@qodeca/xezar 0.13.1 → 0.14.0

package/dist/mcp/bridge.js

@@ -0,0 +1,407 @@
+import { createConnection } from 'node:net';
+import { MCP_PROJECT_OCCUPIED_REASON } from '../contract/index.js';
+import { projectOccupiedError, sessionExpiredError } from '../workspace/project-owner.js';
+import { IPC_PROTOCOL_VERSION, IPC_REQUEST_TIMEOUT_MS, IPC_SESSION_OPEN_TIMEOUT_MS, LineFramer, encodeFrame, healthResultSchema, ipcResponseSchema, sessionOpenResultSchema, toolCallParamsSchema, toolResultSchema, } from './ipc.js';
+import { JSONRPC_ERRORS, SERVER_CAPABILITIES, incomingMessageSchema, initializeParamsSchema, negotiateProtocolVersion, } from './protocol.js';
+import { errorResult, textResult, toolListing } from './tool.js';
+/** Built into the bridge rather than the registry: it is how a client learns the service is down. */
+export const HEALTH_TOOL = {
+    name: 'health',
+    title: 'xezar health',
+    description: 'Report whether the xezar cockpit is running for the project this session was started in, and which project that is.',
+    inputSchema: { type: 'object', properties: {}, additionalProperties: false },
+    annotations: { readOnlyHint: true, idempotentHint: true, openWorldHint: false },
+};
+const INSTRUCTIONS = 'xezar controls coding-agent tasks for the one project this session was started in. ' +
+    'Call `health` to check that the xezar cockpit is running for it.';
+/** Serve MCP until `input` ends. Resolves then; the session closes and in-flight answers are dropped. */
+export function runBridge(opts) {
+    const inflight = new Set();
+    const session = new ServiceSession(opts);
+    let finished = false;
+    const write = (message) => {
+        if (!finished)
+            opts.output.write(encodeFrame(message));
+    };
+    const respond = (id, result) => write({ jsonrpc: '2.0', id, result });
+    const fail = (id, code, message) => write({ jsonrpc: '2.0', id, error: { code, message } });
+    const refuse = (id, error) => write({ jsonrpc: '2.0', id, error });
+    const framer = new LineFramer((line) => handle(line), () => fail(null, JSONRPC_ERRORS.invalidRequest, 'message too large'));
+    function handle(line) {
+        let json;
+        try {
+            json = JSON.parse(line);
+        }
+        catch {
+            fail(null, JSONRPC_ERRORS.parseError, 'parse error');
+            return;
+        }
+        const parsed = incomingMessageSchema.safeParse(json);
+        if (!parsed.success) {
+            // Batches were removed in 2025-06-18; neither supported revision has them.
+            fail(null, JSONRPC_ERRORS.invalidRequest, 'invalid request');
+            return;
+        }
+        const { id, method, params } = parsed.data;
+        // A notification (no id) or a response to us (no method): nothing to answer.
+        // `notifications/cancelled` lands here too — a call whose answer is already on
+        // its way is not unwound (D-05 § 3.1).
+        if (id === undefined || method === undefined)
+            return;
+        switch (method) {
+            case 'initialize': {
+                const init = initializeParamsSchema.safeParse(params);
+                if (!init.success) {
+                    fail(id, JSONRPC_ERRORS.invalidParams, 'initialize needs a protocolVersion');
+                    return;
+                }
+                // D-02.6: `initialize` is where a session acquires the project. Only a live competing
+                // owner turns it into an error; a service that is not running still gets a healthy
+                // handshake (N-07), and the first call tries again.
+                const handshake = () => respond(id, {
+                    protocolVersion: negotiateProtocolVersion(init.data.protocolVersion),
+                    capabilities: SERVER_CAPABILITIES,
+                    serverInfo: { name: 'xezar', title: 'xezar', version: opts.version },
+                    instructions: INSTRUCTIONS,
+                });
+                void session.initialize().then((refused) => (refused ? refuse(id, refused) : handshake()), 
+                // A failure to even look for the service is not a competing owner: the handshake stays
+                // healthy (N-07) and the first call tries again, rather than `initialize` never answering.
+                handshake);
+                return;
+            }
+            case 'ping':
+                respond(id, {});
+                return;
+            case 'tools/list':
+                respond(id, { tools: [HEALTH_TOOL, ...opts.tools.map(toolListing)] });
+                return;
+            case 'tools/call': {
+                const call = toolCallParamsSchema.safeParse(params);
+                if (!call.success) {
+                    fail(id, JSONRPC_ERRORS.invalidParams, 'tools/call needs a tool name');
+                    return;
+                }
+                const { name } = call.data;
+                if (name !== HEALTH_TOOL.name && !opts.tools.some((t) => t.name === name)) {
+                    fail(id, JSONRPC_ERRORS.invalidParams, `Unknown tool: ${name}`);
+                    return;
+                }
+                const abort = new AbortController();
+                inflight.add(abort);
+                void callTool(call.data, abort.signal)
+                    .then((answer) => {
+                    if (abort.signal.aborted)
+                        return;
+                    if ('error' in answer)
+                        refuse(id, answer.error);
+                    else
+                        respond(id, answer.result);
+                })
+                    .finally(() => inflight.delete(abort));
+                return;
+            }
+            default:
+                fail(id, JSONRPC_ERRORS.methodNotFound, `Method not found: ${method}`);
+        }
+    }
+    async function callTool(call, signal) {
+        const health = call.name === HEALTH_TOOL.name;
+        const outcome = await session.call(health ? 'health' : 'tools/call', health ? undefined : call, signal);
+        if (outcome.kind !== 'response')
+            return outcome.kind === 'error' ? { error: outcome.error } : { result: outcome.result };
+        const response = outcome.response;
+        if (!response.ok)
+            return { result: refused(response, opts.version) };
+        if (health) {
+            const h = healthResultSchema.safeParse(response.result);
+            if (!h.success)
+                return { result: errorResult('xezar answered health with an unexpected shape.') };
+            return {
+                result: textResult(`xezar ${h.data.xezarVersion} is running for project ${h.data.project.name} (${h.data.project.id}).`, {
+                    status: 'running',
+                    ...h.data,
+                }),
+            };
+        }
+        const result = toolResultSchema.safeParse(response.result);
+        return { result: result.success ? result.data : errorResult(`xezar answered ${call.name} with an unexpected shape.`) };
+    }
+    return new Promise((resolve) => {
+        const finish = () => {
+            if (finished)
+                return;
+            finished = true;
+            for (const abort of inflight)
+                abort.abort();
+            // The client went away: closing the connection is how the service learns the session ended.
+            session.close();
+            resolve();
+        };
+        opts.input.on('data', (chunk) => framer.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)));
+        opts.input.once('end', finish);
+        opts.input.once('close', finish);
+        // The client went away mid-write: there is nobody left to answer.
+        opts.output.on('error', finish);
+    });
+}
+class ServiceSession {
+    opts;
+    state = 'idle';
+    connection;
+    opening;
+    project;
+    closed = false;
+    constructor(opts) {
+        this.opts = opts;
+    }
+    /** Open the session for `initialize`. Answers the refusal to send, or nothing for a healthy handshake. */
+    async initialize() {
+        if (this.state === 'owner')
+            return undefined;
+        const opened = await this.open();
+        return opened.kind === 'occupied' ? opened.error : undefined;
+    }
+    async call(method, params, signal) {
+        const before = this.state;
+        if (before !== 'owner') {
+            const opened = await this.open();
+            if (opened.kind === 'unavailable')
+                return { kind: 'result', result: opened.result };
+            // The call was made under a session that does not own the project: it is answered as expired
+            // and never runs. A new session is already open (or refused) for the calls that follow.
+            if (before === 'lost' || before === 'refused')
+                return { kind: 'error', error: sessionExpiredError(this.projectId()) };
+            if (opened.kind === 'occupied')
+                return { kind: 'error', error: opened.error };
+        }
+        const connection = this.connection;
+        if (!connection)
+            return { kind: 'error', error: sessionExpiredError(this.projectId()) };
+        const outcome = await connection.request({ method, ...(params === undefined ? {} : { params }) }, this.opts.requestTimeoutMs ?? IPC_REQUEST_TIMEOUT_MS, signal);
+        if (outcome.kind !== 'response')
+            return { kind: 'result', result: unreachable(outcome, this.projectLabel(), this.opts.version) };
+        const response = outcome.response;
+        if (!response.ok && response.error.code === 'session-expired') {
+            // Fenced by the service. This session is over; the next call opens a new one.
+            this.drop('idle');
+            return { kind: 'error', error: response.rpcError ?? sessionExpiredError(this.projectId()) };
+        }
+        return { kind: 'response', response };
+    }
+    /** The client is gone. Closing the connection is what releases the project in the service. */
+    close() {
+        this.closed = true;
+        this.drop('idle');
+    }
+    open() {
+        this.opening ??= this.openOnce().finally(() => {
+            this.opening = undefined;
+        });
+        return this.opening;
+    }
+    async openOnce() {
+        this.dropConnection();
+        const target = await this.opts.resolveTarget();
+        if (target.kind === 'unavailable')
+            return { kind: 'unavailable', result: errorResult(target.message, { status: target.status }) };
+        if (this.closed)
+            return { kind: 'unavailable', result: errorResult('The MCP session ended before xezar answered.', { status: 'aborted' }) };
+        this.project = target.project;
+        const timeoutMs = Math.min(this.opts.requestTimeoutMs ?? IPC_REQUEST_TIMEOUT_MS, IPC_SESSION_OPEN_TIMEOUT_MS);
+        const started = Date.now();
+        const connected = await IpcConnection.connect(target.path, this.opts.version, timeoutMs, (connection) => this.onClosed(connection));
+        if (!(connected instanceof IpcConnection)) {
+            return { kind: 'unavailable', result: unreachable(connected, this.projectLabel(), this.opts.version) };
+        }
+        const answer = await connected.request({ method: 'session/open' }, Math.max(1, timeoutMs - (Date.now() - started)));
+        if (this.closed) {
+            connected.close();
+            return { kind: 'unavailable', result: errorResult('The MCP session ended before xezar answered.', { status: 'aborted' }) };
+        }
+        if (answer.kind !== 'response') {
+            connected.close();
+            return { kind: 'unavailable', result: unreachable(answer, this.projectLabel(), this.opts.version) };
+        }
+        const response = answer.response;
+        if (response.ok && sessionOpenResultSchema.safeParse(response.result).success) {
+            this.connection = connected;
+            this.state = 'owner';
+            return { kind: 'owner' };
+        }
+        connected.close();
+        if (!response.ok && response.error.code === 'project-occupied') {
+            this.state = 'refused';
+            const error = response.rpcError;
+            return {
+                kind: 'occupied',
+                error: error?.data.reason === MCP_PROJECT_OCCUPIED_REASON ? error : projectOccupiedError(target.project.id),
+            };
+        }
+        if (response.ok) {
+            return { kind: 'unavailable', result: errorResult('xezar answered session/open with an unexpected shape.', { status: 'version-mismatch' }) };
+        }
+        return { kind: 'unavailable', result: refused(response, this.opts.version) };
+    }
+    onClosed(connection) {
+        if (connection !== this.connection)
+            return;
+        this.connection = undefined;
+        if (this.state === 'owner')
+            this.state = 'lost';
+    }
+    drop(next) {
+        this.dropConnection();
+        this.state = next;
+    }
+    dropConnection() {
+        const connection = this.connection;
+        this.connection = undefined;
+        connection?.close();
+    }
+    projectId() {
+        return this.project?.id ?? 'unknown';
+    }
+    projectLabel() {
+        return this.project ?? { id: 'unknown', name: 'this project' };
+    }
+}
+// ---- the IPC connection ----------------------------------------------------------------------
+/**
+ * One kept connection, many requests. Answers are matched by id; every request settles exactly
+ * once and never later than its own timeout, and none of that closes the connection — only the
+ * service, the OS or `close()` do.
+ */
+class IpcConnection {
+    socket;
+    version;
+    pending = new Map();
+    nextId = 1;
+    ended = false;
+    constructor(socket, version) {
+        this.socket = socket;
+        this.version = version;
+    }
+    /** Connect, or answer why not. `onClose` fires once, when a connected socket closes for any reason. */
+    static connect(path, version, timeoutMs, onClose) {
+        return new Promise((resolve) => {
+            const socket = createConnection(path);
+            let settled = false;
+            const timer = setTimeout(() => {
+                if (settled)
+                    return;
+                settled = true;
+                socket.destroy();
+                resolve({ kind: 'timeout' });
+            }, timeoutMs);
+            socket.once('error', (err) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timer);
+                socket.destroy();
+                resolve({ kind: 'error', code: err.code });
+            });
+            socket.once('connect', () => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timer);
+                const connection = new IpcConnection(socket, version);
+                connection.attach(onClose);
+                resolve(connection);
+            });
+        });
+    }
+    request(body, timeoutMs, signal) {
+        if (this.ended)
+            return Promise.resolve({ kind: 'closed' });
+        const id = this.nextId++;
+        return new Promise((resolve) => {
+            const settle = (outcome) => {
+                if (!this.pending.delete(id))
+                    return;
+                clearTimeout(timer);
+                signal?.removeEventListener('abort', onAbort);
+                resolve(outcome);
+            };
+            const onAbort = () => settle({ kind: 'aborted' });
+            // A slow answer is a timeout for THIS call only; the service was not told to cancel anything.
+            const timer = setTimeout(() => settle({ kind: 'timeout' }), timeoutMs);
+            this.pending.set(id, settle);
+            signal?.addEventListener('abort', onAbort);
+            this.socket.write(encodeFrame({ v: IPC_PROTOCOL_VERSION, id, bridgeVersion: this.version, ...body }));
+        });
+    }
+    close() {
+        this.socket.destroy();
+    }
+    attach(onClose) {
+        const framer = new LineFramer((line) => this.receive(line), () => this.failAll({ kind: 'bad-response' }));
+        this.socket.on('data', (chunk) => framer.push(chunk));
+        this.socket.on('error', () => {
+            // Always followed by `close`, which settles everything.
+        });
+        this.socket.once('close', () => {
+            this.ended = true;
+            this.failAll({ kind: 'closed' });
+            onClose(this);
+        });
+    }
+    receive(line) {
+        let json;
+        try {
+            json = JSON.parse(line);
+        }
+        catch {
+            this.failAll({ kind: 'bad-response' });
+            return;
+        }
+        const parsed = ipcResponseSchema.safeParse(json);
+        // An answer that names no request cannot be matched to one, so every call in flight is told
+        // the service answered in a way this bridge does not understand. The session itself stays.
+        if (!parsed.success || parsed.data.id === null) {
+            this.failAll({ kind: 'bad-response' });
+            return;
+        }
+        this.pending.get(parsed.data.id)?.({ kind: 'response', response: parsed.data });
+    }
+    failAll(outcome) {
+        for (const settle of [...this.pending.values()])
+            settle(outcome);
+    }
+}
+// ---- readable failures -------------------------------------------------------------
+function unreachable(outcome, project, version) {
+    const label = `${project.name} (${project.id})`;
+    switch (outcome.kind) {
+        case 'error':
+            if (outcome.code === 'ENOENT' || outcome.code === 'ECONNREFUSED') {
+                return errorResult(`xezar is not running for project ${label}. Start the cockpit in the project's directory with \`xez\` (or \`npx @qodeca/xezar\`), then call this tool again.`, { status: 'not-running' });
+            }
+            if (outcome.code === 'EACCES' || outcome.code === 'EPERM') {
+                return errorResult(`xezar's socket for project ${label} refused this user (permission denied). The bridge must run as the same user as the cockpit.`, { status: 'refused' });
+            }
+            return errorResult(`Could not reach xezar for project ${label} (${outcome.code ?? 'unknown error'}).`, {
+                status: 'unreachable',
+            });
+        case 'timeout':
+            return errorResult(`xezar for project ${label} did not answer in time. It may be busy; the request was not cancelled in xezar. Call again to check.`, { status: 'timeout' });
+        case 'closed':
+            return errorResult(
+            // Not "call again": a write that passed the fence still finishes in the service, so a blind
+            // retry could do it twice (a fenced session's other calls in flight land here too).
+            `xezar for project ${label} closed the connection before answering, so whether this call ran is unknown — it may have stopped, or this session was fenced. Check the outcome before calling again.`, { status: 'unreachable' });
+        case 'bad-response':
+            return errorResult(`xezar for project ${label} answered in a format this bridge (xezar ${version}) does not understand. Run the bridge and the cockpit from the same xezar version.`, { status: 'version-mismatch' });
+        case 'aborted':
+            return errorResult('The MCP session ended before xezar answered.', { status: 'aborted' });
+    }
+}
+function refused(response, version) {
+    if (response.error.code === 'version-mismatch') {
+        return errorResult(`The running xezar (${response.serviceVersion ?? 'unknown version'}) and this bridge (xezar ${version}) speak different bridge protocols. Run both from the same xezar version.`, { status: 'version-mismatch' });
+    }
+    return errorResult(`xezar refused the request: ${response.error.message}`, { status: 'refused' });
+}
+//# sourceMappingURL=bridge.js.map

package/dist/mcp/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/mcp/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAe,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,2BAA2B,EAA6D,MAAM,wBAAwB,CAAC;AAChI,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAC1F,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,gBAAgB,GAGjB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,GAEzB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAgB,MAAM,WAAW,CAAC;AA0D/E,qGAAqG;AACrG,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,cAAc;IACrB,WAAW,EACT,qHAAqH;IACvH,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE;IAC5E,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;CACvE,CAAC;AAEX,MAAM,YAAY,GAChB,qFAAqF;IACrF,kEAAkE,CAAC;AAKrE,yGAAyG;AACzG,MAAM,UAAU,SAAS,CAAC,IAAmB;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAQ,EAAE;QACvC,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,EAAa,EAAE,MAAe,EAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAChG,MAAM,IAAI,GAAG,CAAC,EAAoB,EAAE,IAAY,EAAE,OAAe,EAAQ,EAAE,CACzE,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,CAAC,EAAa,EAAE,KAAqB,EAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAEpG,MAAM,MAAM,GAAG,IAAI,UAAU,CAC3B,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EACtB,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,cAAc,EAAE,mBAAmB,CAAC,CACrE,CAAC;IAEF,SAAS,MAAM,CAAC,IAAY;QAC1B,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,2EAA2E;YAC3E,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QACD,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAC3C,6EAA6E;QAC7E,+EAA+E;QAC/E,uCAAuC;QACvC,IAAI,EAAE,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACrD,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACtD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAC;oBAC7E,OAAO;gBACT,CAAC;gBACD,sFAAsF;gBACtF,mFAAmF;gBACnF,oDAAoD;gBACpD,MAAM,SAAS,GAAG,GAAS,EAAE,CAC3B,OAAO,CAAC,EAAE,EAAE;oBACV,eAAe,EAAE,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;oBACpE,YAAY,EAAE,mBAAmB;oBACjC,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;oBACpE,YAAY,EAAE,YAAY;iBAC3B,CAAC,CAAC;gBACL,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,CAC5B,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;gBAC1D,uFAAuF;gBACvF,2FAA2F;gBAC3F,SAAS,CACV,CAAC;gBACF,OAAO;YACT,CAAC;YACD,KAAK,MAAM;gBACT,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAChB,OAAO;YACT,KAAK,YAAY;gBACf,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtE,OAAO;YACT,KAAK,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACpD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAC;oBACvE,OAAO;gBACT,CAAC;gBACD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;gBAC3B,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;oBAC1E,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,aAAa,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;oBAChE,OAAO;gBACT,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;gBACpC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACpB,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;qBACnC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;oBACf,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;wBAAE,OAAO;oBACjC,IAAI,OAAO,IAAI,MAAM;wBAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;wBAC3C,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBAClC,CAAC,CAAC;qBACD,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YACD;gBACE,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,cAAc,EAAE,qBAAqB,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,IAA2D,EAAE,MAAmB;QACtG,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxG,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACzH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrE,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxD,IAAI,CAAC,CAAC,CAAC,OAAO;gBAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,iDAAiD,CAAC,EAAE,CAAC;YAClG,OAAO;gBACL,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,2BAA2B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE;oBACvH,MAAM,EAAE,SAAS;oBACjB,GAAG,CAAC,CAAC,IAAI;iBACV,CAAC;aACH,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,kBAAkB,IAAI,CAAC,IAAI,4BAA4B,CAAC,EAAE,CAAC;IACzH,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,MAAM,KAAK,IAAI,QAAQ;gBAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5C,4FAA4F;YAC5F,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjC,kEAAkE;QAClE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AA+BD,MAAM,cAAc;IAOW,IAAI;IANzB,KAAK,GAAiB,MAAM,CAAC;IAC7B,UAAU,CAA4B;IACtC,OAAO,CAAmC;IAC1C,OAAO,CAA2C;IAClD,MAAM,GAAG,KAAK,CAAC;IAEvB,YAA6B,IAA2E;oBAA3E,IAAI;IAA0E,CAAC;IAE5G,0GAA0G;IAC1G,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAA+B,EAAE,MAAe,EAAE,MAAmB;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1B,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACpF,6FAA6F;YAC7F,wFAAwF;YACxF,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;YACtH,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAChF,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;QACxF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CACtC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EACvD,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,sBAAsB,EACpD,MAAM,CACP,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACjI,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC9D,8EAA8E;YAC9E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;QAC9F,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACxC,CAAC;IAED,8FAA8F;IAC9F,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IAEO,IAAI;QACV,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAC5C,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAClI,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,8CAA8C,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC5I,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,sBAAsB,EAAE,2BAA2B,CAAC,CAAC;QAC9G,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QACpI,IAAI,CAAC,CAAC,SAAS,YAAY,aAAa,CAAC,EAAE,CAAC;YAC1C,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACzG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACpH,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,8CAA8C,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC7H,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,SAAS,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtG,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,QAAQ,CAAC,EAAE,IAAI,uBAAuB,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9E,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC/D,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YACvB,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC;YAChC,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,2BAA2B,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;aACzI,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,uDAAuD,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;QAC/I,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/E,CAAC;IAEO,QAAQ,CAAC,UAAyB;QACxC,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO;QAC3C,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO;YAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;IAClD,CAAC;IAEO,IAAI,CAAC,IAAkB;QAC7B,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAEO,cAAc;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,UAAU,EAAE,KAAK,EAAE,CAAC;IACtB,CAAC;IAEO,SAAS;QACf,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,SAAS,CAAC;IACvC,CAAC;IAEO,YAAY;QAClB,OAAO,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACjE,CAAC;CACF;AAED,iGAAiG;AAEjG;;;;GAIG;AACH,MAAM,aAAa;IAME,MAAM;IACN,OAAO;IANT,OAAO,GAAG,IAAI,GAAG,EAAyC,CAAC;IACpE,MAAM,GAAG,CAAC,CAAC;IACX,KAAK,GAAG,KAAK,CAAC;IAEtB,YACmB,MAAc,EACd,OAAe;sBADf,MAAM;uBACN,OAAO;IACvB,CAAC;IAEJ,uGAAuG;IACvG,MAAM,CAAC,OAAO,CACZ,IAAY,EACZ,OAAe,EACf,SAAiB,EACjB,OAA4C;QAE5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/B,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;gBAClD,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;gBAC1B,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,UAAU,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACtD,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC3B,OAAO,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,IAA0C,EAAE,SAAiB,EAAE,MAAoB;QACzF,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,CAAC,OAAmB,EAAQ,EAAE;gBAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAAE,OAAO;gBACrC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9C,OAAO,CAAC,OAAO,CAAC,CAAC;YACnB,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACxD,8FAA8F;YAC9F,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YACvE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,oBAAoB,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;QACxG,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAEO,MAAM,CAAC,OAA4C;QACzD,MAAM,MAAM,GAAG,IAAI,UAAU,CAC3B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAC5B,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAC7C,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC3B,wDAAwD;QAC1D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjD,4FAA4F;QAC5F,2FAA2F;QAC3F,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC;IAEO,OAAO,CAAC,OAAmB;QACjC,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;CACF;AAED,uFAAuF;AAEvF,SAAS,WAAW,CAClB,OAAkD,EAClD,OAAqC,EACrC,OAAe;IAEf,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,GAAG,CAAC;IAChD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,OAAO;YACV,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACjE,OAAO,WAAW,CAChB,oCAAoC,KAAK,oHAAoH,EAC7J,EAAE,MAAM,EAAE,aAAa,EAAE,CAC1B,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC1D,OAAO,WAAW,CAChB,8BAA8B,KAAK,8FAA8F,EACjI,EAAE,MAAM,EAAE,SAAS,EAAE,CACtB,CAAC;YACJ,CAAC;YACD,OAAO,WAAW,CAAC,qCAAqC,KAAK,KAAK,OAAO,CAAC,IAAI,IAAI,eAAe,IAAI,EAAE;gBACrG,MAAM,EAAE,aAAa;aACtB,CAAC,CAAC;QACL,KAAK,SAAS;YACZ,OAAO,WAAW,CAChB,qBAAqB,KAAK,uGAAuG,EACjI,EAAE,MAAM,EAAE,SAAS,EAAE,CACtB,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO,WAAW;YAChB,4FAA4F;YAC5F,oFAAoF;YACpF,qBAAqB,KAAK,yKAAyK,EACnM,EAAE,MAAM,EAAE,aAAa,EAAE,CAC1B,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO,WAAW,CAChB,qBAAqB,KAAK,4CAA4C,OAAO,oFAAoF,EACjK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAC/B,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO,WAAW,CAAC,8CAA8C,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,QAA6C,EAAE,OAAe;IAC7E,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAC/C,OAAO,WAAW,CAChB,sBAAsB,QAAQ,CAAC,cAAc,IAAI,iBAAiB,4BAA4B,OAAO,2EAA2E,EAChL,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAC/B,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC,8BAA8B,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AACpG,CAAC"}

package/dist/mcp/connection-file.d.ts

@@ -0,0 +1,49 @@
+import { z } from 'zod';
+/**
+ * D-04's connection descriptor (docs/features/mcp-server/mcp-d04-connection-file-decision.md):
+ * `<project root>/.local/xezar/mcp-connection.json`, written by the running service so nobody
+ * hand-authors connection data (F-14, A-01).
+ *
+ * The shape is D-04.2's with ONE deliberate omission: there is no `token`. D-04.5 put a token in
+ * the file only because the transport was still open; D-01 then chose a per-project Unix socket
+ * and made WHICH SOCKET the peer connected to the binding (D-01 § 6), so a token would be a
+ * secret nothing checks. F-15 is simplest to keep with no secret in the file at all. `endpoint`
+ * is D-01's socket, the one field the bridge could use; `project` and `service` are labels a
+ * human reads (D-04.5: never the identity the server trusts).
+ */
+/** Additive changes keep version 1 (N-08); an incompatible one bumps it. */
+export declare const MCP_CONNECTION_SCHEMA_VERSION = 1;
+export declare const MCP_CONNECTION_FILE = "mcp-connection.json";
+export declare const mcpConnectionDescriptorSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    project: z.ZodObject<{
+        id: z.ZodString;
+        root: z.ZodString;
+        dataDir: z.ZodString;
+    }, z.core.$strip>;
+    service: z.ZodObject<{
+        pid: z.ZodNumber;
+        startedAt: z.ZodString;
+    }, z.core.$strip>;
+    endpoint: z.ZodObject<{
+        socket: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type McpConnectionDescriptor = z.infer<typeof mcpConnectionDescriptorSchema>;
+export declare function mcpConnectionPath(dataDir: string): string;
+/**
+ * Write the descriptor atomically (tmp + rename) at mode 0600, overwriting whatever a previous
+ * service left: every field describes THIS process (D-04.3). The ignore file is ensured first, so
+ * there is no moment the descriptor is visible to `git add -A` (D-04.4). Throws on failure — the
+ * caller turns that into one warning (N-07).
+ */
+export declare function writeMcpConnectionFile(input: {
+    project: {
+        id: string;
+        root: string;
+    };
+    dataDir: string;
+    socket: string;
+    pid?: number;
+    startedAt?: Date;
+}): string;

package/dist/mcp/connection-file.js

@@ -0,0 +1,63 @@
+import { chmodSync, mkdirSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { ensureProjectDataIgnored } from '../project-data-paths.js';
+/**
+ * D-04's connection descriptor (docs/features/mcp-server/mcp-d04-connection-file-decision.md):
+ * `<project root>/.local/xezar/mcp-connection.json`, written by the running service so nobody
+ * hand-authors connection data (F-14, A-01).
+ *
+ * The shape is D-04.2's with ONE deliberate omission: there is no `token`. D-04.5 put a token in
+ * the file only because the transport was still open; D-01 then chose a per-project Unix socket
+ * and made WHICH SOCKET the peer connected to the binding (D-01 § 6), so a token would be a
+ * secret nothing checks. F-15 is simplest to keep with no secret in the file at all. `endpoint`
+ * is D-01's socket, the one field the bridge could use; `project` and `service` are labels a
+ * human reads (D-04.5: never the identity the server trusts).
+ */
+/** Additive changes keep version 1 (N-08); an incompatible one bumps it. */
+export const MCP_CONNECTION_SCHEMA_VERSION = 1;
+export const MCP_CONNECTION_FILE = 'mcp-connection.json';
+export const mcpConnectionDescriptorSchema = z.object({
+    schemaVersion: z.literal(MCP_CONNECTION_SCHEMA_VERSION),
+    project: z.object({ id: z.string(), root: z.string(), dataDir: z.string() }),
+    service: z.object({ pid: z.number().int().positive(), startedAt: z.string() }),
+    endpoint: z.object({ socket: z.string() }),
+});
+export function mcpConnectionPath(dataDir) {
+    return join(dataDir, MCP_CONNECTION_FILE);
+}
+/**
+ * Write the descriptor atomically (tmp + rename) at mode 0600, overwriting whatever a previous
+ * service left: every field describes THIS process (D-04.3). The ignore file is ensured first, so
+ * there is no moment the descriptor is visible to `git add -A` (D-04.4). Throws on failure — the
+ * caller turns that into one warning (N-07).
+ */
+export function writeMcpConnectionFile(input) {
+    const descriptor = {
+        schemaVersion: MCP_CONNECTION_SCHEMA_VERSION,
+        project: { id: input.project.id, root: input.project.root, dataDir: input.dataDir },
+        service: { pid: input.pid ?? process.pid, startedAt: (input.startedAt ?? new Date()).toISOString() },
+        endpoint: { socket: input.socket },
+    };
+    ensureProjectDataIgnored(input.dataDir);
+    mkdirSync(input.dataDir, { recursive: true });
+    const path = mcpConnectionPath(input.dataDir);
+    const tmp = `${path}.tmp`;
+    try {
+        writeFileSync(tmp, `${JSON.stringify(descriptor, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
+        // The mode is ignored when a stale tmp already existed; the rename carries the tmp's mode.
+        chmodSync(tmp, 0o600);
+        renameSync(tmp, path);
+    }
+    catch (err) {
+        try {
+            rmSync(tmp, { force: true });
+        }
+        catch {
+            /* the write's own error is the one worth reporting */
+        }
+        throw err;
+    }
+    return path;
+}
+//# sourceMappingURL=connection-file.js.map

package/dist/mcp/connection-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-file.js","sourceRoot":"","sources":["../../src/mcp/connection-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE;;;;;;;;;;;GAWG;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAEzD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC5E,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC9E,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAC3C,CAAC,CAAC;AAGH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAMtC;IACC,MAAM,UAAU,GAA4B;QAC1C,aAAa,EAAE,6BAA6B;QAC5C,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;QACnF,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE;QACpG,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;KACnC,CAAC;IACF,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClG,2FAA2F;QAC3F,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/mcp/echo-guard.d.ts

@@ -0,0 +1,94 @@
+import { type McpJournalRow } from '../contract/index.js';
+import type { EventJournal } from './event-journal.ts';
+/**
+ * The leader-side echo guard (#106, F-13): what stands between the project's event journal and a
+ * project-bound leader, so the leader sees human changes and new outcomes and never its own echoes.
+ *
+ * WHY IT EXISTS. A leader that reacts to every row would react to the row its OWN mutation
+ * produced, mutate again, and read that echo too — a loop that costs a model turn per lap and never
+ * ends. The compatibility report states the rule: do not react recursively to the leader's own
+ * operation acknowledgements; keep causal origin so real new outcomes stay actionable while echoes,
+ * duplicate delivery and presentation updates do not trigger loops.
+ *
+ * THE SOURCE. The same state source as the cockpit, after project filtering (requirements § 8):
+ * the per-project journal (#103), fed from the shared services an MCP write goes through. Never the
+ * workspace stream — `/api/v1/workspace/events` carries every project and the registry news, and an
+ * unfiltered workspace stream reaching MCP is exactly what § 8 prohibits (D-05 § 6.4).
+ *
+ * THE RULES, in the order `admit` applies them. A row is delivered only when it survives all six:
+ *   1. `invalid`         — it does not parse as a journal row (`mcpJournalRowSchema`).
+ *   2. `foreign-project` — it names a project other than the one this session is bound to (N-01).
+ *   3. `workspace-only`  — its `kind` is a workspace-only event name. `project-added`,
+ *      `project-removed` and `checkout-progress` name OTHER projects; N-01 forbids a project-bound
+ *      session ever receiving one, whatever category an emitter filed it under.
+ *   4. `presentation`    — its `kind` is presentation, a log line or a counter: D-05 § 6.3's
+ *      closed negative list plus the SSE stream's own `usage` and `ping`. The journal should never
+ *      hold one (issue #104's catalog excludes them); this is the leader's own floor under that.
+ *   5. `own-echo`        — `origin` is `leader` AND `causedBy` is an operation THIS guard issued.
+ *      Exactly D-05 § 6.3's rule. Never "I recognise the run": a task the leader started still
+ *      reports its completion (`origin: system`) and a human's edit to it (`origin: human`), and a
+ *      `leader` row caused by an operation this guard never issued — another session's — is news.
+ *   6. `duplicate`       — its `eventId` was already delivered. Delivery is at-least-once (D-05
+ *      § 6.6), and a replay overlapping the live feed must not wake the leader twice.
+ *
+ * ORDERING IS THE WHOLE TRICK. The service writes the echo while the operation is still in flight:
+ * `PATCH /runs/:id` updates the store synchronously inside the route, so the row can reach the
+ * journal before the tool result reaches the leader. An operation id recorded on ACKNOWLEDGEMENT
+ * would therefore miss its own echo. `issue` records the id first and only then dispatches, so no
+ * interleaving can deliver an echo of an operation the guard does not yet know about.
+ *
+ * WHAT IT IS NOT. Not the journal (#103), not the catalog emitter (#104), not replay/reconnect
+ * (#105) and not the event controller (#107): those produce, page and dispatch rows, and each of
+ * them hands rows to `admit`. It grants nothing, persists nothing and opens no file.
+ */
+/** The workspace-only names N-01 keeps away from a project-bound session: each names other projects. */
+export declare const WORKSPACE_ONLY_EVENT_NAMES: readonly ['project-added', 'project-removed', 'checkout-progress'];
+/**
+ * Presentation, log lines and counters (requirements § 6): D-05 § 6.3's decided-negative list, plus
+ * the two stream signals the brief names as the traffic that must not become leader events.
+ */
+export declare const PRESENTATION_EVENT_KINDS: readonly ['item.started', 'item.completed', 'tool-call', 'tool-result', 'text', 'token-usage', 'cost', 'usage', 'ping'];
+export type EchoDropReason = 'invalid' | 'foreign-project' | 'workspace-only' | 'presentation' | 'own-echo' | 'duplicate';
+export type EchoVerdict = {
+    deliver: true;
+    row: McpJournalRow;
+} | {
+    deliver: false;
+    reason: EchoDropReason;
+};
+export interface EchoGuardOptions {
+    /** The registry slug of the bound project, from the trusted binding — never from a tool argument. */
+    projectId: string;
+}
+export declare class EchoGuard {
+    #private;
+    readonly projectId: string;
+    constructor(options: EchoGuardOptions);
+    /**
+     * Record `operationId` as this leader's own, THEN run `dispatch`. The only way to issue an
+     * operation through the guard, so the id is always known before its echo can exist.
+     */
+    issue<T>(operationId: string, dispatch: () => T | Promise<T>): Promise<T>;
+    /** Whether `operationId` is one this guard issued. */
+    isOwn(operationId: string): boolean;
+    /** Decide one row. Pure apart from remembering what it delivered; never throws. */
+    admit(candidate: unknown): EchoVerdict;
+    /**
+     * Forget which rows were delivered — for a journal that was recreated (`cursor_too_old` after a
+     * new epoch restarts `journalSeq`, and therefore `eventId`, at 1). The operations this leader
+     * issued are kept: an echo of one is still an echo after the journal changed.
+     */
+    forgetDelivered(): void;
+}
+/**
+ * Attach a guarded leader feed to the bound project's journal. `deliver` sees only admitted rows;
+ * `onDrop`, when given, sees every refusal (for tests and diagnostics — never for the leader).
+ * Returns the unsubscribe, which the caller must keep: a feed nobody detaches is a listener the
+ * journal holds for ever.
+ */
+export declare function attachLeaderFeed(options: {
+    journal: Pick<EventJournal, 'projectId' | 'subscribe'>;
+    guard: EchoGuard;
+    deliver: (row: McpJournalRow) => void;
+    onDrop?: (reason: EchoDropReason, row: McpJournalRow) => void;
+}): () => void;