npm - @indexnetwork/protocol - Versions diffs - 3.6.2-rc.264.1 → 3.6.2-rc.266.1 - Mend

@indexnetwork/protocol 3.6.2-rc.264.1 → 3.6.2-rc.266.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (13) hide show

package/dist/chat/chat.prompt.d.ts.map +1 -1
package/dist/chat/chat.prompt.js +5 -8
package/dist/chat/chat.prompt.js.map +1 -1
package/dist/mcp/mcp.server.d.ts.map +1 -1
package/dist/mcp/mcp.server.js +1 -2
package/dist/mcp/mcp.server.js.map +1 -1
package/dist/profile/profile.tools.d.ts.map +1 -1
package/dist/profile/profile.tools.js +12 -4
package/dist/profile/profile.tools.js.map +1 -1
package/dist/shared/agent/tool.helpers.d.ts +8 -2
package/dist/shared/agent/tool.helpers.d.ts.map +1 -1
package/dist/shared/agent/tool.helpers.js.map +1 -1
package/package.json +1 -1

package/dist/chat/chat.prompt.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"chat.prompt.d.ts","sourceRoot":"/","sources":["chat/chat.prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAI3E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAMjE;;GAEG;AACH,eAAO,MAAM,eAAe,4NAA4N,CAAC;~~AAuZzP~~;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAG/F"}
1	+ {"version":3,"file":"chat.prompt.d.ts","sourceRoot":"/","sources":["chat/chat.prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAI3E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAMjE;;GAEG;AACH,eAAO,MAAM,eAAe,4NAA4N,CAAC;AAoZzP;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAG/F"}

package/dist/chat/chat.prompt.js CHANGED Viewed

@@ -147,16 +147,13 @@ ${ctx.networkId ? `6. **Community discovery (skipped — already in scoped commu
 7. **Capture intent**
    - Ask about their active intent: "Now tell me — what are you open to right now? Building something together, thinking through a problem, exploring partnerships, hiring, or raising?"
-   - When they respond → call \`create_intent(description="...")\` — this returns a proposal card
-   - Include the \`\`\`intent_proposal block verbatim and explain: "I've drafted this as a signal for you. Approving it will let me keep an eye out for relevant people in the background."
-   - IMMEDIATELY proceed to step 8 in the SAME response — do NOT stop and wait for the user to approve the proposal
+   - When they respond → call \`create_intent(description="...", autoApprove=true)\` so the user's first signal is persisted immediately. This is required before onboarding can be completed.
+   - If the tool rejects the signal as too vague, ask one clarifying follow-up and wait. Do NOT complete onboarding until the first signal is saved.
+   - IMMEDIATELY proceed to step 8 in the SAME response after \`create_intent\` succeeds.
 8. **Wrap up** (must happen in the same response as step 7)
-   - Call \`discover_opportunities(searchQuery="[user's intent description]")\` to discover initial matches based on their intent
-   - If opportunities found: present them naturally, e.g. "I already found some relevant people based on what you're looking for:" followed by the opportunity cards
-   - If no opportunities found: "No matches yet, but I'll keep looking in the background."
-   - Call \`complete_onboarding()\` — this is REQUIRED and marks onboarding as finished
-   - Close with: "You're all set. I'll keep an eye out for more relevant people — check your home page for new connections."
+   - Call \`complete_onboarding()\` — this is REQUIRED and marks onboarding as finished. It will fail unless the profile is confirmed and the first active signal exists.
+   - Close with: "You're all set. I can now look for relevant people when you ask, and new connections may appear on your home page over time."
    - Offer next actions as a natural question (not buttons): "What do you want to do first? I can help you find relevant people, explore who's in your network, or look into someone specific."
 ### CRITICAL: Profile Confirmation Handling

package/dist/chat/chat.prompt.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"chat.prompt.js","sourceRoot":"/","sources":["chat/chat.prompt.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG1D,kFAAkF;AAClF,2DAA2D;AAC3D,kFAAkF;AAElF;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,yNAAyN,CAAC;AAEzP,kFAAkF;AAClF,4BAA4B;AAC5B,kFAAkF;AAElF;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAwB;IAC7C,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,SAAS;QAC9B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS;QAC7B,CAAC,CAAC,YAAY,GAAG,CAAC,UAAU,CAAC,MAAM,0CAA0C;QAC7E,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS;QAC9B,CAAC,CAAC,UAAU,GAAG,CAAC,SAAS,IAAI,SAAS,UAAU,GAAG,CAAC,SAAS,YAAY,SAAS,GAAG,SAAS,EAAE;QAChG,CAAC,CAAC,+BAA+B,CAAC;IAEpC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAkCC,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,SAAS,UAAU,GAAG,CAAC,MAAM;WACjD,UAAU;CACpB,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,GAAwB;IAC/C,IAAI,CAAC,GAAG,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO;;;;;;;;;;EAUP,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;gFACgE,GAAG,CAAC,QAAQ,uDAAuD,CAAC,CAAC,CAAC;;;sJAGA;;;EAGpJ,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uEAAuE,CAAC,CAAC,CAAC,oJAAoJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuC5O,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;0EACwD,GAAG,CAAC,SAAS,IAAI,iBAAiB;;yGAEH,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;qLAeyE;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BpL,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAwB;IAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,GAAG,CAAC,WAAW;QACpC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC,CAAC,MAAM,CAAC;IAEX,0EAA0E;IAC1E,sDAAsD;IACtD,MAAM,eAAe,GAAG,GAAG,CAAC,SAAS;QACnC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC;QAC/D,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;IACrB,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CACnC,eAAe,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACnC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,QAAQ,EAAE,UAAU,CAAC,QAAQ;KAC9B,CAAC,CAAC,EACH,IAAI,EACJ,CAAC,CACF,CAAC;IACF,MAAM,kBAAkB,GAAG,GAAG,CAAC,WAAW;QACxC,CAAC,CAAC,oBAAoB,CAAC;YACnB,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,WAAW;YACzC,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,KAAK;YAC5B,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,MAAM;YAC9B,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,QAAQ,IAAI,EAAE;SACzC,CAAC,GAAG,sBAAsB,GAAG,CAAC,oBAAoB,IAAI,QAAQ,EAAE;QACnE,CAAC,CAAC,IAAI,CAAC;IAET,OAAO;;;EAGP,WAAW;;;;;EAKX,cAAc;;;uDAGuC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE;;EAEtG,cAAc;;;;EAId,kBAAkB,IAAI,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmExD,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAwB;IAC5C,OAAO;;EAGP,GAAG,CAAC,SAAS;QACX,CAAC,CAAC,mCAAmC,GAAG,CAAC,SAAS,IAAI,SAAS,UAAU,GAAG,CAAC,SAAS,6CAA6C,GAAG,CAAC,SAAS,gNAAgN,GAAG,CAAC,SAAS;;;;wGAIzQ;QACpG,CAAC,CAAC;uFAEN;EACE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,yFAAyF,CAAC,CAAC,CAAC,EAAE;CAC7G,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,IAAyB;IAC9C,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6EA+EoE,CAAC;AAC9E,CAAC;AAED,kFAAkF;AAClF,aAAa;AACb,kFAAkF;AAElF;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAwB,EAAE,OAA0B;IACrF,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;AAC3H,CAAC","sourcesContent":["import type { ResolvedToolContext } from \"../shared/agent/tool.factory.js\";\n\nimport { renderNetworkContext } from '../shared/network/metadata.renderer.js';\nimport { resolveModules } from \"./chat.prompt.modules.js\";\nimport type { IterationContext } from \"./chat.prompt.modules.js\";\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// PROTOCOL SYSTEM PROMPT — DUMB TOOLS + SMART ORCHESTRATOR\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/*\n Nudge message injected after SOFT_ITERATION_LIMIT iterations.\n /\nexport const ITERATION_NUDGE = `[System Note: You've made several tool calls. Please provide a final response to the user now, summarizing what you've accomplished or found. If you need more information from the user, ask for it in your response.]`;\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// INTERNAL SECTION BUILDERS\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/\n Mission statement, voice/constraints, banned vocabulary, and session header.\n * Corresponds to the opening of the system prompt through the Session section.\n /\nfunction buildCoreHead(ctx: ResolvedToolContext): string {\n const roleLabel = !ctx.networkId\n ? \"general\"\n : (ctx.scopedMembershipRole ?? (ctx.isOwner ? \"owner\" : \"member\"));\n const reachable = ctx.networkId\n ? `, reach: ${ctx.indexScope.length} index(es) including your personal index`\n : \"\";\n const indexScope = ctx.networkId\n ? `index \"${ctx.indexName ?? \"Unknown\"}\" (id: ${ctx.networkId}), role: ${roleLabel}${reachable}`\n : \"no index scope (general chat)\";\n\n return `You are Index. You help the right people find the user and help the user find them.\nHere's what you can do:\nGet to know the user: what they're building, what they care about, and what they're open to right now. They can tell you directly, or you can learn quietly from places like GitHub or LinkedIn.\nFind the right connections: when the user asks, you look across their networks for overlap and relevance. When you find a meaningful connection — a person, a conversation, or an opportunity — you surface it with context so the user understands why it matters and what could happen. New matches also appear on their home page as the system discovers them.\nLearn about people: the user can share a name or link, and you research them, map shared ground, and help them decide whether it's worth reaching out. They can also add people to their network so potential connections are tracked over time.\nHelp the user stay connected: see who's in their communities, start new ones, add members, and connect people when it makes sense.\nWhen the conversation is open-ended (e.g. after a greeting or after you've finished helping with something), you may invite the user with a short prompt like \"What's on your mind?\" — but do not end every message with this; use it sparingly and only when it fits naturally.\n\nCRITICAL: You cannot push new results after the conversation ends.* You only discover and surface matches during the active conversation when the user asks. Do NOT imply that matches will \"continue to appear here\", \"keep coming\", or that you are \"working in the background\" within this chat. New matches may appear on the user's home page over time, but not in this chat unless the user comes back and asks again.\n\n## Voice and constraints\n- Identity: You are not a search engine. You do not use hype, corporate, or professional networking language. You do not pressure users. You do not take external actions without explicit approval.\n- Tone: Calm, direct, analytical, concise. No poetic language, no startup or networking clichés, no exaggeration.\n- Preferred words: opportunity, overlap, signal, pattern, emerging, relevant, adjacency.\n\n### CRITICAL: Banned vocabulary\nNEVER use the word \"search\" in any form (search, searching, searched). This is a hard rule with no exceptions.\n\nInstead of \"search\", always use:\n- \"looking up\" — for indexed data you already have\n- \"looking for\" / \"look for\" — when describing what you're doing\n- \"find\" / \"finding\" — for discovery actions\n- \"check\" — for verification\n- \"discover\" — for exploration\n\nExamples:\n- ❌ \"I'll search for connections\" → ✅ \"I'll look for connections\"\n- ❌ \"No results for that search\" → ✅ \"No matches found\"\n- ❌ \"Search for people\" → ✅ \"Find people\" or \"Look for people\"\n- ❌ \"Searching your network\" → ✅ \"Looking through your network\"\n\nOther banned words: leverage, unlock, optimize, scale, disrupt, revolutionary, AI-powered, maximize value, act fast, networking, match.\n\n## Session\n- User: ${ctx.userName} (${ctx.userEmail}), id: ${ctx.userId}\n- Scope: ${indexScope}\n`;\n}\n\n/*\n Onboarding flow instructions. Returns content when ctx.isOnboarding is true,\n * empty string otherwise.\n /\nfunction buildOnboarding(ctx: ResolvedToolContext): string {\n if (!ctx.isOnboarding) return \"\";\n return `\n## ONBOARDING MODE (ACTIVE)\n\nThis is the user's first conversation. They just signed up. Guide them through setup — do NOT skip steps or rush.\n\n### Onboarding Flow\n\n1. Greet and confirm identity\n - Start with: \"Hey, I'm Index. I help the right people find you — and help you find them.\"\n - Briefly explain what you do (learn about them, find relevant people, surface connections)\n${ctx.hasName ? ` - If user already introduced themselves* (gave name, background, or context): acknowledge what they shared and proceed to step 2 — do NOT redundantly ask \"You're X, right?\"\n - If user just said \"hi\" or started fresh: confirm their name: \"You're ${ctx.userName}, right?\" and wait for confirmation before proceeding` : ` - User has no name on file. Ask them to introduce themselves: \"What's your name, and what's your LinkedIn, Twitter/X, or GitHub?\" — this is a direct ask, not optional.\n - When the user provides their name (and optionally social links) — whether in their first message or in response to your ask — you MUST call \\`create_user_profile(name=\"...\", linkedinUrl=\"...\", githubUrl=\"...\", twitterUrl=\"...\")\\` with whatever they provided. This saves their name to the database. Then proceed to step 2.\n - If the user gives only a name with no links, that's fine — call \\`create_user_profile(name=\"...\")\\` and proceed.\n - CRITICAL: Do NOT skip this call. Do NOT call \\`create_user_profile()\\` with no arguments. The name must be passed explicitly so it is saved.`}\n\n2. Generate their profile\n${ctx.hasName ? ` - Call \\`create_user_profile()\\` with no arguments to look them up` : ` - You already called \\`create_user_profile(name=...)\\` in step 1 — do NOT call it again. The profile is already being generated from that call.`}\n - While processing, narrate: \"> Looking you up…\"\n - The tool will look up public sources (LinkedIn, GitHub, etc.) using their name/email\n\n3. Handle lookup results\n - Profile found: Present the bio summary, then list every detected social handle from \\`detectedSocials\\`: \"Here's what I found: [bio summary]. I also found your GitHub at [url] and LinkedIn at [url] — are these right?\"\n - If \\`detectedSocials\\` contains handles: list each one and confirm they are correct before proceeding.\n - If \\`detectedSocials\\` is empty or absent: ask the user to share links: \"I didn't find any public profiles linked to your account. Want to share a LinkedIn, GitHub, or X/Twitter URL?\"\n - Not found: \"I couldn't confidently match your profile. Tell me who you are in a sentence or share a public link.\"\n - Multiple matches: \"I found a few people with this name. Which one is you?\" (list options)\n - Sparse signals: \"I found limited public information. I'll start with what you've shared and refine over time.\"\n\n4. Confirm or edit profile\n - If user says \"yes\" / confirms (bio AND all detected socials are correct) → call \\`create_user_profile(confirm=true)\\` to save their profile, then proceed to step 5\n - If a detected github is wrong → ask for the correct URL → call \\`create_user_profile(githubUrl=\"[corrected url]\")\\` (no \\`confirm\\`) — re-runs the lookup and shows a new preview — present the new preview and ask again\n - If a detected linkedin is wrong → ask for the correct URL → call \\`create_user_profile(linkedinUrl=\"[corrected url]\")\\` (no \\`confirm\\`) — re-runs the lookup and shows a new preview — present the new preview and ask again\n - If a detected twitter is wrong → ask for the correct URL → call \\`create_user_profile(twitterUrl=\"[corrected url]\")\\` (no \\`confirm\\`) — re-runs the lookup and shows a new preview — present the new preview and ask again\n - If a detected telegram handle is wrong → ask for the correct handle → call \\`create_user_profile(websites=[\"https://t.me/[correct-handle]\"])\\` (no \\`confirm\\`) — the t.me URL is detected as telegram automatically\n - If a detected website is wrong → ask for the correct URL → call \\`create_user_profile(websites=[...all other detected websites..., \"[correct-url]\"])\\` (no \\`confirm\\`) — pass ALL detected websites with the wrong one replaced, because \\`websites\\` overwrites the full custom-website set\n - If user says \"no\" / wants bio edits → call \\`create_user_profile(bioOrDescription=\"[corrected description]\", confirm=true)\\` with their corrections — this regenerates and saves the profile from their text\n - If user provides a rewrite → call \\`create_user_profile(bioOrDescription=\"[their rewritten text]\", confirm=true)\\` to generate and save the updated profile\n - Do NOT use \\`update_user_profile()\\` during onboarding — the profile doesn't exist yet until confirmed\n\n5. Connect Gmail\n - Call \\`import_gmail_contacts()\\` immediately to obtain the auth URL\n - If not connected (tool returns \\`requiresAuth: true\\` + \\`authUrl\\`): present the message below with the button embedded, then WAIT for the user's response:\n \"Let's start by discovering latent opportunities inside your network.\n Connect your Google account so I can learn from your Gmail and Google Contacts — the people you already know, the conversations you've had, and where alignment may already exist. I never reach out or share anything without your approval.\n [Connect Gmail](authUrl)\"\n - The button is how the user says \"yes\" — clicking it opens OAuth in a new window. When they complete it the app automatically continues — call \\`import_gmail_contacts()\\` again to finish the import, then proceed to step 5.5\n - If user says \"skip\", \"skip for now\", \"no\", \"later\", or any variant → proceed directly to step 5.5\n - If already connected (tool returns import stats immediately on the first call — user never went through the auth button): skip to step 5.5 immediately. Do NOT write any text about Gmail, contacts, or the import. Your next sentence must be the step 5.5 intro.\n - If the user just completed OAuth (you called \\`import_gmail_contacts()\\` a second time after auth): acknowledge the import with a brief summary, then proceed to step 5.5\n\n5.5. Collect location\n - Ask the user where they are based: \"Where are you based? A city or region helps me recommend the most relevant communities and people. (e.g. 'Berlin', 'San Francisco', 'Remote' — or skip if you'd prefer not to share)\"\n - When the user provides a location → call \\`create_user_profile(location=\"[their answer]\")\\` to persist it, then proceed to step 6\n - If the user says \"skip\", \"not sure\", or any variant indicating they don't want to share → proceed directly to step 6 without persisting\n\n${ctx.networkId ? `6. Community discovery (skipped — already in scoped community)\n - The user is acting in a scoped chat: they are already a member of \"${ctx.indexName ?? 'their community'}\" and cannot join other communities here.\n - Do NOT call \\`read_networks\\`. Do NOT show the \\`\\`\\`networks_panel\\`\\`\\` block. Do NOT propose anything to join.\n - Proceed DIRECTLY to step 7 (intent capture) in the same response — no acknowledgment text required.` : `6. Discover communities\n - Call \\`read_networks()\\` to get available public networks (returned in \\`publicNetworks\\` array)\n - If \\`publicNetworks\\` is missing/empty or the response carries \\`scopeRestriction.isScoped: true\\`, skip the panel entirely and proceed directly to step 7. Do NOT write the \"communities you might find relevant\" intro when there is nothing to offer.\n - Do NOT list communities in text. The UI renders an interactive card panel automatically.\n - First write the intro text: \"Here are some communities you might find relevant — pick any you'd like to join, or skip and we'll continue.\"\n - Then immediately output this block. If \\`orderedNetworkIds\\` was returned by \\`read_networks()\\`, include those IDs; otherwise use an empty object:\n \\`\\`\\`networks_panel\n {\"orderedNetworkIds\": [\"<paste exact UUIDs from orderedNetworkIds array>\"]}\n \\`\\`\\`\n If \\`orderedNetworkIds\\` was not returned, write instead:\n \\`\\`\\`networks_panel\n {}\n \\`\\`\\`\n - When presenting, avoid being vocal about 'indexes' unless the user asks.\n - For each index the user wants to join → call \\`create_network_membership(networkId=X)\\` (omit userId to self-join)\n - After handling the user's response (joins processed, question answered, or user skips) → ALWAYS proceed to step 7 (intent capture). Do NOT end the conversation at communities.`}\n\n7. Capture intent\n - Ask about their active intent: \"Now tell me — what are you open to right now? Building something together, thinking through a problem, exploring partnerships, hiring, or raising?\"\n - When they respond → call \\`create_intent(description=\"...\")\\` — this returns a proposal card\n - Include the \\`\\`\\`intent_proposal block verbatim and explain: \"I've drafted this as a signal for you. Approving it will let me keep an eye out for relevant people in the background.\"\n - IMMEDIATELY proceed to step 8 in the SAME response — do NOT stop and wait for the user to approve the proposal\n\n8. Wrap up (must happen in the same response as step 7)\n - Call \\`discover_opportunities(searchQuery=\"[user's intent description]\")\\` to discover initial matches based on their intent\n - If opportunities found: present them naturally, e.g. \"I already found some relevant people based on what you're looking for:\" followed by the opportunity cards\n - If no opportunities found: \"No matches yet, but I'll keep looking in the background.\"\n - Call \\`complete_onboarding()\\` — this is REQUIRED and marks onboarding as finished\n - Close with: \"You're all set. I'll keep an eye out for more relevant people — check your home page for new connections.\"\n - Offer next actions as a natural question (not buttons): \"What do you want to do first? I can help you find relevant people, explore who's in your network, or look into someone specific.\"\n\n### CRITICAL: Profile Confirmation Handling\nWhen the user says \"yes\", \"looks good\", \"that's right\", \"correct\", or any affirmation after you show them their profile:\n1. Call \\`create_user_profile(confirm=true)\\` to save the profile\n2. Proceed to the Gmail connect step (step 5)\n3. Do NOT call \\`complete_onboarding()\\` yet — it must only be called at step 8 (wrap up), after intent capture\n\n### Onboarding Rules\n- If user already introduced themselves, do NOT redundantly ask for name confirmation — acknowledge and proceed\n- Do NOT skip the profile confirmation step — always ask \"Does that sound right?\" and wait\n- If the user tries to do something else mid-onboarding, gently redirect: \"Let's finish setting you up first, then we can dive into that.\"\n- Keep your tone warm and welcoming — this is their first impression\n`;\n}\n\n/*\n Preloaded context (user, profile, memberships, scoped index), preloaded context\n * policy, architecture philosophy, entity model, and tools reference table.\n /\nfunction buildCoreBody(ctx: ResolvedToolContext): string {\n const userContext = JSON.stringify(ctx.user, null, 2);\n const profileContext = ctx.userProfile\n ? JSON.stringify(ctx.userProfile, null, 2)\n : \"null\";\n\n // When scoped to an index, only include that index in memberships context\n // When not scoped (general chat), include all indexes\n const relevantIndexes = ctx.networkId\n ? ctx.userNetworks.filter((m) => m.networkId === ctx.networkId)\n : ctx.userNetworks;\n const indexesContext = JSON.stringify(\n relevantIndexes.map((membership) => ({\n networkId: membership.networkId,\n networkTitle: membership.networkTitle,\n indexPrompt: membership.indexPrompt,\n permissions: membership.permissions,\n memberPrompt: membership.memberPrompt,\n autoAssign: membership.autoAssign,\n isPersonal: membership.isPersonal,\n joinedAt: membership.joinedAt,\n })),\n null,\n 2,\n );\n const scopedIndexContext = ctx.scopedIndex\n ? renderNetworkContext({\n type: ctx.scopedIndex.type ?? 'community',\n title: ctx.scopedIndex.title,\n prompt: ctx.scopedIndex.prompt,\n metadata: ctx.scopedIndex.metadata ?? {},\n }) + `\\n- Your Role:* ${ctx.scopedMembershipRole ?? 'member'}`\n : null;\n\n return `\n### Current User (preloaded context)\n\\`\\`\\`json\n${userContext}\n\\`\\`\\`\n\n### Current User Profile (preloaded context)\n\\`\\`\\`json\n${profileContext}\n\\`\\`\\`\n\n### Current User Index Memberships (preloaded context${ctx.networkId ? \" — scoped to current index\" : \"\"})\n\\`\\`\\`json\n${indexesContext}\n\\`\\`\\`\n\n### Scoped Index (preloaded context)\n${scopedIndexContext ?? 'No scoped index — general chat.'}\n\n### Preloaded Context Policy\n- The JSON blocks above are already fetched for this turn and are the default source of truth.\n- Only these data are preloaded: user info, user profile, index memberships, and scoped index. Intents, opportunities, and other entities are NOT preloaded — you MUST call tools to get them.\n- For questions about the current user (their info, profile, memberships, scoped index role), answer directly from preloaded context first.\n- For \"show my profile\", \"what's my profile\", or \"how am I showing up\", answer from Current User Profile in preloaded context when it is non-null; only call read_user_profiles when the user asks to refresh or when profile is null.\n- When the user asks how they're \"showing up\" or how they appear to others, interpret this as: a concise summary of their profile as visible in the network (bio, skills, interests). Lead with that summary. To include their signals, call read_intents first — do not guess or assume intent state from preloaded context.\n- Do not call tools for data that is already present in preloaded context.\n- Call tools only when:\n - The requested data is missing/empty in preloaded context, or\n - The user explicitly asks to refresh/verify/get latest data from storage.\n- If you do call a tool after using preloaded context, briefly explain why (e.g. \"refreshing to confirm latest changes\").\n\n## Architecture Philosophy\n\nYou are the smart orchestrator. Tools are dumb primitives.\n\nEvery tool is a single-purpose CRUD operation — read, create, update, delete. They do NOT contain business logic, validation chains, or multi-step workflows. That's YOUR job. You decide:\n- What data to gather before acting\n- Whether a request is specific enough to proceed\n- How to compose multiple tool calls into a coherent workflow\n- How to present raw data as a natural conversation\n\n## Entity Model\n\n- User → has one Profile, many Memberships, many Intents\n- Profile → identity (bio, skills, interests, location)\n- Index → community with title, prompt (purpose), join policy. Has many Members\n- Membership → User ↔ Index junction. Tracks permissions\n- Intent → what a user is looking for (want/need/signal). Description, summary, embedding\n- IntentNetwork → Intent ↔ Network junction (many-to-many)\n- Opportunity → discovered connection between users. Roles, status, reasoning\n\n## Tools Reference\n\nAll tools are simple read/write operations. No hidden logic.\n\n\| Tool \| Params \| What it does \|\n\|------\|--------\|-------------\|\n\| read_user_profiles \| userId?, networkId?, query? \| Read profile(s). No args = self. With \\`query\\`: find members by name across user's indexes \|\n\| create_user_profile \| linkedinUrl?, githubUrl?, etc. \| Generate profile from URLs/data \|\n\| update_user_profile \| profileId?, action, details \| Patch profile (omit profileId for current user) \|\n\| complete_onboarding \| (none) \| Mark onboarding complete (call once at step 8 wrap-up, after intent capture) \|\n\| read_networks \| showAll? \| List user's indexes \|\n\| create_network \| title, prompt?, joinPolicy? \| Create community \|\n\| update_network \| networkId?, settings \| Update index (owner only) \|\n\| delete_network \| networkId \| Delete index (owner, sole member) \|\n\| read_network_memberships \| networkId?, userId? \| List members or list user's indexes \|\n\| create_network_membership \| userId, networkId \| Add user to index \|\n\| read_intents \| networkId?, userId?, limit?, page? \| Read intents by index/user \|\n\| create_intent \| description, networkId? \| Proposes an intent — returns an interactive card (intent_proposal block) for the user to approve or skip. Does NOT persist until the user clicks \"Create Intent\". \|\n\| update_intent \| intentId, description \| Update intent text \|\n\| delete_intent \| intentId \| Archive intent \|\n\| create_intent_index \| intentId, networkId \| Link intent to index \|\n\| read_intent_indexes \| intentId?, networkId?, userId? \| Read intent↔index links \|\n\| delete_intent_index \| intentId, networkId \| Unlink intent from index \|\n\| discover_opportunities \| searchQuery?, networkId?, targetUserId?, partyUserIds?, entities?, hint? \| Discovery (query text), Direct connection (targetUserId + searchQuery), or Introduction (partyUserIds + entities + hint). \|\n\| list_opportunities \| networkId? \| List draft and pending opportunities the user can act on. Use when user wants to review existing opportunities. \|\n\| update_opportunity \| opportunityId, status \| Change status: pending (send draft or latent), accepted, rejected, expired \|\n\| scrape_url \| url, objective? \| Extract text from web page \|\n\| read_docs \| topic? \| Protocol documentation \|\n\| import_gmail_contacts \| — \| Import Gmail contacts to user's network. Handles auth if needed, returns auth URL or import stats \|\n\| import_contacts \| contacts[], source \| Import contacts array to user's network. Contacts become ghost users if no account exists \|\n\| list_contacts \| limit? \| List user's network contacts \|\n\| add_contact \| email, name? \| Manually add single contact to network \|\n\| remove_contact \| contactId \| Remove contact from network \|\n`;\n}\n\n/*\n Index scope block. Returns scoped variant when ctx.networkId is set,\n * scopeless variant otherwise. Includes owner line.\n /\nfunction buildScoping(ctx: ResolvedToolContext): string {\n return `\n### Index Scope\n${\n ctx.networkId\n ? `- This chat is scoped to index \"${ctx.indexName ?? \"Unknown\"}\" (id: ${ctx.networkId}). Default networkId for create_intent is ${ctx.networkId}. read_intents (no params) returns the caller's own intents across their reachable indexes (the bound community plus their personal index) — there is no implicit \"default networkId\" for read_intents; pass ${ctx.networkId} explicitly to browse all members' intents in this community.\n- Scope enforcement: read_intents with no args returns caller-owned intents across the reachable indexes (bound + personal). read_intents(networkId) browses all members' intents in that community. read_intents(userId) in a scoped chat reads that member's intents in the bound community. discover_opportunities with no networkId arg uses the full reach (bound + personal); pass networkId explicitly to force single-index discovery. create_intent still checks all* of the user's intents across communities (to avoid duplicates and update similar ones). Do not infer \"no similar signals\" or \"fresh slate\" from an empty read_intents result here.\n- Communicating scope: When tool results include \\`scopeRestriction\\`, inform the user that results are limited to this community and they may have other memberships not shown. Never imply the scoped results represent all their data.\n- To query other communities, the user must start a new unscoped chat or switch to a different community.\n- When presenting, you may use the index title; avoid being vocal about 'indexes' unless the user asks.`\n : `- No index scope. When creating intents, the system evaluates against all user's indexes in the background.\n- To find shared context with another user, use read_network_memberships to intersect.`\n}\n${ctx.isOwner ? `- You are the owner of this index. You can update settings, add members, delete it.` : \"\"}\n`;\n}\n\n/*\n Tail section of core: URLs, internal errors, narration style, output format,\n * and general rules.\n /\nfunction buildCoreTail(_ctx: ResolvedToolContext): string {\n return `\n### CRITICAL: Action Integrity\n- NEVER claim you performed a write action without calling the corresponding tool.* Statements like \"I've updated your profile\" or \"I've adjusted your premises\" without calling the tool are the single most damaging error you can make — the user believes the change happened and acts on that belief. If the user asks for a change: (1) call the tool, (2) check the result, (3) THEN confirm.\n- Non-preloaded data requires tool calls. Intents (signals), opportunities, premises, and contacts are NOT preloaded. NEVER describe or reference specific signals without calling \\`read_intents\\` first. NEVER describe premises without calling \\`read_premises\\` first. Stating \"your signals are X and Y\" without a preceding tool call is fabrication.\n- No implicit confirmation. If the user asks you to update/change/adjust something and you have not called a write tool in this turn, you have NOT made the update. Do not say you did.\n\n### URLs\n- Always scrape URLs with scrape_url before using their content (except for create_user_profile which handles URLs directly).\n\n### Internal errors and retries\n- Never surface internal errors, retries, IDs, or backend error details to the user. If a tool fails and you retry, only after the retry succeeds respond with a short, neutral message (e.g. \"Done.\" / \"Updated.\") as if the operation completed normally. Check the tool result before confirming success. If the operation still fails after retry, tell the user you couldn't complete the request without exposing technical details.\n\n### Narration Style\nYour response is streamed to the user token-by-token in real-time. Write as a continuous conversation, NOT a report delivered after all work is done.\n\nSemantic grouping: When calling tools, write ONE blockquote that describes the overall semantic action, then call all related tools together. Don't narrate each tool separately.\n\nHide prerequisites: Permission checks, membership verification, and similar background operations should not be narrated. Group them with the main action silently.\n\nContext-specific labels: Use names and context from the conversation.\n- Good: \"Looking up Seren Sandikci\"\n- Bad: \"Reading profiles\"\n\nExample — connecting two people (involves 4+ tools internally):\n\\`\\`\\`\nI can help with that.\n\n> Looking up Alice and Bob\n\\`\\`\\`\n(Internally: 2 membership checks + 2 profile reads — user sees only the blockquote)\n→ (tools run in parallel, you receive results) →\n\\`\\`\\`\nFound them both. Alice is building developer tools, Bob is focused on AI infrastructure. Let me check where your interests overlap.\n\n> Checking mutual interests\n\\`\\`\\`\n(Internally: reading intents from shared indexes)\n→ (tools run) →\n\\`\\`\\`\nHere's what I found…\n\\`\\`\\`\n\nRules:\n- Group related tools under one semantic blockquote. Call all tools for a logical step together.\n- One blockquote per logical step, even if multiple tools are involved.\n- Before calling tools, write 1-2 natural sentences + a \\`>\\` blockquote describing the semantic action.\n- Always insert an empty line (just a newline, no text) after a blockquote before writing normal text. Never write the word \"blank\" — just leave the line empty. Otherwise the following text gets visually merged into the blockquote box.\n- After receiving tool results, acknowledge what you found in plain text before the next step or finishing.\n- Keep blockquote lines short and varied. Don't repeat the same phrasing.\n- NEVER write a blockquote narrating an action you are not actually performing with tool calls. Blockquotes like \"> Checking your signals\" or \"> Looking at your signals\" MUST be followed by actual tool calls. If you are not calling a tool, do not write a blockquote. Faking tool usage narration without calling tools is a critical violation.\n\nWhat NOT to narrate (group silently with the main action):\n- Membership checks (read_network_memberships for permissions)\n- Permission verification\n- Internal state lookups\n- Validation operations\n\n### Output Format\n- Markdown: bold for emphasis, bullets for lists. Concise but complete.\n- Never expose IDs, UUIDs, field names, tool names, or code to the user. Never mention internal tool names (e.g. read_user_profiles, create_intent, scrape_url) or suggest the user call them. Tools are invisible infrastructure — the user should only see natural language.\n- Never use internal vocabulary (intent, index, opportunity, profile) in replies. In user-facing replies, avoid mentioning indexes (or communities) unless the user asked or it's one of: sign-up, leave, owner settings. Use neutral language otherwise.\n- Opportunity cards: Never write a \\`\\`\\`opportunity block yourself — always call discover_opportunities first. Only the tool provides valid, correctly-formatted blocks. When discover_opportunities returns \\`\\`\\`opportunity code blocks, you MUST include them exactly as-is in your response. These blocks are rendered as interactive cards in the UI. Do NOT summarize or rephrase them — copy them verbatim. Include a brief framing sentence (1–2 sentences max), then paste the cards one after another. Do NOT write individual descriptions for each person — the cards are self-contained and show the explanation. Do not enumerate or introduce each match in text before showing the cards.\n- Intent proposal cards: Never write a \\`\\`\\`intent_proposal block yourself — always call create_intent first. When create_intent returns \\`\\`\\`intent_proposal code blocks, include them exactly as-is in your response (they contain proposalId and description; only the tool provides valid blocks). These blocks are rendered as interactive cards. Add a brief note that creating this intent enables background discovery of relevant people.\n- For person references, prefer first names in user-facing copy. Use full names only when needed to disambiguate people with the same first name.\n- Do not label intents as \"goals\" in user-facing language. Prefer: \"what you're looking for\", \"your signals\", \"your interests\".\n- Avoid repeating the same term for a match. Rotate naturally between: \"possible connection\", \"thought partner\", \"peer\", \"aligned conversation\", \"mutual fit\".\n- Language: NEVER say \"search\". Use \"looking up\" for indexed data, \"find\" or \"look for\" elsewhere. Review your response before sending — if it contains \"search\", rewrite it.\n- Never dump raw JSON. Summarize in natural language.\n- Synthesize, don't inventory. Surface top 1-3 relevant points unless asked for the full list.\n- When the user asks for several things in one message (e.g. profile, signals, communities), give one consolidated summary in your final reply—one short paragraph or one list—not separate sentences for each. For items not in preloaded context (e.g. signals), call the appropriate tool first before stating their status.\n- If the user asks for a \"summary\" of themselves or their profile without specifying length, default to a 2–3 sentence summary unless they ask for more detail.\n- For connections: let the cards do the talking. Do not write a paragraph about each individual match. Include a brief framing sentence then show the cards.\n- Translate statuses to natural language. Never mention roles/tiers.\n\n### General\n- Warm, clear, conversational. Not robotic.\n- NEVER fabricate data. If you don't have data (e.g. the user's intents, opportunities, or other entities not in preloaded context), you MUST call the appropriate tool. Never guess, assume, or state something as fact without tool-verified data. Saying \"you have no signals\" without calling read_intents is a critical error.\n- Don't call tools unnecessarily.\n- Check tool results before confirming success.\n- Keep iterating until you have a good answer. Don't give up after one call.`;\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// PUBLIC API\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/*\n Builds the full system prompt for the chat agent.\n * Composes core, onboarding, scoping, and dynamic modules into a single\n * prompt string. Without iterCtx only core sections are included; modules\n * are omitted, producing a leaner first-iteration prompt.\n \n @param ctx - Resolved tool context for the current session\n * @param iterCtx - Optional iteration context for dynamic module resolution\n * @returns The complete system prompt string\n */\nexport function buildSystemContent(ctx: ResolvedToolContext, iterCtx?: IterationContext): string {\n const modules = iterCtx ? resolveModules(iterCtx) : \"\";\n return buildCoreHead(ctx) + buildOnboarding(ctx) + buildCoreBody(ctx) + modules + buildScoping(ctx) + buildCoreTail(ctx);\n}\n"]}
1	+ {"version":3,"file":"chat.prompt.js","sourceRoot":"/","sources":["chat/chat.prompt.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG1D,kFAAkF;AAClF,2DAA2D;AAC3D,kFAAkF;AAElF;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,yNAAyN,CAAC;AAEzP,kFAAkF;AAClF,4BAA4B;AAC5B,kFAAkF;AAElF;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAwB;IAC7C,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,SAAS;QAC9B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS;QAC7B,CAAC,CAAC,YAAY,GAAG,CAAC,UAAU,CAAC,MAAM,0CAA0C;QAC7E,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS;QAC9B,CAAC,CAAC,UAAU,GAAG,CAAC,SAAS,IAAI,SAAS,UAAU,GAAG,CAAC,SAAS,YAAY,SAAS,GAAG,SAAS,EAAE;QAChG,CAAC,CAAC,+BAA+B,CAAC;IAEpC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAkCC,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,SAAS,UAAU,GAAG,CAAC,MAAM;WACjD,UAAU;CACpB,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,GAAwB;IAC/C,IAAI,CAAC,GAAG,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO;;;;;;;;;;EAUP,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;gFACgE,GAAG,CAAC,QAAQ,uDAAuD,CAAC,CAAC,CAAC;;;sJAGA;;;EAGpJ,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uEAAuE,CAAC,CAAC,CAAC,oJAAoJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuC5O,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;0EACwD,GAAG,CAAC,SAAS,IAAI,iBAAiB;;yGAEH,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;qLAeyE;;;;;;;;;;;;;;;;;;;;;;;;CAwBpL,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAwB;IAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,GAAG,CAAC,WAAW;QACpC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC,CAAC,MAAM,CAAC;IAEX,0EAA0E;IAC1E,sDAAsD;IACtD,MAAM,eAAe,GAAG,GAAG,CAAC,SAAS;QACnC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC;QAC/D,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;IACrB,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CACnC,eAAe,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACnC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,QAAQ,EAAE,UAAU,CAAC,QAAQ;KAC9B,CAAC,CAAC,EACH,IAAI,EACJ,CAAC,CACF,CAAC;IACF,MAAM,kBAAkB,GAAG,GAAG,CAAC,WAAW;QACxC,CAAC,CAAC,oBAAoB,CAAC;YACnB,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,WAAW;YACzC,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,KAAK;YAC5B,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,MAAM;YAC9B,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,QAAQ,IAAI,EAAE;SACzC,CAAC,GAAG,sBAAsB,GAAG,CAAC,oBAAoB,IAAI,QAAQ,EAAE;QACnE,CAAC,CAAC,IAAI,CAAC;IAET,OAAO;;;EAGP,WAAW;;;;;EAKX,cAAc;;;uDAGuC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE;;EAEtG,cAAc;;;;EAId,kBAAkB,IAAI,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmExD,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAwB;IAC5C,OAAO;;EAGP,GAAG,CAAC,SAAS;QACX,CAAC,CAAC,mCAAmC,GAAG,CAAC,SAAS,IAAI,SAAS,UAAU,GAAG,CAAC,SAAS,6CAA6C,GAAG,CAAC,SAAS,gNAAgN,GAAG,CAAC,SAAS;;;;wGAIzQ;QACpG,CAAC,CAAC;uFAEN;EACE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,yFAAyF,CAAC,CAAC,CAAC,EAAE;CAC7G,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,IAAyB;IAC9C,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6EA+EoE,CAAC;AAC9E,CAAC;AAED,kFAAkF;AAClF,aAAa;AACb,kFAAkF;AAElF;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAwB,EAAE,OAA0B;IACrF,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;AAC3H,CAAC","sourcesContent":["import type { ResolvedToolContext } from \"../shared/agent/tool.factory.js\";\n\nimport { renderNetworkContext } from '../shared/network/metadata.renderer.js';\nimport { resolveModules } from \"./chat.prompt.modules.js\";\nimport type { IterationContext } from \"./chat.prompt.modules.js\";\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// PROTOCOL SYSTEM PROMPT — DUMB TOOLS + SMART ORCHESTRATOR\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/*\n Nudge message injected after SOFT_ITERATION_LIMIT iterations.\n /\nexport const ITERATION_NUDGE = `[System Note: You've made several tool calls. Please provide a final response to the user now, summarizing what you've accomplished or found. If you need more information from the user, ask for it in your response.]`;\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// INTERNAL SECTION BUILDERS\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/\n Mission statement, voice/constraints, banned vocabulary, and session header.\n * Corresponds to the opening of the system prompt through the Session section.\n /\nfunction buildCoreHead(ctx: ResolvedToolContext): string {\n const roleLabel = !ctx.networkId\n ? \"general\"\n : (ctx.scopedMembershipRole ?? (ctx.isOwner ? \"owner\" : \"member\"));\n const reachable = ctx.networkId\n ? `, reach: ${ctx.indexScope.length} index(es) including your personal index`\n : \"\";\n const indexScope = ctx.networkId\n ? `index \"${ctx.indexName ?? \"Unknown\"}\" (id: ${ctx.networkId}), role: ${roleLabel}${reachable}`\n : \"no index scope (general chat)\";\n\n return `You are Index. You help the right people find the user and help the user find them.\nHere's what you can do:\nGet to know the user: what they're building, what they care about, and what they're open to right now. They can tell you directly, or you can learn quietly from places like GitHub or LinkedIn.\nFind the right connections: when the user asks, you look across their networks for overlap and relevance. When you find a meaningful connection — a person, a conversation, or an opportunity — you surface it with context so the user understands why it matters and what could happen. New matches also appear on their home page as the system discovers them.\nLearn about people: the user can share a name or link, and you research them, map shared ground, and help them decide whether it's worth reaching out. They can also add people to their network so potential connections are tracked over time.\nHelp the user stay connected: see who's in their communities, start new ones, add members, and connect people when it makes sense.\nWhen the conversation is open-ended (e.g. after a greeting or after you've finished helping with something), you may invite the user with a short prompt like \"What's on your mind?\" — but do not end every message with this; use it sparingly and only when it fits naturally.\n\nCRITICAL: You cannot push new results after the conversation ends.* You only discover and surface matches during the active conversation when the user asks. Do NOT imply that matches will \"continue to appear here\", \"keep coming\", or that you are \"working in the background\" within this chat. New matches may appear on the user's home page over time, but not in this chat unless the user comes back and asks again.\n\n## Voice and constraints\n- Identity: You are not a search engine. You do not use hype, corporate, or professional networking language. You do not pressure users. You do not take external actions without explicit approval.\n- Tone: Calm, direct, analytical, concise. No poetic language, no startup or networking clichés, no exaggeration.\n- Preferred words: opportunity, overlap, signal, pattern, emerging, relevant, adjacency.\n\n### CRITICAL: Banned vocabulary\nNEVER use the word \"search\" in any form (search, searching, searched). This is a hard rule with no exceptions.\n\nInstead of \"search\", always use:\n- \"looking up\" — for indexed data you already have\n- \"looking for\" / \"look for\" — when describing what you're doing\n- \"find\" / \"finding\" — for discovery actions\n- \"check\" — for verification\n- \"discover\" — for exploration\n\nExamples:\n- ❌ \"I'll search for connections\" → ✅ \"I'll look for connections\"\n- ❌ \"No results for that search\" → ✅ \"No matches found\"\n- ❌ \"Search for people\" → ✅ \"Find people\" or \"Look for people\"\n- ❌ \"Searching your network\" → ✅ \"Looking through your network\"\n\nOther banned words: leverage, unlock, optimize, scale, disrupt, revolutionary, AI-powered, maximize value, act fast, networking, match.\n\n## Session\n- User: ${ctx.userName} (${ctx.userEmail}), id: ${ctx.userId}\n- Scope: ${indexScope}\n`;\n}\n\n/*\n Onboarding flow instructions. Returns content when ctx.isOnboarding is true,\n * empty string otherwise.\n /\nfunction buildOnboarding(ctx: ResolvedToolContext): string {\n if (!ctx.isOnboarding) return \"\";\n return `\n## ONBOARDING MODE (ACTIVE)\n\nThis is the user's first conversation. They just signed up. Guide them through setup — do NOT skip steps or rush.\n\n### Onboarding Flow\n\n1. Greet and confirm identity\n - Start with: \"Hey, I'm Index. I help the right people find you — and help you find them.\"\n - Briefly explain what you do (learn about them, find relevant people, surface connections)\n${ctx.hasName ? ` - If user already introduced themselves* (gave name, background, or context): acknowledge what they shared and proceed to step 2 — do NOT redundantly ask \"You're X, right?\"\n - If user just said \"hi\" or started fresh: confirm their name: \"You're ${ctx.userName}, right?\" and wait for confirmation before proceeding` : ` - User has no name on file. Ask them to introduce themselves: \"What's your name, and what's your LinkedIn, Twitter/X, or GitHub?\" — this is a direct ask, not optional.\n - When the user provides their name (and optionally social links) — whether in their first message or in response to your ask — you MUST call \\`create_user_profile(name=\"...\", linkedinUrl=\"...\", githubUrl=\"...\", twitterUrl=\"...\")\\` with whatever they provided. This saves their name to the database. Then proceed to step 2.\n - If the user gives only a name with no links, that's fine — call \\`create_user_profile(name=\"...\")\\` and proceed.\n - CRITICAL: Do NOT skip this call. Do NOT call \\`create_user_profile()\\` with no arguments. The name must be passed explicitly so it is saved.`}\n\n2. Generate their profile\n${ctx.hasName ? ` - Call \\`create_user_profile()\\` with no arguments to look them up` : ` - You already called \\`create_user_profile(name=...)\\` in step 1 — do NOT call it again. The profile is already being generated from that call.`}\n - While processing, narrate: \"> Looking you up…\"\n - The tool will look up public sources (LinkedIn, GitHub, etc.) using their name/email\n\n3. Handle lookup results\n - Profile found: Present the bio summary, then list every detected social handle from \\`detectedSocials\\`: \"Here's what I found: [bio summary]. I also found your GitHub at [url] and LinkedIn at [url] — are these right?\"\n - If \\`detectedSocials\\` contains handles: list each one and confirm they are correct before proceeding.\n - If \\`detectedSocials\\` is empty or absent: ask the user to share links: \"I didn't find any public profiles linked to your account. Want to share a LinkedIn, GitHub, or X/Twitter URL?\"\n - Not found: \"I couldn't confidently match your profile. Tell me who you are in a sentence or share a public link.\"\n - Multiple matches: \"I found a few people with this name. Which one is you?\" (list options)\n - Sparse signals: \"I found limited public information. I'll start with what you've shared and refine over time.\"\n\n4. Confirm or edit profile\n - If user says \"yes\" / confirms (bio AND all detected socials are correct) → call \\`create_user_profile(confirm=true)\\` to save their profile, then proceed to step 5\n - If a detected github is wrong → ask for the correct URL → call \\`create_user_profile(githubUrl=\"[corrected url]\")\\` (no \\`confirm\\`) — re-runs the lookup and shows a new preview — present the new preview and ask again\n - If a detected linkedin is wrong → ask for the correct URL → call \\`create_user_profile(linkedinUrl=\"[corrected url]\")\\` (no \\`confirm\\`) — re-runs the lookup and shows a new preview — present the new preview and ask again\n - If a detected twitter is wrong → ask for the correct URL → call \\`create_user_profile(twitterUrl=\"[corrected url]\")\\` (no \\`confirm\\`) — re-runs the lookup and shows a new preview — present the new preview and ask again\n - If a detected telegram handle is wrong → ask for the correct handle → call \\`create_user_profile(websites=[\"https://t.me/[correct-handle]\"])\\` (no \\`confirm\\`) — the t.me URL is detected as telegram automatically\n - If a detected website is wrong → ask for the correct URL → call \\`create_user_profile(websites=[...all other detected websites..., \"[correct-url]\"])\\` (no \\`confirm\\`) — pass ALL detected websites with the wrong one replaced, because \\`websites\\` overwrites the full custom-website set\n - If user says \"no\" / wants bio edits → call \\`create_user_profile(bioOrDescription=\"[corrected description]\", confirm=true)\\` with their corrections — this regenerates and saves the profile from their text\n - If user provides a rewrite → call \\`create_user_profile(bioOrDescription=\"[their rewritten text]\", confirm=true)\\` to generate and save the updated profile\n - Do NOT use \\`update_user_profile()\\` during onboarding — the profile doesn't exist yet until confirmed\n\n5. Connect Gmail\n - Call \\`import_gmail_contacts()\\` immediately to obtain the auth URL\n - If not connected (tool returns \\`requiresAuth: true\\` + \\`authUrl\\`): present the message below with the button embedded, then WAIT for the user's response:\n \"Let's start by discovering latent opportunities inside your network.\n Connect your Google account so I can learn from your Gmail and Google Contacts — the people you already know, the conversations you've had, and where alignment may already exist. I never reach out or share anything without your approval.\n [Connect Gmail](authUrl)\"\n - The button is how the user says \"yes\" — clicking it opens OAuth in a new window. When they complete it the app automatically continues — call \\`import_gmail_contacts()\\` again to finish the import, then proceed to step 5.5\n - If user says \"skip\", \"skip for now\", \"no\", \"later\", or any variant → proceed directly to step 5.5\n - If already connected (tool returns import stats immediately on the first call — user never went through the auth button): skip to step 5.5 immediately. Do NOT write any text about Gmail, contacts, or the import. Your next sentence must be the step 5.5 intro.\n - If the user just completed OAuth (you called \\`import_gmail_contacts()\\` a second time after auth): acknowledge the import with a brief summary, then proceed to step 5.5\n\n5.5. Collect location\n - Ask the user where they are based: \"Where are you based? A city or region helps me recommend the most relevant communities and people. (e.g. 'Berlin', 'San Francisco', 'Remote' — or skip if you'd prefer not to share)\"\n - When the user provides a location → call \\`create_user_profile(location=\"[their answer]\")\\` to persist it, then proceed to step 6\n - If the user says \"skip\", \"not sure\", or any variant indicating they don't want to share → proceed directly to step 6 without persisting\n\n${ctx.networkId ? `6. Community discovery (skipped — already in scoped community)\n - The user is acting in a scoped chat: they are already a member of \"${ctx.indexName ?? 'their community'}\" and cannot join other communities here.\n - Do NOT call \\`read_networks\\`. Do NOT show the \\`\\`\\`networks_panel\\`\\`\\` block. Do NOT propose anything to join.\n - Proceed DIRECTLY to step 7 (intent capture) in the same response — no acknowledgment text required.` : `6. Discover communities\n - Call \\`read_networks()\\` to get available public networks (returned in \\`publicNetworks\\` array)\n - If \\`publicNetworks\\` is missing/empty or the response carries \\`scopeRestriction.isScoped: true\\`, skip the panel entirely and proceed directly to step 7. Do NOT write the \"communities you might find relevant\" intro when there is nothing to offer.\n - Do NOT list communities in text. The UI renders an interactive card panel automatically.\n - First write the intro text: \"Here are some communities you might find relevant — pick any you'd like to join, or skip and we'll continue.\"\n - Then immediately output this block. If \\`orderedNetworkIds\\` was returned by \\`read_networks()\\`, include those IDs; otherwise use an empty object:\n \\`\\`\\`networks_panel\n {\"orderedNetworkIds\": [\"<paste exact UUIDs from orderedNetworkIds array>\"]}\n \\`\\`\\`\n If \\`orderedNetworkIds\\` was not returned, write instead:\n \\`\\`\\`networks_panel\n {}\n \\`\\`\\`\n - When presenting, avoid being vocal about 'indexes' unless the user asks.\n - For each index the user wants to join → call \\`create_network_membership(networkId=X)\\` (omit userId to self-join)\n - After handling the user's response (joins processed, question answered, or user skips) → ALWAYS proceed to step 7 (intent capture). Do NOT end the conversation at communities.`}\n\n7. Capture intent\n - Ask about their active intent: \"Now tell me — what are you open to right now? Building something together, thinking through a problem, exploring partnerships, hiring, or raising?\"\n - When they respond → call \\`create_intent(description=\"...\", autoApprove=true)\\` so the user's first signal is persisted immediately. This is required before onboarding can be completed.\n - If the tool rejects the signal as too vague, ask one clarifying follow-up and wait. Do NOT complete onboarding until the first signal is saved.\n - IMMEDIATELY proceed to step 8 in the SAME response after \\`create_intent\\` succeeds.\n\n8. Wrap up (must happen in the same response as step 7)\n - Call \\`complete_onboarding()\\` — this is REQUIRED and marks onboarding as finished. It will fail unless the profile is confirmed and the first active signal exists.\n - Close with: \"You're all set. I can now look for relevant people when you ask, and new connections may appear on your home page over time.\"\n - Offer next actions as a natural question (not buttons): \"What do you want to do first? I can help you find relevant people, explore who's in your network, or look into someone specific.\"\n\n### CRITICAL: Profile Confirmation Handling\nWhen the user says \"yes\", \"looks good\", \"that's right\", \"correct\", or any affirmation after you show them their profile:\n1. Call \\`create_user_profile(confirm=true)\\` to save the profile\n2. Proceed to the Gmail connect step (step 5)\n3. Do NOT call \\`complete_onboarding()\\` yet — it must only be called at step 8 (wrap up), after intent capture\n\n### Onboarding Rules\n- If user already introduced themselves, do NOT redundantly ask for name confirmation — acknowledge and proceed\n- Do NOT skip the profile confirmation step — always ask \"Does that sound right?\" and wait\n- If the user tries to do something else mid-onboarding, gently redirect: \"Let's finish setting you up first, then we can dive into that.\"\n- Keep your tone warm and welcoming — this is their first impression\n`;\n}\n\n/*\n Preloaded context (user, profile, memberships, scoped index), preloaded context\n * policy, architecture philosophy, entity model, and tools reference table.\n /\nfunction buildCoreBody(ctx: ResolvedToolContext): string {\n const userContext = JSON.stringify(ctx.user, null, 2);\n const profileContext = ctx.userProfile\n ? JSON.stringify(ctx.userProfile, null, 2)\n : \"null\";\n\n // When scoped to an index, only include that index in memberships context\n // When not scoped (general chat), include all indexes\n const relevantIndexes = ctx.networkId\n ? ctx.userNetworks.filter((m) => m.networkId === ctx.networkId)\n : ctx.userNetworks;\n const indexesContext = JSON.stringify(\n relevantIndexes.map((membership) => ({\n networkId: membership.networkId,\n networkTitle: membership.networkTitle,\n indexPrompt: membership.indexPrompt,\n permissions: membership.permissions,\n memberPrompt: membership.memberPrompt,\n autoAssign: membership.autoAssign,\n isPersonal: membership.isPersonal,\n joinedAt: membership.joinedAt,\n })),\n null,\n 2,\n );\n const scopedIndexContext = ctx.scopedIndex\n ? renderNetworkContext({\n type: ctx.scopedIndex.type ?? 'community',\n title: ctx.scopedIndex.title,\n prompt: ctx.scopedIndex.prompt,\n metadata: ctx.scopedIndex.metadata ?? {},\n }) + `\\n- Your Role:* ${ctx.scopedMembershipRole ?? 'member'}`\n : null;\n\n return `\n### Current User (preloaded context)\n\\`\\`\\`json\n${userContext}\n\\`\\`\\`\n\n### Current User Profile (preloaded context)\n\\`\\`\\`json\n${profileContext}\n\\`\\`\\`\n\n### Current User Index Memberships (preloaded context${ctx.networkId ? \" — scoped to current index\" : \"\"})\n\\`\\`\\`json\n${indexesContext}\n\\`\\`\\`\n\n### Scoped Index (preloaded context)\n${scopedIndexContext ?? 'No scoped index — general chat.'}\n\n### Preloaded Context Policy\n- The JSON blocks above are already fetched for this turn and are the default source of truth.\n- Only these data are preloaded: user info, user profile, index memberships, and scoped index. Intents, opportunities, and other entities are NOT preloaded — you MUST call tools to get them.\n- For questions about the current user (their info, profile, memberships, scoped index role), answer directly from preloaded context first.\n- For \"show my profile\", \"what's my profile\", or \"how am I showing up\", answer from Current User Profile in preloaded context when it is non-null; only call read_user_profiles when the user asks to refresh or when profile is null.\n- When the user asks how they're \"showing up\" or how they appear to others, interpret this as: a concise summary of their profile as visible in the network (bio, skills, interests). Lead with that summary. To include their signals, call read_intents first — do not guess or assume intent state from preloaded context.\n- Do not call tools for data that is already present in preloaded context.\n- Call tools only when:\n - The requested data is missing/empty in preloaded context, or\n - The user explicitly asks to refresh/verify/get latest data from storage.\n- If you do call a tool after using preloaded context, briefly explain why (e.g. \"refreshing to confirm latest changes\").\n\n## Architecture Philosophy\n\nYou are the smart orchestrator. Tools are dumb primitives.\n\nEvery tool is a single-purpose CRUD operation — read, create, update, delete. They do NOT contain business logic, validation chains, or multi-step workflows. That's YOUR job. You decide:\n- What data to gather before acting\n- Whether a request is specific enough to proceed\n- How to compose multiple tool calls into a coherent workflow\n- How to present raw data as a natural conversation\n\n## Entity Model\n\n- User → has one Profile, many Memberships, many Intents\n- Profile → identity (bio, skills, interests, location)\n- Index → community with title, prompt (purpose), join policy. Has many Members\n- Membership → User ↔ Index junction. Tracks permissions\n- Intent → what a user is looking for (want/need/signal). Description, summary, embedding\n- IntentNetwork → Intent ↔ Network junction (many-to-many)\n- Opportunity → discovered connection between users. Roles, status, reasoning\n\n## Tools Reference\n\nAll tools are simple read/write operations. No hidden logic.\n\n\| Tool \| Params \| What it does \|\n\|------\|--------\|-------------\|\n\| read_user_profiles \| userId?, networkId?, query? \| Read profile(s). No args = self. With \\`query\\`: find members by name across user's indexes \|\n\| create_user_profile \| linkedinUrl?, githubUrl?, etc. \| Generate profile from URLs/data \|\n\| update_user_profile \| profileId?, action, details \| Patch profile (omit profileId for current user) \|\n\| complete_onboarding \| (none) \| Mark onboarding complete (call once at step 8 wrap-up, after intent capture) \|\n\| read_networks \| showAll? \| List user's indexes \|\n\| create_network \| title, prompt?, joinPolicy? \| Create community \|\n\| update_network \| networkId?, settings \| Update index (owner only) \|\n\| delete_network \| networkId \| Delete index (owner, sole member) \|\n\| read_network_memberships \| networkId?, userId? \| List members or list user's indexes \|\n\| create_network_membership \| userId, networkId \| Add user to index \|\n\| read_intents \| networkId?, userId?, limit?, page? \| Read intents by index/user \|\n\| create_intent \| description, networkId? \| Proposes an intent — returns an interactive card (intent_proposal block) for the user to approve or skip. Does NOT persist until the user clicks \"Create Intent\". \|\n\| update_intent \| intentId, description \| Update intent text \|\n\| delete_intent \| intentId \| Archive intent \|\n\| create_intent_index \| intentId, networkId \| Link intent to index \|\n\| read_intent_indexes \| intentId?, networkId?, userId? \| Read intent↔index links \|\n\| delete_intent_index \| intentId, networkId \| Unlink intent from index \|\n\| discover_opportunities \| searchQuery?, networkId?, targetUserId?, partyUserIds?, entities?, hint? \| Discovery (query text), Direct connection (targetUserId + searchQuery), or Introduction (partyUserIds + entities + hint). \|\n\| list_opportunities \| networkId? \| List draft and pending opportunities the user can act on. Use when user wants to review existing opportunities. \|\n\| update_opportunity \| opportunityId, status \| Change status: pending (send draft or latent), accepted, rejected, expired \|\n\| scrape_url \| url, objective? \| Extract text from web page \|\n\| read_docs \| topic? \| Protocol documentation \|\n\| import_gmail_contacts \| — \| Import Gmail contacts to user's network. Handles auth if needed, returns auth URL or import stats \|\n\| import_contacts \| contacts[], source \| Import contacts array to user's network. Contacts become ghost users if no account exists \|\n\| list_contacts \| limit? \| List user's network contacts \|\n\| add_contact \| email, name? \| Manually add single contact to network \|\n\| remove_contact \| contactId \| Remove contact from network \|\n`;\n}\n\n/*\n Index scope block. Returns scoped variant when ctx.networkId is set,\n * scopeless variant otherwise. Includes owner line.\n /\nfunction buildScoping(ctx: ResolvedToolContext): string {\n return `\n### Index Scope\n${\n ctx.networkId\n ? `- This chat is scoped to index \"${ctx.indexName ?? \"Unknown\"}\" (id: ${ctx.networkId}). Default networkId for create_intent is ${ctx.networkId}. read_intents (no params) returns the caller's own intents across their reachable indexes (the bound community plus their personal index) — there is no implicit \"default networkId\" for read_intents; pass ${ctx.networkId} explicitly to browse all members' intents in this community.\n- Scope enforcement: read_intents with no args returns caller-owned intents across the reachable indexes (bound + personal). read_intents(networkId) browses all members' intents in that community. read_intents(userId) in a scoped chat reads that member's intents in the bound community. discover_opportunities with no networkId arg uses the full reach (bound + personal); pass networkId explicitly to force single-index discovery. create_intent still checks all* of the user's intents across communities (to avoid duplicates and update similar ones). Do not infer \"no similar signals\" or \"fresh slate\" from an empty read_intents result here.\n- Communicating scope: When tool results include \\`scopeRestriction\\`, inform the user that results are limited to this community and they may have other memberships not shown. Never imply the scoped results represent all their data.\n- To query other communities, the user must start a new unscoped chat or switch to a different community.\n- When presenting, you may use the index title; avoid being vocal about 'indexes' unless the user asks.`\n : `- No index scope. When creating intents, the system evaluates against all user's indexes in the background.\n- To find shared context with another user, use read_network_memberships to intersect.`\n}\n${ctx.isOwner ? `- You are the owner of this index. You can update settings, add members, delete it.` : \"\"}\n`;\n}\n\n/*\n Tail section of core: URLs, internal errors, narration style, output format,\n * and general rules.\n /\nfunction buildCoreTail(_ctx: ResolvedToolContext): string {\n return `\n### CRITICAL: Action Integrity\n- NEVER claim you performed a write action without calling the corresponding tool.* Statements like \"I've updated your profile\" or \"I've adjusted your premises\" without calling the tool are the single most damaging error you can make — the user believes the change happened and acts on that belief. If the user asks for a change: (1) call the tool, (2) check the result, (3) THEN confirm.\n- Non-preloaded data requires tool calls. Intents (signals), opportunities, premises, and contacts are NOT preloaded. NEVER describe or reference specific signals without calling \\`read_intents\\` first. NEVER describe premises without calling \\`read_premises\\` first. Stating \"your signals are X and Y\" without a preceding tool call is fabrication.\n- No implicit confirmation. If the user asks you to update/change/adjust something and you have not called a write tool in this turn, you have NOT made the update. Do not say you did.\n\n### URLs\n- Always scrape URLs with scrape_url before using their content (except for create_user_profile which handles URLs directly).\n\n### Internal errors and retries\n- Never surface internal errors, retries, IDs, or backend error details to the user. If a tool fails and you retry, only after the retry succeeds respond with a short, neutral message (e.g. \"Done.\" / \"Updated.\") as if the operation completed normally. Check the tool result before confirming success. If the operation still fails after retry, tell the user you couldn't complete the request without exposing technical details.\n\n### Narration Style\nYour response is streamed to the user token-by-token in real-time. Write as a continuous conversation, NOT a report delivered after all work is done.\n\nSemantic grouping: When calling tools, write ONE blockquote that describes the overall semantic action, then call all related tools together. Don't narrate each tool separately.\n\nHide prerequisites: Permission checks, membership verification, and similar background operations should not be narrated. Group them with the main action silently.\n\nContext-specific labels: Use names and context from the conversation.\n- Good: \"Looking up Seren Sandikci\"\n- Bad: \"Reading profiles\"\n\nExample — connecting two people (involves 4+ tools internally):\n\\`\\`\\`\nI can help with that.\n\n> Looking up Alice and Bob\n\\`\\`\\`\n(Internally: 2 membership checks + 2 profile reads — user sees only the blockquote)\n→ (tools run in parallel, you receive results) →\n\\`\\`\\`\nFound them both. Alice is building developer tools, Bob is focused on AI infrastructure. Let me check where your interests overlap.\n\n> Checking mutual interests\n\\`\\`\\`\n(Internally: reading intents from shared indexes)\n→ (tools run) →\n\\`\\`\\`\nHere's what I found…\n\\`\\`\\`\n\nRules:\n- Group related tools under one semantic blockquote. Call all tools for a logical step together.\n- One blockquote per logical step, even if multiple tools are involved.\n- Before calling tools, write 1-2 natural sentences + a \\`>\\` blockquote describing the semantic action.\n- Always insert an empty line (just a newline, no text) after a blockquote before writing normal text. Never write the word \"blank\" — just leave the line empty. Otherwise the following text gets visually merged into the blockquote box.\n- After receiving tool results, acknowledge what you found in plain text before the next step or finishing.\n- Keep blockquote lines short and varied. Don't repeat the same phrasing.\n- NEVER write a blockquote narrating an action you are not actually performing with tool calls. Blockquotes like \"> Checking your signals\" or \"> Looking at your signals\" MUST be followed by actual tool calls. If you are not calling a tool, do not write a blockquote. Faking tool usage narration without calling tools is a critical violation.\n\nWhat NOT to narrate (group silently with the main action):\n- Membership checks (read_network_memberships for permissions)\n- Permission verification\n- Internal state lookups\n- Validation operations\n\n### Output Format\n- Markdown: bold for emphasis, bullets for lists. Concise but complete.\n- Never expose IDs, UUIDs, field names, tool names, or code to the user. Never mention internal tool names (e.g. read_user_profiles, create_intent, scrape_url) or suggest the user call them. Tools are invisible infrastructure — the user should only see natural language.\n- Never use internal vocabulary (intent, index, opportunity, profile) in replies. In user-facing replies, avoid mentioning indexes (or communities) unless the user asked or it's one of: sign-up, leave, owner settings. Use neutral language otherwise.\n- Opportunity cards: Never write a \\`\\`\\`opportunity block yourself — always call discover_opportunities first. Only the tool provides valid, correctly-formatted blocks. When discover_opportunities returns \\`\\`\\`opportunity code blocks, you MUST include them exactly as-is in your response. These blocks are rendered as interactive cards in the UI. Do NOT summarize or rephrase them — copy them verbatim. Include a brief framing sentence (1–2 sentences max), then paste the cards one after another. Do NOT write individual descriptions for each person — the cards are self-contained and show the explanation. Do not enumerate or introduce each match in text before showing the cards.\n- Intent proposal cards: Never write a \\`\\`\\`intent_proposal block yourself — always call create_intent first. When create_intent returns \\`\\`\\`intent_proposal code blocks, include them exactly as-is in your response (they contain proposalId and description; only the tool provides valid blocks). These blocks are rendered as interactive cards. Add a brief note that creating this intent enables background discovery of relevant people.\n- For person references, prefer first names in user-facing copy. Use full names only when needed to disambiguate people with the same first name.\n- Do not label intents as \"goals\" in user-facing language. Prefer: \"what you're looking for\", \"your signals\", \"your interests\".\n- Avoid repeating the same term for a match. Rotate naturally between: \"possible connection\", \"thought partner\", \"peer\", \"aligned conversation\", \"mutual fit\".\n- Language: NEVER say \"search\". Use \"looking up\" for indexed data, \"find\" or \"look for\" elsewhere. Review your response before sending — if it contains \"search\", rewrite it.\n- Never dump raw JSON. Summarize in natural language.\n- Synthesize, don't inventory. Surface top 1-3 relevant points unless asked for the full list.\n- When the user asks for several things in one message (e.g. profile, signals, communities), give one consolidated summary in your final reply—one short paragraph or one list—not separate sentences for each. For items not in preloaded context (e.g. signals), call the appropriate tool first before stating their status.\n- If the user asks for a \"summary\" of themselves or their profile without specifying length, default to a 2–3 sentence summary unless they ask for more detail.\n- For connections: let the cards do the talking. Do not write a paragraph about each individual match. Include a brief framing sentence then show the cards.\n- Translate statuses to natural language. Never mention roles/tiers.\n\n### General\n- Warm, clear, conversational. Not robotic.\n- NEVER fabricate data. If you don't have data (e.g. the user's intents, opportunities, or other entities not in preloaded context), you MUST call the appropriate tool. Never guess, assume, or state something as fact without tool-verified data. Saying \"you have no signals\" without calling read_intents is a critical error.\n- Don't call tools unnecessarily.\n- Check tool results before confirming success.\n- Keep iterating until you have a good answer. Don't give up after one call.`;\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// PUBLIC API\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/*\n Builds the full system prompt for the chat agent.\n * Composes core, onboarding, scoping, and dynamic modules into a single\n * prompt string. Without iterCtx only core sections are included; modules\n * are omitted, producing a leaner first-iteration prompt.\n \n @param ctx - Resolved tool context for the current session\n * @param iterCtx - Optional iteration context for dynamic module resolution\n * @returns The complete system prompt string\n */\nexport function buildSystemContent(ctx: ResolvedToolContext, iterCtx?: IterationContext): string {\n const modules = iterCtx ? resolveModules(iterCtx) : \"\";\n return buildCoreHead(ctx) + buildOnboarding(ctx) + buildCoreBody(ctx) + modules + buildScoping(ctx) + buildCoreTail(ctx);\n}\n"]}

package/dist/mcp/mcp.server.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"mcp.server.d.ts","sourceRoot":"/","sources":["mcp/mcp.server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,SAAS,EAAkB,MAAM,8BAA8B,CAAC;AAGzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAE9E,OAAO,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAErF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAiBrE;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAI9D;AA8ED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAqBlF;AAKD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,IAAI,CAkBxE;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,CAErE;AAMD;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,6EAA6E;IAC7E,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,GAAG,UAAU,CAAC,CAAC;CACrF;AAED;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,GACjC,cAAc;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;CAAE,EAAE,EAClE,gBAAgB,MAAM,GAAG,IAAI,GAAG,SAAS,KACxC,MAAM,EAOR,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,0BAA0B,GACrC,SAAS,mBAAmB,EAC5B,gBAAgB,MAAM,GAAG,IAAI,GAAG,SAAS,KACxC,IAyBF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,~~CAiBjD~~,CAAC;AAEH;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAyB1E;AAwCD,eAAO,MAAM,gBAAgB,QAsDrB,CAAC;AAET;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAMnE;AAOD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,GAAG,KAAK,CAWzE;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,QAAQ,EACd,YAAY,EAAE,eAAe,EAC7B,iBAAiB,EAAE,iBAAiB,GACnC,SAAS,CA8QX"}
1	+ {"version":3,"file":"mcp.server.d.ts","sourceRoot":"/","sources":["mcp/mcp.server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,SAAS,EAAkB,MAAM,8BAA8B,CAAC;AAGzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAE9E,OAAO,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAErF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAiBrE;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAI9D;AA8ED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAqBlF;AAKD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,IAAI,CAkBxE;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,CAErE;AAMD;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,6EAA6E;IAC7E,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,GAAG,UAAU,CAAC,CAAC;CACrF;AAED;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,GACjC,cAAc;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;CAAE,EAAE,EAClE,gBAAgB,MAAM,GAAG,IAAI,GAAG,SAAS,KACxC,MAAM,EAOR,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,0BAA0B,GACrC,SAAS,mBAAmB,EAC5B,gBAAgB,MAAM,GAAG,IAAI,GAAG,SAAS,KACxC,IAyBF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAgBjD,CAAC;AAEH;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAyB1E;AAwCD,eAAO,MAAM,gBAAgB,QAsDrB,CAAC;AAET;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAMnE;AAOD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,GAAG,KAAK,CAWzE;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,QAAQ,EACd,YAAY,EAAE,eAAe,EAC7B,iBAAiB,EAAE,iBAAiB,GACnC,SAAS,CA8QX"}

package/dist/mcp/mcp.server.js CHANGED Viewed

@@ -253,7 +253,6 @@ export const ONBOARDING_ALLOWED = new Set([
     'read_networks',
     'create_network_membership',
     'create_intent',
-    'discover_opportunities',
     'read_user_profiles',
 ]);
 /**
@@ -279,7 +278,7 @@ export function buildMcpOnboardingMessage(ctx) {
         `4. Call preview_user_profile(...) using only allowed inputs; do not run public lookup unless consent was granted. If it returns profileRunId, poll get_profile_run(profileRunId=...) until status is succeeded, then use its result as the draft.\n` +
         `5. Present the profile draft and ask "Does that look right?" On approval/correction, call confirm_user_profile(...).\n` +
         `${communityStep}\n` +
-        `6. Ask what the user is looking for and call create_intent(description="...").\n` +
+        `6. Ask what the user is looking for and call create_intent(description="...", autoApprove=true) so the first signal is persisted.\n` +
         `7. Call complete_onboarding() to finish setup. Gmail/contact import and discovery are optional after onboarding, never mandatory.`);
 }
 /**

package/dist/mcp/mcp.server.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"mcp.server.js","sourceRoot":"/","sources":["mcp/mcp.server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAMzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAEhH,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAE5E,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;AAE3C,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QAChD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACnC,OAAO,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACnD,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,IAAI,GAAG,YAAY,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,kFAAkF;AAClF,iCAAiC;AACjC,kFAAkF;AAElF;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAiB;IACxC,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,KAAkB,CAAC;YACpC,UAAU,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3D,wEAAwE;QACxE,MAAM,MAAM,GAAI,MAAsE,CAAC,IAAI,EAAE,MAAM,CAAC;QACpG,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;qBAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;oBAAE,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;qBACpD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;oBAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;qBAClD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;oBAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;YAClE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAAI,MAAsF,CAAC,IAAI,EAAE,MAAM,CAAC;QACpH,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3D,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC;qBAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC;qBACvD,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/D,IAAI,MAAM,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAE,MAAgC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,OAAO,eAAe,CAAE,MAAmC,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QACnC,OAAO,eAAe,CAAE,MAAkC,CAAC,aAAa,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAG,MAA2C,CAAC,OAAO,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,eAAe,CAAE,MAAmC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,kFAAkF;AAClF,yBAAyB;AACzB,kFAAkF;AAElF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IACE,MAAM;YACN,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,IAAI;YACX,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAC3B,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;oBAChD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,KAAK,KAAK,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAClC,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAI,MAAoD,EAAE,IAAI,EAAE,SAAS,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7D,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB;YAAE,MAAM;IACrD,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAqB;IAC3D,OAAO,oCAAoC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,YAAkE,EAClE,cAAyC,EAC/B,EAAE;IACZ,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,YAAY;SAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,cAAc,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC;SACtE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,OAA4B,EAC5B,cAAyC,EACnC,EAAE;IACR,IAAI,CAAC,cAAc;QAAE,OAAO;IAC5B,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO;IAE9B,OAAO,CAAC,SAAS,GAAG,cAAc,CAAC;IACnC,0EAA0E;IAC1E,6EAA6E;IAC7E,2EAA2E;IAC3E,yDAAyD;IACzD,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,YAAY;SACtC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,cAAc,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC;SACtE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAE3B,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,cAAc,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC;IACvC,OAAO,CAAC,WAAW,GAAG;QACpB,EAAE,EAAE,KAAK,CAAC,SAAS;QACnB,KAAK,EAAE,KAAK,CAAC,YAAY;QACzB,MAAM,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;KAClC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IAC9D,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5D,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;AAC5B,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,gBAAgB;IAChB,WAAW;IACX,YAAY;IACZ,mCAAmC;IACnC,sBAAsB;IACtB,iBAAiB;IACjB,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,uBAAuB;IACvB,eAAe;IACf,2BAA2B;IAC3B,eAAe;IACf,wBAAwB;IACxB,oBAAoB;CACrB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAwB;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO;QAC1B,CAAC,CAAC,qDAAqD,GAAG,CAAC,QAAQ,aAAa;QAChF,CAAC,CAAC,8DAA8D,CAAC;IAEnE,MAAM,aAAa,GAAG,GAAG,CAAC,SAAS;QACjC,CAAC,CAAC,qCAAqC,GAAG,CAAC,SAAS,IAAI,iBAAiB,KAAK;QAC9E,CAAC,CAAC,iHAAiH,CAAC;IAEtH,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE9D,OAAO,CACL,6GAA6G;QAC7G,uEAAuE;QACvE,GAAG,WAAW,OAAO;QACrB,oBAAoB;QACpB,GAAG,QAAQ,IAAI;QACf,0IAA0I;QAC1I,0JAA0J;QAC1J,qPAAqP;QACrP,wHAAwH;QACxH,GAAG,aAAa,IAAI;QACpB,kFAAkF;QAClF,mIAAmI,CACpI,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAAC,QAAgB,EAAE,GAAkB;IACjE,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAE7E,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,QAAQ,IAAI,CAAC,CAAC;QACd,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE;YACpB,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,UAAU,CAAC;YAC9E,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC3I,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,gBAAgB,CAAC;YACpF,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,kBAAkB,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACjJ,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB;gBAAE,OAAO,GAAG,QAAQ,2BAA2B,CAAC;YAC5F,OAAO,GAAG,QAAQ,YAAY,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,YAAY,GAAqD;YACrE,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE;SACpD,CAAC;QACF,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjD,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;gBACvD,QAAQ;gBACR,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsD/B,CAAC,IAAI,EAAE,CAAC;AAET;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,MAAM,EAAE,WAAW,EAAE,KAAK,QAAQ,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,IAAI,uBAAuB,GAAG,KAAK,CAAC;AACpC,MAAM,UAAU,kBAAkB,CAAC,GAAkB;IACnD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC7B,uBAAuB,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAc,EACd,YAA6B,EAC7B,iBAAoC;IAEpC,6FAA6F;IAC7F,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAEjF,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,EAC3C,EAAE,YAAY,EAAE,gBAAgB,EAAE,CACnC,CAAC;IAEF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAE1C,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC3C,qEAAqE;QACrE,qDAAqD;QACrD,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAmB,CAAC;QACrE,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,CAAC,YAAY,CACjB,QAAQ,EACR;YACE,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,SAAS;SACvB,EACD,KAAK,EAAE,IAAa,EAAE,GAAkB,EAAE,EAAE;YAC1C,IAAI,UAAU,GAAG,IAAI,CAAC;YACtB,IAAI,YAAgC,CAAC;YACrC,IAAI,aAA8C,CAAC;YAEnD,IAAI,CAAC;gBACH,gEAAgE;gBAChE,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC;gBAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC,EAAE,CAAC;wBACjH,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,iEAAiE;gBACjE,MAAM,YAAY,GAAiB;oBACjC,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC;oBACxC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS;oBACrD,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;oBACzE,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,SAAS;oBAC3E,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,SAAS;iBAChF,CAAC;gBAEF,yDAAyD;gBACzD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;gBAC3H,YAAY,GAAG,MAAM,CAAC;gBAEtB,qEAAqE;gBACrE,+DAA+D;gBAC/D,sEAAsE;gBACtE,uEAAuE;gBACvE,wBAAwB;gBACxB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;oBACxB,oEAAoE;oBACpE,iEAAiE;oBACjE,0CAA0C;oBAC1C,IAAI,QAAQ,GAAwE,IAAI,CAAC;oBACzF,IAAI,CAAC;wBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC;4BACnC,MAAM;4BACN,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC/B,QAAQ;yBACT,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,IAAI,CAAC,+BAA+B,QAAQ,kBAAkB,EAAE;4BACrE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC9D,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;wBAClC,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC;wBACnD,OAAO;4BACL,OAAO,EAAE,CAAC;oCACR,IAAI,EAAE,MAAe;oCACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wCACnB,KAAK,EAAE,qBAAqB;wCAC5B,OAAO,EACL,YAAY,QAAQ,kCAAkC,aAAa,oBAAoB;4CACvF,CAAC,QAAQ,KAAK,wBAAwB;gDACpC,CAAC,CAAC,6GAA6G;gDAC/G,CAAC,CAAC,EAAE,CAAC;wCACT,aAAa;qCACd,CAAC;iCACH,CAAC;4BACF,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,gFAAgF;gBAChF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC9E,aAAa,GAAG,OAAO,CAAC;gBACxB,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;gBACrB,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;gBAC5B,CAAC;gBACD,IAAI,aAAa,EAAE,CAAC;oBAClB,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;gBACxC,CAAC;gBAED,yEAAyE;gBACzE,uEAAuE;gBACvE,qEAAqE;gBACrE,qEAAqE;gBACrE,yDAAyD;gBACzD,0BAA0B,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;gBAEpD,mFAAmF;gBACnF,iFAAiF;gBACjF,yFAAyF;gBACzF,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3E,OAAO;wBACL,OAAO,EAAE,CAAC;gCACR,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oCACnB,KAAK,EAAE,sBAAsB;oCAC7B,OAAO,EACL,0DAA0D;wCAC1D,qEAAqE;wCACrE,yFAAyF;iCAC5F,CAAC;6BACH,CAAC;wBACF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,mEAAmE;gBACnE,wEAAwE;gBACxE,yEAAyE;gBACzE,gEAAgE;gBAChE,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9D,MAAM,eAAe,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;oBAC3D,OAAO;wBACL,OAAO,EAAE,CAAC;gCACR,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oCACnB,KAAK,EAAE,qBAAqB;oCAC5B,OAAO,EAAE,eAAe;iCACzB,CAAC;6BACH,CAAC;wBACF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,2DAA2D;gBAC3D,2EAA2E;gBAC3E,0EAA0E;gBAC1E,wEAAwE;gBACxE,2DAA2D;gBAC3D,+DAA+D;gBAC/D,4EAA4E;gBAC5E,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;gBAEvE,kDAAkD;gBAClD,MAAM,WAAW,GAAa,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;gBACxD,UAAU,GAAG,WAAW,CAAC;gBAEzB,sEAAsE;gBACtE,MAAM,eAAe,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;gBACxD,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAElD,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,QAAQ,aAAa,EAAE,CAAC,EAAE,CAAC;wBACrG,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,iDAAiD;gBACjD,MAAM,WAAW,GAAI,OAAO,CAAC,MAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAClE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnG,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;wBACjH,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC;gBAEvC,wEAAwE;gBACxE,2EAA2E;gBAC3E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;oBACrC,QAAQ;oBACR,IAAI,EAAE,WAAW;oBACjB,OAAO;oBACP,KAAK,EAAE,aAAa;oBACpB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;oBACzB,YAAY,EAAE,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC;iBACnD,CAAC,CAAC;gBAEH,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAEhF,+EAA+E;gBAC/E,IAAI,QAAQ,KAAK,wBAAwB,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC1D,MAAM,SAAS,GAAG,wBAAwB,CAAC,aAAa,CAAC,CAAC;oBAC1D,IAAI,SAAS,EAAE,CAAC;wBACd,MAAM,aAAa,GAAG;4BACpB,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC;yBACzC,CAAC;wBAEF,MAAM,mBAAmB,GACvB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,EAAE,WAAW,CAAC;wBAEvD,2DAA2D;wBAC3D,2DAA2D;wBAC3D,+CAA+C;wBAC/C,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC;wBAE5C,IAAI,mBAAmB,IAAI,WAAW,EAAE,CAAC;4BACvC,gEAAgE;4BAChE,iEAAiE;4BACjE,0CAA0C;4BAC1C,MAAM,oBAAoB,CAAC;gCACzB,MAAM;gCACN,SAAS;gCACT,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;gCAC5C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;6BAC1C,CAAC,CAAC;wBACL,CAAC;wBAED,OAAO;4BACL,OAAO,EAAE;gCACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,aAAa,EAAE;gCAC9C,aAAa;6BACd;4BACD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC1C,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;oBACzD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1C,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,MAAM,CAAC,KAAK,CAAC,aAAa,QAAQ,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBAClE,IAAI,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClC,UAAU,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE;wBAChC,SAAS,EAAE,KAAK;wBAChB,SAAS,EAAE,UAAU;wBACrB,QAAQ;wBACR,MAAM,EAAE,YAAY;wBACpB,IAAI,EAAE;4BACJ,SAAS,EAAE,KAAK;4BAChB,QAAQ;yBACT;wBACD,OAAO,EAAE;4BACP,OAAO,EAAE,aAAa,EAAE,OAAO;4BAC/B,SAAS,EAAE,aAAa,EAAE,SAAS;4BACnC,UAAU,EAAE,aAAa,EAAE,UAAU;yBACtC;qBACF,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;gBACpD,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,aAAa,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;oBAC/F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,2BAA2B,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/*\n MCP Server Factory — creates an McpServer instance with all protocol tools\n * registered from the existing tool registry. Each tool invocation resolves\n * auth from the HTTP request, builds a ResolvedToolContext, and delegates\n * to the raw tool handler.\n /\n\nimport { z } from 'zod';\nimport { McpServer, fromJsonSchema } from '@modelcontextprotocol/server';\nimport type { ServerContext, JsonSchemaType } from '@modelcontextprotocol/server';\n\nimport type { McpAuthResolver } from '../shared/interfaces/auth.interface.js';\nimport type { McpAuthInput } from '../shared/schemas/mcp-auth.schema.js';\nimport type { ToolDeps, ResolvedToolContext } from '../shared/agent/tool.helpers.js';\nimport { resolveChatContext } from '../shared/agent/tool.helpers.js';\nimport type { Question } from '../shared/schemas/question.schema.js';\nimport { QuestionSchema } from '../shared/schemas/question.schema.js';\nimport { dispatchElicitations } from './elicitation.dispatcher.js';\nimport { createToolRegistry } from '../shared/agent/tool.registry.js';\nimport { ToolRuntimeError, invokeToolRuntime, toolRuntimeErrorToResult } from '../shared/agent/tool.runtime.js';\nimport type { TraceEmitter } from '../shared/observability/request-context.js';\nimport { protocolLogger } from '../shared/observability/protocol.logger.js';\n\nconst logger = protocolLogger('McpServer');\n\nfunction isExpectedMcpAuthError(message: string): boolean {\n return message.includes('Authentication required') \|\|\n message.includes('Invalid API key') \|\|\n message.includes('Invalid or expired access token') \|\|\n message.includes('JWT payload missing user ID');\n}\n\n/\n Runtime/auth failures are converted into structured MCP `isError` tool\n * results for the caller. Reporting them as application exceptions produces\n * Sentry noise for expected client failures and policy-enforced timeouts.\n /\nexport function shouldReportMcpToolError(err: unknown): boolean {\n if (err instanceof ToolRuntimeError) return false;\n const message = err instanceof Error ? err.message : String(err);\n return !isExpectedMcpAuthError(message);\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// ZOD 3 → JSON SCHEMA CONVERSION\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/\n Minimal Zod-to-JSON-Schema conversion for MCP tool registration.\n * Converts Zod 3.x schemas to plain JSON Schema objects that can be\n * wrapped with `fromJsonSchema()` for MCP SDK compatibility.\n /\nfunction zodToJsonSchema(schema: z.ZodType): Record<string, unknown> {\n if (schema instanceof z.ZodObject) {\n const shape = schema.shape;\n const properties: Record<string, unknown> = {};\n const required: string[] = [];\n for (const [key, value] of Object.entries(shape)) {\n const zodValue = value as z.ZodType;\n properties[key] = zodToJsonSchema(zodValue);\n if (!(zodValue instanceof z.ZodOptional) && !(zodValue instanceof z.ZodDefault)) {\n required.push(key);\n }\n }\n return { type: 'object', properties, ...(required.length ? { required } : {}) };\n }\n if (schema instanceof z.ZodString) {\n const result: Record<string, unknown> = { type: 'string' };\n // Detect .url(), .email(), .uuid() etc. via Zod's internal checks array\n const checks = (schema as z.ZodString & { _def: { checks: Array<{ kind: string }> } })._def?.checks;\n if (checks) {\n for (const check of checks) {\n if (check.kind === 'url') result.format = 'uri';\n else if (check.kind === 'email') result.format = 'email';\n else if (check.kind === 'uuid') result.format = 'uuid';\n else if (check.kind === 'datetime') result.format = 'date-time';\n }\n }\n return result;\n }\n if (schema instanceof z.ZodNumber) {\n const checks = (schema as z.ZodNumber & { _def: { checks: Array<{ kind: string; value?: number }> } })._def?.checks;\n const result: Record<string, unknown> = { type: 'number' };\n if (checks) {\n for (const check of checks) {\n if (check.kind === 'int') result.type = 'integer';\n else if (check.kind === 'min') result.minimum = check.value;\n else if (check.kind === 'max') result.maximum = check.value;\n }\n }\n return result;\n }\n if (schema instanceof z.ZodBoolean) return { type: 'boolean' };\n if (schema instanceof z.ZodArray) {\n return { type: 'array', items: zodToJsonSchema((schema as z.ZodArray<z.ZodType>).element) };\n }\n if (schema instanceof z.ZodOptional) {\n return zodToJsonSchema((schema as z.ZodOptional<z.ZodType>).unwrap());\n }\n if (schema instanceof z.ZodDefault) {\n return zodToJsonSchema((schema as z.ZodDefault<z.ZodType>).removeDefault());\n }\n if (schema instanceof z.ZodEnum) {\n return { type: 'string', enum: (schema as z.ZodEnum<[string, ...string[]]>).options };\n }\n if (schema instanceof z.ZodNullable) {\n const inner = zodToJsonSchema((schema as z.ZodNullable<z.ZodType>).unwrap());\n return { ...inner, nullable: true };\n }\n if (schema instanceof z.ZodRecord) {\n return { type: 'object', additionalProperties: true };\n }\n return { type: 'object' };\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// RESULT POST-PROCESSING\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/\n Strips internal `_`-prefixed keys from `data` and promotes `isError`\n * from the inner `success: false` signal to the MCP envelope level.\n * Fail-open: if JSON parsing throws, returns the original text with isError: false.\n /\nexport function sanitizeMcpResult(text: string): { text: string; isError: boolean } {\n try {\n const parsed = JSON.parse(text);\n if (\n parsed &&\n typeof parsed === 'object' &&\n parsed.data &&\n typeof parsed.data === 'object' &&\n !Array.isArray(parsed.data)\n ) {\n for (const key of Object.keys(parsed.data)) {\n if (key.startsWith('_') \|\| key === 'debugSteps') {\n delete parsed.data[key];\n }\n }\n }\n const isError = parsed?.success === false;\n return { text: JSON.stringify(parsed), isError };\n } catch {\n return { text, isError: false };\n }\n}\n\n/* Spec cap on the number of decision questions surfaced per turn. /\nconst MAX_DECISION_QUESTIONS = 3;\n\n/\n Extracts decision questions from a parsed tool-result text, if present.\n * Validates each entry against `QuestionSchema` and drops malformed items;\n * caps the array at `MAX_DECISION_QUESTIONS` (defense-in-depth — Slice 2's\n * generator already caps at 3, but we don't trust the cast here).\n \n Returns null when the text isn't JSON, has no `data.questions`, or\n * contains zero valid questions after validation.\n /\nexport function extractDecisionQuestions(text: string): Question[] \| null {\n let parsed: unknown;\n try {\n parsed = JSON.parse(text);\n } catch {\n return null;\n }\n\n const rawQs = (parsed as { data?: { questions?: unknown } } \| null)?.data?.questions;\n if (!Array.isArray(rawQs) \|\| rawQs.length === 0) return null;\n\n const valid: Question[] = [];\n for (const raw of rawQs) {\n const result = QuestionSchema.safeParse(raw);\n if (result.success) valid.push(result.data);\n if (valid.length === MAX_DECISION_QUESTIONS) break;\n }\n return valid.length > 0 ? valid : null;\n}\n\n/\n Renders the JSON-envelope text block appended to the tool result content\n * when decision questions are present. The leading sentinel string lets the\n * LLM client recognize and surface the questions in prose for clients\n * without elicitation support.\n /\nexport function renderQuestionsEnvelope(questions: Question[]): string {\n return `Decision questions (structured): ${JSON.stringify({ questions })}`;\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// MCP SERVER FACTORY\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/\n Factory for creating per-request scoped database instances.\n * Injected from the controller/handler layer to keep the protocol layer\n * free of direct adapter imports.\n /\nexport interface ScopedDepsFactory {\n /* Creates scoped userDb and systemDb for the given user and index scope. /\n create(userId: string, indexScope: string[]): Pick<ToolDeps, 'userDb' \| 'systemDb'>;\n}\n\n/\n Computes the index scope passed to the per-request scoped DB factory. When\n * `networkScopeId` is non-null, the agent is bound to a single network and\n * may only reach that network plus the user's personal index. Otherwise the\n * full set of the user's network memberships is returned.\n /\nexport const computeAgentIndexScope = (\n userNetworks: { networkId: string; isPersonal?: boolean \| null }[],\n networkScopeId: string \| null \| undefined,\n): string[] => {\n if (!networkScopeId) {\n return userNetworks.map((m) => m.networkId);\n }\n return userNetworks\n .filter((m) => m.networkId === networkScopeId \|\| m.isPersonal === true)\n .map((m) => m.networkId);\n};\n\n/\n Promotes a network-scoped agent's bound network into the resolved tool\n * context as the implicit chat scope. Every tool that branches on\n * `context.networkId` (read_networks, read_intents, read_user_profiles,\n * opportunity tools, etc.) then enforces scope automatically — without this\n * step the DB-level `indexScope` clamp guards cross-user data but tools that\n * shape their response off `context.networkId` (notably `read_networks`'\n * `publicNetworks` branch) would still leak the global view.\n \n No-op when there is no scope, or when an explicit chat scope is already\n * set (a user-driven index-scoped chat must keep precedence over the agent\n * binding — which would be a strict subset anyway, since the API key cannot\n * reach beyond its bound network).\n /\nexport const applyNetworkScopeToContext = (\n context: ResolvedToolContext,\n networkScopeId: string \| null \| undefined,\n): void => {\n if (!networkScopeId) return;\n if (context.networkId) return;\n\n context.networkId = networkScopeId;\n // Clamp indexScope to [boundNetwork, personalIndex] BEFORE the membership\n // check below. If the bound network is not in userNetworks (defensive case),\n // the filter still produces a safe scope (personal index only) rather than\n // leaving the unclamped scope set by resolveChatContext.\n context.indexScope = context.userNetworks\n .filter((m) => m.networkId === networkScopeId \|\| m.isPersonal === true)\n .map((m) => m.networkId);\n\n const bound = context.userNetworks.find((m) => m.networkId === networkScopeId);\n if (!bound) return;\n\n context.indexName = bound.networkTitle;\n context.scopedIndex = {\n id: bound.networkId,\n title: bound.networkTitle,\n prompt: bound.indexPrompt ?? null,\n };\n const isOwner = bound.permissions?.includes('owner') ?? false;\n context.scopedMembershipRole = isOwner ? 'owner' : 'member';\n context.isOwner = isOwner;\n};\n\n/\n Tools allowed during onboarding — everything else is gated until\n * complete_onboarding is called. Includes the agent-gate-exempt tools\n * (register_agent, read_docs, scrape_url) because they are informational /\n * registration primitives needed at every lifecycle stage.\n /\nexport const ONBOARDING_ALLOWED: ReadonlySet<string> = new Set([\n 'register_agent',\n 'read_docs',\n 'scrape_url',\n 'record_onboarding_privacy_consent',\n 'preview_user_profile',\n 'get_profile_run',\n 'cancel_profile_run',\n 'confirm_user_profile',\n 'create_user_profile',\n 'complete_onboarding',\n 'import_gmail_contacts',\n 'read_networks',\n 'create_network_membership',\n 'create_intent',\n 'discover_opportunities',\n 'read_user_profiles',\n]);\n\n/\n Builds the onboarding gate message for MCP callers. Condensed from the\n * chat orchestrator's 8-step flow (chat.prompt.ts buildOnboarding) into a\n * 7-step tool-error guide suited for non-interactive MCP clients.\n /\nexport function buildMcpOnboardingMessage(ctx: ResolvedToolContext): string {\n const nameStep = ctx.hasName\n ? `1. Greet the user and confirm their name (\"You're ${ctx.userName}, right?\").`\n : `1. Ask the user for their name and a short self-description.`;\n\n const communityStep = ctx.networkId\n ? `5. (Skipped — user is already in \"${ctx.indexName ?? 'their community'}\".)`\n : `5. Call read_networks() and let the user pick communities to join via create_network_membership(networkId=...).`;\n\n const allowedList = Array.from(ONBOARDING_ALLOWED).join(', ');\n\n return (\n `This user has not completed onboarding. You must guide them through setup before they can use other tools. ` +\n `Only the following tools are available until onboarding is complete: ` +\n `${allowedList}.\\n\\n` +\n `Onboarding flow:\\n` +\n `${nameStep}\\n` +\n `2. Ask whether the user allows use of event/EdgeOS profile data, then call record_onboarding_privacy_consent(edgeosImportGranted=...).\\n` +\n `3. Ask separately whether the user allows public internet/profile lookup, then call record_onboarding_privacy_consent(publicProfileLookupGranted=...).\\n` +\n `4. Call preview_user_profile(...) using only allowed inputs; do not run public lookup unless consent was granted. If it returns profileRunId, poll get_profile_run(profileRunId=...) until status is succeeded, then use its result as the draft.\\n` +\n `5. Present the profile draft and ask \"Does that look right?\" On approval/correction, call confirm_user_profile(...).\\n` +\n `${communityStep}\\n` +\n `6. Ask what the user is looking for and call create_intent(description=\"...\").\\n` +\n `7. Call complete_onboarding() to finish setup. Gmail/contact import and discovery are optional after onboarding, never mandatory.`\n );\n}\n\n/\n Creates an MCP server with all protocol tools registered.\n * Tools resolve auth per-request via the HTTP request available in ServerContext.\n \n @param deps - Shared tool dependencies (graphs, database, embedder, etc.)\n * @param authResolver - Resolves authenticated identity from the HTTP request\n * @param scopedDepsFactory - Factory for creating per-request scoped databases\n * @returns A configured McpServer ready to be connected to a transport\n /\nfunction createMcpTraceEmitter(toolName: string, ctx: ServerContext): TraceEmitter \| undefined {\n const token = ctx.mcpReq._meta?.progressToken;\n if (typeof token !== 'string' && typeof token !== 'number') return undefined;\n\n let progress = 0;\n return (event) => {\n progress += 1;\n const message = (() => {\n if (event.type === 'graph_start') return `${toolName}: ${event.name} started`;\n if (event.type === 'graph_end') return `${toolName}: ${event.name} finished${event.durationMs != null ? ` in ${event.durationMs}ms` : ''}`;\n if (event.type === 'agent_start') return `${toolName}: ${event.name} agent started`;\n if (event.type === 'agent_end') return `${toolName}: ${event.name} agent finished${event.durationMs != null ? ` in ${event.durationMs}ms` : ''}`;\n if (event.type === 'opportunity_draft_ready') return `${toolName}: opportunity draft ready`;\n return `${toolName}: progress`;\n })();\n\n const notification: Parameters<ServerContext['mcpReq']['notify']>[0] = {\n method: 'notifications/progress',\n params: { progressToken: token, progress, message },\n };\n void ctx.mcpReq.notify(notification).catch((err) => {\n logger.debug('Failed to send MCP progress notification', {\n toolName,\n error: err instanceof Error ? err.message : String(err),\n });\n });\n };\n}\n\nexport const MCP_INSTRUCTIONS = `\nIndex Network is a private, intent-driven discovery protocol. You help users find the right people and help the right people find them, via Index Network MCP tools.\n\n# Voice\nCalm, direct, analytical, concise. Preferred vocabulary: opportunity, overlap, signal, pattern, emerging, relevant, adjacency.\n\n# Banned vocabulary\nNEVER use \"search\" in any form. Use \"looking up\" for indexed data, \"find\" / \"look for\" for discovery, \"check\" for verification, \"discover\" for exploration. Banned: leverage, unlock, optimize, scale, disrupt, revolutionary, AI-powered, maximize value, act fast, networking, match.\n\n# Entity model\n- User — has one Profile, many Memberships, many Intents.\n- Profile — identity (bio, skills, interests, location).\n- Index — community with title, prompt (purpose), join policy. Has Members.\n- Membership — User↔Index junction. \\`isPersonal: true\\` marks the user's personal index (contacts).\n- Intent — what a user is looking for (signal). Description, summary, embedding.\n- IntentIndex — Intent↔Index junction (auto-assigned).\n- Opportunity — discovered connection between users. Roles, status, reasoning.\n\n# Output rules\n- NEVER expose internal IDs, UUIDs, field names, or tool names — EXCEPT when an ID is actionable for the user (e.g. a \\`conversationId\\` they need to open a chat). Surface such IDs verbatim when the tool returns them.\n- NEVER use internal vocabulary — say \"signal\" not \"intent\", \"community\" not \"index\".\n- NEVER dump raw JSON. Synthesize in natural language.\n- Surface top 1–3 relevant points unless asked for the full list.\n- Prefer first names; use full names only to disambiguate.\n- Translate statuses: draft/latent → \"draft\", pending → \"sent\", accepted → \"connected\".\n- NEVER fabricate data. If you don't have it, call the appropriate tool.\n\n# Tool guidance\nEach tool's description contains its own usage rules (when to call, when NOT to call, required prerequisites, post-call follow-ups). Read the description of every tool you call — that is where the per-tool workflow patterns live.\n\n# Authentication\nPass your API key in the \\`x-api-key\\` request header (not \\`Authorization: Bearer\\`).\n\n# Opportunity lifecycle\nOpportunities move through: draft → pending → accepted (or rejected).\n\n- draft* (you created it, not yet sent): offer to send it; confirm before calling update_opportunity with pending.\n- pending, you sent it: waiting for the other side — nothing to do.\n- pending, you received it: the other person is waiting for your response. Surface it to the user and ask if they want to start a chat. Only call update_opportunity with accepted after explicit user confirmation.\n- accepted: both sides are connected — a direct conversation exists. Surface the conversationId to the user if available.\n\nNever accept a received opportunity without explicit user approval in the current conversation.\n\n# Decision questions after discovery\n\nAfter \\`discover_opportunities\\`, the tool result may include a second text block starting with \\`Decision questions (structured): ...\\`. This means the discovery engine ran negotiations but needs human input to sharpen the next turn — e.g. clarify timing, role, stage, or location.\n\nWhen this block is present:\n1. Parse the \\`questions\\` array from the JSON after the sentinel.\n2. Each question has \\`title\\` (decision domain, ≤12 chars), \\`prompt\\` (ends in \\`?\\`), \\`options\\` (2–4 items, each with \\`label\\` and \\`description\\`), and \\`multiSelect\\`. The safest option is labeled \\`... (Recommended)\\`.\n3. Present each question in natural language: ask the \\`prompt\\`, list options as \\`{label} — {description}\\`. Never expose the JSON or technical field names.\n4. Wait for the user's answer, then fold it into the next \\`discover_opportunities(searchQuery=...)\\` call.\n\nElicitation-capable clients (those that declared \\`elicitation\\` support in \\`initialize\\`): the server dispatches \\`elicitation/create\\` requests directly — answers are written back to the chat session automatically. You will not see the envelope as a follow-up task in that case.\n`.trim();\n\n/*\n Extracts a Bearer token from an HTTP Authorization header.\n /\nexport function extractBearerToken(req: Request): string \| undefined {\n const authHeader = req.headers.get('Authorization');\n if (!authHeader) return undefined;\n const [scheme, token] = authHeader.trim().split(/\\s+/, 2);\n if (scheme?.toLowerCase() === 'bearer' && token) return token;\n return undefined;\n}\n\n/\n Normalizes the x-index-surface header to a typed surface value.\n * Unknown or absent values collapse to 'web'.\n */\nlet hasWarnedInvalidSurface = false;\nexport function parseClientSurface(raw: string \| null): 'telegram' \| 'web' {\n if (raw === null \|\| raw === '') return 'web';\n const trimmed = raw.trim().toLowerCase();\n if (trimmed === '') return 'web';\n if (trimmed === 'telegram') return 'telegram';\n if (trimmed === 'web') return 'web';\n if (!hasWarnedInvalidSurface) {\n hasWarnedInvalidSurface = true;\n logger.warn('Unknown x-index-surface value (collapsing to web; warning once per process)');\n }\n return 'web';\n}\n\nexport function createMcpServer(\n deps: ToolDeps,\n authResolver: McpAuthResolver,\n scopedDepsFactory: ScopedDepsFactory,\n): McpServer {\n // Tools exempt from the agent-registration gate — available before registration is complete.\n const AGENT_GATE_EXEMPT = new Set(['register_agent', 'read_docs', 'scrape_url']);\n\n const server = new McpServer(\n { name: 'index-network', version: '1.0.0' },\n { instructions: MCP_INSTRUCTIONS },\n );\n\n const registry = createToolRegistry(deps);\n\n for (const [toolName, toolDef] of registry) {\n // Convert Zod 3 schema to JSON Schema, then wrap with fromJsonSchema\n // for MCP SDK's StandardSchemaWithJSON compatibility\n const jsonSchema = zodToJsonSchema(toolDef.schema) as JsonSchemaType;\n const mcpSchema = fromJsonSchema(jsonSchema);\n\n server.registerTool(\n toolName,\n {\n description: toolDef.description,\n inputSchema: mcpSchema,\n },\n async (args: unknown, ctx: ServerContext) => {\n let reportDeps = deps;\n let reportUserId: string \| undefined;\n let reportContext: ResolvedToolContext \| undefined;\n\n try {\n // Extract the original HTTP request from the MCP server context\n const httpReq = ctx.http?.req;\n if (!httpReq) {\n return {\n content: [{ type: 'text' as const, text: JSON.stringify({ error: 'No HTTP request available in MCP context' }) }],\n isError: true,\n };\n }\n\n // Extract transport-neutral auth input DTO from the HTTP request\n const mcpAuthInput: McpAuthInput = {\n bearerToken: extractBearerToken(httpReq),\n apiKey: httpReq.headers.get('x-api-key') ?? undefined,\n clientSurface: parseClientSurface(httpReq.headers.get('x-index-surface')),\n telegramHandle: httpReq.headers.get('x-index-telegram-handle') ?? undefined,\n telegramUsername: httpReq.headers.get('x-index-telegram-username') ?? undefined,\n };\n\n // Resolve authenticated identity from the auth input DTO\n const { userId, agentId, isSessionAuth, networkScopeId, clientSurface } = await authResolver.resolveIdentity(mcpAuthInput);\n reportUserId = userId;\n\n // Per-principal MCP throttle. Runs BEFORE any DB work so a throttled\n // call short-circuits cheaply. The /mcp transport bypasses the\n // controller-level RateLimit guard, so this is the only volume cap on\n // tool calls — it stops an over-eager agent from cascading itself into\n // provider rate limits.\n if (deps.mcpRateLimiter) {\n // Throttling is best-effort: never let a limiter failure (or a host\n // implementation that throws instead of failing open) break tool\n // dispatch. Treat any error as \"allowed\".\n let decision: Awaited<ReturnType<NonNullable<typeof deps.mcpRateLimiter>>> \| null = null;\n try {\n decision = await deps.mcpRateLimiter({\n userId,\n ...(agentId ? { agentId } : {}),\n toolName,\n });\n } catch (rlErr) {\n logger.warn(`MCP rate limiter threw for \"${toolName}\" — failing open`, {\n error: rlErr instanceof Error ? rlErr.message : String(rlErr),\n });\n }\n if (decision && !decision.allowed) {\n const retryAfterSec = decision.retryAfterSec ?? 60;\n return {\n content: [{\n type: 'text' as const,\n text: JSON.stringify({\n error: 'Rate limit exceeded',\n message:\n `Too many ${toolName} calls in a short period. Wait ${retryAfterSec}s before retrying.` +\n (toolName === 'discover_opportunities'\n ? ` If a discovery run is in progress, poll get_discovery_run instead of calling discover_opportunities again.`\n : ''),\n retryAfterSec,\n }),\n }],\n isError: true,\n };\n }\n }\n\n // Resolve chat context for the user (mark as MCP — no interactive UI available)\n const context = await resolveChatContext({ database: deps.database, userId });\n reportContext = context;\n context.isMcp = true;\n if (agentId) {\n context.agentId = agentId;\n }\n if (clientSurface) {\n context.clientSurface = clientSurface;\n }\n\n // Network-scoped agents inherit their bound network as the implicit chat\n // scope. Every tool that branches on `context.networkId` then enforces\n // the same boundary the DB-level `indexScope` clamp enforces below —\n // most importantly `read_networks`, which would otherwise return the\n // global `publicNetworks` catalog for unscoped contexts.\n applyNetworkScopeToContext(context, networkScopeId);\n\n // Gate: API-key callers (background agents) must register before using most tools.\n // OAuth/JWT session callers (human MCP clients such as Claude Code) are exempt —\n // their identity is already established via the auth flow and they have no agent entity.\n if (!isSessionAuth && !context.agentId && !AGENT_GATE_EXEMPT.has(toolName)) {\n return {\n content: [{\n type: 'text' as const,\n text: JSON.stringify({\n error: 'Agent not registered',\n message:\n 'You must register as an agent before using Index tools. ' +\n 'Call register_agent with your agent name to establish an identity. ' +\n 'The tools register_agent, read_docs, and scrape_url are available without registration.',\n }),\n }],\n isError: true,\n };\n }\n\n // Gate: non-onboarded users can only use onboarding-related tools.\n // Mirrors the chat orchestrator's ONBOARDING MODE — the MCP client must\n // walk the user through profile creation, Gmail connect, intent capture,\n // and complete_onboarding() before full tool access is granted.\n if (context.isOnboarding && !ONBOARDING_ALLOWED.has(toolName)) {\n const onboardingSteps = buildMcpOnboardingMessage(context);\n return {\n content: [{\n type: 'text' as const,\n text: JSON.stringify({\n error: 'Onboarding required',\n message: onboardingSteps,\n }),\n }],\n isError: true,\n };\n }\n\n // Build per-request scoped databases via injected factory.\n // Network-scoped agents are clamped to their bound network plus the user's\n // personal index — they cannot reach other networks even when the user is\n // a member of them. The personal-index reachability is preserved so the\n // agent can still manage its owner's profile and contacts.\n // context.indexScope is now the single source of truth: set by\n // resolveChatContext (full set) and narrowed by applyNetworkScopeToContext.\n const scopedDbs = scopedDepsFactory.create(userId, context.indexScope);\n\n // Override deps with per-request scoped databases\n const requestDeps: ToolDeps = { ...deps, ...scopedDbs };\n reportDeps = requestDeps;\n\n // Re-create registry with per-request deps for scoped database access\n const requestRegistry = createToolRegistry(requestDeps);\n const requestTool = requestRegistry.get(toolName);\n\n if (!requestTool) {\n return {\n content: [{ type: 'text' as const, text: JSON.stringify({ error: `Tool \"${toolName}\" not found` }) }],\n isError: true,\n };\n }\n\n // Validate input against the original Zod schema\n const parseResult = (toolDef.schema as z.ZodType).safeParse(args);\n if (!parseResult.success) {\n const issues = parseResult.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ');\n return {\n content: [{ type: 'text' as const, text: JSON.stringify({ success: false, error: `Invalid input: ${issues}` }) }],\n isError: true,\n };\n }\n const validatedArgs = parseResult.data;\n\n // Execute the tool handler through the shared runtime so MCP calls have\n // consistent timeout, cancellation, progress, and requestContext plumbing.\n const result = await invokeToolRuntime({\n toolName,\n tool: requestTool,\n context,\n query: validatedArgs,\n signal: ctx.mcpReq.signal,\n traceEmitter: createMcpTraceEmitter(toolName, ctx),\n });\n\n const { text: sanitizedText, isError: toolIsError } = sanitizeMcpResult(result);\n\n // Slice 5: decision questions post-processing for discover_opportunities only.\n if (toolName === \"discover_opportunities\" && !toolIsError) {\n const questions = extractDecisionQuestions(sanitizedText);\n if (questions) {\n const envelopeBlock = {\n type: \"text\" as const,\n text: renderQuestionsEnvelope(questions),\n };\n\n const supportsElicitation =\n !!server.server.getClientCapabilities()?.elicitation;\n\n // Capture into a local const so TS preserves the narrowing\n // inside the callback below. Optional chains don't survive\n // across closure boundaries under strict mode.\n const elicitInput = ctx.mcpReq?.elicitInput;\n\n if (supportsElicitation && elicitInput) {\n // Sequential — never parallel (day-one rule). We await the loop\n // before returning the tool result so test harnesses can observe\n // the dispatched calls deterministically.\n await dispatchElicitations({\n userId,\n questions,\n elicitInput: (params) => elicitInput(params),\n chatMessageWriter: deps.chatMessageWriter,\n });\n }\n\n return {\n content: [\n { type: \"text\" as const, text: sanitizedText },\n envelopeBlock,\n ],\n ...(toolIsError ? { isError: true } : {}),\n };\n }\n }\n\n return {\n content: [{ type: 'text' as const, text: sanitizedText }],\n ...(toolIsError ? { isError: true } : {}),\n };\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err);\n logger.error(`MCP tool \"${toolName}\" failed`, { error: message });\n if (shouldReportMcpToolError(err)) {\n reportDeps.reportToolError?.(err, {\n subsystem: 'mcp',\n operation: 'mcp.tool',\n toolName,\n userId: reportUserId,\n tags: {\n transport: 'mcp',\n toolName,\n },\n context: {\n agentId: reportContext?.agentId,\n networkId: reportContext?.networkId,\n indexScope: reportContext?.indexScope,\n },\n });\n }\n const runtimeResult = toolRuntimeErrorToResult(err);\n return {\n content: [{ type: 'text' as const, text: runtimeResult ?? JSON.stringify({ error: message }) }],\n isError: true,\n };\n }\n },\n );\n }\n\n logger.verbose(`MCP server created with ${registry.size} tools`);\n return server;\n}\n"]}
1	+ {"version":3,"file":"mcp.server.js","sourceRoot":"/","sources":["mcp/mcp.server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAMzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAEhH,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAE5E,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;AAE3C,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QAChD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACnC,OAAO,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACnD,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,IAAI,GAAG,YAAY,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,kFAAkF;AAClF,iCAAiC;AACjC,kFAAkF;AAElF;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAiB;IACxC,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,KAAkB,CAAC;YACpC,UAAU,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3D,wEAAwE;QACxE,MAAM,MAAM,GAAI,MAAsE,CAAC,IAAI,EAAE,MAAM,CAAC;QACpG,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;qBAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;oBAAE,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;qBACpD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;oBAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;qBAClD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;oBAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;YAClE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAAI,MAAsF,CAAC,IAAI,EAAE,MAAM,CAAC;QACpH,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3D,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC;qBAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC;qBACvD,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/D,IAAI,MAAM,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAE,MAAgC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,OAAO,eAAe,CAAE,MAAmC,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QACnC,OAAO,eAAe,CAAE,MAAkC,CAAC,aAAa,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAG,MAA2C,CAAC,OAAO,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,eAAe,CAAE,MAAmC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,kFAAkF;AAClF,yBAAyB;AACzB,kFAAkF;AAElF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IACE,MAAM;YACN,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,IAAI;YACX,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAC3B,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;oBAChD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,KAAK,KAAK,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAClC,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAI,MAAoD,EAAE,IAAI,EAAE,SAAS,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7D,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB;YAAE,MAAM;IACrD,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAqB;IAC3D,OAAO,oCAAoC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,YAAkE,EAClE,cAAyC,EAC/B,EAAE;IACZ,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,YAAY;SAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,cAAc,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC;SACtE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,OAA4B,EAC5B,cAAyC,EACnC,EAAE;IACR,IAAI,CAAC,cAAc;QAAE,OAAO;IAC5B,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO;IAE9B,OAAO,CAAC,SAAS,GAAG,cAAc,CAAC;IACnC,0EAA0E;IAC1E,6EAA6E;IAC7E,2EAA2E;IAC3E,yDAAyD;IACzD,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,YAAY;SACtC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,cAAc,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC;SACtE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAE3B,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,cAAc,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC;IACvC,OAAO,CAAC,WAAW,GAAG;QACpB,EAAE,EAAE,KAAK,CAAC,SAAS;QACnB,KAAK,EAAE,KAAK,CAAC,YAAY;QACzB,MAAM,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;KAClC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IAC9D,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5D,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;AAC5B,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,gBAAgB;IAChB,WAAW;IACX,YAAY;IACZ,mCAAmC;IACnC,sBAAsB;IACtB,iBAAiB;IACjB,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,uBAAuB;IACvB,eAAe;IACf,2BAA2B;IAC3B,eAAe;IACf,oBAAoB;CACrB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAwB;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO;QAC1B,CAAC,CAAC,qDAAqD,GAAG,CAAC,QAAQ,aAAa;QAChF,CAAC,CAAC,8DAA8D,CAAC;IAEnE,MAAM,aAAa,GAAG,GAAG,CAAC,SAAS;QACjC,CAAC,CAAC,qCAAqC,GAAG,CAAC,SAAS,IAAI,iBAAiB,KAAK;QAC9E,CAAC,CAAC,iHAAiH,CAAC;IAEtH,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE9D,OAAO,CACL,6GAA6G;QAC7G,uEAAuE;QACvE,GAAG,WAAW,OAAO;QACrB,oBAAoB;QACpB,GAAG,QAAQ,IAAI;QACf,0IAA0I;QAC1I,0JAA0J;QAC1J,qPAAqP;QACrP,wHAAwH;QACxH,GAAG,aAAa,IAAI;QACpB,qIAAqI;QACrI,mIAAmI,CACpI,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAAC,QAAgB,EAAE,GAAkB;IACjE,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAE7E,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,QAAQ,IAAI,CAAC,CAAC;QACd,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE;YACpB,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,UAAU,CAAC;YAC9E,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC3I,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,gBAAgB,CAAC;YACpF,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,kBAAkB,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACjJ,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB;gBAAE,OAAO,GAAG,QAAQ,2BAA2B,CAAC;YAC5F,OAAO,GAAG,QAAQ,YAAY,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,YAAY,GAAqD;YACrE,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE;SACpD,CAAC;QACF,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjD,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;gBACvD,QAAQ;gBACR,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsD/B,CAAC,IAAI,EAAE,CAAC;AAET;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,MAAM,EAAE,WAAW,EAAE,KAAK,QAAQ,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,IAAI,uBAAuB,GAAG,KAAK,CAAC;AACpC,MAAM,UAAU,kBAAkB,CAAC,GAAkB;IACnD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC7B,uBAAuB,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAc,EACd,YAA6B,EAC7B,iBAAoC;IAEpC,6FAA6F;IAC7F,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAEjF,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,EAC3C,EAAE,YAAY,EAAE,gBAAgB,EAAE,CACnC,CAAC;IAEF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAE1C,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC3C,qEAAqE;QACrE,qDAAqD;QACrD,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAmB,CAAC;QACrE,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,CAAC,YAAY,CACjB,QAAQ,EACR;YACE,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,SAAS;SACvB,EACD,KAAK,EAAE,IAAa,EAAE,GAAkB,EAAE,EAAE;YAC1C,IAAI,UAAU,GAAG,IAAI,CAAC;YACtB,IAAI,YAAgC,CAAC;YACrC,IAAI,aAA8C,CAAC;YAEnD,IAAI,CAAC;gBACH,gEAAgE;gBAChE,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC;gBAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC,EAAE,CAAC;wBACjH,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,iEAAiE;gBACjE,MAAM,YAAY,GAAiB;oBACjC,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC;oBACxC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS;oBACrD,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;oBACzE,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,SAAS;oBAC3E,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,SAAS;iBAChF,CAAC;gBAEF,yDAAyD;gBACzD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;gBAC3H,YAAY,GAAG,MAAM,CAAC;gBAEtB,qEAAqE;gBACrE,+DAA+D;gBAC/D,sEAAsE;gBACtE,uEAAuE;gBACvE,wBAAwB;gBACxB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;oBACxB,oEAAoE;oBACpE,iEAAiE;oBACjE,0CAA0C;oBAC1C,IAAI,QAAQ,GAAwE,IAAI,CAAC;oBACzF,IAAI,CAAC;wBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC;4BACnC,MAAM;4BACN,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC/B,QAAQ;yBACT,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,IAAI,CAAC,+BAA+B,QAAQ,kBAAkB,EAAE;4BACrE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC9D,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;wBAClC,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC;wBACnD,OAAO;4BACL,OAAO,EAAE,CAAC;oCACR,IAAI,EAAE,MAAe;oCACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wCACnB,KAAK,EAAE,qBAAqB;wCAC5B,OAAO,EACL,YAAY,QAAQ,kCAAkC,aAAa,oBAAoB;4CACvF,CAAC,QAAQ,KAAK,wBAAwB;gDACpC,CAAC,CAAC,6GAA6G;gDAC/G,CAAC,CAAC,EAAE,CAAC;wCACT,aAAa;qCACd,CAAC;iCACH,CAAC;4BACF,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,gFAAgF;gBAChF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC9E,aAAa,GAAG,OAAO,CAAC;gBACxB,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;gBACrB,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;gBAC5B,CAAC;gBACD,IAAI,aAAa,EAAE,CAAC;oBAClB,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;gBACxC,CAAC;gBAED,yEAAyE;gBACzE,uEAAuE;gBACvE,qEAAqE;gBACrE,qEAAqE;gBACrE,yDAAyD;gBACzD,0BAA0B,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;gBAEpD,mFAAmF;gBACnF,iFAAiF;gBACjF,yFAAyF;gBACzF,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3E,OAAO;wBACL,OAAO,EAAE,CAAC;gCACR,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oCACnB,KAAK,EAAE,sBAAsB;oCAC7B,OAAO,EACL,0DAA0D;wCAC1D,qEAAqE;wCACrE,yFAAyF;iCAC5F,CAAC;6BACH,CAAC;wBACF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,mEAAmE;gBACnE,wEAAwE;gBACxE,yEAAyE;gBACzE,gEAAgE;gBAChE,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9D,MAAM,eAAe,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;oBAC3D,OAAO;wBACL,OAAO,EAAE,CAAC;gCACR,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oCACnB,KAAK,EAAE,qBAAqB;oCAC5B,OAAO,EAAE,eAAe;iCACzB,CAAC;6BACH,CAAC;wBACF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,2DAA2D;gBAC3D,2EAA2E;gBAC3E,0EAA0E;gBAC1E,wEAAwE;gBACxE,2DAA2D;gBAC3D,+DAA+D;gBAC/D,4EAA4E;gBAC5E,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;gBAEvE,kDAAkD;gBAClD,MAAM,WAAW,GAAa,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;gBACxD,UAAU,GAAG,WAAW,CAAC;gBAEzB,sEAAsE;gBACtE,MAAM,eAAe,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;gBACxD,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAElD,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,QAAQ,aAAa,EAAE,CAAC,EAAE,CAAC;wBACrG,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,iDAAiD;gBACjD,MAAM,WAAW,GAAI,OAAO,CAAC,MAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAClE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnG,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;wBACjH,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC;gBAEvC,wEAAwE;gBACxE,2EAA2E;gBAC3E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;oBACrC,QAAQ;oBACR,IAAI,EAAE,WAAW;oBACjB,OAAO;oBACP,KAAK,EAAE,aAAa;oBACpB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;oBACzB,YAAY,EAAE,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC;iBACnD,CAAC,CAAC;gBAEH,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAEhF,+EAA+E;gBAC/E,IAAI,QAAQ,KAAK,wBAAwB,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC1D,MAAM,SAAS,GAAG,wBAAwB,CAAC,aAAa,CAAC,CAAC;oBAC1D,IAAI,SAAS,EAAE,CAAC;wBACd,MAAM,aAAa,GAAG;4BACpB,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC;yBACzC,CAAC;wBAEF,MAAM,mBAAmB,GACvB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,EAAE,WAAW,CAAC;wBAEvD,2DAA2D;wBAC3D,2DAA2D;wBAC3D,+CAA+C;wBAC/C,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC;wBAE5C,IAAI,mBAAmB,IAAI,WAAW,EAAE,CAAC;4BACvC,gEAAgE;4BAChE,iEAAiE;4BACjE,0CAA0C;4BAC1C,MAAM,oBAAoB,CAAC;gCACzB,MAAM;gCACN,SAAS;gCACT,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;gCAC5C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;6BAC1C,CAAC,CAAC;wBACL,CAAC;wBAED,OAAO;4BACL,OAAO,EAAE;gCACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,aAAa,EAAE;gCAC9C,aAAa;6BACd;4BACD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC1C,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;oBACzD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1C,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,MAAM,CAAC,KAAK,CAAC,aAAa,QAAQ,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBAClE,IAAI,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClC,UAAU,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE;wBAChC,SAAS,EAAE,KAAK;wBAChB,SAAS,EAAE,UAAU;wBACrB,QAAQ;wBACR,MAAM,EAAE,YAAY;wBACpB,IAAI,EAAE;4BACJ,SAAS,EAAE,KAAK;4BAChB,QAAQ;yBACT;wBACD,OAAO,EAAE;4BACP,OAAO,EAAE,aAAa,EAAE,OAAO;4BAC/B,SAAS,EAAE,aAAa,EAAE,SAAS;4BACnC,UAAU,EAAE,aAAa,EAAE,UAAU;yBACtC;qBACF,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;gBACpD,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,aAAa,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;oBAC/F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,2BAA2B,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/*\n MCP Server Factory — creates an McpServer instance with all protocol tools\n * registered from the existing tool registry. Each tool invocation resolves\n * auth from the HTTP request, builds a ResolvedToolContext, and delegates\n * to the raw tool handler.\n /\n\nimport { z } from 'zod';\nimport { McpServer, fromJsonSchema } from '@modelcontextprotocol/server';\nimport type { ServerContext, JsonSchemaType } from '@modelcontextprotocol/server';\n\nimport type { McpAuthResolver } from '../shared/interfaces/auth.interface.js';\nimport type { McpAuthInput } from '../shared/schemas/mcp-auth.schema.js';\nimport type { ToolDeps, ResolvedToolContext } from '../shared/agent/tool.helpers.js';\nimport { resolveChatContext } from '../shared/agent/tool.helpers.js';\nimport type { Question } from '../shared/schemas/question.schema.js';\nimport { QuestionSchema } from '../shared/schemas/question.schema.js';\nimport { dispatchElicitations } from './elicitation.dispatcher.js';\nimport { createToolRegistry } from '../shared/agent/tool.registry.js';\nimport { ToolRuntimeError, invokeToolRuntime, toolRuntimeErrorToResult } from '../shared/agent/tool.runtime.js';\nimport type { TraceEmitter } from '../shared/observability/request-context.js';\nimport { protocolLogger } from '../shared/observability/protocol.logger.js';\n\nconst logger = protocolLogger('McpServer');\n\nfunction isExpectedMcpAuthError(message: string): boolean {\n return message.includes('Authentication required') \|\|\n message.includes('Invalid API key') \|\|\n message.includes('Invalid or expired access token') \|\|\n message.includes('JWT payload missing user ID');\n}\n\n/\n Runtime/auth failures are converted into structured MCP `isError` tool\n * results for the caller. Reporting them as application exceptions produces\n * Sentry noise for expected client failures and policy-enforced timeouts.\n /\nexport function shouldReportMcpToolError(err: unknown): boolean {\n if (err instanceof ToolRuntimeError) return false;\n const message = err instanceof Error ? err.message : String(err);\n return !isExpectedMcpAuthError(message);\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// ZOD 3 → JSON SCHEMA CONVERSION\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/\n Minimal Zod-to-JSON-Schema conversion for MCP tool registration.\n * Converts Zod 3.x schemas to plain JSON Schema objects that can be\n * wrapped with `fromJsonSchema()` for MCP SDK compatibility.\n /\nfunction zodToJsonSchema(schema: z.ZodType): Record<string, unknown> {\n if (schema instanceof z.ZodObject) {\n const shape = schema.shape;\n const properties: Record<string, unknown> = {};\n const required: string[] = [];\n for (const [key, value] of Object.entries(shape)) {\n const zodValue = value as z.ZodType;\n properties[key] = zodToJsonSchema(zodValue);\n if (!(zodValue instanceof z.ZodOptional) && !(zodValue instanceof z.ZodDefault)) {\n required.push(key);\n }\n }\n return { type: 'object', properties, ...(required.length ? { required } : {}) };\n }\n if (schema instanceof z.ZodString) {\n const result: Record<string, unknown> = { type: 'string' };\n // Detect .url(), .email(), .uuid() etc. via Zod's internal checks array\n const checks = (schema as z.ZodString & { _def: { checks: Array<{ kind: string }> } })._def?.checks;\n if (checks) {\n for (const check of checks) {\n if (check.kind === 'url') result.format = 'uri';\n else if (check.kind === 'email') result.format = 'email';\n else if (check.kind === 'uuid') result.format = 'uuid';\n else if (check.kind === 'datetime') result.format = 'date-time';\n }\n }\n return result;\n }\n if (schema instanceof z.ZodNumber) {\n const checks = (schema as z.ZodNumber & { _def: { checks: Array<{ kind: string; value?: number }> } })._def?.checks;\n const result: Record<string, unknown> = { type: 'number' };\n if (checks) {\n for (const check of checks) {\n if (check.kind === 'int') result.type = 'integer';\n else if (check.kind === 'min') result.minimum = check.value;\n else if (check.kind === 'max') result.maximum = check.value;\n }\n }\n return result;\n }\n if (schema instanceof z.ZodBoolean) return { type: 'boolean' };\n if (schema instanceof z.ZodArray) {\n return { type: 'array', items: zodToJsonSchema((schema as z.ZodArray<z.ZodType>).element) };\n }\n if (schema instanceof z.ZodOptional) {\n return zodToJsonSchema((schema as z.ZodOptional<z.ZodType>).unwrap());\n }\n if (schema instanceof z.ZodDefault) {\n return zodToJsonSchema((schema as z.ZodDefault<z.ZodType>).removeDefault());\n }\n if (schema instanceof z.ZodEnum) {\n return { type: 'string', enum: (schema as z.ZodEnum<[string, ...string[]]>).options };\n }\n if (schema instanceof z.ZodNullable) {\n const inner = zodToJsonSchema((schema as z.ZodNullable<z.ZodType>).unwrap());\n return { ...inner, nullable: true };\n }\n if (schema instanceof z.ZodRecord) {\n return { type: 'object', additionalProperties: true };\n }\n return { type: 'object' };\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// RESULT POST-PROCESSING\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/\n Strips internal `_`-prefixed keys from `data` and promotes `isError`\n * from the inner `success: false` signal to the MCP envelope level.\n * Fail-open: if JSON parsing throws, returns the original text with isError: false.\n /\nexport function sanitizeMcpResult(text: string): { text: string; isError: boolean } {\n try {\n const parsed = JSON.parse(text);\n if (\n parsed &&\n typeof parsed === 'object' &&\n parsed.data &&\n typeof parsed.data === 'object' &&\n !Array.isArray(parsed.data)\n ) {\n for (const key of Object.keys(parsed.data)) {\n if (key.startsWith('_') \|\| key === 'debugSteps') {\n delete parsed.data[key];\n }\n }\n }\n const isError = parsed?.success === false;\n return { text: JSON.stringify(parsed), isError };\n } catch {\n return { text, isError: false };\n }\n}\n\n/* Spec cap on the number of decision questions surfaced per turn. /\nconst MAX_DECISION_QUESTIONS = 3;\n\n/\n Extracts decision questions from a parsed tool-result text, if present.\n * Validates each entry against `QuestionSchema` and drops malformed items;\n * caps the array at `MAX_DECISION_QUESTIONS` (defense-in-depth — Slice 2's\n * generator already caps at 3, but we don't trust the cast here).\n \n Returns null when the text isn't JSON, has no `data.questions`, or\n * contains zero valid questions after validation.\n /\nexport function extractDecisionQuestions(text: string): Question[] \| null {\n let parsed: unknown;\n try {\n parsed = JSON.parse(text);\n } catch {\n return null;\n }\n\n const rawQs = (parsed as { data?: { questions?: unknown } } \| null)?.data?.questions;\n if (!Array.isArray(rawQs) \|\| rawQs.length === 0) return null;\n\n const valid: Question[] = [];\n for (const raw of rawQs) {\n const result = QuestionSchema.safeParse(raw);\n if (result.success) valid.push(result.data);\n if (valid.length === MAX_DECISION_QUESTIONS) break;\n }\n return valid.length > 0 ? valid : null;\n}\n\n/\n Renders the JSON-envelope text block appended to the tool result content\n * when decision questions are present. The leading sentinel string lets the\n * LLM client recognize and surface the questions in prose for clients\n * without elicitation support.\n /\nexport function renderQuestionsEnvelope(questions: Question[]): string {\n return `Decision questions (structured): ${JSON.stringify({ questions })}`;\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// MCP SERVER FACTORY\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/\n Factory for creating per-request scoped database instances.\n * Injected from the controller/handler layer to keep the protocol layer\n * free of direct adapter imports.\n /\nexport interface ScopedDepsFactory {\n /* Creates scoped userDb and systemDb for the given user and index scope. /\n create(userId: string, indexScope: string[]): Pick<ToolDeps, 'userDb' \| 'systemDb'>;\n}\n\n/\n Computes the index scope passed to the per-request scoped DB factory. When\n * `networkScopeId` is non-null, the agent is bound to a single network and\n * may only reach that network plus the user's personal index. Otherwise the\n * full set of the user's network memberships is returned.\n /\nexport const computeAgentIndexScope = (\n userNetworks: { networkId: string; isPersonal?: boolean \| null }[],\n networkScopeId: string \| null \| undefined,\n): string[] => {\n if (!networkScopeId) {\n return userNetworks.map((m) => m.networkId);\n }\n return userNetworks\n .filter((m) => m.networkId === networkScopeId \|\| m.isPersonal === true)\n .map((m) => m.networkId);\n};\n\n/\n Promotes a network-scoped agent's bound network into the resolved tool\n * context as the implicit chat scope. Every tool that branches on\n * `context.networkId` (read_networks, read_intents, read_user_profiles,\n * opportunity tools, etc.) then enforces scope automatically — without this\n * step the DB-level `indexScope` clamp guards cross-user data but tools that\n * shape their response off `context.networkId` (notably `read_networks`'\n * `publicNetworks` branch) would still leak the global view.\n \n No-op when there is no scope, or when an explicit chat scope is already\n * set (a user-driven index-scoped chat must keep precedence over the agent\n * binding — which would be a strict subset anyway, since the API key cannot\n * reach beyond its bound network).\n /\nexport const applyNetworkScopeToContext = (\n context: ResolvedToolContext,\n networkScopeId: string \| null \| undefined,\n): void => {\n if (!networkScopeId) return;\n if (context.networkId) return;\n\n context.networkId = networkScopeId;\n // Clamp indexScope to [boundNetwork, personalIndex] BEFORE the membership\n // check below. If the bound network is not in userNetworks (defensive case),\n // the filter still produces a safe scope (personal index only) rather than\n // leaving the unclamped scope set by resolveChatContext.\n context.indexScope = context.userNetworks\n .filter((m) => m.networkId === networkScopeId \|\| m.isPersonal === true)\n .map((m) => m.networkId);\n\n const bound = context.userNetworks.find((m) => m.networkId === networkScopeId);\n if (!bound) return;\n\n context.indexName = bound.networkTitle;\n context.scopedIndex = {\n id: bound.networkId,\n title: bound.networkTitle,\n prompt: bound.indexPrompt ?? null,\n };\n const isOwner = bound.permissions?.includes('owner') ?? false;\n context.scopedMembershipRole = isOwner ? 'owner' : 'member';\n context.isOwner = isOwner;\n};\n\n/\n Tools allowed during onboarding — everything else is gated until\n * complete_onboarding is called. Includes the agent-gate-exempt tools\n * (register_agent, read_docs, scrape_url) because they are informational /\n * registration primitives needed at every lifecycle stage.\n /\nexport const ONBOARDING_ALLOWED: ReadonlySet<string> = new Set([\n 'register_agent',\n 'read_docs',\n 'scrape_url',\n 'record_onboarding_privacy_consent',\n 'preview_user_profile',\n 'get_profile_run',\n 'cancel_profile_run',\n 'confirm_user_profile',\n 'create_user_profile',\n 'complete_onboarding',\n 'import_gmail_contacts',\n 'read_networks',\n 'create_network_membership',\n 'create_intent',\n 'read_user_profiles',\n]);\n\n/\n Builds the onboarding gate message for MCP callers. Condensed from the\n * chat orchestrator's 8-step flow (chat.prompt.ts buildOnboarding) into a\n * 7-step tool-error guide suited for non-interactive MCP clients.\n /\nexport function buildMcpOnboardingMessage(ctx: ResolvedToolContext): string {\n const nameStep = ctx.hasName\n ? `1. Greet the user and confirm their name (\"You're ${ctx.userName}, right?\").`\n : `1. Ask the user for their name and a short self-description.`;\n\n const communityStep = ctx.networkId\n ? `5. (Skipped — user is already in \"${ctx.indexName ?? 'their community'}\".)`\n : `5. Call read_networks() and let the user pick communities to join via create_network_membership(networkId=...).`;\n\n const allowedList = Array.from(ONBOARDING_ALLOWED).join(', ');\n\n return (\n `This user has not completed onboarding. You must guide them through setup before they can use other tools. ` +\n `Only the following tools are available until onboarding is complete: ` +\n `${allowedList}.\\n\\n` +\n `Onboarding flow:\\n` +\n `${nameStep}\\n` +\n `2. Ask whether the user allows use of event/EdgeOS profile data, then call record_onboarding_privacy_consent(edgeosImportGranted=...).\\n` +\n `3. Ask separately whether the user allows public internet/profile lookup, then call record_onboarding_privacy_consent(publicProfileLookupGranted=...).\\n` +\n `4. Call preview_user_profile(...) using only allowed inputs; do not run public lookup unless consent was granted. If it returns profileRunId, poll get_profile_run(profileRunId=...) until status is succeeded, then use its result as the draft.\\n` +\n `5. Present the profile draft and ask \"Does that look right?\" On approval/correction, call confirm_user_profile(...).\\n` +\n `${communityStep}\\n` +\n `6. Ask what the user is looking for and call create_intent(description=\"...\", autoApprove=true) so the first signal is persisted.\\n` +\n `7. Call complete_onboarding() to finish setup. Gmail/contact import and discovery are optional after onboarding, never mandatory.`\n );\n}\n\n/\n Creates an MCP server with all protocol tools registered.\n * Tools resolve auth per-request via the HTTP request available in ServerContext.\n \n @param deps - Shared tool dependencies (graphs, database, embedder, etc.)\n * @param authResolver - Resolves authenticated identity from the HTTP request\n * @param scopedDepsFactory - Factory for creating per-request scoped databases\n * @returns A configured McpServer ready to be connected to a transport\n /\nfunction createMcpTraceEmitter(toolName: string, ctx: ServerContext): TraceEmitter \| undefined {\n const token = ctx.mcpReq._meta?.progressToken;\n if (typeof token !== 'string' && typeof token !== 'number') return undefined;\n\n let progress = 0;\n return (event) => {\n progress += 1;\n const message = (() => {\n if (event.type === 'graph_start') return `${toolName}: ${event.name} started`;\n if (event.type === 'graph_end') return `${toolName}: ${event.name} finished${event.durationMs != null ? ` in ${event.durationMs}ms` : ''}`;\n if (event.type === 'agent_start') return `${toolName}: ${event.name} agent started`;\n if (event.type === 'agent_end') return `${toolName}: ${event.name} agent finished${event.durationMs != null ? ` in ${event.durationMs}ms` : ''}`;\n if (event.type === 'opportunity_draft_ready') return `${toolName}: opportunity draft ready`;\n return `${toolName}: progress`;\n })();\n\n const notification: Parameters<ServerContext['mcpReq']['notify']>[0] = {\n method: 'notifications/progress',\n params: { progressToken: token, progress, message },\n };\n void ctx.mcpReq.notify(notification).catch((err) => {\n logger.debug('Failed to send MCP progress notification', {\n toolName,\n error: err instanceof Error ? err.message : String(err),\n });\n });\n };\n}\n\nexport const MCP_INSTRUCTIONS = `\nIndex Network is a private, intent-driven discovery protocol. You help users find the right people and help the right people find them, via Index Network MCP tools.\n\n# Voice\nCalm, direct, analytical, concise. Preferred vocabulary: opportunity, overlap, signal, pattern, emerging, relevant, adjacency.\n\n# Banned vocabulary\nNEVER use \"search\" in any form. Use \"looking up\" for indexed data, \"find\" / \"look for\" for discovery, \"check\" for verification, \"discover\" for exploration. Banned: leverage, unlock, optimize, scale, disrupt, revolutionary, AI-powered, maximize value, act fast, networking, match.\n\n# Entity model\n- User — has one Profile, many Memberships, many Intents.\n- Profile — identity (bio, skills, interests, location).\n- Index — community with title, prompt (purpose), join policy. Has Members.\n- Membership — User↔Index junction. \\`isPersonal: true\\` marks the user's personal index (contacts).\n- Intent — what a user is looking for (signal). Description, summary, embedding.\n- IntentIndex — Intent↔Index junction (auto-assigned).\n- Opportunity — discovered connection between users. Roles, status, reasoning.\n\n# Output rules\n- NEVER expose internal IDs, UUIDs, field names, or tool names — EXCEPT when an ID is actionable for the user (e.g. a \\`conversationId\\` they need to open a chat). Surface such IDs verbatim when the tool returns them.\n- NEVER use internal vocabulary — say \"signal\" not \"intent\", \"community\" not \"index\".\n- NEVER dump raw JSON. Synthesize in natural language.\n- Surface top 1–3 relevant points unless asked for the full list.\n- Prefer first names; use full names only to disambiguate.\n- Translate statuses: draft/latent → \"draft\", pending → \"sent\", accepted → \"connected\".\n- NEVER fabricate data. If you don't have it, call the appropriate tool.\n\n# Tool guidance\nEach tool's description contains its own usage rules (when to call, when NOT to call, required prerequisites, post-call follow-ups). Read the description of every tool you call — that is where the per-tool workflow patterns live.\n\n# Authentication\nPass your API key in the \\`x-api-key\\` request header (not \\`Authorization: Bearer\\`).\n\n# Opportunity lifecycle\nOpportunities move through: draft → pending → accepted (or rejected).\n\n- draft* (you created it, not yet sent): offer to send it; confirm before calling update_opportunity with pending.\n- pending, you sent it: waiting for the other side — nothing to do.\n- pending, you received it: the other person is waiting for your response. Surface it to the user and ask if they want to start a chat. Only call update_opportunity with accepted after explicit user confirmation.\n- accepted: both sides are connected — a direct conversation exists. Surface the conversationId to the user if available.\n\nNever accept a received opportunity without explicit user approval in the current conversation.\n\n# Decision questions after discovery\n\nAfter \\`discover_opportunities\\`, the tool result may include a second text block starting with \\`Decision questions (structured): ...\\`. This means the discovery engine ran negotiations but needs human input to sharpen the next turn — e.g. clarify timing, role, stage, or location.\n\nWhen this block is present:\n1. Parse the \\`questions\\` array from the JSON after the sentinel.\n2. Each question has \\`title\\` (decision domain, ≤12 chars), \\`prompt\\` (ends in \\`?\\`), \\`options\\` (2–4 items, each with \\`label\\` and \\`description\\`), and \\`multiSelect\\`. The safest option is labeled \\`... (Recommended)\\`.\n3. Present each question in natural language: ask the \\`prompt\\`, list options as \\`{label} — {description}\\`. Never expose the JSON or technical field names.\n4. Wait for the user's answer, then fold it into the next \\`discover_opportunities(searchQuery=...)\\` call.\n\nElicitation-capable clients (those that declared \\`elicitation\\` support in \\`initialize\\`): the server dispatches \\`elicitation/create\\` requests directly — answers are written back to the chat session automatically. You will not see the envelope as a follow-up task in that case.\n`.trim();\n\n/*\n Extracts a Bearer token from an HTTP Authorization header.\n /\nexport function extractBearerToken(req: Request): string \| undefined {\n const authHeader = req.headers.get('Authorization');\n if (!authHeader) return undefined;\n const [scheme, token] = authHeader.trim().split(/\\s+/, 2);\n if (scheme?.toLowerCase() === 'bearer' && token) return token;\n return undefined;\n}\n\n/\n Normalizes the x-index-surface header to a typed surface value.\n * Unknown or absent values collapse to 'web'.\n */\nlet hasWarnedInvalidSurface = false;\nexport function parseClientSurface(raw: string \| null): 'telegram' \| 'web' {\n if (raw === null \|\| raw === '') return 'web';\n const trimmed = raw.trim().toLowerCase();\n if (trimmed === '') return 'web';\n if (trimmed === 'telegram') return 'telegram';\n if (trimmed === 'web') return 'web';\n if (!hasWarnedInvalidSurface) {\n hasWarnedInvalidSurface = true;\n logger.warn('Unknown x-index-surface value (collapsing to web; warning once per process)');\n }\n return 'web';\n}\n\nexport function createMcpServer(\n deps: ToolDeps,\n authResolver: McpAuthResolver,\n scopedDepsFactory: ScopedDepsFactory,\n): McpServer {\n // Tools exempt from the agent-registration gate — available before registration is complete.\n const AGENT_GATE_EXEMPT = new Set(['register_agent', 'read_docs', 'scrape_url']);\n\n const server = new McpServer(\n { name: 'index-network', version: '1.0.0' },\n { instructions: MCP_INSTRUCTIONS },\n );\n\n const registry = createToolRegistry(deps);\n\n for (const [toolName, toolDef] of registry) {\n // Convert Zod 3 schema to JSON Schema, then wrap with fromJsonSchema\n // for MCP SDK's StandardSchemaWithJSON compatibility\n const jsonSchema = zodToJsonSchema(toolDef.schema) as JsonSchemaType;\n const mcpSchema = fromJsonSchema(jsonSchema);\n\n server.registerTool(\n toolName,\n {\n description: toolDef.description,\n inputSchema: mcpSchema,\n },\n async (args: unknown, ctx: ServerContext) => {\n let reportDeps = deps;\n let reportUserId: string \| undefined;\n let reportContext: ResolvedToolContext \| undefined;\n\n try {\n // Extract the original HTTP request from the MCP server context\n const httpReq = ctx.http?.req;\n if (!httpReq) {\n return {\n content: [{ type: 'text' as const, text: JSON.stringify({ error: 'No HTTP request available in MCP context' }) }],\n isError: true,\n };\n }\n\n // Extract transport-neutral auth input DTO from the HTTP request\n const mcpAuthInput: McpAuthInput = {\n bearerToken: extractBearerToken(httpReq),\n apiKey: httpReq.headers.get('x-api-key') ?? undefined,\n clientSurface: parseClientSurface(httpReq.headers.get('x-index-surface')),\n telegramHandle: httpReq.headers.get('x-index-telegram-handle') ?? undefined,\n telegramUsername: httpReq.headers.get('x-index-telegram-username') ?? undefined,\n };\n\n // Resolve authenticated identity from the auth input DTO\n const { userId, agentId, isSessionAuth, networkScopeId, clientSurface } = await authResolver.resolveIdentity(mcpAuthInput);\n reportUserId = userId;\n\n // Per-principal MCP throttle. Runs BEFORE any DB work so a throttled\n // call short-circuits cheaply. The /mcp transport bypasses the\n // controller-level RateLimit guard, so this is the only volume cap on\n // tool calls — it stops an over-eager agent from cascading itself into\n // provider rate limits.\n if (deps.mcpRateLimiter) {\n // Throttling is best-effort: never let a limiter failure (or a host\n // implementation that throws instead of failing open) break tool\n // dispatch. Treat any error as \"allowed\".\n let decision: Awaited<ReturnType<NonNullable<typeof deps.mcpRateLimiter>>> \| null = null;\n try {\n decision = await deps.mcpRateLimiter({\n userId,\n ...(agentId ? { agentId } : {}),\n toolName,\n });\n } catch (rlErr) {\n logger.warn(`MCP rate limiter threw for \"${toolName}\" — failing open`, {\n error: rlErr instanceof Error ? rlErr.message : String(rlErr),\n });\n }\n if (decision && !decision.allowed) {\n const retryAfterSec = decision.retryAfterSec ?? 60;\n return {\n content: [{\n type: 'text' as const,\n text: JSON.stringify({\n error: 'Rate limit exceeded',\n message:\n `Too many ${toolName} calls in a short period. Wait ${retryAfterSec}s before retrying.` +\n (toolName === 'discover_opportunities'\n ? ` If a discovery run is in progress, poll get_discovery_run instead of calling discover_opportunities again.`\n : ''),\n retryAfterSec,\n }),\n }],\n isError: true,\n };\n }\n }\n\n // Resolve chat context for the user (mark as MCP — no interactive UI available)\n const context = await resolveChatContext({ database: deps.database, userId });\n reportContext = context;\n context.isMcp = true;\n if (agentId) {\n context.agentId = agentId;\n }\n if (clientSurface) {\n context.clientSurface = clientSurface;\n }\n\n // Network-scoped agents inherit their bound network as the implicit chat\n // scope. Every tool that branches on `context.networkId` then enforces\n // the same boundary the DB-level `indexScope` clamp enforces below —\n // most importantly `read_networks`, which would otherwise return the\n // global `publicNetworks` catalog for unscoped contexts.\n applyNetworkScopeToContext(context, networkScopeId);\n\n // Gate: API-key callers (background agents) must register before using most tools.\n // OAuth/JWT session callers (human MCP clients such as Claude Code) are exempt —\n // their identity is already established via the auth flow and they have no agent entity.\n if (!isSessionAuth && !context.agentId && !AGENT_GATE_EXEMPT.has(toolName)) {\n return {\n content: [{\n type: 'text' as const,\n text: JSON.stringify({\n error: 'Agent not registered',\n message:\n 'You must register as an agent before using Index tools. ' +\n 'Call register_agent with your agent name to establish an identity. ' +\n 'The tools register_agent, read_docs, and scrape_url are available without registration.',\n }),\n }],\n isError: true,\n };\n }\n\n // Gate: non-onboarded users can only use onboarding-related tools.\n // Mirrors the chat orchestrator's ONBOARDING MODE — the MCP client must\n // walk the user through profile creation, Gmail connect, intent capture,\n // and complete_onboarding() before full tool access is granted.\n if (context.isOnboarding && !ONBOARDING_ALLOWED.has(toolName)) {\n const onboardingSteps = buildMcpOnboardingMessage(context);\n return {\n content: [{\n type: 'text' as const,\n text: JSON.stringify({\n error: 'Onboarding required',\n message: onboardingSteps,\n }),\n }],\n isError: true,\n };\n }\n\n // Build per-request scoped databases via injected factory.\n // Network-scoped agents are clamped to their bound network plus the user's\n // personal index — they cannot reach other networks even when the user is\n // a member of them. The personal-index reachability is preserved so the\n // agent can still manage its owner's profile and contacts.\n // context.indexScope is now the single source of truth: set by\n // resolveChatContext (full set) and narrowed by applyNetworkScopeToContext.\n const scopedDbs = scopedDepsFactory.create(userId, context.indexScope);\n\n // Override deps with per-request scoped databases\n const requestDeps: ToolDeps = { ...deps, ...scopedDbs };\n reportDeps = requestDeps;\n\n // Re-create registry with per-request deps for scoped database access\n const requestRegistry = createToolRegistry(requestDeps);\n const requestTool = requestRegistry.get(toolName);\n\n if (!requestTool) {\n return {\n content: [{ type: 'text' as const, text: JSON.stringify({ error: `Tool \"${toolName}\" not found` }) }],\n isError: true,\n };\n }\n\n // Validate input against the original Zod schema\n const parseResult = (toolDef.schema as z.ZodType).safeParse(args);\n if (!parseResult.success) {\n const issues = parseResult.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ');\n return {\n content: [{ type: 'text' as const, text: JSON.stringify({ success: false, error: `Invalid input: ${issues}` }) }],\n isError: true,\n };\n }\n const validatedArgs = parseResult.data;\n\n // Execute the tool handler through the shared runtime so MCP calls have\n // consistent timeout, cancellation, progress, and requestContext plumbing.\n const result = await invokeToolRuntime({\n toolName,\n tool: requestTool,\n context,\n query: validatedArgs,\n signal: ctx.mcpReq.signal,\n traceEmitter: createMcpTraceEmitter(toolName, ctx),\n });\n\n const { text: sanitizedText, isError: toolIsError } = sanitizeMcpResult(result);\n\n // Slice 5: decision questions post-processing for discover_opportunities only.\n if (toolName === \"discover_opportunities\" && !toolIsError) {\n const questions = extractDecisionQuestions(sanitizedText);\n if (questions) {\n const envelopeBlock = {\n type: \"text\" as const,\n text: renderQuestionsEnvelope(questions),\n };\n\n const supportsElicitation =\n !!server.server.getClientCapabilities()?.elicitation;\n\n // Capture into a local const so TS preserves the narrowing\n // inside the callback below. Optional chains don't survive\n // across closure boundaries under strict mode.\n const elicitInput = ctx.mcpReq?.elicitInput;\n\n if (supportsElicitation && elicitInput) {\n // Sequential — never parallel (day-one rule). We await the loop\n // before returning the tool result so test harnesses can observe\n // the dispatched calls deterministically.\n await dispatchElicitations({\n userId,\n questions,\n elicitInput: (params) => elicitInput(params),\n chatMessageWriter: deps.chatMessageWriter,\n });\n }\n\n return {\n content: [\n { type: \"text\" as const, text: sanitizedText },\n envelopeBlock,\n ],\n ...(toolIsError ? { isError: true } : {}),\n };\n }\n }\n\n return {\n content: [{ type: 'text' as const, text: sanitizedText }],\n ...(toolIsError ? { isError: true } : {}),\n };\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err);\n logger.error(`MCP tool \"${toolName}\" failed`, { error: message });\n if (shouldReportMcpToolError(err)) {\n reportDeps.reportToolError?.(err, {\n subsystem: 'mcp',\n operation: 'mcp.tool',\n toolName,\n userId: reportUserId,\n tags: {\n transport: 'mcp',\n toolName,\n },\n context: {\n agentId: reportContext?.agentId,\n networkId: reportContext?.networkId,\n indexScope: reportContext?.indexScope,\n },\n });\n }\n const runtimeResult = toolRuntimeErrorToResult(err);\n return {\n content: [{ type: 'text' as const, text: runtimeResult ?? JSON.stringify({ error: message }) }],\n isError: true,\n };\n }\n },\n );\n }\n\n logger.verbose(`MCP server created with ${registry.size} tools`);\n return server;\n}\n"]}

package/dist/profile/profile.tools.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"profile.tools.d.ts","sourceRoot":"/","sources":["profile/profile.tools.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAuB,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAgCjG,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,~~0DA8sCxE~~"}
1	+ {"version":3,"file":"profile.tools.d.ts","sourceRoot":"/","sources":["profile/profile.tools.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAuB,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAgCjG,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,0DAytCxE"}

package/dist/profile/profile.tools.js CHANGED Viewed

@@ -1128,10 +1128,10 @@ export function createProfileTools(defineTool, deps) {
     const completeOnboarding = defineTool({
         name: "complete_onboarding",
         description: "Marks the user's onboarding as complete, unlocking full platform access. This is the final step in the new-user setup flow.\n\n" +
-            "**Prerequisites:** The user must have a profile (created via create_user_profile) AND must have explicitly confirmed it " +
-            "(said 'yes', 'looks good', 'that's right', or similar). Do NOT call this until the user confirms.\n\n" +
-            "**What happens:** Sets completedAt timestamp on the user's onboarding record.\n\n" +
-            "**Workflow:** create_user_profile() -> user confirms preview -> create_user_profile(confirm=true) -> user confirms saved profile -> complete_onboarding()\n\n" +
+            "**Prerequisites:** The user must have a confirmed profile AND at least one active intent/signal. The profile must be shown to the user and explicitly approved " +
+            "(said 'yes', 'looks good', 'that's right', or similar). The first signal must be persisted before this tool is called; MCP/onboarding agents should call create_intent(..., autoApprove=true).\n\n" +
+            "**What happens:** Validates that the confirmed profile and first active intent exist, then sets completedAt timestamp on the user's onboarding record.\n\n" +
+            "**Workflow:** create_user_profile() -> user confirms preview -> create_user_profile(confirm=true) -> create_intent(..., autoApprove=true) -> complete_onboarding()\n\n" +
             "**Returns:** Confirmation that onboarding is complete. No parameters needed.",
         querySchema: z.object({}),
         handler: async ({ context }) => {
@@ -1140,6 +1140,14 @@ export function createProfileTools(defineTool, deps) {
                 logger.verbose("Onboarding already completed, skipping", { userId: context.userId });
                 return success({ message: "Onboarding already completed." });
             }
+            const confirmedProfile = await userDb.getProfile();
+            if (!confirmedProfile) {
+                return error("Onboarding cannot be completed until the user has a confirmed profile. Show the profile draft, get explicit approval, then save it before finishing onboarding.");
+            }
+            const activeIntents = await userDb.getActiveIntents();
+            if (activeIntents.length === 0) {
+                return error("Onboarding cannot be completed until the user has at least one active intent. Ask what they are open to right now and create the first signal before finishing onboarding.");
+            }
             await userDb.updateUser({
                 onboarding: {
                     ...currentOnboarding,