@jini-ai/mcp 0.1.0

package/dist/core/config.js

@@ -0,0 +1,475 @@
+/**
+ * @module @jini-ai/mcp/core/config
+ * Config schema + on-disk store for the external MCP servers the daemon connects
+ * to as a client, plus the per-agent config builders (Claude `.mcp.json`, ACP
+ * `mcpServers`, OpenCode) that hand those servers to a launching agent. Part of
+ * the MCP `core` kernel; depends on no sibling subdirectory.
+ */
+// External MCP server configuration storage + spawn-time wiring.
+//
+// The daemon acts as an MCP CLIENT to one or more external MCP servers
+// (image/video generation, GitHub, filesystem, anything the user
+// configures). At spawn time we hand those servers to whichever agent is
+// being launched (Claude Code via a project-cwd `.mcp.json`, ACP agents via
+// the existing `mcpServers` parameter) so the agent surfaces their tools to
+// the model.
+//
+// Storage: <dataDir>/mcp-config.json with shape `{ servers: [...] }`.
+//
+// We deliberately keep the schema close to Claude Code's `.mcp.json` and
+// Cursor's MCP config — those are the de-facto interchange formats — so
+// users can copy-paste between tools without translation.
+import { readFile } from 'node:fs/promises';
+import { realpathSync } from 'node:fs';
+import path from 'node:path';
+import { pathContains } from '@jini-ai/platform';
+import { writeSecretFileAtomic } from './secure-write.js';
+const VALID_TRANSPORTS = new Set([
+    'stdio',
+    'sse',
+    'http',
+]);
+const VALID_AUTH_MODES = new Set(['none', 'oauth']);
+// Slug rule for server ids. The id flows into agent-facing config files
+// (Claude Code's `mcpServers` map keys, ACP `name`) and in some cases into
+// argv / env, so we keep it strictly alphanumeric + `-` / `_`.
+const SERVER_ID_PATTERN = /^[a-z0-9][a-z0-9_-]{0,63}$/i;
+function configFile(dataDir) {
+    return path.join(dataDir, 'mcp-config.json');
+}
+function isPlainObject(v) {
+    return Boolean(v) && typeof v === 'object' && !Array.isArray(v);
+}
+function sanitizeStringMap(raw) {
+    if (!isPlainObject(raw))
+        return undefined;
+    const out = {};
+    for (const [k, v] of Object.entries(raw)) {
+        if (k === '__proto__' || k === 'constructor')
+            continue;
+        if (!k.trim())
+            continue;
+        if (typeof v !== 'string')
+            continue;
+        // Drop empty / whitespace-only values. Persisting them is worse than
+        // omitting them: the spawn-time merge treats a present header as
+        // "user pinned this", which would block our daemon-issued OAuth
+        // Bearer from being injected. The UI also has placeholder fields
+        // (e.g. an "Authorization=" template row) the user can leave blank
+        // — those should never make it into the saved config.
+        if (v.trim() === '')
+            continue;
+        out[k] = v;
+    }
+    return Object.keys(out).length > 0 ? out : undefined;
+}
+function sanitizeStringArray(raw) {
+    if (!Array.isArray(raw))
+        return undefined;
+    const out = raw.filter((v) => typeof v === 'string');
+    return out.length > 0 ? out : undefined;
+}
+function normalizeHost(hostname) {
+    return hostname
+        .replace(/^\[|\]$/g, '')
+        .toLowerCase()
+        .replace(/\.+$/g, '');
+}
+function isLoopbackHost(hostname) {
+    const host = normalizeHost(hostname);
+    if (host === 'localhost' || host === '::1')
+        return true;
+    // Note: IPv4-mapped IPv6 loopback (`::ffff:127.0.0.1`) is not special-cased —
+    // the WHATWG URL parser compresses it to `::ffff:7f00:1` before it reaches
+    // here, so a dotted-quad match is unreachable through `inferMcpAuthModeForUrl`.
+    return /^127(?:\.\d{1,3}){3}$/.test(host);
+}
+/**
+ * Infer the appropriate `McpAuthMode` for a given server URL.
+ * Returns `'none'` for loopback targets (localhost, 127.x.x.x, ::1)
+ * and `'oauth'` for everything else, including when `rawUrl` is absent or unparseable.
+ * @param rawUrl The server URL string to inspect, if any.
+ * @returns The inferred `McpAuthMode`.
+ */
+export function inferMcpAuthModeForUrl(rawUrl) {
+    if (!rawUrl)
+        return 'oauth';
+    try {
+        return isLoopbackHost(new URL(rawUrl).hostname) ? 'none' : 'oauth';
+    }
+    catch {
+        return 'oauth';
+    }
+}
+function sanitizeMcpAuthMode(raw) {
+    return typeof raw === 'string' && VALID_AUTH_MODES.has(raw)
+        ? raw
+        : undefined;
+}
+// Only ever invoked for http/sse servers (the callers gate on transport), so
+// there is no stdio short-circuit here — the token merge just needs the
+// effective auth mode for a remote server.
+function effectiveMcpAuthMode(server) {
+    return server.authMode ?? inferMcpAuthModeForUrl(server.url);
+}
+/**
+ * Validate a single user-supplied entry. Drops invalid fields so a typo in
+ * one server doesn't tank the whole config. Returns null when the entry is
+ * unsalvageable (no id, or no transport-required fields).
+ */
+export function sanitizeMcpServer(raw) {
+    if (!isPlainObject(raw))
+        return null;
+    const id = typeof raw.id === 'string' ? raw.id.trim() : '';
+    if (!SERVER_ID_PATTERN.test(id))
+        return null;
+    const transport = typeof raw.transport === 'string' ? raw.transport : 'stdio';
+    if (!VALID_TRANSPORTS.has(transport))
+        return null;
+    const next = {
+        id,
+        transport,
+        enabled: raw.enabled !== false,
+    };
+    if (typeof raw.label === 'string' && raw.label.trim()) {
+        next.label = raw.label.trim();
+    }
+    if (transport === 'stdio') {
+        if (typeof raw.command !== 'string' || !raw.command.trim())
+            return null;
+        next.command = raw.command.trim();
+        const args = sanitizeStringArray(raw.args);
+        if (args)
+            next.args = args;
+        const env = sanitizeStringMap(raw.env);
+        if (env)
+            next.env = env;
+    }
+    else {
+        if (typeof raw.url !== 'string' || !raw.url.trim())
+            return null;
+        // Reject anything that isn't an http(s) URL — protects against accidental
+        // `file://` / `javascript:` slipping into a config file.
+        let parsed;
+        try {
+            parsed = new URL(raw.url.trim());
+        }
+        catch {
+            return null;
+        }
+        if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
+            return null;
+        next.url = parsed.toString();
+        next.authMode = sanitizeMcpAuthMode(raw.authMode) ?? inferMcpAuthModeForUrl(next.url);
+        const headers = sanitizeStringMap(raw.headers);
+        if (headers)
+            next.headers = headers;
+    }
+    return next;
+}
+/**
+ * Coerce and de-duplicate a freeform JSON blob into a valid `McpConfig`.
+ * Entries that fail `sanitizeMcpServer` are silently dropped; duplicate ids
+ * are kept first-wins. Returns `{ servers: [] }` for any non-object input.
+ * @param raw The raw parsed JSON to sanitize.
+ * @returns A clean `McpConfig` guaranteed to have only valid, unique server entries.
+ */
+export function sanitizeMcpConfig(raw) {
+    if (!isPlainObject(raw))
+        return { servers: [] };
+    const list = Array.isArray(raw.servers) ? raw.servers : [];
+    const seen = new Set();
+    const out = [];
+    for (const entry of list) {
+        const ok = sanitizeMcpServer(entry);
+        if (!ok)
+            continue;
+        if (seen.has(ok.id))
+            continue; // de-dupe by id
+        seen.add(ok.id);
+        out.push(ok);
+    }
+    return { servers: out };
+}
+/**
+ * Read and sanitize the MCP config from `<dataDir>/mcp-config.json`.
+ * Returns `{ servers: [] }` when the file does not exist or contains invalid JSON.
+ * @param dataDir The resolved runtime data directory.
+ * @returns The sanitized `McpConfig`, never rejects on missing-file or corrupt-JSON.
+ */
+export async function readMcpConfig(dataDir) {
+    try {
+        const raw = await readFile(configFile(dataDir), 'utf8');
+        const parsed = JSON.parse(raw);
+        return sanitizeMcpConfig(parsed);
+    }
+    catch (err) {
+        const e = err;
+        if (e.code === 'ENOENT')
+            return { servers: [] };
+        if (e.name === 'SyntaxError') {
+            console.error('[mcp-config] Corrupted JSON, returning empty:', e.message);
+            return { servers: [] };
+        }
+        throw err;
+    }
+}
+const writeLocks = new Map();
+/**
+ * Sanitize and atomically write the MCP config to `<dataDir>/mcp-config.json`.
+ * Uses a per-`dataDir` promise-chain mutex so concurrent writes serialize
+ * instead of racing. The body is sanitized through `sanitizeMcpConfig` before
+ * being written. This file may carry environment variables and
+ * `Authorization` header values (API keys, bearer tokens — see
+ * `McpServerConfig.env`/`.headers`), so it is written with owner-only
+ * (0600) permissions from the very first byte via `writeSecretFileAtomic`
+ * rather than a post-rename chmod (CR-006 / SEC-RB-002).
+ * @param dataDir The resolved runtime data directory.
+ * @param body The raw config body to sanitize and persist.
+ * @returns The sanitized `McpConfig` that was written to disk.
+ */
+export async function writeMcpConfig(dataDir, body) {
+    const prev = writeLocks.get(dataDir) ?? Promise.resolve();
+    const task = prev.catch(() => { }).then(() => doWrite(dataDir, body));
+    writeLocks.set(dataDir, task);
+    try {
+        return await task;
+    }
+    finally {
+        if (writeLocks.get(dataDir) === task)
+            writeLocks.delete(dataDir);
+    }
+}
+async function doWrite(dataDir, body) {
+    const next = sanitizeMcpConfig(body);
+    await writeSecretFileAtomic(configFile(dataDir), JSON.stringify(next, null, 2));
+    return next;
+}
+// ───────────────────────────────────────────────────────────────────────
+// Spawn-time wiring helpers.
+// ───────────────────────────────────────────────────────────────────────
+/**
+ * Resolve `p` to its real (symlink-free) path when it exists on disk;
+ * falls back to lexical `path.resolve` (still normalizing `..`/`.`
+ * segments) when it does not exist yet, or the platform can't resolve it.
+ */
+function resolveRealOrLexical(p) {
+    try {
+        return realpathSync.native(p);
+    }
+    catch {
+        return path.resolve(p);
+    }
+}
+/**
+ * True when `cwd` is a daemon-managed project directory under `projectsDir`
+ * (= safe to write `.mcp.json` into without risk of clobbering a user-owned
+ * file). Git-linked projects whose cwd points at the user's own repo, and
+ * the no-project fallback that resolves to the project root, both return false
+ * — the daemon must NOT write external-MCP config into either of those.
+ *
+ * Both `cwd` and `projectsDir` are realpath-resolved before the containment
+ * check (falling back to lexical `path.resolve` normalization for a path
+ * that doesn't exist on disk yet), and containment is decided with
+ * `@jini-ai/platform`'s separator-aware `pathContains` rather than a raw
+ * string-prefix check — a `..`-containing path or a symlinked descendant
+ * can defeat a plain `startsWith` (CR-006 / SEC-RB-011).
+ */
+export function isManagedProjectCwd(cwd, projectsDir) {
+    if (!cwd || typeof cwd !== 'string')
+        return false;
+    if (typeof projectsDir !== 'string' || projectsDir.length === 0)
+        return false;
+    const resolvedProjectsDir = resolveRealOrLexical(projectsDir);
+    const resolvedCwd = resolveRealOrLexical(cwd);
+    if (resolvedCwd === resolvedProjectsDir)
+        return false; // projects root, not a project
+    return pathContains(resolvedProjectsDir, resolvedCwd);
+}
+/**
+ * Project-cwd `.mcp.json` shape that Claude Code auto-loads on spawn (the
+ * same format Claude Desktop and Cursor use). Returns null when the user
+ * has no enabled servers — in that case the caller should NOT write the
+ * file (and should clean up any stale one).
+ *
+ * `tokens` is an optional map of `serverId -> bearer access token`, used
+ * for HTTP/SSE servers that completed the daemon's web OAuth flow. When a
+ * token is present we inject `Authorization: Bearer <token>` into the
+ * server's headers — this is what bypasses the per-spawn `mcp-remote`
+ * dance and lets Claude Code talk directly to the upstream MCP using
+ * pre-authenticated credentials. User-supplied headers always win on
+ * conflict so they can pin a specific token if they really want to.
+ */
+export function buildClaudeMcpJson(servers, tokens = {}) {
+    const enabled = servers.filter((s) => s.enabled);
+    if (enabled.length === 0)
+        return null;
+    const out = {};
+    for (const s of enabled) {
+        if (s.transport === 'stdio') {
+            const entry = { command: s.command };
+            if (s.args && s.args.length > 0)
+                entry.args = s.args;
+            if (s.env && Object.keys(s.env).length > 0)
+                entry.env = s.env;
+            out[s.id] = entry;
+        }
+        else {
+            const entry = {
+                type: s.transport, // 'sse' | 'http'
+                url: s.url,
+            };
+            const headers = mergeAuthHeader(s.headers, effectiveMcpAuthMode(s) === 'oauth' ? tokens[s.id] : undefined);
+            if (headers && Object.keys(headers).length > 0)
+                entry.headers = headers;
+            out[s.id] = entry;
+        }
+    }
+    return { mcpServers: out };
+}
+/** Build a headers object that includes the daemon-issued bearer token when
+ * the user hasn't already supplied a NON-EMPTY Authorization header. A
+ * blank Authorization (empty string / whitespace only) is treated as
+ * "not pinned" — historically the template UI persisted empty values from
+ * unfilled fields, and we never want a blank Authorization to suppress a
+ * valid OAuth Bearer (the upstream MCP would refuse the connection and
+ * fall back to its in-tool re-auth dance). Real user-pinned values still
+ * win so manually-set PATs aren't silently overwritten. */
+function mergeAuthHeader(existing, bearer) {
+    const merged = {};
+    let userAuth = null;
+    for (const [k, v] of Object.entries(existing ?? {})) {
+        if (k.toLowerCase() === 'authorization') {
+            if (typeof v === 'string' && v.trim() !== '') {
+                userAuth = v;
+                merged[k] = v;
+            }
+            // empty / whitespace authorization is ignored, NOT carried through
+            continue;
+        }
+        merged[k] = v;
+    }
+    if (bearer && !userAuth) {
+        merged['Authorization'] = `Bearer ${bearer}`;
+    }
+    return Object.keys(merged).length > 0 ? merged : undefined;
+}
+/**
+ * Convert user-configured external MCP servers into the ACP `mcpServers` array.
+ * Only stdio servers are included — SSE/HTTP are dropped because ACP currently
+ * models stdio only. Returns an empty array when no enabled stdio servers exist.
+ * @param servers The full server list from `McpConfig`.
+ * @returns ACP-shaped server entries for all enabled stdio servers.
+ */
+export function buildAcpMcpServers(servers) {
+    const enabled = servers.filter((s) => s.enabled && s.transport === 'stdio');
+    const out = [];
+    for (const s of enabled) {
+        const envEntries = [];
+        if (s.env) {
+            for (const [name, value] of Object.entries(s.env)) {
+                if (typeof value !== 'string')
+                    continue;
+                envEntries.push({ name, value });
+            }
+        }
+        out.push({
+            type: 'stdio',
+            name: s.id,
+            command: s.command ?? '',
+            args: Array.isArray(s.args) ? [...s.args] : [],
+            env: envEntries,
+        });
+    }
+    return out;
+}
+export function buildOpenCodeMcpConfigContent(servers, tokens = {}, options = {}) {
+    const enabled = servers.filter((s) => s.enabled);
+    const mcp = {};
+    for (const s of enabled) {
+        if (s.transport === 'stdio') {
+            const cmd = typeof s.command === 'string' ? s.command.trim() : '';
+            if (!cmd)
+                continue;
+            const entry = {
+                type: 'local',
+                command: [cmd, ...(Array.isArray(s.args) ? s.args : [])],
+            };
+            if (s.env && Object.keys(s.env).length > 0) {
+                entry.environment = { ...s.env };
+            }
+            entry.enabled = true;
+            mcp[s.id] = entry;
+        }
+        else {
+            const url = typeof s.url === 'string' ? s.url.trim() : '';
+            if (!url)
+                continue;
+            const entry = {
+                type: 'remote',
+                url: s.url,
+            };
+            const headers = mergeAuthHeader(s.headers, effectiveMcpAuthMode(s) === 'oauth' ? tokens[s.id] : undefined);
+            if (headers && Object.keys(headers).length > 0)
+                entry.headers = headers;
+            entry.enabled = true;
+            mcp[s.id] = entry;
+        }
+    }
+    const externalDirectory = buildOpenCodeExternalDirectoryAllowlist(options.allowedDirectories);
+    const extraConfig = options.extraConfig ?? {};
+    if (Object.keys(mcp).length === 0 &&
+        !externalDirectory &&
+        Object.keys(extraConfig).length === 0)
+        return null;
+    const config = { ...extraConfig };
+    if (Object.keys(mcp).length > 0)
+        config.mcp = mcp;
+    if (externalDirectory) {
+        const priorPermission = config.permission && typeof config.permission === 'object' && !Array.isArray(config.permission)
+            ? config.permission
+            : {};
+        config.permission = {
+            ...priorPermission,
+            external_directory: externalDirectory,
+        };
+    }
+    return JSON.stringify(config);
+}
+function buildOpenCodeExternalDirectoryAllowlist(directories) {
+    const normalized = Array.from(new Set((directories ?? [])
+        .filter((dir) => typeof dir === 'string' && dir.trim().length > 0)
+        .filter((dir) => path.isAbsolute(dir))
+        .flatMap((dir) => normalizeAllowedDirectoryVariants(dir))));
+    if (normalized.length === 0)
+        return null;
+    const allowlist = {};
+    for (const dir of normalized) {
+        allowlist[dir] = 'allow';
+        allowlist[joinPermissionGlob(dir, '*')] = 'allow';
+        allowlist[joinPermissionGlob(dir, '**')] = 'allow';
+    }
+    return allowlist;
+}
+function normalizeAllowedDirectory(dir) {
+    const resolved = path.resolve(dir);
+    const root = path.parse(resolved).root;
+    if (resolved === root)
+        return root;
+    return resolved.replace(/[\\/]+$/, '');
+}
+function normalizeAllowedDirectoryVariants(dir) {
+    const normalized = normalizeAllowedDirectory(dir);
+    let real = null;
+    try {
+        real = normalizeAllowedDirectory(realpathSync.native(dir));
+    }
+    catch {
+        real = null;
+    }
+    return real && real !== normalized ? [normalized, real] : [normalized];
+}
+function joinPermissionGlob(dir, suffix) {
+    return dir.endsWith(path.sep) ? `${dir}${suffix}` : `${dir}${path.sep}${suffix}`;
+}
+//# sourceMappingURL=config.js.map

package/dist/core/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,iEAAiE;AACjE,EAAE;AACF,uEAAuE;AACvE,iEAAiE;AACjE,yEAAyE;AACzE,4EAA4E;AAC5E,4EAA4E;AAC5E,aAAa;AACb,EAAE;AACF,sEAAsE;AACtE,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,0DAA0D;AAE1D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AA6B1D,MAAM,gBAAgB,GAA8B,IAAI,GAAG,CAAC;IAC1D,OAAO;IACP,KAAK;IACL,MAAM;CACP,CAAC,CAAC;AACH,MAAM,gBAAgB,GAA6B,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE9E,wEAAwE;AACxE,2EAA2E;AAC3E,+DAA+D;AAC/D,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;AAExD,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY;IACrC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,aAAa;YAAE,SAAS;QACvD,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;YAAE,SAAS;QACxB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QACpC,qEAAqE;QACrE,iEAAiE;QACjE,gEAAgE;QAChE,iEAAiE;QACjE,mEAAmE;QACnE,sDAAsD;QACtD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QAC9B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACb,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IAClE,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,QAAQ;SACZ,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,WAAW,EAAE;SACb,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACxD,8EAA8E;IAC9E,2EAA2E;IAC3E,gFAAgF;IAChF,OAAO,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA0B;IAC/D,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY;IACvC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAkB,CAAC;QACxE,CAAC,CAAE,GAAmB;QACtB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,6EAA6E;AAC7E,wEAAwE;AACxE,2CAA2C;AAC3C,SAAS,oBAAoB,CAAC,MAAuB;IACnD,OAAO,MAAM,CAAC,QAAQ,IAAI,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,SAA0B,CAAC,CAAC,CAAC,OAAO,CAAC;IAChG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAElD,MAAM,IAAI,GAAoB;QAC5B,EAAE;QACF,SAAS;QACT,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,KAAK;KAC/B,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QACxE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAC3B,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,GAAG;YAAE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QAChE,0EAA0E;QAC1E,yDAAyD;QACzD,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC7E,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtF,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAAE,SAAS,CAAC,gBAAgB;QAC/C,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAAyD,CAAC;QACpE,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAC1E,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACzB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;AAEvD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,IAAa;IAEb,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACrE,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI;YAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAAe,EAAE,IAAa;IACnD,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,qBAAqB,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,6BAA6B;AAC7B,0EAA0E;AAE1E;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,CAAS;IACrC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAA8B,EAC9B,WAAmB;IAEnB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,mBAAmB,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,WAAW,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAC,CAAC,+BAA+B;IACtF,OAAO,YAAY,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA0B,EAC1B,SAAiC,EAAE;IAEnC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,GAAG,GAA4C,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,KAAK,GAA4B,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9D,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;YACrD,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;YAC9D,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAA4B;gBACrC,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,iBAAiB;gBACpC,GAAG,EAAE,CAAC,CAAC,GAAG;aACX,CAAC;YACF,MAAM,OAAO,GAAG,eAAe,CAC7B,CAAC,CAAC,OAAO,EACT,oBAAoB,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAC/D,CAAC;YACF,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;YACxE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;2DAO2D;AAC3D,SAAS,eAAe,CACtB,QAA4C,EAC5C,MAA0B;IAE1B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC7C,QAAQ,GAAG,CAAC,CAAC;gBACb,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YACD,mEAAmE;YACnE,SAAS;QACX,CAAC;QACD,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,MAAM,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAeD;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA0B;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,UAAU,GAA2C,EAAE,CAAC;QAC9D,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;YACV,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,SAAS;gBACxC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,CAAC,CAAC,EAAE;YACV,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;YACxB,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;YAC9C,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AA+BD,MAAM,UAAU,6BAA6B,CAC3C,OAA0B,EAC1B,SAAiC,EAAE,EACnC,UAAsC,EAAE;IAExC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,GAAG,GAA4C,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,KAAK,GAA4B;gBACrC,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACzD,CAAC;YACF,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3C,KAAK,CAAC,WAAW,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACnC,CAAC;YACD,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;YACrB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,KAAK,GAA4B;gBACrC,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,CAAC,CAAC,GAAG;aACX,CAAC;YACF,MAAM,OAAO,GAAG,eAAe,CAC7B,CAAC,CAAC,OAAO,EACT,oBAAoB,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAC/D,CAAC;YACF,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;YACxE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;YACrB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IACD,MAAM,iBAAiB,GAAG,uCAAuC,CAC/D,OAAO,CAAC,kBAAkB,CAC3B,CAAC;IACF,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAC9C,IACE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;QAC7B,CAAC,iBAAiB;QAClB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC;QACrC,OAAO,IAAI,CAAC;IAEd,MAAM,MAAM,GAA4B,EAAE,GAAG,WAAW,EAAE,CAAC;IAC3D,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;IAClD,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,eAAe,GACnB,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;YAC7F,CAAC,CAAC,MAAM,CAAC,UAAqC;YAC9C,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,CAAC,UAAU,GAAG;YAClB,GAAG,eAAe;YAClB,kBAAkB,EAAE,iBAAiB;SACtC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,uCAAuC,CAC9C,WAAiC;IAEjC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAC3B,IAAI,GAAG,CACL,CAAC,WAAW,IAAI,EAAE,CAAC;SAChB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACjE,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACrC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAC5D,CACF,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,SAAS,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;QACzB,SAAS,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC;QAClD,SAAS,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC;IACrD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAW;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IACvC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,iCAAiC,CAAC,GAAW;IACpD,MAAM,UAAU,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,GAAG,yBAAyB,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,IAAI,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW,EAAE,MAAkB;IACzD,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,MAAM,EAAE,CAAC;AACnF,CAAC"}

package/dist/core/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @module @jini-ai/mcp/core
+ * Foundation kernel for the MCP domain: the shared config schema and IO
+ * (`config`), the OAuth 2.1 / PKCE client-credential flow (`oauth`), the
+ * per-server token store (`tokens`), and the install-payload builder
+ * (`install-info`). These are the pure, dependency-light primitives every other
+ * MCP concern (client, agent-install) and the daemon's routes and runtime build
+ * on. `core` imports no sibling subdirectory.
+ */
+export * from './config.js';
+export * from './oauth.js';
+export * from './tokens.js';
+export * from './install-info.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC"}

package/dist/core/index.js

@@ -0,0 +1,14 @@
+/**
+ * @module @jini-ai/mcp/core
+ * Foundation kernel for the MCP domain: the shared config schema and IO
+ * (`config`), the OAuth 2.1 / PKCE client-credential flow (`oauth`), the
+ * per-server token store (`tokens`), and the install-payload builder
+ * (`install-info`). These are the pure, dependency-light primitives every other
+ * MCP concern (client, agent-install) and the daemon's routes and runtime build
+ * on. `core` imports no sibling subdirectory.
+ */
+export * from './config.js';
+export * from './oauth.js';
+export * from './tokens.js';
+export * from './install-info.js';
+//# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC"}

package/dist/core/install-info.d.ts

@@ -0,0 +1,69 @@
+/**
+ * @module @jini-ai/mcp/core/install-info
+ * Pure builder for the MCP install-info payload (command/args/env) shared by the
+ * daemon route, the settings UI, and its test fixture, so every install surface
+ * configures byte-identical bytes. Part of the MCP `core` kernel; intentionally
+ * side-effect-free and depends on no sibling subdirectory.
+ */
+/**
+ * All runtime facts the caller resolves before calling `buildMcpInstallPayload`.
+ * Kept as a plain-data interface so the builder stays side-effect-free and
+ * can be unit-tested with fake filesystem/env values.
+ */
+export interface BuildMcpInstallPayloadInputs {
+    cliPath: string;
+    cliExists: boolean;
+    execPath: string;
+    nodeExists: boolean;
+    port: number;
+    platform: NodeJS.Platform;
+    dataDir: string;
+    /** Env var name under which to pin the data directory so the spawned MCP
+     *  process writes to the same directory the daemon uses even when the IDE
+     *  that launched it does not inherit the packaged app's environment (e.g.
+     *  `"JINI_DATA_DIR"`). */
+    dataDirEnvVar: string;
+    electronAsNode: boolean;
+    /** True when the daemon was bootstrapped as a sidecar and the spawned MCP
+     *  process should discover the live URL via the IPC status socket instead
+     *  of a baked `--daemon-url`. */
+    isSidecarMode: boolean;
+    /** Already-filtered sidecar transport env entries the caller wants
+     *  propagated into the snippet. The caller decides what's worth
+     *  propagating; this builder just merges. */
+    sidecarEnv: Record<string, string>;
+    /** Browser-facing base URL (e.g. `http://127.0.0.1:65321`). Used by MCP
+     *  clients to build deep links so the outer agent can suggest a URL. Null
+     *  when the daemon was launched without a known web port (headless). */
+    webBaseUrl?: string | null;
+    /** MCP subcommand the spawned CLI runs. Defaults to `"mcp"`. */
+    subcommand?: string;
+}
+/**
+ * The install-info response shape: the command/args/env an MCP client must use
+ * to spawn the CLI's MCP subcommand, plus diagnostic flags and a human-readable
+ * `buildHint` describing any missing prerequisites.
+ */
+export interface McpInstallPayload {
+    command: string;
+    args: string[];
+    env: Record<string, string>;
+    daemonUrl: string;
+    /** Browser-facing base URL the daemon is paired with, when known. */
+    webBaseUrl: string | null;
+    platform: NodeJS.Platform;
+    cliExists: boolean;
+    nodeExists: boolean;
+    buildHint: string | null;
+}
+/**
+ * Build the `McpInstallPayload` from resolved runtime facts.
+ * Decides whether to bake `--daemon-url` into args (direct launch) or omit it
+ * (sidecar mode, where the spawned process discovers the URL via the IPC socket).
+ * Also pins the data-dir env var to prevent EPERM failures in packaged installs
+ * and injects `ELECTRON_RUN_AS_NODE=1` when running under Electron.
+ * @param inputs Runtime facts collected by the production route or test fixture.
+ * @returns The install payload; `buildHint` is non-null when prerequisites are missing.
+ */
+export declare function buildMcpInstallPayload(inputs: BuildMcpInstallPayloadInputs): McpInstallPayload;
+//# sourceMappingURL=install-info.d.ts.map

package/dist/core/install-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-info.d.ts","sourceRoot":"","sources":["../../src/core/install-info.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAaH;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB;;;8BAG0B;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB;;qCAEiC;IACjC,aAAa,EAAE,OAAO,CAAC;IACvB;;iDAE6C;IAC7C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC;;4EAEwE;IACxE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,4BAA4B,GACnC,iBAAiB,CAuDnB"}