@openrig/cli 0.7.0 → 0.7.1

package/dist/lib/seat-activity.js

@@ -0,0 +1,29 @@
+/** The activity word for a seat, shared by rig ps and the MCP team read. A seat the daemon knows nothing about is
+ *  unknown, never idle. */
+export function formatSeatActivity(n) {
+    // S19 — render from the served taxonomy state when present: needs-input as
+    // count(+reason), otherwise the bridge's display value. No local arbitration.
+    const tax = n.activityState;
+    if (tax) {
+        if (tax.needsInput.count > 0)
+            return `needs-input x${tax.needsInput.count}`;
+        // A community harness has no needs-input source in that state, so its zero isn't a clearance: a prompt the
+        // screen shows is kept.
+        if (n.communityHarness && n.agentActivity?.state === "needs_input")
+            return "needs-input (screen)";
+        return tax.display;
+    }
+    // Legacy fallback (a daemon without the S19 enrichment) — retires with the
+    // pre-taxonomy surfaces per the ladder-as-migration rule.
+    const activity = n.agentActivity;
+    if (!activity)
+        return "unknown";
+    if (activity.state === "running")
+        return "running";
+    if (activity.state === "needs_input")
+        return "needs_input";
+    if (activity.state === "idle")
+        return "idle";
+    return "unknown";
+}
+//# sourceMappingURL=seat-activity.js.map

package/dist/lib/seat-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-activity.js","sourceRoot":"","sources":["../../src/lib/seat-activity.ts"],"names":[],"mappings":"AAOA;2BAC2B;AAC3B,MAAM,UAAU,kBAAkB,CAAC,CAAqB;IACtD,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC;IAC5B,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;YAAE,OAAO,gBAAgB,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC5E,2GAA2G;QAC3G,wBAAwB;QACxB,IAAI,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,aAAa,EAAE,KAAK,KAAK,aAAa;YAAE,OAAO,sBAAsB,CAAC;QAClG,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,2EAA2E;IAC3E,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,CAAC,CAAC,aAAa,CAAC;IACjC,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,QAAQ,CAAC,KAAK,KAAK,aAAa;QAAE,OAAO,aAAa,CAAC;IAC3D,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAC7C,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/local-daemon-owner.d.ts

@@ -14,6 +14,10 @@ interface OwnerProbeDeps {
     run?: (file: string, args: string[], timeoutMs: number) => Promise<string>;
     timeoutMs?: number;
 }
+export declare function processIdentity(raw: string): {
+    uid: number;
+    start: string;
+} | undefined;
 /** Optional accidental-routing mitigation, not authentication or same-user instance isolation.
  * Trusts the daemon's reported PID/euid, corroborated by ps; it does not prove socket ownership.
  * Every request observes afresh. Repeated observations cannot make the following TCP request atomic. */

package/dist/local-daemon-owner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-daemon-owner.d.ts","sourceRoot":"","sources":["../src/local-daemon-owner.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,gBAAgB,GACxB;IAAE,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC/E;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,UAAU,cAAc;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAuBD;;wGAEwG;AACxG,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA4ClH;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,0BAA0B;gBAC3B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,KAAK,EAAE,WAAW,GAAG,SAAS,CAAA;KAAE,CAAC;CAIlG"}
+{"version":3,"file":"local-daemon-owner.d.ts","sourceRoot":"","sources":["../src/local-daemon-owner.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,gBAAgB,GACxB;IAAE,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC/E;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,UAAU,cAAc;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAeD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAMvF;AAED;;wGAEwG;AACxG,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA4ClH;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,0BAA0B;gBAC3B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,KAAK,EAAE,WAAW,GAAG,SAAS,CAAA;KAAE,CAAC;CAIlG"}

package/dist/local-daemon-owner.js

@@ -16,7 +16,7 @@ function isLoopbackEndpoint(baseUrl) {
         return false;
     }
 }
-function processIdentity(raw) {
+export function processIdentity(raw) {
     // LC_ALL=C: ps lstart is a stable process-start discriminator, not a PID-only check.
     const match = raw.trim().match(/^(\d+)\s+([A-Z][a-z]{2}\s+[A-Z][a-z]{2}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4})$/);
     if (!match?.[1] || !match[2] || !Number.isFinite(Date.parse(match[2])))

package/dist/local-daemon-owner.js.map

@@ -1 +1 @@
-{"version":3,"file":"local-daemon-owner.js","sourceRoot":"","sources":["../src/local-daemon-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAatC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,MAAM,OAAO,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AACrF,MAAM,OAAO,GAAG,CAAC,CAAS,EAAsB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAE9H,yEAAyE;AACzE,SAAS,kBAAkB,CAAC,OAAe;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACxE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAClD,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,qFAAqF;IACrF,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;IAClH,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO;IAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACvF,CAAC;AAED;;wGAEwG;AACxG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAe,EAAE,OAAuB,EAAE;IACrF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IACxD,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;IACjJ,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,KAAa,EAAE,EAAE;QAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/J,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,EAAE;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3D,IAAI,SAAS,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC9F,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC;IACF,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,CAAC,KAAK,IAA+B,EAAE;gBACrC,MAAM,cAAc,GAAG,KAAK,IAAuD,EAAE;oBACnF,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;wBAAE,OAAO;oBACvE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC3I,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO;oBACvB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAA8C,CAAC;oBAC7E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,IAAK,IAAI,EAAE,GAAc,IAAI,CAAC;2BAC7D,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,IAAK,IAAI,EAAE,IAAe,GAAG,CAAC;wBAAE,OAAO;oBAC7E,OAAO,EAAE,GAAG,EAAE,IAAK,CAAC,GAAa,EAAE,GAAG,EAAE,IAAK,CAAC,IAAc,EAAE,CAAC;gBACjE,CAAC,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAC;gBACxC,IAAI,CAAC,QAAQ;oBAAE,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;gBACzD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC/F,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC;gBAClD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;oBAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC;gBAClF,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;oBAAE,OAAO,OAAO,CAAC,2BAA2B,CAAC,CAAC;gBACvH,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;oBAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBAC1G,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC1F,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;YACjG,CAAC,CAAC,EAAE;YACJ,IAAI,OAAO,CAAmB,OAAO,CAAC,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;SACzI,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAAC,CAAC;YAC9C,CAAC;QAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACtD,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,GAAG,sBAAsB,CAAC;IACvC,YAAY,OAAe,EAAE,KAAoE;QAC/F,KAAK,CAAC,8DAA8D,OAAO,kBAAkB,KAAK,CAAC,GAAG,mBAAmB,KAAK,CAAC,GAAG,8CAA8C,KAAK,CAAC,SAAS,yMAAyM,CAAC,CAAC;QAC1Y,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF"}
+{"version":3,"file":"local-daemon-owner.js","sourceRoot":"","sources":["../src/local-daemon-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAatC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,MAAM,OAAO,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AACrF,MAAM,OAAO,GAAG,CAAC,CAAS,EAAsB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAE9H,yEAAyE;AACzE,SAAS,kBAAkB,CAAC,OAAe;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACxE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAClD,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,qFAAqF;IACrF,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;IAClH,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO;IAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACvF,CAAC;AAED;;wGAEwG;AACxG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAe,EAAE,OAAuB,EAAE;IACrF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IACxD,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;IACjJ,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,KAAa,EAAE,EAAE;QAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/J,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,EAAE;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3D,IAAI,SAAS,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC9F,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC;IACF,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,CAAC,KAAK,IAA+B,EAAE;gBACrC,MAAM,cAAc,GAAG,KAAK,IAAuD,EAAE;oBACnF,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;wBAAE,OAAO;oBACvE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC3I,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO;oBACvB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAA8C,CAAC;oBAC7E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,IAAK,IAAI,EAAE,GAAc,IAAI,CAAC;2BAC7D,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,IAAK,IAAI,EAAE,IAAe,GAAG,CAAC;wBAAE,OAAO;oBAC7E,OAAO,EAAE,GAAG,EAAE,IAAK,CAAC,GAAa,EAAE,GAAG,EAAE,IAAK,CAAC,IAAc,EAAE,CAAC;gBACjE,CAAC,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAC;gBACxC,IAAI,CAAC,QAAQ;oBAAE,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;gBACzD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC/F,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC;gBAClD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;oBAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC;gBAClF,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;oBAAE,OAAO,OAAO,CAAC,2BAA2B,CAAC,CAAC;gBACvH,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;oBAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBAC1G,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC1F,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;YACjG,CAAC,CAAC,EAAE;YACJ,IAAI,OAAO,CAAmB,OAAO,CAAC,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;SACzI,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAAC,CAAC;YAC9C,CAAC;QAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACtD,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,GAAG,sBAAsB,CAAC;IACvC,YAAY,OAAe,EAAE,KAAoE;QAC/F,KAAK,CAAC,8DAA8D,OAAO,kBAAkB,KAAK,CAAC,GAAG,mBAAmB,KAAK,CAAC,GAAG,8CAA8C,KAAK,CAAC,SAAS,yMAAyM,CAAC,CAAC;QAC1Y,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF"}

package/dist/mcp-http.d.ts

@@ -0,0 +1,42 @@
+import { DaemonClient } from "./client.js";
+/** One caller's grant. Only the token's sha256 is stored. */
+export type McpGrant = {
+    name: string;
+    tokenSha256: string;
+    seat: string;
+    rigs: string[];
+    roots: string[];
+    workspace: boolean;
+    owner: boolean;
+    createdAt: string;
+};
+export declare function mcpTokenFilePath(home?: string): string;
+/** The configured grants, or null when there is no token file (auth not configured). A file that can't be read or parsed,
+ *  or holds a malformed entry, throws: a broken configuration must never read as "no auth". */
+export declare function readGrants(file: string): McpGrant[] | null;
+/** Holds the token file's lock for one read, modify and publish, so a concurrent add and revoke can't each publish a copy
+ *  that drops the other's change. A lock left by a crashed command names itself after the wait. */
+export declare function withGrantsLock<T>(file: string, update: () => T, waitMs?: number): Promise<T>;
+/** Adds a grant and returns its token, which is shown once and never stored. */
+export declare function addGrant(file: string, grant: Omit<McpGrant, "tokenSha256" | "createdAt">): Promise<string>;
+/** Removes a grant; its next request is refused. The file stays, so auth stays configured. */
+export declare function revokeGrant(file: string, name: string): Promise<boolean>;
+/** The grant a bearer token matches, compared in constant time. */
+export declare function grantFor(grants: readonly McpGrant[], token: string): McpGrant | null;
+export declare function isLoopbackHost(host: string): boolean;
+export declare class McpHttpConfigError extends Error {
+}
+export type McpHttpOptions = {
+    daemonUrl: string;
+    host: string;
+    port: number;
+    tokenFile: string;
+    /** Builds the daemon client for one request; sessionName is the grant's seat (absent: the env's). */
+    clientFactory?: (daemonUrl: string, sessionName?: string) => DaemonClient;
+};
+export declare function startMcpHttpServer(opts: McpHttpOptions): Promise<{
+    url: string;
+    authenticated: boolean;
+    close(): Promise<void>;
+}>;
+//# sourceMappingURL=mcp-http.d.ts.map

package/dist/mcp-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-http.d.ts","sourceRoot":"","sources":["../src/mcp-http.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,6DAA6D;AAC7D,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAIF,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,MAAyB,GAAG,MAAM,CAExE;AAaD;+FAC+F;AAC/F,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,IAAI,CAa1D;AAED;mGACmG;AACnG,wBAAsB,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,SAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAmBjG;AAYD,gFAAgF;AAChF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAc1G;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOxE;AAED,mEAAmE;AACnE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAQpF;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAEhD,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,qGAAqG;IACrG,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,YAAY,CAAC;CAC3E,CAAC;AAoBF,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAiFvI"}

package/dist/mcp-http.js

@@ -0,0 +1,232 @@
+// `rig mcp serve --http`: the same MCP tools over Streamable HTTP, for an assistant that can't start a local process.
+//
+// Auth is configured by the token file's existence. With no token file, the listener stays on loopback and serves the
+// local owner as the env's seat, declared and not authenticated (what stdio does). With one, every request needs a bearer
+// credential that matches a grant, even on loopback: a tunnel or proxy delivers remote traffic to loopback, so loopback
+// proves nothing about the caller. A missing, invalid or revoked credential is refused and never falls back to the env
+// seat, and so is every request once the file is gone or malformed, until a restart. Each request gets its own
+// DaemonClient, carrying its grant's seat, so concurrent callers never share an identity.
+import http from "node:http";
+import fs from "node:fs";
+import nodePath from "node:path";
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { DaemonClient } from "./client.js";
+import { createMcpServer } from "./mcp-server.js";
+import { getOpenRigHome } from "./openrig-compat.js";
+const MAX_BODY_BYTES = 4 * 1024 * 1024;
+export function mcpTokenFilePath(home = getOpenRigHome()) {
+    return nodePath.join(home, "mcp-http-tokens.json");
+}
+/** An entry as token add writes it. A blank seat would act as the env's seat, and a string would become a set of its
+ *  characters, so any other shape makes the file unreadable. */
+function isGrant(entry) {
+    const grant = (entry ?? {});
+    const text = (value) => typeof value === "string" && value.trim() !== "";
+    const list = (value) => Array.isArray(value) && value.every((item) => typeof item === "string");
+    const flag = (value) => typeof value === "boolean";
+    return text(grant.name) && typeof grant.tokenSha256 === "string" && text(grant.seat)
+        && list(grant.rigs) && list(grant.roots) && flag(grant.workspace) && flag(grant.owner);
+}
+/** The configured grants, or null when there is no token file (auth not configured). A file that can't be read or parsed,
+ *  or holds a malformed entry, throws: a broken configuration must never read as "no auth". */
+export function readGrants(file) {
+    let text;
+    try {
+        text = fs.readFileSync(file, "utf8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return null;
+        throw err;
+    }
+    const parsed = JSON.parse(text);
+    if (!Array.isArray(parsed?.principals))
+        throw new Error(`${file} must hold { "principals": [...] }`);
+    const bad = parsed.principals.findIndex((entry) => !isGrant(entry));
+    if (bad >= 0)
+        throw new Error(`${file}: grant ${bad + 1} is malformed; each needs a name, a tokenSha256, a non-blank seat, and lists of rigs and roots`);
+    return parsed.principals;
+}
+/** Holds the token file's lock for one read, modify and publish, so a concurrent add and revoke can't each publish a copy
+ *  that drops the other's change. A lock left by a crashed command names itself after the wait. */
+export async function withGrantsLock(file, update, waitMs = 5_000) {
+    const lock = `${file}.lock`;
+    fs.mkdirSync(nodePath.dirname(file), { recursive: true });
+    const deadline = Date.now() + waitMs;
+    for (;;) {
+        try {
+            fs.closeSync(fs.openSync(lock, "wx", 0o600));
+            break;
+        }
+        catch (err) {
+            if (err.code !== "EEXIST")
+                throw err;
+            if (Date.now() >= deadline)
+                throw new Error(`Another rig mcp token command holds ${lock}. If none is running, remove that file and try again.`);
+            await new Promise((resolve) => setTimeout(resolve, 20));
+        }
+    }
+    try {
+        return update();
+    }
+    finally {
+        fs.rmSync(lock, { force: true });
+    }
+}
+function writeGrants(file, grants) {
+    fs.mkdirSync(nodePath.dirname(file), { recursive: true });
+    const temp = `${file}.${process.pid}.tmp`;
+    fs.writeFileSync(temp, `${JSON.stringify({ principals: grants }, null, 2)}\n`, { mode: 0o600 });
+    fs.renameSync(temp, file);
+    fs.chmodSync(file, 0o600);
+}
+const sha256 = (value) => createHash("sha256").update(value).digest("hex");
+/** Adds a grant and returns its token, which is shown once and never stored. */
+export function addGrant(file, grant) {
+    if (!grant.name.trim() || !grant.seat.trim()) {
+        return Promise.reject(new Error("A grant needs a name and a seat: --seat <session>, the seat this caller acts as."));
+    }
+    return withGrantsLock(file, () => {
+        const grants = readGrants(file) ?? [];
+        if (grants.some((existing) => existing.name === grant.name)) {
+            throw new Error(`'${grant.name}' already has a grant; revoke it first to issue a new token`);
+        }
+        const token = `orm_${randomBytes(32).toString("base64url")}`;
+        grants.push({ ...grant, seat: grant.seat.trim(), tokenSha256: sha256(token), createdAt: new Date().toISOString() });
+        writeGrants(file, grants);
+        return token;
+    });
+}
+/** Removes a grant; its next request is refused. The file stays, so auth stays configured. */
+export function revokeGrant(file, name) {
+    return withGrantsLock(file, () => {
+        const grants = readGrants(file);
+        if (!grants?.some((grant) => grant.name === name))
+            return false;
+        writeGrants(file, grants.filter((grant) => grant.name !== name));
+        return true;
+    });
+}
+/** The grant a bearer token matches, compared in constant time. */
+export function grantFor(grants, token) {
+    const digest = Buffer.from(sha256(token), "hex");
+    let found = null;
+    for (const grant of grants) {
+        const stored = Buffer.from(typeof grant.tokenSha256 === "string" ? grant.tokenSha256 : "", "hex");
+        if (stored.length === digest.length && timingSafeEqual(stored, digest))
+            found = grant;
+    }
+    return found;
+}
+export function isLoopbackHost(host) {
+    return host === "localhost" || host === "::1" || host === "[::1]" || /^127\.\d+\.\d+\.\d+$/.test(host);
+}
+export class McpHttpConfigError extends Error {
+}
+function reply(res, status, body, headers = {}) {
+    res.writeHead(status, { "Content-Type": "application/json", ...headers }).end(JSON.stringify(body));
+}
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        let size = 0;
+        const chunks = [];
+        req.on("data", (chunk) => {
+            size += chunk.length;
+            if (size > MAX_BODY_BYTES) {
+                reject(new Error("body_too_large"));
+                req.destroy();
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+        req.on("error", reject);
+    });
+}
+export async function startMcpHttpServer(opts) {
+    const loopback = isLoopbackHost(opts.host);
+    const configured = readGrants(opts.tokenFile) !== null;
+    if (!loopback && !configured) {
+        throw new McpHttpConfigError(`Serving on ${opts.host} needs authentication: add a grant with rig mcp token add, then start again. With no grants, the server stays on loopback.`);
+    }
+    const makeClient = opts.clientFactory ?? ((url, sessionName) => new DaemonClient(url, sessionName === undefined ? undefined : { sessionName }));
+    let boundPort = opts.port;
+    // Once auth has been configured here, a missing token file is a broken configuration, not a return to local-owner
+    // mode: that takes a restart with no file. A beyond-loopback listener always starts with auth.
+    let authSeen = configured;
+    const handle = async (req, res) => {
+        if (new URL(req.url ?? "/", "http://localhost").pathname !== "/mcp") {
+            reply(res, 404, { error: "not_found", message: "The MCP endpoint is /mcp." });
+            return;
+        }
+        let grants;
+        try {
+            grants = readGrants(opts.tokenFile);
+            if (grants === null && authSeen)
+                throw new Error(`${opts.tokenFile} is gone after auth was configured; restore it, or restart with no token file to serve loopback unauthenticated`);
+        }
+        catch (err) {
+            // The detail stays in this server's log: the reply goes to a caller not yet authenticated.
+            console.error(`rig mcp serve --http: the token file can't be read: ${err.message}`);
+            reply(res, 500, { error: "auth_config_unreadable", message: "The token file can't be read." });
+            return;
+        }
+        if (grants !== null)
+            authSeen = true;
+        let access;
+        let seat;
+        if (grants !== null) {
+            const token = /^Bearer\s+(\S+)\s*$/i.exec(req.headers.authorization ?? "")?.[1];
+            const grant = token ? grantFor(grants, token) : null;
+            if (!grant) {
+                reply(res, 401, {
+                    error: "unauthenticated",
+                    message: token ? "This credential isn't valid here: it's unknown or was revoked." : "This server needs a bearer credential: Authorization: Bearer <token>.",
+                }, { "WWW-Authenticate": 'Bearer realm="openrig"' });
+                return;
+            }
+            access = { principal: grant.name, owner: grant.owner === true, rigs: grant.rigs ?? [], roots: grant.roots ?? [], workspace: grant.workspace === true };
+            seat = grant.seat;
+        }
+        let body;
+        if (req.method === "POST") {
+            try {
+                body = JSON.parse(await readBody(req));
+            }
+            catch (err) {
+                const tooLarge = err.message === "body_too_large";
+                reply(res, tooLarge ? 413 : 400, { jsonrpc: "2.0", error: { code: -32700, message: tooLarge ? "Request body too large" : "Parse error" }, id: null });
+                return;
+            }
+        }
+        const mcp = createMcpServer(makeClient(opts.daemonUrl, seat), { seat, access });
+        // With no auth (loopback only), refuse a Host that isn't loopback, as a page reaching localhost through DNS rebinding
+        // or a forward from elsewhere would send. With auth, the credential is the check, so a tunnel's Host is fine.
+        const transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: undefined,
+            ...(grants === null ? { enableDnsRebindingProtection: true, allowedHosts: [`127.0.0.1:${boundPort}`, `localhost:${boundPort}`, `[::1]:${boundPort}`] } : {}),
+        });
+        res.on("close", () => { void transport.close(); void mcp.close(); });
+        await mcp.connect(transport);
+        await transport.handleRequest(req, res, body);
+    };
+    const server = http.createServer((req, res) => {
+        handle(req, res).catch((err) => {
+            if (!res.headersSent)
+                reply(res, 500, { jsonrpc: "2.0", error: { code: -32603, message: err.message }, id: null });
+        });
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(opts.port, opts.host, () => { server.off("error", reject); resolve(); });
+    });
+    boundPort = server.address().port;
+    const shownHost = opts.host.includes(":") && !opts.host.startsWith("[") ? `[${opts.host}]` : opts.host;
+    return {
+        url: `http://${shownHost}:${boundPort}/mcp`,
+        authenticated: configured,
+        close: () => new Promise((resolve) => { server.closeAllConnections?.(); server.close(() => resolve()); }),
+    };
+}
+//# sourceMappingURL=mcp-http.js.map

package/dist/mcp-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-http.js","sourceRoot":"","sources":["../src/mcp-http.ts"],"names":[],"mappings":"AAAA,sHAAsH;AACtH,EAAE;AACF,sHAAsH;AACtH,0HAA0H;AAC1H,wHAAwH;AACxH,uHAAuH;AACvH,+GAA+G;AAC/G,0FAA0F;AAC1F,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,QAAQ,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAkB,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAcrD,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC,MAAM,UAAU,gBAAgB,CAAC,OAAe,cAAc,EAAE;IAC9D,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;AACrD,CAAC;AAED;gEACgE;AAChE,SAAS,OAAO,CAAC,KAAc;IAC7B,MAAM,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;IACvD,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAClF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;IACzG,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,SAAS,CAAC;IAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;WAC/E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED;+FAC+F;AAC/F,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoC,CAAC;IACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oCAAoC,CAAC,CAAC;IACrG,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,IAAI,GAAG,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,WAAW,GAAG,GAAG,CAAC,gGAAgG,CAAC,CAAC;IACzJ,OAAO,MAAM,CAAC,UAAwB,CAAC;AACzC,CAAC;AAED;mGACmG;AACnG,MAAM,CAAC,KAAK,UAAU,cAAc,CAAI,IAAY,EAAE,MAAe,EAAE,MAAM,GAAG,KAAK;IACnF,MAAM,IAAI,GAAG,GAAG,IAAI,OAAO,CAAC;IAC5B,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,SAAS,CAAC;QACR,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7C,MAAM;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAChE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,uDAAuD,CAAC,CAAC;YAChJ,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAkB;IACnD,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC1C,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE3F,gFAAgF;AAChF,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAkD;IACvF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC,CAAC;IACvH,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE;QAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,6DAA6D,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpH,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACpD,OAAO,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE;QAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAChE,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,QAAQ,CAAC,MAA2B,EAAE,KAAa;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,KAAK,GAAoB,IAAI,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAClG,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,KAAK,GAAG,KAAK,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;CAAG;AAWhD,SAAS,KAAK,CAAC,GAAwB,EAAE,MAAc,EAAE,IAA6B,EAAE,UAAkC,EAAE;IAC1H,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,QAAQ,CAAC,GAAyB;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC1F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAoB;IAC3D,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;IACvD,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,kBAAkB,CAAC,cAAc,IAAI,CAAC,IAAI,4HAA4H,CAAC,CAAC;IACpL,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,GAAW,EAAE,WAAoB,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IACjK,IAAI,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC;IAC1B,kHAAkH;IAClH,+FAA+F;IAC/F,IAAI,QAAQ,GAAG,UAAU,CAAC;IAE1B,MAAM,MAAM,GAAG,KAAK,EAAE,GAAyB,EAAE,GAAwB,EAAiB,EAAE;QAC1F,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACpE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,MAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,iHAAiH,CAAC,CAAC;QACvL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2FAA2F;YAC3F,OAAO,CAAC,KAAK,CAAC,uDAAwD,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/F,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YAC/F,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,IAAI;YAAE,QAAQ,GAAG,IAAI,CAAC;QACrC,IAAI,MAA6B,CAAC;QAClC,IAAI,IAAwB,CAAC;QAC7B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAChF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACrD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE;oBACd,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,gEAAgE,CAAC,CAAC,CAAC,uEAAuE;iBAC5J,EAAE,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YACD,MAAM,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YACvJ,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,IAAa,CAAC;QAClB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAI,GAAa,CAAC,OAAO,KAAK,gBAAgB,CAAC;gBAC7D,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtJ,OAAO;YACT,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAChF,sHAAsH;QACtH,8GAA8G;QAC9G,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,kBAAkB,EAAE,SAAS;YAC7B,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,4BAA4B,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,aAAa,SAAS,EAAE,EAAE,aAAa,SAAS,EAAE,EAAE,SAAS,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7J,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC7B,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAChI,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IACH,SAAS,GAAI,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACvG,OAAO;QACL,GAAG,EAAE,UAAU,SAAS,IAAI,SAAS,MAAM;QAC3C,aAAa,EAAE,UAAU;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KAChH,CAAC;AACJ,CAAC"}

package/dist/mcp-server.d.ts

@@ -1,9 +1,37 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import type { DaemonClient } from "./client.js";
+import { type DaemonClient } from "./client.js";
+/** Who an authenticated HTTP caller must be to be offered a tool: work tools (the work loop, orientation, and
+ *  communication with seats) reach a team within the caller's scope; workspace tools read the work tree and context when
+ *  the caller's grant includes them; owner tools administer the instance (launch, stop, snapshot and restore, discover and
+ *  bind, add seats, validate or inspect local files by path, the event log) and are offered only to an owner grant for now.
+ *  A local caller (stdio, or HTTP with no auth configured) is the owner. */
+export type McpAccessClass = "work" | "workspace" | "owner";
+/** An authenticated HTTP caller: the seat it acts as comes with it (the DaemonClient built for it); this is what it may
+ *  reach. A session is in scope when it is the caller's seat or a seat of one of its rigs; an item, when its source or
+ *  destination is. */
+export type McpAccess = {
+    principal: string;
+    owner: boolean;
+    rigs: readonly string[];
+    roots: readonly string[];
+    workspace: boolean;
+};
+/** What each tool calls and what it does, kept beside the registrations. The MCP contract tests check that it names every
+ *  registered tool, that each tool's annotations match its effect, and that each route is mounted in the daemon. Tools that
+ *  take a rig name also read GET /api/rigs/summary to resolve it. */
+export declare const MCP_OPERATIONS: ReadonlyArray<{
+    tool: string;
+    routes: readonly string[];
+    effect: "read" | "additive" | "destructive";
+    access: McpAccessClass;
+}>;
 /**
  * Creates an MCP server wrapping the daemon HTTP API.
  * @param client - DaemonClient connected to the daemon
  * @returns McpServer instance (not yet connected to a transport)
  */
-export declare function createMcpServer(client: DaemonClient): McpServer;
+export declare function createMcpServer(client: DaemonClient, options?: {
+    seat?: string;
+    access?: McpAccess;
+}): McpServer;
 //# sourceMappingURL=mcp-server.d.ts.map

package/dist/mcp-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,KAAK,EAAE,YAAY,EAAkB,MAAM,aAAa,CAAC;AA8DhE;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,CA+iB/D"}
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKpE,OAAO,EAAkE,KAAK,YAAY,EAAuB,MAAM,aAAa,CAAC;AA6OrI;;;;4EAI4E;AAC5E,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC;AAE5D;;sBAEsB;AACtB,MAAM,MAAM,SAAS,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC;AAErI;;qEAEqE;AACrE,eAAO,MAAM,cAAc,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,aAAa,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,CAmC1J,CAAC;AAoDF;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAO,GAAG,SAAS,CAu9BpH"}