@rubytech/create-maxy-code 0.1.461 → 0.1.463

package/payload/platform/plugins/voice-mirror/lib/mcp-spawn-tee/index.js

@@ -13,14 +13,15 @@
  *
  *   Claude Code CLI → shim (this file) = node running <real-entry> in-process
  *        stdin/stdout : untouched (JSON-RPC channel)
- *        stderr       : process.stderr.write teed → per-date + per-session + passthrough
+ *        stderr       : process.stderr.write teed → raw sink + passthrough
  *
- * Destinations (Task 706) — unchanged:
- *   - `${LOG_DIR}/mcp-<name>-stderr-<date>.log`  — per-date raw (back-compat;
- *     the in-process mcp-stderr-tee and the [mcp-init-error] probe read it).
- *   - `${LOG_DIR}/mcp-<name>-<SESSION_ID>.log`   — per-session raw + lifecycle
- *     lines. Authoritative sink. Absent when SESSION_ID is unset (enumeration
- *     spawn) — then the per-date file is the fallback.
+ * Destinations:
+ *   - `${LOG_DIR}/mcp-<name>-<SESSION_ID>.log`   — raw stderr + lifecycle lines.
+ *     The sole raw sink. Task 1721 retired the per-date twin: its date was
+ *     pinned at spawn, no reader ever parsed it, and mcp-stderr-tee wrote the
+ *     same file, so every line landed twice.
+ *   - `${LOG_DIR}/mcp-<name>-nosession.log`      — the same, for a spawn with
+ *     no SESSION_ID (enumeration). One fixed file per server.
  *   - `server.log` via the loopback log-ingest route — best-effort mirror of
  *     the [mcp-helper] lifecycle lines.
  *
@@ -49,13 +50,13 @@ const PLATFORM_PORT = process.env.PLATFORM_PORT;
 const ENTRY = process.argv[2];
 const SESSION_ID8 = SESSION_ID ? SESSION_ID.slice(0, 8) : "—";
 const spawnStamp = Date.now();
-// Per-session raw + lifecycle log (Task 706). Empty SESSION_ID (enumeration
-// spawn) → undefined, and the per-date file is the fallback.
-const perSessionPath = LOG_DIR && SESSION_ID
-    ? (0, node_path_1.resolve)(LOG_DIR, `mcp-${SERVER_NAME}-${SESSION_ID}.log`)
-    : undefined;
-const perDatePath = LOG_DIR
-    ? (0, node_path_1.resolve)(LOG_DIR, `mcp-${SERVER_NAME}-stderr-${new Date(spawnStamp).toISOString().slice(0, 10)}.log`)
+// The one raw sink (Task 1721). A sessionless spawn (rc-daemon stamps
+// SESSION_ID='' — rc-daemon.ts:513 — while still stamping LOG_DIR) shares one
+// fixed file per server rather than a date-named one: the date was never read
+// by any reader and named a process lifetime, not a day. Interleaved spawns in
+// the nosession file are separated by the [mcp-helper] op=spawn pid= lines.
+const rawSinkPath = LOG_DIR
+    ? (0, node_path_1.resolve)(LOG_DIR, SESSION_ID ? `mcp-${SERVER_NAME}-${SESSION_ID}.log` : `mcp-${SERVER_NAME}-nosession.log`)
     : undefined;
 // Rolling tail of entry stderr for op=exit. Capped so a chatty server cannot
 // grow the buffer without bound.
@@ -66,7 +67,7 @@ let exitEmitted = false;
 let exitSignal;
 // The real stderr writer, captured before the tee replaces it. Lifecycle lines
 // and stderr passthrough both go through this so they are never re-teed into
-// the per-date sink nor recursed back into the patched writer.
+// the raw sink nor recursed back into the patched writer.
 const rawStderrWrite = process.stderr.write.bind(process.stderr);
 // LOG_DIR is created once, lazily, on the first successful append — not per
 // chunk. teeWrite runs on the server's own stderr hot path now, so a per-call
@@ -115,7 +116,7 @@ function postToServerLog(suffix, level) {
 // log-ingest route rejects newlines).
 function emitLifecycle(suffix, level) {
     const line = `[mcp-helper] ${suffix}\n`;
-    appendSafe(perSessionPath, line);
+    appendSafe(rawSinkPath, line);
     try {
         rawStderrWrite(line);
     }
@@ -127,12 +128,11 @@ if (!ENTRY) {
     process.exit(2);
 }
 // Replace process.stderr.write with a tee: mirror every server stderr byte to
-// the per-date and per-session sinks, keep a rolling tail for op=exit, emit
+// the raw sink, keep a rolling tail for op=exit, emit
 // op=boot on the first bytes, then pass the write through to the real stderr.
 const teeWrite = ((...args) => {
     const chunk = args[0];
-    appendSafe(perDatePath, chunk); // per-date raw (back-compat)
-    appendSafe(perSessionPath, chunk); // per-session raw (Task 706)
+    appendSafe(rawSinkPath, chunk); // raw sink (Task 1721)
     const text = typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8");
     stderrTail = (stderrTail + text).slice(-TAIL_CAP);
     if (!bootEmitted) {

package/payload/platform/plugins/web-designer/PLUGIN.md

@@ -46,7 +46,7 @@ The plugin's only host coupling is `bin/resolve-cf.sh`. It resolves two things a
 
 Going live and the richer Cloudflare features reuse existing, proven surfaces rather than reimplementing them. The deploy references in `skills/web-design/references/` name each dependency:
 
-- **deploy + D1 forms** — inside maxy-code the canonical site tree is handed to `cloudflare:site-deploy` unchanged; standalone it follows the generic `wrangler pages deploy` sequence from the Cloudflare references. Extra form "buckets" are extra D1 tables and Pages Functions on the same pattern.
+- **deploy + D1 forms** — inside maxy-code the canonical site tree is handed to `cloudflare:site-deploy` unchanged; standalone it follows the generic `wrangler pages deploy` sequence from the Cloudflare references. On a multi-tenant install a **client account** takes neither path: it is denied the `pages` scope (`reason=not-house`) and publishes with `storage-broker:storage-pages-deploy`, which deploys house-side against a project the house has recorded to it. Extra form "buckets" are extra D1 tables and Pages Functions on the same pattern.
 - **gated access** — Cloudflare Access is composed from the Cloudflare Access references and the proven gating pattern; no new gating mechanics are authored here.
 - **e-signing** — routed to the `business-assistant:e-sign` skill, which owns signature capture, D1 recording, PDF stamping, and dispatch. This is a host dependency, not shipped self-contained in the marketplace edition.
 

package/payload/platform/plugins/web-designer/commands/website.md

@@ -52,6 +52,12 @@ site-tree root come from is resolved by `bin/resolve-cf.sh`:
   account directory automatically and hands the built tree to `cloudflare:site-deploy`
   unchanged. The skill triggers ("design me a website") remain the primary surface
   there; this command is an equivalent entry point.
+- **Inside maxy-code, as a client account on a multi-tenant install:** there is no
+  account Cloudflare token to resolve — the house holds the only master, and
+  `cf-token.sh` denies the `pages` scope (`reason=not-house`). The build is unchanged;
+  only going live differs. Publish with `storage-broker:storage-pages-deploy`, naming
+  the site folder and the Pages project. The project must already be recorded to the
+  account by the house.
 
 ## What you get back
 

package/payload/platform/plugins/web-designer/skills/web-design/references/deploy.md

@@ -8,6 +8,18 @@ tree per site; never deploy from a `.bak` clone or a stale sibling.
 
 This reference composes existing deploy mechanics. It does not fork them.
 
+## First: on a multi-tenant install, a client account publishes through the broker
+
+If this session is a **client account** on an install where the house
+holds the sole Cloudflare master (the post-1631 posture), neither path below will
+work: `cf-token.sh` denies the `pages` scope with `reason=not-house`, because the
+master is account-wide. Publish with `storage-pages-deploy` instead — it names the
+site folder and the project, and the deploy runs house-side. The project must
+already be recorded to this account by the house (`storage-pages-adopt`); if the
+tool answers `unregistered`, ask the house to record it rather than trying to mint
+a token. The two paths below are the **house account** and the **standalone**
+editions.
+
 ## Inside maxy-code: hand off to `cloudflare:site-deploy`
 
 When the host carries the `cloudflare` plugin, hand the canonical tree to the

package/payload/platform/plugins/whatsapp/lib/mcp-spawn-tee/index.js

@@ -13,14 +13,15 @@
  *
  *   Claude Code CLI → shim (this file) = node running <real-entry> in-process
  *        stdin/stdout : untouched (JSON-RPC channel)
- *        stderr       : process.stderr.write teed → per-date + per-session + passthrough
+ *        stderr       : process.stderr.write teed → raw sink + passthrough
  *
- * Destinations (Task 706) — unchanged:
- *   - `${LOG_DIR}/mcp-<name>-stderr-<date>.log`  — per-date raw (back-compat;
- *     the in-process mcp-stderr-tee and the [mcp-init-error] probe read it).
- *   - `${LOG_DIR}/mcp-<name>-<SESSION_ID>.log`   — per-session raw + lifecycle
- *     lines. Authoritative sink. Absent when SESSION_ID is unset (enumeration
- *     spawn) — then the per-date file is the fallback.
+ * Destinations:
+ *   - `${LOG_DIR}/mcp-<name>-<SESSION_ID>.log`   — raw stderr + lifecycle lines.
+ *     The sole raw sink. Task 1721 retired the per-date twin: its date was
+ *     pinned at spawn, no reader ever parsed it, and mcp-stderr-tee wrote the
+ *     same file, so every line landed twice.
+ *   - `${LOG_DIR}/mcp-<name>-nosession.log`      — the same, for a spawn with
+ *     no SESSION_ID (enumeration). One fixed file per server.
  *   - `server.log` via the loopback log-ingest route — best-effort mirror of
  *     the [mcp-helper] lifecycle lines.
  *
@@ -49,13 +50,13 @@ const PLATFORM_PORT = process.env.PLATFORM_PORT;
 const ENTRY = process.argv[2];
 const SESSION_ID8 = SESSION_ID ? SESSION_ID.slice(0, 8) : "—";
 const spawnStamp = Date.now();
-// Per-session raw + lifecycle log (Task 706). Empty SESSION_ID (enumeration
-// spawn) → undefined, and the per-date file is the fallback.
-const perSessionPath = LOG_DIR && SESSION_ID
-    ? (0, node_path_1.resolve)(LOG_DIR, `mcp-${SERVER_NAME}-${SESSION_ID}.log`)
-    : undefined;
-const perDatePath = LOG_DIR
-    ? (0, node_path_1.resolve)(LOG_DIR, `mcp-${SERVER_NAME}-stderr-${new Date(spawnStamp).toISOString().slice(0, 10)}.log`)
+// The one raw sink (Task 1721). A sessionless spawn (rc-daemon stamps
+// SESSION_ID='' — rc-daemon.ts:513 — while still stamping LOG_DIR) shares one
+// fixed file per server rather than a date-named one: the date was never read
+// by any reader and named a process lifetime, not a day. Interleaved spawns in
+// the nosession file are separated by the [mcp-helper] op=spawn pid= lines.
+const rawSinkPath = LOG_DIR
+    ? (0, node_path_1.resolve)(LOG_DIR, SESSION_ID ? `mcp-${SERVER_NAME}-${SESSION_ID}.log` : `mcp-${SERVER_NAME}-nosession.log`)
     : undefined;
 // Rolling tail of entry stderr for op=exit. Capped so a chatty server cannot
 // grow the buffer without bound.
@@ -66,7 +67,7 @@ let exitEmitted = false;
 let exitSignal;
 // The real stderr writer, captured before the tee replaces it. Lifecycle lines
 // and stderr passthrough both go through this so they are never re-teed into
-// the per-date sink nor recursed back into the patched writer.
+// the raw sink nor recursed back into the patched writer.
 const rawStderrWrite = process.stderr.write.bind(process.stderr);
 // LOG_DIR is created once, lazily, on the first successful append — not per
 // chunk. teeWrite runs on the server's own stderr hot path now, so a per-call
@@ -115,7 +116,7 @@ function postToServerLog(suffix, level) {
 // log-ingest route rejects newlines).
 function emitLifecycle(suffix, level) {
     const line = `[mcp-helper] ${suffix}\n`;
-    appendSafe(perSessionPath, line);
+    appendSafe(rawSinkPath, line);
     try {
         rawStderrWrite(line);
     }
@@ -127,12 +128,11 @@ if (!ENTRY) {
     process.exit(2);
 }
 // Replace process.stderr.write with a tee: mirror every server stderr byte to
-// the per-date and per-session sinks, keep a rolling tail for op=exit, emit
+// the raw sink, keep a rolling tail for op=exit, emit
 // op=boot on the first bytes, then pass the write through to the real stderr.
 const teeWrite = ((...args) => {
     const chunk = args[0];
-    appendSafe(perDatePath, chunk); // per-date raw (back-compat)
-    appendSafe(perSessionPath, chunk); // per-session raw (Task 706)
+    appendSafe(rawSinkPath, chunk); // raw sink (Task 1721)
     const text = typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8");
     stderrTail = (stderrTail + text).slice(-TAIL_CAP);
     if (!bootEmitted) {

package/payload/platform/plugins/work/lib/mcp-spawn-tee/index.js

@@ -13,14 +13,15 @@
  *
  *   Claude Code CLI → shim (this file) = node running <real-entry> in-process
  *        stdin/stdout : untouched (JSON-RPC channel)
- *        stderr       : process.stderr.write teed → per-date + per-session + passthrough
+ *        stderr       : process.stderr.write teed → raw sink + passthrough
  *
- * Destinations (Task 706) — unchanged:
- *   - `${LOG_DIR}/mcp-<name>-stderr-<date>.log`  — per-date raw (back-compat;
- *     the in-process mcp-stderr-tee and the [mcp-init-error] probe read it).
- *   - `${LOG_DIR}/mcp-<name>-<SESSION_ID>.log`   — per-session raw + lifecycle
- *     lines. Authoritative sink. Absent when SESSION_ID is unset (enumeration
- *     spawn) — then the per-date file is the fallback.
+ * Destinations:
+ *   - `${LOG_DIR}/mcp-<name>-<SESSION_ID>.log`   — raw stderr + lifecycle lines.
+ *     The sole raw sink. Task 1721 retired the per-date twin: its date was
+ *     pinned at spawn, no reader ever parsed it, and mcp-stderr-tee wrote the
+ *     same file, so every line landed twice.
+ *   - `${LOG_DIR}/mcp-<name>-nosession.log`      — the same, for a spawn with
+ *     no SESSION_ID (enumeration). One fixed file per server.
  *   - `server.log` via the loopback log-ingest route — best-effort mirror of
  *     the [mcp-helper] lifecycle lines.
  *
@@ -49,13 +50,13 @@ const PLATFORM_PORT = process.env.PLATFORM_PORT;
 const ENTRY = process.argv[2];
 const SESSION_ID8 = SESSION_ID ? SESSION_ID.slice(0, 8) : "—";
 const spawnStamp = Date.now();
-// Per-session raw + lifecycle log (Task 706). Empty SESSION_ID (enumeration
-// spawn) → undefined, and the per-date file is the fallback.
-const perSessionPath = LOG_DIR && SESSION_ID
-    ? (0, node_path_1.resolve)(LOG_DIR, `mcp-${SERVER_NAME}-${SESSION_ID}.log`)
-    : undefined;
-const perDatePath = LOG_DIR
-    ? (0, node_path_1.resolve)(LOG_DIR, `mcp-${SERVER_NAME}-stderr-${new Date(spawnStamp).toISOString().slice(0, 10)}.log`)
+// The one raw sink (Task 1721). A sessionless spawn (rc-daemon stamps
+// SESSION_ID='' — rc-daemon.ts:513 — while still stamping LOG_DIR) shares one
+// fixed file per server rather than a date-named one: the date was never read
+// by any reader and named a process lifetime, not a day. Interleaved spawns in
+// the nosession file are separated by the [mcp-helper] op=spawn pid= lines.
+const rawSinkPath = LOG_DIR
+    ? (0, node_path_1.resolve)(LOG_DIR, SESSION_ID ? `mcp-${SERVER_NAME}-${SESSION_ID}.log` : `mcp-${SERVER_NAME}-nosession.log`)
     : undefined;
 // Rolling tail of entry stderr for op=exit. Capped so a chatty server cannot
 // grow the buffer without bound.
@@ -66,7 +67,7 @@ let exitEmitted = false;
 let exitSignal;
 // The real stderr writer, captured before the tee replaces it. Lifecycle lines
 // and stderr passthrough both go through this so they are never re-teed into
-// the per-date sink nor recursed back into the patched writer.
+// the raw sink nor recursed back into the patched writer.
 const rawStderrWrite = process.stderr.write.bind(process.stderr);
 // LOG_DIR is created once, lazily, on the first successful append — not per
 // chunk. teeWrite runs on the server's own stderr hot path now, so a per-call
@@ -115,7 +116,7 @@ function postToServerLog(suffix, level) {
 // log-ingest route rejects newlines).
 function emitLifecycle(suffix, level) {
     const line = `[mcp-helper] ${suffix}\n`;
-    appendSafe(perSessionPath, line);
+    appendSafe(rawSinkPath, line);
     try {
         rawStderrWrite(line);
     }
@@ -127,12 +128,11 @@ if (!ENTRY) {
     process.exit(2);
 }
 // Replace process.stderr.write with a tee: mirror every server stderr byte to
-// the per-date and per-session sinks, keep a rolling tail for op=exit, emit
+// the raw sink, keep a rolling tail for op=exit, emit
 // op=boot on the first bytes, then pass the write through to the real stderr.
 const teeWrite = ((...args) => {
     const chunk = args[0];
-    appendSafe(perDatePath, chunk); // per-date raw (back-compat)
-    appendSafe(perSessionPath, chunk); // per-session raw (Task 706)
+    appendSafe(rawSinkPath, chunk); // raw sink (Task 1721)
     const text = typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8");
     stderrTail = (stderrTail + text).slice(-TAIL_CAP);
     if (!bootEmitted) {

package/payload/platform/plugins/workflows/lib/mcp-spawn-tee/index.js

@@ -13,14 +13,15 @@
  *
  *   Claude Code CLI → shim (this file) = node running <real-entry> in-process
  *        stdin/stdout : untouched (JSON-RPC channel)
- *        stderr       : process.stderr.write teed → per-date + per-session + passthrough
+ *        stderr       : process.stderr.write teed → raw sink + passthrough
  *
- * Destinations (Task 706) — unchanged:
- *   - `${LOG_DIR}/mcp-<name>-stderr-<date>.log`  — per-date raw (back-compat;
- *     the in-process mcp-stderr-tee and the [mcp-init-error] probe read it).
- *   - `${LOG_DIR}/mcp-<name>-<SESSION_ID>.log`   — per-session raw + lifecycle
- *     lines. Authoritative sink. Absent when SESSION_ID is unset (enumeration
- *     spawn) — then the per-date file is the fallback.
+ * Destinations:
+ *   - `${LOG_DIR}/mcp-<name>-<SESSION_ID>.log`   — raw stderr + lifecycle lines.
+ *     The sole raw sink. Task 1721 retired the per-date twin: its date was
+ *     pinned at spawn, no reader ever parsed it, and mcp-stderr-tee wrote the
+ *     same file, so every line landed twice.
+ *   - `${LOG_DIR}/mcp-<name>-nosession.log`      — the same, for a spawn with
+ *     no SESSION_ID (enumeration). One fixed file per server.
  *   - `server.log` via the loopback log-ingest route — best-effort mirror of
  *     the [mcp-helper] lifecycle lines.
  *
@@ -49,13 +50,13 @@ const PLATFORM_PORT = process.env.PLATFORM_PORT;
 const ENTRY = process.argv[2];
 const SESSION_ID8 = SESSION_ID ? SESSION_ID.slice(0, 8) : "—";
 const spawnStamp = Date.now();
-// Per-session raw + lifecycle log (Task 706). Empty SESSION_ID (enumeration
-// spawn) → undefined, and the per-date file is the fallback.
-const perSessionPath = LOG_DIR && SESSION_ID
-    ? (0, node_path_1.resolve)(LOG_DIR, `mcp-${SERVER_NAME}-${SESSION_ID}.log`)
-    : undefined;
-const perDatePath = LOG_DIR
-    ? (0, node_path_1.resolve)(LOG_DIR, `mcp-${SERVER_NAME}-stderr-${new Date(spawnStamp).toISOString().slice(0, 10)}.log`)
+// The one raw sink (Task 1721). A sessionless spawn (rc-daemon stamps
+// SESSION_ID='' — rc-daemon.ts:513 — while still stamping LOG_DIR) shares one
+// fixed file per server rather than a date-named one: the date was never read
+// by any reader and named a process lifetime, not a day. Interleaved spawns in
+// the nosession file are separated by the [mcp-helper] op=spawn pid= lines.
+const rawSinkPath = LOG_DIR
+    ? (0, node_path_1.resolve)(LOG_DIR, SESSION_ID ? `mcp-${SERVER_NAME}-${SESSION_ID}.log` : `mcp-${SERVER_NAME}-nosession.log`)
     : undefined;
 // Rolling tail of entry stderr for op=exit. Capped so a chatty server cannot
 // grow the buffer without bound.
@@ -66,7 +67,7 @@ let exitEmitted = false;
 let exitSignal;
 // The real stderr writer, captured before the tee replaces it. Lifecycle lines
 // and stderr passthrough both go through this so they are never re-teed into
-// the per-date sink nor recursed back into the patched writer.
+// the raw sink nor recursed back into the patched writer.
 const rawStderrWrite = process.stderr.write.bind(process.stderr);
 // LOG_DIR is created once, lazily, on the first successful append — not per
 // chunk. teeWrite runs on the server's own stderr hot path now, so a per-call
@@ -115,7 +116,7 @@ function postToServerLog(suffix, level) {
 // log-ingest route rejects newlines).
 function emitLifecycle(suffix, level) {
     const line = `[mcp-helper] ${suffix}\n`;
-    appendSafe(perSessionPath, line);
+    appendSafe(rawSinkPath, line);
     try {
         rawStderrWrite(line);
     }
@@ -127,12 +128,11 @@ if (!ENTRY) {
     process.exit(2);
 }
 // Replace process.stderr.write with a tee: mirror every server stderr byte to
-// the per-date and per-session sinks, keep a rolling tail for op=exit, emit
+// the raw sink, keep a rolling tail for op=exit, emit
 // op=boot on the first bytes, then pass the write through to the real stderr.
 const teeWrite = ((...args) => {
     const chunk = args[0];
-    appendSafe(perDatePath, chunk); // per-date raw (back-compat)
-    appendSafe(perSessionPath, chunk); // per-session raw (Task 706)
+    appendSafe(rawSinkPath, chunk); // raw sink (Task 1721)
     const text = typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8");
     stderrTail = (stderrTail + text).slice(-TAIL_CAP);
     if (!bootEmitted) {

package/payload/platform/scripts/__tests__/logs-rotate.test.sh

@@ -159,12 +159,12 @@ case_purge_does_not_touch_server_log() {
   rm -rf "$d"; return 0
 }
 
-case_mcp_stderr_live_file_size_rotates() {
+case_mcp_sink_live_file_size_rotates() {
   local d; d="$(mk_logs_dir)"
-  mk_file_of_size "$d/mcp-memory-stderr-2026-07-17.log" $((65 * 1024 * 1024))
+  mk_file_of_size "$d/mcp-memory-sess-abc.log" $((65 * 1024 * 1024))
   "$ROTATE" "$d" >/dev/null 2>&1
-  [ -f "$d/mcp-memory-stderr-2026-07-17.log.1.gz" ] \
-    || { echo "  live mcp stderr log was not size-rotated"; rm -rf "$d"; return 1; }
+  [ -f "$d/mcp-memory-sess-abc.log.1.gz" ] \
+    || { echo "  live mcp sink was not size-rotated"; rm -rf "$d"; return 1; }
   rm -rf "$d"; return 0
 }
 
@@ -200,22 +200,26 @@ case_gzip_failure_preserves_generations() {
   rm -rf "$d" "$bin"; return $fail
 }
 
-# The mcp stderr tee opens its file at process start and holds the stream for the
-# process's whole life, writing ONLY when the server emits stderr — which a
-# healthy server does not do for days. So a live file's mtime DOES go stale, and
-# deleting it sends every later stderr write to an unlinked inode: invisible
-# exactly when the fault you are chasing finally appears. Never purge these.
-case_never_purges_mcp_stderr_by_age() {
+# Task 1721 retired the per-date file and with it mcp-stderr-tee's held write
+# stream. Every remaining mcp sink is appendFileSync, so purging one is safe for
+# the same reason purging rc-child is: no fd is held, and the next write simply
+# recreates the file. The stale `mcp-*-stderr-<date>.log` orphans left by the old
+# writers age out through the same glob.
+case_purges_mcp_sink_older_than_seven_days() {
   local d; d="$(mk_logs_dir)"
-  echo quiet > "$d/mcp-memory-stderr-2026-01-01.log"
-  backdate "$d/mcp-memory-stderr-2026-01-01.log" 90
-  echo x | gzip -c > "$d/mcp-memory-stderr-2026-01-01.log.1.gz"
-  backdate "$d/mcp-memory-stderr-2026-01-01.log.1.gz" 90
+  echo old > "$d/mcp-memory-sess-old.log";  backdate "$d/mcp-memory-sess-old.log" 9
+  echo x | gzip -c > "$d/mcp-memory-sess-old.log.1.gz"; backdate "$d/mcp-memory-sess-old.log.1.gz" 9
+  echo legacy > "$d/mcp-memory-stderr-2026-01-01.log"; backdate "$d/mcp-memory-stderr-2026-01-01.log" 90
+  echo new > "$d/mcp-memory-sess-new.log"   # today
   "$ROTATE" "$d" >/dev/null 2>&1
-  [ -f "$d/mcp-memory-stderr-2026-01-01.log" ] \
-    || { echo "  a 90-day-stale mcp stderr log was purged — it may still be held open"; rm -rf "$d"; return 1; }
-  [ -f "$d/mcp-memory-stderr-2026-01-01.log.1.gz" ] \
-    || { echo "  an mcp generation was purged by age"; rm -rf "$d"; return 1; }
+  [ ! -e "$d/mcp-memory-sess-old.log" ] \
+    || { echo "  9-day-old mcp sink survived"; rm -rf "$d"; return 1; }
+  [ ! -e "$d/mcp-memory-sess-old.log.1.gz" ] \
+    || { echo "  9-day-old mcp generation survived"; rm -rf "$d"; return 1; }
+  [ ! -e "$d/mcp-memory-stderr-2026-01-01.log" ] \
+    || { echo "  retired per-date orphan was not swept"; rm -rf "$d"; return 1; }
+  [ -f "$d/mcp-memory-sess-new.log" ] \
+    || { echo "  today's mcp sink was purged"; rm -rf "$d"; return 1; }
   rm -rf "$d"; return 0
 }
 
@@ -235,7 +239,7 @@ case_rc_child_size_rotates() {
 }
 
 run_case "gzip failure preserves generations"    case_gzip_failure_preserves_generations
-run_case "never purges mcp stderr by age"        case_never_purges_mcp_stderr_by_age
+run_case "purges mcp sink older than 7 days"     case_purges_mcp_sink_older_than_seven_days
 run_case "rc-child size-rotates"                 case_rc_child_size_rotates
 
 run_case "under threshold is a no-op"            case_under_threshold_is_noop
@@ -248,7 +252,7 @@ run_case "missing logs dir is a no-op, exit 0"   case_missing_logs_dir_is_noop_e
 run_case "lock released on exit"                 case_lock_released_on_exit
 run_case "purges rc-child older than 7 days"     case_purges_rc_child_older_than_seven_days
 run_case "purge does not touch server.log"       case_purge_does_not_touch_server_log
-run_case "mcp stderr live file size-rotates"     case_mcp_stderr_live_file_size_rotates
+run_case "mcp sink live file size-rotates"       case_mcp_sink_live_file_size_rotates
 
 echo ""
 echo "===================="

package/payload/platform/scripts/logs-read.sh

@@ -861,6 +861,28 @@ def collect_events(path, source, events, is_sub, rejects=None):
                 events.append((ts, source, 'text', 'user: ' + clip(content, 160)))
     return n_err
 
+def version_timeline(path):
+    """Task 1724 — every JSONL row carries the CLI `version` that wrote it, and
+    this reader dropped the field. A version change mid-session means the binary
+    was re-executed (a resume): in the 1724 incident the 2.1.210 -> 2.1.212 flip
+    at the resume boundary was the single most load-bearing fact in the whole
+    investigation, and no platform instrument showed it — it was found by hand.
+
+    Records every TRANSITION rather than the distinct set, so a flip back
+    (A -> B -> A) is still visible; collapsing to a set would hide it."""
+    out = []
+    last = None
+    for r in load_jsonl(path):
+        if not isinstance(r, dict):
+            continue
+        v = r.get('version')
+        if not isinstance(v, str) or not v or v == last:
+            continue
+        out.append((v, r.get('timestamp') or '-'))
+        last = v
+    return out
+
+
 def timeline(projects_root, sessions_dir, key):
     uuid, parent_path, via = resolve_uuid(projects_root, sessions_dir, key)
     if not uuid:
@@ -880,6 +902,15 @@ def timeline(projects_root, sessions_dir, key):
     print('# session %s  (resolved via %s)' % (uuid, via))
     print('#   parent:    %s' % (parent_path or '(no parent transcript on disk)'))
     print('#   subagents: %d   subagent-errors: %d' % (sub_count, err_count))
+    # Task 1724 — the CLI version that wrote each row. One version is the normal
+    # case and prints flat; a change means the binary was re-executed mid-session,
+    # which is worth a loud line because it silently moves every tool's behaviour.
+    vers = version_timeline(parent_path) if parent_path and os.path.exists(parent_path) else []
+    if len(vers) == 1:
+        print('#   cli:       %s' % vers[0][0])
+    elif len(vers) > 1:
+        print('#   cli:       %s   (%d change(s) — the binary was re-executed mid-session)'
+              % ('  ->  '.join('%s @ %s' % (v, ts) for v, ts in vers), len(vers) - 1))
     # Repetition is the diagnostic fact: one fat-fingered call is a typo, N
     # identical ones against a single tool is a wedged loop. Counting it here
     # makes that one greppable line instead of N unrelated ones.

package/payload/platform/scripts/logs-rotate.sh

@@ -151,8 +151,9 @@ done
 # Globbed size targets. nullglob so a brand with none of these yet does not try
 # to rotate a literal '*' path.
 #
-# mcp-*-stderr-*.log: the tee holds a live write stream, so this is the ONLY
-# bound it gets here — see the purge note below for why it is never age-purged.
+# mcp-*.log: the raw sinks (mcp-<server>-<sessionId>.log, mcp-<server>-nosession.log)
+# plus any stale mcp-<server>-stderr-<date>.log orphan from before Task 1721. All
+# are appendFileSync writers holding no fd.
 #
 # rc-child-*.log: its 16 MiB writer cap does NOT hold. `written`
 # (rc-child-log.ts:33) is in-memory per manager process, so a manager restart
@@ -161,28 +162,29 @@ done
 # mtime forever, so the age purge below never reaches it — without size rotation
 # it is genuinely unbounded.
 shopt -s nullglob
-for f in "$LOGS_DIR"/mcp-*-stderr-*.log "$LOGS_DIR"/rc-child-*.log; do
+for f in "$LOGS_DIR"/mcp-*.log "$LOGS_DIR"/rc-child-*.log; do
   rotate_file "$f"
 done
 shopt -u nullglob
 
-# Age purge — rc-child only.
+# Age purge — rc-child and the mcp sinks.
 #
-# rc-child-*.log is one file per session and the set grows without bound (100 on
-# sitedesk-code). Purging it is SAFE because rc-child-log.ts:51 writes with
-# appendFileSync: no fd is held, so a purged file is simply recreated on the
-# next write.
+# rc-child-*.log and mcp-<server>-<sessionId>.log are one file per session and
+# grow without bound (100 rc-child on sitedesk-code). mcp-<server>-nosession.log
+# is one fixed file per server instead, so the set never grows; like a live
+# rc-child its mtime stays fresh, so the age purge reaps only its rotated
+# generations and size rotation above is its real bound.
 #
-# mcp-*-stderr-*.log is deliberately NOT purged, though an earlier draft did.
-# The tee (mcp-stderr-tee/src/index.ts:88) opens a createWriteStream at process
-# start and holds it for the process's whole life, writing only when the server
-# emits stderr — which a healthy server does not do for days. So a LIVE file's
-# mtime DOES go stale, and deleting it would send every later stderr write to an
-# unlinked inode: invisible exactly when the fault you are chasing finally
-# appears, and its disk unreclaimed until the process exits. Bounding these by
-# age needs live-vs-dead discrimination, which needs the writer to stop pinning
-# its date at boot — that is Task 1721. Size rotation above is safe regardless,
-# because truncate-in-place is precisely what a held fd tolerates.
+# Purging is SAFE because every one of them writes with appendFileSync
+# (rc-child-log.ts:51; mcp-spawn-tee appendSafe): no fd is held, so a purged
+# file is simply recreated on the next write.
+#
+# An earlier draft of 1706 could not purge mcp-*, because mcp-stderr-tee opened
+# a createWriteStream at process start and held it for the process's whole life.
+# A live file's mtime went stale, so unlinking it sent every later stderr write
+# to an inode no one could read. Task 1721 retired that held stream along with
+# the per-date file it wrote, which is what makes this purge safe — the hazard
+# was the held fd, not the naming.
 #
 # The pattern is `.log*` so a purged session's rotated .gz generations go too.
 # `find` matches each path by its own mtime — there is no sibling relationship —
@@ -200,5 +202,6 @@ purge_old() {
 }
 
 purge_old 'rc-child-*.log*'
+purge_old 'mcp-*.log*'
 
 exit 0

package/payload/platform/services/claude-session-manager/dist/canonical-tool-names.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-tool-names.generated.d.ts","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAQA,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAuB7C,CAAA;AAED,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAoStD,CAAA"}
+{"version":3,"file":"canonical-tool-names.generated.d.ts","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAQA,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAuB7C,CAAA;AAED,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAsStD,CAAA"}

package/payload/platform/services/claude-session-manager/dist/canonical-tool-names.generated.js

@@ -274,6 +274,8 @@ export const CANONICAL_MAXY_TOOL_NAMES = [
     "mcp__plugin_storage-broker_storage-broker__storage-d1-create",
     "mcp__plugin_storage-broker_storage-broker__storage-d1-list",
     "mcp__plugin_storage-broker_storage-broker__storage-d1-query",
+    "mcp__plugin_storage-broker_storage-broker__storage-pages-adopt",
+    "mcp__plugin_storage-broker_storage-broker__storage-pages-deploy",
     "mcp__plugin_storage-broker_storage-broker__storage-r2-bucket-create",
     "mcp__plugin_storage-broker_storage-broker__storage-r2-bucket-list",
     "mcp__plugin_storage-broker_storage-broker__storage-r2-object-delete",

package/payload/platform/services/claude-session-manager/dist/canonical-tool-names.generated.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-tool-names.generated.js","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,kEAAkE;AAClE,yDAAyD;AACzD,kFAAkF;AAClF,EAAE;AACF,yEAAyE;AACzE,6DAA6D;AAE7D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,OAAO;IACP,KAAK;IACL,SAAS;IACT,WAAW;IACX,UAAU;IACV,OAAO;IACP,YAAY;IACZ,OAAO;IACP,cAAc;IACd,UAAU;IACV,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,gBAAgB;IAChB,UAAU;IACV,SAAS;IACT,cAAc;IACd,UAAU;IACV,MAAM;IACN,WAAW;CACZ,CAAA;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,yCAAyC;IACzC,yCAAyC;IACzC,kDAAkD;IAClD,sDAAsD;IACtD,yCAAyC;IACzC,yCAAyC;IACzC,uCAAuC;IACvC,wCAAwC;IACxC,iDAAiD;IACjD,yCAAyC;IACzC,iDAAiD;IACjD,yCAAyC;IACzC,sCAAsC;IACtC,yCAAyC;IACzC,wCAAwC;IACxC,oCAAoC;IACpC,yCAAyC;IACzC,qCAAqC;IACrC,uCAAuC;IACvC,2CAA2C;IAC3C,4CAA4C;IAC5C,qCAAqC;IACrC,yCAAyC;IACzC,4CAA4C;IAC5C,oCAAoC;IACpC,sCAAsC;IACtC,0CAA0C;IAC1C,uCAAuC;IACvC,sCAAsC;IACtC,sDAAsD;IACtD,mDAAmD;IACnD,6CAA6C;IAC7C,wCAAwC;IACxC,yCAAyC;IACzC,qCAAqC;IACrC,uCAAuC;IACvC,sCAAsC;IACtC,wCAAwC;IACxC,+BAA+B;IAC/B,qCAAqC;IACrC,sCAAsC;IACtC,yCAAyC;IACzC,4CAA4C;IAC5C,uDAAuD;IACvD,+CAA+C;IAC/C,2CAA2C;IAC3C,gDAAgD;IAChD,oDAAoD;IACpD,4CAA4C;IAC5C,+CAA+C;IAC/C,+CAA+C;IAC/C,gDAAgD;IAChD,6CAA6C;IAC7C,6CAA6C;IAC7C,iDAAiD;IACjD,oDAAoD;IACpD,+CAA+C;IAC/C,2CAA2C;IAC3C,2CAA2C;IAC3C,+CAA+C;IAC/C,iDAAiD;IACjD,uDAAuD;IACvD,iDAAiD;IACjD,qDAAqD;IACrD,+CAA+C;IAC/C,+CAA+C;IAC/C,8CAA8C;IAC9C,+CAA+C;IAC/C,6CAA6C;IAC7C,+CAA+C;IAC/C,+CAA+C;IAC/C,6CAA6C;IAC7C,6CAA6C;IAC7C,uCAAuC;IACvC,sCAAsC;IACtC,2CAA2C;IAC3C,2CAA2C;IAC3C,sCAAsC;IACtC,2CAA2C;IAC3C,4CAA4C;IAC5C,uCAAuC;IACvC,4CAA4C;IAC5C,8CAA8C;IAC9C,qCAAqC;IACrC,sCAAsC;IACtC,uCAAuC;IACvC,qCAAqC;IACrC,sCAAsC;IACtC,uCAAuC;IACvC,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,+CAA+C;IAC/C,qDAAqD;IACrD,sDAAsD;IACtD,uDAAuD;IACvD,wDAAwD;IACxD,sDAAsD;IACtD,mDAAmD;IACnD,oDAAoD;IACpD,sDAAsD;IACtD,iEAAiE;IACjE,2DAA2D;IAC3D,yDAAyD;IACzD,yDAAyD;IACzD,sDAAsD;IACtD,uDAAuD;IACvD,yDAAyD;IACzD,sDAAsD;IACtD,uDAAuD;IACvD,2DAA2D;IAC3D,0DAA0D;IAC1D,wDAAwD;IACxD,qDAAqD;IACrD,sDAAsD;IACtD,gEAAgE;IAChE,qDAAqD;IACrD,oDAAoD;IACpD,iDAAiD;IACjD,kDAAkD;IAClD,wDAAwD;IACxD,oDAAoD;IACpD,wDAAwD;IACxD,wDAAwD;IACxD,qDAAqD;IACrD,uDAAuD;IACvD,sDAAsD;IACtD,mDAAmD;IACnD,oDAAoD;IACpD,qDAAqD;IACrD,kDAAkD;IAClD,mDAAmD;IACnD,qDAAqD;IACrD,0DAA0D;IAC1D,wDAAwD;IACxD,0DAA0D;IAC1D,sDAAsD;IACtD,sDAAsD;IACtD,sDAAsD;IACtD,mDAAmD;IACnD,8DAA8D;IAC9D,sDAAsD;IACtD,iEAAiE;IACjE,kEAAkE;IAClE,6DAA6D;IAC7D,8CAA8C;IAC9C,wDAAwD;IACxD,gDAAgD;IAChD,qDAAqD;IACrD,sDAAsD;IACtD,wDAAwD;IACxD,wCAAwC;IACxC,wCAAwC;IACxC,iDAAiD;IACjD,wDAAwD;IACxD,0DAA0D;IAC1D,0CAA0C;IAC1C,6CAA6C;IAC7C,wCAAwC;IACxC,mDAAmD;IACnD,+CAA+C;IAC/C,mDAAmD;IACnD,0CAA0C;IAC1C,kDAAkD;IAClD,8CAA8C;IAC9C,oDAAoD;IACpD,kDAAkD;IAClD,+CAA+C;IAC/C,mDAAmD;IACnD,2CAA2C;IAC3C,qDAAqD;IACrD,+CAA+C;IAC/C,sDAAsD;IACtD,gDAAgD;IAChD,2CAA2C;IAC3C,gDAAgD;IAChD,0CAA0C;IAC1C,0CAA0C;IAC1C,kDAAkD;IAClD,yCAAyC;IACzC,kDAAkD;IAClD,2CAA2C;IAC3C,yCAAyC;IACzC,2CAA2C;IAC3C,4CAA4C;IAC5C,mDAAmD;IACnD,uDAAuD;IACvD,4DAA4D;IAC5D,sDAAsD;IACtD,sDAAsD;IACtD,qDAAqD;IACrD,wDAAwD;IACxD,oDAAoD;IACpD,uDAAuD;IACvD,sDAAsD;IACtD,oDAAoD;IACpD,4CAA4C;IAC5C,iDAAiD;IACjD,iDAAiD;IACjD,sDAAsD;IACtD,kDAAkD;IAClD,sDAAsD;IACtD,gDAAgD;IAChD,uDAAuD;IACvD,iDAAiD;IACjD,kDAAkD;IAClD,gDAAgD;IAChD,mDAAmD;IACnD,mDAAmD;IACnD,6DAA6D;IAC7D,2DAA2D;IAC3D,2DAA2D;IAC3D,+DAA+D;IAC/D,+DAA+D;IAC/D,+DAA+D;IAC/D,0DAA0D;IAC1D,6DAA6D;IAC7D,6DAA6D;IAC7D,8DAA8D;IAC9D,8DAA8D;IAC9D,8DAA8D;IAC9D,qDAAqD;IACrD,sDAAsD;IACtD,2DAA2D;IAC3D,iDAAiD;IACjD,sDAAsD;IACtD,uDAAuD;IACvD,yDAAyD;IACzD,oDAAoD;IACpD,iEAAiE;IACjE,mDAAmD;IACnD,wDAAwD;IACxD,iDAAiD;IACjD,wDAAwD;IACxD,kDAAkD;IAClD,oDAAoD;IACpD,iDAAiD;IACjD,8DAA8D;IAC9D,4DAA4D;IAC5D,6DAA6D;IAC7D,qEAAqE;IACrE,mEAAmE;IACnE,qEAAqE;IACrE,kEAAkE;IAClE,mEAAmE;IACnE,kEAAkE;IAClE,wCAAwC;IACxC,gDAAgD;IAChD,0DAA0D;IAC1D,sCAAsC;IACtC,6DAA6D;IAC7D,kEAAkE;IAClE,8DAA8D;IAC9D,oEAAoE;IACpE,0DAA0D;IAC1D,kDAAkD;IAClD,gDAAgD;IAChD,kEAAkE;IAClE,uDAAuD;IACvD,oDAAoD;IACpD,oDAAoD;IACpD,qDAAqD;IACrD,oDAAoD;IACpD,kDAAkD;IAClD,oDAAoD;IACpD,gDAAgD;IAChD,yCAAyC;IACzC,uCAAuC;IACvC,oCAAoC;IACpC,qCAAqC;IACrC,uCAAuC;IACvC,qCAAqC;IACrC,yCAAyC;IACzC,qCAAqC;IACrC,sCAAsC;IACtC,oCAAoC;IACpC,iCAAiC;IACjC,kCAAkC;IAClC,mCAAmC;IACnC,oCAAoC;IACpC,oCAAoC;IACpC,kDAAkD;IAClD,kDAAkD;IAClD,mDAAmD;IACnD,+CAA+C;IAC/C,gDAAgD;IAChD,gDAAgD;IAChD,kDAAkD;IAClD,oDAAoD;CACrD,CAAA"}
+{"version":3,"file":"canonical-tool-names.generated.js","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,kEAAkE;AAClE,yDAAyD;AACzD,kFAAkF;AAClF,EAAE;AACF,yEAAyE;AACzE,6DAA6D;AAE7D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,OAAO;IACP,KAAK;IACL,SAAS;IACT,WAAW;IACX,UAAU;IACV,OAAO;IACP,YAAY;IACZ,OAAO;IACP,cAAc;IACd,UAAU;IACV,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,gBAAgB;IAChB,UAAU;IACV,SAAS;IACT,cAAc;IACd,UAAU;IACV,MAAM;IACN,WAAW;CACZ,CAAA;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,yCAAyC;IACzC,yCAAyC;IACzC,kDAAkD;IAClD,sDAAsD;IACtD,yCAAyC;IACzC,yCAAyC;IACzC,uCAAuC;IACvC,wCAAwC;IACxC,iDAAiD;IACjD,yCAAyC;IACzC,iDAAiD;IACjD,yCAAyC;IACzC,sCAAsC;IACtC,yCAAyC;IACzC,wCAAwC;IACxC,oCAAoC;IACpC,yCAAyC;IACzC,qCAAqC;IACrC,uCAAuC;IACvC,2CAA2C;IAC3C,4CAA4C;IAC5C,qCAAqC;IACrC,yCAAyC;IACzC,4CAA4C;IAC5C,oCAAoC;IACpC,sCAAsC;IACtC,0CAA0C;IAC1C,uCAAuC;IACvC,sCAAsC;IACtC,sDAAsD;IACtD,mDAAmD;IACnD,6CAA6C;IAC7C,wCAAwC;IACxC,yCAAyC;IACzC,qCAAqC;IACrC,uCAAuC;IACvC,sCAAsC;IACtC,wCAAwC;IACxC,+BAA+B;IAC/B,qCAAqC;IACrC,sCAAsC;IACtC,yCAAyC;IACzC,4CAA4C;IAC5C,uDAAuD;IACvD,+CAA+C;IAC/C,2CAA2C;IAC3C,gDAAgD;IAChD,oDAAoD;IACpD,4CAA4C;IAC5C,+CAA+C;IAC/C,+CAA+C;IAC/C,gDAAgD;IAChD,6CAA6C;IAC7C,6CAA6C;IAC7C,iDAAiD;IACjD,oDAAoD;IACpD,+CAA+C;IAC/C,2CAA2C;IAC3C,2CAA2C;IAC3C,+CAA+C;IAC/C,iDAAiD;IACjD,uDAAuD;IACvD,iDAAiD;IACjD,qDAAqD;IACrD,+CAA+C;IAC/C,+CAA+C;IAC/C,8CAA8C;IAC9C,+CAA+C;IAC/C,6CAA6C;IAC7C,+CAA+C;IAC/C,+CAA+C;IAC/C,6CAA6C;IAC7C,6CAA6C;IAC7C,uCAAuC;IACvC,sCAAsC;IACtC,2CAA2C;IAC3C,2CAA2C;IAC3C,sCAAsC;IACtC,2CAA2C;IAC3C,4CAA4C;IAC5C,uCAAuC;IACvC,4CAA4C;IAC5C,8CAA8C;IAC9C,qCAAqC;IACrC,sCAAsC;IACtC,uCAAuC;IACvC,qCAAqC;IACrC,sCAAsC;IACtC,uCAAuC;IACvC,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,+CAA+C;IAC/C,qDAAqD;IACrD,sDAAsD;IACtD,uDAAuD;IACvD,wDAAwD;IACxD,sDAAsD;IACtD,mDAAmD;IACnD,oDAAoD;IACpD,sDAAsD;IACtD,iEAAiE;IACjE,2DAA2D;IAC3D,yDAAyD;IACzD,yDAAyD;IACzD,sDAAsD;IACtD,uDAAuD;IACvD,yDAAyD;IACzD,sDAAsD;IACtD,uDAAuD;IACvD,2DAA2D;IAC3D,0DAA0D;IAC1D,wDAAwD;IACxD,qDAAqD;IACrD,sDAAsD;IACtD,gEAAgE;IAChE,qDAAqD;IACrD,oDAAoD;IACpD,iDAAiD;IACjD,kDAAkD;IAClD,wDAAwD;IACxD,oDAAoD;IACpD,wDAAwD;IACxD,wDAAwD;IACxD,qDAAqD;IACrD,uDAAuD;IACvD,sDAAsD;IACtD,mDAAmD;IACnD,oDAAoD;IACpD,qDAAqD;IACrD,kDAAkD;IAClD,mDAAmD;IACnD,qDAAqD;IACrD,0DAA0D;IAC1D,wDAAwD;IACxD,0DAA0D;IAC1D,sDAAsD;IACtD,sDAAsD;IACtD,sDAAsD;IACtD,mDAAmD;IACnD,8DAA8D;IAC9D,sDAAsD;IACtD,iEAAiE;IACjE,kEAAkE;IAClE,6DAA6D;IAC7D,8CAA8C;IAC9C,wDAAwD;IACxD,gDAAgD;IAChD,qDAAqD;IACrD,sDAAsD;IACtD,wDAAwD;IACxD,wCAAwC;IACxC,wCAAwC;IACxC,iDAAiD;IACjD,wDAAwD;IACxD,0DAA0D;IAC1D,0CAA0C;IAC1C,6CAA6C;IAC7C,wCAAwC;IACxC,mDAAmD;IACnD,+CAA+C;IAC/C,mDAAmD;IACnD,0CAA0C;IAC1C,kDAAkD;IAClD,8CAA8C;IAC9C,oDAAoD;IACpD,kDAAkD;IAClD,+CAA+C;IAC/C,mDAAmD;IACnD,2CAA2C;IAC3C,qDAAqD;IACrD,+CAA+C;IAC/C,sDAAsD;IACtD,gDAAgD;IAChD,2CAA2C;IAC3C,gDAAgD;IAChD,0CAA0C;IAC1C,0CAA0C;IAC1C,kDAAkD;IAClD,yCAAyC;IACzC,kDAAkD;IAClD,2CAA2C;IAC3C,yCAAyC;IACzC,2CAA2C;IAC3C,4CAA4C;IAC5C,mDAAmD;IACnD,uDAAuD;IACvD,4DAA4D;IAC5D,sDAAsD;IACtD,sDAAsD;IACtD,qDAAqD;IACrD,wDAAwD;IACxD,oDAAoD;IACpD,uDAAuD;IACvD,sDAAsD;IACtD,oDAAoD;IACpD,4CAA4C;IAC5C,iDAAiD;IACjD,iDAAiD;IACjD,sDAAsD;IACtD,kDAAkD;IAClD,sDAAsD;IACtD,gDAAgD;IAChD,uDAAuD;IACvD,iDAAiD;IACjD,kDAAkD;IAClD,gDAAgD;IAChD,mDAAmD;IACnD,mDAAmD;IACnD,6DAA6D;IAC7D,2DAA2D;IAC3D,2DAA2D;IAC3D,+DAA+D;IAC/D,+DAA+D;IAC/D,+DAA+D;IAC/D,0DAA0D;IAC1D,6DAA6D;IAC7D,6DAA6D;IAC7D,8DAA8D;IAC9D,8DAA8D;IAC9D,8DAA8D;IAC9D,qDAAqD;IACrD,sDAAsD;IACtD,2DAA2D;IAC3D,iDAAiD;IACjD,sDAAsD;IACtD,uDAAuD;IACvD,yDAAyD;IACzD,oDAAoD;IACpD,iEAAiE;IACjE,mDAAmD;IACnD,wDAAwD;IACxD,iDAAiD;IACjD,wDAAwD;IACxD,kDAAkD;IAClD,oDAAoD;IACpD,iDAAiD;IACjD,8DAA8D;IAC9D,4DAA4D;IAC5D,6DAA6D;IAC7D,gEAAgE;IAChE,iEAAiE;IACjE,qEAAqE;IACrE,mEAAmE;IACnE,qEAAqE;IACrE,kEAAkE;IAClE,mEAAmE;IACnE,kEAAkE;IAClE,wCAAwC;IACxC,gDAAgD;IAChD,0DAA0D;IAC1D,sCAAsC;IACtC,6DAA6D;IAC7D,kEAAkE;IAClE,8DAA8D;IAC9D,oEAAoE;IACpE,0DAA0D;IAC1D,kDAAkD;IAClD,gDAAgD;IAChD,kEAAkE;IAClE,uDAAuD;IACvD,oDAAoD;IACpD,oDAAoD;IACpD,qDAAqD;IACrD,oDAAoD;IACpD,kDAAkD;IAClD,oDAAoD;IACpD,gDAAgD;IAChD,yCAAyC;IACzC,uCAAuC;IACvC,oCAAoC;IACpC,qCAAqC;IACrC,uCAAuC;IACvC,qCAAqC;IACrC,yCAAyC;IACzC,qCAAqC;IACrC,sCAAsC;IACtC,oCAAoC;IACpC,iCAAiC;IACjC,kCAAkC;IAClC,mCAAmC;IACnC,oCAAoC;IACpC,oCAAoC;IACpC,kDAAkD;IAClD,kDAAkD;IAClD,mDAAmD;IACnD,+CAA+C;IAC/C,gDAAgD;IAChD,gDAAgD;IAChD,kDAAkD;IAClD,oDAAoD;CACrD,CAAA"}