@qodeca/xezar 0.13.1 → 0.14.0

package/dist/mcp/resource-ownership.d.ts

@@ -0,0 +1,228 @@
+import type { AutomationStore } from '../automations/store.ts';
+import type { AutomationDefinition, AutomationReceipt } from '../automations/types.ts';
+import type { QueuedMessage, RunRecord, RunStore } from '../runs/store.ts';
+import type { WorkflowDef } from '../workflows/types.ts';
+/**
+ * Per-resource ownership validation for the MCP project leader (#88).
+ *
+ * F-02: every identifier a leader supplies — a task, a message nested inside a task, a variant
+ * group and every run in it, a file path, a worktree, a workflow, an automation and its results,
+ * a pagination cursor, and every element of a bulk list — is proved to belong to the BOUND
+ * project before anything reads or changes it. A foreign identifier causes no read and no side
+ * effect.
+ *
+ * How ownership is proved. Each project has its own `RunStore` and `AutomationStore`, opened on
+ * its own `.local/xezar`, and the scope below holds exactly one project's pair. So "is this id
+ * A's?" is answered by A's own services (N-02: no JSON or NDJSON is read here, and nothing is
+ * written), and B's stores are simply not reachable from A's scope. Three things a store lookup
+ * alone does NOT prove, and which this module checks explicitly:
+ *
+ *  - A record's FILESYSTEM reach. A run record carries an absolute `worktreePath`; the pick and
+ *    reclaim flows delete that directory and the file and diff reads open it. The only path xezar
+ *    ever creates for a run is `<root>/.local/xezar/worktrees/<runId>` (`worktreePathFor`,
+ *    `createWorktree`), so a record naming anything else — another project's worktree, a moved
+ *    root, a hand-edited index — is refused, and a worktree directory that is itself a symlink is
+ *    refused too.
+ *  - A manual automation check (`GET /automation-checks/:checkId`) lives in a WORKSPACE-level map
+ *    that records no project (M-18). Its owner is stamped beside it with `stampOwner`; an
+ *    unstamped check has no provable owner and is refused.
+ *  - A cursor carries no project. MCP cursors are sealed with `sealCursor`, which binds them to
+ *    the project AND the resource they page; any other cursor is refused.
+ *
+ * Refusals never name the resource (N-01). A foreign id and an id that does not exist anywhere
+ * answer the same `not_found`, with one fixed message that never interpolates caller input — an
+ * error that echoed an absolute path or an id would name the other project's resource back.
+ * Every refusal is also reported to the optional `audit` sink, the leader-visible log, as
+ * `{ check, code, index? }` only: the entry type has no field that could carry an identifier.
+ *
+ * Degradation is the caller's policy only for git/worktree HELPERS (AGENTS.md); an ownership
+ * check never inherits one. Every check here fails CLOSED: anything that cannot be proved —
+ * an unreadable directory, a missing owner stamp, a malformed id — is a refusal, never a pass.
+ *
+ * ## Partial-success policy (A-03)
+ *
+ * This is the documented outcome of a list that mixes this project's resources with foreign or
+ * unknown ones. It is a deliverable, not an implementation detail; the tests assert it exactly.
+ *
+ * 1. **Caller-supplied id lists** (`partitionOwned`). Every element is validated before ANY side
+ *    effect, and the caller acts only afterwards, and only on `allowed`.
+ *    - Owned elements PROCEED — this is a partial success, not an all-or-nothing batch.
+ *    - Refused elements are reported by their input POSITION (`index`) with a code. The id itself
+ *      is never echoed, and a foreign id is indistinguishable from a nonexistent one.
+ *    - `outcome` states the case: `all` (every element owned), `partial` (some owned, some
+ *      refused), `none` (elements were supplied and every one was refused — the caller performs
+ *      no side effect and reports a refusal) and `empty` (nothing was supplied — which must not
+ *      read the same as "every element was refused").
+ *    - A repeated element is acted on once: its later positions are refused with `duplicate`
+ *      when the first was allowed, and with the first position's own code when it was refused.
+ * 2. **A variant group is ONE resource, not a bulk list** (M-07). If any run in the group fails
+ *    ownership, the whole group is refused — reading or picking a group means reading or
+ *    changing every member, so a group with one foreign member is not this project's group.
+ * 3. **Server-computed sweeps** (`ownSweep`: archive-finished, read-all, reclaim). The candidate
+ *    set comes only from the bound project's own store, so no caller id is involved. Archive and
+ *    read-all change only store records and are owned by construction. Reclaim DELETES worktree
+ *    directories, so `ownSweep` refuses the whole sweep unless every worktree-bearing record is
+ *    contained. No production path calls that branch (#288): the enforcer itself
+ *    (`reclaimWorktrees` in `runs/retention.ts`) now leaves out, per record, every worktree it
+ *    cannot prove with `ownRun` / `ownWorktree`, for the route and the unattended sweeps alike.
+ */
+/** Why a resource was refused. Deliberately coarse: a finer code would be an existence oracle. */
+export type OwnershipCode = 'not_found' | 'forbidden_path' | 'invalid_cursor' | 'duplicate';
+/** Which check refused — the only other thing the leader-visible log learns about a refusal. */
+export type OwnershipCheck = 'run' | 'queued-message' | 'group' | 'group-member' | 'worktree' | 'file' | 'automation' | 'automation-receipt' | 'automation-check' | 'workflow' | 'cursor' | 'sweep';
+/** One leader-visible log entry. No field can hold an identifier, a path or a name, by type. */
+export interface OwnershipAuditEntry {
+    check: OwnershipCheck;
+    code: OwnershipCode;
+    /** Position in a caller-supplied list, for bulk refusals only. */
+    index?: number;
+}
+export interface OwnershipRefusal {
+    ok: false;
+    code: OwnershipCode;
+    /** One fixed sentence per code. Never built from caller input or from a resource. */
+    message: string;
+}
+export type Owned<T> = {
+    ok: true;
+    value: T;
+} | OwnershipRefusal;
+/**
+ * The bound project, as far as ownership needs it. Built from the project's context
+ * (`ProjectContext` in `server/project-context.ts` satisfies it structurally) — never from a
+ * caller-supplied project id, which E-BIND forbids.
+ */
+export interface OwnershipProject {
+    root: string;
+    store: Pick<RunStore, 'getRun' | 'listRuns'>;
+    automationStore: Pick<AutomationStore, 'get' | 'latestReceipts'>;
+}
+export interface OwnershipScope {
+    /** Canonical (realpath'd) project root — the project's identity, free of the `default` alias. */
+    readonly root: string;
+    readonly store: OwnershipProject['store'];
+    readonly automationStore: OwnershipProject['automationStore'];
+    readonly audit: (entry: OwnershipAuditEntry) => void;
+}
+export declare function ownershipScope(project: OwnershipProject, audit?: (entry: OwnershipAuditEntry) => void): OwnershipScope;
+/**
+ * A run of the bound project. Refused as `not_found` when the id is not in this project's store
+ * OR when the record's worktree path is not this project's — such a record would name another
+ * tree in every response and drive deletes into it.
+ */
+export declare function ownRun(scope: OwnershipScope, runId: unknown): Owned<RunRecord>;
+/** A queued message (#472), proved to sit in the stack of a run of this project. */
+export declare function ownQueuedMessage(scope: OwnershipScope, runId: unknown, msgId: unknown): Owned<{
+    run: RunRecord;
+    message: QueuedMessage;
+}>;
+/**
+ * A variant group, with EVERY member proved to belong (M-07) — the same members, in the same
+ * order, `groupRuns` in `server.ts` feeds the read and the pick.
+ */
+export declare function ownGroup(scope: OwnershipScope, groupId: unknown): Promise<Owned<{
+    groupId: string;
+    runs: RunRecord[];
+}>>;
+/** The pick's winner: the group is owned as a whole AND the named run is one of its members. */
+export declare function ownGroupMember(scope: OwnershipScope, groupId: unknown, runId: unknown): Promise<Owned<{
+    groupId: string;
+    runs: RunRecord[];
+    run: RunRecord;
+}>>;
+/** A run's existing worktree directory, proved to be this project's (delete one worktree, diffs). */
+export declare function ownWorktree(scope: OwnershipScope, runId: unknown): Promise<Owned<{
+    run: RunRecord;
+    path: string;
+}>>;
+/**
+ * The directory a run's files are read from — its worktree, or the project root for a
+ * `worktree: false` run — mirroring `workingDirectoryOf` in `server.ts`.
+ */
+export declare function ownWorkingDirectory(scope: OwnershipScope, runId: unknown): Promise<Owned<{
+    run: RunRecord;
+    directory: string;
+}>>;
+/**
+ * A path inside a run's working directory (A-04). Refused BEFORE any content is read when it is
+ * absolute, contains a `..` segment, a backslash, a NUL or a `.git` segment, starts in the
+ * engine's `.local/` runtime folder, or when ANY
+ * component on the way to it is a symlink — each component is `lstat`ed in order, so the walk
+ * never follows a link into another tree. A missing component is `not_found`.
+ *
+ * This runs IN FRONT of `readWorktreePath`, never instead of it: that reader keeps its own
+ * traversal, symlink, size-cap and `.git` checks, and the raw route keeps its image allowlist,
+ * so the file surface is checked twice and weakened nowhere. The returned `path` is normalized
+ * (`/`-separated, no empty or `.` segments) and is what the caller passes on.
+ */
+export declare function ownWorktreeFile(scope: OwnershipScope, runId: unknown, relPath: unknown): Promise<Owned<{
+    run: RunRecord;
+    directory: string;
+    path: string;
+}>>;
+/** An automation of this project. */
+export declare function ownAutomation(scope: OwnershipScope, automationId: unknown): Owned<AutomationDefinition>;
+/**
+ * An automation RESULT — a launch receipt (`POST /automation-log/:receiptId/retry`) — from this
+ * project's own receipt journal, whose automation is still this project's.
+ */
+export declare function ownAutomationReceipt(scope: OwnershipScope, receiptId: unknown): Owned<AutomationReceipt>;
+/**
+ * Record which project created `record`. NO production code calls this, nor `ownAutomationCheck`
+ * below (#288): the only reader of a check, `GET /automation-checks/:checkId`, is workspace-level
+ * and has no bound project to compare a stamp against. Nothing is protected by this pair today —
+ * the MCP `get_automation_check` action proves a check's owner another way, by looking its
+ * automation up in the bound project.
+ */
+export declare function stampOwner(record: object, project: Pick<OwnershipProject, 'root'>): void;
+/**
+ * A manual automation check (M-18: "checks and logs need a project owner even behind an
+ * unscoped endpoint"). The check must carry this project's owner stamp AND name an automation
+ * this project still has. An unstamped check has no provable owner and is refused.
+ */
+export declare function ownAutomationCheck<T extends {
+    automationId: string;
+}>(scope: OwnershipScope, checkId: unknown, checks: ReadonlyMap<string, T>): Owned<T>;
+/** A workflow from this project's own catalog (built-ins plus `.xezar/workflows`), by name. */
+export declare function ownWorkflow(scope: OwnershipScope, name: unknown): Promise<Owned<WorkflowDef>>;
+/** D-09 B-04: every MCP cursor is at most 2 048 bytes — `MAX_CURSOR_BYTES` in
+ *  `runs/event-history.ts`, which that module does not export. */
+export declare const MCP_CURSOR_MAX_BYTES = 2048;
+/**
+ * Wrap a page cursor so it is valid only for this project AND this resource (`resource` is the
+ * caller's own stable key, e.g. `run:<id>:history`). The project is bound through the tag, never
+ * written into the cursor, so a cursor names nothing. Throws when the result would exceed
+ * B-04 — a server-produced inner cursor that large is a bug, and B-03 forbids cutting it.
+ */
+export declare function sealCursor(scope: OwnershipScope, resource: string, inner: string): string;
+/**
+ * The inner cursor, when `cursor` was sealed for this project and this resource. A cursor from
+ * another project, for another resource, tampered with, malformed or oversized is one answer:
+ * `invalid_cursor`.
+ */
+export declare function openCursor(scope: OwnershipScope, resource: string, cursor: unknown): Owned<string>;
+export interface BulkOwnership<T> {
+    /** See "Partial-success policy" in the module comment. */
+    outcome: 'all' | 'partial' | 'none' | 'empty';
+    allowed: Array<{
+        index: number;
+        value: T;
+    }>;
+    refused: Array<{
+        index: number;
+        code: OwnershipCode;
+    }>;
+}
+/**
+ * Validate EVERY element of a caller-supplied list before any side effect, and partition it per
+ * the documented policy. `own` is one of the single-resource checks above; its own refusal audit
+ * is replaced by one entry per refused position, so the log carries the index and no id.
+ */
+export declare function partitionOwned<T>(scope: OwnershipScope, check: OwnershipCheck, ids: readonly unknown[], own: (scope: OwnershipScope, id: unknown) => Owned<T> | Promise<Owned<T>>): Promise<BulkOwnership<T>>;
+export type SweepKind = 'archive-finished' | 'read-all' | 'reclaim-worktrees';
+/**
+ * A server-computed sweep over the bound project's own store (policy point 3). Reclaim is refused
+ * as a whole when any record's worktree cannot be proved this project's, because its service
+ * deletes every candidate directory and cannot be told to skip one.
+ */
+export declare function ownSweep(scope: OwnershipScope, kind: SweepKind): Promise<Owned<SweepKind>>;

package/dist/mcp/resource-ownership.js

@@ -0,0 +1,390 @@
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { realpathSync } from 'node:fs';
+import { lstat, realpath } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+import { z } from 'zod';
+import { projectDataDir } from '../project-data-paths.js';
+import { loadWorkflows } from '../workflows/load.js';
+const MESSAGES = {
+    not_found: 'not found in this project',
+    forbidden_path: 'path not allowed — use a relative path inside the task worktree, without "..", symlinks or .git',
+    invalid_cursor: 'invalid cursor — request the first page again',
+    duplicate: 'listed more than once — acted on once',
+};
+export function ownershipScope(project, audit) {
+    return {
+        root: canonical(project.root),
+        store: project.store,
+        automationStore: project.automationStore,
+        audit: audit ?? (() => { }),
+    };
+}
+function canonical(path) {
+    try {
+        return realpathSync(path);
+    }
+    catch {
+        // A root that cannot be resolved stays lexical; every containment check below then compares
+        // realpaths against it and fails closed, which is the right answer for a vanished project.
+        return resolve(path);
+    }
+}
+function refuse(scope, check, code, index) {
+    try {
+        scope.audit(index === undefined ? { check, code } : { check, code, index });
+    }
+    catch {
+        // The log is the sink's problem; a throwing sink must not turn a refusal into a pass.
+    }
+    return { ok: false, code, message: MESSAGES[code] };
+}
+const MAX_ID_LENGTH = 256;
+/** A caller-supplied id worth looking up at all. Anything else is simply not found. */
+function isId(value) {
+    return typeof value === 'string' && value.length > 0 && value.length <= MAX_ID_LENGTH && !value.includes('\0');
+}
+/** A run id that is safe as ONE path segment — the precondition for deriving its worktree path. */
+const SAFE_SEGMENT = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+/** The one worktree path xezar creates for a run of this project. */
+function expectedWorktreePath(scope, runId) {
+    if (!SAFE_SEGMENT.test(runId) || runId.length > MAX_ID_LENGTH)
+        return null;
+    return join(projectDataDir(scope.root), 'worktrees', runId);
+}
+/** Lexical half of worktree containment: synchronous, touches no filesystem. */
+function worktreePathIsOurs(scope, run) {
+    if (run.worktreePath === undefined)
+        return true;
+    const expected = expectedWorktreePath(scope, run.id);
+    return expected !== null && resolve(run.worktreePath) === expected;
+}
+/**
+ * Filesystem half: an EXISTING worktree directory must be a real directory at exactly the
+ * expected path — not a symlink, and with no symlinked component between the root and it
+ * (`realpath` would differ). An absent directory (reclaimed) has nothing to reach and passes.
+ * Only `lstat`/`realpath` of this project's own paths run here: no content is read.
+ */
+async function worktreeDirIsOurs(scope, run) {
+    if (!worktreePathIsOurs(scope, run))
+        return false;
+    if (run.worktreePath === undefined)
+        return true;
+    const expected = resolve(run.worktreePath);
+    let info;
+    try {
+        info = await lstat(expected);
+    }
+    catch (err) {
+        return err.code === 'ENOENT';
+    }
+    if (info.isSymbolicLink() || !info.isDirectory())
+        return false;
+    try {
+        return (await realpath(expected)) === expected;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * A run of the bound project. Refused as `not_found` when the id is not in this project's store
+ * OR when the record's worktree path is not this project's — such a record would name another
+ * tree in every response and drive deletes into it.
+ */
+export function ownRun(scope, runId) {
+    if (!isId(runId))
+        return refuse(scope, 'run', 'not_found');
+    const run = scope.store.getRun(runId);
+    if (!run || run.id !== runId || !worktreePathIsOurs(scope, run))
+        return refuse(scope, 'run', 'not_found');
+    return { ok: true, value: run };
+}
+/** A queued message (#472), proved to sit in the stack of a run of this project. */
+export function ownQueuedMessage(scope, runId, msgId) {
+    const run = ownRun(scope, runId);
+    if (!run.ok)
+        return run;
+    const message = isId(msgId) ? (run.value.queuedMessages ?? []).find((m) => m.id === msgId) : undefined;
+    if (!message)
+        return refuse(scope, 'queued-message', 'not_found');
+    return { ok: true, value: { run: run.value, message } };
+}
+/**
+ * A variant group, with EVERY member proved to belong (M-07) — the same members, in the same
+ * order, `groupRuns` in `server.ts` feeds the read and the pick.
+ */
+export async function ownGroup(scope, groupId) {
+    if (!isId(groupId))
+        return refuse(scope, 'group', 'not_found');
+    const runs = scope.store
+        .listRuns()
+        .filter((r) => r.groupId === groupId)
+        .sort((a, b) => (a.variant ?? '').localeCompare(b.variant ?? ''));
+    if (runs.length === 0)
+        return refuse(scope, 'group', 'not_found');
+    for (const run of runs) {
+        if (scope.store.getRun(run.id) !== run || !(await worktreeDirIsOurs(scope, run))) {
+            return refuse(scope, 'group', 'not_found');
+        }
+    }
+    return { ok: true, value: { groupId, runs } };
+}
+/** The pick's winner: the group is owned as a whole AND the named run is one of its members. */
+export async function ownGroupMember(scope, groupId, runId) {
+    const group = await ownGroup(scope, groupId);
+    if (!group.ok)
+        return group;
+    const run = isId(runId) ? group.value.runs.find((r) => r.id === runId) : undefined;
+    if (!run)
+        return refuse(scope, 'group-member', 'not_found');
+    return { ok: true, value: { ...group.value, run } };
+}
+/** A run's existing worktree directory, proved to be this project's (delete one worktree, diffs). */
+export async function ownWorktree(scope, runId) {
+    const run = ownRun(scope, runId);
+    if (!run.ok)
+        return run;
+    const path = run.value.worktreePath;
+    if (path === undefined || !(await worktreeDirIsOurs(scope, run.value)))
+        return refuse(scope, 'worktree', 'not_found');
+    try {
+        if (!(await lstat(path)).isDirectory())
+            return refuse(scope, 'worktree', 'not_found');
+    }
+    catch {
+        return refuse(scope, 'worktree', 'not_found');
+    }
+    return { ok: true, value: { run: run.value, path: resolve(path) } };
+}
+/**
+ * The directory a run's files are read from — its worktree, or the project root for a
+ * `worktree: false` run — mirroring `workingDirectoryOf` in `server.ts`.
+ */
+export async function ownWorkingDirectory(scope, runId) {
+    const run = ownRun(scope, runId);
+    if (!run.ok)
+        return run;
+    if (run.value.worktree === false)
+        return { ok: true, value: { run: run.value, directory: scope.root } };
+    const worktree = await ownWorktree(scope, runId);
+    if (!worktree.ok)
+        return worktree;
+    return { ok: true, value: { run: run.value, directory: worktree.value.path } };
+}
+const MAX_PATH_LENGTH = 4_096;
+/**
+ * A path inside a run's working directory (A-04). Refused BEFORE any content is read when it is
+ * absolute, contains a `..` segment, a backslash, a NUL or a `.git` segment, starts in the
+ * engine's `.local/` runtime folder, or when ANY
+ * component on the way to it is a symlink — each component is `lstat`ed in order, so the walk
+ * never follows a link into another tree. A missing component is `not_found`.
+ *
+ * This runs IN FRONT of `readWorktreePath`, never instead of it: that reader keeps its own
+ * traversal, symlink, size-cap and `.git` checks, and the raw route keeps its image allowlist,
+ * so the file surface is checked twice and weakened nowhere. The returned `path` is normalized
+ * (`/`-separated, no empty or `.` segments) and is what the caller passes on.
+ */
+export async function ownWorktreeFile(scope, runId, relPath) {
+    const dir = await ownWorkingDirectory(scope, runId);
+    if (!dir.ok)
+        return dir;
+    const raw = relPath ?? '';
+    if (typeof raw !== 'string' || raw.length > MAX_PATH_LENGTH)
+        return refuse(scope, 'file', 'forbidden_path');
+    if (raw.includes('\0') || raw.includes('\\') || raw.startsWith('/') || /^[A-Za-z]:/.test(raw)) {
+        return refuse(scope, 'file', 'forbidden_path');
+    }
+    const segments = raw.split('/').filter((s) => s !== '' && s !== '.');
+    // `.git` compared case-insensitively: on a case-insensitive filesystem `.GIT` IS `.git`.
+    if (segments.some((s) => s === '..' || s.toLowerCase() === '.git'))
+        return refuse(scope, 'file', 'forbidden_path');
+    // A `worktree: false` run reads from the project root, where `.local/` holds the engine's
+    // runtime state — every task's transcript and the launch key, which F-15 forbids returning.
+    if (segments[0]?.toLowerCase() === '.local')
+        return refuse(scope, 'file', 'forbidden_path');
+    let current = dir.value.directory;
+    for (const [i, segment] of segments.entries()) {
+        current = join(current, segment);
+        let info;
+        try {
+            info = await lstat(current);
+        }
+        catch (err) {
+            return err.code === 'ENOENT' || err.code === 'ENOTDIR'
+                ? refuse(scope, 'file', 'not_found')
+                : refuse(scope, 'file', 'forbidden_path');
+        }
+        if (info.isSymbolicLink())
+            return refuse(scope, 'file', 'forbidden_path');
+        if (i < segments.length - 1 && !info.isDirectory())
+            return refuse(scope, 'file', 'not_found');
+    }
+    // No component is a link, so the realpath can only differ through something else entirely
+    // (a bind mount, a race): fail closed rather than reason about it.
+    try {
+        if ((await realpath(current)) !== current)
+            return refuse(scope, 'file', 'forbidden_path');
+    }
+    catch {
+        return refuse(scope, 'file', 'not_found');
+    }
+    return { ok: true, value: { run: dir.value.run, directory: dir.value.directory, path: segments.join('/') } };
+}
+/** An automation of this project. */
+export function ownAutomation(scope, automationId) {
+    const automation = isId(automationId) ? scope.automationStore.get(automationId) : undefined;
+    if (!automation || automation.id !== automationId)
+        return refuse(scope, 'automation', 'not_found');
+    return { ok: true, value: automation };
+}
+/**
+ * An automation RESULT — a launch receipt (`POST /automation-log/:receiptId/retry`) — from this
+ * project's own receipt journal, whose automation is still this project's.
+ */
+export function ownAutomationReceipt(scope, receiptId) {
+    if (!isId(receiptId))
+        return refuse(scope, 'automation-receipt', 'not_found');
+    const receipt = [...scope.automationStore.latestReceipts().values()].find((row) => row.receiptId === receiptId);
+    if (!receipt || scope.automationStore.get(receipt.automationId) === undefined) {
+        return refuse(scope, 'automation-receipt', 'not_found');
+    }
+    return { ok: true, value: receipt };
+}
+/**
+ * Owners of records that live OUTSIDE any project's store — today the manual automation checks,
+ * which sit in one workspace-level map. Held beside the record rather than on it, so the record's
+ * wire shape (`automationCheckSchema`) is unchanged and no project identity is ever serialized.
+ * Weak, so an evicted check takes its owner with it.
+ */
+const owners = new WeakMap();
+/**
+ * Record which project created `record`. NO production code calls this, nor `ownAutomationCheck`
+ * below (#288): the only reader of a check, `GET /automation-checks/:checkId`, is workspace-level
+ * and has no bound project to compare a stamp against. Nothing is protected by this pair today —
+ * the MCP `get_automation_check` action proves a check's owner another way, by looking its
+ * automation up in the bound project.
+ */
+export function stampOwner(record, project) {
+    owners.set(record, canonical(project.root));
+}
+/**
+ * A manual automation check (M-18: "checks and logs need a project owner even behind an
+ * unscoped endpoint"). The check must carry this project's owner stamp AND name an automation
+ * this project still has. An unstamped check has no provable owner and is refused.
+ */
+export function ownAutomationCheck(scope, checkId, checks) {
+    const check = isId(checkId) ? checks.get(checkId) : undefined;
+    if (!check || owners.get(check) !== scope.root || scope.automationStore.get(check.automationId) === undefined) {
+        return refuse(scope, 'automation-check', 'not_found');
+    }
+    return { ok: true, value: check };
+}
+/** A workflow from this project's own catalog (built-ins plus `.xezar/workflows`), by name. */
+export async function ownWorkflow(scope, name) {
+    if (!isId(name))
+        return refuse(scope, 'workflow', 'not_found');
+    const { workflows } = await loadWorkflows(scope.root);
+    const workflow = workflows.find((w) => w.name === name);
+    if (!workflow)
+        return refuse(scope, 'workflow', 'not_found');
+    return { ok: true, value: workflow };
+}
+// ---- cursors ---------------------------------------------------------------
+/** D-09 B-04: every MCP cursor is at most 2 048 bytes — `MAX_CURSOR_BYTES` in
+ *  `runs/event-history.ts`, which that module does not export. */
+export const MCP_CURSOR_MAX_BYTES = 2_048;
+/**
+ * Per-process key. Zero config: nothing to store or rotate. The cost is that a cursor does not
+ * survive a service restart — it then answers `invalid_cursor`, and the leader re-reads the first
+ * page, the same recovery an expired history cursor already asks for.
+ */
+const CURSOR_KEY = randomBytes(32);
+const sealedCursorSchema = z.object({ v: z.literal(1), c: z.string(), t: z.string() }).strict();
+function cursorTag(scope, resource, inner) {
+    return createHmac('sha256', CURSOR_KEY).update(`${scope.root}\0${resource}\0${inner}`).digest().subarray(0, 16);
+}
+/**
+ * Wrap a page cursor so it is valid only for this project AND this resource (`resource` is the
+ * caller's own stable key, e.g. `run:<id>:history`). The project is bound through the tag, never
+ * written into the cursor, so a cursor names nothing. Throws when the result would exceed
+ * B-04 — a server-produced inner cursor that large is a bug, and B-03 forbids cutting it.
+ */
+export function sealCursor(scope, resource, inner) {
+    const cursor = Buffer.from(JSON.stringify({ v: 1, c: inner, t: cursorTag(scope, resource, inner).toString('base64url') }), 'utf8').toString('base64url');
+    if (cursor.length > MCP_CURSOR_MAX_BYTES)
+        throw new RangeError(`sealed cursor exceeds ${MCP_CURSOR_MAX_BYTES} bytes`);
+    return cursor;
+}
+/**
+ * The inner cursor, when `cursor` was sealed for this project and this resource. A cursor from
+ * another project, for another resource, tampered with, malformed or oversized is one answer:
+ * `invalid_cursor`.
+ */
+export function openCursor(scope, resource, cursor) {
+    if (typeof cursor !== 'string' || cursor.length === 0 || cursor.length > MCP_CURSOR_MAX_BYTES) {
+        return refuse(scope, 'cursor', 'invalid_cursor');
+    }
+    let parsed;
+    try {
+        parsed = sealedCursorSchema.safeParse(JSON.parse(Buffer.from(cursor, 'base64url').toString('utf8')));
+    }
+    catch {
+        return refuse(scope, 'cursor', 'invalid_cursor');
+    }
+    if (!parsed.success)
+        return refuse(scope, 'cursor', 'invalid_cursor');
+    const expected = cursorTag(scope, resource, parsed.data.c);
+    const given = Buffer.from(parsed.data.t, 'base64url');
+    if (given.length !== expected.length || !timingSafeEqual(given, expected)) {
+        return refuse(scope, 'cursor', 'invalid_cursor');
+    }
+    return { ok: true, value: parsed.data.c };
+}
+/**
+ * Validate EVERY element of a caller-supplied list before any side effect, and partition it per
+ * the documented policy. `own` is one of the single-resource checks above; its own refusal audit
+ * is replaced by one entry per refused position, so the log carries the index and no id.
+ */
+export async function partitionOwned(scope, check, ids, own) {
+    const quiet = { ...scope, audit: () => { } };
+    const allowed = [];
+    const refused = [];
+    const firstSeen = new Map();
+    for (const [index, id] of ids.entries()) {
+        const seen = firstSeen.get(id);
+        if (seen) {
+            const code = seen.code ?? 'duplicate';
+            refused.push({ index, code });
+            refuse(scope, check, code, index);
+            continue;
+        }
+        const result = await own(quiet, id);
+        if (result.ok) {
+            allowed.push({ index, value: result.value });
+            firstSeen.set(id, { index });
+        }
+        else {
+            refused.push({ index, code: result.code });
+            firstSeen.set(id, { index, code: result.code });
+            refuse(scope, check, result.code, index);
+        }
+    }
+    const outcome = ids.length === 0 ? 'empty' : refused.length === 0 ? 'all' : allowed.length === 0 ? 'none' : 'partial';
+    return { outcome, allowed, refused };
+}
+/**
+ * A server-computed sweep over the bound project's own store (policy point 3). Reclaim is refused
+ * as a whole when any record's worktree cannot be proved this project's, because its service
+ * deletes every candidate directory and cannot be told to skip one.
+ */
+export async function ownSweep(scope, kind) {
+    if (kind === 'reclaim-worktrees') {
+        for (const run of scope.store.listRuns()) {
+            if (run.worktreePath !== undefined && !(await worktreeDirIsOurs(scope, run))) {
+                return refuse(scope, 'sweep', 'not_found');
+            }
+        }
+    }
+    return { ok: true, value: kind };
+}
+//# sourceMappingURL=resource-ownership.js.map

package/dist/mcp/resource-ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-ownership.js","sourceRoot":"","sources":["../../src/mcp/resource-ownership.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAuGrD,MAAM,QAAQ,GAAkC;IAC9C,SAAS,EAAE,2BAA2B;IACtC,cAAc,EACZ,iGAAiG;IACnG,cAAc,EAAE,+CAA+C;IAC/D,SAAS,EAAE,uCAAuC;CACnD,CAAC;AAqBF,MAAM,UAAU,cAAc,CAC5B,OAAyB,EACzB,KAA4C;IAE5C,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,KAAK,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,4FAA4F;QAC5F,2FAA2F;QAC3F,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAqB,EAAE,KAAqB,EAAE,IAAmB,EAAE,KAAc;IAC/F,IAAI,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,sFAAsF;IACxF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,uFAAuF;AACvF,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,aAAa,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjH,CAAC;AAED,mGAAmG;AACnG,MAAM,YAAY,GAAG,8BAA8B,CAAC;AAEpD,qEAAqE;AACrE,SAAS,oBAAoB,CAAC,KAAqB,EAAE,KAAa;IAChE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,aAAa;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,gFAAgF;AAChF,SAAS,kBAAkB,CAAC,KAAqB,EAAE,GAAc;IAC/D,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACrD,OAAO,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAAC,KAAqB,EAAE,GAAc;IACpE,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6B,CAAC,IAAI,KAAK,QAAQ,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,QAAQ,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,KAAqB,EAAE,KAAc;IAC1D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAC1G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAClC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAC9B,KAAqB,EACrB,KAAc,EACd,KAAc;IAEd,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvG,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAClE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAqB,EACrB,OAAgB;IAEhB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK;SACrB,QAAQ,EAAE;SACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC;SACpC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAClE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACjF,OAAO,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;AAChD,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAqB,EACrB,OAAgB,EAChB,KAAc;IAEd,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,IAAI,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;IAC5D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;AACtD,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAqB,EAAE,KAAc;IACrE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACtH,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAqB,EACrB,KAAc;IAEd,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;IACxG,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAqB,EACrB,KAAc,EACd,OAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,MAAM,GAAG,GAAG,OAAO,IAAI,EAAE,CAAC;IAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,eAAe;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC5G,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9F,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IACrE,yFAAyF;IACzF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACnH,0FAA0F;IAC1F,4FAA4F;IAC5F,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAE5F,IAAI,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;IAClC,KAAK,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAQ,GAA6B,CAAC,IAAI,KAAK,QAAQ,IAAK,GAA6B,CAAC,IAAI,KAAK,SAAS;gBAC1G,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC;gBACpC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAChG,CAAC;IACD,0FAA0F;IAC1F,mEAAmE;IACnE,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;AAC/G,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,aAAa,CAAC,KAAqB,EAAE,YAAqB;IACxE,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,EAAE,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IACnG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAqB,EAAE,SAAkB;IAC5E,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAChH,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;QAC9E,OAAO,MAAM,CAAC,KAAK,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,MAAM,GAAG,IAAI,OAAO,EAAkB,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,OAAuC;IAChF,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAqB,EACrB,OAAgB,EAChB,MAA8B;IAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;QAC9G,OAAO,MAAM,CAAC,KAAK,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAqB,EAAE,IAAa;IACpE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAC/D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAC7D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED,+EAA+E;AAE/E;kEACkE;AAClE,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAE1C;;;;GAIG;AACH,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;AAEnC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEhG,SAAS,SAAS,CAAC,KAAqB,EAAE,QAAgB,EAAE,KAAa;IACvE,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,KAAqB,EAAE,QAAgB,EAAE,KAAa;IAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CACxB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAC9F,MAAM,CACP,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxB,IAAI,MAAM,CAAC,MAAM,GAAG,oBAAoB;QAAE,MAAM,IAAI,UAAU,CAAC,yBAAyB,oBAAoB,QAAQ,CAAC,CAAC;IACtH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAqB,EAAE,QAAgB,EAAE,MAAe;IACjF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QAC9F,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1E,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAWD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAqB,EACrB,KAAqB,EACrB,GAAuB,EACvB,GAAyE;IAEzE,MAAM,KAAK,GAAmB,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoD,CAAC;IAC9E,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9B,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7C,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3C,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GACX,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACxG,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC;AAID;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAqB,EAAE,IAAe;IACnE,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;YACzC,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC7E,OAAO,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC"}