@qodeca/xezar 0.13.0 → 0.14.0

package/dist/mcp/echo-guard.js

@@ -0,0 +1,160 @@
+import { MCP_JOURNAL_RETAINED_ROWS, mcpJournalOperationIdSchema, mcpJournalProjectIdSchema, mcpJournalRowSchema, } from '../contract/index.js';
+import { RECEIPT_MAX_KEPT } from './operation-receipts.js';
+/**
+ * The leader-side echo guard (#106, F-13): what stands between the project's event journal and a
+ * project-bound leader, so the leader sees human changes and new outcomes and never its own echoes.
+ *
+ * WHY IT EXISTS. A leader that reacts to every row would react to the row its OWN mutation
+ * produced, mutate again, and read that echo too — a loop that costs a model turn per lap and never
+ * ends. The compatibility report states the rule: do not react recursively to the leader's own
+ * operation acknowledgements; keep causal origin so real new outcomes stay actionable while echoes,
+ * duplicate delivery and presentation updates do not trigger loops.
+ *
+ * THE SOURCE. The same state source as the cockpit, after project filtering (requirements § 8):
+ * the per-project journal (#103), fed from the shared services an MCP write goes through. Never the
+ * workspace stream — `/api/v1/workspace/events` carries every project and the registry news, and an
+ * unfiltered workspace stream reaching MCP is exactly what § 8 prohibits (D-05 § 6.4).
+ *
+ * THE RULES, in the order `admit` applies them. A row is delivered only when it survives all six:
+ *   1. `invalid`         — it does not parse as a journal row (`mcpJournalRowSchema`).
+ *   2. `foreign-project` — it names a project other than the one this session is bound to (N-01).
+ *   3. `workspace-only`  — its `kind` is a workspace-only event name. `project-added`,
+ *      `project-removed` and `checkout-progress` name OTHER projects; N-01 forbids a project-bound
+ *      session ever receiving one, whatever category an emitter filed it under.
+ *   4. `presentation`    — its `kind` is presentation, a log line or a counter: D-05 § 6.3's
+ *      closed negative list plus the SSE stream's own `usage` and `ping`. The journal should never
+ *      hold one (issue #104's catalog excludes them); this is the leader's own floor under that.
+ *   5. `own-echo`        — `origin` is `leader` AND `causedBy` is an operation THIS guard issued.
+ *      Exactly D-05 § 6.3's rule. Never "I recognise the run": a task the leader started still
+ *      reports its completion (`origin: system`) and a human's edit to it (`origin: human`), and a
+ *      `leader` row caused by an operation this guard never issued — another session's — is news.
+ *   6. `duplicate`       — its `eventId` was already delivered. Delivery is at-least-once (D-05
+ *      § 6.6), and a replay overlapping the live feed must not wake the leader twice.
+ *
+ * ORDERING IS THE WHOLE TRICK. The service writes the echo while the operation is still in flight:
+ * `PATCH /runs/:id` updates the store synchronously inside the route, so the row can reach the
+ * journal before the tool result reaches the leader. An operation id recorded on ACKNOWLEDGEMENT
+ * would therefore miss its own echo. `issue` records the id first and only then dispatches, so no
+ * interleaving can deliver an echo of an operation the guard does not yet know about.
+ *
+ * WHAT IT IS NOT. Not the journal (#103), not the catalog emitter (#104), not replay/reconnect
+ * (#105) and not the event controller (#107): those produce, page and dispatch rows, and each of
+ * them hands rows to `admit`. It grants nothing, persists nothing and opens no file.
+ */
+/** The workspace-only names N-01 keeps away from a project-bound session: each names other projects. */
+export const WORKSPACE_ONLY_EVENT_NAMES = ['project-added', 'project-removed', 'checkout-progress'];
+/**
+ * Presentation, log lines and counters (requirements § 6): D-05 § 6.3's decided-negative list, plus
+ * the two stream signals the brief names as the traffic that must not become leader events.
+ */
+export const PRESENTATION_EVENT_KINDS = [
+    'item.started',
+    'item.completed',
+    'tool-call',
+    'tool-result',
+    'text',
+    'token-usage',
+    'cost',
+    'usage',
+    'ping',
+];
+const WORKSPACE_ONLY = new Set(WORKSPACE_ONLY_EVENT_NAMES);
+const PRESENTATION = new Set(PRESENTATION_EVENT_KINDS);
+/**
+ * A remembered set that forgets its oldest entry past `max`. Both bounds below are REUSED, not
+ * chosen: an operation can only echo while its receipt is kept (D-09 B-21), and a row can only be
+ * redelivered while the journal retains it (B-19).
+ */
+class BoundedSet {
+    max;
+    #items = new Set();
+    constructor(max) {
+        this.max = max;
+    }
+    has(value) {
+        return this.#items.has(value);
+    }
+    add(value) {
+        if (this.#items.has(value))
+            return;
+        this.#items.add(value);
+        if (this.#items.size > this.max)
+            this.#items.delete(this.#items.values().next().value);
+    }
+    clear() {
+        this.#items.clear();
+    }
+}
+export class EchoGuard {
+    projectId;
+    #own = new BoundedSet(RECEIPT_MAX_KEPT);
+    #delivered = new BoundedSet(MCP_JOURNAL_RETAINED_ROWS);
+    constructor(options) {
+        // A resolved slug only: the `default` alias names no journal, and a guard on it would compare
+        // every row against a project id no row can carry.
+        this.projectId = mcpJournalProjectIdSchema.parse(options.projectId);
+        if (this.projectId === 'default')
+            throw new Error('an echo guard needs a resolved project id, not the boot alias');
+    }
+    /**
+     * Record `operationId` as this leader's own, THEN run `dispatch`. The only way to issue an
+     * operation through the guard, so the id is always known before its echo can exist.
+     */
+    async issue(operationId, dispatch) {
+        this.#own.add(mcpJournalOperationIdSchema.parse(operationId));
+        return dispatch();
+    }
+    /** Whether `operationId` is one this guard issued. */
+    isOwn(operationId) {
+        return this.#own.has(operationId);
+    }
+    /** Decide one row. Pure apart from remembering what it delivered; never throws. */
+    admit(candidate) {
+        const parsed = mcpJournalRowSchema.safeParse(candidate);
+        if (!parsed.success)
+            return { deliver: false, reason: 'invalid' };
+        const row = parsed.data;
+        if (row.projectId !== this.projectId)
+            return { deliver: false, reason: 'foreign-project' };
+        if (WORKSPACE_ONLY.has(row.kind))
+            return { deliver: false, reason: 'workspace-only' };
+        if (PRESENTATION.has(row.kind))
+            return { deliver: false, reason: 'presentation' };
+        if (row.origin === 'leader' && row.causedBy !== null && this.#own.has(row.causedBy)) {
+            return { deliver: false, reason: 'own-echo' };
+        }
+        if (this.#delivered.has(row.eventId))
+            return { deliver: false, reason: 'duplicate' };
+        this.#delivered.add(row.eventId);
+        return { deliver: true, row };
+    }
+    /**
+     * Forget which rows were delivered — for a journal that was recreated (`cursor_too_old` after a
+     * new epoch restarts `journalSeq`, and therefore `eventId`, at 1). The operations this leader
+     * issued are kept: an echo of one is still an echo after the journal changed.
+     */
+    forgetDelivered() {
+        this.#delivered.clear();
+    }
+}
+/**
+ * Attach a guarded leader feed to the bound project's journal. `deliver` sees only admitted rows;
+ * `onDrop`, when given, sees every refusal (for tests and diagnostics — never for the leader).
+ * Returns the unsubscribe, which the caller must keep: a feed nobody detaches is a listener the
+ * journal holds for ever.
+ */
+export function attachLeaderFeed(options) {
+    const { journal, guard, deliver, onDrop } = options;
+    if (journal.projectId !== guard.projectId) {
+        // Refused without naming either project: the session knows its own, the other is not its business.
+        throw new Error("a leader feed attaches only to its own project's journal");
+    }
+    return journal.subscribe((row) => {
+        const verdict = guard.admit(row);
+        if (verdict.deliver)
+            deliver(verdict.row);
+        else
+            onDrop?.(verdict.reason, row);
+    });
+}
+//# sourceMappingURL=echo-guard.js.map

package/dist/mcp/echo-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"echo-guard.js","sourceRoot":"","sources":["../../src/mcp/echo-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,EACzB,mBAAmB,GAEpB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,wGAAwG;AACxG,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,CAAU,CAAC;AAE7G;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,cAAc;IACd,gBAAgB;IAChB,WAAW;IACX,aAAa;IACb,MAAM;IACN,aAAa;IACb,MAAM;IACN,OAAO;IACP,MAAM;CACE,CAAC;AAYX,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS,0BAA0B,CAAC,CAAC;AACnE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,wBAAwB,CAAC,CAAC;AAE/D;;;;GAIG;AACH,MAAM,UAAU;IAEO,GAAG;IADf,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,YAAqB,GAAW;mBAAX,GAAG;IAAW,CAAC;IAEpC,GAAG,CAAC,KAAa;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,GAAG,CAAC,KAAa;QACf,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;IACnG,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF;AAOD,MAAM,OAAO,SAAS;IACX,SAAS,CAAS;IAClB,IAAI,GAAG,IAAI,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACxC,UAAU,GAAG,IAAI,UAAU,CAAC,yBAAyB,CAAC,CAAC;IAEhE,YAAY,OAAyB;QACnC,8FAA8F;QAC9F,mDAAmD;QACnD,IAAI,CAAC,SAAS,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACrH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAI,WAAmB,EAAE,QAA8B;QAChE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9D,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,SAAkB;QACtB,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAClE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QAC3F,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACtF,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAClF,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAChD,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACrF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IAED;;;;OAIG;IACH,eAAe;QACb,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAKhC;IACC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACpD,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC1C,mGAAmG;QACnG,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;;YACrC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/mcp/event-catalog.d.ts

@@ -0,0 +1,120 @@
+import { type McpJournalAppendInput, type McpJournalOrigin, type McpJournalRow, type ProviderStatus } from '../contract/index.js';
+import type { RunStore } from '../runs/store.ts';
+/**
+ * The significant-event catalog E-01–E-06 (#104): what enters the project journal (#103), and —
+ * equally binding — what never does. Kinds and categories are `packages/contract/src/
+ * mcp-event-catalog.ts`; the journal is `./event-journal.ts`.
+ *
+ * WHERE THE ROWS COME FROM. N-02: nothing here is an MCP-only path. The catalog LISTENS to the
+ * shared services the cockpit already drives — the `RunStore` bus (`'run'` snapshots and `'event'`
+ * lines, the same two the SSE streams relay) and the workspace bus (`provider-status`) — so a
+ * change caused through the cockpit and one caused through MCP reach the same derivation and
+ * produce the same row. The two changes that have no in-process signal today (a configuration
+ * write and a workflow write, E-05) are reported by their writer through `configChanged` /
+ * `workflowChanged` / `agentConfigChanged`.
+ *
+ * WHAT ENTERS, derived rather than forwarded (D-05 § 5.1 — a terminal status is not an event type):
+ *  - E-01  a run status transition to `done` / `failed` / `cancelled`, or to `waiting` WITHOUT a
+ *          structured question (`task.blocked` — the run cannot go on without input);
+ *  - E-02  a transition to `waiting` that follows an `ask.requested` line (`question.asked`), and a
+ *          human `user-message` to a run that was `waiting` (`question.answered`);
+ *  - E-03  a CHECK step settling `done`/`failed` (a quality gate), and a transition to `review` —
+ *          F-11 keeps the optional review a different kind from a mandatory gate;
+ *  - E-04  a HUMAN edit of a queued run's prompt (`goal.changed`), a human message to a run that
+ *          was not waiting (`instruction.added`), and a human add/edit/remove of a queued message;
+ *  - E-05  the writer-reported configuration, workflow and agent-config changes, minus the keys
+ *          that only change presentation (`liveTitleUpdates`, `namerModel` only name tasks);
+ *  - E-06  a provider's availability (`connected` and not disabled) flipping.
+ *
+ * WHAT NEVER ENTERS. Every other `'event'` type — `item.*`, `tool-call`, `tool-result`, `text`,
+ * `note` and `check-output` (log lines), `token-usage`, `cost`, `usage.updated` (token counters),
+ * `lifecycle`, `step-*`, `turn.*`, `session.*`, and every ephemeral live frame. Every other record
+ * change — token/cost/RSS counters, `diffStat`, titles and `titleSummary`, `seenAt`, pin, archive,
+ * the `monitoring` activity, `queued`→`running`. Every other workspace event — `checkout-progress`,
+ * `project-*`, `automation-change`. The SSE `ping` keepalive is never on a bus at all. None of
+ * these start a model turn: no heartbeat, transport retry, acknowledgement or deduplication does.
+ * There is no coalescing either (D-05 § 8 N3): one qualifying change is exactly one row.
+ *
+ * ORIGIN (D-05 § 6.3: `human | leader | system`). Derived from the door a change came through,
+ * never from anything a client says. The MCP door marks its dispatch with `withEventOrigin`
+ * (`leader` + the operation id); a change made synchronously inside that call inherits it through
+ * `AsyncLocalStorage`. A change that lands LATER — cancelling a running task interrupts its agent,
+ * and the `cancelled` status is written when the process exits — cannot inherit it, so the call
+ * also leaves an INTENT on the run it names, consumed by that run's next status transition. With
+ * neither, each derivation has its own honest default: an engine transition is `system`; a
+ * cancellation, a message and a queued-prompt edit only ever start at a person's request, so they
+ * are `human` (the cockpit is the only other door that issues them). E-04 is a HUMAN change by
+ * definition: a leader's own edit writes no E-04 row, and neither does a leader's answer to a
+ * question — while a cancellation, whoever issued it, writes the SAME E-01 row, distinguishable
+ * only by `origin` and `causedBy`, which is what the F-13 echo guard needs.
+ *
+ * Never throws into the service that emitted the change: the store emits from inside its own
+ * write, and a journal problem must not fail a task. A row that cannot be written is warned about
+ * once and dropped — the journal keeps its sequence gapless by not spending a number (#103).
+ *
+ * NOT READ HERE: nothing private to `RunManager`, in particular no `ActiveRun` field — `ActiveRun`
+ * is built in both `execute` and `runContinuation`, and this module depends on neither. A Continue
+ * and a restart recovery reach the same store calls, and therefore the same rows, as a first run.
+ */
+/** Who caused a change, as the door it came through knows it. */
+export interface EventOriginContext {
+    readonly origin: McpJournalOrigin;
+    /** The leader operation id (D-06 § 5.2) — required for `leader`, `null` otherwise. */
+    readonly causedBy: string | null;
+    /** The run the operation targets, when it has one: the intent a later transition consumes. */
+    readonly runId?: string;
+}
+/**
+ * Run `fn` as a change caused by `context`. The MCP door wraps each dispatched operation in this;
+ * nothing else needs to. Throws only on a caller bug: a `leader` context without a valid
+ * operation id would defeat the echo guard it exists for.
+ */
+export declare function withEventOrigin<T>(context: EventOriginContext, fn: () => T): T;
+/** The journal as the catalog writes it — `EventJournal` satisfies it. */
+export interface CatalogJournal {
+    append(input: McpJournalAppendInput): McpJournalRow | undefined;
+}
+/** The workspace bus as the catalog reads it — `WorkspaceEventBus` satisfies it. */
+export interface WorkspaceEventSource {
+    on(listener: (event: string, data: unknown) => void): () => void;
+}
+export interface EventCatalogOptions {
+    journal: CatalogJournal;
+    /** The project's store. Runs already in it are the baseline: attaching writes no row. */
+    store: RunStore;
+    /** Host-wide `provider-status` (E-06). Absent: no executor rows, nothing else changes. */
+    workspaceEvents?: WorkspaceEventSource;
+    /** Provider rows as they are at attach time (`ProviderAuth.status()`), the E-06 baseline. A
+     *  provider seen for the first time without one counts as a change. */
+    providerBaseline?: readonly ProviderStatus[];
+    /** Where the one warning about an unwritable row goes. */
+    warn?: (message: string) => void;
+}
+export declare class EventCatalog {
+    #private;
+    private constructor();
+    /** Start deriving rows from the project's services. Returns the catalog; `detach` stops it. */
+    static attach(options: EventCatalogOptions): EventCatalog;
+    /** Stop listening. Every subscription `attach` made is released — none outlives the catalog. */
+    detach(): void;
+    /**
+     * E-05: the project configuration was written (`PUT /config`). `keys` are the fields the write
+     * set or cleared — names only, never values. A write that touched nothing but presentation
+     * writes no row.
+     */
+    configChanged(input: {
+        keys: readonly string[];
+        version?: string | null;
+    }): McpJournalRow | undefined;
+    /** E-05: a project workflow was saved or deleted (`POST /workflows`, `DELETE /workflows/:name`). */
+    workflowChanged(input: {
+        name: string;
+        change: 'saved' | 'deleted';
+        version?: string | null;
+    }): McpJournalRow | undefined;
+    /** E-05: an agent configuration file was written (`PUT /agent-config/:id`), by catalog id. */
+    agentConfigChanged(input: {
+        id: string;
+        version?: string | null;
+    }): McpJournalRow | undefined;
+}

package/dist/mcp/event-catalog.js

@@ -0,0 +1,306 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { MCP_EVENT_KIND_CATEGORY, mcpJournalOperationIdSchema, providerStatusSchema, } from '../contract/index.js';
+import { runVersion } from './stale-write.js';
+/**
+ * The origin of the call in flight, and whether that call is still in flight. `AsyncLocalStorage`
+ * alone would also hand the context to every async chain the call merely STARTED — a task started
+ * through MCP runs for minutes on the promise chain its start created, and its completion would read
+ * as the leader's own change, which the echo guard then hides from the leader (#243). `live` ends
+ * that at the call's own settlement, so only a change made within the call inherits its origin.
+ */
+const originScope = new AsyncLocalStorage();
+/** The origin of the change being made right now, if an origin-marked call is still making it. */
+function currentOrigin() {
+    const scope = originScope.getStore();
+    return scope?.live ? scope.context : undefined;
+}
+/**
+ * Intents left by an origin-marked call for a run whose effect lands after the call returned. One
+ * per run; consumed by the run's next status transition, whether or not that transition writes a
+ * row, so an intent never outlives the change it was for by more than one transition.
+ */
+const pendingIntents = new Map();
+/**
+ * Run `fn` as a change caused by `context`. The MCP door wraps each dispatched operation in this;
+ * nothing else needs to. Throws only on a caller bug: a `leader` context without a valid
+ * operation id would defeat the echo guard it exists for.
+ */
+export function withEventOrigin(context, fn) {
+    if (context.origin === 'leader' && !mcpJournalOperationIdSchema.safeParse(context.causedBy).success) {
+        throw new Error('a leader change must name the operation that caused it');
+    }
+    if (context.origin !== 'leader' && context.causedBy !== null) {
+        throw new Error('only a leader change carries an operation id');
+    }
+    if (context.runId !== undefined)
+        pendingIntents.set(context.runId, context);
+    const scope = { context, live: true };
+    const end = () => {
+        scope.live = false;
+    };
+    let result;
+    try {
+        result = originScope.run(scope, fn);
+    }
+    catch (err) {
+        end();
+        throw err;
+    }
+    const pending = result;
+    // Observed, never rethrown from here: the caller still receives `result` itself, rejection and all.
+    if (pending !== null && typeof pending === 'object' && typeof pending.then === 'function') {
+        result.then(end, end);
+    }
+    else {
+        end();
+    }
+    return result;
+}
+/** Configuration keys whose only effect is how tasks are NAMED — presentation, not execution. */
+const PRESENTATION_CONFIG_KEYS = new Set(['liveTitleUpdates', 'namerModel']);
+const SUBJECT_ID_MAX = 256;
+function remember(run, askedQuestions) {
+    return {
+        status: run.status,
+        task: run.task,
+        queued: new Map((run.queuedMessages ?? []).map((message) => [message.id, message.text])),
+        steps: new Map(run.steps.map((step) => [step.id, step.status])),
+        ...(askedQuestions === undefined ? {} : { askedQuestions }),
+    };
+}
+export class EventCatalog {
+    #journal;
+    #store;
+    #warn;
+    #runs = new Map();
+    #executors = new Map();
+    #unsubscribe = [];
+    #warned = false;
+    constructor(options) {
+        this.#journal = options.journal;
+        this.#store = options.store;
+        this.#warn = options.warn ?? ((message) => console.warn(message));
+    }
+    /** Start deriving rows from the project's services. Returns the catalog; `detach` stops it. */
+    static attach(options) {
+        const catalog = new EventCatalog(options);
+        for (const run of options.store.listRuns())
+            catalog.#runs.set(run.id, remember(run));
+        for (const row of options.providerBaseline ?? [])
+            catalog.#executors.set(executorId(row), isAvailable(row));
+        const onRun = (run) => catalog.#guard(() => catalog.#onRun(run));
+        const onEvent = (payload) => catalog.#guard(() => catalog.#onEvent(payload.runId, payload.event));
+        const onDeleted = (runId) => {
+            catalog.#runs.delete(runId);
+            pendingIntents.delete(runId);
+        };
+        options.store.on('run', onRun);
+        options.store.on('event', onEvent);
+        options.store.on('deleted', onDeleted);
+        catalog.#unsubscribe.push(() => options.store.off('run', onRun), () => options.store.off('event', onEvent), () => options.store.off('deleted', onDeleted));
+        if (options.workspaceEvents) {
+            catalog.#unsubscribe.push(options.workspaceEvents.on((event, data) => {
+                if (event === 'provider-status')
+                    catalog.#guard(() => catalog.#onProviderStatus(data));
+            }));
+        }
+        return catalog;
+    }
+    /** Stop listening. Every subscription `attach` made is released — none outlives the catalog. */
+    detach() {
+        for (const unsubscribe of this.#unsubscribe.splice(0))
+            unsubscribe();
+        this.#runs.clear();
+        this.#executors.clear();
+    }
+    /**
+     * E-05: the project configuration was written (`PUT /config`). `keys` are the fields the write
+     * set or cleared — names only, never values. A write that touched nothing but presentation
+     * writes no row.
+     */
+    configChanged(input) {
+        const keys = [...new Set(input.keys)].filter((key) => !PRESENTATION_CONFIG_KEYS.has(key)).sort();
+        if (keys.length === 0)
+            return undefined;
+        return this.#guard(() => this.#append('config.changed', { type: 'config', id: 'project', version: input.version ?? null }, this.#originOr('human'), `project configuration changed: ${keys.join(', ')}`));
+    }
+    /** E-05: a project workflow was saved or deleted (`POST /workflows`, `DELETE /workflows/:name`). */
+    workflowChanged(input) {
+        const kind = input.change === 'saved' ? 'workflow.saved' : 'workflow.deleted';
+        return this.#guard(() => this.#append(kind, { type: 'workflow', id: input.name.slice(0, SUBJECT_ID_MAX), version: input.version ?? null }, this.#originOr('human'), `workflow "${clip(input.name, 120)}" ${input.change}`));
+    }
+    /** E-05: an agent configuration file was written (`PUT /agent-config/:id`), by catalog id. */
+    agentConfigChanged(input) {
+        return this.#guard(() => this.#append('agent-config.changed', { type: 'agent-config', id: input.id.slice(0, SUBJECT_ID_MAX), version: input.version ?? null }, this.#originOr('human'), `agent configuration ${clip(input.id, 120)} changed`));
+    }
+    // ---- runs -----------------------------------------------------------------------------------
+    #onRun(run) {
+        const before = this.#runs.get(run.id);
+        // A run seen for the first time — created, or first touched after attach — is the baseline.
+        if (!before) {
+            this.#runs.set(run.id, remember(run));
+            return;
+        }
+        const statusChanged = before.status !== run.status;
+        // An unmatched question survives only until the run's status next moves.
+        this.#runs.set(run.id, remember(run, statusChanged ? undefined : before.askedQuestions));
+        // E-03 — a quality gate settled. Before the status row, which is the order it happened in.
+        for (const step of run.steps) {
+            if (step.kind !== 'check' || before.steps.get(step.id) === step.status)
+                continue;
+            if (step.status === 'done' || step.status === 'failed') {
+                const passed = step.status === 'done';
+                this.#appendRun(passed ? 'gate.passed' : 'gate.failed', run.id, this.#originOr('system'), `quality gate ${clip(step.id, 80)} ${passed ? 'passed' : 'failed'}`);
+            }
+        }
+        // E-04 — the prompt and its stack change only through the queued-prompt edits (#472).
+        if (before.task !== run.task)
+            this.#humanChange('goal.changed', run.id, 'the queued task prompt was edited');
+        const queued = remember(run).queued;
+        for (const [id, text] of queued) {
+            if (!before.queued.has(id))
+                this.#humanChange('instruction.queued', run.id, 'a message was queued onto the task');
+            else if (before.queued.get(id) !== text)
+                this.#humanChange('instruction.edited', run.id, 'a queued message was edited');
+        }
+        for (const id of before.queued.keys()) {
+            if (!queued.has(id))
+                this.#humanChange('instruction.removed', run.id, 'a queued message was removed');
+        }
+        if (statusChanged)
+            this.#onStatus(run, before);
+    }
+    #onStatus(run, before) {
+        const origin = this.#transitionOrigin(run.id, run.status === 'cancelled' ? 'human' : 'system');
+        switch (run.status) {
+            case 'done':
+                this.#appendRun('task.done', run.id, origin, 'task finished: done');
+                return;
+            case 'failed': {
+                const step = run.steps.find((candidate) => candidate.status === 'failed');
+                this.#appendRun('task.failed', run.id, origin, step ? `task finished: failed at step ${clip(step.id, 80)}` : 'task finished: failed');
+                return;
+            }
+            case 'cancelled':
+                this.#appendRun('task.cancelled', run.id, origin, 'task finished: cancelled');
+                return;
+            case 'review':
+                this.#appendRun('result.ready', run.id, origin, 'result ready for assessment (review)');
+                return;
+            case 'waiting':
+                if (before.askedQuestions !== undefined) {
+                    this.#appendRun('question.asked', run.id, origin, questionSummary(before.askedQuestions));
+                }
+                else {
+                    this.#appendRun('task.blocked', run.id, origin, 'task is waiting for input');
+                }
+                return;
+            default:
+                // `queued` and `running` are the engine doing its job, not something to reason about.
+                return;
+        }
+    }
+    #onEvent(runId, event) {
+        const memory = this.#runs.get(runId);
+        if (!memory)
+            return;
+        if (event.type === 'ask.requested') {
+            const count = Array.isArray(event.questions) ? event.questions.length : 1;
+            // The engine raises the question and THEN parks the run; a backend that parks first gets
+            // its row here instead. Either way: one question, one row.
+            if (memory.status === 'waiting') {
+                this.#appendRun('question.asked', runId, this.#originOr('system'), questionSummary(count));
+            }
+            else {
+                memory.askedQuestions = count;
+            }
+            return;
+        }
+        if (event.type === 'user-message') {
+            const origin = this.#originOr('human');
+            // A leader's own answer or instruction is its operation, not a human change (E-02/E-04).
+            if (origin.origin !== 'human')
+                return;
+            if (memory.status === 'waiting')
+                this.#appendRun('question.answered', runId, origin, 'a human answered the waiting task');
+            else
+                this.#appendRun('instruction.added', runId, origin, 'a human sent the task a new instruction');
+        }
+        // Everything else is transcript: log lines, token counters, tool traffic. Never a row.
+    }
+    #humanChange(kind, runId, summary) {
+        const origin = this.#originOr('human');
+        if (origin.origin === 'human')
+            this.#appendRun(kind, runId, origin, summary);
+    }
+    /** The origin of a status transition: the current call, else an intent left for this run, else
+     *  the default. Consumes the intent either way — it was for this transition. */
+    #transitionOrigin(runId, fallback) {
+        const current = currentOrigin();
+        const intent = pendingIntents.get(runId);
+        pendingIntents.delete(runId);
+        return current ?? intent ?? { origin: fallback, causedBy: null };
+    }
+    #originOr(fallback) {
+        return currentOrigin() ?? { origin: fallback, causedBy: null };
+    }
+    #appendRun(kind, runId, origin, summary) {
+        this.#append(kind, { type: 'run', id: runId, version: runVersion(this.#store, runId) ?? null }, origin, summary);
+    }
+    // ---- executors --------------------------------------------------------------------------------
+    #onProviderStatus(data) {
+        const parsed = providerStatusSchema.safeParse(data);
+        if (!parsed.success)
+            return;
+        const id = executorId(parsed.data);
+        const available = isAvailable(parsed.data);
+        if (this.#executors.get(id) === available)
+            return;
+        this.#executors.set(id, available);
+        this.#append(available ? 'executor.available' : 'executor.unavailable', { type: 'executor', id, version: null }, this.#originOr('system'), available ? `executor ${id} is available` : `executor ${id} is unavailable (${describeUnavailable(parsed.data)})`);
+    }
+    // ---- writing ------------------------------------------------------------------------------------
+    #append(kind, subject, origin, summary) {
+        return this.#journal.append({
+            category: MCP_EVENT_KIND_CATEGORY[kind],
+            kind,
+            subject,
+            origin: origin.origin,
+            causedBy: origin.causedBy,
+            summary,
+        });
+    }
+    #guard(fn) {
+        try {
+            return fn();
+        }
+        catch (err) {
+            if (!this.#warned) {
+                this.#warned = true;
+                const message = err instanceof Error ? err.message : String(err);
+                this.#warn(`[xez] MCP event catalog could not record an event (${message}) — continuing without it`);
+            }
+            return undefined;
+        }
+    }
+}
+function executorId(row) {
+    return row.profileId ? `${row.provider}:${row.profileId}` : row.provider;
+}
+/** An executor can take work when it is connected and not switched off in Settings. */
+function isAvailable(row) {
+    return row.status === 'connected' && row.enabled !== false;
+}
+/** The coarse state only — never `hint`, which is prose from the CLI. */
+function describeUnavailable(row) {
+    if (row.enabled === false)
+        return 'disabled';
+    return row.status;
+}
+function questionSummary(count) {
+    return count === 1 ? 'the agent asked a question and is waiting for an answer' : `the agent asked ${count} questions and is waiting for an answer`;
+}
+function clip(text, max) {
+    return text.length <= max ? text : `${text.slice(0, max - 1)}…`;
+}
+//# sourceMappingURL=event-catalog.js.map

package/dist/mcp/event-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-catalog.js","sourceRoot":"","sources":["../../src/mcp/event-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,oBAAoB,GAOrB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAoE9C;;;;;;GAMG;AACH,MAAM,WAAW,GAAG,IAAI,iBAAiB,EAA2D,CAAC;AAErG,kGAAkG;AAClG,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;IACrC,OAAO,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,EAA8B,CAAC;AAE7D;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAI,OAA2B,EAAE,EAAW;IACzE,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;QACpG,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,GAAS,EAAE;QACrB,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;IACrB,CAAC,CAAC;IACF,IAAI,MAAS,CAAC;IACd,IAAI,CAAC;QACH,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,EAAE,CAAC;QACN,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,MAA4B,CAAC;IAC7C,oGAAoG;IACpG,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACzF,MAA+B,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,GAAG,EAAE,CAAC;IACR,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAyBD,iGAAiG;AACjG,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC,CAAC;AAElG,MAAM,cAAc,GAAG,GAAG,CAAC;AAa3B,SAAS,QAAQ,CAAC,GAAc,EAAE,cAAuB;IACvD,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACxF,KAAK,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,YAAY;IACd,QAAQ,CAAiB;IACzB,MAAM,CAAW;IACjB,KAAK,CAA4B;IACjC,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IACrC,UAAU,GAAG,IAAI,GAAG,EAAmB,CAAC;IACxC,YAAY,GAAsB,EAAE,CAAC;IAC9C,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAoB,OAA4B;QAC9C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,+FAA+F;IAC/F,MAAM,CAAC,MAAM,CAAC,OAA4B;QACxC,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE;YAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACrF,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,gBAAgB,IAAI,EAAE;YAAE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QAE5G,MAAM,KAAK,GAAG,CAAC,GAAc,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,CAAC,OAA2C,EAAE,EAAE,CAC9D,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE;YAClC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACvC,OAAO,CAAC,YAAY,CAAC,IAAI,CACvB,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,EACrC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,EACzC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAC9C,CAAC;QACF,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,OAAO,CAAC,YAAY,CAAC,IAAI,CACvB,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBACzC,IAAI,KAAK,KAAK,iBAAiB;oBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;YACzF,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,gGAAgG;IAChG,MAAM;QACJ,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,WAAW,EAAE,CAAC;QACrE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,KAA2D;QACvE,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CACtB,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EACvH,kCAAkC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CACvD,CAAC;IACJ,CAAC;IAED,oGAAoG;IACpG,eAAe,CAAC,KAA6E;QAC3F,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC9E,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CACtB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,EAC9G,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,aAAa,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAClF,CAAC;IACJ,CAAC;IAED,8FAA8F;IAC9F,kBAAkB,CAAC,KAA8C;QAC/D,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CACtB,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,EAClI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,uBAAuB,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CACjF,CAAC;IACJ,CAAC;IAED,gGAAgG;IAEhG,MAAM,CAAC,GAAc;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtC,4FAA4F;QAC5F,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC;QACnD,yEAAyE;QACzE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;QAEzF,2FAA2F;QAC3F,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM;gBAAE,SAAS;YACjF,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;gBACtC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EACtF,gBAAgB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,sFAAsF;QACtF,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI;YAAE,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE,mCAAmC,CAAC,CAAC;QAC7G,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACpC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,YAAY,CAAC,oBAAoB,EAAE,GAAG,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAC;iBAC7G,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,YAAY,CAAC,oBAAoB,EAAE,GAAG,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAC;QAC1H,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,GAAG,CAAC,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACxG,CAAC;QAED,IAAI,aAAa;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,SAAS,CAAC,GAAc,EAAE,MAAiB;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/F,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,MAAM;gBACT,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC;gBACpE,OAAO;YACT,KAAK,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;gBAC1E,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,iCAAiC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;gBACtI,OAAO;YACT,CAAC;YACD,KAAK,WAAW;gBACd,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,0BAA0B,CAAC,CAAC;gBAC9E,OAAO;YACT,KAAK,QAAQ;gBACX,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,sCAAsC,CAAC,CAAC;gBACxF,OAAO;YACT,KAAK,SAAS;gBACZ,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACxC,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;gBAC5F,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,2BAA2B,CAAC,CAAC;gBAC/E,CAAC;gBACD,OAAO;YACT;gBACE,sFAAsF;gBACtF,OAAO;QACX,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,KAAa,EAAE,KAAe;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1E,yFAAyF;YACzF,2DAA2D;YAC3D,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7F,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC;YAChC,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACvC,yFAAyF;YACzF,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;gBAAE,OAAO;YACtC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,CAAC,CAAC;;gBACrH,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,CAAC,CAAC;QACtG,CAAC;QACD,uFAAuF;IACzF,CAAC;IAED,YAAY,CAAC,IAAkB,EAAE,KAAa,EAAE,OAAe;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;YAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/E,CAAC;IAED;oFACgF;IAChF,iBAAiB,CAAC,KAAa,EAAE,QAA0B;QACzD,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO,OAAO,IAAI,MAAM,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACnE,CAAC;IAED,SAAS,CAAC,QAA0B;QAClC,OAAO,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjE,CAAC;IAED,UAAU,CAAC,IAAkB,EAAE,KAAa,EAAE,MAA0B,EAAE,OAAe;QACvF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACnH,CAAC;IAED,kGAAkG;IAElG,iBAAiB,CAAC,IAAa;QAC7B,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAC5B,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,SAAS;YAAE,OAAO;QAClD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAC7G,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EACxB,SAAS,CAAC,CAAC,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC,YAAY,EAAE,oBAAoB,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvH,CAAC;IAED,oGAAoG;IAEpG,OAAO,CACL,IAAkB,EAClB,OAA0E,EAC1E,MAA0B,EAC1B,OAAe;QAEf,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1B,QAAQ,EAAE,uBAAuB,CAAC,IAAI,CAAC;YACvC,IAAI;YACJ,OAAO;YACP,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAI,EAAW;QACnB,IAAI,CAAC;YACH,OAAO,EAAE,EAAE,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,IAAI,CAAC,KAAK,CAAC,sDAAsD,OAAO,2BAA2B,CAAC,CAAC;YACvG,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAED,SAAS,UAAU,CAAC,GAAmB;IACrC,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC3E,CAAC;AAED,uFAAuF;AACvF,SAAS,WAAW,CAAC,GAAmB;IACtC,OAAO,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC;AAC7D,CAAC;AAED,yEAAyE;AACzE,SAAS,mBAAmB,CAAC,GAAmB;IAC9C,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,UAAU,CAAC;IAC7C,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC,mBAAmB,KAAK,yCAAyC,CAAC;AACrJ,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,GAAW;IACrC,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;AAClE,CAAC"}