@revealui/mcp 0.7.0 → 0.8.0

package/dist/servers/factories/knowledge-graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge-graph.js","sourceRoot":"","sources":["../../../src/servers/factories/knowledge-graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAEL,qBAAqB,EAErB,sBAAsB,GAEvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,cAAc,EAId,aAAa,EAEb,QAAQ,EACR,WAAW,EACX,MAAM,EACN,QAAQ,EACR,gBAAgB,EAChB,UAAU,GAGX,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,MAAM,WAAW,GAAG,iBAAiB,CAAC;AACtC,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,oFAAoF;AACpF,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,aAAa,GAAG;IACpB,WAAW;IACX,YAAY;IACZ,KAAK;IACL,YAAY;IACZ,QAAQ;IACR,MAAM;IACN,QAAQ;CACA,CAAC;AAEX,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,mBAAmB,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,mBAAmB,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,iBAAiB;IACzB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAChD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;IAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,8EAA8E;AAC9E,yCAAyC;AACzC,8EAA8E;AAE9E,MAAM,cAAc,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;AACvC,MAAM,kBAAkB,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;AAE/C,MAAM,eAAe,GAAG;IACtB,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE;QAC9C,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC/B;IACD,QAAQ,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;CACxB,CAAC;AAEX,MAAM,KAAK,GAAW;IACpB;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,yEAAyE;YACzE,wEAAwE;YACxE,sEAAsE;YACtE,wEAAwE;YACxE,4BAA4B;QAC9B,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;gBAC1D,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,wEAAwE;iBACtF;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE;oBAC/C,WAAW,EAAE,uCAAuC;iBACrD;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE;oBACnD,WAAW,EAAE,gDAAgD;iBAC9D;gBACD,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;gBAC1F,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;gBAC5E,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,sDAAsD;iBACpE;aACF;YACD,QAAQ,EAAE,CAAC,OAAO,CAAC;SACpB;KACF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,oDAAoD;QACjE,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,yDAAyD;iBACvE;aACF;YACD,QAAQ,EAAE,CAAC,YAAY,CAAC;SACzB;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,8EAA8E;QAC3F,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;gBAC/D,SAAS,EAAE;oBACT,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE;oBACnD,WAAW,EAAE,6CAA6C;iBAC3D;gBACD,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;aAC3F;YACD,QAAQ,EAAE,CAAC,YAAY,CAAC;SACzB;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,2EAA2E;YAC3E,0EAA0E;YAC1E,yEAAyE;YACzE,uEAAuE;YACvE,kBAAkB;QACpB,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,aAAa,CAAC,EAAE;gBACzD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,oDAAoD;iBAClE;gBACD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;gBAC3E,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kCAAkC,EAAE;gBAC/E,aAAa,EAAE;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,+DAA+D;iBAC7E;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,oDAAoD;iBAClE;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,OAAO;oBACb,WAAW,EACT,6EAA6E;oBAC/E,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE;4BAC9C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACxB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yBAC/B;wBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC;qBACzC;iBACF;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,OAAO;oBACb,WAAW,EAAE,8DAA8D;oBAC3E,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,MAAM,EAAE,eAAe;4BACvB,MAAM,EAAE,eAAe;4BACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE;4BACtD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;4BAChF,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yBAC/B;wBACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC;qBACnD;iBACF;aACF;YACD,QAAQ,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC;SACpC;KACF;IACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,gFAAgF;QAC7F,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAClC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAChC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;gBAC1F,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;aAC7E;YACD,QAAQ,EAAE,CAAC,gBAAgB,EAAE,cAAc,CAAC;SAC7C;KACF;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,iDAAiD;QAC9D,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC9B,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;aAC3D;YACD,QAAQ,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC;SAC/B;KACF;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,yEAAyE;YACzE,2EAA2E;YAC3E,kEAAkE;YAClE,wEAAwE;YACxE,yEAAyE;QAC3E,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;gBACvE,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,uDAAuD,2BAA2B,IAAI;iBACpG;gBACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;gBACpF,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;aAC3F;YACD,QAAQ,EAAE,CAAC,YAAY,CAAC;SACzB;KACF;CACF,CAAC;AAEF,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,SAAS,UAAU,CAAC,IAAa;IAC/B,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI;KACI,CAAC;AACtB,CAAC;AAmCD,KAAK,UAAU,eAAe,CAC5B,IAAgB,EAChB,QAAgB,EAChB,IAAsD;IAEtD,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAExF,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM;QAChC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CACd,6DAA6D,EAC7D,CAAC,OAAO,CAAC,CACV;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,WAAW,GAAG,IAAI,GAAG,CAAwB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAE9F,MAAM,WAAW,GAAkB,SAAS,CAAC,KAAK;SAC/C,GAAG,CACF,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC;QACnB,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI;QACtC,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CACH;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACb,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC;QAC3B,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ;QACzB,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU;YAC3B,CAAC,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC,CACR,CAAC;IACJ,MAAM,YAAY,GAAG,IAAI,GAAG,CAAiB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEzF,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM;QAChC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CACd;;;;;uBAKe,EACf,CAAC,OAAO,CAAC,CACV;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACrB,CAAC,CAAC,EAAE;QACJ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE;KAClE,CAAC,CACH,CAAC;IAMF,MAAM,WAAW,GAAkB,SAAS,CAAC,KAAK;SAC/C,GAAG,CAAC,CAAC,CAAC,EAAuB,EAAE;QAC9B,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QACnE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAC3B,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,iBAAiB,EACxD,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,iBAAiB,CACzD,CAAC;QACF,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,YAAY,EAAE,YAAY;SAC3B,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QAClE,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;QAClF,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,EAAe,EAAE,CAAC,IAAI,CAAC,CAAC;IAExE,MAAM,KAAK,GAAa,CAAC,iBAAiB,QAAQ,WAAW,IAAI,CAAC,KAAK,GAAG,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;IAC5F,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,QAAQ,QAAQ,WAAW,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9E,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,eAAe,UAAU,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,YAAY;QACjD,IAAI,SAAS,GAAG,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC9C,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM;QACR,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,SAAS,IAAI,WAAW,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,EAAE;YACN,EAAE,EAAE,QAAQ;YACZ,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,UAAU,IAAI,QAAQ;SAC/E;QACD,SAAS,EAAE,WAAW,CAAC,MAAM;QAC7B,SAAS,EAAE,WAAW,CAAC,MAAM;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS;QACT,SAAS;KACV,CAAC;AACJ,CAAC;AAeD;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAA2C;IACpF,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,EAC9C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;IAEF,MAAM,aAAa,GAAG,OAAO,EAAE,MAAM,IAAI,QAAQ,EAAE,CAAC;IAEpD,IAAI,cAAc,GAA2B,OAAO,EAAE,QAAQ,CAAC;IAC/D,KAAK,UAAU,eAAe;QAC5B,IAAI,cAAc;YAAE,OAAO,cAAc,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACrD,cAAc,GAAG,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,4EAA4E;IAC5E,IAAI,cAAc,GAAgC,OAAO,EAAE,QAAQ,CAAC;IACpE,KAAK,UAAU,eAAe;QAC5B,IAAI,cAAc,KAAK,SAAS;YAAE,OAAO,cAAc,IAAI,SAAS,CAAC;QACrE,IAAI,CAAC;YACH,yEAAyE;YACzE,gEAAgE;YAChE,MAAM,SAAS,GAAG,yBAAyB,CAAC;YAC5C,MAAM,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAElC,CAAC;YACF,cAAc,GAAG,KAAK,EAAE,IAAY,EAAqB,EAAE;gBACzD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBAChD,OAAO,MAAM,CAAC,MAAM,CAAC;YACvB,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,OAAO,cAAc,IAAI,SAAS,CAAC;IACrC,CAAC;IAED,8GAA8G;IAC9G,KAAK,UAAU,QAAQ,CAAC,IAAY;QAClC,MAAM,QAAQ,GAAG,MAAM,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAcD,KAAK,UAAU,WAAW,CAAC,IAAgB,EAAE,IAAc;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAC3B;gDAC0C,EAC1C,CAAC,IAAI,CAAC,CACP,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAwB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,EAAmB,EAAE;YAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzB,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAEjF,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAwB,EAAE,EAAE;QACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAErC,IAAI,IAAgB,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAChB,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,QAAQ,QAAQ,EAAE,CAAC;gBACjB,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,MAAM,MAAM,GAAG,gBAAgB,CAAC,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;oBACxF,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO,MAAM,CAAC,KAAkC,CAAC;oBACjE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;oBAC9E,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;oBAC7C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE;wBAClC,KAAK;wBACL,MAAM;wBACN,KAAK,EAAE,KAA+B;wBACtC,SAAS,EAAE,SAAuC;wBAClD,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;wBACjC,KAAK;wBACL,QAAQ;wBACR,cAAc;qBACf,CAAC,CAAC;oBACH,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;gBAED,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,MAAM,GAAG,gBAAgB,CAAC,mBAAmB,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;oBACzF,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO,MAAM,CAAC,KAAkC,CAAC;oBACjE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;oBACpC,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBACrD,IAAI,CAAC,EAAE;wBAAE,OAAO,WAAW,CAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;oBACvE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAC3B;yCAC6B,EAC7B,CAAC,EAAE,CAAC,CACL,CAAC;oBACF,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBACrB,IAAI,CAAC,IAAI;wBAAE,OAAO,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;oBACrD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;oBACnD,OAAO,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACrC,CAAC;gBAED,KAAK,cAAc,CAAC,CAAC,CAAC;oBACpB,MAAM,MAAM,GAAG,gBAAgB,CAC7B,qBAAqB,EACrB,OAAO,CAAC,MAAM,CAAC,SAAS,EACxB,QAAQ,CACT,CAAC;oBACF,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO,MAAM,CAAC,KAAkC,CAAC;oBACjE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;oBAC1D,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBACrD,IAAI,CAAC,EAAE;wBAAE,OAAO,WAAW,CAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;oBACvE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE;wBACzC,KAAK;wBACL,SAAS,EAAE,SAAuC;wBAClD,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;qBAClC,CAAC,CAAC;oBACH,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;gBAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;oBACtB,MAAM,MAAM,GAAG,gBAAgB,CAC7B,sBAAsB,EACtB,OAAO,CAAC,MAAM,CAAC,SAAS,EACxB,QAAQ,CACT,CAAC;oBACF,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO,MAAM,CAAC,KAAkC,CAAC;oBACjE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;oBACvB,MAAM,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;oBAC/E,MAAM,KAAK,GAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC7C,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,UAAU,EAAE,CAAC,CAAC,UAAU;qBACzB,CAAC,CAAC,CAAC;oBACJ,MAAM,KAAK,GAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC7C,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;wBACpD,UAAU,EAAE,CAAC,CAAC,UAAU;qBACzB,CAAC,CAAC,CAAC;oBACJ,MAAM,QAAQ,GAAG,MAAM,eAAe,EAAE,CAAC;oBACzC,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,IAAI,EACJ;wBACE,OAAO,EAAE;4BACP,WAAW,EAAE,CAAC,CAAC,WAAW;4BAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;4BAChB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,aAAa;4BACjC,OAAO,EAAE,CAAC,CAAC,OAAO;4BAClB,UAAU,EAAE,CAAC,CAAC,UAAU;4BACxB,aAAa;yBACd;wBACD,KAAK;wBACL,KAAK;qBACN,EACD,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CACjC,CAAC;oBACF,OAAO,UAAU,CAAC;wBAChB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC5B,CAAC,CAAC;gBACL,CAAC;gBAED,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,MAAM,MAAM,GAAG,gBAAgB,CAAC,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;oBACtF,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO,MAAM,CAAC,KAAkC,CAAC;oBACjE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;oBACpE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;oBAC7D,IAAI,CAAC,MAAM;wBAAE,OAAO,WAAW,CAAC,6BAA6B,cAAc,EAAE,CAAC,CAAC;oBAC/E,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;oBACzD,IAAI,CAAC,IAAI;wBAAE,OAAO,WAAW,CAAC,6BAA6B,YAAY,EAAE,CAAC,CAAC;oBAC3E,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;wBAC5C,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;wBACjC,QAAQ;qBACT,CAAC,CAAC;oBACH,IAAI,CAAC,IAAI;wBAAE,OAAO,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBAC7C,OAAO,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBACtC,CAAC;gBAED,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,MAAM,GAAG,gBAAgB,CAAC,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;oBACxF,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO,MAAM,CAAC,KAAkC,CAAC;oBACjE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;oBACxC,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBACrD,IAAI,CAAC,EAAE;wBAAE,OAAO,WAAW,CAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;oBACvE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;oBACrD,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC/B,CAAC;gBAED,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,MAAM,GAAG,gBAAgB,CAAC,mBAAmB,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;oBACzF,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO,MAAM,CAAC,KAAkC,CAAC;oBACjE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;oBAC3D,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBACrD,IAAI,CAAC,EAAE;wBAAE,OAAO,WAAW,CAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;oBACvE,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,EAAE;wBAChD,UAAU,EAAE,UAAU,IAAI,2BAA2B;wBACrD,KAAK,EAAE,KAAK,IAAI,CAAC;wBACjB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;qBAClC,CAAC,CAAC;oBACH,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;gBAC/B,CAAC;gBAED;oBACE,OAAO,WAAW,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/servers/factories/revealui-content.d.ts

@@ -33,6 +33,94 @@
  */
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { z } from 'zod/v4';
+/** Resolved REST credentials for one tool call. */
+export interface ResolvedApiCredentials {
+    apiUrl: string;
+    apiKey: string;
+}
+/**
+ * Per-request context handed to the governed seams. Derived from the MCP
+ * request handler's `extra` (the transport threads `authInfo` from the
+ * authenticated HTTP request; `sessionId` is the routing key). `undefined`
+ * on the stdio path.
+ */
+export interface McpToolCallContext {
+    authInfo?: unknown;
+    sessionId?: string;
+}
+/**
+ * Governed-path credential resolver. Returns the credentials to forward for a
+ * single tool call — on the governed path, the caller's own bearer token so
+ * the REST layer enforces `access.read` against the real user. May throw /
+ * reject when no per-request credential exists; the call then fails closed.
+ */
+export type CredentialsProvider = (ctx: McpToolCallContext) => Promise<ResolvedApiCredentials> | ResolvedApiCredentials;
+/** Terminal outcome of a governed tool call, as recorded in the receipt. */
+export type McpToolAuditOutcome = 'invoked' | 'denied' | 'failed';
+/**
+ * A governed tool-call receipt. Raw arguments are NEVER included — only a
+ * sha256 digest of the canonical JSON plus an allowlisted scalar subset
+ * (`collection`, `site_id`) that is safe to store in the clear.
+ */
+export interface McpToolAuditRecord {
+    outcome: McpToolAuditOutcome;
+    tool: string;
+    /** sha256 (hex) of the canonical JSON of the raw arguments. */
+    argsDigest: string;
+    /** Allowlisted non-secret identifiers pulled from the validated args. */
+    scalars: Record<string, string>;
+    durationMs: number;
+    httpStatus?: number;
+    /**
+     * Why a call was denied, when `outcome === 'denied'`. `'authz'` for a
+     * deny-by-default tool-permission miss (I-7); `'rate-limit'` when the
+     * per-user quota is exhausted (I-8). Absent for a validation/unknown-tool
+     * denial and for non-denied outcomes.
+     */
+    reason?: string;
+    /** The MCP client that connected (from the `initialize` handshake). */
+    clientInfo?: {
+        name: string;
+        version: string;
+    };
+    context: McpToolCallContext;
+}
+/**
+ * Governed-path audit sink. Resolves when the receipt is durably written;
+ * rejects when the write failed. For a mutating tool a rejection fails the
+ * call (fail-closed); for a read tool it degrades to log-and-continue.
+ */
+export type McpToolAuditSink = (record: McpToolAuditRecord) => Promise<void>;
+/**
+ * Deny-by-default per-tool authorization gate (GAP-371 Phase 2, I-7). Returns
+ * true iff the identity threaded through `ctx.authInfo` may execute `toolName`
+ * at its server-derived tier and role. Governs BOTH `tools/list` filtering and
+ * `tools/call` execution — a tool absent from the list is still independently
+ * denied on a direct call. Absent on the stdio path (every tool allowed).
+ */
+export type McpToolAuthorizer = (ctx: McpToolCallContext, toolName: string) => boolean;
+/**
+ * Per-call rate-limit gate (GAP-371 Phase 2, I-8). Consumed once per authorized
+ * `tools/call`, keyed by the caller's user + tool with limits from the
+ * server-derived tier. Returns false when the quota is exhausted. Absent on the
+ * stdio path (unlimited). Never consumed for `tools/list` or for a denied call.
+ */
+export type McpToolRateLimiter = (ctx: McpToolCallContext, toolName: string) => Promise<boolean> | boolean;
+/** One usage-meter event, emitted once per EXECUTED tool call (I-8 tail). */
+export interface McpToolMeterEvent {
+    tool: string;
+    durationMs: number;
+    /** True when the tool surfaced an error (bad args reaching the backend, throw, non-2xx). */
+    errored: boolean;
+}
+/**
+ * Usage-meter sink (GAP-371 Phase 2). Fired once per tool call that actually
+ * executed (success or failure) — never for an authz/rate-limit denial, which
+ * are audit events, not billable usage. Sink errors are swallowed: metering
+ * must never break the underlying tool call. Billing and audit are separate
+ * sinks by design.
+ */
+export type McpToolMeterSink = (ctx: McpToolCallContext, event: McpToolMeterEvent) => void | Promise<void>;
 /**
  * Set credential overrides for this server. Called by the hypervisor with
  * resolved tenant credentials (or by an HTTP launcher before handing the
@@ -98,6 +186,44 @@ export interface CreateRevealuiContentServerOptions {
      * directly; out-of-process subprocess consumers leave it unset.
      */
     collectionsProvider?: CollectionsProvider;
+    /**
+     * Governed-path (GAP-371) per-request credential resolver. When set, it is
+     * the SOLE source of tool-call credentials — the `REVEALUI_API_KEY` /
+     * `setCredentials()` fallback is never consulted (invariant I-4). Leave
+     * unset for the stdio launcher to keep the process-global env-key model.
+     */
+    credentialsProvider?: CredentialsProvider;
+    /**
+     * Governed-path audit sink. When set, every `tools/call` produces a receipt
+     * (invariant I-5). Mutating tools (see `mutatingTools`) fail closed if the
+     * receipt cannot be written; read tools degrade to log-and-continue.
+     */
+    auditSink?: McpToolAuditSink;
+    /**
+     * Names of tools that mutate state and therefore require a durable receipt
+     * BEFORE they run. Phase 1 exposes read tools only, so this is empty in
+     * production; it exists so Phase 2 write tools inherit the fail-closed path
+     * (and so the branch is testable now with a simulated mutating tool).
+     */
+    mutatingTools?: ReadonlySet<string>;
+    /**
+     * Governed-path deny-by-default per-tool authorization (I-7). When set, it
+     * gates BOTH `tools/list` (advertised set) and `tools/call` (execution). A
+     * tool the caller may not execute is neither listed nor callable. Leave unset
+     * for the stdio launcher (no per-tool authz — the OS account is the boundary).
+     */
+    toolAuthorizer?: McpToolAuthorizer;
+    /**
+     * Governed-path per-call rate limiter (I-8). When set, an authorized
+     * `tools/call` consumes one token; exhaustion yields a JSON-RPC error and a
+     * `mcp:tool:denied` receipt with `reason: 'rate-limit'`. Unset → unlimited.
+     */
+    rateLimiter?: McpToolRateLimiter;
+    /**
+     * Governed-path usage-meter sink. When set, one meter event fires per
+     * executed tool call (source `agent` downstream). Unset → no metering.
+     */
+    meterSink?: McpToolMeterSink;
 }
 /**
  * Create a fresh `revealui-content` MCP Server instance. Safe to call

package/dist/servers/factories/revealui-content.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"revealui-content.d.ts","sourceRoot":"","sources":["../../../src/servers/factories/revealui-content.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAWnE,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAS3B;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAElE;AAiDD,eAAO,MAAM,mBAAmB;;;kBAKrB,CAAC;AAEZ,eAAO,MAAM,qBAAqB;;;;;;kBAQvB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;kBAKtB,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;;;kBAMrB,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;kBAIrB,CAAC;AAuFZ;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,oBAAoB,EAAE,GAAG,IAAI,CAAC,CAAC;AAE/E,MAAM,WAAW,kCAAkC;IACjD;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAuID;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,CAAC,EAAE,kCAAkC,GAAG,MAAM,CA6NhG"}
+{"version":3,"file":"revealui-content.d.ts","sourceRoot":"","sources":["../../../src/servers/factories/revealui-content.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAWnE,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAe3B,mDAAmD;AACnD,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAChC,GAAG,EAAE,kBAAkB,KACpB,OAAO,CAAC,sBAAsB,CAAC,GAAG,sBAAsB,CAAC;AAE9D,4EAA4E;AAC5E,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAElE;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,OAAO,EAAE,kBAAkB,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;AAEvF;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAC/B,GAAG,EAAE,kBAAkB,EACvB,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEhC,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,4FAA4F;IAC5F,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAC7B,GAAG,EAAE,kBAAkB,EACvB,KAAK,EAAE,iBAAiB,KACrB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAyC1B;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAElE;AAkDD,eAAO,MAAM,mBAAmB;;;kBAKrB,CAAC;AAEZ,eAAO,MAAM,qBAAqB;;;;;;kBAQvB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;kBAKtB,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;;;kBAMrB,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;kBAIrB,CAAC;AAuFZ;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,oBAAoB,EAAE,GAAG,IAAI,CAAC,CAAC;AAE/E,MAAM,WAAW,kCAAkC;IACjD;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAE1C;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAE1C;;;;OAIG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAE7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAEpC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,iBAAiB,CAAC;IAEnC;;;;OAIG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAEjC;;;OAGG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAkJD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,CAAC,EAAE,kCAAkC,GAAG,MAAM,CAgZhG"}

package/dist/servers/factories/revealui-content.js

@@ -31,10 +31,42 @@
  * via `setCredentials()`. Falls back to `REVEALUI_API_URL` +
  * `REVEALUI_API_KEY` env vars when no override is set.
  */
+import { createHash } from 'node:crypto';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { CallToolRequestSchema, ListResourcesRequestSchema, ListToolsRequestSchema, ReadResourceRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
 import { z } from 'zod/v4';
 import { validateToolArgs } from '../../validate-tool-args.js';
+/** sha256 (hex) of the canonical JSON of an arbitrary argument object. */
+function digestArgs(args) {
+    return createHash('sha256').update(canonicalJson(args)).digest('hex');
+}
+/**
+ * Deterministic JSON with object keys sorted, so the digest of the same
+ * logical arguments is stable regardless of key order. No regex; a manual
+ * recursive serializer over the parsed value.
+ */
+function canonicalJson(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value) ?? 'null';
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(',')}]`;
+    const entries = Object.entries(value).sort((a, b) => a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0);
+    return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson(v)}`).join(',')}}`;
+}
+/** Allowlisted, non-secret scalars safe to store in a receipt in the clear. */
+const AUDIT_SCALAR_ALLOWLIST = ['collection', 'site_id'];
+function pickAuditScalars(args) {
+    const out = {};
+    if (!args || typeof args !== 'object')
+        return out;
+    const record = args;
+    for (const key of AUDIT_SCALAR_ALLOWLIST) {
+        const raw = record[key];
+        if (typeof raw === 'string' && raw.length > 0)
+            out[key] = raw;
+    }
+    return out;
+}
 // ---------------------------------------------------------------------------
 // Credential overrides (set by hypervisor / HTTP launcher)
 // ---------------------------------------------------------------------------
@@ -77,9 +109,9 @@ async function apiGet(baseUrl, apiKey, path, params) {
     const res = await fetch(url.toString(), { headers: apiHeaders(apiKey) });
     const body = await res.json();
     if (!res.ok) {
-        throw new Error(body.error ??
+        throw new ApiRequestError(body.error ??
             body.message ??
-            `API ${res.status}`);
+            `API ${res.status}`, res.status);
     }
     return body;
 }
@@ -195,6 +227,15 @@ const TOOLS = [
         },
     },
 ];
+/** Error carrying the upstream HTTP status, for audit `httpStatus`. */
+class ApiRequestError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+        this.name = 'ApiRequestError';
+    }
+}
 /**
  * Curated fallback used when neither an injected provider nor HTTP
  * introspection is available. These four collections exist in every admin
@@ -328,7 +369,15 @@ async function fetchCollectionsFromAdmin(apiUrl, apiKey) {
  * consume this factory; the factory itself is transport-agnostic.
  */
 export function createRevealuiContentServer(options) {
-    const server = new Server({ name: 'revealui-content', version: '1.0.0' }, { capabilities: { tools: {}, resources: {} } });
+    // A `credentialsProvider` marks the governed/hosted mount (`/api/mcp`). On
+    // that path Phase 1 exposes ONLY the five read tools (design §4-D): the
+    // resource handlers below resolve the ambient service credential rather than
+    // the caller's token and write no receipt, so on a multi-tenant mount they
+    // would be a cross-tenant, unaudited read channel. The capability is therefore
+    // structurally absent when governed — not merely credential-gated. The stdio /
+    // local mount (no options) keeps resources unchanged (single-operator trust).
+    const governed = options?.credentialsProvider !== undefined;
+    const server = new Server({ name: 'revealui-content', version: '1.0.0' }, { capabilities: governed ? { tools: {} } : { tools: {}, resources: {} } });
     // Per-server memoization: resolve the effective collection set once and
     // reuse across `resources/list` + `resources/read` for the lifetime of the
     // server instance. Avoids double-fetching on every read.
@@ -357,80 +406,232 @@ export function createRevealuiContentServer(options) {
         cachedCollections = [...CURATED_FALLBACK];
         return cachedCollections;
     }
-    server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
+    server.setRequestHandler(ListToolsRequestSchema, async (_request, extra) => {
+        const authorizer = options?.toolAuthorizer;
+        if (!authorizer)
+            return { tools: TOOLS };
+        // Filtered discovery (I-7): advertise only tools this caller may execute.
+        // This is UX; execution authz below is the security control — a tool hidden
+        // here is still independently denied on a direct `tools/call`.
+        const ctx = {
+            authInfo: extra?.authInfo,
+            sessionId: extra?.sessionId,
+        };
+        return { tools: TOOLS.filter((tool) => authorizer(ctx, tool.name)) };
+    });
     // -------------------------------------------------------------------------
     // Resources (Stage 4.1 + 4.2)
+    //
+    // Registered ONLY on the ungoverned (stdio / local) path. These handlers use
+    // the process-global `resolveCredentials()` and emit no receipt, so on the
+    // governed mount they are omitted entirely (see capability gate above,
+    // design §4-D). The guard and the capability advertisement must stay in
+    // lockstep: a registered handler with no advertised capability, or vice
+    // versa, reintroduces the bypass.
     // -------------------------------------------------------------------------
-    server.setRequestHandler(ListResourcesRequestSchema, async () => {
-        const { apiUrl, apiKey } = resolveCredentials();
-        if (!(apiUrl && apiKey)) {
-            // Without credentials the server can't enumerate rows; advertise an
-            // empty list rather than erroring — clients still see the resources
-            // capability and can retry once creds are set.
-            return { resources: [] };
+    if (!governed) {
+        server.setRequestHandler(ListResourcesRequestSchema, async () => {
+            const { apiUrl, apiKey } = resolveCredentials();
+            if (!(apiUrl && apiKey)) {
+                // Without credentials the server can't enumerate rows; advertise an
+                // empty list rather than erroring — clients still see the resources
+                // capability and can retry once creds are set.
+                return { resources: [] };
+            }
+            const collections = await resolveCollections();
+            const resources = [];
+            for (const collection of collections) {
+                try {
+                    const body = await apiGet(apiUrl, apiKey, `/api/${collection.slug}`, {
+                        limit: String(DEFAULT_RESOURCE_PAGE_SIZE),
+                        page: '1',
+                    });
+                    for (const row of extractDocs(body)) {
+                        resources.push(resourceForRow(collection, row));
+                    }
+                }
+                catch {
+                    // empty-catch-ok: an unavailable collection shouldn't blank-out the entire resource list
+                }
+            }
+            return { resources };
+        });
+        server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
+            const parsed = parseResourceUri(request.params.uri);
+            if (!parsed) {
+                throw new Error(`Unknown resource URI (expected ${RESOURCE_URI_PREFIX}<collection>/<id>): ${request.params.uri}`);
+            }
+            const collections = await resolveCollections();
+            const collection = collections.find((c) => c.slug === parsed.collection);
+            if (!collection) {
+                throw new Error(`Collection is not exposed as a resource: ${parsed.collection}`);
+            }
+            const { apiUrl, apiKey } = resolveCredentials();
+            if (!(apiUrl && apiKey)) {
+                throw new Error('REVEALUI_API_URL and REVEALUI_API_KEY must be set');
+            }
+            const row = await apiGet(apiUrl, apiKey, `/api/${parsed.collection}/${parsed.id}`);
+            return {
+                contents: [
+                    {
+                        uri: request.params.uri,
+                        mimeType: 'application/json',
+                        text: JSON.stringify(row, null, 2),
+                    },
+                ],
+            };
+        });
+    }
+    server.setRequestHandler(CallToolRequestSchema, async (request, extra) => {
+        const startTime = Date.now();
+        const toolName = request.params.name;
+        const rawArgs = request.params.arguments;
+        const ctx = {
+            authInfo: extra?.authInfo,
+            sessionId: extra?.sessionId,
+        };
+        const auditSink = options?.auditSink;
+        const mutating = options?.mutatingTools?.has(toolName) ?? false;
+        // Write a receipt for this call. Returns whether the write succeeded; the
+        // sink itself classifies + logs a failure, so callers only decide between
+        // fail-closed (mutations) and degrade (reads). No-op when no sink is wired
+        // (the stdio path).
+        async function writeReceipt(outcome, opts) {
+            if (!auditSink)
+                return true;
+            const client = server.getClientVersion();
+            const record = {
+                outcome,
+                tool: toolName,
+                argsDigest: digestArgs(rawArgs ?? null),
+                scalars: pickAuditScalars(rawArgs),
+                durationMs: Date.now() - startTime,
+                httpStatus: opts?.httpStatus,
+                reason: opts?.reason,
+                clientInfo: client ? { name: client.name, version: client.version } : undefined,
+                context: ctx,
+            };
+            try {
+                await auditSink(record);
+                return true;
+            }
+            catch {
+                return false;
+            }
         }
-        const collections = await resolveCollections();
-        const resources = [];
-        for (const collection of collections) {
+        // A call rejected before it executes (unknown tool, invalid args, authz or
+        // rate-limit denial). Records a `denied` receipt (best-effort — a denial
+        // that mutates nothing degrades like a read) and returns the client error.
+        async function denied(response, reason) {
+            await writeReceipt('denied', reason ? { reason } : undefined);
+            return response;
+        }
+        // Deny-by-default collection allowlist. The content tools interpolate the
+        // `collection` arg into `/api/<collection>`, so a free-string collection
+        // would let one tool reach another tool's endpoint (e.g. `/api/users`,
+        // bypassing the admin gate on `revealui_list_users`). A collection outside
+        // the RESOLVED exposed set is denied before any REST call — the backend is
+        // never reached for an unexposed collection.
+        async function denyIfCollectionNotExposed(collection) {
+            const exposed = await resolveCollections();
+            const slugs = new Set(exposed.map((c) => c.slug));
+            if (slugs.has(collection))
+                return null;
+            return denied({
+                content: [{ type: 'text', text: `Error: collection is not exposed: ${collection}` }],
+                isError: true,
+            }, 'collection-not-exposed');
+        }
+        // Emit one usage-meter event for a call that actually executed. Swallows
+        // sink errors so metering can never break the tool call.
+        async function fireMeter(errored) {
+            if (!options?.meterSink)
+                return;
             try {
-                const body = await apiGet(apiUrl, apiKey, `/api/${collection.slug}`, {
-                    limit: String(DEFAULT_RESOURCE_PAGE_SIZE),
-                    page: '1',
+                await options.meterSink(ctx, {
+                    tool: toolName,
+                    durationMs: Date.now() - startTime,
+                    errored,
                 });
-                for (const row of extractDocs(body)) {
-                    resources.push(resourceForRow(collection, row));
-                }
             }
             catch {
-                // empty-catch-ok: an unavailable collection shouldn't blank-out the entire resource list
+                // empty-catch-ok: metering is best-effort and must not affect the call
             }
         }
-        return { resources };
-    });
-    server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
-        const parsed = parseResourceUri(request.params.uri);
-        if (!parsed) {
-            throw new Error(`Unknown resource URI (expected ${RESOURCE_URI_PREFIX}<collection>/<id>): ${request.params.uri}`);
+        // Deny-by-default per-tool authorization (I-7). Runs before credentials are
+        // resolved, so an unauthorized caller never triggers a credential lookup or
+        // a REST call. A tool hidden from `tools/list` is still denied here.
+        if (options?.toolAuthorizer && !options.toolAuthorizer(ctx, toolName)) {
+            return denied({
+                content: [{ type: 'text', text: `Error: not authorized to call tool: ${toolName}` }],
+                isError: true,
+            }, 'authz');
         }
-        const collections = await resolveCollections();
-        const collection = collections.find((c) => c.slug === parsed.collection);
-        if (!collection) {
-            throw new Error(`Collection is not exposed as a resource: ${parsed.collection}`);
+        // Per-user + tier rate limit (I-8). Consumed only for an authorized call,
+        // before any credential resolution or execution. A denial is audited with
+        // `reason: 'rate-limit'` and never meters (a rejected call is not usage).
+        if (options?.rateLimiter) {
+            const allowed = await options.rateLimiter(ctx, toolName);
+            if (!allowed) {
+                return denied({
+                    content: [{ type: 'text', text: `Error: rate limit exceeded for tool: ${toolName}` }],
+                    isError: true,
+                }, 'rate-limit');
+            }
         }
-        const { apiUrl, apiKey } = resolveCredentials();
-        if (!(apiUrl && apiKey)) {
-            throw new Error('REVEALUI_API_URL and REVEALUI_API_KEY must be set');
+        // Resolve credentials. Governed path: the injected provider is the sole
+        // source and may throw when no per-request credential exists (I-4). Env
+        // path is unchanged for stdio.
+        let apiUrl;
+        let apiKey;
+        try {
+            if (options?.credentialsProvider) {
+                const resolved = await options.credentialsProvider(ctx);
+                apiUrl = resolved.apiUrl;
+                apiKey = resolved.apiKey;
+            }
+            else {
+                const resolved = resolveCredentials();
+                if (!(resolved.apiUrl && resolved.apiKey)) {
+                    return {
+                        content: [
+                            { type: 'text', text: 'Error: REVEALUI_API_URL and REVEALUI_API_KEY must be set' },
+                        ],
+                        isError: true,
+                    };
+                }
+                apiUrl = resolved.apiUrl;
+                apiKey = resolved.apiKey;
+            }
         }
-        const row = await apiGet(apiUrl, apiKey, `/api/${parsed.collection}/${parsed.id}`);
-        return {
-            contents: [
-                {
-                    uri: request.params.uri,
-                    mimeType: 'application/json',
-                    text: JSON.stringify(row, null, 2),
-                },
-            ],
-        };
-    });
-    server.setRequestHandler(CallToolRequestSchema, async (request) => {
-        const startTime = Date.now();
-        const toolName = request.params.name;
-        const { apiUrl, apiKey } = resolveCredentials();
-        if (!(apiUrl && apiKey)) {
+        catch (err) {
+            await writeReceipt('failed');
             return {
                 content: [
-                    { type: 'text', text: 'Error: REVEALUI_API_URL and REVEALUI_API_KEY must be set' },
+                    { type: 'text', text: `Error: ${err instanceof Error ? err.message : String(err)}` },
                 ],
                 isError: true,
             };
         }
+        // Fail-closed for mutations: the receipt is written BEFORE the tool runs,
+        // so a state change can never happen without a durable record of it. If
+        // the write fails, refuse the call — nothing executes.
+        if (mutating) {
+            const recorded = await writeReceipt('invoked');
+            if (!recorded) {
+                return {
+                    content: [{ type: 'text', text: 'Error: audit log unavailable; mutating tool refused' }],
+                    isError: true,
+                };
+            }
+        }
         try {
             let data;
             switch (toolName) {
                 case 'revealui_list_sites': {
-                    const parsed = validateToolArgs(ListSitesArgsSchema, request.params.arguments, toolName);
+                    const parsed = validateToolArgs(ListSitesArgsSchema, rawArgs, toolName);
                     if (!parsed.ok)
-                        return parsed.error;
+                        return denied(parsed.error);
                     const { limit = 20, page = 1 } = parsed.value;
                     data = await apiGet(apiUrl, apiKey, '/api/sites', {
                         limit: String(limit),
@@ -439,10 +640,13 @@ export function createRevealuiContentServer(options) {
                     break;
                 }
                 case 'revealui_list_content': {
-                    const parsed = validateToolArgs(ListContentArgsSchema, request.params.arguments, toolName);
+                    const parsed = validateToolArgs(ListContentArgsSchema, rawArgs, toolName);
                     if (!parsed.ok)
-                        return parsed.error;
+                        return denied(parsed.error);
                     const { site_id, collection, limit = 20, page = 1, status } = parsed.value;
+                    const notExposed = await denyIfCollectionNotExposed(collection);
+                    if (notExposed)
+                        return notExposed;
                     const params = {
                         limit: String(limit),
                         page: String(page),
@@ -455,17 +659,20 @@ export function createRevealuiContentServer(options) {
                     break;
                 }
                 case 'revealui_get_content': {
-                    const parsed = validateToolArgs(GetContentArgsSchema, request.params.arguments, toolName);
+                    const parsed = validateToolArgs(GetContentArgsSchema, rawArgs, toolName);
                     if (!parsed.ok)
-                        return parsed.error;
+                        return denied(parsed.error);
                     const { collection, id } = parsed.value;
+                    const notExposed = await denyIfCollectionNotExposed(collection);
+                    if (notExposed)
+                        return notExposed;
                     data = await apiGet(apiUrl, apiKey, `/api/${collection}/${id}`);
                     break;
                 }
                 case 'revealui_list_users': {
-                    const parsed = validateToolArgs(ListUsersArgsSchema, request.params.arguments, toolName);
+                    const parsed = validateToolArgs(ListUsersArgsSchema, rawArgs, toolName);
                     if (!parsed.ok)
-                        return parsed.error;
+                        return denied(parsed.error);
                     const { site_id, limit = 20, page = 1 } = parsed.value;
                     const params = {
                         limit: String(limit),
@@ -477,9 +684,9 @@ export function createRevealuiContentServer(options) {
                     break;
                 }
                 case 'revealui_site_stats': {
-                    const parsed = validateToolArgs(SiteStatsArgsSchema, request.params.arguments, toolName);
+                    const parsed = validateToolArgs(SiteStatsArgsSchema, rawArgs, toolName);
                     if (!parsed.ok)
-                        return parsed.error;
+                        return denied(parsed.error);
                     const { site_id } = parsed.value;
                     const params = {};
                     if (site_id)
@@ -488,11 +695,17 @@ export function createRevealuiContentServer(options) {
                     break;
                 }
                 default:
-                    return {
+                    return denied({
                         content: [{ type: 'text', text: `Error: Unknown tool: ${toolName}` }],
                         isError: true,
-                    };
+                    });
             }
+            // Read tools record the receipt AFTER a successful call and degrade on a
+            // write failure (the data is already fetched; the sink logs + marks the
+            // degraded write). Mutations already recorded their receipt above.
+            if (!mutating)
+                await writeReceipt('invoked');
+            await fireMeter(false);
             return {
                 content: [
                     {
@@ -511,6 +724,9 @@ export function createRevealuiContentServer(options) {
             };
         }
         catch (err) {
+            const httpStatus = err instanceof ApiRequestError ? err.status : undefined;
+            await writeReceipt('failed', { httpStatus });
+            await fireMeter(true);
             return {
                 content: [
                     { type: 'text', text: `Error: ${err instanceof Error ? err.message : String(err)}` },