@qodeca/xezar 0.13.0 → 0.14.0

package/dist/mcp/adapters/pi.js

@@ -0,0 +1,418 @@
+import { MCP_JOURNAL_RETAINED_ROWS } from '../../contract/index.js';
+export class PiDeliveryBlocked extends Error {
+    blocker;
+    constructor(code, message, fix) {
+        super(message);
+        this.name = 'PiDeliveryBlocked';
+        this.blocker = { code, recoverable: true, message, fix };
+    }
+}
+/** pi's refusal of a plain `prompt` during a turn, as 0.85.1 words it. Matched loosely on purpose. */
+const BUSY_REFUSAL = /already processing/i;
+/** How many of this adapter's own markers are kept, so a long-lived link cannot grow without bound. */
+const MARKER_MEMORY = MCP_JOURNAL_RETAINED_ROWS;
+export class PiReactionAdapter {
+    projectId;
+    #opts;
+    #unsubscribe;
+    /** Rows already handed to the model through this session, insertion-ordered, bounded by B-19. */
+    #submitted = new Map();
+    /** Submissions pi accepted whose model request has not been seen yet: marker → highest journalSeq. */
+    #awaiting = new Map();
+    /** Markers seen in the conversation before the request that sent them was answered. */
+    #seenMarkers = new Set();
+    /** Keeps this adapter's markers apart from an earlier adapter's on the same resumed session. */
+    #tag;
+    /** pi is inside a turn: set by `agent_start`, cleared by `agent_settled` (measured, `rpc-probe`). */
+    #busy = false;
+    /** The last attempt may have reached pi without us seeing the answer. */
+    #uncertain = false;
+    #conversationRead = false;
+    #blocker;
+    #sequence = 0;
+    #closed = false;
+    constructor(opts) {
+        this.#opts = opts;
+        this.projectId = opts.projectId;
+        // Not `randomUUID`: a counter plus the wall clock is enough to separate two adapters on one
+        // resumed pi session, and it keeps this file free of a `node:` import (the test asserts that).
+        this.#tag = `${Date.now().toString(36)}${(++adapterOrdinal).toString(36)}`;
+        this.#unsubscribe = opts.link.subscribe((message) => this.#observe(message));
+    }
+    status() {
+        return {
+            route: this.#blocker ? 'blocked' : 'rpc-prompt',
+            ...(this.#blocker ? { blocker: this.#blocker } : {}),
+            submittedRows: this.#submitted.size,
+            turnsAwaited: this.#awaiting.size,
+        };
+    }
+    async deliver(dispatch, signal) {
+        if (dispatch.projectId !== this.projectId) {
+            throw new Error(`pi adapter for project ${this.projectId} refused a dispatch for another project`);
+        }
+        this.#requireLink();
+        let rows = this.#fresh(dispatch.events);
+        if (rows.length === 0 && dispatch.recovery === undefined)
+            return { handedThrough: null };
+        // What pi has already been told, from its own conversation — on the first delivery, and after an
+        // attempt whose answer we lost, because that attempt may well have been accepted.
+        if (!this.#conversationRead || this.#uncertain) {
+            await this.#readConversation(signal);
+            rows = this.#fresh(dispatch.events);
+            if (rows.length === 0 && dispatch.recovery === undefined)
+                return { handedThrough: null };
+        }
+        const marker = `${MARKER_PREFIX}${this.projectId}:${this.#tag}:${++this.#sequence}`;
+        const toSeq = rows.at(-1)?.journalSeq ?? null;
+        const message = renderPiDispatch(dispatch, rows, this.#opts.roleInstruction, marker);
+        // Registered BEFORE the write: pi may emit the user message carrying the marker before the
+        // command's own `response` reaches us, and a reaction seen then must not be dropped.
+        if (toSeq !== null)
+            this.#awaiting.set(marker, toSeq);
+        this.#uncertain = true;
+        try {
+            await this.#submit(message, signal);
+        }
+        catch (err) {
+            // Deliberately NOT cleared here: an attempt that threw may still have reached pi, so the next
+            // one must read the conversation before it decides. Only an accepted submission is certain.
+            this.#awaiting.delete(marker);
+            throw err;
+        }
+        this.#uncertain = false;
+        for (const row of rows)
+            this.#remember(rowKey(row));
+        // A marker pi had already put into the conversation before its `response` arrived is a reaction
+        // nobody has reported yet; report it now rather than waiting for an event that has been and gone.
+        if (this.#seenMarkers.delete(marker))
+            this.#reacted(marker);
+        return { handedThrough: toSeq };
+    }
+    /** Non-model liveness (N-06): pi's own session metadata. Starts no turn and reaches no model. */
+    async heartbeat(signal) {
+        this.#requireLink();
+        const state = await this.#command({ type: 'get_state' }, signal);
+        if (state.success !== true)
+            throw this.#block('pi-refused', `pi refused xezar's liveness check: ${errorText(state)}`);
+        // pi's own answer is more trustworthy than the events we inferred `busy` from, and this is the
+        // one call that asks. A link that dropped an `agent_settled` would otherwise steer for ever.
+        if (typeof state.data?.isStreaming === 'boolean')
+            this.#busy = state.data.isStreaming;
+    }
+    /** Stop listening. The pi process and its session belong to whoever opened the link. */
+    close() {
+        if (this.#closed)
+            return;
+        this.#closed = true;
+        this.#unsubscribe();
+    }
+    // ---- internals -----------------------------------------------------------------------------
+    /**
+     * One submission, by the rung that pi accepts right now: `prompt` while idle, `steer` during a
+     * turn. `#busy` is inferred from an event stream that can lag or lose a frame, so BOTH directions
+     * of a wrong belief have to be safe. They were not (QA on #358, finding 2):
+     *
+     *  - Believed idle, really busy: pi refuses the plain `prompt` and the fallback steers. SAFE, and
+     *    the refusal fallback stays because pi can start a turn of its own between check and write.
+     *  - Believed busy, really idle: what a `steer` does then depends on the transport, and only one
+     *    of the two is ever used in production. Over the leader extension — the only producer of a
+     *    `PiRpcLink` outside tests — an idle `steer` starts a turn and reaches the model at once
+     *    (real pi 0.85.1, M1: one model request carrying the text, `pendingMessageCount` still 0), so
+     *    the wrong belief costs nothing. Over pi's RAW stdio RPC, which nothing in xezar speaks, the
+     *    same command is ACCEPTED and PARKED (M2: `success: true`, ZERO model requests,
+     *    `pendingMessageCount` 0 -> 1) and the text waits for the person's next turn.
+     *
+     * The confirmations below therefore make this adapter correct over a transport that parks rather
+     * than rescue it from one it has. They are kept because they are cheap and because `success` is
+     * acceptance and never hand-over on ANY transport: a believed `busy` is CONFIRMED against pi
+     * before steering, and a steer is confirmed after the fact as well, because pi can settle between
+     * the two. A steer that cannot be confirmed to have reached the model is reported as not handed
+     * over (the controller retries it, down the `prompt` rung, after re-reading pi's conversation).
+     */
+    async #submit(message, signal) {
+        if (this.#busy)
+            this.#busy = await this.#reallyBusy(signal);
+        if (!this.#busy) {
+            const answer = await this.#command({ type: 'prompt', message }, signal);
+            if (answer.success === true)
+                return;
+            const text = errorText(answer);
+            if (!BUSY_REFUSAL.test(text))
+                throw this.#block('pi-refused', `pi refused the event submission: ${text}`);
+            this.#busy = true;
+        }
+        const steered = await this.#command({ type: 'steer', message }, signal);
+        if (steered.success !== true)
+            throw this.#block('pi-refused', `pi refused the steered event submission: ${errorText(steered)}`);
+        await this.#requireSteerLanded(signal);
+    }
+    /**
+     * Is a turn really running? Read from pi rather than from the event stream.
+     *
+     * An unreadable answer deliberately says NO, which sends the caller down the `prompt` rung: a
+     * prompt into a busy pi is refused and recovers on the spot, while a steer into an idle pi is
+     * harmless over the extension and parks in silence over raw RPC. When the two failure modes are
+     * not symmetric on some transport, guess towards the one that is recoverable on every transport.
+     */
+    async #reallyBusy(signal) {
+        const state = await this.#command({ type: 'get_state' }, signal);
+        if (state.success !== true)
+            return false;
+        const streaming = state.data?.isStreaming;
+        return typeof streaming === 'boolean' ? streaming : false;
+    }
+    /**
+     * A steer pi accepted is only handed over if a turn actually took it.
+     *
+     * WHEN a steer reaches the model, measured on this branch against real pi 0.85.1 over the leader
+     * extension's socket, on one clock. pi queues it (`queue_update`) and delivers it once THE TURN IN
+     * FLIGHT ends — a turn being one assistant response plus the tool calls it makes — and the next
+     * turn of the same run carries it to the model. Two runs, shaped to take the two halves apart,
+     * because a turn's model call and its tools are different intervals:
+     *   · long MODEL CALL, no tools (`two-steers-result.json`): steer accepted +4.0s, the call ends and
+     *     `turn_end` fires +20.018s, the model request carrying it +20.020s, `agent_settled` +20.023s.
+     *   · instant model call, long TOOL (`tool-turn-result.json`): the model call ended at +0.016s
+     *     returning a `bash` call, `sleep 25` ran, the steer was accepted at +5.0s with that call long
+     *     over — and ZERO model requests happened until the tool finished. `turn_end` +25.037s, the
+     *     model request carrying it +25.040s.
+     * The second run is the one that decides it: the model call the first run credited had already
+     * finished, and the steer still waited 20 more seconds. So the wait is the TURN, TOOLS INCLUDED.
+     *
+     * Three earlier spellings of this comment were wrong, each asserting more than its measurement
+     * could support (QA on #358, then two rounds of QA on #366): "at the end of the running turn" reads
+     * as "not until the run is over"; "at once" ignores the wait entirely; and "the remainder of the
+     * model call in flight" named the wrong interval, because every run behind it had no tools, which
+     * is exactly the condition under which a turn and its model call cannot be told apart.
+     *
+     * What follows for this check: "pi is idle now" alone does not mean it parked — the run may simply
+     * have carried it and ended, which is the common case over this transport. `pendingMessageCount` is
+     * the unambiguous half: still queued AND nothing running means only the person can unpark it, which
+     * is not delivery.
+     */
+    async #requireSteerLanded(signal) {
+        const state = await this.#command({ type: 'get_state' }, signal);
+        if (state.success !== true)
+            return;
+        const streaming = state.data?.isStreaming;
+        const pending = state.data?.pendingMessageCount;
+        if (typeof streaming !== 'boolean' || typeof pending !== 'number')
+            return;
+        if (streaming)
+            return;
+        this.#busy = false;
+        if (pending > 0)
+            throw this.#block('pi-steer-parked', PARKED_MESSAGE);
+    }
+    /**
+     * Learn which rows this pi session has already been given, from its own conversation. Also reports
+     * a reaction that happened for a submission whose answer we lost, so it is not lost with it.
+     */
+    async #readConversation(signal) {
+        const answer = await this.#command({ type: 'get_messages' }, signal);
+        if (answer.success !== true)
+            throw this.#block('pi-refused', `pi refused to list its conversation: ${errorText(answer)}`);
+        const messages = Array.isArray(answer.data?.messages) ? answer.data.messages : [];
+        for (const message of messages) {
+            const text = userMessageText(message);
+            if (text === undefined)
+                continue;
+            for (const key of rowKeysIn(text))
+                this.#remember(key);
+            const marker = markerIn(text);
+            if (marker !== undefined)
+                this.#reacted(marker);
+        }
+        this.#conversationRead = true;
+    }
+    async #command(command, signal) {
+        this.#requireLink();
+        try {
+            return await abortable(this.#opts.link.request(command), signal);
+        }
+        catch (err) {
+            if (signal.aborted || this.#closed)
+                throw err;
+            if (this.#opts.link.closed)
+                throw this.#block('pi-session-closed', CLOSED_MESSAGE);
+            throw err;
+        }
+    }
+    #requireLink() {
+        if (this.#closed || this.#opts.link.closed)
+            throw this.#block('pi-session-closed', CLOSED_MESSAGE);
+        if (this.#blocker?.code === 'pi-session-closed')
+            this.#blocker = undefined;
+    }
+    #block(code, message, fix = BLOCKER_FIX) {
+        const error = new PiDeliveryBlocked(code, message, fix);
+        this.#blocker = error.blocker;
+        return error;
+    }
+    /** Rows not yet submitted, minus the leader's own echo (drop only `leader` + own `causedBy`). */
+    #fresh(events) {
+        const isOwn = this.#opts.isOwnOperation ?? (() => false);
+        return events.filter((row) => !this.#submitted.has(rowKey(row)) && !(row.origin === 'leader' && row.causedBy !== null && isOwn(row.causedBy)));
+    }
+    #remember(key) {
+        this.#submitted.set(key, true);
+        // A row older than retention can never be re-dispatched, so neither can its key matter.
+        if (this.#submitted.size > MARKER_MEMORY)
+            this.#submitted.delete(this.#submitted.keys().next().value);
+    }
+    /**
+     * pi's stream, as far as this adapter reads it. `agent_start` / `agent_settled` are the busy
+     * boundary; a `user` message carrying one of our markers is the reaction — pi emits it immediately
+     * before the model request that carries it, and never while the text is still queued (`rpc-probe`).
+     */
+    #observe(message) {
+        const type = typeof message.type === 'string' ? message.type : undefined;
+        if (type === 'agent_start') {
+            this.#busy = true;
+            return;
+        }
+        if (type === 'agent_settled') {
+            this.#busy = false;
+            return;
+        }
+        if (type !== 'message_start' && type !== 'message_end')
+            return;
+        const text = userMessageText(message.message);
+        if (text === undefined)
+            return;
+        const marker = markerIn(text);
+        if (marker === undefined)
+            return;
+        if (this.#awaiting.has(marker))
+            this.#reacted(marker);
+        else if (marker.startsWith(`${MARKER_PREFIX}${this.projectId}:${this.#tag}:`))
+            this.#seenMarkers.add(marker);
+    }
+    #reacted(marker) {
+        const seq = this.#awaiting.get(marker);
+        if (seq === undefined)
+            return;
+        this.#awaiting.delete(marker);
+        try {
+            this.#opts.onReaction?.(seq);
+        }
+        catch {
+            /* a reporting failure is `reactedSeq` lagging — never a reason to submit again */
+        }
+    }
+}
+/** Separates two adapters' markers on one resumed pi session without reaching for `node:crypto`. */
+let adapterOrdinal = 0;
+const MARKER_PREFIX = 'xezar-event:';
+const CLOSED_MESSAGE = 'The pi RPC session xezar was given is closed, so no event can be handed to it.';
+const PARKED_MESSAGE = 'pi accepted the steered event but settled before a turn took it, so it is parked in pi\'s queue rather than in front of the model. xezar has not treated it as delivered and will hand it over again.';
+const BLOCKER_FIX = 'Read events from your leader with the leader_events tool; nothing is lost while push is unavailable.';
+const PI_EXTENSION_FIX = 
+// The file name is the SHIPPED one and a test pins that it exists in this package: this string is
+// the only remedy a blocked pi leader is given, and it named `pi-leader-extension.mjs` for one
+// round of review. Nothing of that name is built, packed or committed — the extension ships as
+// `scripts/pi-leader-extension.ts`, which is what pi loads (extensions go through jiti).
+'Start your pi leader with xezar\'s leader extension (`pi --extension <xezar>/scripts/pi-leader-extension.ts`, or install it once in your pi settings), then attach again. Until then, read events with the leader_events tool — nothing is lost.';
+/**
+ * Where a project's leader events go in pi. A live `link`: delivered through it. Absent or closed: a
+ * recoverable blocker the cockpit can show, naming WHY there is no link, because since `pi-link.ts`
+ * exists that is an answerable question — the leader extension is not running, or the pi that wrote
+ * the descriptor is gone — rather than the flat "pi has no address" it used to be. The rows stay in
+ * the journal either way, and the leader reads them with `leader_events`.
+ */
+export function piReactionTarget(opts) {
+    if (opts.link !== undefined && !opts.link.closed) {
+        return { kind: 'rpc', adapter: new PiReactionAdapter({ ...opts, link: opts.link }) };
+    }
+    const because = opts.unreachable === undefined ? '' : ` (${opts.unreachable})`;
+    return {
+        kind: 'blocked',
+        blocker: {
+            code: 'pi-not-addressable',
+            recoverable: true,
+            message: `xezar has no live link to a pi leader for this project${because}. pi speaks RPC over its own stdin and stdout only — it has no port, socket or attach mode — so a pi you run yourself can be reached only from inside it, by the xezar leader extension. Events stay in the project journal and nothing is lost.`,
+            fix: PI_EXTENSION_FIX,
+        },
+    };
+}
+/**
+ * The text a pi leader receives for one dispatch. Pure: the same inputs always render the same text.
+ *
+ * It names xezar as the source and says what it is not, before any row — an event must never read as
+ * the user's instruction or approval (§ 12). The role instruction rides along because pi keeps no
+ * system prompt in a resumed session. Each row's summary is quoted as data, so text inside a summary
+ * cannot pose as the adapter's own framing; rows are the journal's own summaries, already scrubbed of
+ * secrets (F-15), never a payload. The marker line is how a later look at pi's conversation
+ * recognises this submission — `<eventId>@<ts>` per row, because `journalSeq` restarts in a recreated
+ * journal and the pair does not.
+ */
+export function renderPiDispatch(dispatch, rows, roleInstruction, marker) {
+    const lines = [
+        '[xezar event notification]',
+        `Source: xezar, project ${dispatch.projectId}. Sent automatically by xezar. It is not a message from the user, not an instruction and not an approval.`,
+        `Your role: ${roleInstruction}`,
+    ];
+    if (rows.length > 0) {
+        lines.push(`Significant events (${rows.length}, oldest first):`);
+        for (const row of rows) {
+            const subject = `${row.subject.type} ${row.subject.id}${row.subject.version === null ? '' : ` @${row.subject.version}`}`;
+            lines.push(`- ${row.eventId} ${row.category} ${row.kind} on ${subject} (origin ${row.origin}): ${JSON.stringify(row.summary)}`);
+        }
+    }
+    if (dispatch.recovery) {
+        lines.push(`Gap: ${dispatch.recovery.message} (oldest retained ${dispatch.recovery.oldestSeq ?? 'none'}, latest ${dispatch.recovery.latestSeq}).`);
+    }
+    lines.push('Read the current state with the xezar tools before acting, and acknowledge the events you have taken into account.');
+    lines.push(`${marker} rows=${rows.map(rowKey).join(',')}`);
+    return lines.join('\n');
+}
+function rowKey(row) {
+    return `${row.eventId}@${row.ts}`;
+}
+/** The marker this adapter writes into every submission, as found in text pi echoed back. */
+function markerIn(text) {
+    return new RegExp(`${MARKER_PREFIX}[^\\s]+`).exec(text)?.[0];
+}
+/** The row keys a marked submission listed, so a restart learns what pi was already told. */
+function rowKeysIn(text) {
+    const listed = /\brows=([^\s]*)/.exec(text)?.[1];
+    return listed === undefined || listed === '' ? [] : listed.split(',').filter((key) => key !== '');
+}
+/** The text of a `user` message in pi's own shape, or undefined for anything else. */
+function userMessageText(value) {
+    const message = value;
+    if (message?.role !== 'user')
+        return undefined;
+    if (typeof message.content === 'string')
+        return message.content;
+    if (!Array.isArray(message.content))
+        return undefined;
+    const parts = message.content
+        .filter((part) => part?.type === 'text' && typeof part.text === 'string')
+        .map((part) => part.text);
+    return parts.length > 0 ? parts.join('\n') : undefined;
+}
+function errorText(answer) {
+    const error = answer.error;
+    if (typeof error === 'string')
+        return error;
+    if (typeof error?.message === 'string')
+        return error.message;
+    return 'pi gave no reason';
+}
+function abortable(work, signal) {
+    if (signal.aborted)
+        return Promise.reject(new Error('aborted'));
+    return new Promise((resolve, reject) => {
+        const onAbort = () => reject(new Error('aborted'));
+        signal.addEventListener('abort', onAbort, { once: true });
+        work.then((value) => {
+            signal.removeEventListener('abort', onAbort);
+            resolve(value);
+        }, (err) => {
+            signal.removeEventListener('abort', onAbort);
+            reject(err instanceof Error ? err : new Error(String(err)));
+        });
+    });
+}
+//# sourceMappingURL=pi.js.map

package/dist/mcp/adapters/pi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi.js","sourceRoot":"","sources":["../../../src/mcp/adapters/pi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAsB,MAAM,wBAAwB,CAAC;AAiIvF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,OAAO,CAAY;IAE5B,YAAY,IAAmB,EAAE,OAAe,EAAE,GAAW;QAC3D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC3D,CAAC;CACF;AA4BD,sGAAsG;AACtG,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAE3C,uGAAuG;AACvG,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAEhD,MAAM,OAAO,iBAAiB;IACnB,SAAS,CAAS;IAClB,KAAK,CAA2B;IAChC,YAAY,CAAa;IAClC,iGAAiG;IACxF,UAAU,GAAG,IAAI,GAAG,EAAgB,CAAC;IAC9C,sGAAsG;IAC7F,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,uFAAuF;IAC9E,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,gGAAgG;IACvF,IAAI,CAAS;IACtB,qGAAqG;IACrG,KAAK,GAAG,KAAK,CAAC;IACd,yEAAyE;IACzE,UAAU,GAAG,KAAK,CAAC;IACnB,iBAAiB,GAAG,KAAK,CAAC;IAC1B,QAAQ,CAAwB;IAChC,SAAS,GAAG,CAAC,CAAC;IACd,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAY,IAA8B;QACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,4FAA4F;QAC5F,+FAA+F;QAC/F,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM;QACJ,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;YAC/C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YACnC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;SAClC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAuB,EAAE,MAAmB;QACxD,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,SAAS,yCAAyC,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QAEzF,iGAAiG;QACjG,kFAAkF;QAClF,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/C,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QAC3F,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,aAAa,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,IAAI,CAAC;QAC9C,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACrF,2FAA2F;QAC3F,qFAAqF;QACrF,IAAI,KAAK,KAAK,IAAI;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,8FAA8F;YAC9F,4FAA4F;YAC5F,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9B,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,gGAAgG;QAChG,kGAAkG;QAClG,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5D,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAClC,CAAC;IAED,iGAAiG;IACjG,KAAK,CAAC,SAAS,CAAC,MAAmB;QACjC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,sCAAsC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtH,+FAA+F;QAC/F,6FAA6F;QAC7F,IAAI,OAAO,KAAK,CAAC,IAAI,EAAE,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;IACxF,CAAC;IAED,wFAAwF;IACxF,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED,+FAA+F;IAE/F;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,MAAmB;QAChD,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;YACxE,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;gBAAE,OAAO;YACpC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,oCAAoC,IAAI,EAAE,CAAC,CAAC;YAC1G,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QACxE,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,4CAA4C,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChI,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW,CAAC,MAAmB;QACnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,OAAO,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5D,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,KAAK,CAAC,mBAAmB,CAAC,MAAmB;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO;QACnC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,mBAAmB,CAAC;QAChD,IAAI,OAAO,SAAS,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO;QAC1E,IAAI,SAAS;YAAE,OAAO;QACtB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,MAAmB;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,wCAAwC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1H,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,IAAI,CAAC,QAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;QACjG,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgC,EAAE,MAAmB;QAClE,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;gBAAE,MAAM,GAAG,CAAC;YAC9C,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;YACnF,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,YAAY;QACV,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;QACnG,IAAI,IAAI,CAAC,QAAQ,EAAE,IAAI,KAAK,mBAAmB;YAAE,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;IAC7E,CAAC;IAED,MAAM,CAAC,IAAmB,EAAE,OAAe,EAAE,GAAG,GAAG,WAAW;QAC5D,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iGAAiG;IACjG,MAAM,CAAC,MAAgC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CACzH,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,GAAW;QACnB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/B,wFAAwF;QACxF,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,aAAa;YAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAC;IACzG,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,OAAqB;QAC5B,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,aAAa;YAAE,OAAO;QAC/D,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO;QAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aACjD,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,aAAa,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/G,CAAC;IAED,QAAQ,CAAC,MAAc;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO;QAC9B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,kFAAkF;QACpF,CAAC;IACH,CAAC;CACF;AAED,oGAAoG;AACpG,IAAI,cAAc,GAAG,CAAC,CAAC;AAEvB,MAAM,aAAa,GAAG,cAAc,CAAC;AACrC,MAAM,cAAc,GAAG,gFAAgF,CAAC;AACxG,MAAM,cAAc,GAClB,uMAAuM,CAAC;AAC1M,MAAM,WAAW,GAAG,sGAAsG,CAAC;AAC3H,MAAM,gBAAgB;AACpB,kGAAkG;AAClG,+FAA+F;AAC/F,+FAA+F;AAC/F,yFAAyF;AACzF,kPAAkP,CAAC;AAErP;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAyF;IAEzF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,iBAAiB,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,GAAG,CAAC;IAC/E,OAAO;QACL,IAAI,EAAE,SAAS;QACf,OAAO,EAAE;YACP,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,yDAAyD,OAAO,kPAAkP;YAC3T,GAAG,EAAE,gBAAgB;SACtB;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAuB,EACvB,IAA8B,EAC9B,eAAuB,EACvB,MAAc;IAEd,MAAM,KAAK,GAAG;QACZ,4BAA4B;QAC5B,0BAA0B,QAAQ,CAAC,SAAS,2GAA2G;QACvJ,cAAc,eAAe,EAAE;KAChC,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,MAAM,kBAAkB,CAAC,CAAC;QACjE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACzH,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,OAAO,OAAO,YAAY,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClI,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CACR,QAAQ,QAAQ,CAAC,QAAQ,CAAC,OAAO,qBAAqB,QAAQ,CAAC,QAAQ,CAAC,SAAS,IAAI,MAAM,YAAY,QAAQ,CAAC,QAAQ,CAAC,SAAS,IAAI,CACvI,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,oHAAoH,CAAC,CAAC;IACjI,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,SAAS,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,MAAM,CAAC,GAA0C;IACxD,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;AACpC,CAAC;AAED,6FAA6F;AAC7F,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,MAAM,CAAC,GAAG,aAAa,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,6FAA6F;AAC7F,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;AACpG,CAAC;AAED,sFAAsF;AACtF,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,OAAO,GAAG,KAA0D,CAAC;IAC3E,IAAI,OAAO,EAAE,IAAI,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,KAAK,GAAI,OAAO,CAAC,OAAgD;SACpE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;SACxE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,SAAS,SAAS,CAAC,MAAqB;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAmD,CAAC;IACzE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,EAAE,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAC7D,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,SAAS,SAAS,CAAI,IAAgB,EAAE,MAAmB;IACzD,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAChE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CACP,CAAC,KAAK,EAAE,EAAE;YACR,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EACD,CAAC,GAAY,EAAE,EAAE;YACf,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/mcp/api-reference.d.ts

@@ -0,0 +1,26 @@
+import { type McpApiReference, type McpNotExposed } from '../contract/index.js';
+/**
+ * #284 — what the cockpit's MCP API page shows, built from the RUNNING code (spec
+ * `mcp-api-reference-spec.md` § 11, R-06). Shipped, not a testkit: the route loads it lazily.
+ *
+ * `tools` is exactly what `tools/list` answers, produced by the same `toolListing()` the bridge
+ * calls (`bridge.ts`), so the page cannot disagree with the wire or with the committed
+ * `docs/features/mcp-server/mcp-api.json`. The registry is static code: nothing here needs the MCP
+ * service to be running, which is the point — a reader can review the API on a machine where MCP
+ * did not start (N-07).
+ *
+ * Reads only. No socket, no process, no network, no disk, no audit entry, no journal event. There
+ * is deliberately nothing here that could run a tool (spec § 13).
+ */
+/**
+ * Listed arguments that are never accepted. The listing cannot say so — `project_config` lists
+ * `projectId` with an empty schema, which reads as "optional, any type" — so it is named here and
+ * its reason is its OWN description from the live listing. A test holds each entry to the listing.
+ */
+export declare const REFUSED_ARGUMENTS: readonly {
+    readonly tool: string;
+    readonly argument: string;
+}[];
+/** What the server deliberately does not expose (J-4), each with the requirements that forbid it. */
+export declare const NOT_EXPOSED: readonly McpNotExposed[];
+export declare function buildMcpApiReference(xezarVersion: string): McpApiReference;

package/dist/mcp/api-reference.js

@@ -0,0 +1,133 @@
+import { mcpToolListingSchema, } from '../contract/index.js';
+import { HEALTH_TOOL } from './bridge.js';
+import { SERVER_CAPABILITIES, SUPPORTED_PROTOCOL_VERSIONS } from './protocol.js';
+import { toolListing } from './tool.js';
+import { tools } from './tools/index.js';
+import { REFUSED_ACTIONS } from './tools/project-config.js';
+/**
+ * #284 — what the cockpit's MCP API page shows, built from the RUNNING code (spec
+ * `mcp-api-reference-spec.md` § 11, R-06). Shipped, not a testkit: the route loads it lazily.
+ *
+ * `tools` is exactly what `tools/list` answers, produced by the same `toolListing()` the bridge
+ * calls (`bridge.ts`), so the page cannot disagree with the wire or with the committed
+ * `docs/features/mcp-server/mcp-api.json`. The registry is static code: nothing here needs the MCP
+ * service to be running, which is the point — a reader can review the API on a machine where MCP
+ * did not start (N-07).
+ *
+ * Reads only. No socket, no process, no network, no disk, no audit entry, no journal event. There
+ * is deliberately nothing here that could run a tool (spec § 13).
+ */
+/**
+ * Listed arguments that are never accepted. The listing cannot say so — `project_config` lists
+ * `projectId` with an empty schema, which reads as "optional, any type" — so it is named here and
+ * its reason is its OWN description from the live listing. A test holds each entry to the listing.
+ */
+export const REFUSED_ARGUMENTS = [
+    { tool: 'project_config', argument: 'projectId' },
+];
+/** What the server deliberately does not expose (J-4), each with the requirements that forbid it. */
+export const NOT_EXPOSED = [
+    {
+        what: 'Resources, prompts and logging',
+        detail: 'The server advertises the tools capability only. Any other method is answered with "method not found".',
+        forbiddenBy: ['D-05'],
+    },
+    {
+        what: 'Account identity',
+        detail: 'No email, login, organisation, plan or credential appears in a tool answer. Account administration is refused.',
+        forbiddenBy: ['F-12', 'N-01'],
+    },
+    {
+        what: 'Secrets',
+        detail: 'No launch key, credential, token or environment value appears in any tool answer.',
+        forbiddenBy: ['F-15', 'A-12'],
+    },
+    {
+        what: 'Host-process control',
+        detail: 'No argument takes a process id, a signal, a command or a host path.',
+        forbiddenBy: ['F-08', 'M-04'],
+    },
+    {
+        what: 'Other projects',
+        detail: 'A session is bound to one project. No workspace setting, project registry or other project’s data is reachable.',
+        forbiddenBy: ['F-01', 'N-01'],
+    },
+];
+/** Refusal-only actions, per tool. Today only `project_config` has them (`REFUSED_ACTIONS`). */
+const REFUSED_ACTIONS_BY_TOOL = {
+    project_config: REFUSED_ACTIONS,
+};
+const DISCRIMINATORS = ['action', 'view', 'read'];
+/** A listed schema's discriminator argument and its values, or null when it has none. */
+function discriminatorOf(inputSchema) {
+    const properties = (inputSchema.properties ?? {});
+    for (const name of DISCRIMINATORS) {
+        const values = properties[name]?.enum;
+        if (Array.isArray(values))
+            return { name, values: values.filter((v) => typeof v === 'string') };
+    }
+    return null;
+}
+const discriminatorValues = (inputSchema) => discriminatorOf(inputSchema)?.values ?? [];
+/** The two guards only MCP carries: the stale-write token (#250) and the idempotency key. */
+const GUARDS = ['expectedVersion', 'operationId'];
+/**
+ * #301 — which actions of `tool` are refused without each guard it lists, asked of the tool's OWN
+ * input schema: every performing action is validated with nothing but its discriminator, and an
+ * issue on the guard's path means that action needs it. The listing cannot answer this (a flat
+ * schema lists the guard as optional at the top), and the tool's description is prose.
+ *
+ * This reads what the schema ENFORCES, so it is only as complete as the schema: a rule a tool checks
+ * in its handler instead is invisible here. `mcp-reference-route.test.ts` pins the real registry's
+ * answer, so moving a rule out of a schema shows up as a failing test, not as a quietly wrong page.
+ */
+function guardsOf(tool, listed, refused) {
+    const properties = (listed.inputSchema.properties ?? {});
+    const discriminator = discriminatorOf(listed.inputSchema);
+    const needs = (argument, probe) => {
+        const parsed = tool.inputSchema.safeParse(probe);
+        return !parsed.success && parsed.error.issues.some((issue) => issue.path[0] === argument);
+    };
+    return GUARDS.filter((argument) => Object.hasOwn(properties, argument)).map((argument) => {
+        if (!discriminator)
+            return { tool: tool.name, argument, everyCall: needs(argument, {}), requiredBy: [] };
+        const performing = discriminator.values.filter((action) => !Object.hasOwn(refused, action));
+        const requiredBy = performing.filter((action) => needs(argument, { [discriminator.name]: action }));
+        return { tool: tool.name, argument, everyCall: performing.length > 0 && requiredBy.length === performing.length, requiredBy };
+    });
+}
+export function buildMcpApiReference(xezarVersion) {
+    // Parsed through the contract's STRICT schema: a key `toolListing()` gains that the contract
+    // does not describe throws here, instead of being stripped from the page without a word.
+    const listing = mcpToolListingSchema.array().parse([HEALTH_TOOL, ...tools.map(toolListing)]);
+    const byName = new Map(listing.map((tool) => [tool.name, tool]));
+    const guards = tools.flatMap((tool) => guardsOf(tool, byName.get(tool.name), REFUSED_ACTIONS_BY_TOOL[tool.name] ?? {}));
+    const refusedActions = listing.flatMap((tool) => {
+        const refused = REFUSED_ACTIONS_BY_TOOL[tool.name] ?? {};
+        return discriminatorValues(tool.inputSchema)
+            .filter((action) => Object.hasOwn(refused, action))
+            .map((action) => ({
+            tool: tool.name,
+            action,
+            boundary: refused[action].boundary.replaceAll('-', ' '),
+            reason: refused[action].reason,
+        }));
+    });
+    const refusedArguments = REFUSED_ARGUMENTS.flatMap(({ tool, argument }) => {
+        const properties = (byName.get(tool)?.inputSchema.properties ?? {});
+        const description = properties[argument]?.description;
+        return typeof description === 'string' ? [{ tool, argument, reason: description }] : [];
+    });
+    return {
+        available: true,
+        xezarVersion,
+        protocolVersions: [...SUPPORTED_PROTOCOL_VERSIONS],
+        capabilities: { tools: { listChanged: SERVER_CAPABILITIES.tools.listChanged } },
+        tools: listing,
+        refusedActions,
+        refusedArguments,
+        guards,
+        notExposed: NOT_EXPOSED.map((item) => ({ ...item, forbiddenBy: [...item.forbiddenBy] })),
+    };
+}
+//# sourceMappingURL=api-reference.js.map

package/dist/mcp/api-reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-reference.js","sourceRoot":"","sources":["../../src/mcp/api-reference.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,GAKrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EAAE,WAAW,EAAgB,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAE5D;;;;;;;;;;;;GAYG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAoE;IAChG,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE;CAClD,CAAC;AAEF,qGAAqG;AACrG,MAAM,CAAC,MAAM,WAAW,GAA6B;IACnD;QACE,IAAI,EAAE,gCAAgC;QACtC,MAAM,EAAE,wGAAwG;QAChH,WAAW,EAAE,CAAC,MAAM,CAAC;KACtB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,gHAAgH;QACxH,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;KAC9B;IACD;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,mFAAmF;QAC3F,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;KAC9B;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,qEAAqE;QAC7E,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;KAC9B;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,iHAAiH;QACzH,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;KAC9B;CACF,CAAC;AAEF,gGAAgG;AAChG,MAAM,uBAAuB,GAA6F;IACxH,cAAc,EAAE,eAAe;CAChC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAE3D,yFAAyF;AACzF,SAAS,eAAe,CAAC,WAAoC;IAC3D,MAAM,UAAU,GAAG,CAAC,WAAW,CAAC,UAAU,IAAI,EAAE,CAAuC,CAAC;IACxF,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;QACtC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;IAC/G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,WAAoC,EAAY,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC;AAE3H,6FAA6F;AAC7F,MAAM,MAAM,GAAG,CAAC,iBAAiB,EAAE,aAAa,CAAU,CAAC;AAE3D;;;;;;;;;GASG;AACH,SAAS,QAAQ,CAAC,IAAa,EAAE,MAAsB,EAAE,OAA0C;IACjG,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,IAAI,EAAE,CAA4B,CAAC;IACpF,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAE,KAA8B,EAAW,EAAE;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC5F,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QACvF,IAAI,CAAC,aAAa;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QACzG,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5F,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACpG,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;IAChI,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,YAAoB;IACvD,6FAA6F;IAC7F,yFAAyF;IACzF,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAE,EAAE,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEzH,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC9C,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACzD,OAAO,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC;aACzC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM;YACN,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;YACxD,MAAM,EAAE,OAAO,CAAC,MAAM,CAAE,CAAC,MAAM;SAChC,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;QACxE,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,UAAU,IAAI,EAAE,CAA8C,CAAC;QACjH,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC;QACtD,OAAO,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,EAAE,IAAI;QACf,YAAY;QACZ,gBAAgB,EAAE,CAAC,GAAG,2BAA2B,CAAC;QAClD,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,mBAAmB,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE;QAC/E,KAAK,EAAE,OAAO;QACd,cAAc;QACd,gBAAgB;QAChB,MAAM;QACN,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;KACzF,CAAC;AACJ,CAAC"}