@qodeca/xezar 0.13.1 → 0.14.0

package/dist/mcp/index.js

@@ -0,0 +1,386 @@
+import { randomUUID } from 'node:crypto';
+import { realpath } from 'node:fs/promises';
+import { basename, resolve } from 'node:path';
+import { operationIdSchema, } from '../contract/index.js';
+import { collectSecretValues } from '../core/secret-redaction.js';
+import { projectDataDir } from '../project-data-paths.js';
+import { loadWorkspaceConfig } from '../workspace/config.js';
+import { ProjectOwnership } from '../workspace/project-owner.js';
+import { AuditTrail } from './audit-trail.js';
+import { runBridge } from './bridge.js';
+import { writeMcpConnectionFile } from './connection-file.js';
+import { EchoGuard } from './echo-guard.js';
+import { EventCatalog, withEventOrigin } from './event-catalog.js';
+import { EventJournal } from './event-journal.js';
+import { mcpSocketLocation } from './ipc.js';
+import { LeaderDelivery } from './leader-delivery.js';
+import { OperationReceiptStore, runByKeyReconciler } from './operation-receipts.js';
+import { registerProjectCatalog } from './project-catalogs.js';
+import { registerProjectLeader } from './project-leaders.js';
+import { LeaderCursors, runStateReader } from './reconnect.js';
+import { listenMcpSocket } from './service.js';
+import { staleRejectionIn } from './stale-write.js';
+import { errorResult, textResult } from './tool.js';
+import { tools } from './tools/index.js';
+/**
+ * The MCP module's public surface (#86, D-01). `packages/xezar/src/index.ts` imports
+ * it LAZILY from both sides, so an ordinary `serve` that never meets an MCP client
+ * pays nothing for it and cannot be broken by it (N-07).
+ */
+export { runBridge, HEALTH_TOOL } from './bridge.js';
+export { listenMcpSocket } from './service.js';
+export { mcpSocketLocation, IPC_PROTOCOL_VERSION } from './ipc.js';
+export { SUPPORTED_PROTOCOL_VERSIONS, SERVER_CAPABILITIES, negotiateProtocolVersion } from './protocol.js';
+export { defineTool, textResult, errorResult } from './tool.js';
+/**
+ * Service side: compose the MCP service for a registered project and open its socket (#243).
+ * Throws a one-line error when the socket cannot open; the cockpit turns that into one warning
+ * and keeps booting (N-07). Everything composed here is released by the handle's `close()`, and
+ * by the throw itself when the socket fails — nothing outlives either.
+ *
+ * The composition lives HERE, once, because the stdio bridge (`runMcpCommand`) executes nothing:
+ * it forwards every call to this socket, so both doors get exactly this behaviour.
+ */
+export async function startMcpService(opts) {
+    const project = (await loadWorkspaceConfig()).projects.find((p) => p.id === opts.projectId);
+    if (!project)
+        throw new Error(`project ${opts.projectId} is not in the workspace registry`);
+    const providerBaseline = await opts.providerBaseline?.().catch(() => undefined);
+    const dataDir = opts.store?.dataDir ?? projectDataDir(project.root);
+    const warn = opts.warn ?? ((message) => console.warn(message));
+    const parts = composeDoor({
+        projectId: project.id,
+        dataDir,
+        store: opts.store,
+        workspaceEvents: opts.workspaceEvents,
+        providerBaseline,
+        env: opts.env ?? process.env,
+        warn,
+    });
+    // Built here rather than by the socket, because push delivery reads it too (#309). It writes
+    // nothing until a session opens.
+    const ownership = opts.ownership ?? new ProjectOwnership({ dataDir, projectId: project.id });
+    // Push delivery (#309): every owner session gets an event controller, on by default. It needs the
+    // journal; without one there is nothing to deliver, and that was already one warning above.
+    const delivery = parts.journal
+        ? new LeaderDelivery({
+            projectId: project.id,
+            projectRoot: project.root,
+            journal: parts.journal,
+            ownership,
+            guard: parts.guard,
+            // One acknowledgement (#332): the leader's pull record is what push resumes by, filters by and reports.
+            ...(parts.cursors ? { leaderRecord: parts.cursors } : {}),
+            warn,
+            ...(opts.leader?.heartbeatMs === undefined ? {} : { heartbeatMs: opts.leader.heartbeatMs }),
+        })
+        : undefined;
+    const unregisterLeader = delivery ? registerProjectLeader(project.id, delivery) : undefined;
+    // Controllers and any leader first, while the journal they read is still open.
+    const closeDelivery = () => {
+        unregisterLeader?.();
+        delivery?.close();
+    };
+    try {
+        const socket = await listenMcpSocket({
+            project: { id: project.id, name: projectName(project), root: project.root },
+            version: opts.version,
+            tools,
+            ...(opts.env ? { env: opts.env } : {}),
+            ...(opts.platform ? { platform: opts.platform } : {}),
+            context: {
+                ...(opts.service ? { service: opts.service } : {}),
+                ...(parts.leaderEvents ? { leaderEvents: parts.leaderEvents } : {}),
+            },
+            door: parts.door,
+            // The owner claims live beside the store the cockpit writes (D-02.8).
+            dataDir,
+            ownership,
+            ...(delivery ? { sessions: { opened: (key) => delivery.sessionOpened(key), closed: (key) => delivery.sessionClosed(key) } } : {}),
+        });
+        // D-04: written once the socket it names really listens, so the file never points at nothing.
+        // A failure is one warning and an MCP the client can still reach by the registry (N-07).
+        try {
+            writeMcpConnectionFile({ project: { id: project.id, root: project.root }, dataDir, socket: socket.path });
+        }
+        catch (err) {
+            warn(`[xez] MCP connection file not written (${err instanceof Error ? err.message : String(err)}) — MCP tools keep working without it`);
+        }
+        return {
+            path: socket.path,
+            close() {
+                // The socket first: no call may start while its parts are going away.
+                socket.close();
+                closeDelivery();
+                parts.close();
+            },
+        };
+    }
+    catch (err) {
+        closeDelivery();
+        // The socket never opened, so nothing else will dispose the owner slot it would have enforced.
+        if (!opts.ownership)
+            ownership.dispose();
+        parts.close();
+        throw err;
+    }
+}
+/**
+ * The parts that act on every MCP call, and the door that applies them. Each part is optional in
+ * the zero-config sense: one that cannot open is ONE warning and a smaller MCP, never a failed
+ * start — the tools keep working, exactly as they did before any part existed.
+ *
+ * - the project's event journal (#103), opened with this host's real secret list (F-15);
+ * - the E-01–E-06 catalog (#104), deriving rows from the SAME store and workspace bus the cockpit
+ *   drives (N-02); every MCP mutation runs inside `withEventOrigin`, so a change it causes is
+ *   the leader's, with the operation that caused it;
+ * - operation receipts (#101) for every call that carries an `operationId`;
+ * - the echo guard (#106): the operation is recorded as this leader's own BEFORE it runs;
+ * - the audit trail (#102), stamped `mcp` because this is the MCP door (D-06 § 10.4 rule 1).
+ *
+ * Read-only tools pass straight through: a read has no effect to deduplicate, attribute or audit.
+ *
+ * Two more parts face outward rather than wrapping a call:
+ * - the catalog is registered as the project's E-05 reporter (#252), so the cockpit's own config,
+ *   workflow and agent-config write routes can report a human change to it;
+ * - the leader's persisted cursors (#105) and the `leader_events` port over them (#251), handed to
+ *   the tools as context — the leader's pull read of its journal on reconnect.
+ */
+function composeDoor(input) {
+    const { projectId, dataDir, store, workspaceEvents, providerBaseline, warn } = input;
+    const closers = [];
+    const attempt = (what, open) => {
+        try {
+            return open();
+        }
+        catch (err) {
+            warn(`[xez] MCP ${what} unavailable (${err instanceof Error ? err.message : String(err)}) — MCP tools keep working without it`);
+            return undefined;
+        }
+    };
+    const secretValues = collectSecretValues(input.env);
+    const journal = attempt('event journal', () => EventJournal.open({ dataDir, projectId, secretValues, warn }));
+    if (journal)
+        closers.push(() => journal.close());
+    // Pushed after the journal, so it detaches first: no row can reach a closed journal.
+    const catalog = journal && store
+        ? attempt('event catalog', () => EventCatalog.attach({
+            journal,
+            store,
+            ...(workspaceEvents ? { workspaceEvents } : {}),
+            ...(providerBaseline ? { providerBaseline } : {}),
+            warn,
+        }))
+        : undefined;
+    if (catalog) {
+        closers.push(() => catalog.detach());
+        // Pushed after the catalog, so the routes stop reaching it before it detaches.
+        closers.push(registerProjectCatalog(projectId, catalog));
+    }
+    const cursors = journal && store ? attempt('leader cursors', () => LeaderCursors.open({ dataDir, projectId, journal, warn })) : undefined;
+    const leaderEvents = journal && store && cursors ? { journal, cursors, readState: runStateReader(store, journal), secretValues } : undefined;
+    const receipts = attempt('operation receipts', () => OperationReceiptStore.open(dataDir, {
+        ...(store
+            ? {
+                reconcilers: { 'run-by-key': runByKeyReconciler(store) },
+                isResultLive: (ref) => ref.kind === 'run' && store.getRun(ref.id) !== undefined,
+            }
+            : {}),
+    }));
+    if (receipts) {
+        // Background, never awaited (D-06 § 9.3 rule 1): until it settles a receipt reads `unverified`.
+        void receipts.reconcilePending().catch(() => undefined);
+        closers.push(() => receipts.close());
+    }
+    const guard = attempt('echo guard', () => new EchoGuard({ projectId }));
+    const audit = attempt('audit trail', () => new AuditTrail({ projectId, dataDir }, { warn }).channel('mcp'));
+    const door = async ({ tool, args }, invoke) => {
+        if (tool.annotations?.readOnlyHint === true)
+            return invoke();
+        const operationId = operationIdOf(args);
+        const action = actionId(tool.name, args.action);
+        const target = targetOf(args);
+        // The origin is the door's, never the client's (D-05 § 6.3): every mutation through here is the
+        // leader's. Since #264 every MUTATING action of every tool carries a client `operationId`
+        // (D-06 § 5.2), so the mint below is what covers the read actions a mutating tool also has
+        // (`organise_work list_queue`, `handoff_git repo`, `leader_events read`, the `project_config`
+        // reads and refusals): they still need an origin for the catalog and the echo guard, and they
+        // deliberately reach no receipt, because only a client key may create one.
+        const causedBy = operationId ?? `mcp-door.${randomUUID()}`;
+        const marked = () => withEventOrigin({ origin: 'leader', causedBy, ...(target ? { runId: target.id } : {}) }, invoke);
+        const issued = guard ? () => guard.issue(causedBy, marked) : marked;
+        const op = {
+            action,
+            payload: args,
+            ...(operationId === undefined ? {} : { operationId }),
+            ...(target ? { resource: target } : {}),
+            // The version the leader's decision was based on (#250); the trail keeps it only in `rev1` shape.
+            ...(typeof args.expectedVersion === 'string' ? { expectedVersion: args.expectedVersion } : {}),
+        };
+        let result;
+        try {
+            result =
+                operationId !== undefined && receipts
+                    ? await idempotent(receipts, { projectId, operationId, action, args, toolName: tool.name, issued, warn })
+                    : await issued();
+        }
+        catch (err) {
+            audit?.record(op, { outcome: 'unverified', errorCode: 'effect_failed' });
+            throw err;
+        }
+        // An error result may come from a refusal or from a failure after the effect started; the door
+        // cannot tell which, so it never claims `rejected` (nothing happened) on the tool's behalf. The
+        // one exception is the stale-version rejection (#250): the ROUTE refused it before any effect
+        // and says so (`applied: false`), so recording it as `ok` would put a write that never happened
+        // into the trail (D-06 § 4.4 rule 6).
+        const resource = resourceOf(result);
+        const stale = staleRejectionOf(result);
+        audit?.record(op, stale
+            ? { outcome: 'rejected', errorCode: 'stale_version', resource: stale.resource }
+            : result.isError
+                ? { outcome: 'unverified', errorCode: 'tool_error' }
+                : { outcome: 'ok', ...(resource ? { resource } : {}) });
+        return result;
+    };
+    let closed = false;
+    return {
+        door,
+        leaderEvents,
+        journal,
+        guard,
+        cursors,
+        close() {
+            if (closed)
+                return;
+            closed = true;
+            for (const close of closers.splice(0).reverse()) {
+                try {
+                    close();
+                }
+                catch (err) {
+                    warn(`[xez] MCP shutdown step failed: ${err instanceof Error ? err.message : String(err)}`);
+                }
+            }
+        },
+    };
+}
+/**
+ * Run one call under its operation key (D-06 § 6). The call that runs the tool answers with the
+ * tool's own result, unchanged; every other answer — a replay, a duplicate still in flight, an
+ * unverified crash leftover, a key reused for different work — is the receipt layer's own shape.
+ */
+async function idempotent(receipts, call) {
+    let fresh;
+    const answer = await receipts.execute({
+        projectId: call.projectId,
+        operationId: call.operationId,
+        action: call.action,
+        payload: call.args,
+        reconcile: { kind: 'none' },
+        effect: async () => {
+            try {
+                fresh = await call.issued();
+            }
+            catch (err) {
+                // The receipt layer answers `unverified` and swallows the throw, so the log line the
+                // service would have written for it is written here (the text never reaches the client).
+                call.warn(`[xez] MCP tool ${call.toolName} failed: ${err instanceof Error ? err.message : String(err)}`);
+                throw err;
+            }
+            if (fresh.isError)
+                return { outcome: 'rejected', errorCode: 'tool refused' };
+            const ref = resourceOf(fresh);
+            return { outcome: 'ok', resultRef: ref ? { kind: ref.kind, id: ref.id } : { kind: 'operation', id: call.operationId } };
+        },
+    });
+    if (fresh !== undefined)
+        return fresh;
+    return answerResult(answer);
+}
+function answerResult(answer) {
+    const body = answer;
+    const refused = 'error' in answer || answer.status === 'rejected';
+    return refused ? errorResult(JSON.stringify(body), body) : textResult(JSON.stringify(body), body);
+}
+function operationIdOf(args) {
+    const parsed = operationIdSchema.safeParse(args.operationId);
+    return parsed.success ? parsed.data : undefined;
+}
+/** `task_create` + `start_from_inbox` → `taskCreate.startFromInbox`: the audit's dotted action id. */
+function actionId(toolName, action) {
+    const camel = (name) => name.replace(/_([a-z0-9])/g, (_, c) => c.toUpperCase());
+    return `${camel(toolName)}.${typeof action === 'string' ? camel(action) : 'call'}`;
+}
+/** The task a call names, when it names one — the tools spell it `runId` or `taskId`. */
+function targetOf(args) {
+    const id = typeof args.runId === 'string' ? args.runId : typeof args.taskId === 'string' ? args.taskId : undefined;
+    return id === undefined ? undefined : { kind: 'run', id };
+}
+/** The stale-version rejection a tool relayed, if that is what its (non-error) answer is. */
+function staleRejectionOf(result) {
+    if (result.isError)
+        return undefined;
+    const block = result.content[0];
+    if (!block || block.type !== 'text')
+        return undefined;
+    try {
+        return staleRejectionIn(JSON.parse(block.text));
+    }
+    catch {
+        return undefined;
+    }
+}
+/** The resource a result names: a tool's `subject`, or a receipt's `resultRef`. */
+function resourceOf(result) {
+    const content = result.structuredContent;
+    const subject = content?.subject;
+    if (typeof subject?.type === 'string' && typeof subject.id === 'string')
+        return { kind: subject.type, id: subject.id };
+    const ref = content?.resultRef;
+    if (typeof ref?.kind === 'string' && typeof ref.id === 'string')
+        return { kind: ref.kind, id: ref.id };
+    return undefined;
+}
+/**
+ * `xez mcp` — spawned by an MCP client with the session's project as its working
+ * directory (D-01 § 4). Serves MCP on stdio until the client closes stdin.
+ */
+export async function runMcpCommand(opts) {
+    // stdout carries JSON-RPC and nothing else: one stray log line from any module
+    // would corrupt the client's stream. Diagnostics go to stderr, which clients log.
+    const toStderr = (...args) => console.error(...args);
+    console.log = toStderr;
+    console.info = toStderr;
+    console.debug = toStderr;
+    await runBridge({
+        input: process.stdin,
+        output: process.stdout,
+        version: opts.version,
+        tools,
+        resolveTarget: () => resolveMcpTarget(opts.repoRoot),
+    });
+}
+/**
+ * The cwd only FINDS the socket; it never becomes the authority (D-01 § 4). A read of
+ * the registry: the bridge registers nothing, so a directory xezar has never served
+ * finds no project and answers with how to fix that.
+ */
+export async function resolveMcpTarget(repoRoot) {
+    const root = await realpath(repoRoot).catch(() => resolve(repoRoot));
+    const project = (await loadWorkspaceConfig()).projects.find((p) => p.root === root);
+    if (!project) {
+        return {
+            kind: 'unavailable',
+            status: 'not-registered',
+            message: 'This directory is not a xezar project yet. Start the cockpit here once with `xez` (or `npx @qodeca/xezar`) so it is registered, then call this tool again.',
+        };
+    }
+    const location = mcpSocketLocation(project);
+    if (location.kind === 'unavailable')
+        return { kind: 'unavailable', status: 'unsupported', message: location.reason };
+    return { kind: 'socket', path: location.path, project: { id: project.id, name: projectName(project) } };
+}
+function projectName(project) {
+    return project.name || basename(project.root);
+}
+//# sourceMappingURL=index.js.map

package/dist/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EACL,iBAAiB,GAKlB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,UAAU,EAAqB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAsB,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,eAAe,EAA6B,MAAM,oBAAoB,CAAC;AAC9F,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAsB,MAAM,yBAAyB,CAAC;AACxG,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE/D,OAAO,EAAE,eAAe,EAAuC,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAsB,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAGzC;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAA0C,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,eAAe,EAA+D,MAAM,cAAc,CAAC;AAC5G,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AACnE,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAC3G,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAyD,MAAM,WAAW,CAAC;AAuBvH;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAA4B;IAChE,MAAM,OAAO,GAAG,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5F,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,SAAS,mCAAmC,CAAC,CAAC;IAC5F,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,WAAW,CAAC;QACxB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,OAAO;QACP,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,gBAAgB;QAChB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAC5B,IAAI;KACL,CAAC,CAAC;IACH,6FAA6F;IAC7F,iCAAiC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7F,kGAAkG;IAClG,4FAA4F;IAC5F,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO;QAC5B,CAAC,CAAC,IAAI,cAAc,CAAC;YACjB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS;YACT,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,wGAAwG;YACxG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,IAAI;YACJ,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;SAC5F,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,gBAAgB,GAAG,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,+EAA+E;IAC/E,MAAM,aAAa,GAAG,GAAS,EAAE;QAC/B,gBAAgB,EAAE,EAAE,CAAC;QACrB,QAAQ,EAAE,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;YAC3E,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK;YACL,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE;gBACP,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE;YACD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,sEAAsE;YACtE,OAAO;YACP,SAAS;YACT,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClJ,CAAC,CAAC;QACH,8FAA8F;QAC9F,yFAAyF;QACzF,IAAI,CAAC;YACH,sBAAsB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CACF,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,uCAAuC,CAClI,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK;gBACH,sEAAsE;gBACtE,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,aAAa,EAAE,CAAC;gBAChB,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,aAAa,EAAE,CAAC;QAChB,+FAA+F;QAC/F,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QACzC,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAYD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,WAAW,CAAC,KAAgB;IAUnC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACrF,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,CAAI,IAAY,EAAE,IAAa,EAAiB,EAAE;QAChE,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,aAAa,IAAI,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YAChI,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9G,IAAI,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACjD,qFAAqF;IACrF,MAAM,OAAO,GACX,OAAO,IAAI,KAAK;QACd,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,EAAE,CAC5B,YAAY,CAAC,MAAM,CAAC;YAClB,OAAO;YACP,KAAK;YACL,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,IAAI;SACL,CAAC,CACH;QACH,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACrC,+EAA+E;QAC/E,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GACX,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5H,MAAM,YAAY,GAChB,OAAO,IAAI,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1H,MAAM,QAAQ,GAAG,OAAO,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAClD,qBAAqB,CAAC,IAAI,CAAC,OAAO,EAAE;QAClC,GAAG,CAAC,KAAK;YACP,CAAC,CAAC;gBACE,WAAW,EAAE,EAAE,YAAY,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE;gBACxD,YAAY,EAAE,CAAC,GAAuB,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,SAAS;aACpG;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CACH,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,gGAAgG;QAChG,KAAK,QAAQ,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAE5G,MAAM,IAAI,GAAY,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE;QACrD,IAAI,IAAI,CAAC,WAAW,EAAE,YAAY,KAAK,IAAI;YAAE,OAAO,MAAM,EAAE,CAAC;QAC7D,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,gGAAgG;QAChG,0FAA0F;QAC1F,2FAA2F;QAC3F,8FAA8F;QAC9F,8FAA8F;QAC9F,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,WAAW,IAAI,YAAY,UAAU,EAAE,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,GAA2B,EAAE,CAC1C,eAAe,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACnG,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACpE,MAAM,EAAE,GAAG;YACT,MAAM;YACN,OAAO,EAAE,IAAI;YACb,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,kGAAkG;YAClG,GAAG,CAAC,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/F,CAAC;QACF,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM;gBACJ,WAAW,KAAK,SAAS,IAAI,QAAQ;oBACnC,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;oBACzG,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC;YACzE,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,+FAA+F;QAC/F,gGAAgG;QAChG,8FAA8F;QAC9F,gGAAgG;QAChG,sCAAsC;QACtC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,EAAE,MAAM,CACX,EAAE,EACF,KAAK;YACH,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;YAC/E,CAAC,CAAC,MAAM,CAAC,OAAO;gBACd,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE;gBACpD,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAC3D,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,OAAO;QACL,IAAI;QACJ,YAAY;QACZ,OAAO;QACP,KAAK;QACL,OAAO;QACP,KAAK;YACH,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBAChD,IAAI,CAAC;oBACH,KAAK,EAAE,CAAC;gBACV,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC9F,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,UAAU,CACvB,QAA+B,EAC/B,IAQC;IAED,IAAI,KAAgC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;QACpC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,IAAI;QAClB,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC3B,MAAM,EAAE,KAAK,IAA4B,EAAE;YACzC,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qFAAqF;gBACrF,yFAAyF;gBACzF,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,QAAQ,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACzG,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,KAAK,CAAC,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;YAC7E,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1H,CAAC;KACF,CAAC,CAAC;IACH,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,MAAuB;IAC3C,MAAM,IAAI,GAAG,MAA4C,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;IAClE,OAAO,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,aAAa,CAAC,IAA6B;IAClD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,sGAAsG;AACtG,SAAS,QAAQ,CAAC,QAAgB,EAAE,MAAe;IACjD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACxG,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AACrF,CAAC;AAED,yFAAyF;AACzF,SAAS,QAAQ,CAAC,IAA6B;IAC7C,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAC5D,CAAC;AAED,6FAA6F;AAC7F,SAAS,gBAAgB,CAAC,MAAqB;IAC7C,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,UAAU,CAAC,MAAqB;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,EAAE,OAAuD,CAAC;IACjF,IAAI,OAAO,OAAO,EAAE,IAAI,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;IACvH,MAAM,GAAG,GAAG,OAAO,EAAE,SAAyD,CAAC;IAC/E,IAAI,OAAO,GAAG,EAAE,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACvG,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA2C;IAC7E,+EAA+E;IAC/E,kFAAkF;IAClF,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAe,EAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC;IACvB,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IACxB,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;IACzB,MAAM,SAAS,CAAC;QACd,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK;QACL,aAAa,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;KACrD,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACrD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACpF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,gBAAgB;YACxB,OAAO,EACL,4JAA4J;SAC/J,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACrH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;AAC1G,CAAC;AAED,SAAS,WAAW,CAAC,OAAuC;IAC1D,OAAO,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC"}

package/dist/mcp/ipc.d.ts

@@ -0,0 +1,202 @@
+import { z } from 'zod';
+/**
+ * The IPC leg between `xez mcp` (the bridge) and the running xezar service — D-01
+ * (docs/features/mcp-server/mcp-d01-transport-decision.md) § 1.2–1.5.
+ *
+ * One Unix domain socket per registered project, owned by the service, at
+ * `<xezarHomeDir()>/ipc/<projectId>.sock` (dir 0700, socket 0600). Frames are
+ * newline-delimited JSON, the same framing as the stdio leg. The socket IS the
+ * project binding (§ 1.5): no frame carries a project field, and the service answers
+ * only for the project it opened the socket for.
+ *
+ * Both sides import this file, so the path rule and the frame shapes cannot drift.
+ * They may still come from different installed versions (`npx` vs a global
+ * install), which is what `IPC_PROTOCOL_VERSION` is for.
+ */
+/**
+ * Bumped only when a frame shape changes incompatibly. Carried on every request.
+ *
+ * 2 (#302): a connection is a SESSION. The bridge keeps one connection for its whole life, opens
+ * the session on it with `session/open` (which acquires the project's owner slot, D-02), and every
+ * `health` / `tools/call` needs that live session. A version-1 bridge — one connection per call,
+ * no session — would be refused on every call anyway; the version check refuses it legibly first.
+ */
+export declare const IPC_PROTOCOL_VERSION = 2;
+/**
+ * Largest frame either leg accepts, in bytes: 32 MiB + 64 KiB. Taken from D-09 B-08
+ * (qodeca/xezar#206, not yet merged at the time of writing) so the bridge does not
+ * invent a second number. A larger frame is refused with an explicit error and
+ * closes nothing else.
+ */
+export declare const MAX_FRAME_BYTES = 33619968;
+/**
+ * How long the bridge waits for the service to answer one request — D-09 B-09
+ * (qodeca/xezar#206): 55 s. On expiry the bridge answers with a readable result;
+ * the service operation is not cancelled. There is no retry (D-01 § 5, D-09 B-16).
+ */
+export declare const IPC_REQUEST_TIMEOUT_MS = 55000;
+/**
+ * How long the bridge waits to connect and open its session. Acquisition itself is bounded far
+ * below this (D-02.2: 5 attempts, at most 375 ms of backoff), so only a hung service reaches it.
+ * It is short because `initialize` waits on it, and a client gives up on a server whose handshake
+ * is slow — Codex's documented default startup timeout is 10 s (not re-measured here). On expiry
+ * the handshake still succeeds with no session (N-07) and the next call tries again.
+ */
+export declare const IPC_SESSION_OPEN_TIMEOUT_MS = 5000;
+export type McpSocketLocation = {
+    readonly kind: 'socket';
+    readonly path: string;
+} | {
+    readonly kind: 'unavailable';
+    readonly reason: string;
+};
+/**
+ * Where the service listens for `projectId`, and where the bridge connects. Pure:
+ * both sides compute it from the same registry entry, so they always agree.
+ *
+ * D-01 § 1.4: when `<home>/ipc/<projectId>.sock` is longer than the OS allows, the
+ * first 12 hex characters of SHA-256(project root) replace the id. When even that
+ * is too long (a very long `XEZ_HOME`), there is no socket — the caller degrades.
+ * Windows named pipes are untested and their naming is undecided (D-01 § 10.2), so
+ * Windows is reported as unavailable rather than guessed.
+ */
+export declare function mcpSocketLocation(project: {
+    readonly id: string;
+    readonly root: string;
+}, env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): McpSocketLocation;
+/** `<xezarHomeDir()>/ipc` — the only directory the service creates for MCP. */
+export declare function mcpSocketDir(env?: NodeJS.ProcessEnv): string;
+/** A tool result exactly as MCP carries it: the text block is authoritative. */
+export declare const toolResultSchema: z.ZodObject<{
+    content: z.ZodArray<z.ZodObject<{
+        type: z.ZodLiteral<"text">;
+        text: z.ZodString;
+    }, z.core.$strip>>;
+    structuredContent: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    isError: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type McpToolResult = z.infer<typeof toolResultSchema>;
+/** What `health` answers. No account identity and no path — F-12, N-01, F-15. */
+export declare const healthResultSchema: z.ZodObject<{
+    ipcVersion: z.ZodNumber;
+    xezarVersion: z.ZodString;
+    project: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type HealthResult = z.infer<typeof healthResultSchema>;
+export declare const toolCallParamsSchema: z.ZodObject<{
+    name: z.ZodString;
+    arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+/**
+ * Bridge → service. `v` is checked BEFORE the method is looked at, so a service
+ * can refuse a bridge from another protocol version legibly. `bridgeVersion` is the
+ * bridge's xezar version, for diagnostics only.
+ */
+export declare const ipcRequestSchema: z.ZodObject<{
+    v: z.ZodNumber;
+    id: z.ZodNumber;
+    bridgeVersion: z.ZodOptional<z.ZodString>;
+    method: z.ZodString;
+    params: z.ZodOptional<z.ZodUnknown>;
+}, z.core.$strip>;
+export type IpcRequest = z.infer<typeof ipcRequestSchema>;
+export declare const ipcErrorCodeSchema: z.ZodEnum<{
+    "bad-frame": "bad-frame";
+    internal: "internal";
+    "invalid-params": "invalid-params";
+    "project-occupied": "project-occupied";
+    "session-expired": "session-expired";
+    "unknown-method": "unknown-method";
+    "unknown-tool": "unknown-tool";
+    "version-mismatch": "version-mismatch";
+}>;
+/**
+ * The JSON-RPC error the bridge hands the client verbatim for the two ownership refusals. The
+ * contract's schemas are `.strict()`, so nothing about the competing owner can ride along (N-01).
+ */
+export declare const ownershipRpcErrorSchema: z.ZodUnion<readonly [z.ZodObject<{
+    code: z.ZodLiteral<-32080>;
+    message: z.ZodString;
+    data: z.ZodObject<{
+        reason: z.ZodLiteral<"com.qodeca.xezar/project-occupied">;
+        projectId: z.ZodString;
+        retryable: z.ZodLiteral<true>;
+    }, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
+    code: z.ZodLiteral<-32081>;
+    message: z.ZodString;
+    data: z.ZodObject<{
+        reason: z.ZodLiteral<"com.qodeca.xezar/session-expired">;
+        projectId: z.ZodString;
+        retryable: z.ZodLiteral<true>;
+    }, z.core.$strict>;
+}, z.core.$strict>]>;
+/** What `session/open` answers: this connection's session now owns the project. */
+export declare const sessionOpenResultSchema: z.ZodObject<{
+    owner: z.ZodLiteral<true>;
+}, z.core.$strip>;
+/** Service → bridge. */
+export declare const ipcResponseSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    v: z.ZodNumber;
+    id: z.ZodNullable<z.ZodNumber>;
+    ok: z.ZodLiteral<true>;
+    result: z.ZodUnknown;
+}, z.core.$strip>, z.ZodObject<{
+    v: z.ZodNumber;
+    id: z.ZodNullable<z.ZodNumber>;
+    ok: z.ZodLiteral<false>;
+    error: z.ZodObject<{
+        code: z.ZodEnum<{
+            "bad-frame": "bad-frame";
+            internal: "internal";
+            "invalid-params": "invalid-params";
+            "project-occupied": "project-occupied";
+            "session-expired": "session-expired";
+            "unknown-method": "unknown-method";
+            "unknown-tool": "unknown-tool";
+            "version-mismatch": "version-mismatch";
+        }>;
+        message: z.ZodString;
+    }, z.core.$strip>;
+    serviceVersion: z.ZodOptional<z.ZodString>;
+    rpcError: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+        code: z.ZodLiteral<-32080>;
+        message: z.ZodString;
+        data: z.ZodObject<{
+            reason: z.ZodLiteral<"com.qodeca.xezar/project-occupied">;
+            projectId: z.ZodString;
+            retryable: z.ZodLiteral<true>;
+        }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        code: z.ZodLiteral<-32081>;
+        message: z.ZodString;
+        data: z.ZodObject<{
+            reason: z.ZodLiteral<"com.qodeca.xezar/session-expired">;
+            projectId: z.ZodString;
+            retryable: z.ZodLiteral<true>;
+        }, z.core.$strict>;
+    }, z.core.$strict>]>>;
+}, z.core.$strip>], "ok">;
+export type IpcResponse = z.infer<typeof ipcResponseSchema>;
+/**
+ * Split a byte stream into newline-delimited frames. A frame over `maxBytes` is
+ * reported once through `onOversize` and skipped up to its newline; the stream
+ * keeps working (D-09 B-08: "closes nothing else").
+ */
+export declare class LineFramer {
+    private readonly onFrame;
+    private readonly onOversize;
+    private readonly maxBytes;
+    private chunks;
+    private size;
+    private discarding;
+    constructor(onFrame: (line: string) => void, onOversize: () => void, maxBytes?: number);
+    push(chunk: Buffer): void;
+    private append;
+    private flushFrame;
+}
+/** One frame on the wire. `JSON.stringify` never emits a raw newline. */
+export declare function encodeFrame(value: unknown): string;