@indexnetwork/protocol 4.3.2 → 4.3.3-rc.308.1

package/dist/mcp/mcp.server.js

@@ -7,12 +7,63 @@
 import { z } from 'zod';
 import { McpServer, fromJsonSchema } from '@modelcontextprotocol/server';
 import { resolveChatContext } from '../shared/agent/tool.helpers.js';
+import { deriveAllowedNetworkIds, scopeFromNetworkId } from '../shared/agent/tool.scope.js';
 import { QuestionSchema } from '../shared/schemas/question.schema.js';
 import { dispatchElicitations } from './elicitation.dispatcher.js';
 import { createToolRegistry } from '../shared/agent/tool.registry.js';
 import { ToolRuntimeError, invokeToolRuntime, toolRuntimeErrorToResult } from '../shared/agent/tool.runtime.js';
 import { protocolLogger } from '../shared/observability/protocol.logger.js';
 const logger = protocolLogger('McpServer');
+const mcpToolMetadataCache = new Map();
+/**
+ * Builds a cache key from registry-shaping dependency booleans.
+ * When a feature flag changes the tool set, the cache key changes so
+ * the cached metadata set is automatically invalidated.
+ */
+export function getMcpToolMetadataCacheKey(deps) {
+    return [
+        `contacts:${deps.contactsEnabled === true ? '1' : '0'}`,
+        `chat:${deps.chatSession ? '1' : '0'}`,
+        `agent:${deps.agentDatabase ? '1' : '0'}`,
+        `negotiation:${deps.agentDispatcher ? '1' : '0'}`,
+        `questioner:${deps.questionerEnqueue ? '1' : '0'}`,
+    ].join('|');
+}
+/**
+ * Clears the metadata cache. Used in tests to ensure fresh state between cases.
+ */
+export function clearMcpToolMetadataCacheForTests() {
+    mcpToolMetadataCache.clear();
+}
+/**
+ * Returns cached (or builds and caches) static MCP tool registration metadata.
+ * The first call per cache key runs the full registry creation + schema
+ * conversion; subsequent calls return the cached metadata array for the same
+ * registry-shaping dependency profile.
+ *
+ * Does NOT store tool handlers — those remain request-scoped because they
+ * capture per-request userDb/systemDb.
+ */
+export function getCachedMcpToolMetadata(deps) {
+    const cacheKey = getMcpToolMetadataCacheKey(deps);
+    const cached = mcpToolMetadataCache.get(cacheKey);
+    if (cached)
+        return cached;
+    const registry = createToolRegistry(deps);
+    const metadata = Array.from(registry.values()).map((toolDef) => {
+        const jsonSchema = zodToJsonSchema(toolDef.schema);
+        return {
+            name: toolDef.name,
+            description: toolDef.description,
+            schema: toolDef.schema,
+            jsonSchema,
+            inputSchema: fromJsonSchema(jsonSchema),
+        };
+    });
+    mcpToolMetadataCache.set(cacheKey, metadata);
+    logger.verbose(`MCP tool metadata cached with ${metadata.length} tools`, { cacheKey });
+    return metadata;
+}
 function isExpectedMcpAuthError(message) {
     return message.includes('Authentication required') ||
         message.includes('Invalid API key') ||
@@ -179,44 +230,38 @@ export function renderQuestionsEnvelope(questions) {
     return `Decision questions (structured): ${JSON.stringify({ questions })}`;
 }
 /**
- * Computes the index scope passed to the per-request scoped DB factory. When
- * `networkScopeId` is non-null, the agent is bound to a single network and
- * may only reach that network plus the user's personal index. Otherwise the
- * full set of the user's network memberships is returned.
+ * Computes the concrete network IDs passed to the per-request scoped DB factory.
+ * When a network scope is present, the agent reaches that network plus the
+ * user's personal index. Otherwise the full membership set is returned.
  */
-export const computeAgentIndexScope = (userNetworks, networkScopeId) => {
-    if (!networkScopeId) {
-        return userNetworks.map((m) => m.networkId);
-    }
-    return userNetworks
-        .filter((m) => m.networkId === networkScopeId || m.isPersonal === true)
-        .map((m) => m.networkId);
-};
+export const computeAgentAllowedNetworkIds = (userNetworks, scopeType, scopeId) => deriveAllowedNetworkIds({
+    memberships: userNetworks,
+    ...(scopeType && scopeId ? { scopeType, scopeId } : {}),
+});
 /**
  * Promotes a network-scoped agent's bound network into the resolved tool
  * context as the implicit chat scope. Every tool that branches on
  * `context.networkId` (read_networks, read_intents, read_user_contexts,
  * opportunity tools, etc.) then enforces scope automatically — without this
- * step the DB-level `indexScope` clamp guards cross-user data but tools that
- * shape their response off `context.networkId` (notably `read_networks`'
- * `publicNetworks` branch) would still leak the global view.
+ * step tools that shape their response off `context.networkId` (notably
+ * `read_networks`' `publicNetworks` branch) would still leak the global view.
  *
- * No-op when there is no scope, or when an explicit chat scope is already
- * set (a user-driven index-scoped chat must keep precedence over the agent
+ * No-op when there is no scope, or when an explicit scope is already set
+ * (a user-driven index-scoped chat must keep precedence over the agent
  * binding — which would be a strict subset anyway, since the API key cannot
  * reach beyond its bound network).
  */
 export const applyNetworkScopeToContext = (context, networkScopeId) => {
     if (!networkScopeId)
         return;
-    if (context.networkId)
+    if (context.scopeType && context.scopeId)
         return;
+    const scope = scopeFromNetworkId(networkScopeId);
+    context.scopeType = scope.scopeType;
+    context.scopeId = scope.scopeId;
     context.networkId = networkScopeId;
-    // Clamp indexScope to [boundNetwork, personalIndex] BEFORE the membership
-    // check below. If the bound network is not in userNetworks (defensive case),
-    // this still produces a safe scope (personal index only) rather than
-    // leaving the unclamped scope set by resolveChatContext.
-    context.indexScope = computeAgentIndexScope(context.userNetworks, networkScopeId);
+    // Deprecated compatibility reach until remaining tool call sites migrate.
+    context.indexScope = computeAgentAllowedNetworkIds(context.userNetworks, context.scopeType, context.scopeId);
     const bound = context.userNetworks.find((m) => m.networkId === networkScopeId);
     if (!bound)
         return;
@@ -420,15 +465,12 @@ export function createMcpServer(deps, authResolver, scopedDepsFactory) {
     // Tools exempt from the agent-registration gate — available before registration is complete.
     const AGENT_GATE_EXEMPT = new Set(['register_agent', 'read_docs', 'scrape_url']);
     const server = new McpServer({ name: 'index-network', version: '1.0.0' }, { instructions: MCP_INSTRUCTIONS });
-    const registry = createToolRegistry(deps);
-    for (const [toolName, toolDef] of registry) {
-        // Convert Zod 3 schema to JSON Schema, then wrap with fromJsonSchema
-        // for MCP SDK's StandardSchemaWithJSON compatibility
-        const jsonSchema = zodToJsonSchema(toolDef.schema);
-        const mcpSchema = fromJsonSchema(jsonSchema);
+    const toolMetadata = getCachedMcpToolMetadata(deps);
+    for (const toolDef of toolMetadata) {
+        const toolName = toolDef.name;
         server.registerTool(toolName, {
             description: toolDef.description,
-            inputSchema: mcpSchema,
+            inputSchema: toolDef.inputSchema,
         }, async (args, ctx) => {
             let reportDeps = deps;
             let reportUserId;
@@ -505,9 +547,9 @@ export function createMcpServer(deps, authResolver, scopedDepsFactory) {
                 }
                 // Network-scoped agents inherit their bound network as the implicit chat
                 // scope. Every tool that branches on `context.networkId` then enforces
-                // the same boundary the DB-level `indexScope` clamp enforces below —
-                // most importantly `read_networks`, which would otherwise return the
-                // global `publicNetworks` catalog for unscoped contexts.
+                // the same focused boundary — most importantly `read_networks`, which
+                // would otherwise return the global `publicNetworks` catalog for
+                // unscoped contexts.
                 applyNetworkScopeToContext(context, networkScopeId);
                 // Gate: API-key callers (background agents) must register before using most tools.
                 // OAuth/JWT session callers (human MCP clients such as Claude Code) are exempt —
@@ -548,13 +590,21 @@ export function createMcpServer(deps, authResolver, scopedDepsFactory) {
                 // personal index — they cannot reach other networks even when the user is
                 // a member of them. The personal-index reachability is preserved so the
                 // agent can still manage its owner's profile and contacts.
-                // context.indexScope is now the single source of truth: set by
-                // resolveChatContext (full set) and narrowed by applyNetworkScopeToContext.
-                const scopedDbs = scopedDepsFactory.create(userId, context.indexScope);
+                const allowedNetworkIds = deriveAllowedNetworkIds({
+                    memberships: context.userNetworks,
+                    ...(context.scopeType && context.scopeId
+                        ? { scopeType: context.scopeType, scopeId: context.scopeId }
+                        : {}),
+                });
+                // Deprecated compatibility reach until remaining tool call sites migrate.
+                context.indexScope = allowedNetworkIds;
+                const scopedDbs = scopedDepsFactory.create(userId, allowedNetworkIds);
                 // Override deps with per-request scoped databases
                 const requestDeps = { ...deps, ...scopedDbs };
                 reportDeps = requestDeps;
-                // Re-create registry with per-request deps for scoped database access
+                // Re-create registry with per-request deps for scoped database access.
+                // Do not use cached registration metadata handlers here: tool handlers
+                // close over userDb/systemDb when the registry is created.
                 const requestRegistry = createToolRegistry(requestDeps);
                 const requestTool = requestRegistry.get(toolName);
                 if (!requestTool) {
@@ -650,7 +700,7 @@ export function createMcpServer(deps, authResolver, scopedDepsFactory) {
             }
         });
     }
-    logger.verbose(`MCP server created with ${registry.size} tools`);
+    logger.verbose(`MCP server created with ${toolMetadata.length} tools`);
     return server;
 }
 //# sourceMappingURL=mcp.server.js.map

package/dist/mcp/mcp.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.server.js","sourceRoot":"/","sources":["mcp/mcp.server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAMzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAEhH,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAE5E,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;AAE3C,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QAChD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACnC,OAAO,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACnD,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,IAAI,GAAG,YAAY,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,kFAAkF;AAClF,iCAAiC;AACjC,kFAAkF;AAElF;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAiB;IACxC,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,KAAkB,CAAC;YACpC,UAAU,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3D,wEAAwE;QACxE,MAAM,MAAM,GAAI,MAAsE,CAAC,IAAI,EAAE,MAAM,CAAC;QACpG,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;qBAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;oBAAE,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;qBACpD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;oBAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;qBAClD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;oBAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;YAClE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAAI,MAAsF,CAAC,IAAI,EAAE,MAAM,CAAC;QACpH,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3D,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC;qBAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC;qBACvD,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/D,IAAI,MAAM,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAE,MAAgC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,OAAO,eAAe,CAAE,MAAmC,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QACnC,OAAO,eAAe,CAAE,MAAkC,CAAC,aAAa,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAG,MAA2C,CAAC,OAAO,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,eAAe,CAAE,MAAmC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,kFAAkF;AAClF,yBAAyB;AACzB,kFAAkF;AAElF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IACE,MAAM;YACN,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,IAAI;YACX,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAC3B,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;oBAChD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,KAAK,KAAK,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAClC,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAI,MAAoD,EAAE,IAAI,EAAE,SAAS,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7D,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB;YAAE,MAAM;IACrD,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAqB;IAC3D,OAAO,oCAAoC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,YAAkE,EAClE,cAAyC,EAC/B,EAAE;IACZ,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,YAAY;SAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,cAAc,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC;SACtE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,OAA4B,EAC5B,cAAyC,EACnC,EAAE;IACR,IAAI,CAAC,cAAc;QAAE,OAAO;IAC5B,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO;IAE9B,OAAO,CAAC,SAAS,GAAG,cAAc,CAAC;IACnC,0EAA0E;IAC1E,6EAA6E;IAC7E,qEAAqE;IACrE,yDAAyD;IACzD,OAAO,CAAC,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAElF,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,cAAc,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC;IACvC,OAAO,CAAC,WAAW,GAAG;QACpB,EAAE,EAAE,KAAK,CAAC,SAAS;QACnB,KAAK,EAAE,KAAK,CAAC,YAAY;QACzB,MAAM,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;KAClC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IAC9D,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5D,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;AAC5B,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,gBAAgB;IAChB,WAAW;IACX,YAAY;IACZ,mCAAmC;IACnC,8DAA8D;IAC9D,sBAAsB;IACtB,oBAAoB;IACpB,uBAAuB;IACvB,sBAAsB;IACtB,qBAAqB;IACrB,oBAAoB;IACpB,gGAAgG;IAChG,sBAAsB;IACtB,iBAAiB;IACjB,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,eAAe;IACf,2BAA2B;IAC3B,eAAe;CAChB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAwB;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO;QAC1B,CAAC,CAAC,qDAAqD,GAAG,CAAC,QAAQ,aAAa;QAChF,CAAC,CAAC,8DAA8D,CAAC;IAEnE,MAAM,aAAa,GAAG,GAAG,CAAC,SAAS;QACjC,CAAC,CAAC,qCAAqC,GAAG,CAAC,SAAS,IAAI,iBAAiB,KAAK;QAC9E,CAAC,CAAC,iHAAiH,CAAC;IAEtH,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE9D,OAAO,CACL,6GAA6G;QAC7G,uEAAuE;QACvE,GAAG,WAAW,OAAO;QACrB,oBAAoB;QACpB,GAAG,QAAQ,IAAI;QACf,0IAA0I;QAC1I,0JAA0J;QAC1J,wPAAwP;QACxP,wHAAwH;QACxH,GAAG,aAAa,IAAI;QACpB,qIAAqI;QACrI,mIAAmI,CACpI,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAAC,QAAgB,EAAE,GAAkB;IACjE,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAE7E,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,QAAQ,IAAI,CAAC,CAAC;QACd,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE;YACpB,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,UAAU,CAAC;YAC9E,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC3I,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,gBAAgB,CAAC;YACpF,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,kBAAkB,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACjJ,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB;gBAAE,OAAO,GAAG,QAAQ,2BAA2B,CAAC;YAC5F,OAAO,GAAG,QAAQ,YAAY,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,YAAY,GAAqD;YACrE,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE;SACpD,CAAC;QACF,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjD,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;gBACvD,QAAQ;gBACR,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsD/B,CAAC,IAAI,EAAE,CAAC;AAET;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,MAAM,EAAE,WAAW,EAAE,KAAK,QAAQ,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,IAAI,uBAAuB,GAAG,KAAK,CAAC;AACpC,MAAM,UAAU,kBAAkB,CAAC,GAAkB;IACnD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC7B,uBAAuB,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAc,EACd,YAA6B,EAC7B,iBAAoC;IAEpC,6FAA6F;IAC7F,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAEjF,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,EAC3C,EAAE,YAAY,EAAE,gBAAgB,EAAE,CACnC,CAAC;IAEF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAE1C,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC3C,qEAAqE;QACrE,qDAAqD;QACrD,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAmB,CAAC;QACrE,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAE7C,MAAM,CAAC,YAAY,CACjB,QAAQ,EACR;YACE,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,SAAS;SACvB,EACD,KAAK,EAAE,IAAa,EAAE,GAAkB,EAAE,EAAE;YAC1C,IAAI,UAAU,GAAG,IAAI,CAAC;YACtB,IAAI,YAAgC,CAAC;YACrC,IAAI,aAA8C,CAAC;YAEnD,IAAI,CAAC;gBACH,gEAAgE;gBAChE,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC;gBAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC,EAAE,CAAC;wBACjH,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,iEAAiE;gBACjE,MAAM,YAAY,GAAiB;oBACjC,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC;oBACxC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS;oBACrD,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;oBACzE,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,SAAS;oBAC3E,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,SAAS;iBAChF,CAAC;gBAEF,yDAAyD;gBACzD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;gBAC3H,YAAY,GAAG,MAAM,CAAC;gBAEtB,qEAAqE;gBACrE,+DAA+D;gBAC/D,sEAAsE;gBACtE,uEAAuE;gBACvE,wBAAwB;gBACxB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;oBACxB,oEAAoE;oBACpE,iEAAiE;oBACjE,0CAA0C;oBAC1C,IAAI,QAAQ,GAAwE,IAAI,CAAC;oBACzF,IAAI,CAAC;wBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC;4BACnC,MAAM;4BACN,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC/B,QAAQ;yBACT,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,IAAI,CAAC,+BAA+B,QAAQ,kBAAkB,EAAE;4BACrE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC9D,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;wBAClC,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC;wBACnD,OAAO;4BACL,OAAO,EAAE,CAAC;oCACR,IAAI,EAAE,MAAe;oCACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wCACnB,KAAK,EAAE,qBAAqB;wCAC5B,OAAO,EACL,YAAY,QAAQ,kCAAkC,aAAa,oBAAoB;4CACvF,CAAC,QAAQ,KAAK,wBAAwB;gDACpC,CAAC,CAAC,6GAA6G;gDAC/G,CAAC,CAAC,EAAE,CAAC;wCACT,aAAa;qCACd,CAAC;iCACH,CAAC;4BACF,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,gFAAgF;gBAChF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;gBACrH,aAAa,GAAG,OAAO,CAAC;gBACxB,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;gBACrB,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;gBAC5B,CAAC;gBACD,IAAI,aAAa,EAAE,CAAC;oBAClB,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;gBACxC,CAAC;gBAED,yEAAyE;gBACzE,uEAAuE;gBACvE,qEAAqE;gBACrE,qEAAqE;gBACrE,yDAAyD;gBACzD,0BAA0B,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;gBAEpD,mFAAmF;gBACnF,iFAAiF;gBACjF,yFAAyF;gBACzF,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3E,OAAO;wBACL,OAAO,EAAE,CAAC;gCACR,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oCACnB,KAAK,EAAE,sBAAsB;oCAC7B,OAAO,EACL,0DAA0D;wCAC1D,qEAAqE;wCACrE,yFAAyF;iCAC5F,CAAC;6BACH,CAAC;wBACF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,mEAAmE;gBACnE,wEAAwE;gBACxE,yEAAyE;gBACzE,gEAAgE;gBAChE,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9D,MAAM,eAAe,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;oBAC3D,OAAO;wBACL,OAAO,EAAE,CAAC;gCACR,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oCACnB,KAAK,EAAE,qBAAqB;oCAC5B,OAAO,EAAE,eAAe;iCACzB,CAAC;6BACH,CAAC;wBACF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,2DAA2D;gBAC3D,2EAA2E;gBAC3E,0EAA0E;gBAC1E,wEAAwE;gBACxE,2DAA2D;gBAC3D,+DAA+D;gBAC/D,4EAA4E;gBAC5E,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;gBAEvE,kDAAkD;gBAClD,MAAM,WAAW,GAAa,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;gBACxD,UAAU,GAAG,WAAW,CAAC;gBAEzB,sEAAsE;gBACtE,MAAM,eAAe,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;gBACxD,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAElD,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,QAAQ,aAAa,EAAE,CAAC,EAAE,CAAC;wBACrG,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,iDAAiD;gBACjD,MAAM,WAAW,GAAI,OAAO,CAAC,MAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAClE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnG,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;wBACjH,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC;gBAEvC,wEAAwE;gBACxE,2EAA2E;gBAC3E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;oBACrC,QAAQ;oBACR,IAAI,EAAE,WAAW;oBACjB,OAAO;oBACP,KAAK,EAAE,aAAa;oBACpB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;oBACzB,YAAY,EAAE,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC;iBACnD,CAAC,CAAC;gBAEH,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAEhF,+EAA+E;gBAC/E,IAAI,QAAQ,KAAK,wBAAwB,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC1D,MAAM,SAAS,GAAG,wBAAwB,CAAC,aAAa,CAAC,CAAC;oBAC1D,IAAI,SAAS,EAAE,CAAC;wBACd,MAAM,aAAa,GAAG;4BACpB,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC;yBACzC,CAAC;wBAEF,MAAM,mBAAmB,GACvB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,EAAE,WAAW,CAAC;wBAEvD,2DAA2D;wBAC3D,2DAA2D;wBAC3D,+CAA+C;wBAC/C,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC;wBAE5C,IAAI,mBAAmB,IAAI,WAAW,EAAE,CAAC;4BACvC,gEAAgE;4BAChE,iEAAiE;4BACjE,0CAA0C;4BAC1C,MAAM,oBAAoB,CAAC;gCACzB,MAAM;gCACN,SAAS;gCACT,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;gCAC5C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;6BAC1C,CAAC,CAAC;wBACL,CAAC;wBAED,OAAO;4BACL,OAAO,EAAE;gCACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,aAAa,EAAE;gCAC9C,aAAa;6BACd;4BACD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC1C,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;oBACzD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1C,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,MAAM,CAAC,KAAK,CAAC,aAAa,QAAQ,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBAClE,IAAI,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClC,UAAU,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE;wBAChC,SAAS,EAAE,KAAK;wBAChB,SAAS,EAAE,UAAU;wBACrB,QAAQ;wBACR,MAAM,EAAE,YAAY;wBACpB,IAAI,EAAE;4BACJ,SAAS,EAAE,KAAK;4BAChB,QAAQ;yBACT;wBACD,OAAO,EAAE;4BACP,OAAO,EAAE,aAAa,EAAE,OAAO;4BAC/B,SAAS,EAAE,aAAa,EAAE,SAAS;4BACnC,UAAU,EAAE,aAAa,EAAE,UAAU;yBACtC;qBACF,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;gBACpD,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,aAAa,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;oBAC/F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,2BAA2B,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * MCP Server Factory — creates an McpServer instance with all protocol tools\n * registered from the existing tool registry. Each tool invocation resolves\n * auth from the HTTP request, builds a ResolvedToolContext, and delegates\n * to the raw tool handler.\n */\n\nimport { z } from 'zod';\nimport { McpServer, fromJsonSchema } from '@modelcontextprotocol/server';\nimport type { ServerContext, JsonSchemaType } from '@modelcontextprotocol/server';\n\nimport type { McpAuthResolver } from '../shared/interfaces/auth.interface.js';\nimport type { McpAuthInput } from '../shared/schemas/mcp-auth.schema.js';\nimport type { ToolDeps, ResolvedToolContext } from '../shared/agent/tool.helpers.js';\nimport { resolveChatContext } from '../shared/agent/tool.helpers.js';\nimport type { Question } from '../shared/schemas/question.schema.js';\nimport { QuestionSchema } from '../shared/schemas/question.schema.js';\nimport { dispatchElicitations } from './elicitation.dispatcher.js';\nimport { createToolRegistry } from '../shared/agent/tool.registry.js';\nimport { ToolRuntimeError, invokeToolRuntime, toolRuntimeErrorToResult } from '../shared/agent/tool.runtime.js';\nimport type { TraceEmitter } from '../shared/observability/request-context.js';\nimport { protocolLogger } from '../shared/observability/protocol.logger.js';\n\nconst logger = protocolLogger('McpServer');\n\nfunction isExpectedMcpAuthError(message: string): boolean {\n  return message.includes('Authentication required') ||\n    message.includes('Invalid API key') ||\n    message.includes('Invalid or expired access token') ||\n    message.includes('JWT payload missing user ID');\n}\n\n/**\n * Runtime/auth failures are converted into structured MCP `isError` tool\n * results for the caller. Reporting them as application exceptions produces\n * Sentry noise for expected client failures and policy-enforced timeouts.\n */\nexport function shouldReportMcpToolError(err: unknown): boolean {\n  if (err instanceof ToolRuntimeError) return false;\n  const message = err instanceof Error ? err.message : String(err);\n  return !isExpectedMcpAuthError(message);\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// ZOD 3 → JSON SCHEMA CONVERSION\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Minimal Zod-to-JSON-Schema conversion for MCP tool registration.\n * Converts Zod 3.x schemas to plain JSON Schema objects that can be\n * wrapped with `fromJsonSchema()` for MCP SDK compatibility.\n */\nfunction zodToJsonSchema(schema: z.ZodType): Record<string, unknown> {\n  if (schema instanceof z.ZodObject) {\n    const shape = schema.shape;\n    const properties: Record<string, unknown> = {};\n    const required: string[] = [];\n    for (const [key, value] of Object.entries(shape)) {\n      const zodValue = value as z.ZodType;\n      properties[key] = zodToJsonSchema(zodValue);\n      if (!(zodValue instanceof z.ZodOptional) && !(zodValue instanceof z.ZodDefault)) {\n        required.push(key);\n      }\n    }\n    return { type: 'object', properties, ...(required.length ? { required } : {}) };\n  }\n  if (schema instanceof z.ZodString) {\n    const result: Record<string, unknown> = { type: 'string' };\n    // Detect .url(), .email(), .uuid() etc. via Zod's internal checks array\n    const checks = (schema as z.ZodString & { _def: { checks: Array<{ kind: string }> } })._def?.checks;\n    if (checks) {\n      for (const check of checks) {\n        if (check.kind === 'url') result.format = 'uri';\n        else if (check.kind === 'email') result.format = 'email';\n        else if (check.kind === 'uuid') result.format = 'uuid';\n        else if (check.kind === 'datetime') result.format = 'date-time';\n      }\n    }\n    return result;\n  }\n  if (schema instanceof z.ZodNumber) {\n    const checks = (schema as z.ZodNumber & { _def: { checks: Array<{ kind: string; value?: number }> } })._def?.checks;\n    const result: Record<string, unknown> = { type: 'number' };\n    if (checks) {\n      for (const check of checks) {\n        if (check.kind === 'int') result.type = 'integer';\n        else if (check.kind === 'min') result.minimum = check.value;\n        else if (check.kind === 'max') result.maximum = check.value;\n      }\n    }\n    return result;\n  }\n  if (schema instanceof z.ZodBoolean) return { type: 'boolean' };\n  if (schema instanceof z.ZodArray) {\n    return { type: 'array', items: zodToJsonSchema((schema as z.ZodArray<z.ZodType>).element) };\n  }\n  if (schema instanceof z.ZodOptional) {\n    return zodToJsonSchema((schema as z.ZodOptional<z.ZodType>).unwrap());\n  }\n  if (schema instanceof z.ZodDefault) {\n    return zodToJsonSchema((schema as z.ZodDefault<z.ZodType>).removeDefault());\n  }\n  if (schema instanceof z.ZodEnum) {\n    return { type: 'string', enum: (schema as z.ZodEnum<[string, ...string[]]>).options };\n  }\n  if (schema instanceof z.ZodNullable) {\n    const inner = zodToJsonSchema((schema as z.ZodNullable<z.ZodType>).unwrap());\n    return { ...inner, nullable: true };\n  }\n  if (schema instanceof z.ZodRecord) {\n    return { type: 'object', additionalProperties: true };\n  }\n  return { type: 'object' };\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// RESULT POST-PROCESSING\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Strips internal `_`-prefixed keys from `data` and promotes `isError`\n * from the inner `success: false` signal to the MCP envelope level.\n * Fail-open: if JSON parsing throws, returns the original text with isError: false.\n */\nexport function sanitizeMcpResult(text: string): { text: string; isError: boolean } {\n  try {\n    const parsed = JSON.parse(text);\n    if (\n      parsed &&\n      typeof parsed === 'object' &&\n      parsed.data &&\n      typeof parsed.data === 'object' &&\n      !Array.isArray(parsed.data)\n    ) {\n      for (const key of Object.keys(parsed.data)) {\n        if (key.startsWith('_') || key === 'debugSteps') {\n          delete parsed.data[key];\n        }\n      }\n    }\n    const isError = parsed?.success === false;\n    return { text: JSON.stringify(parsed), isError };\n  } catch {\n    return { text, isError: false };\n  }\n}\n\n/** Spec cap on the number of decision questions surfaced per turn. */\nconst MAX_DECISION_QUESTIONS = 3;\n\n/**\n * Extracts decision questions from a parsed tool-result text, if present.\n * Validates each entry against `QuestionSchema` and drops malformed items;\n * caps the array at `MAX_DECISION_QUESTIONS` (defense-in-depth — Slice 2's\n * generator already caps at 3, but we don't trust the cast here).\n *\n * Returns null when the text isn't JSON, has no `data.questions`, or\n * contains zero valid questions after validation.\n */\nexport function extractDecisionQuestions(text: string): Question[] | null {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text);\n  } catch {\n    return null;\n  }\n\n  const rawQs = (parsed as { data?: { questions?: unknown } } | null)?.data?.questions;\n  if (!Array.isArray(rawQs) || rawQs.length === 0) return null;\n\n  const valid: Question[] = [];\n  for (const raw of rawQs) {\n    const result = QuestionSchema.safeParse(raw);\n    if (result.success) valid.push(result.data);\n    if (valid.length === MAX_DECISION_QUESTIONS) break;\n  }\n  return valid.length > 0 ? valid : null;\n}\n\n/**\n * Renders the JSON-envelope text block appended to the tool result content\n * when decision questions are present. The leading sentinel string lets the\n * LLM client recognize and surface the questions in prose for clients\n * without elicitation support.\n */\nexport function renderQuestionsEnvelope(questions: Question[]): string {\n  return `Decision questions (structured): ${JSON.stringify({ questions })}`;\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// MCP SERVER FACTORY\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Factory for creating per-request scoped database instances.\n * Injected from the controller/handler layer to keep the protocol layer\n * free of direct adapter imports.\n */\nexport interface ScopedDepsFactory {\n  /** Creates scoped userDb and systemDb for the given user and index scope. */\n  create(userId: string, indexScope: string[]): Pick<ToolDeps, 'userDb' | 'systemDb'>;\n}\n\n/**\n * Computes the index scope passed to the per-request scoped DB factory. When\n * `networkScopeId` is non-null, the agent is bound to a single network and\n * may only reach that network plus the user's personal index. Otherwise the\n * full set of the user's network memberships is returned.\n */\nexport const computeAgentIndexScope = (\n  userNetworks: { networkId: string; isPersonal?: boolean | null }[],\n  networkScopeId: string | null | undefined,\n): string[] => {\n  if (!networkScopeId) {\n    return userNetworks.map((m) => m.networkId);\n  }\n  return userNetworks\n    .filter((m) => m.networkId === networkScopeId || m.isPersonal === true)\n    .map((m) => m.networkId);\n};\n\n/**\n * Promotes a network-scoped agent's bound network into the resolved tool\n * context as the implicit chat scope. Every tool that branches on\n * `context.networkId` (read_networks, read_intents, read_user_contexts,\n * opportunity tools, etc.) then enforces scope automatically — without this\n * step the DB-level `indexScope` clamp guards cross-user data but tools that\n * shape their response off `context.networkId` (notably `read_networks`'\n * `publicNetworks` branch) would still leak the global view.\n *\n * No-op when there is no scope, or when an explicit chat scope is already\n * set (a user-driven index-scoped chat must keep precedence over the agent\n * binding — which would be a strict subset anyway, since the API key cannot\n * reach beyond its bound network).\n */\nexport const applyNetworkScopeToContext = (\n  context: ResolvedToolContext,\n  networkScopeId: string | null | undefined,\n): void => {\n  if (!networkScopeId) return;\n  if (context.networkId) return;\n\n  context.networkId = networkScopeId;\n  // Clamp indexScope to [boundNetwork, personalIndex] BEFORE the membership\n  // check below. If the bound network is not in userNetworks (defensive case),\n  // this still produces a safe scope (personal index only) rather than\n  // leaving the unclamped scope set by resolveChatContext.\n  context.indexScope = computeAgentIndexScope(context.userNetworks, networkScopeId);\n\n  const bound = context.userNetworks.find((m) => m.networkId === networkScopeId);\n  if (!bound) return;\n\n  context.indexName = bound.networkTitle;\n  context.scopedIndex = {\n    id: bound.networkId,\n    title: bound.networkTitle,\n    prompt: bound.indexPrompt ?? null,\n  };\n  const isOwner = bound.permissions?.includes('owner') ?? false;\n  context.scopedMembershipRole = isOwner ? 'owner' : 'member';\n  context.isOwner = isOwner;\n};\n\n/**\n * Tools allowed during onboarding — everything else is gated until\n * complete_onboarding is called.  Includes the agent-gate-exempt tools\n * (register_agent, read_docs, scrape_url) because they are informational /\n * registration primitives needed at every lifecycle stage.\n */\nexport const ONBOARDING_ALLOWED: ReadonlySet<string> = new Set([\n  'register_agent',\n  'read_docs',\n  'scrape_url',\n  'record_onboarding_privacy_consent',\n  // Canonical *_user_context / *_enrichment_run names (IND-371)\n  'preview_user_context',\n  'get_enrichment_run',\n  'cancel_enrichment_run',\n  'confirm_user_context',\n  'create_user_context',\n  'read_user_contexts',\n  // Deprecated aliases retained so mid-migration clients can still onboard (IND-373 removes them)\n  'preview_user_profile',\n  'get_profile_run',\n  'cancel_profile_run',\n  'confirm_user_profile',\n  'create_user_profile',\n  'read_user_profiles',\n  'complete_onboarding',\n  'import_gmail_contacts',\n  'read_networks',\n  'create_network_membership',\n  'create_intent',\n]);\n\n/**\n * Builds the onboarding gate message for MCP callers.  Condensed from the\n * chat orchestrator's 8-step flow (chat.prompt.ts buildOnboarding) into a\n * 7-step tool-error guide suited for non-interactive MCP clients.\n */\nexport function buildMcpOnboardingMessage(ctx: ResolvedToolContext): string {\n  const nameStep = ctx.hasName\n    ? `1. Greet the user and confirm their name (\"You're ${ctx.userName}, right?\").`\n    : `1. Ask the user for their name and a short self-description.`;\n\n  const communityStep = ctx.networkId\n    ? `5. (Skipped — user is already in \"${ctx.indexName ?? 'their community'}\".)`\n    : `5. Call read_networks() and let the user pick communities to join via create_network_membership(networkId=...).`;\n\n  const allowedList = Array.from(ONBOARDING_ALLOWED).join(', ');\n\n  return (\n    `This user has not completed onboarding. You must guide them through setup before they can use other tools. ` +\n    `Only the following tools are available until onboarding is complete: ` +\n    `${allowedList}.\\n\\n` +\n    `Onboarding flow:\\n` +\n    `${nameStep}\\n` +\n    `2. Ask whether the user allows use of event/EdgeOS profile data, then call record_onboarding_privacy_consent(edgeosImportGranted=...).\\n` +\n    `3. Ask separately whether the user allows public internet/profile lookup, then call record_onboarding_privacy_consent(publicProfileLookupGranted=...).\\n` +\n    `4. Call preview_user_context(...) using only allowed inputs; do not run public lookup unless consent was granted. If it returns profileRunId, poll get_enrichment_run(profileRunId=...) until status is succeeded, then use its result as the draft.\\n` +\n    `5. Present the profile draft and ask \"Does that look right?\" On approval/correction, call confirm_user_context(...).\\n` +\n    `${communityStep}\\n` +\n    `6. Ask what the user is looking for and call create_intent(description=\"...\", autoApprove=true) so the first signal is persisted.\\n` +\n    `7. Call complete_onboarding() to finish setup. Gmail/contact import and discovery are optional after onboarding, never mandatory.`\n  );\n}\n\n/**\n * Creates an MCP server with all protocol tools registered.\n * Tools resolve auth per-request via the HTTP request available in ServerContext.\n *\n * @param deps - Shared tool dependencies (graphs, database, embedder, etc.)\n * @param authResolver - Resolves authenticated identity from the HTTP request\n * @param scopedDepsFactory - Factory for creating per-request scoped databases\n * @returns A configured McpServer ready to be connected to a transport\n */\nfunction createMcpTraceEmitter(toolName: string, ctx: ServerContext): TraceEmitter | undefined {\n  const token = ctx.mcpReq._meta?.progressToken;\n  if (typeof token !== 'string' && typeof token !== 'number') return undefined;\n\n  let progress = 0;\n  return (event) => {\n    progress += 1;\n    const message = (() => {\n      if (event.type === 'graph_start') return `${toolName}: ${event.name} started`;\n      if (event.type === 'graph_end') return `${toolName}: ${event.name} finished${event.durationMs != null ? ` in ${event.durationMs}ms` : ''}`;\n      if (event.type === 'agent_start') return `${toolName}: ${event.name} agent started`;\n      if (event.type === 'agent_end') return `${toolName}: ${event.name} agent finished${event.durationMs != null ? ` in ${event.durationMs}ms` : ''}`;\n      if (event.type === 'opportunity_draft_ready') return `${toolName}: opportunity draft ready`;\n      return `${toolName}: progress`;\n    })();\n\n    const notification: Parameters<ServerContext['mcpReq']['notify']>[0] = {\n      method: 'notifications/progress',\n      params: { progressToken: token, progress, message },\n    };\n    void ctx.mcpReq.notify(notification).catch((err) => {\n      logger.debug('Failed to send MCP progress notification', {\n        toolName,\n        error: err instanceof Error ? err.message : String(err),\n      });\n    });\n  };\n}\n\nexport const MCP_INSTRUCTIONS = `\nIndex Network is a private, intent-driven discovery protocol. You help users find the right people and help the right people find them, via Index Network MCP tools.\n\n# Voice\nCalm, direct, analytical, concise. Preferred vocabulary: opportunity, overlap, signal, pattern, emerging, relevant, adjacency.\n\n# Banned vocabulary\nNEVER use \"search\" in any form. Use \"looking up\" for indexed data, \"find\" / \"look for\" for discovery, \"check\" for verification, \"discover\" for exploration. Banned: leverage, unlock, optimize, scale, disrupt, revolutionary, AI-powered, maximize value, act fast, networking, match.\n\n# Entity model\n- User — has one Profile, many Memberships, many Intents.\n- Profile — identity (bio, skills, interests, location).\n- Index — community with title, prompt (purpose), join policy. Has Members.\n- Membership — User↔Index junction. \\`isPersonal: true\\` marks the user's personal index (contacts).\n- Intent — what a user is looking for (signal). Description, summary, embedding.\n- IntentIndex — Intent↔Index junction (auto-assigned).\n- Opportunity — discovered connection between users. Roles, status, reasoning.\n\n# Output rules\n- NEVER expose internal IDs, UUIDs, field names, or tool names — EXCEPT when an ID is actionable for the user (e.g. a \\`conversationId\\` they need to open a chat). Surface such IDs verbatim when the tool returns them.\n- NEVER use internal vocabulary — say \"signal\" not \"intent\", \"community\" not \"index\".\n- NEVER dump raw JSON. Synthesize in natural language.\n- Surface top 1–3 relevant points unless asked for the full list.\n- Prefer first names; use full names only to disambiguate.\n- Translate statuses: draft/latent → \"draft\", pending → \"sent\", accepted → \"connected\".\n- NEVER fabricate data. If you don't have it, call the appropriate tool.\n\n# Tool guidance\nEach tool's description contains its own usage rules (when to call, when NOT to call, required prerequisites, post-call follow-ups). Read the description of every tool you call — that is where the per-tool workflow patterns live.\n\n# Authentication\nPass your API key in the \\`x-api-key\\` request header (not \\`Authorization: Bearer\\`).\n\n# Opportunity lifecycle\nOpportunities move through: draft → pending → accepted (or rejected).\n\n- **draft** (you created it, not yet sent): offer to send it; confirm before calling update_opportunity with pending.\n- **pending, you sent it**: waiting for the other side — nothing to do.\n- **pending, you received it**: the other person is waiting for your response. Surface it to the user and ask if they want to start a chat. Only call update_opportunity with accepted after explicit user confirmation.\n- **accepted**: both sides are connected — a direct conversation exists. Surface the conversationId to the user if available.\n\nNever accept a received opportunity without explicit user approval in the current conversation.\n\n# Decision questions after discovery\n\nAfter \\`discover_opportunities\\`, the tool result may include a second text block starting with \\`Decision questions (structured): ...\\`. This means the discovery engine ran negotiations but needs human input to sharpen the next turn — e.g. clarify timing, role, stage, or location.\n\n**When this block is present:**\n1. Parse the \\`questions\\` array from the JSON after the sentinel.\n2. Each question has \\`title\\` (decision domain, ≤12 chars), \\`prompt\\` (ends in \\`?\\`), \\`options\\` (2–4 items, each with \\`label\\` and \\`description\\`), and \\`multiSelect\\`. The safest option is labeled \\`... (Recommended)\\`.\n3. Present each question in natural language: ask the \\`prompt\\`, list options as \\`**{label}** — {description}\\`. Never expose the JSON or technical field names.\n4. Wait for the user's answer, then fold it into the next \\`discover_opportunities(searchQuery=...)\\` call.\n\n**Elicitation-capable clients** (those that declared \\`elicitation\\` support in \\`initialize\\`): the server dispatches \\`elicitation/create\\` requests directly — answers are written back to the chat session automatically. You will not see the envelope as a follow-up task in that case.\n`.trim();\n\n/**\n * Extracts a Bearer token from an HTTP Authorization header.\n */\nexport function extractBearerToken(req: Request): string | undefined {\n  const authHeader = req.headers.get('Authorization');\n  if (!authHeader) return undefined;\n  const [scheme, token] = authHeader.trim().split(/\\s+/, 2);\n  if (scheme?.toLowerCase() === 'bearer' && token) return token;\n  return undefined;\n}\n\n/**\n * Normalizes the x-index-surface header to a typed surface value.\n * Unknown or absent values collapse to 'web'.\n */\nlet hasWarnedInvalidSurface = false;\nexport function parseClientSurface(raw: string | null): 'telegram' | 'web' {\n  if (raw === null || raw === '') return 'web';\n  const trimmed = raw.trim().toLowerCase();\n  if (trimmed === '') return 'web';\n  if (trimmed === 'telegram') return 'telegram';\n  if (trimmed === 'web') return 'web';\n  if (!hasWarnedInvalidSurface) {\n    hasWarnedInvalidSurface = true;\n    logger.warn('Unknown x-index-surface value (collapsing to web; warning once per process)');\n  }\n  return 'web';\n}\n\nexport function createMcpServer(\n  deps: ToolDeps,\n  authResolver: McpAuthResolver,\n  scopedDepsFactory: ScopedDepsFactory,\n): McpServer {\n  // Tools exempt from the agent-registration gate — available before registration is complete.\n  const AGENT_GATE_EXEMPT = new Set(['register_agent', 'read_docs', 'scrape_url']);\n\n  const server = new McpServer(\n    { name: 'index-network', version: '1.0.0' },\n    { instructions: MCP_INSTRUCTIONS },\n  );\n\n  const registry = createToolRegistry(deps);\n\n  for (const [toolName, toolDef] of registry) {\n    // Convert Zod 3 schema to JSON Schema, then wrap with fromJsonSchema\n    // for MCP SDK's StandardSchemaWithJSON compatibility\n    const jsonSchema = zodToJsonSchema(toolDef.schema) as JsonSchemaType;\n    const mcpSchema = fromJsonSchema(jsonSchema);\n\n    server.registerTool(\n      toolName,\n      {\n        description: toolDef.description,\n        inputSchema: mcpSchema,\n      },\n      async (args: unknown, ctx: ServerContext) => {\n        let reportDeps = deps;\n        let reportUserId: string | undefined;\n        let reportContext: ResolvedToolContext | undefined;\n\n        try {\n          // Extract the original HTTP request from the MCP server context\n          const httpReq = ctx.http?.req;\n          if (!httpReq) {\n            return {\n              content: [{ type: 'text' as const, text: JSON.stringify({ error: 'No HTTP request available in MCP context' }) }],\n              isError: true,\n            };\n          }\n\n          // Extract transport-neutral auth input DTO from the HTTP request\n          const mcpAuthInput: McpAuthInput = {\n            bearerToken: extractBearerToken(httpReq),\n            apiKey: httpReq.headers.get('x-api-key') ?? undefined,\n            clientSurface: parseClientSurface(httpReq.headers.get('x-index-surface')),\n            telegramHandle: httpReq.headers.get('x-index-telegram-handle') ?? undefined,\n            telegramUsername: httpReq.headers.get('x-index-telegram-username') ?? undefined,\n          };\n\n          // Resolve authenticated identity from the auth input DTO\n          const { userId, agentId, isSessionAuth, networkScopeId, clientSurface } = await authResolver.resolveIdentity(mcpAuthInput);\n          reportUserId = userId;\n\n          // Per-principal MCP throttle. Runs BEFORE any DB work so a throttled\n          // call short-circuits cheaply. The /mcp transport bypasses the\n          // controller-level RateLimit guard, so this is the only volume cap on\n          // tool calls — it stops an over-eager agent from cascading itself into\n          // provider rate limits.\n          if (deps.mcpRateLimiter) {\n            // Throttling is best-effort: never let a limiter failure (or a host\n            // implementation that throws instead of failing open) break tool\n            // dispatch. Treat any error as \"allowed\".\n            let decision: Awaited<ReturnType<NonNullable<typeof deps.mcpRateLimiter>>> | null = null;\n            try {\n              decision = await deps.mcpRateLimiter({\n                userId,\n                ...(agentId ? { agentId } : {}),\n                toolName,\n              });\n            } catch (rlErr) {\n              logger.warn(`MCP rate limiter threw for \"${toolName}\" — failing open`, {\n                error: rlErr instanceof Error ? rlErr.message : String(rlErr),\n              });\n            }\n            if (decision && !decision.allowed) {\n              const retryAfterSec = decision.retryAfterSec ?? 60;\n              return {\n                content: [{\n                  type: 'text' as const,\n                  text: JSON.stringify({\n                    error: 'Rate limit exceeded',\n                    message:\n                      `Too many ${toolName} calls in a short period. Wait ${retryAfterSec}s before retrying.` +\n                      (toolName === 'discover_opportunities'\n                        ? ` If a discovery run is in progress, poll get_discovery_run instead of calling discover_opportunities again.`\n                        : ''),\n                    retryAfterSec,\n                  }),\n                }],\n                isError: true,\n              };\n            }\n          }\n\n          // Resolve chat context for the user (mark as MCP — no interactive UI available)\n          const context = await resolveChatContext({ database: deps.database, userId, contactsEnabled: deps.contactsEnabled });\n          reportContext = context;\n          context.isMcp = true;\n          if (agentId) {\n            context.agentId = agentId;\n          }\n          if (clientSurface) {\n            context.clientSurface = clientSurface;\n          }\n\n          // Network-scoped agents inherit their bound network as the implicit chat\n          // scope. Every tool that branches on `context.networkId` then enforces\n          // the same boundary the DB-level `indexScope` clamp enforces below —\n          // most importantly `read_networks`, which would otherwise return the\n          // global `publicNetworks` catalog for unscoped contexts.\n          applyNetworkScopeToContext(context, networkScopeId);\n\n          // Gate: API-key callers (background agents) must register before using most tools.\n          // OAuth/JWT session callers (human MCP clients such as Claude Code) are exempt —\n          // their identity is already established via the auth flow and they have no agent entity.\n          if (!isSessionAuth && !context.agentId && !AGENT_GATE_EXEMPT.has(toolName)) {\n            return {\n              content: [{\n                type: 'text' as const,\n                text: JSON.stringify({\n                  error: 'Agent not registered',\n                  message:\n                    'You must register as an agent before using Index tools. ' +\n                    'Call register_agent with your agent name to establish an identity. ' +\n                    'The tools register_agent, read_docs, and scrape_url are available without registration.',\n                }),\n              }],\n              isError: true,\n            };\n          }\n\n          // Gate: non-onboarded users can only use onboarding-related tools.\n          // Mirrors the chat orchestrator's ONBOARDING MODE — the MCP client must\n          // walk the user through profile creation, Gmail connect, intent capture,\n          // and complete_onboarding() before full tool access is granted.\n          if (context.isOnboarding && !ONBOARDING_ALLOWED.has(toolName)) {\n            const onboardingSteps = buildMcpOnboardingMessage(context);\n            return {\n              content: [{\n                type: 'text' as const,\n                text: JSON.stringify({\n                  error: 'Onboarding required',\n                  message: onboardingSteps,\n                }),\n              }],\n              isError: true,\n            };\n          }\n\n          // Build per-request scoped databases via injected factory.\n          // Network-scoped agents are clamped to their bound network plus the user's\n          // personal index — they cannot reach other networks even when the user is\n          // a member of them. The personal-index reachability is preserved so the\n          // agent can still manage its owner's profile and contacts.\n          // context.indexScope is now the single source of truth: set by\n          // resolveChatContext (full set) and narrowed by applyNetworkScopeToContext.\n          const scopedDbs = scopedDepsFactory.create(userId, context.indexScope);\n\n          // Override deps with per-request scoped databases\n          const requestDeps: ToolDeps = { ...deps, ...scopedDbs };\n          reportDeps = requestDeps;\n\n          // Re-create registry with per-request deps for scoped database access\n          const requestRegistry = createToolRegistry(requestDeps);\n          const requestTool = requestRegistry.get(toolName);\n\n          if (!requestTool) {\n            return {\n              content: [{ type: 'text' as const, text: JSON.stringify({ error: `Tool \"${toolName}\" not found` }) }],\n              isError: true,\n            };\n          }\n\n          // Validate input against the original Zod schema\n          const parseResult = (toolDef.schema as z.ZodType).safeParse(args);\n          if (!parseResult.success) {\n            const issues = parseResult.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ');\n            return {\n              content: [{ type: 'text' as const, text: JSON.stringify({ success: false, error: `Invalid input: ${issues}` }) }],\n              isError: true,\n            };\n          }\n          const validatedArgs = parseResult.data;\n\n          // Execute the tool handler through the shared runtime so MCP calls have\n          // consistent timeout, cancellation, progress, and requestContext plumbing.\n          const result = await invokeToolRuntime({\n            toolName,\n            tool: requestTool,\n            context,\n            query: validatedArgs,\n            signal: ctx.mcpReq.signal,\n            traceEmitter: createMcpTraceEmitter(toolName, ctx),\n          });\n\n          const { text: sanitizedText, isError: toolIsError } = sanitizeMcpResult(result);\n\n          // Slice 5: decision questions post-processing for discover_opportunities only.\n          if (toolName === \"discover_opportunities\" && !toolIsError) {\n            const questions = extractDecisionQuestions(sanitizedText);\n            if (questions) {\n              const envelopeBlock = {\n                type: \"text\" as const,\n                text: renderQuestionsEnvelope(questions),\n              };\n\n              const supportsElicitation =\n                !!server.server.getClientCapabilities()?.elicitation;\n\n              // Capture into a local const so TS preserves the narrowing\n              // inside the callback below. Optional chains don't survive\n              // across closure boundaries under strict mode.\n              const elicitInput = ctx.mcpReq?.elicitInput;\n\n              if (supportsElicitation && elicitInput) {\n                // Sequential — never parallel (day-one rule). We await the loop\n                // before returning the tool result so test harnesses can observe\n                // the dispatched calls deterministically.\n                await dispatchElicitations({\n                  userId,\n                  questions,\n                  elicitInput: (params) => elicitInput(params),\n                  chatMessageWriter: deps.chatMessageWriter,\n                });\n              }\n\n              return {\n                content: [\n                  { type: \"text\" as const, text: sanitizedText },\n                  envelopeBlock,\n                ],\n                ...(toolIsError ? { isError: true } : {}),\n              };\n            }\n          }\n\n          return {\n            content: [{ type: 'text' as const, text: sanitizedText }],\n            ...(toolIsError ? { isError: true } : {}),\n          };\n        } catch (err) {\n          const message = err instanceof Error ? err.message : String(err);\n          logger.error(`MCP tool \"${toolName}\" failed`, { error: message });\n          if (shouldReportMcpToolError(err)) {\n            reportDeps.reportToolError?.(err, {\n              subsystem: 'mcp',\n              operation: 'mcp.tool',\n              toolName,\n              userId: reportUserId,\n              tags: {\n                transport: 'mcp',\n                toolName,\n              },\n              context: {\n                agentId: reportContext?.agentId,\n                networkId: reportContext?.networkId,\n                indexScope: reportContext?.indexScope,\n              },\n            });\n          }\n          const runtimeResult = toolRuntimeErrorToResult(err);\n          return {\n            content: [{ type: 'text' as const, text: runtimeResult ?? JSON.stringify({ error: message }) }],\n            isError: true,\n          };\n        }\n      },\n    );\n  }\n\n  logger.verbose(`MCP server created with ${registry.size} tools`);\n  return server;\n}\n"]}
+{"version":3,"file":"mcp.server.js","sourceRoot":"/","sources":["mcp/mcp.server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAMzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAE5F,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAEhH,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAE5E,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;AAgB3C,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAyC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAE1C;IACC,OAAO;QACL,YAAY,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;QACvD,QAAQ,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;QACtC,SAAS,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;QACzC,eAAe,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;QACjD,cAAc,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;KACnD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iCAAiC;IAC/C,oBAAoB,CAAC,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAc;IACrD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAA+B,EAAE;QAC1F,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAmB,CAAC;QACrE,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU;YACV,WAAW,EAAE,cAAc,CAAC,UAAU,CAAC;SACxC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,oBAAoB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,CAAC,OAAO,CAAC,iCAAiC,QAAQ,CAAC,MAAM,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QAChD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACnC,OAAO,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACnD,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,IAAI,GAAG,YAAY,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,kFAAkF;AAClF,iCAAiC;AACjC,kFAAkF;AAElF;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAiB;IACxC,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,KAAkB,CAAC;YACpC,UAAU,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3D,wEAAwE;QACxE,MAAM,MAAM,GAAI,MAAsE,CAAC,IAAI,EAAE,MAAM,CAAC;QACpG,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;qBAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;oBAAE,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;qBACpD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;oBAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;qBAClD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;oBAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;YAClE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAAI,MAAsF,CAAC,IAAI,EAAE,MAAM,CAAC;QACpH,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3D,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC;qBAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC;qBACvD,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/D,IAAI,MAAM,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAE,MAAgC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,OAAO,eAAe,CAAE,MAAmC,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QACnC,OAAO,eAAe,CAAE,MAAkC,CAAC,aAAa,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAG,MAA2C,CAAC,OAAO,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,eAAe,CAAE,MAAmC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,kFAAkF;AAClF,yBAAyB;AACzB,kFAAkF;AAElF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IACE,MAAM;YACN,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,IAAI;YACX,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAC3B,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;oBAChD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,KAAK,KAAK,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAClC,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAI,MAAoD,EAAE,IAAI,EAAE,SAAS,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7D,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB;YAAE,MAAM;IACrD,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAqB;IAC3D,OAAO,oCAAoC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC;AAgBD;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC3C,YAAkE,EAClE,SAAgC,EAChC,OAAkC,EACxB,EAAE,CAAC,uBAAuB,CAAC;IACrC,WAAW,EAAE,YAAY;IACzB,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,OAA4B,EAC5B,cAAyC,EACnC,EAAE;IACR,IAAI,CAAC,cAAc;QAAE,OAAO;IAC5B,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO;IAEjD,MAAM,KAAK,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACjD,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IACpC,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAChC,OAAO,CAAC,SAAS,GAAG,cAAc,CAAC;IACnC,0EAA0E;IAC1E,OAAO,CAAC,UAAU,GAAG,6BAA6B,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAE7G,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,cAAc,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC;IACvC,OAAO,CAAC,WAAW,GAAG;QACpB,EAAE,EAAE,KAAK,CAAC,SAAS;QACnB,KAAK,EAAE,KAAK,CAAC,YAAY;QACzB,MAAM,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;KAClC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IAC9D,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5D,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;AAC5B,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,gBAAgB;IAChB,WAAW;IACX,YAAY;IACZ,mCAAmC;IACnC,8DAA8D;IAC9D,sBAAsB;IACtB,oBAAoB;IACpB,uBAAuB;IACvB,sBAAsB;IACtB,qBAAqB;IACrB,oBAAoB;IACpB,gGAAgG;IAChG,sBAAsB;IACtB,iBAAiB;IACjB,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,eAAe;IACf,2BAA2B;IAC3B,eAAe;CAChB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAwB;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO;QAC1B,CAAC,CAAC,qDAAqD,GAAG,CAAC,QAAQ,aAAa;QAChF,CAAC,CAAC,8DAA8D,CAAC;IAEnE,MAAM,aAAa,GAAG,GAAG,CAAC,SAAS;QACjC,CAAC,CAAC,qCAAqC,GAAG,CAAC,SAAS,IAAI,iBAAiB,KAAK;QAC9E,CAAC,CAAC,iHAAiH,CAAC;IAEtH,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE9D,OAAO,CACL,6GAA6G;QAC7G,uEAAuE;QACvE,GAAG,WAAW,OAAO;QACrB,oBAAoB;QACpB,GAAG,QAAQ,IAAI;QACf,0IAA0I;QAC1I,0JAA0J;QAC1J,wPAAwP;QACxP,wHAAwH;QACxH,GAAG,aAAa,IAAI;QACpB,qIAAqI;QACrI,mIAAmI,CACpI,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAAC,QAAgB,EAAE,GAAkB;IACjE,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAE7E,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,QAAQ,IAAI,CAAC,CAAC;QACd,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE;YACpB,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,UAAU,CAAC;YAC9E,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC3I,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,gBAAgB,CAAC;YACpF,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI,kBAAkB,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACjJ,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB;gBAAE,OAAO,GAAG,QAAQ,2BAA2B,CAAC;YAC5F,OAAO,GAAG,QAAQ,YAAY,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,YAAY,GAAqD;YACrE,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE;SACpD,CAAC;QACF,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjD,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;gBACvD,QAAQ;gBACR,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsD/B,CAAC,IAAI,EAAE,CAAC;AAET;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,MAAM,EAAE,WAAW,EAAE,KAAK,QAAQ,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,IAAI,uBAAuB,GAAG,KAAK,CAAC;AACpC,MAAM,UAAU,kBAAkB,CAAC,GAAkB;IACnD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC7B,uBAAuB,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAc,EACd,YAA6B,EAC7B,iBAAoC;IAEpC,6FAA6F;IAC7F,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAEjF,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,EAC3C,EAAE,YAAY,EAAE,gBAAgB,EAAE,CACnC,CAAC;IAEF,MAAM,YAAY,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAEpD,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;QAE9B,MAAM,CAAC,YAAY,CACjB,QAAQ,EACR;YACE,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,EACD,KAAK,EAAE,IAAa,EAAE,GAAkB,EAAE,EAAE;YAC1C,IAAI,UAAU,GAAG,IAAI,CAAC;YACtB,IAAI,YAAgC,CAAC;YACrC,IAAI,aAA8C,CAAC;YAEnD,IAAI,CAAC;gBACH,gEAAgE;gBAChE,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC;gBAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC,EAAE,CAAC;wBACjH,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,iEAAiE;gBACjE,MAAM,YAAY,GAAiB;oBACjC,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC;oBACxC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS;oBACrD,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;oBACzE,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,SAAS;oBAC3E,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,SAAS;iBAChF,CAAC;gBAEF,yDAAyD;gBACzD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;gBAC3H,YAAY,GAAG,MAAM,CAAC;gBAEtB,qEAAqE;gBACrE,+DAA+D;gBAC/D,sEAAsE;gBACtE,uEAAuE;gBACvE,wBAAwB;gBACxB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;oBACxB,oEAAoE;oBACpE,iEAAiE;oBACjE,0CAA0C;oBAC1C,IAAI,QAAQ,GAAwE,IAAI,CAAC;oBACzF,IAAI,CAAC;wBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC;4BACnC,MAAM;4BACN,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC/B,QAAQ;yBACT,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,IAAI,CAAC,+BAA+B,QAAQ,kBAAkB,EAAE;4BACrE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;yBAC9D,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;wBAClC,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC;wBACnD,OAAO;4BACL,OAAO,EAAE,CAAC;oCACR,IAAI,EAAE,MAAe;oCACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wCACnB,KAAK,EAAE,qBAAqB;wCAC5B,OAAO,EACL,YAAY,QAAQ,kCAAkC,aAAa,oBAAoB;4CACvF,CAAC,QAAQ,KAAK,wBAAwB;gDACpC,CAAC,CAAC,6GAA6G;gDAC/G,CAAC,CAAC,EAAE,CAAC;wCACT,aAAa;qCACd,CAAC;iCACH,CAAC;4BACF,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,gFAAgF;gBAChF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;gBACrH,aAAa,GAAG,OAAO,CAAC;gBACxB,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;gBACrB,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;gBAC5B,CAAC;gBACD,IAAI,aAAa,EAAE,CAAC;oBAClB,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;gBACxC,CAAC;gBAED,yEAAyE;gBACzE,uEAAuE;gBACvE,sEAAsE;gBACtE,iEAAiE;gBACjE,qBAAqB;gBACrB,0BAA0B,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;gBAEpD,mFAAmF;gBACnF,iFAAiF;gBACjF,yFAAyF;gBACzF,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3E,OAAO;wBACL,OAAO,EAAE,CAAC;gCACR,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oCACnB,KAAK,EAAE,sBAAsB;oCAC7B,OAAO,EACL,0DAA0D;wCAC1D,qEAAqE;wCACrE,yFAAyF;iCAC5F,CAAC;6BACH,CAAC;wBACF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,mEAAmE;gBACnE,wEAAwE;gBACxE,yEAAyE;gBACzE,gEAAgE;gBAChE,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9D,MAAM,eAAe,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;oBAC3D,OAAO;wBACL,OAAO,EAAE,CAAC;gCACR,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oCACnB,KAAK,EAAE,qBAAqB;oCAC5B,OAAO,EAAE,eAAe;iCACzB,CAAC;6BACH,CAAC;wBACF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,2DAA2D;gBAC3D,2EAA2E;gBAC3E,0EAA0E;gBAC1E,wEAAwE;gBACxE,2DAA2D;gBAC3D,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;oBAChD,WAAW,EAAE,OAAO,CAAC,YAAY;oBACjC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO;wBACtC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;wBAC5D,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;gBACH,0EAA0E;gBAC1E,OAAO,CAAC,UAAU,GAAG,iBAAiB,CAAC;gBACvC,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;gBAEtE,kDAAkD;gBAClD,MAAM,WAAW,GAAa,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;gBACxD,UAAU,GAAG,WAAW,CAAC;gBAEzB,uEAAuE;gBACvE,uEAAuE;gBACvE,2DAA2D;gBAC3D,MAAM,eAAe,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;gBACxD,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAElD,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,QAAQ,aAAa,EAAE,CAAC,EAAE,CAAC;wBACrG,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,iDAAiD;gBACjD,MAAM,WAAW,GAAI,OAAO,CAAC,MAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAClE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnG,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;wBACjH,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC;gBAEvC,wEAAwE;gBACxE,2EAA2E;gBAC3E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;oBACrC,QAAQ;oBACR,IAAI,EAAE,WAAW;oBACjB,OAAO;oBACP,KAAK,EAAE,aAAa;oBACpB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;oBACzB,YAAY,EAAE,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC;iBACnD,CAAC,CAAC;gBAEH,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAEhF,+EAA+E;gBAC/E,IAAI,QAAQ,KAAK,wBAAwB,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC1D,MAAM,SAAS,GAAG,wBAAwB,CAAC,aAAa,CAAC,CAAC;oBAC1D,IAAI,SAAS,EAAE,CAAC;wBACd,MAAM,aAAa,GAAG;4BACpB,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,uBAAuB,CAAC,SAAS,CAAC;yBACzC,CAAC;wBAEF,MAAM,mBAAmB,GACvB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,EAAE,WAAW,CAAC;wBAEvD,2DAA2D;wBAC3D,2DAA2D;wBAC3D,+CAA+C;wBAC/C,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC;wBAE5C,IAAI,mBAAmB,IAAI,WAAW,EAAE,CAAC;4BACvC,gEAAgE;4BAChE,iEAAiE;4BACjE,0CAA0C;4BAC1C,MAAM,oBAAoB,CAAC;gCACzB,MAAM;gCACN,SAAS;gCACT,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;gCAC5C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;6BAC1C,CAAC,CAAC;wBACL,CAAC;wBAED,OAAO;4BACL,OAAO,EAAE;gCACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,aAAa,EAAE;gCAC9C,aAAa;6BACd;4BACD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC1C,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;oBACzD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1C,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,MAAM,CAAC,KAAK,CAAC,aAAa,QAAQ,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBAClE,IAAI,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClC,UAAU,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE;wBAChC,SAAS,EAAE,KAAK;wBAChB,SAAS,EAAE,UAAU;wBACrB,QAAQ;wBACR,MAAM,EAAE,YAAY;wBACpB,IAAI,EAAE;4BACJ,SAAS,EAAE,KAAK;4BAChB,QAAQ;yBACT;wBACD,OAAO,EAAE;4BACP,OAAO,EAAE,aAAa,EAAE,OAAO;4BAC/B,SAAS,EAAE,aAAa,EAAE,SAAS;4BACnC,UAAU,EAAE,aAAa,EAAE,UAAU;yBACtC;qBACF,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;gBACpD,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,aAAa,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;oBAC/F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,2BAA2B,YAAY,CAAC,MAAM,QAAQ,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * MCP Server Factory — creates an McpServer instance with all protocol tools\n * registered from the existing tool registry. Each tool invocation resolves\n * auth from the HTTP request, builds a ResolvedToolContext, and delegates\n * to the raw tool handler.\n */\n\nimport { z } from 'zod';\nimport { McpServer, fromJsonSchema } from '@modelcontextprotocol/server';\nimport type { ServerContext, JsonSchemaType } from '@modelcontextprotocol/server';\n\nimport type { McpAuthResolver } from '../shared/interfaces/auth.interface.js';\nimport type { McpAuthInput } from '../shared/schemas/mcp-auth.schema.js';\nimport type { ToolDeps, ResolvedToolContext, RawToolDefinition } from '../shared/agent/tool.helpers.js';\nimport { resolveChatContext } from '../shared/agent/tool.helpers.js';\nimport { deriveAllowedNetworkIds, scopeFromNetworkId } from '../shared/agent/tool.scope.js';\nimport type { Question } from '../shared/schemas/question.schema.js';\nimport { QuestionSchema } from '../shared/schemas/question.schema.js';\nimport { dispatchElicitations } from './elicitation.dispatcher.js';\nimport { createToolRegistry } from '../shared/agent/tool.registry.js';\nimport { ToolRuntimeError, invokeToolRuntime, toolRuntimeErrorToResult } from '../shared/agent/tool.runtime.js';\nimport type { TraceEmitter } from '../shared/observability/request-context.js';\nimport { protocolLogger } from '../shared/observability/protocol.logger.js';\n\nconst logger = protocolLogger('McpServer');\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// STATIC TOOL METADATA CACHE\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Static registration metadata for one MCP tool — schema conversion artifacts\n * that depend only on registry-shaping feature flags, not on per-request\n * database scope.\n */\ntype McpToolRegistrationMetadata = Pick<RawToolDefinition, 'name' | 'description' | 'schema'> & {\n  jsonSchema: JsonSchemaType;\n  inputSchema: ReturnType<typeof fromJsonSchema>;\n};\n\nconst mcpToolMetadataCache = new Map<string, McpToolRegistrationMetadata[]>();\n\n/**\n * Builds a cache key from registry-shaping dependency booleans.\n * When a feature flag changes the tool set, the cache key changes so\n * the cached metadata set is automatically invalidated.\n */\nexport function getMcpToolMetadataCacheKey(deps: Pick<ToolDeps,\n  'contactsEnabled' | 'chatSession' | 'agentDatabase' | 'agentDispatcher' | 'questionerEnqueue'\n>): string {\n  return [\n    `contacts:${deps.contactsEnabled === true ? '1' : '0'}`,\n    `chat:${deps.chatSession ? '1' : '0'}`,\n    `agent:${deps.agentDatabase ? '1' : '0'}`,\n    `negotiation:${deps.agentDispatcher ? '1' : '0'}`,\n    `questioner:${deps.questionerEnqueue ? '1' : '0'}`,\n  ].join('|');\n}\n\n/**\n * Clears the metadata cache. Used in tests to ensure fresh state between cases.\n */\nexport function clearMcpToolMetadataCacheForTests(): void {\n  mcpToolMetadataCache.clear();\n}\n\n/**\n * Returns cached (or builds and caches) static MCP tool registration metadata.\n * The first call per cache key runs the full registry creation + schema\n * conversion; subsequent calls return the cached metadata array for the same\n * registry-shaping dependency profile.\n *\n * Does NOT store tool handlers — those remain request-scoped because they\n * capture per-request userDb/systemDb.\n */\nexport function getCachedMcpToolMetadata(deps: ToolDeps): readonly McpToolRegistrationMetadata[] {\n  const cacheKey = getMcpToolMetadataCacheKey(deps);\n  const cached = mcpToolMetadataCache.get(cacheKey);\n  if (cached) return cached;\n\n  const registry = createToolRegistry(deps);\n  const metadata = Array.from(registry.values()).map((toolDef): McpToolRegistrationMetadata => {\n    const jsonSchema = zodToJsonSchema(toolDef.schema) as JsonSchemaType;\n    return {\n      name: toolDef.name,\n      description: toolDef.description,\n      schema: toolDef.schema,\n      jsonSchema,\n      inputSchema: fromJsonSchema(jsonSchema),\n    };\n  });\n\n  mcpToolMetadataCache.set(cacheKey, metadata);\n  logger.verbose(`MCP tool metadata cached with ${metadata.length} tools`, { cacheKey });\n  return metadata;\n}\n\nfunction isExpectedMcpAuthError(message: string): boolean {\n  return message.includes('Authentication required') ||\n    message.includes('Invalid API key') ||\n    message.includes('Invalid or expired access token') ||\n    message.includes('JWT payload missing user ID');\n}\n\n/**\n * Runtime/auth failures are converted into structured MCP `isError` tool\n * results for the caller. Reporting them as application exceptions produces\n * Sentry noise for expected client failures and policy-enforced timeouts.\n */\nexport function shouldReportMcpToolError(err: unknown): boolean {\n  if (err instanceof ToolRuntimeError) return false;\n  const message = err instanceof Error ? err.message : String(err);\n  return !isExpectedMcpAuthError(message);\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// ZOD 3 → JSON SCHEMA CONVERSION\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Minimal Zod-to-JSON-Schema conversion for MCP tool registration.\n * Converts Zod 3.x schemas to plain JSON Schema objects that can be\n * wrapped with `fromJsonSchema()` for MCP SDK compatibility.\n */\nfunction zodToJsonSchema(schema: z.ZodType): Record<string, unknown> {\n  if (schema instanceof z.ZodObject) {\n    const shape = schema.shape;\n    const properties: Record<string, unknown> = {};\n    const required: string[] = [];\n    for (const [key, value] of Object.entries(shape)) {\n      const zodValue = value as z.ZodType;\n      properties[key] = zodToJsonSchema(zodValue);\n      if (!(zodValue instanceof z.ZodOptional) && !(zodValue instanceof z.ZodDefault)) {\n        required.push(key);\n      }\n    }\n    return { type: 'object', properties, ...(required.length ? { required } : {}) };\n  }\n  if (schema instanceof z.ZodString) {\n    const result: Record<string, unknown> = { type: 'string' };\n    // Detect .url(), .email(), .uuid() etc. via Zod's internal checks array\n    const checks = (schema as z.ZodString & { _def: { checks: Array<{ kind: string }> } })._def?.checks;\n    if (checks) {\n      for (const check of checks) {\n        if (check.kind === 'url') result.format = 'uri';\n        else if (check.kind === 'email') result.format = 'email';\n        else if (check.kind === 'uuid') result.format = 'uuid';\n        else if (check.kind === 'datetime') result.format = 'date-time';\n      }\n    }\n    return result;\n  }\n  if (schema instanceof z.ZodNumber) {\n    const checks = (schema as z.ZodNumber & { _def: { checks: Array<{ kind: string; value?: number }> } })._def?.checks;\n    const result: Record<string, unknown> = { type: 'number' };\n    if (checks) {\n      for (const check of checks) {\n        if (check.kind === 'int') result.type = 'integer';\n        else if (check.kind === 'min') result.minimum = check.value;\n        else if (check.kind === 'max') result.maximum = check.value;\n      }\n    }\n    return result;\n  }\n  if (schema instanceof z.ZodBoolean) return { type: 'boolean' };\n  if (schema instanceof z.ZodArray) {\n    return { type: 'array', items: zodToJsonSchema((schema as z.ZodArray<z.ZodType>).element) };\n  }\n  if (schema instanceof z.ZodOptional) {\n    return zodToJsonSchema((schema as z.ZodOptional<z.ZodType>).unwrap());\n  }\n  if (schema instanceof z.ZodDefault) {\n    return zodToJsonSchema((schema as z.ZodDefault<z.ZodType>).removeDefault());\n  }\n  if (schema instanceof z.ZodEnum) {\n    return { type: 'string', enum: (schema as z.ZodEnum<[string, ...string[]]>).options };\n  }\n  if (schema instanceof z.ZodNullable) {\n    const inner = zodToJsonSchema((schema as z.ZodNullable<z.ZodType>).unwrap());\n    return { ...inner, nullable: true };\n  }\n  if (schema instanceof z.ZodRecord) {\n    return { type: 'object', additionalProperties: true };\n  }\n  return { type: 'object' };\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// RESULT POST-PROCESSING\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Strips internal `_`-prefixed keys from `data` and promotes `isError`\n * from the inner `success: false` signal to the MCP envelope level.\n * Fail-open: if JSON parsing throws, returns the original text with isError: false.\n */\nexport function sanitizeMcpResult(text: string): { text: string; isError: boolean } {\n  try {\n    const parsed = JSON.parse(text);\n    if (\n      parsed &&\n      typeof parsed === 'object' &&\n      parsed.data &&\n      typeof parsed.data === 'object' &&\n      !Array.isArray(parsed.data)\n    ) {\n      for (const key of Object.keys(parsed.data)) {\n        if (key.startsWith('_') || key === 'debugSteps') {\n          delete parsed.data[key];\n        }\n      }\n    }\n    const isError = parsed?.success === false;\n    return { text: JSON.stringify(parsed), isError };\n  } catch {\n    return { text, isError: false };\n  }\n}\n\n/** Spec cap on the number of decision questions surfaced per turn. */\nconst MAX_DECISION_QUESTIONS = 3;\n\n/**\n * Extracts decision questions from a parsed tool-result text, if present.\n * Validates each entry against `QuestionSchema` and drops malformed items;\n * caps the array at `MAX_DECISION_QUESTIONS` (defense-in-depth — Slice 2's\n * generator already caps at 3, but we don't trust the cast here).\n *\n * Returns null when the text isn't JSON, has no `data.questions`, or\n * contains zero valid questions after validation.\n */\nexport function extractDecisionQuestions(text: string): Question[] | null {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text);\n  } catch {\n    return null;\n  }\n\n  const rawQs = (parsed as { data?: { questions?: unknown } } | null)?.data?.questions;\n  if (!Array.isArray(rawQs) || rawQs.length === 0) return null;\n\n  const valid: Question[] = [];\n  for (const raw of rawQs) {\n    const result = QuestionSchema.safeParse(raw);\n    if (result.success) valid.push(result.data);\n    if (valid.length === MAX_DECISION_QUESTIONS) break;\n  }\n  return valid.length > 0 ? valid : null;\n}\n\n/**\n * Renders the JSON-envelope text block appended to the tool result content\n * when decision questions are present. The leading sentinel string lets the\n * LLM client recognize and surface the questions in prose for clients\n * without elicitation support.\n */\nexport function renderQuestionsEnvelope(questions: Question[]): string {\n  return `Decision questions (structured): ${JSON.stringify({ questions })}`;\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// MCP SERVER FACTORY\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Factory for creating per-request scoped database instances.\n * Injected from the controller/handler layer to keep the protocol layer\n * free of direct adapter imports.\n */\nexport interface ScopedDepsFactory {\n  /** Creates scoped userDb and systemDb for the given user and allowed network IDs. */\n  create(userId: string, allowedNetworkIds: string[]): Pick<ToolDeps, 'userDb' | 'systemDb'>;\n}\n\n/**\n * Computes the concrete network IDs passed to the per-request scoped DB factory.\n * When a network scope is present, the agent reaches that network plus the\n * user's personal index. Otherwise the full membership set is returned.\n */\nexport const computeAgentAllowedNetworkIds = (\n  userNetworks: { networkId: string; isPersonal?: boolean | null }[],\n  scopeType: 'network' | undefined,\n  scopeId: string | null | undefined,\n): string[] => deriveAllowedNetworkIds({\n  memberships: userNetworks,\n  ...(scopeType && scopeId ? { scopeType, scopeId } : {}),\n});\n\n/**\n * Promotes a network-scoped agent's bound network into the resolved tool\n * context as the implicit chat scope. Every tool that branches on\n * `context.networkId` (read_networks, read_intents, read_user_contexts,\n * opportunity tools, etc.) then enforces scope automatically — without this\n * step tools that shape their response off `context.networkId` (notably\n * `read_networks`' `publicNetworks` branch) would still leak the global view.\n *\n * No-op when there is no scope, or when an explicit scope is already set\n * (a user-driven index-scoped chat must keep precedence over the agent\n * binding — which would be a strict subset anyway, since the API key cannot\n * reach beyond its bound network).\n */\nexport const applyNetworkScopeToContext = (\n  context: ResolvedToolContext,\n  networkScopeId: string | null | undefined,\n): void => {\n  if (!networkScopeId) return;\n  if (context.scopeType && context.scopeId) return;\n\n  const scope = scopeFromNetworkId(networkScopeId);\n  context.scopeType = scope.scopeType;\n  context.scopeId = scope.scopeId;\n  context.networkId = networkScopeId;\n  // Deprecated compatibility reach until remaining tool call sites migrate.\n  context.indexScope = computeAgentAllowedNetworkIds(context.userNetworks, context.scopeType, context.scopeId);\n\n  const bound = context.userNetworks.find((m) => m.networkId === networkScopeId);\n  if (!bound) return;\n\n  context.indexName = bound.networkTitle;\n  context.scopedIndex = {\n    id: bound.networkId,\n    title: bound.networkTitle,\n    prompt: bound.indexPrompt ?? null,\n  };\n  const isOwner = bound.permissions?.includes('owner') ?? false;\n  context.scopedMembershipRole = isOwner ? 'owner' : 'member';\n  context.isOwner = isOwner;\n};\n\n/**\n * Tools allowed during onboarding — everything else is gated until\n * complete_onboarding is called.  Includes the agent-gate-exempt tools\n * (register_agent, read_docs, scrape_url) because they are informational /\n * registration primitives needed at every lifecycle stage.\n */\nexport const ONBOARDING_ALLOWED: ReadonlySet<string> = new Set([\n  'register_agent',\n  'read_docs',\n  'scrape_url',\n  'record_onboarding_privacy_consent',\n  // Canonical *_user_context / *_enrichment_run names (IND-371)\n  'preview_user_context',\n  'get_enrichment_run',\n  'cancel_enrichment_run',\n  'confirm_user_context',\n  'create_user_context',\n  'read_user_contexts',\n  // Deprecated aliases retained so mid-migration clients can still onboard (IND-373 removes them)\n  'preview_user_profile',\n  'get_profile_run',\n  'cancel_profile_run',\n  'confirm_user_profile',\n  'create_user_profile',\n  'read_user_profiles',\n  'complete_onboarding',\n  'import_gmail_contacts',\n  'read_networks',\n  'create_network_membership',\n  'create_intent',\n]);\n\n/**\n * Builds the onboarding gate message for MCP callers.  Condensed from the\n * chat orchestrator's 8-step flow (chat.prompt.ts buildOnboarding) into a\n * 7-step tool-error guide suited for non-interactive MCP clients.\n */\nexport function buildMcpOnboardingMessage(ctx: ResolvedToolContext): string {\n  const nameStep = ctx.hasName\n    ? `1. Greet the user and confirm their name (\"You're ${ctx.userName}, right?\").`\n    : `1. Ask the user for their name and a short self-description.`;\n\n  const communityStep = ctx.networkId\n    ? `5. (Skipped — user is already in \"${ctx.indexName ?? 'their community'}\".)`\n    : `5. Call read_networks() and let the user pick communities to join via create_network_membership(networkId=...).`;\n\n  const allowedList = Array.from(ONBOARDING_ALLOWED).join(', ');\n\n  return (\n    `This user has not completed onboarding. You must guide them through setup before they can use other tools. ` +\n    `Only the following tools are available until onboarding is complete: ` +\n    `${allowedList}.\\n\\n` +\n    `Onboarding flow:\\n` +\n    `${nameStep}\\n` +\n    `2. Ask whether the user allows use of event/EdgeOS profile data, then call record_onboarding_privacy_consent(edgeosImportGranted=...).\\n` +\n    `3. Ask separately whether the user allows public internet/profile lookup, then call record_onboarding_privacy_consent(publicProfileLookupGranted=...).\\n` +\n    `4. Call preview_user_context(...) using only allowed inputs; do not run public lookup unless consent was granted. If it returns profileRunId, poll get_enrichment_run(profileRunId=...) until status is succeeded, then use its result as the draft.\\n` +\n    `5. Present the profile draft and ask \"Does that look right?\" On approval/correction, call confirm_user_context(...).\\n` +\n    `${communityStep}\\n` +\n    `6. Ask what the user is looking for and call create_intent(description=\"...\", autoApprove=true) so the first signal is persisted.\\n` +\n    `7. Call complete_onboarding() to finish setup. Gmail/contact import and discovery are optional after onboarding, never mandatory.`\n  );\n}\n\n/**\n * Creates an MCP server with all protocol tools registered.\n * Tools resolve auth per-request via the HTTP request available in ServerContext.\n *\n * @param deps - Shared tool dependencies (graphs, database, embedder, etc.)\n * @param authResolver - Resolves authenticated identity from the HTTP request\n * @param scopedDepsFactory - Factory for creating per-request scoped databases\n * @returns A configured McpServer ready to be connected to a transport\n */\nfunction createMcpTraceEmitter(toolName: string, ctx: ServerContext): TraceEmitter | undefined {\n  const token = ctx.mcpReq._meta?.progressToken;\n  if (typeof token !== 'string' && typeof token !== 'number') return undefined;\n\n  let progress = 0;\n  return (event) => {\n    progress += 1;\n    const message = (() => {\n      if (event.type === 'graph_start') return `${toolName}: ${event.name} started`;\n      if (event.type === 'graph_end') return `${toolName}: ${event.name} finished${event.durationMs != null ? ` in ${event.durationMs}ms` : ''}`;\n      if (event.type === 'agent_start') return `${toolName}: ${event.name} agent started`;\n      if (event.type === 'agent_end') return `${toolName}: ${event.name} agent finished${event.durationMs != null ? ` in ${event.durationMs}ms` : ''}`;\n      if (event.type === 'opportunity_draft_ready') return `${toolName}: opportunity draft ready`;\n      return `${toolName}: progress`;\n    })();\n\n    const notification: Parameters<ServerContext['mcpReq']['notify']>[0] = {\n      method: 'notifications/progress',\n      params: { progressToken: token, progress, message },\n    };\n    void ctx.mcpReq.notify(notification).catch((err) => {\n      logger.debug('Failed to send MCP progress notification', {\n        toolName,\n        error: err instanceof Error ? err.message : String(err),\n      });\n    });\n  };\n}\n\nexport const MCP_INSTRUCTIONS = `\nIndex Network is a private, intent-driven discovery protocol. You help users find the right people and help the right people find them, via Index Network MCP tools.\n\n# Voice\nCalm, direct, analytical, concise. Preferred vocabulary: opportunity, overlap, signal, pattern, emerging, relevant, adjacency.\n\n# Banned vocabulary\nNEVER use \"search\" in any form. Use \"looking up\" for indexed data, \"find\" / \"look for\" for discovery, \"check\" for verification, \"discover\" for exploration. Banned: leverage, unlock, optimize, scale, disrupt, revolutionary, AI-powered, maximize value, act fast, networking, match.\n\n# Entity model\n- User — has one Profile, many Memberships, many Intents.\n- Profile — identity (bio, skills, interests, location).\n- Index — community with title, prompt (purpose), join policy. Has Members.\n- Membership — User↔Index junction. \\`isPersonal: true\\` marks the user's personal index (contacts).\n- Intent — what a user is looking for (signal). Description, summary, embedding.\n- IntentIndex — Intent↔Index junction (auto-assigned).\n- Opportunity — discovered connection between users. Roles, status, reasoning.\n\n# Output rules\n- NEVER expose internal IDs, UUIDs, field names, or tool names — EXCEPT when an ID is actionable for the user (e.g. a \\`conversationId\\` they need to open a chat). Surface such IDs verbatim when the tool returns them.\n- NEVER use internal vocabulary — say \"signal\" not \"intent\", \"community\" not \"index\".\n- NEVER dump raw JSON. Synthesize in natural language.\n- Surface top 1–3 relevant points unless asked for the full list.\n- Prefer first names; use full names only to disambiguate.\n- Translate statuses: draft/latent → \"draft\", pending → \"sent\", accepted → \"connected\".\n- NEVER fabricate data. If you don't have it, call the appropriate tool.\n\n# Tool guidance\nEach tool's description contains its own usage rules (when to call, when NOT to call, required prerequisites, post-call follow-ups). Read the description of every tool you call — that is where the per-tool workflow patterns live.\n\n# Authentication\nPass your API key in the \\`x-api-key\\` request header (not \\`Authorization: Bearer\\`).\n\n# Opportunity lifecycle\nOpportunities move through: draft → pending → accepted (or rejected).\n\n- **draft** (you created it, not yet sent): offer to send it; confirm before calling update_opportunity with pending.\n- **pending, you sent it**: waiting for the other side — nothing to do.\n- **pending, you received it**: the other person is waiting for your response. Surface it to the user and ask if they want to start a chat. Only call update_opportunity with accepted after explicit user confirmation.\n- **accepted**: both sides are connected — a direct conversation exists. Surface the conversationId to the user if available.\n\nNever accept a received opportunity without explicit user approval in the current conversation.\n\n# Decision questions after discovery\n\nAfter \\`discover_opportunities\\`, the tool result may include a second text block starting with \\`Decision questions (structured): ...\\`. This means the discovery engine ran negotiations but needs human input to sharpen the next turn — e.g. clarify timing, role, stage, or location.\n\n**When this block is present:**\n1. Parse the \\`questions\\` array from the JSON after the sentinel.\n2. Each question has \\`title\\` (decision domain, ≤12 chars), \\`prompt\\` (ends in \\`?\\`), \\`options\\` (2–4 items, each with \\`label\\` and \\`description\\`), and \\`multiSelect\\`. The safest option is labeled \\`... (Recommended)\\`.\n3. Present each question in natural language: ask the \\`prompt\\`, list options as \\`**{label}** — {description}\\`. Never expose the JSON or technical field names.\n4. Wait for the user's answer, then fold it into the next \\`discover_opportunities(searchQuery=...)\\` call.\n\n**Elicitation-capable clients** (those that declared \\`elicitation\\` support in \\`initialize\\`): the server dispatches \\`elicitation/create\\` requests directly — answers are written back to the chat session automatically. You will not see the envelope as a follow-up task in that case.\n`.trim();\n\n/**\n * Extracts a Bearer token from an HTTP Authorization header.\n */\nexport function extractBearerToken(req: Request): string | undefined {\n  const authHeader = req.headers.get('Authorization');\n  if (!authHeader) return undefined;\n  const [scheme, token] = authHeader.trim().split(/\\s+/, 2);\n  if (scheme?.toLowerCase() === 'bearer' && token) return token;\n  return undefined;\n}\n\n/**\n * Normalizes the x-index-surface header to a typed surface value.\n * Unknown or absent values collapse to 'web'.\n */\nlet hasWarnedInvalidSurface = false;\nexport function parseClientSurface(raw: string | null): 'telegram' | 'web' {\n  if (raw === null || raw === '') return 'web';\n  const trimmed = raw.trim().toLowerCase();\n  if (trimmed === '') return 'web';\n  if (trimmed === 'telegram') return 'telegram';\n  if (trimmed === 'web') return 'web';\n  if (!hasWarnedInvalidSurface) {\n    hasWarnedInvalidSurface = true;\n    logger.warn('Unknown x-index-surface value (collapsing to web; warning once per process)');\n  }\n  return 'web';\n}\n\nexport function createMcpServer(\n  deps: ToolDeps,\n  authResolver: McpAuthResolver,\n  scopedDepsFactory: ScopedDepsFactory,\n): McpServer {\n  // Tools exempt from the agent-registration gate — available before registration is complete.\n  const AGENT_GATE_EXEMPT = new Set(['register_agent', 'read_docs', 'scrape_url']);\n\n  const server = new McpServer(\n    { name: 'index-network', version: '1.0.0' },\n    { instructions: MCP_INSTRUCTIONS },\n  );\n\n  const toolMetadata = getCachedMcpToolMetadata(deps);\n\n  for (const toolDef of toolMetadata) {\n    const toolName = toolDef.name;\n\n    server.registerTool(\n      toolName,\n      {\n        description: toolDef.description,\n        inputSchema: toolDef.inputSchema,\n      },\n      async (args: unknown, ctx: ServerContext) => {\n        let reportDeps = deps;\n        let reportUserId: string | undefined;\n        let reportContext: ResolvedToolContext | undefined;\n\n        try {\n          // Extract the original HTTP request from the MCP server context\n          const httpReq = ctx.http?.req;\n          if (!httpReq) {\n            return {\n              content: [{ type: 'text' as const, text: JSON.stringify({ error: 'No HTTP request available in MCP context' }) }],\n              isError: true,\n            };\n          }\n\n          // Extract transport-neutral auth input DTO from the HTTP request\n          const mcpAuthInput: McpAuthInput = {\n            bearerToken: extractBearerToken(httpReq),\n            apiKey: httpReq.headers.get('x-api-key') ?? undefined,\n            clientSurface: parseClientSurface(httpReq.headers.get('x-index-surface')),\n            telegramHandle: httpReq.headers.get('x-index-telegram-handle') ?? undefined,\n            telegramUsername: httpReq.headers.get('x-index-telegram-username') ?? undefined,\n          };\n\n          // Resolve authenticated identity from the auth input DTO\n          const { userId, agentId, isSessionAuth, networkScopeId, clientSurface } = await authResolver.resolveIdentity(mcpAuthInput);\n          reportUserId = userId;\n\n          // Per-principal MCP throttle. Runs BEFORE any DB work so a throttled\n          // call short-circuits cheaply. The /mcp transport bypasses the\n          // controller-level RateLimit guard, so this is the only volume cap on\n          // tool calls — it stops an over-eager agent from cascading itself into\n          // provider rate limits.\n          if (deps.mcpRateLimiter) {\n            // Throttling is best-effort: never let a limiter failure (or a host\n            // implementation that throws instead of failing open) break tool\n            // dispatch. Treat any error as \"allowed\".\n            let decision: Awaited<ReturnType<NonNullable<typeof deps.mcpRateLimiter>>> | null = null;\n            try {\n              decision = await deps.mcpRateLimiter({\n                userId,\n                ...(agentId ? { agentId } : {}),\n                toolName,\n              });\n            } catch (rlErr) {\n              logger.warn(`MCP rate limiter threw for \"${toolName}\" — failing open`, {\n                error: rlErr instanceof Error ? rlErr.message : String(rlErr),\n              });\n            }\n            if (decision && !decision.allowed) {\n              const retryAfterSec = decision.retryAfterSec ?? 60;\n              return {\n                content: [{\n                  type: 'text' as const,\n                  text: JSON.stringify({\n                    error: 'Rate limit exceeded',\n                    message:\n                      `Too many ${toolName} calls in a short period. Wait ${retryAfterSec}s before retrying.` +\n                      (toolName === 'discover_opportunities'\n                        ? ` If a discovery run is in progress, poll get_discovery_run instead of calling discover_opportunities again.`\n                        : ''),\n                    retryAfterSec,\n                  }),\n                }],\n                isError: true,\n              };\n            }\n          }\n\n          // Resolve chat context for the user (mark as MCP — no interactive UI available)\n          const context = await resolveChatContext({ database: deps.database, userId, contactsEnabled: deps.contactsEnabled });\n          reportContext = context;\n          context.isMcp = true;\n          if (agentId) {\n            context.agentId = agentId;\n          }\n          if (clientSurface) {\n            context.clientSurface = clientSurface;\n          }\n\n          // Network-scoped agents inherit their bound network as the implicit chat\n          // scope. Every tool that branches on `context.networkId` then enforces\n          // the same focused boundary — most importantly `read_networks`, which\n          // would otherwise return the global `publicNetworks` catalog for\n          // unscoped contexts.\n          applyNetworkScopeToContext(context, networkScopeId);\n\n          // Gate: API-key callers (background agents) must register before using most tools.\n          // OAuth/JWT session callers (human MCP clients such as Claude Code) are exempt —\n          // their identity is already established via the auth flow and they have no agent entity.\n          if (!isSessionAuth && !context.agentId && !AGENT_GATE_EXEMPT.has(toolName)) {\n            return {\n              content: [{\n                type: 'text' as const,\n                text: JSON.stringify({\n                  error: 'Agent not registered',\n                  message:\n                    'You must register as an agent before using Index tools. ' +\n                    'Call register_agent with your agent name to establish an identity. ' +\n                    'The tools register_agent, read_docs, and scrape_url are available without registration.',\n                }),\n              }],\n              isError: true,\n            };\n          }\n\n          // Gate: non-onboarded users can only use onboarding-related tools.\n          // Mirrors the chat orchestrator's ONBOARDING MODE — the MCP client must\n          // walk the user through profile creation, Gmail connect, intent capture,\n          // and complete_onboarding() before full tool access is granted.\n          if (context.isOnboarding && !ONBOARDING_ALLOWED.has(toolName)) {\n            const onboardingSteps = buildMcpOnboardingMessage(context);\n            return {\n              content: [{\n                type: 'text' as const,\n                text: JSON.stringify({\n                  error: 'Onboarding required',\n                  message: onboardingSteps,\n                }),\n              }],\n              isError: true,\n            };\n          }\n\n          // Build per-request scoped databases via injected factory.\n          // Network-scoped agents are clamped to their bound network plus the user's\n          // personal index — they cannot reach other networks even when the user is\n          // a member of them. The personal-index reachability is preserved so the\n          // agent can still manage its owner's profile and contacts.\n          const allowedNetworkIds = deriveAllowedNetworkIds({\n            memberships: context.userNetworks,\n            ...(context.scopeType && context.scopeId\n              ? { scopeType: context.scopeType, scopeId: context.scopeId }\n              : {}),\n          });\n          // Deprecated compatibility reach until remaining tool call sites migrate.\n          context.indexScope = allowedNetworkIds;\n          const scopedDbs = scopedDepsFactory.create(userId, allowedNetworkIds);\n\n          // Override deps with per-request scoped databases\n          const requestDeps: ToolDeps = { ...deps, ...scopedDbs };\n          reportDeps = requestDeps;\n\n          // Re-create registry with per-request deps for scoped database access.\n          // Do not use cached registration metadata handlers here: tool handlers\n          // close over userDb/systemDb when the registry is created.\n          const requestRegistry = createToolRegistry(requestDeps);\n          const requestTool = requestRegistry.get(toolName);\n\n          if (!requestTool) {\n            return {\n              content: [{ type: 'text' as const, text: JSON.stringify({ error: `Tool \"${toolName}\" not found` }) }],\n              isError: true,\n            };\n          }\n\n          // Validate input against the original Zod schema\n          const parseResult = (toolDef.schema as z.ZodType).safeParse(args);\n          if (!parseResult.success) {\n            const issues = parseResult.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ');\n            return {\n              content: [{ type: 'text' as const, text: JSON.stringify({ success: false, error: `Invalid input: ${issues}` }) }],\n              isError: true,\n            };\n          }\n          const validatedArgs = parseResult.data;\n\n          // Execute the tool handler through the shared runtime so MCP calls have\n          // consistent timeout, cancellation, progress, and requestContext plumbing.\n          const result = await invokeToolRuntime({\n            toolName,\n            tool: requestTool,\n            context,\n            query: validatedArgs,\n            signal: ctx.mcpReq.signal,\n            traceEmitter: createMcpTraceEmitter(toolName, ctx),\n          });\n\n          const { text: sanitizedText, isError: toolIsError } = sanitizeMcpResult(result);\n\n          // Slice 5: decision questions post-processing for discover_opportunities only.\n          if (toolName === \"discover_opportunities\" && !toolIsError) {\n            const questions = extractDecisionQuestions(sanitizedText);\n            if (questions) {\n              const envelopeBlock = {\n                type: \"text\" as const,\n                text: renderQuestionsEnvelope(questions),\n              };\n\n              const supportsElicitation =\n                !!server.server.getClientCapabilities()?.elicitation;\n\n              // Capture into a local const so TS preserves the narrowing\n              // inside the callback below. Optional chains don't survive\n              // across closure boundaries under strict mode.\n              const elicitInput = ctx.mcpReq?.elicitInput;\n\n              if (supportsElicitation && elicitInput) {\n                // Sequential — never parallel (day-one rule). We await the loop\n                // before returning the tool result so test harnesses can observe\n                // the dispatched calls deterministically.\n                await dispatchElicitations({\n                  userId,\n                  questions,\n                  elicitInput: (params) => elicitInput(params),\n                  chatMessageWriter: deps.chatMessageWriter,\n                });\n              }\n\n              return {\n                content: [\n                  { type: \"text\" as const, text: sanitizedText },\n                  envelopeBlock,\n                ],\n                ...(toolIsError ? { isError: true } : {}),\n              };\n            }\n          }\n\n          return {\n            content: [{ type: 'text' as const, text: sanitizedText }],\n            ...(toolIsError ? { isError: true } : {}),\n          };\n        } catch (err) {\n          const message = err instanceof Error ? err.message : String(err);\n          logger.error(`MCP tool \"${toolName}\" failed`, { error: message });\n          if (shouldReportMcpToolError(err)) {\n            reportDeps.reportToolError?.(err, {\n              subsystem: 'mcp',\n              operation: 'mcp.tool',\n              toolName,\n              userId: reportUserId,\n              tags: {\n                transport: 'mcp',\n                toolName,\n              },\n              context: {\n                agentId: reportContext?.agentId,\n                networkId: reportContext?.networkId,\n                indexScope: reportContext?.indexScope,\n              },\n            });\n          }\n          const runtimeResult = toolRuntimeErrorToResult(err);\n          return {\n            content: [{ type: 'text' as const, text: runtimeResult ?? JSON.stringify({ error: message }) }],\n            isError: true,\n          };\n        }\n      },\n    );\n  }\n\n  logger.verbose(`MCP server created with ${toolMetadata.length} tools`);\n  return server;\n}\n"]}

package/dist/network/network.graph.js

@@ -50,8 +50,8 @@ export class NetworkGraphFactory {
                     ]);
                     // If index-scoped and not showAll, return just that index plus the
                     // user's personal index (their contacts). The personal index is part
-                    // of every scope — `computeAgentIndexScope` keeps it reachable for
-                    // network-bound agents, and a user clicked into a community-scoped
+                    // of every allowed-network reach calculation for network-bound agents,
+                    // and a user clicked into a community-scoped
                     // chat still owns their contact list — so surfacing it here keeps
                     // tools that operate on the personal index (add_contact, list_contacts,
                     // import_*_contacts) discoverable. Other community memberships are

package/dist/network/network.graph.js.map

@@ -1 +1 @@
-{"version":3,"file":"network.graph.js","sourceRoot":"/","sources":["network/network.graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAG9D,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,MAAM,wCAAwC,CAAC;AAE/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,MAAM,GAAG,cAAc,CAAC,qBAAqB,CAAC,CAAC;AAErD;;;;;;;;;GASG;AACH,MAAM,OAAO,mBAAmB;IAC9B,YAAoB,QAA8B;QAA9B,aAAQ,GAAR,QAAQ,CAAsB;IAAG,CAAC;IAE/C,WAAW;QAChB,2BAA2B;QAE3B;;WAEG;QACH,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAqC,EAAE,EAAE;YAC/D,OAAO,KAAK,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;gBAC3C,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAE7G,kEAAkE;gBAClE,MAAM,iBAAiB,GAAG,CAAC,CAA0E,EAAE,EAAE,CAAC,CAAC;oBACzG,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,KAAK,EAAE,CAAC,CAAC,YAAY;oBACrB,MAAM,EAAE,CAAC,CAAC,WAAW;oBACrB,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;iBACrB,CAAC,CAAC;gBACH,MAAM,YAAY,GAAG,CAAC,CAAoE,EAAE,EAAE,CAAC,CAAC;oBAC9F,SAAS,EAAE,CAAC,CAAC,EAAE;oBACf,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,UAAU,EAAE,CAAC,CAAC,WAAW,CAAC,UAAU;iBACrC,CAAC,CAAC;gBAEH,IAAI,CAAC;oBACH,MAAM,CAAC,cAAc,EAAE,YAAY,EAAE,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;wBAC5E,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC;wBACjD,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;wBAC3C,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC;qBACtD,CAAC,CAAC;oBAEH,mEAAmE;oBACnE,qEAAqE;oBACrE,mEAAmE;oBACnE,mEAAmE;oBACnE,kEAAkE;oBAClE,wEAAwE;oBACxE,mEAAmE;oBACnE,iDAAiD;oBACjD,MAAM,mBAAmB,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;oBAC9D,IAAI,mBAAmB,EAAE,CAAC;wBACxB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAU,CAAC;wBACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;wBAC9E,IAAI,CAAC,QAAQ,EAAE,CAAC;4BACd,OAAO;gCACL,UAAU,EAAE;oCACV,QAAQ,EAAE,EAAE;oCACZ,IAAI,EAAE,EAAE;oCACR,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,4CAA4C,EAAE;iCACnG;6BACF,CAAC;wBACJ,CAAC;wBACD,MAAM,gBAAgB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;wBAC/E,MAAM,kBAAkB,GAAG,gBAAgB,EAAE,UAAU;4BACrD,CAAC,CAAC,SAAS;4BACX,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;wBAC7C,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;wBACjE,MAAM,aAAa,GAAG,kBAAkB;4BACtC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,kBAAkB,CAAC,SAAS,CAAC;4BACjE,CAAC,CAAC,SAAS,CAAC;wBACd,MAAM,QAAQ,GAAG;4BACf,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;4BAClE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;yBACvE,CAAC;wBACF,MAAM,IAAI,GAAG;4BACX,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;4BACnD,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;yBACxD,CAAC;wBACF,OAAO;4BACL,UAAU,EAAE;gCACV,QAAQ;gCACR,IAAI;gCACJ,KAAK,EAAE;oCACL,aAAa,EAAE,QAAQ,CAAC,MAAM;oCAC9B,SAAS,EAAE,IAAI,CAAC,MAAM;oCACtB,SAAS,EAAE,mFAAmF;iCAC/F;6BACF;yBACF,CAAC;oBACJ,CAAC;oBAED,4CAA4C;oBAC5C,MAAM,cAAc,GAAG,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBAChE,SAAS,EAAE,GAAG,CAAC,EAAE;wBACjB,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,WAAW,EAAE,GAAG,CAAC,WAAW;wBAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;qBACjB,CAAC,CAAC,CAAC;oBAEJ,OAAO;wBACL,UAAU,EAAE;4BACV,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,iBAAiB,CAAC;4BAC/C,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;4BACpC,cAAc;4BACd,KAAK,EAAE,EAAE,aAAa,EAAE,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,MAAM,EAAE,mBAAmB,EAAE,cAAc,CAAC,MAAM,EAAE;yBAC5H;qBACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBACpD,OAAO,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;gBAC3D,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF;;WAEG;QACH,MAAM,UAAU,GAAG,KAAK,EAAE,KAAqC,EAAE,EAAE;YACjE,OAAO,KAAK,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;gBAC7C,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;gBAEzF,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;oBACtC,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC;gBAC7E,CAAC;gBAED,IAAI,cAAkC,CAAC;gBACvC,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;wBAC9C,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE;wBACrC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS;wBACrD,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ,IAAI,SAAS;wBACjD,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU;qBACzC,CAAC,CAAC;oBACH,cAAc,GAAG,KAAK,CAAC,EAAE,CAAC;oBAE1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBACtF,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;wBACnB,MAAM,CAAC,KAAK,CAAC,yDAAyD,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;wBACjG,IAAI,CAAC;4BAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAA,CAAC;wBACjE,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sDAAsD,EAAE,EAAE,CAAC;oBAC/G,CAAC;oBAED,OAAO;wBACL,cAAc,EAAE;4BACd,OAAO,EAAE,IAAI;4BACb,SAAS,EAAE,KAAK,CAAC,EAAE;4BACnB,KAAK,EAAE,KAAK,CAAC,KAAK;4BAClB,OAAO,EAAE,YAAY,KAAK,CAAC,KAAK,+BAA+B;yBAChE;qBACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBACpD,IAAI,cAAc,EAAE,CAAC;wBACnB,IAAI,CAAC;4BAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAA,CAAC;oBACzE,CAAC;oBACD,OAAO;wBACL,cAAc,EAAE;4BACd,OAAO,EAAE,KAAK;4BACd,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B;yBACxE;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF;;WAEG;QACH,MAAM,UAAU,GAAG,KAAK,EAAE,KAAqC,EAAE,EAAE;YACjE,OAAO,KAAK,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;gBAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;gBAClC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;gBAEpG,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,CAAC;gBAC5F,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC1E,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,EAAE,CAAC;oBAChG,CAAC;oBAED,MAAM,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;oBAE1F,OAAO;wBACL,cAAc,EAAE;4BACd,OAAO,EAAE,IAAI;4BACb,SAAS;4BACT,OAAO,EAAE,2BAA2B;yBACrC;qBACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBACpD,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,CAAC;gBACpF,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF;;WAEG;QACH,MAAM,UAAU,GAAG,KAAK,EAAE,KAAqC,EAAE,EAAE;YACjE,OAAO,KAAK,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;gBAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;gBAClC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBAEpE,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,CAAC;gBAC5F,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC1E,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,EAAE,CAAC;oBAChG,CAAC;oBAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;oBACnE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;wBACd,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iEAAiE,EAAE,EAAE,CAAC;oBAC1H,CAAC;oBAED,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;oBAEjD,OAAO;wBACL,cAAc,EAAE;4BACd,OAAO,EAAE,IAAI;4BACb,SAAS;4BACT,OAAO,EAAE,kBAAkB;yBAC5B;qBACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBACpD,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,CAAC;gBACpF,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,8BAA8B;QAE9B,MAAM,WAAW,GAAG,CAAC,KAAqC,EAAU,EAAE;YACpE,QAAQ,KAAK,CAAC,aAAa,EAAE,CAAC;gBAC5B,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;gBAC/B,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC;gBAC3B,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;gBAC/B,KAAK,QAAQ,CAAC,CAAC,OAAO,YAAY,CAAC;gBACnC,OAAO,CAAC,CAAC,OAAO,MAAM,CAAC;YACzB,CAAC;QACH,CAAC,CAAC;QAEF,yBAAyB;QAEzB,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,iBAAiB,CAAC;aAC/C,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;aACzB,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC;aAC7B,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC;aAC7B,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC;aACjC,mBAAmB,CAAC,KAAK,EAAE,WAAW,EAAE;YACvC,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,YAAY;SACzB,CAAC;aACD,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;aACpB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;aACtB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;aACtB,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAE9B,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;CACF","sourcesContent":["import { StateGraph, START, END } from \"@langchain/langgraph\";\n\nimport { NetworkGraphDatabase } from \"../shared/interfaces/database.interface.js\";\nimport { protocolLogger } from \"../shared/observability/protocol.logger.js\";\nimport { timed } from \"../shared/observability/performance.js\";\n\nimport { NetworkGraphState } from \"./network.state.js\";\n\nconst logger = protocolLogger(\"NetworkGraphFactory\");\n\n/**\n * Factory class to build and compile the Index (CRUD) Graph.\n *\n * Handles create, read, update, and delete operations for indexes.\n * Membership and intent-index assignment operations are handled by\n * separate graphs (NetworkMembershipGraph and IntentNetworkGraph).\n *\n * Flow:\n * START → routerNode → {createNode | readNode | updateNode | deleteNode} → END\n */\nexport class NetworkGraphFactory {\n  constructor(private database: NetworkGraphDatabase) {}\n\n  public createGraph() {\n    // --- NODE DEFINITIONS ---\n\n    /**\n     * Read Node: List indexes the user belongs to and owns.\n     */\n    const readNode = async (state: typeof NetworkGraphState.State) => {\n      return timed(\"NetworkGraph.read\", async () => {\n        logger.verbose(\"Read indexes\", { userId: state.userId, networkId: state.networkId, showAll: state.showAll });\n\n        // Shared projections for both the scoped and unscoped read paths.\n        const projectMembership = (m: Awaited<ReturnType<typeof this.database.getNetworkMemberships>>[number]) => ({\n          networkId: m.networkId,\n          title: m.networkTitle,\n          prompt: m.indexPrompt,\n          autoAssign: m.autoAssign,\n          isPersonal: m.isPersonal,\n          joinedAt: m.joinedAt,\n        });\n        const projectOwned = (o: Awaited<ReturnType<typeof this.database.getOwnedIndexes>>[number]) => ({\n          networkId: o.id,\n          title: o.title,\n          prompt: o.prompt,\n          memberCount: o.memberCount,\n          intentCount: o.intentCount,\n          joinPolicy: o.permissions.joinPolicy,\n        });\n\n        try {\n          const [allMemberships, ownedIndexes, publicIndexesResult] = await Promise.all([\n            this.database.getNetworkMemberships(state.userId),\n            this.database.getOwnedIndexes(state.userId),\n            this.database.getPublicIndexesNotJoined(state.userId),\n          ]);\n\n          // If index-scoped and not showAll, return just that index plus the\n          // user's personal index (their contacts). The personal index is part\n          // of every scope — `computeAgentIndexScope` keeps it reachable for\n          // network-bound agents, and a user clicked into a community-scoped\n          // chat still owns their contact list — so surfacing it here keeps\n          // tools that operate on the personal index (add_contact, list_contacts,\n          // import_*_contacts) discoverable. Other community memberships are\n          // still hidden, and `publicNetworks` is omitted.\n          const scopeToCurrentIndex = state.networkId && !state.showAll;\n          if (scopeToCurrentIndex) {\n            const networkId = state.networkId!;\n            const isMember = await this.database.isNetworkMember(networkId, state.userId);\n            if (!isMember) {\n              return {\n                readResult: {\n                  memberOf: [],\n                  owns: [],\n                  stats: { memberOfCount: 0, ownsCount: 0, scopeNote: \"Network not found or you are not a member.\" },\n                },\n              };\n            }\n            const scopedMembership = allMemberships.find((m) => m.networkId === networkId);\n            const personalMembership = scopedMembership?.isPersonal\n              ? undefined\n              : allMemberships.find((m) => m.isPersonal);\n            const scopedOwned = ownedIndexes.find((o) => o.id === networkId);\n            const personalOwned = personalMembership\n              ? ownedIndexes.find((o) => o.id === personalMembership.networkId)\n              : undefined;\n            const memberOf = [\n              ...(scopedMembership ? [projectMembership(scopedMembership)] : []),\n              ...(personalMembership ? [projectMembership(personalMembership)] : []),\n            ];\n            const owns = [\n              ...(scopedOwned ? [projectOwned(scopedOwned)] : []),\n              ...(personalOwned ? [projectOwned(personalOwned)] : []),\n            ];\n            return {\n              readResult: {\n                memberOf,\n                owns,\n                stats: {\n                  memberOfCount: memberOf.length,\n                  ownsCount: owns.length,\n                  scopeNote: \"Showing current index and your personal index. Use showAll: true for all indexes.\",\n                },\n              },\n            };\n          }\n\n          // Include public networks available to join\n          const publicNetworks = publicIndexesResult.networks.map((idx) => ({\n            networkId: idx.id,\n            title: idx.title,\n            prompt: idx.prompt,\n            memberCount: idx.memberCount,\n            owner: idx.owner,\n          }));\n\n          return {\n            readResult: {\n              memberOf: allMemberships.map(projectMembership),\n              owns: ownedIndexes.map(projectOwned),\n              publicNetworks,\n              stats: { memberOfCount: allMemberships.length, ownsCount: ownedIndexes.length, publicNetworksCount: publicNetworks.length },\n            },\n          };\n        } catch (err) {\n          logger.error(\"Read indexes failed\", { error: err });\n          return { error: \"Failed to fetch network information.\" };\n        }\n      });\n    };\n\n    /**\n     * Create Node: Create a new index and add user as owner.\n     */\n    const createNode = async (state: typeof NetworkGraphState.State) => {\n      return timed(\"NetworkGraph.create\", async () => {\n        logger.verbose(\"Create index\", { userId: state.userId, createInput: state.createInput });\n\n        if (!state.createInput?.title?.trim()) {\n          return { mutationResult: { success: false, error: \"Title is required.\" } };\n        }\n\n        let createdIndexId: string | undefined;\n        try {\n          const index = await this.database.createNetwork({\n            title: state.createInput.title.trim(),\n            prompt: state.createInput.prompt?.trim() || undefined,\n            imageUrl: state.createInput.imageUrl ?? undefined,\n            joinPolicy: state.createInput.joinPolicy,\n          });\n          createdIndexId = index.id;\n\n          const added = await this.database.addMemberToNetwork(index.id, state.userId, 'owner');\n          if (!added.success) {\n            logger.error(\"addMemberToNetwork failed; cleaning up orphaned network\", { networkId: index.id });\n            try { await this.database.softDeleteNetwork(index.id); } catch {}\n            return { mutationResult: { success: false, error: \"Failed to set you as owner. Network was not created.\" } };\n          }\n\n          return {\n            mutationResult: {\n              success: true,\n              networkId: index.id,\n              title: index.title,\n              message: `Network \"${index.title}\" created. You are the owner.`,\n            },\n          };\n        } catch (err) {\n          logger.error(\"Create index failed\", { error: err });\n          if (createdIndexId) {\n            try { await this.database.softDeleteNetwork(createdIndexId); } catch {}\n          }\n          return {\n            mutationResult: {\n              success: false,\n              error: err instanceof Error ? err.message : \"Failed to create network.\",\n            },\n          };\n        }\n      });\n    };\n\n    /**\n     * Update Node: Update index settings (owner only).\n     */\n    const updateNode = async (state: typeof NetworkGraphState.State) => {\n      return timed(\"NetworkGraph.update\", async () => {\n        const networkId = state.networkId;\n        logger.verbose(\"Update index\", { userId: state.userId, networkId, updateInput: state.updateInput });\n\n        if (!networkId) {\n          return { mutationResult: { success: false, error: \"networkId is required for update.\" } };\n        }\n\n        try {\n          const isOwner = await this.database.isIndexOwner(networkId, state.userId);\n          if (!isOwner) {\n            return { mutationResult: { success: false, error: \"You can only modify networks you own.\" } };\n          }\n\n          await this.database.updateIndexSettings(networkId, state.userId, state.updateInput ?? {});\n\n          return {\n            mutationResult: {\n              success: true,\n              networkId,\n              message: \"Network settings updated.\",\n            },\n          };\n        } catch (err) {\n          logger.error(\"Update index failed\", { error: err });\n          return { mutationResult: { success: false, error: \"Failed to update network.\" } };\n        }\n      });\n    };\n\n    /**\n     * Delete Node: Soft-delete an index (owner only, sole member).\n     */\n    const deleteNode = async (state: typeof NetworkGraphState.State) => {\n      return timed(\"NetworkGraph.delete\", async () => {\n        const networkId = state.networkId;\n        logger.verbose(\"Delete index\", { userId: state.userId, networkId });\n\n        if (!networkId) {\n          return { mutationResult: { success: false, error: \"networkId is required for delete.\" } };\n        }\n\n        try {\n          const isOwner = await this.database.isIndexOwner(networkId, state.userId);\n          if (!isOwner) {\n            return { mutationResult: { success: false, error: \"You can only delete networks you own.\" } };\n          }\n\n          const count = await this.database.getNetworkMemberCount(networkId);\n          if (count > 1) {\n            return { mutationResult: { success: false, error: \"Cannot delete network with other members. Remove members first.\" } };\n          }\n\n          await this.database.softDeleteNetwork(networkId);\n\n          return {\n            mutationResult: {\n              success: true,\n              networkId,\n              message: \"Network deleted.\",\n            },\n          };\n        } catch (err) {\n          logger.error(\"Delete index failed\", { error: err });\n          return { mutationResult: { success: false, error: \"Failed to delete network.\" } };\n        }\n      });\n    };\n\n    // --- CONDITIONAL ROUTING ---\n\n    const routeByMode = (state: typeof NetworkGraphState.State): string => {\n      switch (state.operationMode) {\n        case 'create': return 'create';\n        case 'read': return 'read';\n        case 'update': return 'update';\n        case 'delete': return 'delete_idx';\n        default: return 'read';\n      }\n    };\n\n    // --- GRAPH ASSEMBLY ---\n\n    const workflow = new StateGraph(NetworkGraphState)\n      .addNode(\"read\", readNode)\n      .addNode(\"create\", createNode)\n      .addNode(\"update\", updateNode)\n      .addNode(\"delete_idx\", deleteNode)\n      .addConditionalEdges(START, routeByMode, {\n        read: \"read\",\n        create: \"create\",\n        update: \"update\",\n        delete_idx: \"delete_idx\",\n      })\n      .addEdge(\"read\", END)\n      .addEdge(\"create\", END)\n      .addEdge(\"update\", END)\n      .addEdge(\"delete_idx\", END);\n\n    return workflow.compile();\n  }\n}\n"]}
+{"version":3,"file":"network.graph.js","sourceRoot":"/","sources":["network/network.graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAG9D,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,MAAM,wCAAwC,CAAC;AAE/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,MAAM,GAAG,cAAc,CAAC,qBAAqB,CAAC,CAAC;AAErD;;;;;;;;;GASG;AACH,MAAM,OAAO,mBAAmB;IAC9B,YAAoB,QAA8B;QAA9B,aAAQ,GAAR,QAAQ,CAAsB;IAAG,CAAC;IAE/C,WAAW;QAChB,2BAA2B;QAE3B;;WAEG;QACH,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAqC,EAAE,EAAE;YAC/D,OAAO,KAAK,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;gBAC3C,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAE7G,kEAAkE;gBAClE,MAAM,iBAAiB,GAAG,CAAC,CAA0E,EAAE,EAAE,CAAC,CAAC;oBACzG,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,KAAK,EAAE,CAAC,CAAC,YAAY;oBACrB,MAAM,EAAE,CAAC,CAAC,WAAW;oBACrB,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;iBACrB,CAAC,CAAC;gBACH,MAAM,YAAY,GAAG,CAAC,CAAoE,EAAE,EAAE,CAAC,CAAC;oBAC9F,SAAS,EAAE,CAAC,CAAC,EAAE;oBACf,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,UAAU,EAAE,CAAC,CAAC,WAAW,CAAC,UAAU;iBACrC,CAAC,CAAC;gBAEH,IAAI,CAAC;oBACH,MAAM,CAAC,cAAc,EAAE,YAAY,EAAE,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;wBAC5E,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC;wBACjD,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;wBAC3C,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC;qBACtD,CAAC,CAAC;oBAEH,mEAAmE;oBACnE,qEAAqE;oBACrE,uEAAuE;oBACvE,6CAA6C;oBAC7C,kEAAkE;oBAClE,wEAAwE;oBACxE,mEAAmE;oBACnE,iDAAiD;oBACjD,MAAM,mBAAmB,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;oBAC9D,IAAI,mBAAmB,EAAE,CAAC;wBACxB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAU,CAAC;wBACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;wBAC9E,IAAI,CAAC,QAAQ,EAAE,CAAC;4BACd,OAAO;gCACL,UAAU,EAAE;oCACV,QAAQ,EAAE,EAAE;oCACZ,IAAI,EAAE,EAAE;oCACR,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,4CAA4C,EAAE;iCACnG;6BACF,CAAC;wBACJ,CAAC;wBACD,MAAM,gBAAgB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;wBAC/E,MAAM,kBAAkB,GAAG,gBAAgB,EAAE,UAAU;4BACrD,CAAC,CAAC,SAAS;4BACX,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;wBAC7C,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;wBACjE,MAAM,aAAa,GAAG,kBAAkB;4BACtC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,kBAAkB,CAAC,SAAS,CAAC;4BACjE,CAAC,CAAC,SAAS,CAAC;wBACd,MAAM,QAAQ,GAAG;4BACf,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;4BAClE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;yBACvE,CAAC;wBACF,MAAM,IAAI,GAAG;4BACX,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;4BACnD,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;yBACxD,CAAC;wBACF,OAAO;4BACL,UAAU,EAAE;gCACV,QAAQ;gCACR,IAAI;gCACJ,KAAK,EAAE;oCACL,aAAa,EAAE,QAAQ,CAAC,MAAM;oCAC9B,SAAS,EAAE,IAAI,CAAC,MAAM;oCACtB,SAAS,EAAE,mFAAmF;iCAC/F;6BACF;yBACF,CAAC;oBACJ,CAAC;oBAED,4CAA4C;oBAC5C,MAAM,cAAc,GAAG,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBAChE,SAAS,EAAE,GAAG,CAAC,EAAE;wBACjB,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,WAAW,EAAE,GAAG,CAAC,WAAW;wBAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;qBACjB,CAAC,CAAC,CAAC;oBAEJ,OAAO;wBACL,UAAU,EAAE;4BACV,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,iBAAiB,CAAC;4BAC/C,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;4BACpC,cAAc;4BACd,KAAK,EAAE,EAAE,aAAa,EAAE,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,MAAM,EAAE,mBAAmB,EAAE,cAAc,CAAC,MAAM,EAAE;yBAC5H;qBACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBACpD,OAAO,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;gBAC3D,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF;;WAEG;QACH,MAAM,UAAU,GAAG,KAAK,EAAE,KAAqC,EAAE,EAAE;YACjE,OAAO,KAAK,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;gBAC7C,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;gBAEzF,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;oBACtC,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC;gBAC7E,CAAC;gBAED,IAAI,cAAkC,CAAC;gBACvC,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;wBAC9C,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE;wBACrC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS;wBACrD,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ,IAAI,SAAS;wBACjD,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU;qBACzC,CAAC,CAAC;oBACH,cAAc,GAAG,KAAK,CAAC,EAAE,CAAC;oBAE1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBACtF,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;wBACnB,MAAM,CAAC,KAAK,CAAC,yDAAyD,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;wBACjG,IAAI,CAAC;4BAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAA,CAAC;wBACjE,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sDAAsD,EAAE,EAAE,CAAC;oBAC/G,CAAC;oBAED,OAAO;wBACL,cAAc,EAAE;4BACd,OAAO,EAAE,IAAI;4BACb,SAAS,EAAE,KAAK,CAAC,EAAE;4BACnB,KAAK,EAAE,KAAK,CAAC,KAAK;4BAClB,OAAO,EAAE,YAAY,KAAK,CAAC,KAAK,+BAA+B;yBAChE;qBACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBACpD,IAAI,cAAc,EAAE,CAAC;wBACnB,IAAI,CAAC;4BAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAA,CAAC;oBACzE,CAAC;oBACD,OAAO;wBACL,cAAc,EAAE;4BACd,OAAO,EAAE,KAAK;4BACd,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B;yBACxE;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF;;WAEG;QACH,MAAM,UAAU,GAAG,KAAK,EAAE,KAAqC,EAAE,EAAE;YACjE,OAAO,KAAK,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;gBAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;gBAClC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;gBAEpG,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,CAAC;gBAC5F,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC1E,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,EAAE,CAAC;oBAChG,CAAC;oBAED,MAAM,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;oBAE1F,OAAO;wBACL,cAAc,EAAE;4BACd,OAAO,EAAE,IAAI;4BACb,SAAS;4BACT,OAAO,EAAE,2BAA2B;yBACrC;qBACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBACpD,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,CAAC;gBACpF,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF;;WAEG;QACH,MAAM,UAAU,GAAG,KAAK,EAAE,KAAqC,EAAE,EAAE;YACjE,OAAO,KAAK,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;gBAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;gBAClC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBAEpE,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,CAAC;gBAC5F,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC1E,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,EAAE,CAAC;oBAChG,CAAC;oBAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;oBACnE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;wBACd,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iEAAiE,EAAE,EAAE,CAAC;oBAC1H,CAAC;oBAED,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;oBAEjD,OAAO;wBACL,cAAc,EAAE;4BACd,OAAO,EAAE,IAAI;4BACb,SAAS;4BACT,OAAO,EAAE,kBAAkB;yBAC5B;qBACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBACpD,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,CAAC;gBACpF,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,8BAA8B;QAE9B,MAAM,WAAW,GAAG,CAAC,KAAqC,EAAU,EAAE;YACpE,QAAQ,KAAK,CAAC,aAAa,EAAE,CAAC;gBAC5B,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;gBAC/B,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC;gBAC3B,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;gBAC/B,KAAK,QAAQ,CAAC,CAAC,OAAO,YAAY,CAAC;gBACnC,OAAO,CAAC,CAAC,OAAO,MAAM,CAAC;YACzB,CAAC;QACH,CAAC,CAAC;QAEF,yBAAyB;QAEzB,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,iBAAiB,CAAC;aAC/C,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;aACzB,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC;aAC7B,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC;aAC7B,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC;aACjC,mBAAmB,CAAC,KAAK,EAAE,WAAW,EAAE;YACvC,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,YAAY;SACzB,CAAC;aACD,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;aACpB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;aACtB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;aACtB,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAE9B,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;CACF","sourcesContent":["import { StateGraph, START, END } from \"@langchain/langgraph\";\n\nimport { NetworkGraphDatabase } from \"../shared/interfaces/database.interface.js\";\nimport { protocolLogger } from \"../shared/observability/protocol.logger.js\";\nimport { timed } from \"../shared/observability/performance.js\";\n\nimport { NetworkGraphState } from \"./network.state.js\";\n\nconst logger = protocolLogger(\"NetworkGraphFactory\");\n\n/**\n * Factory class to build and compile the Index (CRUD) Graph.\n *\n * Handles create, read, update, and delete operations for indexes.\n * Membership and intent-index assignment operations are handled by\n * separate graphs (NetworkMembershipGraph and IntentNetworkGraph).\n *\n * Flow:\n * START → routerNode → {createNode | readNode | updateNode | deleteNode} → END\n */\nexport class NetworkGraphFactory {\n  constructor(private database: NetworkGraphDatabase) {}\n\n  public createGraph() {\n    // --- NODE DEFINITIONS ---\n\n    /**\n     * Read Node: List indexes the user belongs to and owns.\n     */\n    const readNode = async (state: typeof NetworkGraphState.State) => {\n      return timed(\"NetworkGraph.read\", async () => {\n        logger.verbose(\"Read indexes\", { userId: state.userId, networkId: state.networkId, showAll: state.showAll });\n\n        // Shared projections for both the scoped and unscoped read paths.\n        const projectMembership = (m: Awaited<ReturnType<typeof this.database.getNetworkMemberships>>[number]) => ({\n          networkId: m.networkId,\n          title: m.networkTitle,\n          prompt: m.indexPrompt,\n          autoAssign: m.autoAssign,\n          isPersonal: m.isPersonal,\n          joinedAt: m.joinedAt,\n        });\n        const projectOwned = (o: Awaited<ReturnType<typeof this.database.getOwnedIndexes>>[number]) => ({\n          networkId: o.id,\n          title: o.title,\n          prompt: o.prompt,\n          memberCount: o.memberCount,\n          intentCount: o.intentCount,\n          joinPolicy: o.permissions.joinPolicy,\n        });\n\n        try {\n          const [allMemberships, ownedIndexes, publicIndexesResult] = await Promise.all([\n            this.database.getNetworkMemberships(state.userId),\n            this.database.getOwnedIndexes(state.userId),\n            this.database.getPublicIndexesNotJoined(state.userId),\n          ]);\n\n          // If index-scoped and not showAll, return just that index plus the\n          // user's personal index (their contacts). The personal index is part\n          // of every allowed-network reach calculation for network-bound agents,\n          // and a user clicked into a community-scoped\n          // chat still owns their contact list — so surfacing it here keeps\n          // tools that operate on the personal index (add_contact, list_contacts,\n          // import_*_contacts) discoverable. Other community memberships are\n          // still hidden, and `publicNetworks` is omitted.\n          const scopeToCurrentIndex = state.networkId && !state.showAll;\n          if (scopeToCurrentIndex) {\n            const networkId = state.networkId!;\n            const isMember = await this.database.isNetworkMember(networkId, state.userId);\n            if (!isMember) {\n              return {\n                readResult: {\n                  memberOf: [],\n                  owns: [],\n                  stats: { memberOfCount: 0, ownsCount: 0, scopeNote: \"Network not found or you are not a member.\" },\n                },\n              };\n            }\n            const scopedMembership = allMemberships.find((m) => m.networkId === networkId);\n            const personalMembership = scopedMembership?.isPersonal\n              ? undefined\n              : allMemberships.find((m) => m.isPersonal);\n            const scopedOwned = ownedIndexes.find((o) => o.id === networkId);\n            const personalOwned = personalMembership\n              ? ownedIndexes.find((o) => o.id === personalMembership.networkId)\n              : undefined;\n            const memberOf = [\n              ...(scopedMembership ? [projectMembership(scopedMembership)] : []),\n              ...(personalMembership ? [projectMembership(personalMembership)] : []),\n            ];\n            const owns = [\n              ...(scopedOwned ? [projectOwned(scopedOwned)] : []),\n              ...(personalOwned ? [projectOwned(personalOwned)] : []),\n            ];\n            return {\n              readResult: {\n                memberOf,\n                owns,\n                stats: {\n                  memberOfCount: memberOf.length,\n                  ownsCount: owns.length,\n                  scopeNote: \"Showing current index and your personal index. Use showAll: true for all indexes.\",\n                },\n              },\n            };\n          }\n\n          // Include public networks available to join\n          const publicNetworks = publicIndexesResult.networks.map((idx) => ({\n            networkId: idx.id,\n            title: idx.title,\n            prompt: idx.prompt,\n            memberCount: idx.memberCount,\n            owner: idx.owner,\n          }));\n\n          return {\n            readResult: {\n              memberOf: allMemberships.map(projectMembership),\n              owns: ownedIndexes.map(projectOwned),\n              publicNetworks,\n              stats: { memberOfCount: allMemberships.length, ownsCount: ownedIndexes.length, publicNetworksCount: publicNetworks.length },\n            },\n          };\n        } catch (err) {\n          logger.error(\"Read indexes failed\", { error: err });\n          return { error: \"Failed to fetch network information.\" };\n        }\n      });\n    };\n\n    /**\n     * Create Node: Create a new index and add user as owner.\n     */\n    const createNode = async (state: typeof NetworkGraphState.State) => {\n      return timed(\"NetworkGraph.create\", async () => {\n        logger.verbose(\"Create index\", { userId: state.userId, createInput: state.createInput });\n\n        if (!state.createInput?.title?.trim()) {\n          return { mutationResult: { success: false, error: \"Title is required.\" } };\n        }\n\n        let createdIndexId: string | undefined;\n        try {\n          const index = await this.database.createNetwork({\n            title: state.createInput.title.trim(),\n            prompt: state.createInput.prompt?.trim() || undefined,\n            imageUrl: state.createInput.imageUrl ?? undefined,\n            joinPolicy: state.createInput.joinPolicy,\n          });\n          createdIndexId = index.id;\n\n          const added = await this.database.addMemberToNetwork(index.id, state.userId, 'owner');\n          if (!added.success) {\n            logger.error(\"addMemberToNetwork failed; cleaning up orphaned network\", { networkId: index.id });\n            try { await this.database.softDeleteNetwork(index.id); } catch {}\n            return { mutationResult: { success: false, error: \"Failed to set you as owner. Network was not created.\" } };\n          }\n\n          return {\n            mutationResult: {\n              success: true,\n              networkId: index.id,\n              title: index.title,\n              message: `Network \"${index.title}\" created. You are the owner.`,\n            },\n          };\n        } catch (err) {\n          logger.error(\"Create index failed\", { error: err });\n          if (createdIndexId) {\n            try { await this.database.softDeleteNetwork(createdIndexId); } catch {}\n          }\n          return {\n            mutationResult: {\n              success: false,\n              error: err instanceof Error ? err.message : \"Failed to create network.\",\n            },\n          };\n        }\n      });\n    };\n\n    /**\n     * Update Node: Update index settings (owner only).\n     */\n    const updateNode = async (state: typeof NetworkGraphState.State) => {\n      return timed(\"NetworkGraph.update\", async () => {\n        const networkId = state.networkId;\n        logger.verbose(\"Update index\", { userId: state.userId, networkId, updateInput: state.updateInput });\n\n        if (!networkId) {\n          return { mutationResult: { success: false, error: \"networkId is required for update.\" } };\n        }\n\n        try {\n          const isOwner = await this.database.isIndexOwner(networkId, state.userId);\n          if (!isOwner) {\n            return { mutationResult: { success: false, error: \"You can only modify networks you own.\" } };\n          }\n\n          await this.database.updateIndexSettings(networkId, state.userId, state.updateInput ?? {});\n\n          return {\n            mutationResult: {\n              success: true,\n              networkId,\n              message: \"Network settings updated.\",\n            },\n          };\n        } catch (err) {\n          logger.error(\"Update index failed\", { error: err });\n          return { mutationResult: { success: false, error: \"Failed to update network.\" } };\n        }\n      });\n    };\n\n    /**\n     * Delete Node: Soft-delete an index (owner only, sole member).\n     */\n    const deleteNode = async (state: typeof NetworkGraphState.State) => {\n      return timed(\"NetworkGraph.delete\", async () => {\n        const networkId = state.networkId;\n        logger.verbose(\"Delete index\", { userId: state.userId, networkId });\n\n        if (!networkId) {\n          return { mutationResult: { success: false, error: \"networkId is required for delete.\" } };\n        }\n\n        try {\n          const isOwner = await this.database.isIndexOwner(networkId, state.userId);\n          if (!isOwner) {\n            return { mutationResult: { success: false, error: \"You can only delete networks you own.\" } };\n          }\n\n          const count = await this.database.getNetworkMemberCount(networkId);\n          if (count > 1) {\n            return { mutationResult: { success: false, error: \"Cannot delete network with other members. Remove members first.\" } };\n          }\n\n          await this.database.softDeleteNetwork(networkId);\n\n          return {\n            mutationResult: {\n              success: true,\n              networkId,\n              message: \"Network deleted.\",\n            },\n          };\n        } catch (err) {\n          logger.error(\"Delete index failed\", { error: err });\n          return { mutationResult: { success: false, error: \"Failed to delete network.\" } };\n        }\n      });\n    };\n\n    // --- CONDITIONAL ROUTING ---\n\n    const routeByMode = (state: typeof NetworkGraphState.State): string => {\n      switch (state.operationMode) {\n        case 'create': return 'create';\n        case 'read': return 'read';\n        case 'update': return 'update';\n        case 'delete': return 'delete_idx';\n        default: return 'read';\n      }\n    };\n\n    // --- GRAPH ASSEMBLY ---\n\n    const workflow = new StateGraph(NetworkGraphState)\n      .addNode(\"read\", readNode)\n      .addNode(\"create\", createNode)\n      .addNode(\"update\", updateNode)\n      .addNode(\"delete_idx\", deleteNode)\n      .addConditionalEdges(START, routeByMode, {\n        read: \"read\",\n        create: \"create\",\n        update: \"update\",\n        delete_idx: \"delete_idx\",\n      })\n      .addEdge(\"read\", END)\n      .addEdge(\"create\", END)\n      .addEdge(\"update\", END)\n      .addEdge(\"delete_idx\", END);\n\n    return workflow.compile();\n  }\n}\n"]}

package/dist/opportunity/opportunity.discover.d.ts

@@ -11,6 +11,7 @@
 import type { ChatGraphCompositeDatabase, UserRecord } from "../shared/interfaces/database.interface.js";
 import type { Cache } from "../shared/interfaces/cache.interface.js";
 import type { QuestionerEnqueueFn } from "../questioner/questioner.types.js";
+import type { ToolScopeType } from "../shared/agent/tool.scope.js";
 import { OpportunityPresenter, type OpportunityPresentationResult, type HomeCardPresentationResult } from "./opportunity.presenter.js";
 import type { ChatSummaryReader } from "../shared/interfaces/chat-summary.interface.js";
 import type { QuestionGeneratorReader } from "../shared/interfaces/question-generator.interface.js";
@@ -89,6 +90,10 @@ export interface DiscoverInput {
      * completes).
      */
     questionerEnqueue?: QuestionerEnqueueFn;
+    /** Focused request scope type for generated discovery questions. */
+    scopeType?: ToolScopeType;
+    /** Focused request scope id. When `scopeType === 'network'`, persisted as actor networkId. */
+    scopeId?: string;
 }
 /** One formatted opportunity for chat (candidate-facing). */
 export interface FormattedDiscoveryCandidate {