meeting it: zero kept because the call failed is not zero kept.
+                ...(failures.length > 0
+                    ? { failed: failures, note: 'Some pages could not be classified at all — the model call did not succeed. This says nothing about the app.' }
+                    : {}),
+                pages: perPage,
+            };
+            if (args?.write !== false) {
+                const file = path.join((0, config_1.baseDir)(), config_1.CONFIG_DIR, classify_1.CLASSIFICATION_FILENAME);
+                fs.mkdirSync(path.dirname(file), { recursive: true });
+                fs.writeFileSync(file, JSON.stringify(document, null, 2) + '\n', 'utf8');
+            }
+            return JSON.stringify(document, null, 2);
+        }
+        finally {
+            if (outDir)
+                (0, config_1.setBaseDir)(null);
+        }
+    }
+    if (name === 'discovery_history') {
+        const entries = (0, history_1.readHistory)(typeof args?.limit === 'number' ? args.limit : undefined);
+        return JSON.stringify(entries, null, 2);
+    }
+    throw new Error(`Unknown tool "${name}". Call tools/list to see available tools.`);
+}
+function send(message) {
+    process.stdout.write(JSON.stringify(message) + '\n');
+}
+function reply(id, result) {
+    send({ jsonrpc: '2.0', id, result });
+}
+function replyError(id, code, message) {
+    send({ jsonrpc: '2.0', id, error: { code, message } });
+}
+async function handle(req) {
+    const { id, method, params } = req;
+    const isNotification = id === undefined || id === null;
+    try {
+        if (method === 'initialize') {
+            reply(id, {
+                protocolVersion: params?.protocolVersion || PROTOCOL_VERSION,
+                capabilities: { tools: {} },
+                serverInfo: SERVER_INFO,
+            });
+            return;
+        }
+        if (method === 'notifications/initialized' || method === 'initialized') {
+            return; // notification, no response
+        }
+        if (method === 'ping') {
+            reply(id, {});
+            return;
+        }
+        if (method === 'tools/list') {
+            reply(id, { tools: TOOLS });
+            return;
+        }
+        if (method === 'tools/call') {
+            const toolName = params?.name;
+            try {
+                const text = await callTool(toolName, params?.arguments || {});
+                reply(id, { content: [{ type: 'text', text }] });
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                reply(id, { content: [{ type: 'text', text: `Error: ${message}` }], isError: true });
+            }
+            return;
+        }
+        if (!isNotification)
+            replyError(id, -32601, `Method not found: ${method}`);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (!isNotification)
+            replyError(id, -32603, message);
+        else
+            process.stderr.write(`[ia-qa-qa-discovery] error handling ${method}: ${message}\n`);
+    }
+}
+function main() {
+    if (process.argv.includes('--version') || process.argv.includes('-v')) {
+        process.stdout.write(SERVER_INFO.version + '\n');
+        process.exit(0);
+    }
+    process.stderr.write('[ia-qa-qa-discovery] MCP server ready (stdio)\n');
+    let buffer = '';
+    process.stdin.setEncoding('utf8');
+    process.stdin.on('data', (chunk) => {
+        buffer += chunk;
+        let nl;
+        while ((nl = buffer.indexOf('\n')) !== -1) {
+            const line = buffer.slice(0, nl).trim();
+            buffer = buffer.slice(nl + 1);
+            if (!line)
+                continue;
+            let req;
+            try {
+                req = JSON.parse(line);
+            }
+            catch {
+                process.stderr.write(`[ia-qa-qa-discovery] non-JSON line ignored: ${line.slice(0, 80)}\n`);
+                continue;
+            }
+            void handle(req);
+        }
+    });
+    process.stdin.on('end', () => process.exit(0));
+}
+if (require.main === module)
+    main();
+//# sourceMappingURL=server.js.map

package/dist/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiGA,4BA8GC;AAuFe,oBAAI;AArSpB,uCAAyB;AACzB,2CAA6B;AAE7B,kCAAkC;AAClC,wCAAyC;AACzC,sCAAsF;AACtF,4CAAgD;AAChD,6CAA6G;AAC7G,0CAA+C;AAC/C,uCAAkE;AAElE,gFAAgF;AAChF,MAAM,eAAe,GAA2B;IAC9C,SAAS,EAAE,mBAAmB;IAC9B,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;CACzB,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,gBAAgB,GAAG,YAAY,CAAC;AACtC,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAiB,EAAE,CAAC;AAS7G,MAAM,KAAK,GAAG;IACZ;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EACT,u3BAAu3B;QACz3B,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6EAA6E,EAAE;gBACnH,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,8BAA8B,EAAE;gBAC3E,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,wCAAwC,EAAE;gBACrF,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,6DAA6D,EAAE;gBACvG,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2FAA2F,EAAE;gBACrI,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mDAAmD,EAAE;gBAC9F,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sFAAsF,EAAE;gBAC1I,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4EAA4E,EAAE;gBACtH,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,8FAA8F,EAAE;aACxI;SACF;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EACT,wlDAAwlD;QAC1lD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iEAAiE,EAAE;gBACxG,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,WAAW,EAAE,2FAA2F,EAAE;gBAC/K,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6EAA6E,EAAE;gBACrH,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wHAAwH,EAAE;gBACtK,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,6DAA6D,EAAE;gBACtG,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4EAA4E,EAAE;aACvH;SACF;KACF;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,+MAA+M;QACjN,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,gEAAgE,EAAE;aAC1G;SACF;KACF;CACF,CAAC;AAuMO,sBAAK;AArMP,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAS;IACpD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,MAAM,GAAuB,IAAI,EAAE,OAAO,CAAC;QACjD,IAAI,MAAM;YAAE,IAAA,mBAAU,EAAC,IAAA,6BAAmB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,IAAI,IAAI,EAAE,OAAO;gBAAE,IAAA,6BAAmB,EAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAChE,IAAI,IAAI,EAAE,GAAG,EAAE,CAAC;gBACd,MAAM,iBAAiB,GAAG,IAAA,qBAAY,GAAE,CAAC,CAAC,CAAC,IAAA,mBAAU,GAAE,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC5E,IAAA,0BAAgB,EAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAA,cAAO,EAAC;gBAC3B,GAAG,EAAE,IAAI,EAAE,GAAG;gBACd,QAAQ,EAAE,IAAI,EAAE,SAAS;gBACzB,QAAQ,EAAE,IAAI,EAAE,SAAS;gBACzB,MAAM,EAAE,IAAI,EAAE,MAAM;gBACpB,OAAO,EAAE,IAAI,EAAE,OAAO;gBACtB,OAAO,EAAE,IAAI,EAAE,OAAO;gBACtB,gBAAgB,EAAE,IAAI,EAAE,iBAAiB;gBACzC,KAAK,EAAE,IAAI,EAAE,KAAK;aACnB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzC,CAAC;gBAAS,CAAC;YACT,IAAI,MAAM;gBAAE,IAAA,mBAAU,EAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAuB,IAAI,EAAE,OAAO,CAAC;QACjD,IAAI,MAAM;YAAE,IAAA,mBAAU,EAAC,IAAA,6BAAmB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAA,4BAAgB,GAAE,CAAC;YACjC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;YACpH,CAAC;YAED,wEAAwE;YACxE,uCAAuC;YACvC,MAAM,UAAU,GAAG,CAAC,IAAA,qBAAY,GAAE,CAAC,CAAC,CAAE,IAAA,mBAAU,GAA0G,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACjL,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAA2B,CAAC;YACnF,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;YAC9C,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,sHAAsH;oBACpH,uFAAuF,CAC1F,CAAC;YACJ,CAAC;YAED,wEAAwE;YACxE,yEAAyE;YACzE,iCAAiC;YACjC,MAAM,MAAM,GACV,IAAI,EAAE,WAAW;gBACjB,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzE,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,4DAA4D,QAAQ,QAAQ,CAAC,CAAC;YAC/H,CAAC;YAED,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,IAAI,2BAA2B,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxG,CAAC;YAED,MAAM,OAAO,GAA4B,EAAE,CAAC;YAC5C,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAA,wBAAa,EAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS,CAAC,kCAAkC;gBAClF,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAY,EAAC,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC5E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;gBAC5B,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC3B,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;gBACjC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;gBACjC,IAAI,MAAM,CAAC,MAAM;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5E,CAAC;YAED,MAAM,QAAQ,GAAG;gBACf,MAAM,EAAE,gCAAqB;gBAC7B,eAAe,EAAE,2BAAgB;gBACjC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACtC,KAAK,EAAE,GAAG,QAAQ,IAAI,KAAK,EAAE;gBAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE;gBAClC,yEAAyE;gBACzE,kEAAkE;gBAClE,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;oBACrB,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,8GAA8G,EAAE;oBAC5I,CAAC,CAAC,EAAE,CAAC;gBACP,KAAK,EAAE,OAAO;aACf,CAAC;YAEF,IAAI,IAAI,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,gBAAO,GAAE,EAAE,mBAAU,EAAE,kCAAuB,CAAC,CAAC;gBACvE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YACT,IAAI,MAAM;gBAAE,IAAA,mBAAU,EAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,IAAA,qBAAW,EAAC,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,4CAA4C,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,IAAI,CAAC,OAAgB;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,KAAK,CAAC,EAAO,EAAE,MAAe;IACrC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,UAAU,CAAC,EAAO,EAAE,IAAY,EAAE,OAAe;IACxD,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAmB;IACvC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACnC,MAAM,cAAc,GAAG,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,IAAI,CAAC;IAEvD,IAAI,CAAC;QACH,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,KAAK,CAAC,EAAE,EAAE;gBACR,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,gBAAgB;gBAC5D,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3B,UAAU,EAAE,WAAW;aACxB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,2BAA2B,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YACvE,OAAO,CAAC,4BAA4B;QACtC,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,MAAM,EAAE,IAAI,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;gBAC/D,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,cAAc;YAAE,UAAU,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,qBAAqB,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,cAAc;YAAE,UAAU,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;;YAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,SAAS,IAAI;IACX,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACxE,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,MAAM,IAAI,KAAK,CAAC;QAChB,IAAI,EAAU,CAAC;QACf,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,GAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC3F,SAAS;YACX,CAAC;YACD,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;IAAE,IAAI,EAAE,CAAC"}