@open-everywhere/core 0.1.0

package/dist/agent/control/delivery-history.js

@@ -0,0 +1,397 @@
+// DELIVERY AUDIT READ MODEL (OPE-212) — the durable answer to "my webhook is wired up, so why did
+// nothing happen?", assembled from rows the ingress and the fan-out ALREADY write.
+//
+// ── IT IS A READ MODEL. IT ADDS NO STORAGE, AND THAT IS THE DESIGN, NOT A SHORTCUT ──────────────
+// Every fact below is already durable somewhere: `webhook.fired` / `webhook.declined` (one row per
+// ACCEPTED delivery, unthrottled — channels/webhooks.ts), `webhook.rejected` (throttled, one per
+// identity per minute — webhooks/reject-audit.ts), and the fan-out's own `routine.fire` /
+// `routine.skip` / `routine.fire_lost` (routines/fire-audit.ts). What did NOT exist was anything
+// that JOINED them: the delivery rows live under the hook's target partition, the routine rows under
+// each ROUTINE's partition, and no query spanned both. So "the hook is delivering AND my routine is
+// refused" was two separate investigations by two different people, and the honest answer to "why
+// didn't it fire" was "read the audit log yourself".
+//
+// 🔴 NO PAYLOAD BODY IS READ, RETURNED OR PERSISTED ON ANY PATH IN THIS FILE. The audit code refuses
+// to copy sender-supplied bytes into a tamper-evident table (audit/audit.ts, and the raw-body
+// discipline in channels/webhooks.ts), and this reader inherits that refusal rather than restating
+// it: it reads `AuditEntry.detail`, which holds ids, counts, reasons and byte COUNTS and never a
+// body. `bytes` is a number. There is no branch here that can reach a request body, because no
+// request body was ever stored for one to reach.
+//
+// ⚠️ CORRECTED, BECAUSE THE FORWARD REFERENCE CAME TRUE: temporary capture SHIPPED (OPE-211) as a
+// separate table (`webhook_capture`), a separate read model (`control/capture-window-read.ts`) and a
+// separate arming act. It retains the jq FILTER DOCUMENT, never the raw body or the headers, and
+// only inside an explicitly-armed window. Everything above still describes THIS file exactly — no
+// path here reaches that table — but the claim "no request body was ever stored" is now a statement
+// about this reader's inputs, not about the deployment as a whole. `resolveHook` below is shared
+// with that read model on purpose: one hook-resolution and one `readableBy` gate for both, because
+// two differently-shaped gates over the same hooks is how a hole opens.
+//
+// ── WHY MISSES, NOT JUST HITS (doctrine 7: "audit what went unmatched") ─────────────────────────
+// A history that shows only fires cannot answer the question it exists for — the interesting rows
+// are exactly the ones a hits-only model discards. Three miss classes are surfaced, all pre-existing:
+//   • REFUSED AT THE DOOR — `webhook.rejected` (bad signature, unknown id, oversized, replayed). The
+//     sender thinks it is delivering; nothing here ever saw a routable event.
+//   • ACCEPTED, MATCHED NOTHING — a delivery row whose `matched` is 0. The hook works and the filter
+//     does not. (Distinguishing "filter wrong" from "nothing has arrived" is `firstMatchAt` /
+//     `lastMatchAt` on the routine itself — OPE-184; this side says whether anything ARRIVED.)
+//   • MATCHED, THEN REFUSED — `routine.skip`, carrying the closed {@link RoutineSkipReason}. This is
+//     the one that kills the silent-failure class: a zero-domain hook (OPE-206) now reads as
+//     "matched, refused: grant_refused" instead of as nothing at all.
+//
+// ⭐ NO NEW REASON VOCABULARY IS MINTED HERE. Misses are reported with `RoutineSkipReason`'s values
+// VERBATIM (routines/fire-audit.ts) — the same closed set the fan-out writes and the same set
+// docs/capabilities/proactivity-and-routines.md tabulates. channels/ambient-skip.ts's header asks
+// that this read model share its vocabulary rather than grow a second one; the shape that honours it
+// is one ANSWER SURFACE over the existing sets, not a merged enum. The two sets stay distinct because
+// they answer different questions about different planes — `AmbientSkip` ("no-domain" /
+// "domain-refused") is about whether a SURFACE's standing supervisor engaged, written only by the
+// provider chat/issue ingresses, and is not attributable to a hook — and a union enum would have to
+// pick one word for two facts. What is shared is the rule: a reason string here is always a value
+// some existing writer already emits, never one this reader invented.
+//
+// ── THE GATE IS `readableBy`, AND IT IS LITERALLY THE FIRE GATE ────────────────────────────────
+// The authorization argument in one line: **if a routine on this surface could have been FIRED by
+// this hook, this surface may READ that hook's delivery history.** It is not an analogy — the check
+// below calls the same two functions the fire path calls (`resolveAccessForPartition` +
+// `scopeGrantsRead`, routines/event-authz.ts + access/read-grant.ts), in the same order, so the read
+// boundary cannot drift from the fire boundary by anyone editing one and not the other. A second,
+// hand-rolled copy of "may this surface see this hook" is exactly the divergence `readableBy` was
+// reinstated to end (access/read-grant.ts rule 1).
+//
+// That is also why the read is ORG-WIDE over the hook rather than partition-pinned the way
+// routines/fire-audit.ts's `listRoutineFires` is. The rows it needs are written in several
+// partitions by construction, so partition-pinning would silently return a fraction of the truth —
+// which for a diagnostic is worse than refusing. The scope of the query is therefore not the
+// boundary here; `readableBy` is, which is the whole point of it existing.
+//
+// 🔴 A REFUSAL NAMES THE GRANT. A hook readable by nobody is the live defect this ticket's bonus is
+// about, so refusing silently would reproduce it one layer up. The refusal renders the grant through
+// `describeReadableBy`, whose empty case is the sentence "NOBODY (no routine can ever read this
+// hook's events)" — so asking about a dead hook TELLS YOU IT IS DEAD.
+//
+// ── VOLUME ──────────────────────────────────────────────────────────────────────────────────────
+// The firehose this ticket had to avoid is a row PER DELIVERY on a busy unrouted source. This module
+// cannot cause one: it writes no per-delivery row, because it writes nothing on the delivery path at
+// all. Its only write is ONE `webhook.history_read` row per READ — a model- or human-initiated
+// action inside a paid turn, which is the same volume class as `routine.transcript_read` and
+// `control.service_call` and is unthrottled for the same reason. That property is asserted rather
+// than asserted-in-prose: scripts/webhook-history-test.ts drives a fixture with many deliveries and
+// many misses through {@link readDeliveryHistory} and fails if the injected audit sink sees anything
+// other than exactly one row.
+//
+// The throttles on the rows it READS are a different matter, and the model must not launder them
+// into a false per-delivery story: `routine.skip` is one row per (routine, reason) per hour and
+// `webhook.rejected` one per identity per minute, each carrying the count it stands in for. So every
+// miss below reports `standsFor`, and {@link DeliveryHistory} carries `throttled` to say so in
+// words. The absence of a miss row is NOT proof a delivery was fine — it may have been suppressed —
+// and the read model says that rather than implying otherwise.
+//
+// ── THE READ IS AUDITED ─────────────────────────────────────────────────────────────────────────
+// `webhook.history_read`, mirroring `routine.transcript_read` (control/transcript-relay.ts): ids and
+// counts only, never content, written where the disclosure actually happens. Both verdicts are
+// recorded — a REFUSED read is the more interesting row, since it is the trace of someone asking
+// about a hook their domain cannot read. A read of an UNKNOWN source writes nothing, deliberately:
+// the source name is caller-supplied and unbounded, and webhooks/reject-audit.ts's rule ("the
+// throttle key must not contain an attacker-chosen string", and the row's labels likewise) applies
+// to any row a caller can mint the identity of. Once a hook has RESOLVED, every field in the row is
+// host-owned.
+import { appendAudit, readAudit } from "../audit/audit.js";
+import { getConfig } from "../access/config.js";
+import { describeReadableBy, scopeGrantsRead } from "../access/read-grant.js";
+import { resolveAccessForPartition } from "../routines/event-authz.js";
+import { FORENSIC_SCAN_LIMIT, FORENSIC_WINDOW_MS, ROUTINE_AUDIT } from "../routines/fire-audit.js";
+import { isEventTrigger } from "../routines/event-match.js";
+import { listAllRoutines } from "../routines/store.js";
+import { findWebhook } from "../webhooks/config.js";
+/** The audit action a history read writes about itself. Sibling of `routine.transcript_read`.
+ *  ATTRIBUTED since OPE-295 item 7 — the row already carried the room, the hook and the verdict, and
+ *  left the acting principal unset, so "who ran this read" was the one thing it could not answer. */
+export const WEBHOOK_HISTORY_READ = "webhook.history_read";
+/** The delivery actions this model reads. Deliberately the constants, not literals scattered about. */
+const WEBHOOK_DELIVERY_ACTIONS = {
+    fired: "webhook.fired",
+    declined: "webhook.declined",
+    rejected: "webhook.rejected",
+};
+/** The look-back window. THE SAME 7 days routine forensics uses (routines/fire-audit.ts), on purpose:
+ *  "what a delivery history can reach" must equal "what the run history in `list_routines` already
+ *  showed", or the two diagnostics disagree about whether something happened. */
+const HISTORY_WINDOW_MS = FORENSIC_WINDOW_MS;
+/** Row ceiling on each underlying audit scan. Counts are therefore "over at most the newest N rows
+ *  in the window" — stated, not silently approximated. Shared with routine forensics for the same
+ *  reason the window is. */
+const HISTORY_SCAN_LIMIT = FORENSIC_SCAN_LIMIT;
+/** How many individual deliveries come back, newest-first. Small on purpose: this is a page rendered
+ *  into a model's context, and the counts above it already carry the volume story. */
+export const HISTORY_MAX_DELIVERIES = 25;
+/** Per-routine miss rows returned, newest-first — each already stands for up to an hour of its own
+ *  (routine, reason) pair, so a handful covers a day. */
+const HISTORY_MAX_MISSES = 10;
+/** Cap on any string this model copies out of an audit row's `detail`. Those strings originate
+ *  off-host (a vendor's rejection text, jq's own evaluator message) and are not ours to trust as
+ *  short — the same bound webhooks/reject-audit.ts and `auditRoutineFireLost` already apply on the
+ *  way IN, re-applied on the way OUT so a row written before those caps existed cannot flood a page. */
+export const HISTORY_DETAIL_MAX_CHARS = 300;
+function cap(v) {
+    return typeof v === "string" && v.length > 0 ? v.slice(0, HISTORY_DETAIL_MAX_CHARS) : null;
+}
+function num(v) {
+    return typeof v === "number" && Number.isFinite(v) ? v : null;
+}
+function count(v) {
+    return typeof v === "number" && Number.isFinite(v) && v > 0 ? v : 0;
+}
+/**
+ * Resolve a model-facing handle to a declared hook, or undefined.
+ *
+ * A hook's handle is its `id` — `POST /webhooks/deploy-status` is `source: "deploy-status"` to a
+ * routine, which is the only handle this model accepts.
+ *
+ * ⚠️ IT USED TO BE A TWO-STEP LOOKUP, config first then the chat-created store (OPE-224 deleted the
+ * second). One registry is now the whole answer, which is exactly why OPE-227 and OPE-228 stopped
+ * being expressible: there is one thing to enumerate and one namespace to be unique within.
+ */
+export async function resolveHook(org, handle, deps) {
+    const configured = (deps.configHooks ?? (() => getConfig().loadWebhooks?.() ?? []))();
+    const cfg = findWebhook(configured, handle);
+    return cfg ? { id: cfg.id, source: cfg.id, hookClass: "config", readableBy: cfg.readableBy } : undefined;
+}
+/** Read one action's rows for this org over the window. */
+async function scan(deps, org, action, since) {
+    return (deps.read ?? readAudit)({ org, action, since, limit: HISTORY_SCAN_LIMIT });
+}
+/** Fold one accepted-delivery row (`webhook.fired` / `webhook.declined`) into a record. */
+function acceptedRecord(row, outcome) {
+    const d = row.detail ?? {};
+    // The verification grade is READ, never re-derived: `channels/webhooks.ts` stamps `unverified` for
+    // the dev hatch and `previousKey` for a delivery that verified against a superseded key, and an
+    // absent stamp is the ordinary current-key signature. Inventing a fourth reading here would be a
+    // second opinion about a fact the ingress already decided.
+    const verification = d["unverified"] === true ? "unverified" : d["previousKey"] === true ? "previous-key" : "signed";
+    return {
+        at: row.ts,
+        outcome,
+        deliveryId: cap(d["deliveryId"]),
+        bytes: num(d["bytes"]),
+        verification,
+        status: null,
+        // `routingReason` is the EVENT-PLANE's own refusal (an unmodelled event, a replay); `reason` is
+        // the declared fire's decline. Both are one-line, neither carries payload bytes.
+        reason: cap(d["routingReason"]) ?? cap(d["reason"]),
+        matched: num(d["matched"]),
+        fired: num(d["fired"]),
+        skipped: num(d["skipped"]),
+        standsFor: 0,
+    };
+}
+/** Fold one `webhook.rejected` row. These never reached the routing plane, so the fan-out fields are
+ *  null rather than zero — "we never asked" is not "nothing matched". */
+function rejectedRecord(row) {
+    const d = row.detail ?? {};
+    return {
+        at: row.ts,
+        outcome: "rejected",
+        deliveryId: null,
+        bytes: null,
+        verification: "refused",
+        status: num(d["status"]),
+        reason: cap(d["reason"]),
+        matched: null,
+        fired: null,
+        skipped: null,
+        standsFor: count(d["suppressed"]),
+    };
+}
+/**
+ * THE READ. Compose one hook's delivery history from rows already written, gated at the hook's own
+ * `readableBy`, and audit the read itself.
+ *
+ * NEVER THROWS for an authorization outcome — an unknown handle and an ungranted one are both
+ * `ok: false` with a sentence, because this is a diagnostic and a thrown error is the least useful
+ * possible answer to "why is nothing happening". A STORE failure does throw: a history that silently
+ * degraded to "no deliveries" would answer the question wrongly rather than not at all, which on
+ * this particular tool is the one failure mode that matters.
+ */
+export async function readDeliveryHistory(request, deps = {}) {
+    const org = request.partition.org;
+    const hook = await resolveHook(org, request.source, deps);
+    if (!hook) {
+        // NOT AUDITED, and see the header: the handle is caller-supplied and unbounded, so a row here
+        // would carry a label the caller chose. Nothing was disclosed and no grant was consulted.
+        return {
+            ok: false,
+            reason: "unknown-hook",
+            message: `no inbound webhook named "${request.source.slice(0, 80)}" exists for this org — check the name with list_webhooks.`,
+        };
+    }
+    // THE GATE. The same two calls the fire path makes, in the same order (see the header). Fail-closed
+    // on a resolution failure: a config that will not load must never read as "granted".
+    const grantText = describeReadableBy(hook.readableBy);
+    let granted;
+    try {
+        const access = (deps.resolve ?? resolveAccessForPartition)(request.partition);
+        granted = scopeGrantsRead(hook.readableBy, access);
+    }
+    catch {
+        granted = false;
+    }
+    const now = deps.now?.() ?? new Date();
+    const audit = deps.audit ?? appendAudit;
+    // Written for BOTH verdicts, before the read, from the partition that asked. Ids, counts and the
+    // verdict — never a delivery, never a reason string read out of a row.
+    await audit({
+        org,
+        platform: request.partition.platform,
+        workspace: request.partition.workspace,
+        surface: request.partition.surface,
+        ...(request.principalId !== undefined ? { principalId: request.principalId } : {}),
+        action: WEBHOOK_HISTORY_READ,
+        detail: {
+            // The hook id is fine in an OPERATOR-plane row and is the join key for it (channels/
+            // webhooks.ts says so explicitly); it is the model-facing surfaces that never see it, and the
+            // result this function returns does not carry it.
+            hookId: hook.id,
+            source: hook.source,
+            hookClass: hook.hookClass,
+            granted,
+            readableBy: grantText,
+        },
+    }).catch(() => undefined);
+    if (!granted) {
+        return {
+            ok: false,
+            reason: "not-readable",
+            message: `the "${hook.source}" hook's events are readable by: ${grantText}. This channel's domain is not among them, ` +
+                "so its delivery history cannot be read from here (and no routine here could be fired by it either — it is the same grant).",
+        };
+    }
+    const sinceIso = new Date(now.getTime() - HISTORY_WINDOW_MS).toISOString();
+    const [firedRows, declinedRows, rejectedRows] = await Promise.all([
+        scan(deps, org, WEBHOOK_DELIVERY_ACTIONS.fired, sinceIso),
+        scan(deps, org, WEBHOOK_DELIVERY_ACTIONS.declined, sinceIso),
+        scan(deps, org, WEBHOOK_DELIVERY_ACTIONS.rejected, sinceIso),
+    ]);
+    // `detail.hookId` is the UNIFORM join key across all three delivery actions — both classes of hook
+    // stamp it, and so does the throttled rejection row (length-capped there, which is why the compare
+    // is against the stored id rather than the other way round).
+    const mine = (rows) => rows.filter((r) => r.detail?.["hookId"] === hook.id);
+    const accepted = [
+        ...mine(firedRows).map((r) => acceptedRecord(r, "fired")),
+        ...mine(declinedRows).map((r) => acceptedRecord(r, "declined")),
+    ];
+    const rejected = mine(rejectedRows).map(rejectedRecord);
+    const deliveries = [...accepted, ...rejected].sort((a, b) => (a.at < b.at ? 1 : a.at > b.at ? -1 : 0));
+    // THE SUBSCRIBERS. Resolved from the routine store rather than from a stamp on the skip rows: a
+    // routine has exactly one trigger, so "every routine whose event trigger names this hook" is an
+    // exact set, and filtering the routine rows by that set attributes them without any write-side
+    // change. Inactive and self-disabled routines are INCLUDED — "it used to fire and stopped" is the
+    // question, and dropping them would hide the answer.
+    const all = await (deps.routines ?? listAllRoutines)();
+    const subscribed = all.filter((r) => r.org === org && isEventTrigger(r.trigger) && r.trigger.source === hook.source);
+    const ids = new Set(subscribed.map((r) => r.id));
+    const [fireRows, skipRows, lostRows] = ids.size === 0
+        ? [[], [], []]
+        : await Promise.all([
+            scan(deps, org, ROUTINE_AUDIT.fire, sinceIso),
+            scan(deps, org, ROUTINE_AUDIT.skip, sinceIso),
+            scan(deps, org, ROUTINE_AUDIT.fireLost, sinceIso),
+        ]);
+    const forRoutine = (rows, id) => rows.filter((r) => r.detail?.["routineId"] === id);
+    const subscribers = subscribed.map((r) => {
+        const fires = forRoutine(fireRows, r.id);
+        const misses = [
+            ...forRoutine(skipRows, r.id).map((row) => {
+                const d = row.detail ?? {};
+                const reason = typeof d["reason"] === "string" ? d["reason"] : "unknown";
+                // ONE supporting field per reason, chosen because it is the one a reader acts on. `why`
+                // (jq's own message) and `error` come from off-host evaluators/vendors, so both are capped.
+                const detail = cap(d["why"]) ?? cap(d["grant"]) ?? cap(d["partition"]) ?? cap(d["floor"]) ?? cap(d["note"]);
+                return { at: row.ts, reason, detail, standsFor: count(d["suppressed"]) };
+            }),
+            ...forRoutine(lostRows, r.id).map((row) => ({
+                at: row.ts,
+                reason: "fire_lost",
+                detail: cap(row.detail?.["error"]),
+                standsFor: 0,
+            })),
+        ]
+            .sort((a, b) => (a.at < b.at ? 1 : a.at > b.at ? -1 : 0))
+            .slice(0, HISTORY_MAX_MISSES);
+        return {
+            routineId: r.id,
+            status: r.status,
+            surfaceKey: r.surfaceKey,
+            fires: fires.length,
+            lastFireAt: fires[0]?.ts ?? null, // readAudit is newest-first and the filter preserves order
+            misses,
+        };
+    });
+    const page = deliveries.slice(0, HISTORY_MAX_DELIVERIES);
+    const throttled = page.some((d) => d.standsFor > 0) || subscribers.some((s) => s.misses.some((m) => m.standsFor > 0));
+    return {
+        ok: true,
+        history: {
+            source: hook.source,
+            hookClass: hook.hookClass,
+            readableBy: grantText,
+            sinceIso,
+            deliveries: page,
+            totals: {
+                accepted: accepted.length,
+                rejected: rejected.length,
+                matchedNothing: accepted.filter((d) => d.matched === 0).length,
+            },
+            moreDeliveries: deliveries.length > page.length,
+            subscribers,
+            throttled,
+        },
+    };
+}
+/** Render a history as the plain text the tool hands the model. Host-composed, ids and counts only —
+ *  every off-host string it embeds was capped on the way out of {@link readDeliveryHistory}. */
+export function renderDeliveryHistory(h) {
+    const lines = [];
+    lines.push(`webhook "${h.source}" (${h.hookClass}-declared) — deliveries since ${h.sinceIso}`, `readable by: ${h.readableBy}`, `${h.totals.accepted} accepted, ${h.totals.rejected} rejected at the door, ${h.totals.matchedNothing} accepted but matched no routine`, "");
+    if (h.deliveries.length === 0) {
+        lines.push("No deliveries at all in the window — the sender has not reached this endpoint. Nothing downstream can be wrong yet.");
+    }
+    else {
+        lines.push(`deliveries (newest first${h.moreDeliveries ? `, showing ${h.deliveries.length}` : ""}):`);
+        for (const d of h.deliveries) {
+            const parts = [
+                d.at,
+                d.outcome.toUpperCase(),
+                d.status !== null ? `HTTP ${d.status}` : "",
+                d.verification,
+                d.bytes !== null ? `${d.bytes}B` : "",
+                d.deliveryId ? `id=${d.deliveryId}` : "",
+                d.matched !== null ? `matched ${d.matched} -> fired ${d.fired}, skipped ${d.skipped}` : "",
+                d.reason ? `(${d.reason})` : "",
+                d.standsFor > 0 ? `[+${d.standsFor} more like this, throttled]` : "",
+            ].filter((s) => s.length > 0);
+            lines.push(`  ${parts.join(" | ")}`);
+        }
+    }
+    lines.push("");
+    if (h.subscribers.length === 0) {
+        lines.push("No event routine subscribes to this hook, so an accepted delivery has nothing to fire. Create one with create_routine.");
+    }
+    else {
+        lines.push("subscribed routines:");
+        for (const s of h.subscribers) {
+            lines.push(`  ${s.routineId} [${s.status}] on ${s.surfaceKey} — ${s.fires} fire(s)${s.lastFireAt ? `, last ${s.lastFireAt}` : ""}`);
+            if (s.misses.length === 0 && s.fires === 0)
+                lines.push("    no fires and no recorded misses — its filter has not matched anything.");
+            for (const m of s.misses) {
+                lines.push(`    MISS ${m.at} ${m.reason}${m.detail ? `: ${m.detail}` : ""}${m.standsFor > 0 ? ` [+${m.standsFor} suppressed]` : ""}`);
+            }
+        }
+    }
+    if (h.throttled) {
+        lines.push("", "NOTE: miss and rejection rows are rate-limited (one per routine+reason per hour, one per rejection identity per minute) " +
+            "and carry the count they stand in for. The ABSENCE of a row for a given delivery is not proof that delivery was fine.");
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=delivery-history.js.map

package/dist/agent/control/delivery-history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-history.js","sourceRoot":"","sources":["../../../agent/control/delivery-history.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,mFAAmF;AACnF,EAAE;AACF,mGAAmG;AACnG,mGAAmG;AACnG,iGAAiG;AACjG,0FAA0F;AAC1F,iGAAiG;AACjG,qGAAqG;AACrG,oGAAoG;AACpG,kGAAkG;AAClG,qDAAqD;AACrD,EAAE;AACF,qGAAqG;AACrG,8FAA8F;AAC9F,mGAAmG;AACnG,iGAAiG;AACjG,+FAA+F;AAC/F,iDAAiD;AACjD,EAAE;AACF,kGAAkG;AAClG,qGAAqG;AACrG,iGAAiG;AACjG,kGAAkG;AAClG,oGAAoG;AACpG,iGAAiG;AACjG,mGAAmG;AACnG,wEAAwE;AACxE,EAAE;AACF,mGAAmG;AACnG,kGAAkG;AAClG,sGAAsG;AACtG,qGAAqG;AACrG,8EAA8E;AAC9E,qGAAqG;AACrG,8FAA8F;AAC9F,+FAA+F;AAC/F,qGAAqG;AACrG,6FAA6F;AAC7F,sEAAsE;AACtE,EAAE;AACF,mGAAmG;AACnG,8FAA8F;AAC9F,kGAAkG;AAClG,qGAAqG;AACrG,sGAAsG;AACtG,wFAAwF;AACxF,kGAAkG;AAClG,oGAAoG;AACpG,kGAAkG;AAClG,sEAAsE;AACtE,EAAE;AACF,kGAAkG;AAClG,kGAAkG;AAClG,oGAAoG;AACpG,wFAAwF;AACxF,qGAAqG;AACrG,kGAAkG;AAClG,kGAAkG;AAClG,mDAAmD;AACnD,EAAE;AACF,2FAA2F;AAC3F,2FAA2F;AAC3F,mGAAmG;AACnG,6FAA6F;AAC7F,2EAA2E;AAC3E,EAAE;AACF,oGAAoG;AACpG,qGAAqG;AACrG,gGAAgG;AAChG,sEAAsE;AACtE,EAAE;AACF,mGAAmG;AACnG,qGAAqG;AACrG,qGAAqG;AACrG,+FAA+F;AAC/F,6FAA6F;AAC7F,kGAAkG;AAClG,oGAAoG;AACpG,qGAAqG;AACrG,8BAA8B;AAC9B,EAAE;AACF,iGAAiG;AACjG,gGAAgG;AAChG,qGAAqG;AACrG,+FAA+F;AAC/F,oGAAoG;AACpG,+DAA+D;AAC/D,EAAE;AACF,mGAAmG;AACnG,qGAAqG;AACrG,+FAA+F;AAC/F,iGAAiG;AACjG,mGAAmG;AACnG,8FAA8F;AAC9F,mGAAmG;AACnG,oGAAoG;AACpG,cAAc;AAEd,OAAO,EAAE,WAAW,EAAE,SAAS,EAAsD,MAAM,mBAAmB,CAAC;AAC/G,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAmB,MAAM,yBAAyB,CAAC;AAE/F,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAoB,MAAM,uBAAuB,CAAC;AAItE;;qGAEqG;AACrG,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAE3D,uGAAuG;AACvG,MAAM,wBAAwB,GAAG;IAC/B,KAAK,EAAE,eAAe;IACtB,QAAQ,EAAE,kBAAkB;IAC5B,QAAQ,EAAE,kBAAkB;CACpB,CAAC;AAEX;;iFAEiF;AACjF,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C;;4BAE4B;AAC5B,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAE/C;sFACsF;AACtF,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAEzC;yDACyD;AACzD,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B;;;wGAGwG;AACxG,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAsG5C,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAmBD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,MAAc,EAAE,IAAyB;IACtF,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3G,CAAC;AAED,2DAA2D;AAC3D,KAAK,UAAU,IAAI,CAAC,IAAyB,EAAE,GAAW,EAAE,MAAc,EAAE,KAAa;IACvF,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,2FAA2F;AAC3F,SAAS,cAAc,CAAC,GAAe,EAAE,OAA6B;IACpE,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;IAC3B,mGAAmG;IACnG,gGAAgG;IAChG,iGAAiG;IACjG,2DAA2D;IAC3D,MAAM,YAAY,GAAyB,CAAC,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC3I,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO;QACP,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAChC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACtB,YAAY;QACZ,MAAM,EAAE,IAAI;QACZ,gGAAgG;QAChG,iFAAiF;QACjF,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnD,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1B,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1B,SAAS,EAAE,CAAC;KACb,CAAC;AACJ,CAAC;AAED;yEACyE;AACzE,SAAS,cAAc,CAAC,GAAe;IACrC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;IAC3B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;QACX,YAAY,EAAE,SAAS;QACvB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACxB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;KAClC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAKC,EACD,IAAI,GAAwB,EAAE;IAE9B,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,8FAA8F;QAC9F,0FAA0F;QAC1F,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,6BAA6B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,4DAA4D;SAC9H,CAAC;IACJ,CAAC;IAED,oGAAoG;IACpG,qFAAqF;IACrF,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,yBAAyB,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9E,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC;IACxC,iGAAiG;IACjG,uEAAuE;IACvE,MAAM,KAAK,CAAC;QACV,GAAG;QACH,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,SAAS;QACtC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,OAAO;QAClC,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,EAAE,oBAAoB;QAC5B,MAAM,EAAE;YACN,qFAAqF;YACrF,8FAA8F;YAC9F,kDAAkD;YAClD,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO;YACP,UAAU,EAAE,SAAS;SACtB;KACF,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE1B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,cAAc;YACtB,OAAO,EACL,QAAQ,IAAI,CAAC,MAAM,oCAAoC,SAAS,6CAA6C;gBAC7G,4HAA4H;SAC/H,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3E,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAChE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,wBAAwB,CAAC,KAAK,EAAE,QAAQ,CAAC;QACzD,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC5D,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,CAAC;KAC7D,CAAC,CAAC;IAEH,mGAAmG;IACnG,mGAAmG;IACnG,6DAA6D;IAC7D,MAAM,IAAI,GAAG,CAAC,IAA2B,EAAgB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;IACjH,MAAM,QAAQ,GAAG;QACf,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACzD,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;KAChE,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvG,gGAAgG;IAChG,gGAAgG;IAChG,+FAA+F;IAC/F,kGAAkG;IAClG,qDAAqD;IACrD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC,EAAE,CAAC;IACvD,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;IACrH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEjD,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAClC,GAAG,CAAC,IAAI,KAAK,CAAC;QACZ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QACd,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7C,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7C,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC;SAClD,CAAC,CAAC;IACT,MAAM,UAAU,GAAG,CAAC,IAA2B,EAAE,EAAU,EAAgB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;IAEjI,MAAM,WAAW,GAAwB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5D,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,MAAM,GAAkB;YAC5B,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBACxC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzE,wFAAwF;gBACxF,4FAA4F;gBAC5F,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5G,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YAC3E,CAAC,CAAC;YACF,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC1C,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;gBAClC,SAAS,EAAE,CAAC;aACb,CAAC,CAAC;SACJ;aACE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACxD,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAChC,OAAO;YACL,SAAS,EAAE,CAAC,CAAC,EAAE;YACf,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,2DAA2D;YAC7F,MAAM;SACP,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACzD,MAAM,SAAS,GACb,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;IACtG,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE;YACP,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,SAAS;YACrB,QAAQ;YACR,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE;gBACN,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM;aAC/D;YACD,cAAc,EAAE,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;YAC/C,WAAW;YACX,SAAS;SACV;KACF,CAAC;AACJ,CAAC;AAED;gGACgG;AAChG,MAAM,UAAU,qBAAqB,CAAC,CAAkB;IACtD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CACR,YAAY,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,SAAS,iCAAiC,CAAC,CAAC,QAAQ,EAAE,EAClF,gBAAgB,CAAC,CAAC,UAAU,EAAE,EAC9B,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,cAAc,CAAC,CAAC,MAAM,CAAC,QAAQ,0BAA0B,CAAC,CAAC,MAAM,CAAC,cAAc,kCAAkC,EACtI,EAAE,CACH,CAAC;IACF,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,qHAAqH,CAAC,CAAC;IACpI,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACtG,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG;gBACZ,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE;gBACvB,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;gBAC3C,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE;gBACrC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE;gBACxC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;gBAC1F,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE;gBAC/B,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,6BAA6B,CAAC,CAAC,CAAC,EAAE;aACrE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,wHAAwH,CAAC,CAAC;IACvI,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpI,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;YACrI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxI,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CACR,EAAE,EACF,0HAA0H;YACxH,uHAAuH,CAC1H,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/agent/control/http.d.ts

@@ -0,0 +1,13 @@
+import { type IncomingMessage, type ServerResponse, type Server } from "node:http";
+import { type AdminIdentity } from "./auth.js";
+import type { TranscriptExportReader } from "./transcript-export.js";
+export interface AdminHttpOptions {
+    readonly authenticate?: (req: IncomingMessage) => Promise<AdminIdentity | null>;
+    readonly requiredRole?: string;
+    readonly includeWrites?: boolean;
+    readonly allowUnauthenticated?: boolean;
+    readonly readTranscript?: TranscriptExportReader;
+}
+export declare function handleControlRequest(req: IncomingMessage, res: ServerResponse, opts?: AdminHttpOptions, parsedBody?: unknown): Promise<void>;
+export declare function createAdminHttpServer(opts?: AdminHttpOptions): Server;
+//# sourceMappingURL=http.d.ts.map

package/dist/agent/control/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../agent/control/http.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAGjG,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAIrE,MAAM,WAAW,gBAAgB;IAK/B,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAGhF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAEjC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAcxC,QAAQ,CAAC,cAAc,CAAC,EAAE,sBAAsB,CAAC;CAClD;AAqBD,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,GAAE,gBAAqB,EAC3B,UAAU,CAAC,EAAE,OAAO,GACnB,OAAO,CAAC,IAAI,CAAC,CAyEf;AAID,wBAAgB,qBAAqB,CAAC,IAAI,GAAE,gBAAqB,GAAG,MAAM,CAMzE"}

package/dist/agent/control/http.js

@@ -0,0 +1,131 @@
+// Remote transport for the admin plane — the "small web app" that hosts the MCP
+// server over HTTP so a deployed instance (e.g. Vercel) is reachable, vs the local
+// stdio entry (scripts/control-mcp.ts). Same buildControlServer(); only the
+// transport differs. Eve is Next.js, so in the real deploy this mounts as a route
+// handler in the Eve app (or a sibling app sharing the Neon DB).
+//
+// STATELESS by design: per the MCP serverless pattern, each request gets a FRESH
+// server + transport (sessionIdGenerator: undefined, no session reuse) — that's
+// what fits Vercel/Lambda's ephemeral, per-invocation model. No in-memory session
+// map to lose across cold starts.
+//
+// FAIL-CLOSED AUTH: a remote MCP server MUST be an OAuth 2.1 resource server
+// (RFC 9728 + RFC 8707). That gate now exists, on the DEPLOYMENT-MOUNTED route —
+// control/mcp-route.ts, behind control/oauth-resource.ts (OPE-72). This node:http
+// handler is not that route and does not run it: it REFUSES every request unless
+// the caller passes an `authorize` hook (real auth) or explicitly opts into
+// `allowUnauthenticated` (local/dev only). So it cannot be deployed publicly-open
+// by accident — the default is 401.
+//
+// DATA DURABILITY CAVEAT: this serves the control views, which read spend/routines/
+// audit from the FILESYSTEM today. On Vercel's ephemeral FS that's empty/unshared —
+// those stores must move behind the Neon provider seam (the slice before this is
+// useful in production). The transport here is correct regardless of that move.
+import { createServer } from "node:http";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { buildControlServer } from "./server.js";
+import { SERVICE_TOKEN_ISSUER } from "./auth.js";
+import { appendAudit } from "../audit/audit.js";
+import { deploymentOrg } from "../identity/binding.js";
+async function readJsonBody(req) {
+    const chunks = [];
+    for await (const chunk of req)
+        chunks.push(chunk);
+    if (chunks.length === 0)
+        return undefined;
+    const raw = Buffer.concat(chunks).toString("utf-8");
+    return raw ? JSON.parse(raw) : undefined;
+}
+function deny(res, code, message) {
+    res.writeHead(code, { "content-type": "application/json" });
+    res.end(JSON.stringify({ jsonrpc: "2.0", error: { code: -32001, message }, id: null }));
+}
+// Framework-neutral request handler — works in a raw node:http server, and drops
+// into a Next.js / Vercel Node route (parse the body, call this). `parsedBody` is
+// optional: pass it when the framework already parsed the JSON, else it's read here.
+// 🔴 EXPORT KEPT FOR A CONSUMER OUTSIDE THIS REPO (OPE-1455): that self-host route, which mounts
+// this handler directly. In-repo the only caller is `createAdminHttpServer` below, and the
+// control-auth suite drives it through that wrapper.
+export async function handleControlRequest(req, res, opts = {}, parsedBody) {
+    // Fail closed. Dev escape hatch first (no identity, no role check). Otherwise an
+    // authenticator MUST be configured and MUST return an identity; then, if a role is
+    // required, the identity MUST carry it (RBAC).
+    let actor = "local-operator"; // dev/local default; overwritten by the resolved identity
+    let roles = ["admin"]; // dev/local default: the unauthenticated escape hatch is fully trusted
+    let identity = null;
+    if (opts.allowUnauthenticated !== true) {
+        if (!opts.authenticate) {
+            deny(res, 401, "unauthorized: the remote control plane requires OAuth (RFC 9728) — no authenticator configured");
+            return;
+        }
+        identity = await opts.authenticate(req).catch(() => null);
+        if (!identity) {
+            deny(res, 401, "unauthorized: missing or invalid bearer token");
+            return;
+        }
+        if (opts.requiredRole && !identity.roles.includes(opts.requiredRole)) {
+            deny(res, 403, `forbidden: role "${opts.requiredRole}" required`);
+            return;
+        }
+        actor = `${identity.issuer}#${identity.subject}`; // the real WHO for write-tool audit
+        roles = identity.roles; // threaded into the server so scoped tools can domain-gate a non-admin identity
+    }
+    let body = parsedBody;
+    if (body === undefined && req.method === "POST") {
+        try {
+            body = await readJsonBody(req);
+        }
+        catch {
+            deny(res, 400, "invalid JSON body");
+            return;
+        }
+    }
+    // Service-token calls (OE_CONTROL_READ_TOKENS) are ALWAYS audited — a machine
+    // credential leaves a per-request trail even for reads, unlike an interactive admin
+    // whose reads aren't logged. Best-effort (appendAudit never throws); the JSON-RPC
+    // method + tool name are recorded when the body carries them. Token value never logged.
+    if (identity?.issuer === SERVICE_TOKEN_ISSUER) {
+        const rpc = (typeof body === "object" && body !== null ? body : {});
+        await appendAudit({
+            org: deploymentOrg(),
+            platform: "control",
+            workspace: "control",
+            principalId: identity.subject, // "svc:<name>"
+            action: "control.service_call",
+            detail: {
+                service: identity.subject,
+                ...(typeof rpc.method === "string" ? { method: rpc.method } : {}),
+                ...(typeof rpc.params?.name === "string" ? { tool: rpc.params.name } : {}),
+            },
+        });
+    }
+    // Fresh server + transport per request (stateless). Tear down when the response
+    // closes so nothing leaks across serverless invocations.
+    // readOnly (service principals) strips the write tools from THIS request's server even
+    // when the mount registered them (includeWrites) — see server.ts's single choke point.
+    const server = buildControlServer({
+        includeWrites: opts.includeWrites,
+        actor,
+        roles,
+        readOnly: identity?.readOnly === true,
+        ...(opts.readTranscript ? { readTranscript: opts.readTranscript } : {}),
+    });
+    const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+    res.on("close", () => {
+        void transport.close();
+        void server.close();
+    });
+    await server.connect(transport);
+    await transport.handleRequest(req, res, body);
+}
+// Convenience: a standalone node:http server, for local testing and self-host.
+// (On Vercel you'd mount handleControlRequest in a route instead of this.)
+export function createAdminHttpServer(opts = {}) {
+    return createServer((req, res) => {
+        void handleControlRequest(req, res, opts).catch((err) => {
+            if (!res.headersSent)
+                deny(res, 500, `control server error: ${err instanceof Error ? err.message : String(err)}`);
+        });
+    });
+}
+//# sourceMappingURL=http.js.map

package/dist/agent/control/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../agent/control/http.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,mFAAmF;AACnF,4EAA4E;AAC5E,kFAAkF;AAClF,iEAAiE;AACjE,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,kFAAkF;AAClF,kCAAkC;AAClC,EAAE;AACF,6EAA6E;AAC7E,iFAAiF;AACjF,kFAAkF;AAClF,iFAAiF;AACjF,4EAA4E;AAC5E,kFAAkF;AAClF,oCAAoC;AACpC,EAAE;AACF,oFAAoF;AACpF,oFAAoF;AACpF,iFAAiF;AACjF,gFAAgF;AAEhF,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAsB,MAAM,WAAW,CAAC;AAErE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AA+BvD,KAAK,UAAU,YAAY,CAAC,GAAoB;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;QAAE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,IAAY,EAAE,OAAe;IAC9D,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC5D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,iFAAiF;AACjF,kFAAkF;AAClF,qFAAqF;AACrF,iGAAiG;AACjG,2FAA2F;AAC3F,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAoB,EACpB,GAAmB,EACnB,IAAI,GAAqB,EAAE,EAC3B,UAAoB;IAEpB,iFAAiF;IACjF,mFAAmF;IACnF,+CAA+C;IAC/C,IAAI,KAAK,GAAG,gBAAgB,CAAC,CAAC,0DAA0D;IACxF,IAAI,KAAK,GAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,uEAAuE;IACjH,IAAI,QAAQ,GAAyB,IAAI,CAAC;IAC1C,IAAI,IAAI,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,gGAAgG,CAAC,CAAC;YACjH,OAAO;QACT,CAAC;QACD,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,+CAA+C,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,IAAI,CAAC,YAAY,YAAY,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,KAAK,GAAG,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,oCAAoC;QACtF,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,gFAAgF;IAC1G,CAAC;IAED,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,oFAAoF;IACpF,kFAAkF;IAClF,wFAAwF;IACxF,IAAI,QAAQ,EAAE,MAAM,KAAK,oBAAoB,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAsD,CAAC;QACzH,MAAM,WAAW,CAAC;YAChB,GAAG,EAAE,aAAa,EAAE;YACpB,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,eAAe;YAC9C,MAAM,EAAE,sBAAsB;YAC9B,MAAM,EAAE;gBACN,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3E;SACF,CAAC,CAAC;IACL,CAAC;IAED,gFAAgF;IAChF,yDAAyD;IACzD,uFAAuF;IACvF,uFAAuF;IACvF,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,KAAK;QACL,KAAK;QACL,QAAQ,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI;QACrC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC;IACvF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,+EAA+E;AAC/E,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,IAAI,GAAqB,EAAE;IAC/D,OAAO,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/B,KAAK,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACtD,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/agent/control/mcp-route.d.ts

@@ -0,0 +1,13 @@
+import { CONTROL_MCP_PATH } from "./oauth-resource.js";
+export { CONTROL_MCP_PATH };
+/**
+ * Handle one MCP request on {@link CONTROL_MCP_PATH}.
+ *
+ * 🔴 EVERY AUTHENTICATED CALL IS AUDITED, INCLUDING A READ. The MCP transport's own callers are
+ * machines and remote operators, so the row is the only record that the call happened — the same
+ * rule control/http.ts applies to service-token calls, and for the same reason. The row names the
+ * principal from the token (`oauth-client:<id>`, or `<issuer>#<subject>` for a person) and the
+ * JSON-RPC method plus tool name when the body carries them. No token value is ever logged.
+ */
+export declare function handleControlMcpRequest(req: Request, env?: NodeJS.ProcessEnv, declaredIssuer?: string): Promise<Response>;
+//# sourceMappingURL=mcp-route.d.ts.map

package/dist/agent/control/mcp-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-route.d.ts","sourceRoot":"","sources":["../../../agent/control/mcp-route.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAuB,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAK5E,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAE5B;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,OAAO,EACZ,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,cAAc,GAAE,MAA6B,GAC5C,OAAO,CAAC,QAAQ,CAAC,CA8CnB"}