@qodeca/xezar 0.13.1 → 0.14.0

package/dist/mcp/event-controller.js

@@ -0,0 +1,596 @@
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { z } from 'zod';
+import { OWNER_ACQUIRE_ATTEMPTS, OWNER_BACKOFF_CAP_MS, projectOccupiedError, sessionExpiredError, } from '../workspace/project-owner.js';
+import { McpJournalCursorError } from './event-journal.js';
+/**
+ * The non-model event controller (#107): it follows ONE project's event journal (#103) on behalf
+ * of the logical MCP session that owns the project (#99), and hands significant events to a
+ * client-specific reaction adapter (#108–#110). It never starts a model turn of its own.
+ *
+ * WHAT IT CONSUMES, AND DOES NOT DECIDE. The event identity, order, replay and acknowledgement
+ * model are D-05 (`docs/features/mcp-server/mcp-d05-async-event-contract-decision.md` § 6); the
+ * numbers are D-09 (`mcp-d09-limits-retention-packaging-decision.md` § 3). Every constant below
+ * names the one it reuses.
+ *
+ * - **Source.** The project journal only (`EventJournal`), never the workspace stream — requirements
+ *   § 8 forbids an unfiltered workspace stream reaching MCP, and the journal already holds exactly
+ *   E-01–E-06 for exactly one project. The journal is also the QUEUE: undelivered rows are the
+ *   journal between this controller's position and its head, so the queue is durable, gapless and
+ *   bounded by B-19 retention, and no event lives only in this object's memory.
+ * - **Coalescing.** D-05 N3 decided *no coalescing window*: rows are never merged, delayed or
+ *   dropped. What coalesces is DISPATCHES: at most one is in flight, and every row that arrived
+ *   before it starts rides in it, up to one journal page (B-20, 100 rows; B-01, 40 000 bytes).
+ *   So a burst of N rows appended in one tick reaches the adapter as `ceil(N / 100)` dispatches,
+ *   each row intact and in `journalSeq` order, and rows that arrive while a dispatch is in flight
+ *   go out together in the next one.
+ * WHOSE FACTS ARE WHOSE. This controller serves one SESSION, and its cursors belong to the project's
+ * journal. Whether the leader is reachable is a fact about the LEADER, so it is not kept here: the
+ * adapter records it (`LeaderDelivery`), and it therefore survives a session change and is never
+ * inherited by a leader that has just been attached (QA on #311, round five, both directions).
+ *
+ * - **Delivery is not reaction (F-20).** `deliver` hands rows to the client application and is
+ *   non-model. Whether a model turn then starts is the adapter's own, client-specific decision, and
+ *   it reports that separately through `recordReaction`. The three D-05 § 6.6 cursors are kept
+ *   apart: `deliveredSeq` (this controller, on a resolved `deliver`), `ackedSeq` (the leader,
+ *   through an explicit tool call — `ack`) and `reactedSeq` (the adapter, when a turn carrying the
+ *   rows really started). `reactedSeq` lagging `deliveredSeq` is a normal state, not a fault.
+ * - **Non-model traffic only (N-06).** The heartbeat, a transport retry and an acknowledgement
+ *   never call anything that can start a turn: the heartbeat calls the adapter's optional
+ *   `heartbeat`, a retry re-sends the SAME undelivered rows, and `ack` touches only a number.
+ *   Rows already delivered in this session are never dispatched again.
+ * - **At-least-once (D-05 § 6.6).** A new session resumes after the leader's last ACK, not after
+ *   the last delivery: a row handed to a previous client that the leader never acknowledged is
+ *   outstanding, and F-21 says reconnect delivers it. In production the leader acknowledges through
+ *   the pull tool (`leader_events ack`), so that record is the ACK read here (`acknowledged`, #332):
+ *   one source of truth, not two cursors that can disagree. The leader deduplicates on `eventId`. The
+ *   echo guard (drop a `leader` row whose `causedBy` is the adapter's own operation) is the
+ *   adapter's, per D-05 § 6.3: rows reach it whole.
+ *
+ * ONE LOGICAL OWNER. This controller and the MCP bridge are one client, not two (compatibility
+ * report, "Recommended architecture"; F-18). So the controller never acquires: it is handed the
+ * project's `ProjectOwnership` and the session key the transport acquired with, starts only while
+ * that session is the live owner, and re-checks it before every dispatch and at every heartbeat.
+ * It never calls `acquire` or `release` — the lease is the transport's, released on connection
+ * close (D-02.4) — so it can neither create a second claim nor end the session it serves. A
+ * second controller for the same project is refused: a competing session with project-occupied,
+ * and a second controller for the SAME session too, because two dispatchers over one journal are
+ * the "two independent streams delivering duplicates" risk of requirements § 12.
+ *
+ * INERT WITHOUT A CLIENT (N-07). With no adapter the controller subscribes to nothing, starts no
+ * timer, reads no ownership and writes no file. The journal keeps accumulating rows exactly as it
+ * does with no controller at all.
+ *
+ * ## Every state, and who fires each exit
+ *
+ * No exit below is a human action, and no state holds a queued row without an on-by-default path
+ * to the adapter.
+ *
+ * | State | Exit | Who fires it | If nobody fires it |
+ * | --- | --- | --- | --- |
+ * | inert | — (terminal for this object) | — | correct: no client, nothing is owed; rows stay in the journal |
+ * | idle | → dispatching | a journal append (subscription) or the heartbeat tick | the heartbeat tick (B-17, 30 s) re-reads the journal, so a missed wakeup costs at most one interval |
+ * | idle | → disconnected | a failed heartbeat probe | stays idle — the correct resting state |
+ * | dispatching | → idle | `deliver` resolving | the attempt is aborted after one heartbeat interval and counts as a transport drop |
+ * | dispatching | → recovering | `deliver` rejecting, or the attempt timing out | — (the timeout above always fires) |
+ * | recovering | → idle / → disconnected | the round itself: at most 5 attempts, full-jitter backoff ≤ 200 ms | — (bounded) |
+ * | disconnected | → dispatching | the heartbeat tick (one new bounded round per interval) or the adapter's `wake` on reconnect | the heartbeat timer is on by default, so rows are retried every 30 s for as long as the session owns the project |
+ * | any active state | → ended | `close` (the transport, on connection close), or losing ownership, found at the next dispatch or heartbeat | lease expiry (30 s, B-14) makes the owner check fail at the next heartbeat |
+ * | ended | — (terminal) | — | rows stay in the journal and the persisted cursors; the next session's controller resumes after the last ack |
+ *
+ * What reaches a terminal state BECAUSE of this controller: nothing but this object. It holds no
+ * run, queue slot, lease or worktree, and ending it touches none.
+ *
+ * ## Where its state lives
+ *
+ * `<dataDir>/mcp/event-controller.json`, beside the journal: `{ v, projectId, epoch, deliveredSeq,
+ * ackedSeq, reactedSeq, floorSeq }`, written by atomic tmp+rename after every change (D-05 N4:
+ * persisted per delivery, not batched). Written, never required. With a leader record (production)
+ * the file keeps only real history — what was pushed and what reacted — and WHERE pushing starts
+ * comes from the leader's record. Standalone, no file means a first session that starts at the
+ * journal head (nothing was ever owed to a leader that did not exist; it reads current state, F-21),
+ * and an unreadable file starts at the head WITH a stated gap. Either way no reported cursor is ever
+ * set to a position nothing reached (QA on #311): a start is a floor, not a delivery. An unwritable
+ * directory keeps the cursors in memory with one warning.
+ */
+/** Heartbeat and liveness period. B-17 / D-05 N6, reusing the hub's `HEARTBEAT_MS` (`server/ws.ts`). */
+export const EVENT_CONTROLLER_HEARTBEAT_MS = 30_000;
+/**
+ * Delivery attempts per recovery round, and the cap on the doubling full-jitter backoff between them.
+ * D-01, D-05 and D-09 fix no delivery-retry numbers (B-16 is the bridge's own "no retry" on a dead
+ * socket, which this is not), so the bounded-recovery shape is the one D-02 measured and D-09 adopted
+ * as B-15 for the same kind of local contention, rather than a new one.
+ */
+export const EVENT_DELIVERY_ATTEMPTS = OWNER_ACQUIRE_ATTEMPTS;
+export const EVENT_DELIVERY_BACKOFF_CAP_MS = OWNER_BACKOFF_CAP_MS;
+/** The doubling start `project-owner.ts` uses (25, 50, 100, 200 ms). */
+const BACKOFF_BASE_MS = 25;
+const savedSchema = z.object({
+    v: z.literal(1),
+    projectId: z.string(),
+    epoch: z.string(),
+    deliveredSeq: z.number().int().nonnegative(),
+    ackedSeq: z.number().int().nonnegative(),
+    reactedSeq: z.number().int().nonnegative(),
+    /** Where pushing resumes. Absent in files written before #332's fix: the ack stood in for it. */
+    floorSeq: z.number().int().nonnegative().optional(),
+});
+/** Journal files that have a live controller in this process. One dispatcher per journal. */
+const liveControllers = new Set();
+export class EventController {
+    projectId;
+    #journal;
+    #ownership;
+    #sessionKey;
+    #adapter;
+    #leaderRecord;
+    #statePath;
+    #heartbeatMs;
+    #random;
+    #sleep;
+    #warn;
+    #closed = new AbortController();
+    #state;
+    /** Read strictly after this cursor next; `undefined` reads from the oldest retained row. */
+    #position;
+    /** The newest row really handed to the client, in this or an earlier session of this epoch. */
+    #delivered = 0;
+    /** An explicit acknowledgement through `ack()` — only when there is no leader record. */
+    #acked = 0;
+    /** The newest row a model turn was really seen to carry. */
+    #reacted = 0;
+    /**
+     * Rows at or below this are not owed to this session, so they are never pushed. It is WHERE PUSHING
+     * STARTS, not something that happened, so no status field ever reports it (#332, QA on #311).
+     */
+    #floor = 0;
+    /** The newest row this session has handed to `deliver`, delivered or still in flight. */
+    #handedOut = 0;
+    #recovery;
+    #busy = false;
+    /** A wakeup arrived while busy; whoever clears `#busy` re-schedules, so no row is stranded. */
+    #again = false;
+    #scheduled = false;
+    #unsubscribe;
+    #timer;
+    #warnedWrite = false;
+    #warnedDelivery = false;
+    #warnedFault = false;
+    constructor(opts, state) {
+        this.projectId = opts.journal.projectId;
+        this.#journal = opts.journal;
+        this.#ownership = opts.ownership;
+        this.#sessionKey = opts.sessionKey;
+        this.#adapter = opts.adapter;
+        this.#leaderRecord = opts.leaderRecord;
+        this.#statePath = join(dirname(opts.journal.rowsPath), 'event-controller.json');
+        this.#heartbeatMs = opts.heartbeatMs ?? EVENT_CONTROLLER_HEARTBEAT_MS;
+        this.#random = opts.random ?? Math.random;
+        this.#sleep = opts.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+        this.#warn = opts.warn ?? ((message) => console.warn(message));
+        this.#state = state;
+    }
+    /**
+     * Start the controller for the session `sessionKey`, which must already own the project through
+     * the transport's own acquisition. Throws only on a caller bug (journal and owner slot of two
+     * different projects); every runtime condition is an answer.
+     */
+    static start(opts) {
+        if (opts.journal.projectId !== opts.ownership.projectId) {
+            throw new Error('event controller: the journal and the owner slot belong to different projects');
+        }
+        if (opts.adapter === undefined)
+            return { outcome: 'inert', controller: new EventController(opts, 'inert') };
+        const projectId = opts.journal.projectId;
+        if (liveControllers.has(opts.journal.rowsPath))
+            return { outcome: 'refused', error: projectOccupiedError(projectId) };
+        if (opts.ownership.sessionToken(opts.sessionKey) === undefined) {
+            const error = opts.ownership.state() === 'owned' ? projectOccupiedError(projectId) : sessionExpiredError(projectId);
+            return { outcome: 'refused', error };
+        }
+        liveControllers.add(opts.journal.rowsPath);
+        const controller = new EventController(opts, 'idle');
+        controller.#resume();
+        controller.#unsubscribe = opts.journal.subscribe(() => controller.#schedule());
+        controller.#timer = setInterval(() => void controller.#tick().catch((err) => controller.#fault(err)), controller.#heartbeatMs);
+        controller.#timer.unref?.();
+        controller.#schedule();
+        return { outcome: 'started', controller };
+    }
+    get state() {
+        return this.#state;
+    }
+    status() {
+        return {
+            state: this.#state,
+            deliveredSeq: this.#delivered,
+            // Only an explicit acknowledgement, as its owner records it now (#332).
+            ackedSeq: this.#ackedNow(),
+            reactedSeq: this.#reacted,
+            latestSeq: this.#journal.latestSeq,
+        };
+    }
+    /**
+     * The leader's acknowledgement (D-05 § 6.6): monotonic and idempotent. At or below the current
+     * ack it is a successful no-op, never a rewind; past the journal head it changes nothing. It
+     * calls no adapter, so it can never cost a model turn.
+     */
+    ack(journalSeq) {
+        if (!this.#active())
+            return { status: 'inactive', seq: this.#acked };
+        assertSeq(journalSeq);
+        if (journalSeq <= this.#acked)
+            return { status: 'unchanged', seq: this.#acked };
+        if (journalSeq > this.#journal.latestSeq)
+            return { status: 'ahead', seq: this.#acked };
+        this.#acked = journalSeq;
+        this.#floor = Math.max(this.#floor, journalSeq);
+        this.#persist();
+        return { status: 'advanced', seq: this.#acked };
+    }
+    /**
+     * The adapter's report that a model turn carrying rows up to `journalSeq` really started — the
+     * reaction half of F-20, recorded apart from delivery. Monotonic; never past a row the adapter was
+     * handed. A turn may start before `deliver` has resolved, so a row still in flight counts as handed.
+     */
+    recordReaction(journalSeq) {
+        if (!this.#active())
+            return { status: 'inactive', seq: this.#reacted };
+        assertSeq(journalSeq);
+        if (journalSeq <= this.#reacted)
+            return { status: 'unchanged', seq: this.#reacted };
+        if (journalSeq > Math.max(this.#delivered, this.#handedOut))
+            return { status: 'ahead', seq: this.#reacted };
+        this.#reacted = journalSeq;
+        this.#persist();
+        return { status: 'advanced', seq: this.#reacted };
+    }
+    /** The adapter's transport came back: start a recovery round now instead of at the next tick. */
+    wake() {
+        if (this.#state === 'disconnected')
+            this.#state = 'idle';
+        this.#schedule();
+    }
+    /**
+     * Confirmed end of the session's connection — fired by the transport where it releases the lease.
+     * Ends this controller only: the lease, the journal and every run are untouched.
+     */
+    close() {
+        this.#end();
+    }
+    #active() {
+        return this.#state !== 'inert' && this.#state !== 'ended';
+    }
+    #end() {
+        if (!this.#active())
+            return;
+        this.#state = 'ended';
+        this.#closed.abort();
+        if (this.#timer)
+            clearInterval(this.#timer);
+        this.#timer = undefined;
+        this.#unsubscribe?.();
+        this.#unsubscribe = undefined;
+        liveControllers.delete(this.#journal.rowsPath);
+    }
+    /** Ownership is xezar's to enforce, so it is re-read, never remembered. Losing it ends us. */
+    #stillOwner() {
+        if (!this.#active())
+            return false;
+        if (this.#ownership.sessionToken(this.#sessionKey) !== undefined)
+            return true;
+        this.#end();
+        return false;
+    }
+    #schedule() {
+        if (this.#scheduled || !this.#active())
+            return;
+        this.#scheduled = true;
+        // A microtask, not a timer: rows appended in the same tick share a dispatch, and nothing waits.
+        queueMicrotask(() => {
+            this.#scheduled = false;
+            void this.#drain().catch((err) => this.#fault(err));
+        });
+    }
+    /** A bug inside a background step is logged once, never thrown into the cockpit (N-07). The next
+     *  tick tries again, because every step re-reads the journal and the owner from scratch. */
+    #fault(err) {
+        if (this.#warnedFault)
+            return;
+        this.#warnedFault = true;
+        this.#warn(`[xez] MCP event controller for project ${this.projectId} hit an internal error: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    #release() {
+        this.#busy = false;
+        if (this.#again) {
+            this.#again = false;
+            this.#schedule();
+        }
+    }
+    async #drain() {
+        if (this.#busy) {
+            this.#again = true;
+            return;
+        }
+        // A disconnected transport waits for the tick or `wake`, so a burst cannot fire rounds back to back.
+        if (this.#state !== 'idle')
+            return;
+        this.#busy = true;
+        try {
+            for (;;) {
+                if (!this.#stillOwner())
+                    return;
+                // The leader may have acknowledged through the pull tool since the last dispatch (#332).
+                this.#syncFloor();
+                const next = this.#next();
+                if (next === undefined)
+                    return;
+                if (next.lastSeq !== undefined)
+                    this.#handedOut = Math.max(this.#handedOut, next.lastSeq);
+                const delivered = await this.#deliverBounded(next.dispatch);
+                if (!this.#active())
+                    return;
+                if (delivered === false) {
+                    this.#state = 'disconnected';
+                    if (!this.#warnedDelivery) {
+                        this.#warnedDelivery = true;
+                        this.#warn(`[xez] MCP event delivery for project ${this.projectId} failed ${EVENT_DELIVERY_ATTEMPTS} times — retrying every ${this.#heartbeatMs / 1000}s while the session owns the project`);
+                    }
+                    return;
+                }
+                this.#warnedDelivery = false;
+                this.#state = 'idle';
+                this.#position = next.nextCursor;
+                this.#recovery = undefined;
+                if (next.lastSeq !== undefined) {
+                    // Only rows REALLY handed over count as delivered; a receipt says which (the leader's own
+                    // echoes are settled but never delivered). A redelivery never lowers the count.
+                    const handed = delivered.receipt === undefined ? next.lastSeq : delivered.receipt.handedThrough;
+                    if (handed !== null)
+                        this.#delivered = Math.max(this.#delivered, handed);
+                }
+                this.#persist();
+            }
+        }
+        finally {
+            this.#release();
+        }
+    }
+    /** The next dispatch, read from the journal itself. `undefined` when nothing is outstanding. */
+    #next() {
+        for (;;) {
+            let page;
+            try {
+                page = this.#journal.read(this.#position === undefined ? {} : { cursor: this.#position });
+            }
+            catch (err) {
+                if (!(err instanceof McpJournalCursorError))
+                    throw err;
+                // Our own cursor refused: state the gap and start again from the oldest retained row.
+                this.#position = undefined;
+                this.#recovery = this.#gap();
+                continue;
+            }
+            if (page.status === 'cursor_too_old') {
+                this.#position = page.resumeCursor;
+                this.#recovery = this.#gap();
+                continue;
+            }
+            // Rows at or below the floor are not owed (the leader acknowledged them, or they predate it).
+            const events = page.events.filter((row) => row.journalSeq > this.#floor);
+            if (events.length === 0 && page.events.length > 0) {
+                this.#position = page.nextCursor;
+                continue;
+            }
+            if (events.length === 0 && this.#recovery === undefined)
+                return undefined;
+            const dispatch = {
+                projectId: this.projectId,
+                events,
+                ...(this.#recovery === undefined ? {} : { recovery: this.#recovery }),
+            };
+            const lastSeq = events.at(-1)?.journalSeq;
+            return { dispatch, nextCursor: page.nextCursor, ...(lastSeq === undefined ? {} : { lastSeq }) };
+        }
+    }
+    /**
+     * One bounded recovery round over the SAME rows. No attempt can start a turn on its own. Every
+     * attempt's outcome is a fact about the LEADER, and the adapter records it (`LeaderDelivery`).
+     */
+    async #deliverBounded(dispatch) {
+        const adapter = this.#adapter;
+        for (let attempt = 0; attempt < EVENT_DELIVERY_ATTEMPTS; attempt++) {
+            if (!this.#active())
+                return false;
+            this.#state = attempt === 0 ? 'dispatching' : 'recovering';
+            const outcome = await this.#attempt((signal) => adapter.deliver(dispatch, signal));
+            if (outcome.ok)
+                return { receipt: outcome.value === undefined ? undefined : outcome.value };
+            if (attempt < EVENT_DELIVERY_ATTEMPTS - 1) {
+                await this.#sleep(this.#random() * Math.min(EVENT_DELIVERY_BACKOFF_CAP_MS, BACKOFF_BASE_MS * 2 ** attempt));
+            }
+        }
+        return false;
+    }
+    /**
+     * One call into the adapter, bounded by one heartbeat interval: an attempt that has not settled in
+     * a whole liveness period is a dead transport, and it must not hold the queue behind it.
+     */
+    async #attempt(call) {
+        const attempt = new AbortController();
+        const abort = () => attempt.abort();
+        this.#closed.signal.addEventListener('abort', abort, { once: true });
+        const timer = setTimeout(abort, this.#heartbeatMs);
+        timer.unref?.();
+        const gaveUp = new Promise((_, reject) => {
+            attempt.signal.addEventListener('abort', () => reject(new Error('aborted')), { once: true });
+        });
+        const work = Promise.resolve().then(() => call(attempt.signal));
+        // Whichever loses the race settles later with nobody listening; neither may surface as unhandled.
+        work.catch(() => { });
+        gaveUp.catch(() => { });
+        try {
+            return { ok: true, value: await Promise.race([work, gaveUp]) };
+        }
+        catch {
+            return { ok: false };
+        }
+        finally {
+            clearTimeout(timer);
+            this.#closed.signal.removeEventListener('abort', abort);
+        }
+    }
+    /** The heartbeat: owner check, a recovery round when disconnected, then a non-model liveness probe. */
+    async #tick() {
+        if (!this.#stillOwner() || this.#busy)
+            return;
+        if (this.#state === 'disconnected')
+            this.#state = 'idle';
+        // Re-reading the journal here is also the backstop for a wakeup that never arrived.
+        await this.#drain();
+        const probe = this.#adapter?.heartbeat;
+        if (probe === undefined || this.#state !== 'idle' || this.#busy)
+            return;
+        this.#busy = true;
+        const alive = (await this.#attempt((signal) => probe.call(this.#adapter, signal))).ok;
+        if (this.#active() && !alive)
+            this.#state = 'disconnected';
+        this.#release();
+    }
+    /**
+     * Where a starting controller reads from, and what it reports. The two are kept apart, because
+     * conflating them is how a first session once reported rows as delivered, acknowledged and
+     * reacted to that never reached anyone (QA on #311, D-05 § 6.6):
+     * - REPORTED cursors come only from things that happened: `deliveredSeq` and `reactedSeq` from
+     *   this file's record of real pushes and turns in the SAME journal epoch (0 otherwise), and
+     *   `ackedSeq` from an explicit acknowledgement.
+     * - The FLOOR is where pushing resumes: with a leader record, after what the leader is owed
+     *   (`owedAfter`); standalone (#107), after the file's last ack, or the head for a first session.
+     */
+    #resume() {
+        const journal = this.#journal;
+        const saved = this.#load();
+        const own = typeof saved === 'object' && saved.epoch === journal.epoch ? saved : undefined;
+        this.#delivered = own ? Math.min(own.deliveredSeq, journal.latestSeq) : 0;
+        this.#reacted = own ? Math.min(own.reactedSeq, this.#delivered) : 0;
+        this.#acked = own && this.#leaderRecord === undefined ? Math.min(own.ackedSeq, journal.latestSeq) : 0;
+        const firstRetained = journal.oldestSeq ?? journal.latestSeq + 1;
+        this.#position = undefined;
+        let gap;
+        if (this.#leaderRecord !== undefined) {
+            // One acknowledgement (#332): owed is what the leader's own record says, never this file.
+            const owed = this.#owedAfter();
+            this.#floor = owed.sameEpoch ? owed.seq : 0;
+            gap = !owed.sameEpoch || this.#floor < firstRetained - 1;
+        }
+        else if (saved === 'absent' || saved === 'unreadable') {
+            // Standalone first session: nothing was owed to a leader that did not exist; it reads current state (F-21).
+            this.#floor = journal.latestSeq;
+            this.#position = journal.headCursor();
+            gap = saved === 'unreadable';
+        }
+        else {
+            this.#floor = own ? Math.max(own.ackedSeq, own.floorSeq ?? own.ackedSeq) : 0;
+            gap = own === undefined || this.#floor > journal.latestSeq || this.#floor < firstRetained - 1;
+        }
+        if (gap) {
+            // Rows this session was owed are gone (journal recreated, or evicted unacknowledged): say so, and
+            // resume at the oldest row that still exists — or, for an unreadable file, at the head.
+            if (this.#position === undefined)
+                this.#floor = Math.min(Math.max(this.#floor, 0), firstRetained - 1);
+            this.#recovery = this.#gap();
+        }
+        this.#persist();
+    }
+    /** The leader record's owed-after position, clamped to this journal; nothing readable owes everything. */
+    #owedAfter() {
+        try {
+            const owed = this.#leaderRecord.owedAfter();
+            const seq = Number.isSafeInteger(owed.seq) && owed.seq > 0 ? Math.min(owed.seq, this.#journal.latestSeq) : 0;
+            return { seq, sameEpoch: owed.sameEpoch };
+        }
+        catch {
+            return { seq: 0, sameEpoch: true }; // an unreadable record owes everything retained: at-least-once, never a skipped row
+        }
+    }
+    /** The explicit acknowledgement as its owner records it now; 0 when there is none. */
+    #ackedNow() {
+        if (this.#leaderRecord === undefined)
+            return this.#acked;
+        try {
+            const seq = this.#leaderRecord.acknowledged();
+            return Number.isSafeInteger(seq) && seq > 0 ? Math.min(seq, this.#journal.latestSeq) : 0;
+        }
+        catch {
+            return 0;
+        }
+    }
+    /** Raise the floor to what the leader's record says it is owed after. Monotonic; reports nothing. */
+    #syncFloor() {
+        if (this.#leaderRecord === undefined)
+            return;
+        const owed = this.#owedAfter();
+        if (!owed.sameEpoch || owed.seq <= this.#floor)
+            return;
+        this.#floor = owed.seq;
+        this.#persist();
+    }
+    #gap() {
+        return {
+            required: 'current-state',
+            oldestSeq: this.#journal.oldestSeq,
+            latestSeq: this.#journal.latestSeq,
+            message: 'Some events this session was owed are no longer retained. Read the current state before acting on these events.',
+        };
+    }
+    #load() {
+        let raw;
+        try {
+            raw = readFileSync(this.#statePath, 'utf8');
+        }
+        catch (err) {
+            if (err.code === 'ENOENT')
+                return 'absent';
+            raw = '';
+        }
+        try {
+            const parsed = savedSchema.safeParse(JSON.parse(raw));
+            if (parsed.success && parsed.data.projectId === this.projectId)
+                return parsed.data;
+        }
+        catch {
+            /* reported below */
+        }
+        this.#warn(`[xez] MCP event controller state for project ${this.projectId} is unreadable — its cursors restart at 0${this.#leaderRecord ? '' : ', pushing from the journal head with a stated gap'}`);
+        return 'unreadable';
+    }
+    #persist() {
+        const body = {
+            v: 1,
+            projectId: this.projectId,
+            epoch: this.#journal.epoch,
+            deliveredSeq: this.#delivered,
+            ackedSeq: this.#acked,
+            reactedSeq: this.#reacted,
+            floorSeq: this.#floor,
+        };
+        const tmp = `${this.#statePath}.tmp`;
+        try {
+            mkdirSync(dirname(this.#statePath), { recursive: true, mode: 0o700 });
+            writeFileSync(tmp, `${JSON.stringify(body)}\n`, { encoding: 'utf8', mode: 0o600 });
+            renameSync(tmp, this.#statePath);
+        }
+        catch (err) {
+            if (this.#warnedWrite)
+                return;
+            this.#warnedWrite = true;
+            const message = err instanceof Error ? err.message : String(err);
+            this.#warn(`[xez] MCP event controller state for project ${this.projectId} cannot be written (${message}) — cursors are kept in memory only`);
+        }
+    }
+}
+function assertSeq(seq) {
+    if (!Number.isSafeInteger(seq) || seq < 0)
+        throw new RangeError('a journal sequence number is a non-negative integer');
+}
+//# sourceMappingURL=event-controller.js.map

package/dist/mcp/event-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-controller.js","sourceRoot":"","sources":["../../src/mcp/event-controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,GAEpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAqB,MAAM,oBAAoB,CAAC;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyFG;AAEH,wGAAwG;AACxG,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAAsB,CAAC;AAC9D,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAC;AAClE,wEAAwE;AACxE,MAAM,eAAe,GAAG,EAAE,CAAC;AAoG3B,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACf,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,iGAAiG;IACjG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAGH,6FAA6F;AAC7F,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;AAE1C,MAAM,OAAO,eAAe;IACjB,SAAS,CAAS;IAClB,QAAQ,CAAoC;IAC5C,UAAU,CAAsC;IAChD,WAAW,CAAS;IACpB,QAAQ,CAA8B;IACtC,aAAa,CAA2B;IACxC,UAAU,CAAS;IACnB,YAAY,CAAS;IACrB,OAAO,CAAe;IACtB,MAAM,CAAgC;IACtC,KAAK,CAA4B;IACjC,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IAEzC,MAAM,CAAuB;IAC7B,4FAA4F;IAC5F,SAAS,CAAqB;IAC9B,+FAA+F;IAC/F,UAAU,GAAG,CAAC,CAAC;IACf,yFAAyF;IACzF,MAAM,GAAG,CAAC,CAAC;IACX,4DAA4D;IAC5D,QAAQ,GAAG,CAAC,CAAC;IACb;;;OAGG;IACH,MAAM,GAAG,CAAC,CAAC;IACX,yFAAyF;IACzF,UAAU,GAAG,CAAC,CAAC;IACf,SAAS,CAA4B;IACrC,KAAK,GAAG,KAAK,CAAC;IACd,+FAA+F;IAC/F,MAAM,GAAG,KAAK,CAAC;IACf,UAAU,GAAG,KAAK,CAAC;IACnB,YAAY,CAA2B;IACvC,MAAM,CAA6C;IACnD,YAAY,GAAG,KAAK,CAAC;IACrB,eAAe,GAAG,KAAK,CAAC;IACxB,YAAY,GAAG,KAAK,CAAC;IAErB,YAAoB,IAA4B,EAAE,KAAuB;QACvE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,uBAAuB,CAAC,CAAC;QAChF,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,WAAW,IAAI,6BAA6B,CAAC;QACtE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAK,CAAC,IAA4B;QACvC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;QAE5G,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACzC,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;QACtH,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;YACpH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACvC,CAAC;QAED,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrD,UAAU,CAAC,OAAO,EAAE,CAAC;QACrB,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC;QAC/E,UAAU,CAAC,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;QACxI,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QAC5B,UAAU,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IAC5C,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,MAAM;QACJ,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,YAAY,EAAE,IAAI,CAAC,UAAU;YAC7B,wEAAwE;YACxE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE;YAC1B,UAAU,EAAE,IAAI,CAAC,QAAQ;YACzB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;SACnC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,UAAkB;QACpB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACrE,SAAS,CAAC,UAAU,CAAC,CAAC;QACtB,IAAI,UAAU,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAChF,IAAI,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACvF,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACH,cAAc,CAAC,UAAkB;QAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvE,SAAS,CAAC,UAAU,CAAC,CAAC;QACtB,IAAI,UAAU,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpF,IAAI,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5G,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC;QAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IACpD,CAAC;IAED,iGAAiG;IACjG,IAAI;QACF,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACzD,IAAI,CAAC,SAAS,EAAE,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC;IAC5D,CAAC;IAED,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO;QAC5B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,MAAM;YAAE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,8FAA8F;IAC9F,WAAW;QACT,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC9E,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO;QAC/C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,gGAAgG;QAChG,cAAc,CAAC,GAAG,EAAE;YAClB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YACxB,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC;IAED;gGAC4F;IAC5F,MAAM,CAAC,GAAY;QACjB,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,0CAA0C,IAAI,CAAC,SAAS,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpJ,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,OAAO;QACT,CAAC;QACD,qGAAqG;QACrG,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO;QACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;oBAAE,OAAO;gBAChC,yFAAyF;gBACzF,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC1B,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAO;gBAC/B,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;oBAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC5D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;oBAAE,OAAO;gBAC5B,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;oBACxB,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC;oBAC7B,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;wBAC1B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;wBAC5B,IAAI,CAAC,KAAK,CACR,wCAAwC,IAAI,CAAC,SAAS,WAAW,uBAAuB,2BAA2B,IAAI,CAAC,YAAY,GAAG,IAAI,sCAAsC,CAClL,CAAC;oBACJ,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;gBAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;gBACrB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;gBACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;gBAC3B,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC/B,0FAA0F;oBAC1F,gFAAgF;oBAChF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC;oBAChG,IAAI,MAAM,KAAK,IAAI;wBAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC3E,CAAC;gBACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,gGAAgG;IAChG,KAAK;QACH,SAAS,CAAC;YACR,IAAI,IAAI,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC5F,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,GAAG,YAAY,qBAAqB,CAAC;oBAAE,MAAM,GAAG,CAAC;gBACvD,sFAAsF;gBACtF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;gBAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBACrC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC;gBACnC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,8FAA8F;YAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;gBACjC,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC1E,MAAM,QAAQ,GAAkB;gBAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM;gBACN,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;aACtE,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;YAC1C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAClG,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,QAAuB;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAS,CAAC;QAC/B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,uBAAuB,EAAE,OAAO,EAAE,EAAE,CAAC;YACnE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO,KAAK,CAAC;YAClC,IAAI,CAAC,MAAM,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC;YAC3D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YACnF,IAAI,OAAO,CAAC,EAAE;gBAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC5F,IAAI,OAAO,GAAG,uBAAuB,GAAG,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,6BAA6B,EAAE,eAAe,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;YAC9G,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAI,IAAyC;QACzD,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAC9C,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,kGAAkG;QAClG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,uGAAuG;IACvG,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACzD,oFAAoF;QACpF,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACxE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC;QAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED;;;;;;;;;OASG;IACH,OAAO;QACL,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3F,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtG,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,GAAY,CAAC;QACjB,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrC,0FAA0F;YAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa,GAAG,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YACxD,4GAA4G;YAC5G,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;YAChC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;YACtC,GAAG,GAAG,KAAK,KAAK,YAAY,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7E,GAAG,GAAG,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa,GAAG,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,GAAG,EAAE,CAAC;YACR,kGAAkG;YAClG,wFAAwF;YACxF,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;gBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC;YACtG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED,0GAA0G;IAC1G,UAAU;QACR,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,aAAc,CAAC,SAAS,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7G,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,oFAAoF;QAC1H,CAAC;IACH,CAAC;IAED,sFAAsF;IACtF,SAAS;QACP,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;YAC9C,OAAO,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,qGAAqG;IACrG,UAAU;QACR,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;YAAE,OAAO;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED,IAAI;QACF,OAAO;YACL,QAAQ,EAAE,eAAe;YACzB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,OAAO,EAAE,iHAAiH;SAC3H,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YACtE,GAAG,GAAG,EAAE,CAAC;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,gDAAgD,IAAI,CAAC,SAAS,4CAA4C,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,mDAAmD,EAAE,CAAC,CAAC;QACtM,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,QAAQ;QACN,MAAM,IAAI,GAAU;YAClB,CAAC,EAAE,CAAC;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK;YAC1B,YAAY,EAAE,IAAI,CAAC,UAAU;YAC7B,QAAQ,EAAE,IAAI,CAAC,MAAM;YACrB,UAAU,EAAE,IAAI,CAAC,QAAQ;YACzB,QAAQ,EAAE,IAAI,CAAC,MAAM;SACtB,CAAC;QACF,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,MAAM,CAAC;QACrC,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtE,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnF,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,YAAY;gBAAE,OAAO;YAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK,CAAC,gDAAgD,IAAI,CAAC,SAAS,uBAAuB,OAAO,qCAAqC,CAAC,CAAC;QAChJ,CAAC;IACH,CAAC;CACF;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,qDAAqD,CAAC,CAAC;AACzH,CAAC"}