@oharness/engine 0.8.0 → 0.9.0

package/dist/mcp/builtin.d.ts

@@ -1,13 +1,70 @@
 import type { McpServerConfig } from "./client.ts";
+import type { OttoportCopy } from "./ottoport-updates.ts";
+/**
+ * The media server that ships with the harness.
+ *
+ * Image, video and speech generation is a capability this project does not
+ * implement and should not: the models change weekly, every one of them takes
+ * different parameters, and the prices are quoted per image and per second
+ * rather than per token. OttoPort already serves all of that behind one API,
+ * meters it against an account, and publishes the catalog — so the harness
+ * reaches for it the way it reaches for any other MCP server, and holds no
+ * opinion about what a video model's parameters are.
+ *
+ * That last part is the point. A tool surface defined here would be a copy of
+ * somebody else's parameter list, and a copy that is wrong costs the user a
+ * failed generation they may have paid for. Asking the server means the
+ * answer is never stale: `ottoport_list_models` is deliberately allowed
+ * through so the model can look up what exists and what it takes.
+ */
+/** Where newer releases of the server are kept once downloaded. */
+export declare function ottoportCacheRoot(): string;
+/** The copy that shipped with this release, and the version it says it is. */
+export declare function bundledOttoport(): OttoportCopy | undefined;
+/**
+ * The server to run: the bundled one, or a newer compatible release the
+ * background update has already put on disk.
+ *
+ * A downloaded copy is a plain file in the user directory, so a packaged
+ * desktop app spawns it exactly as it spawns the bundled one beside app.asar.
+ * A bundled copy whose version cannot be read is still run — it is what this
+ * release was tested with — but nothing newer is chosen over it.
+ */
+export declare function serverEntry(): string | undefined;
 export declare const OTTOPORT_SERVER = "ottoport";
 /**
- * `${auth:ottoport}` rather than `${env:OTTOPORT_API_KEY}`.
+ * Tools the server offers that this harness does not pass on.
+ *
+ * `ottoport_chat`: a second way to reach a chat model would sit outside
+ * `/model`, outside this session's context management and outside the
+ * provider the user chose, and the model would have no way to know which of
+ * the two it should be using.
+ *
+ * `ottoport_video_webhook`: the account gateway delivers results itself and
+ * refuses a caller's webhook, so a tool for inspecting one could only ever
+ * report that there is none.
+ *
+ * A denylist rather than a list of what is allowed, because the server gains
+ * tools on its vendor's schedule and each one should reach the model without
+ * a release of this harness in between.
+ */
+export declare const WITHHELD_TOOLS: readonly string[];
+/**
+ * Who a media call is made as, and where it goes: an OHarness account and our
+ * metering gateway, which forwards the vendor's paths and charges the account.
+ */
+export interface MediaAccess {
+    key: string;
+    /** The host, without `/api/v1`: the server appends the path itself. */
+    baseUrl: string;
+}
+/**
+ * The key goes in the child's environment and nowhere else.
  *
- * The environment is the wrong place for this key and not by a little: `Bash`
- * hands the whole of `process.env` to every command the model runs, so a key
- * exported for this server is a key the model can print. Resolved from the
- * auth store it reaches this subprocess and nothing else, and it is the same
- * credential the `ottoport` provider already uses for chat — a user who has
- * signed in once does not sign in again to generate an image.
+ * Not `process.env`, and not by a little: `Bash` hands the whole of it to
+ * every command the model runs, so a key exported for this server is a key
+ * the model can print. Set on this one subprocess, it reaches the server and
+ * nothing else — and it is the credential the user already signed in with,
+ * so nobody signs in a second time to generate an image.
  */
-export declare function ottoportMediaServer(): McpServerConfig | undefined;
+export declare function ottoportMediaServer(access: MediaAccess, entry?: string | undefined): McpServerConfig | undefined;

package/dist/mcp/builtin.js

@@ -1,7 +1,8 @@
 import { existsSync } from "node:fs";
 import { createRequire } from "node:module";
-import { join } from "node:path";
-import { ottoportBaseUrl } from "../auth/providers/ottoport.js";
+import { dirname, join } from "node:path";
+import { userPath } from "../paths.js";
+import { cachedCopies, packageVersion, pickCopy } from "./ottoport-updates.js";
 /**
  * The media server that ships with the harness.
  *
@@ -19,6 +20,10 @@ import { ottoportBaseUrl } from "../auth/providers/ottoport.js";
  * answer is never stale: `ottoport_list_models` is deliberately allowed
  * through so the model can look up what exists and what it takes.
  */
+/** Where newer releases of the server are kept once downloaded. */
+export function ottoportCacheRoot() {
+    return userPath("cache", "ottoport");
+}
 /**
  * Bundled rather than fetched.
  *
@@ -29,8 +34,12 @@ import { ottoportBaseUrl } from "../auth/providers/ottoport.js";
  * and in both it means the version that runs is whatever npm served that
  * morning. The package is a dependency of this one, so it is on disk before
  * the process starts and it is the version this release was tested against.
+ *
+ * Newer releases still arrive (see `ottoport-updates.ts`), but they are
+ * fetched after a session has started and run from the next one, so none of
+ * that cost is ever in front of a call.
  */
-function serverEntry() {
+function bundledEntry() {
     // Inside a packaged desktop app the module graph lives in app.asar, and a
     // path inside an archive is not something a child process can open — the
     // spawn below would report ENOENT for a file `require.resolve` had just
@@ -54,19 +63,59 @@ function serverEntry() {
         return undefined;
     }
 }
+/** The copy that shipped with this release, and the version it says it is. */
+export function bundledOttoport() {
+    const entry = bundledEntry();
+    if (!entry)
+        return undefined;
+    // `<package>/mcp/server.mjs`, whether resolved or copied beside app.asar:
+    // the desktop build copies the whole package, manifest included.
+    const version = packageVersion(dirname(dirname(entry)));
+    return version ? { version, entry } : undefined;
+}
+/**
+ * The server to run: the bundled one, or a newer compatible release the
+ * background update has already put on disk.
+ *
+ * A downloaded copy is a plain file in the user directory, so a packaged
+ * desktop app spawns it exactly as it spawns the bundled one beside app.asar.
+ * A bundled copy whose version cannot be read is still run — it is what this
+ * release was tested with — but nothing newer is chosen over it.
+ */
+export function serverEntry() {
+    const bundled = bundledOttoport();
+    if (!bundled)
+        return bundledEntry();
+    return pickCopy(bundled, cachedCopies(ottoportCacheRoot()))?.entry;
+}
 export const OTTOPORT_SERVER = "ottoport";
 /**
- * `${auth:ottoport}` rather than `${env:OTTOPORT_API_KEY}`.
+ * Tools the server offers that this harness does not pass on.
+ *
+ * `ottoport_chat`: a second way to reach a chat model would sit outside
+ * `/model`, outside this session's context management and outside the
+ * provider the user chose, and the model would have no way to know which of
+ * the two it should be using.
+ *
+ * `ottoport_video_webhook`: the account gateway delivers results itself and
+ * refuses a caller's webhook, so a tool for inspecting one could only ever
+ * report that there is none.
+ *
+ * A denylist rather than a list of what is allowed, because the server gains
+ * tools on its vendor's schedule and each one should reach the model without
+ * a release of this harness in between.
+ */
+export const WITHHELD_TOOLS = ["ottoport_chat", "ottoport_video_webhook"];
+/**
+ * The key goes in the child's environment and nowhere else.
  *
- * The environment is the wrong place for this key and not by a little: `Bash`
- * hands the whole of `process.env` to every command the model runs, so a key
- * exported for this server is a key the model can print. Resolved from the
- * auth store it reaches this subprocess and nothing else, and it is the same
- * credential the `ottoport` provider already uses for chat — a user who has
- * signed in once does not sign in again to generate an image.
+ * Not `process.env`, and not by a little: `Bash` hands the whole of it to
+ * every command the model runs, so a key exported for this server is a key
+ * the model can print. Set on this one subprocess, it reaches the server and
+ * nothing else — and it is the credential the user already signed in with,
+ * so nobody signs in a second time to generate an image.
  */
-export function ottoportMediaServer() {
-    const entry = serverEntry();
+export function ottoportMediaServer(access, entry = serverEntry()) {
     if (!entry)
         return undefined;
     return {
@@ -77,31 +126,13 @@ export function ottoportMediaServer() {
         command: process.execPath,
         args: [entry],
         env: {
-            OTTOPORT_API_KEY: "${auth:ottoport}",
-            // The same host the `ottoport` provider talks to, so `OTTOPORT_BASE_URL`
-            // moves both. Hardcoding the public one would send a staging or
-            // self-hosted deployment's chat one way and its images the other, and
-            // nothing would report the split.
-            OTTOPORT_BASE_URL: ottoportBaseUrl(),
+            OTTOPORT_API_KEY: access.key,
+            OTTOPORT_BASE_URL: access.baseUrl,
             ELECTRON_RUN_AS_NODE: "1",
         },
-        /**
-         * Everything the server offers except `ottoport_chat`.
-         *
-         * A second way to reach a chat model is not a feature here. It would sit
-         * outside `/model`, outside this session's context management and outside
-         * the provider the user chose, and the model would have no way to know
-         * which of the two it should be using. The media tools have no such
-         * counterpart in this harness, and `ottoport_list_models` is how their
-         * parameters get looked up.
-         */
-        allowedTools: [
-            "ottoport_list_models",
-            "ottoport_generate_image",
-            "ottoport_generate_video",
-            "ottoport_generate_speech",
-            "ottoport_generate_music",
-        ],
+        // No `allowedTools`: which tools pass is `WITHHELD_TOOLS`' decision, made
+        // by the plugin that registers them, so a tool added upstream is not
+        // stopped here by a list that has never heard of it.
         // Video generation is a job the server polls to completion.
         timeoutMs: 600_000,
     };

package/dist/mcp/builtin.js.map

@@ -1 +1 @@
-{"version":3,"file":"builtin.js","sourceRoot":"","sources":["../../src/mcp/builtin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGhE;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;;;;GAUG;AACH,SAAS,WAAW;IAClB,0EAA0E;IAC1E,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,oEAAoE;IACpE,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,SAAS,GAAI,OAAsC,CAAC,aAAa,CAAC;IACxE,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QAClE,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,qEAAqE;QACrE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC;AAE1C;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAE7B,OAAO;QACL,IAAI,EAAE,OAAO;QACb,oEAAoE;QACpE,sEAAsE;QACtE,6CAA6C;QAC7C,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,IAAI,EAAE,CAAC,KAAK,CAAC;QACb,GAAG,EAAE;YACH,gBAAgB,EAAE,kBAAkB;YACpC,yEAAyE;YACzE,gEAAgE;YAChE,sEAAsE;YACtE,kCAAkC;YAClC,iBAAiB,EAAE,eAAe,EAAE;YACpC,oBAAoB,EAAE,GAAG;SAC1B;QACD;;;;;;;;;WASG;QACH,YAAY,EAAE;YACZ,sBAAsB;YACtB,yBAAyB;YACzB,yBAAyB;YACzB,0BAA0B;YAC1B,yBAAyB;SAC1B;QACD,4DAA4D;QAC5D,SAAS,EAAE,OAAO;KACnB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"builtin.js","sourceRoot":"","sources":["../../src/mcp/builtin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAG/E;;;;;;;;;;;;;;;;GAgBG;AAEH,mEAAmE;AACnE,MAAM,UAAU,iBAAiB;IAC/B,OAAO,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,YAAY;IACnB,0EAA0E;IAC1E,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,oEAAoE;IACpE,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,SAAS,GAAI,OAAsC,CAAC,aAAa,CAAC;IACxE,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QAClE,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,qEAAqE;QACrE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe;IAC7B,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,OAAO,YAAY,EAAE,CAAC;IACpC,OAAO,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC;AAE1C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;AAY7F;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAmB,EACnB,QAA4B,WAAW,EAAE;IAEzC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAE7B,OAAO;QACL,IAAI,EAAE,OAAO;QACb,oEAAoE;QACpE,sEAAsE;QACtE,6CAA6C;QAC7C,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,IAAI,EAAE,CAAC,KAAK,CAAC;QACb,GAAG,EAAE;YACH,gBAAgB,EAAE,MAAM,CAAC,GAAG;YAC5B,iBAAiB,EAAE,MAAM,CAAC,OAAO;YACjC,oBAAoB,EAAE,GAAG;SAC1B;QACD,0EAA0E;QAC1E,qEAAqE;QACrE,qDAAqD;QACrD,4DAA4D;QAC5D,SAAS,EAAE,OAAO;KACnB,CAAC;AACJ,CAAC"}

package/dist/mcp/ottoport-updates.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Newer copies of the media server, fetched in the background.
+ *
+ * The server belongs to the gateway's vendor and changes on the vendor's
+ * schedule: a new tool, a new parameter, a model family that needs a new code
+ * path. Waiting for an OHarness release to carry each of those would make the
+ * harness the slowest link in a chain it does not own. So the bundled copy is
+ * the floor, and a newer one the registry has published is fetched after a
+ * session starts and used from the next.
+ *
+ * Never mid-session. A server swapped under a running conversation would
+ * change the tools the model was told about while it was using them.
+ *
+ * Only within the bundled major version: a major bump is the vendor saying
+ * something a caller relies on has changed, and that is exactly the kind of
+ * update that should arrive through a release someone tested.
+ */
+/** One copy of the server that could be run. */
+export interface OttoportCopy {
+    version: string;
+    /** Absolute path of `mcp/server.mjs`. */
+    entry: string;
+}
+export declare function compareVersions(a: string, b: string): number;
+/** The version a package directory says it is, or nothing if it cannot say. */
+export declare function packageVersion(dir: string): string | undefined;
+/**
+ * The downloaded copies that are whole.
+ *
+ * A directory counts only when its entry exists and its manifest names the
+ * version the directory is called: anything else is a download that was
+ * interrupted or tampered with, and running it would fail in a way that looks
+ * like the gateway's fault.
+ */
+export declare function cachedCopies(root: string): OttoportCopy[];
+/**
+ * Which copy to run: the newest cached one the bundled copy is compatible
+ * with, or the bundled copy itself.
+ *
+ * Without a bundled copy there is nothing to measure compatibility against,
+ * so nothing is run — the same outcome as an install that dropped the package.
+ */
+export declare function pickCopy(bundled: OttoportCopy | undefined, cached: readonly OttoportCopy[]): OttoportCopy | undefined;
+/**
+ * Whether to look for updates at all.
+ *
+ * A CI run or a test is not a user, and a network call from one is either
+ * noise or a flaky test — so both are off unless asked for by name.
+ */
+export declare function autoUpdateEnabled(env?: NodeJS.ProcessEnv): boolean;
+export interface UpdateOptions {
+    /** Where versions are cached: `<root>/<version>/package/…`. */
+    root: string;
+    /** The bundled version; updates stay within its major. */
+    current: string;
+    fetch?: typeof fetch;
+    /** Unpacks a gzipped tarball into a directory. Defaults to the system `tar`. */
+    extract?: (archive: string, into: string) => Promise<void>;
+    env?: NodeJS.ProcessEnv;
+    /** Check even where `autoUpdateEnabled` says not to; for tests. */
+    force?: boolean;
+    registry?: string;
+    signal?: AbortSignal;
+}
+export type UpdateResult = {
+    status: "disabled" | "current" | "incompatible" | "cached";
+    version?: string;
+} | {
+    status: "installed";
+    version: string;
+} | {
+    status: "failed";
+    error: string;
+};
+/**
+ * Whether these bytes are the ones the registry vouched for.
+ *
+ * Only sha512 is accepted. The registry has published it for every package
+ * for years, and an entry offering only something weaker is not one to run as
+ * a subprocess holding the user's key.
+ */
+export declare function matchesIntegrity(bytes: Buffer, integrity: string): boolean;
+/**
+ * Fetch the newest compatible release into the cache, if there is one.
+ *
+ * Resolves rather than throws in every case: the caller fires this and moves
+ * on, and a failure here must never be noticed as anything but the bundled
+ * server continuing to run.
+ */
+export declare function updateOttoport(options: UpdateOptions): Promise<UpdateResult>;

package/dist/mcp/ottoport-updates.js

@@ -0,0 +1,228 @@
+import { createHash } from "node:crypto";
+import { execFile } from "node:child_process";
+import { existsSync, readFileSync, readdirSync } from "node:fs";
+import { mkdir, mkdtemp, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { promisify } from "node:util";
+/** Plain releases only: a pre-release is not something to hand a user unasked. */
+function parse(version) {
+    const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(version);
+    return match ? [Number(match[1]), Number(match[2]), Number(match[3])] : undefined;
+}
+export function compareVersions(a, b) {
+    const left = parse(a) ?? [0, 0, 0];
+    const right = parse(b) ?? [0, 0, 0];
+    for (let i = 0; i < 3; i++)
+        if (left[i] !== right[i])
+            return left[i] - right[i];
+    return 0;
+}
+function sameMajor(a, b) {
+    const left = parse(a);
+    const right = parse(b);
+    return !!left && !!right && left[0] === right[0];
+}
+/** The version a package directory says it is, or nothing if it cannot say. */
+export function packageVersion(dir) {
+    try {
+        const version = JSON.parse(readFileSync(path.join(dir, "package.json"), "utf8")).version;
+        return typeof version === "string" ? version : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * The downloaded copies that are whole.
+ *
+ * A directory counts only when its entry exists and its manifest names the
+ * version the directory is called: anything else is a download that was
+ * interrupted or tampered with, and running it would fail in a way that looks
+ * like the gateway's fault.
+ */
+export function cachedCopies(root) {
+    let names;
+    try {
+        names = readdirSync(root);
+    }
+    catch {
+        return [];
+    }
+    const copies = [];
+    for (const version of names) {
+        if (!parse(version))
+            continue;
+        const dir = path.join(root, version, "package");
+        const entry = path.join(dir, "mcp", "server.mjs");
+        if (existsSync(entry) && packageVersion(dir) === version)
+            copies.push({ version, entry });
+    }
+    return copies.sort((a, b) => compareVersions(b.version, a.version));
+}
+/**
+ * Which copy to run: the newest cached one the bundled copy is compatible
+ * with, or the bundled copy itself.
+ *
+ * Without a bundled copy there is nothing to measure compatibility against,
+ * so nothing is run — the same outcome as an install that dropped the package.
+ */
+export function pickCopy(bundled, cached) {
+    if (!bundled)
+        return undefined;
+    let best = bundled;
+    for (const copy of cached) {
+        if (sameMajor(copy.version, bundled.version) && compareVersions(copy.version, best.version) > 0)
+            best = copy;
+    }
+    return best;
+}
+/**
+ * Whether to look for updates at all.
+ *
+ * A CI run or a test is not a user, and a network call from one is either
+ * noise or a flaky test — so both are off unless asked for by name.
+ */
+export function autoUpdateEnabled(env = process.env) {
+    const flag = env["OHARNESS_MEDIA_AUTO_UPDATE"];
+    if (flag === "0" || flag === "false")
+        return false;
+    if (flag === "1" || flag === "true")
+        return true;
+    return !env["CI"] && !env["NODE_TEST_CONTEXT"];
+}
+/** Enough time to ask; the registry answering slowly is no reason to wait on it. */
+const REGISTRY_TIMEOUT_MS = 5_000;
+/** The package is about a hundred kilobytes; a minute is generous for it. */
+const DOWNLOAD_TIMEOUT_MS = 60_000;
+/** The running version plus the one before it, in case the newest is bad. */
+const KEEP = 2;
+const run = promisify(execFile);
+/**
+ * `tar`, as the system ships it.
+ *
+ * macOS and Linux have always had it, and Windows has shipped bsdtar as
+ * `tar.exe` since 10 — which is everything the desktop app supports. A JS
+ * implementation would be a dependency for a job the OS already does.
+ */
+async function systemTar(archive, into) {
+    await run("tar", ["-xzf", archive, "-C", into]);
+}
+/**
+ * Whether these bytes are the ones the registry vouched for.
+ *
+ * Only sha512 is accepted. The registry has published it for every package
+ * for years, and an entry offering only something weaker is not one to run as
+ * a subprocess holding the user's key.
+ */
+export function matchesIntegrity(bytes, integrity) {
+    const digest = createHash("sha512").update(bytes).digest("base64");
+    const claimed = integrity
+        .split(/\s+/)
+        .filter((part) => part.startsWith("sha512-"))
+        .map((part) => part.slice("sha512-".length).split("?")[0]);
+    return claimed.length > 0 && claimed.includes(digest);
+}
+function timed(signal, ms) {
+    return signal ? AbortSignal.any([signal, AbortSignal.timeout(ms)]) : AbortSignal.timeout(ms);
+}
+/**
+ * Fetch the newest compatible release into the cache, if there is one.
+ *
+ * Resolves rather than throws in every case: the caller fires this and moves
+ * on, and a failure here must never be noticed as anything but the bundled
+ * server continuing to run.
+ */
+export async function updateOttoport(options) {
+    if (!options.force && !autoUpdateEnabled(options.env))
+        return { status: "disabled" };
+    const doFetch = options.fetch ?? fetch;
+    const registry = options.registry ?? "https://registry.npmjs.org";
+    let staging;
+    try {
+        const response = await doFetch(`${registry}/ottoport/latest`, {
+            signal: timed(options.signal, REGISTRY_TIMEOUT_MS),
+            headers: { accept: "application/json" },
+        });
+        if (!response.ok)
+            throw new Error(`registry answered HTTP ${response.status}`);
+        const latest = (await response.json());
+        const version = typeof latest.version === "string" ? latest.version : "";
+        // Also what makes the version safe to use as a directory name.
+        if (!parse(version))
+            throw new Error(`registry offered an unusable version: ${String(latest.version)}`);
+        if (compareVersions(version, options.current) <= 0)
+            return { status: "current", version };
+        if (!sameMajor(version, options.current))
+            return { status: "incompatible", version };
+        if (cachedCopies(options.root).some((copy) => copy.version === version))
+            return { status: "cached", version };
+        const tarball = latest.dist?.tarball;
+        const integrity = latest.dist?.integrity;
+        if (typeof tarball !== "string" || !/^https:\/\//.test(tarball))
+            throw new Error("registry entry has no https tarball");
+        if (typeof integrity !== "string")
+            throw new Error("registry entry has no integrity");
+        const download = await doFetch(tarball, { signal: timed(options.signal, DOWNLOAD_TIMEOUT_MS) });
+        if (!download.ok)
+            throw new Error(`tarball download answered HTTP ${download.status}`);
+        const bytes = Buffer.from(await download.arrayBuffer());
+        // Before a single byte is unpacked: a tarball that is not the one the
+        // registry published is not opened at all.
+        if (!matchesIntegrity(bytes, integrity))
+            throw new Error(`integrity mismatch for ottoport ${version}`);
+        await mkdir(options.root, { recursive: true });
+        // Inside the cache root, so the final rename never crosses a filesystem
+        // and a directory named for a version is only ever a complete one.
+        staging = await mkdtemp(path.join(options.root, ".staging-"));
+        const archive = path.join(staging, "package.tgz");
+        await writeFile(archive, bytes);
+        await (options.extract ?? systemTar)(archive, staging);
+        await rm(archive, { force: true });
+        const dir = path.join(staging, "package");
+        if (!existsSync(path.join(dir, "mcp", "server.mjs")))
+            throw new Error("the package has no mcp/server.mjs");
+        if (packageVersion(dir) !== version)
+            throw new Error("the package is not the version the registry named");
+        const target = path.join(options.root, version);
+        try {
+            await rename(staging, target);
+            staging = undefined;
+        }
+        catch (err) {
+            // Another session got there first, which is the same outcome.
+            if (cachedCopies(options.root).some((copy) => copy.version === version))
+                return { status: "cached", version };
+            throw err;
+        }
+        await prune(options.root);
+        return { status: "installed", version };
+    }
+    catch (err) {
+        return { status: "failed", error: err instanceof Error ? err.message : String(err) };
+    }
+    finally {
+        if (staging)
+            await rm(staging, { recursive: true, force: true }).catch(() => { });
+    }
+}
+/**
+ * Drop all but the newest few versions, and staging left by a crash.
+ *
+ * Staging is only cleared once it is an hour old, since a younger one may be
+ * another session's download still in progress.
+ */
+async function prune(root) {
+    const keep = new Set(cachedCopies(root).slice(0, KEEP).map((copy) => copy.version));
+    for (const name of await readdir(root).catch(() => [])) {
+        const full = path.join(root, name);
+        if (name.startsWith(".staging-")) {
+            const age = Date.now() - (await stat(full).then((s) => s.mtimeMs).catch(() => Date.now()));
+            if (age > 3_600_000)
+                await rm(full, { recursive: true, force: true }).catch(() => { });
+            continue;
+        }
+        if (parse(name) && !keep.has(name))
+            await rm(full, { recursive: true, force: true }).catch(() => { });
+    }
+}
+//# sourceMappingURL=ottoport-updates.js.map

package/dist/mcp/ottoport-updates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ottoport-updates.js","sourceRoot":"","sources":["../../src/mcp/ottoport-updates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AA6BtC,kFAAkF;AAClF,SAAS,KAAK,CAAC,OAAe;IAC5B,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAClF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,MAAM,OAAO,GAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA2B,CAAC,OAAO,CAAC;QACpH,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QAClD,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAiC,EAAE,MAA+B;IACzF,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC;IAC/G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,IAAI,GAAG,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC/C,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AACjD,CAAC;AAsBD,oFAAoF;AACpF,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,6EAA6E;AAC7E,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,6EAA6E;AAC7E,MAAM,IAAI,GAAG,CAAC,CAAC;AAEf,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEhC;;;;;;GAMG;AACH,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,IAAY;IACpD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,SAAiB;IAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,SAAS;SACtB,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,KAAK,CAAC,MAA+B,EAAE,EAAU;IACxD,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAsB;IACzD,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACrF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,4BAA4B,CAAC;IAClE,IAAI,OAA2B,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,QAAQ,kBAAkB,EAAE;YAC5D,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC;YAClD,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6E,CAAC;QACnH,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,+DAA+D;QAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxG,IAAI,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QAC1F,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;QACrF,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAE9G,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;QACrC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC;QACzC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACxH,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAEtF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QACxD,sEAAsE;QACtE,2CAA2C;QAC3C,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;QAEvG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,wEAAwE;QACxE,mEAAmE;QACnE,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAClD,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC3G,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAE1G,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC9B,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,8DAA8D;YAC9D,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAC9G,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACvF,CAAC;YAAS,CAAC;QACT,IAAI,OAAO;YAAE,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,KAAK,CAAC,IAAY;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACpF,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC3F,IAAI,GAAG,GAAG,SAAS;gBAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtF,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvG,CAAC;AACH,CAAC"}