@rubytech/create-maxy-code 0.1.604 → 0.1.606

package/payload/platform/lib/routine-templates/src/roster.ts

@@ -35,7 +35,7 @@
  *  routine's prompt only when the stored `routineTemplateVersion` is BELOW this
  *  and no operator has edited the row, so an unbumped edit ships to new installs
  *  and never reaches existing ones — bump it in the same commit as the edit. */
-export const ROUTINE_TEMPLATE_VERSION = 6;
+export const ROUTINE_TEMPLATE_VERSION = 10;
 
 /**
  * Task 2379 — the check shapes a shipped template may name.
@@ -94,6 +94,34 @@ export interface RoutineGraphUnflaggedCheck {
   readonly type: "graph-unflagged";
   readonly label: "ConversationArchive" | "Section";
 }
+/** Task 2689 — the memory sweep's own state: its two review queues, and whether
+ *  it has stopped running. No fields, because an account has exactly one sweep
+ *  and one of each queue. What is compared is a digest, so the routine wakes
+ *  when a queue moves or the sweep goes silent, never merely because the sweep
+ *  ran again — it runs hourly and this routine is weekly. */
+/** Task 2688 — records changed in a connector this account registered, since
+ *  the routine last woke.
+ *
+ *  `scope` is a KIND of connector, never a name: the account describes the
+ *  queue once, on the connector's own registry record, and the template names
+ *  only which kind it watches. That is what lets a shipped template gate on a
+ *  third-party system at all, since it can carry no per-account value (Task
+ *  2389). A connector that is not registered, or whose credential is refused,
+ *  answers quiet, so the routine no-ops rather than erroring every fire. */
+export interface RoutineConnectorCheck {
+  readonly type: "connector";
+  readonly scope: "operational" | "accounting";
+}
+export interface RoutineSweepCheck {
+  readonly type: "sweep";
+}
+/** Task 2689 — growth under the account's own directory since the last accepted
+ *  wake. `minGrowthBytes` is a size rather than per-account data, so a shipped
+ *  template may name it and still be correct on every install. */
+export interface RoutineFilesystemCheck {
+  readonly type: "filesystem";
+  readonly minGrowthBytes?: number;
+}
 export type RoutineGateCheck =
   | RoutineMailCheck
   | RoutineD1Check
@@ -101,7 +129,10 @@ export type RoutineGateCheck =
   | RoutineCalendarCheck
   | RoutineTelegramCheck
   | RoutineGraphCheck
-  | RoutineGraphUnflaggedCheck;
+  | RoutineGraphUnflaggedCheck
+  | RoutineConnectorCheck
+  | RoutineSweepCheck
+  | RoutineFilesystemCheck;
 
 /** The plugin and the tool are constants for every roster gate, so a template
  *  carries neither. `hasWork` is true when ANY check is true. */
@@ -142,11 +173,24 @@ export function isWatermarkedCheck(check: RoutineGateCheck): boolean {
   //
   // Task 2681 — `graph` compares an ISO `updatedAt` against a stored one, so a
   // commitless graph gate reports work on every fire exactly as a mail one does.
+  //
+  // Task 2688 — `connector` holds one position PER registered connector, and
+  // compares each against the instant that connector's queue was last read, so
+  // it is watermarked for the same reason.
+  //
+  // Task 2689 — `sweep` compares a digest and `filesystem` compares a byte
+  // count, both against a stored value, so both belong here for the same
+  // reason. Their positions are promoted by the dispatcher on an accepted wake,
+  // which is what makes "since the last report" literal rather than "since the
+  // last fire".
   return (
     check.type === "mail" ||
     check.type === "calendar" ||
     check.type === "telegram" ||
-    check.type === "graph"
+    check.type === "graph" ||
+    check.type === "connector" ||
+    check.type === "sweep" ||
+    check.type === "filesystem"
   );
 }
 
@@ -249,18 +293,6 @@ Say what is unfinished and what tomorrow looks like, in that order, in plain sen
 
 If nothing is waiting, nothing is overdue and tomorrow is empty, end the turn without replying.`;
 
-const APPOINTMENT_REMINDER = `Remind the people attending an appointment that is coming up, so nobody is reminded twice and nobody is missed.
-
-Call capabilities-here first. If neither a mail plugin nor a messaging channel is enabled, end the turn without replying.
-
-Find appointments starting within the next reminder window with schedule-list, and read each one's attendees. Resolve each attendee to a person and a contact route with contact-lookup. An attendee you cannot resolve to a route is not a failure to work around: leave them, and say so at the end.
-
-Send each attendee one reminder on the route they are already reachable on: email-send for a mailbox, whatsapp-reply or the Telegram message tool for a messaging thread that already exists. Carry the time, the place and what the appointment is about. Do not open a new conversation with someone who has never messaged the business.
-
-Send at most one reminder per attendee per appointment. Before sending, check the appointment's notes for a reminder already recorded, and record the one you send there.
-
-Reply with one line naming who was reminded and who could not be reached. If no appointment falls in the window, end the turn without replying.`;
-
 const COMMITMENT_CHASE = `Find the promises the business has made and not kept, and the promises made to it that nobody has kept.
 
 Call capabilities-here first and use only the surfaces it reports.
@@ -387,7 +419,20 @@ export const ROUTINE_ROSTER: readonly RoutineTemplate[] = [
       "Sends one morning message covering what needs a decision, what is time-bound and what changed overnight; stays silent when there is nothing worth saying.",
     recurrence: "30 7 * * 1-5",
     prompt: START_OF_DAY,
-    gateless: "A morning briefing is judgement every fire, so a gate would either always pass or suppress the briefing.",
+    // Task 2686 — the briefing's two gateable arms. `Section` rather than
+    // `ConversationArchive` on every email-driven row here: sections are written
+    // per ingest, so a reply into a thread this routine already flagged arrives
+    // as a fresh unflagged node, while the archive is MERGEd per thread and
+    // would stay flagged — muting the routine on the traffic it exists to read.
+    // The check names a label and not a source, so any ingested content wakes
+    // these rows, which over-wakes and never mutes. The briefing's third arm,
+    // open and overdue work, has no check type: Task 2714.
+    gate: {
+      checks: [
+        { type: "graph-unflagged", label: "Section" },
+        { type: "graph", scope: "appointments" },
+      ],
+    },
   },
   {
     key: "inbound-check",
@@ -396,7 +441,10 @@ export const ROUTINE_ROSTER: readonly RoutineTemplate[] = [
       "Triages mail that arrived since the last check and writes replies for you to approve; it never sends anything itself.",
     recurrence: "*/30 9-17 * * 1-5",
     prompt: INBOUND_CHECK,
-    gateless: "Conditional on new mail, but the mail check matches an exact mailbox address and no shipped template can name one (Task 2389).",
+    // Task 2686 — the mail check still cannot name a mailbox, but the sampler
+    // puts every inbound message in the graph, so the unflagged-section check
+    // reaches the same mail without per-account data.
+    gate: { checks: [{ type: "graph-unflagged", label: "Section" }] },
   },
   {
     key: "telegram-inbound-check",
@@ -411,19 +459,18 @@ export const ROUTINE_ROSTER: readonly RoutineTemplate[] = [
     key: "end-of-day",
     name: "End of day wrap-up",
     description:
-      "Closes the day with your unsent drafts, overdue work and tomorrow's diary; says nothing when all three are empty.",
+      "Closes the day with your unsent drafts, overdue work and tomorrow's diary, once new mail or a diary change has woken it.",
     recurrence: "0 18 * * 1-5",
     prompt: END_OF_DAY,
-    gateless: "A wrap-up is judgement every fire, so no cheap check stands in for reading the three surfaces it reports.",
-  },
-  {
-    key: "appointment-reminder",
-    name: "Appointment reminders",
-    description:
-      "Reminds each attendee once before a booked appointment, on a route they already use; it never opens a conversation with a stranger.",
-    recurrence: "0 * * * *",
-    prompt: APPOINTMENT_REMINDER,
-    gateless: "Conditional on an appointment falling in the window, but no check type reads appointments held in the graph (Task 2389).",
+    // Task 2686 — the wrap-up wakes on new mail or a diary change. Its other two
+    // surfaces, unsent drafts and overdue work, have no check type, so a day
+    // whose only outstanding item is one of those is silent until Task 2714.
+    gate: {
+      checks: [
+        { type: "graph-unflagged", label: "Section" },
+        { type: "graph", scope: "appointments" },
+      ],
+    },
   },
   {
     key: "commitment-chase",
@@ -432,7 +479,11 @@ export const ROUTINE_ROSTER: readonly RoutineTemplate[] = [
       "Surfaces promises the business made and did not keep, and promises made to it that nobody kept; it reports them rather than chasing them.",
     recurrence: "0 10 * * 2",
     prompt: COMMITMENT_CHASE,
-    gateless: "Whether a promise has been dropped is the judgement itself, so no check can answer it more cheaply.",
+    // Task 2686 — a dropped promise is a judgement, but the correspondence it
+    // judges is not: this wakes when inbound mail it has not read is in the
+    // graph. Its outbound arm reads sent mail, which the sampler does not ingest
+    // and no shipped template can name a mailbox for: Task 2715.
+    gate: { checks: [{ type: "graph-unflagged", label: "Section" }] },
   },
   {
     key: "calendar-reconcile",
@@ -452,7 +503,9 @@ export const ROUTINE_ROSTER: readonly RoutineTemplate[] = [
       "Reconciles the people you correspond with against the people on record, creating and updating contacts; it never merges two records that might be two people.",
     recurrence: "45 6 * * 1-5",
     prompt: CONTACT_RECONCILE,
-    gateless: "Conditional on new correspondence, but no check type reads correspondence (Task 2389).",
+    // Task 2686 — correspondence is readable now: the sampler writes it and the
+    // unflagged-section check counts what this routine has not reconciled.
+    gate: { checks: [{ type: "graph-unflagged", label: "Section" }] },
   },
   {
     key: "crm-reconcile",
@@ -461,7 +514,9 @@ export const ROUTINE_ROSTER: readonly RoutineTemplate[] = [
       "Brings across what changed in whichever operational system this business runs; it reads only and never writes back to that system.",
     recurrence: "0 3 * * *",
     prompt: CRM_RECONCILE,
-    gateless: "Conditional on connector movement, but no check type reads a connector queue (Task 2389).",
+    // Task 2688 — wakes when a connector the account registered as its
+    // operational system holds records changed since the last accepted wake.
+    gate: { checks: [{ type: "connector", scope: "operational" }] },
   },
   {
     key: "finance-reconcile",
@@ -470,7 +525,10 @@ export const ROUTINE_ROSTER: readonly RoutineTemplate[] = [
       "Reconciles the accounting system against the internal ledger and reports what does not agree; it never adjusts an entry to make the two sides match.",
     recurrence: "0 4 * * 1",
     prompt: FINANCE_RECONCILE,
-    gateless: "Conditional on accounting movement, but no check type reads an accounting ledger (Task 2389).",
+    // Task 2688 — wakes on movement in the connector the account registered as
+    // its accounting system. A connector that is absent or whose credential is
+    // refused answers quiet, so this no-ops rather than erroring every fire.
+    gate: { checks: [{ type: "connector", scope: "accounting" }] },
   },
   {
     key: "weekly-digest",
@@ -479,7 +537,15 @@ export const ROUTINE_ROSTER: readonly RoutineTemplate[] = [
       "Writes the week in three paragraphs at most: what changed, what is stuck, and what next week turns on.",
     recurrence: "0 16 * * 5",
     prompt: WEEKLY_DIGEST,
-    gateless: "A digest is judgement every fire, and a gate would suppress the report it exists to send.",
+    // Task 2686 — a week with no correspondence and no diary movement has
+    // nothing to report movement on, so the digest is silent rather than
+    // writing three paragraphs about a week in which nothing happened.
+    gate: {
+      checks: [
+        { type: "graph-unflagged", label: "Section" },
+        { type: "graph", scope: "appointments" },
+      ],
+    },
   },
   {
     key: "channel-link-check",
@@ -497,7 +563,11 @@ export const ROUTINE_ROSTER: readonly RoutineTemplate[] = [
       "Reports what the hourly graph sweep last did and what is waiting for review; it reads only and never runs the sweep itself.",
     recurrence: "0 9 * * 1",
     prompt: GRAPH_HEALTH,
-    gateless: "Reports the sweep's state every fire by design, so there is nothing conditional to check.",
+    // Task 2689 — the sweep's state IS the delta. The digest carries the two
+    // review-queue counts and whether the sweep has stopped writing reports,
+    // never the newest report's identity: the sweep runs hourly, so a digest
+    // that moved on every run would make this weekly routine wake every fire.
+    gate: { checks: [{ type: "sweep" }] },
   },
   {
     key: "filesystem-health",
@@ -506,7 +576,10 @@ export const ROUTINE_ROSTER: readonly RoutineTemplate[] = [
       "Reports what has grown under the account directory and which paths are worth attention; it deletes nothing.",
     recurrence: "0 9 * * 1",
     prompt: FILESYSTEM_HEALTH,
-    gateless: "Reports what has grown every fire by design, so there is nothing conditional to check.",
+    // Task 2689 — 64 MiB of growth under the account directory since the last
+    // report. What has ACCUMULATED is the question, so an account that is large
+    // and stable has nothing new to say and the routine stays silent.
+    gate: { checks: [{ type: "filesystem", minGrowthBytes: 67108864 }] },
   },
 ];
 

package/payload/platform/plugins/admin/skills/platform-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: platform-architecture
 description: Use when grounding any documented-surface claim about what Maxy ships — plugins, skills, specialists, install/deploy flows, internals. This is the install catalogue, not evidence of what is enabled on the current account. For install state on this account, call `capabilities-here`; for documented surface, cite the `Source:` URL inline.
-content-hash: sha256:5a02da7ca027a086a15c10f3590e339d181f1854e4573c013d94685e49263436
+content-hash: sha256:4cf85978124889a43767660591634992d687b20aa692836be272c878c4505481
 brand: maxy-code
 product-name: Maxy
 ---
@@ -325,6 +325,8 @@ If you suspect background processes are piling up, run `grep '\[reaper\]' ~/.{br
 
 Every install seeds `permissions.allow:[]` plus `defaultMode:"bypassPermissions"` into both the brand-scoped settings file (`~/.{brand}/.claude/settings.json`) and every account-scoped one (`<install>/data/accounts/<id>/.claude/settings.json`). `bypassPermissions` alone stops Claude Code from sending tool calls to its remote auto-classifier (it skips all permission checks), which would otherwise surface a permission prompt in the chat that an unattended session never answers. The `allow` array stays empty and **must never contain `"*"`**: Claude Code ≥ 2.1.167 rejects `"*"` as an allow token and renders a blocking Settings Warning that, under `--remote-control`, stops every `/rc-spawn` from binding. What each subagent is allowed to use is still controlled by the `tools:` line in its agent file, not by a top-level allowlist. To verify after an install: `cat ~/.{brand}/.claude/settings.json | jq '.permissions'` (expect `allow: []`). To repair an install seeded before this change: `bash <install>/platform/scripts/backfill-bypass-permissions.sh ~/.{brand}`.
 
+**Workspace trust.** Separate from permissions, and its own way to stop a spawn dead. Claude Code refuses to start in a directory it does not trust, and it scopes that trust to the **git repository root** of the working directory rather than to any trusted ancestor. Every account directory is its own repository (`provision-account-dir.sh` runs `git init` there so Claude Code finds the account's own `.claude/` hook set), so trusting the home directory does not reach them. Every install therefore seeds `projects[<dir>].hasTrustDialogAccepted: true` into `~/.{brand}/.claude/.claude.json` for the home directory **and for every directory under `<install>/data/accounts`**, preserving all other fields the CLI wrote. Without it the PTY-spawned session halts on "Quick safety check: Is this a project you created or one you trust?" and never binds, which surfaces as a session that starts and answers nothing, with no error in the interface. The seeding runs twice per install and both passes matter: the `deploy` pass trusts the accounts an upgrade already has, and the `post-account` pass, which runs straight after account setup, trusts the account a brand-new install has only just created. The install line is `[install] op=claude-trust-seed phase=<deploy|post-account> file=… accounts=<N> seeded=<n> alreadyTrusted=<n> stale=<n> error=<none|msg>`; `seeded + alreadyTrusted` equals `accounts`, and a re-run reads `seeded=0`. Because an account added *after* an install has an untrusted repository root that no event announces, the session manager reconciles the two every hour and logs `[claude-trust-census] accounts=<N> trusted=<n> untrusted=<n> untrustedDirs=<csv|none> homeTrusted=<bool> onboarded=<bool>` — a non-zero `untrusted` names the directories whose next session will hang. To verify after an install: `node -e 'const j=require(process.env.HOME+"/.{brand}/.claude/.claude.json");const p=j.projects||{};for(const k of Object.keys(p))if(k.includes("/data/accounts/"))console.log(k,p[k].hasTrustDialogAccepted)'` (expect `true` for every account directory that exists).
+
 **`autoMode` trust block.** The same brand-scoped writer ([`permissions-seed.ts`](../../../packages/create-maxy-code/src/permissions-seed.ts), `AUTO_MODE_BLOCK`) also seeds the harness `autoMode` block. `bypassPermissions` skips the auto-mode classifier entirely, so the block is **belt-and-suspenders**: it only matters when a session is toggled into `auto` mode, where the classifier otherwise soft-denies the doctrine-sanctioned Cloudflare scoped-token mint ("permission/credential escalation") because the install's own Cloudflare infra is not in the classifier's default trusted environment. The block keeps `"$defaults"` first in `environment` and `allow` (so the built-in Data-Exfiltration / force-push / prod-deploy guards stay intact) and adds prose declaring `api.cloudflare.com` the install's own provider endpoint plus an allow for minting/persisting narrow per-scope tokens. It is seeded **only** into the brand/user settings (`~/.{brand}/.claude/settings.json`) — the classifier never reads `autoMode` from the shared project (account-scoped) settings, so `setup-account.sh` does not carry it. An auto-mode agent cannot seed this itself (the default `hard_deny` "Auto-Mode Bypass" blocks any agent editing `.claude/settings*.json`); installer seed is the only path. To verify after an install: `CLAUDE_CONFIG_DIR=~/.{brand}/.claude claude auto-mode config | jq '.environment, .allow'` (expect the Cloudflare entries, `$defaults` expanded) and `jq '.autoMode' ~/.{brand}/.claude/settings.json`.
 
 ---
@@ -4095,6 +4097,19 @@ which fails `prebuild` if any emoji codepoint appears in a `.ts`/`.tsx` file
 under `app/` (tests excluded). Inline an icon at the surrounding text size and
 colour (`size={14}` matches body text; Lucide inherits `currentColor`).
 
+**A long message shows its first 8 lines.** On `/chat`, the WhatsApp and
+Telegram readers and the public visitor chat, a message body taller than 8 lines
+is cut at 8 and carries a "Show more…" control that reveals the rest; "Show
+less" puts it back. The control appears only when there is genuinely more to
+see, so a short message looks exactly as it did before. Expanding one message
+expands only that message, and scrolling back through older messages does not
+carry an expansion onto a different one. Two things are never cut: an error the
+agent reports, and the map on a shared location. The reader's search also opens
+any message whose match would otherwise sit in the hidden part, so a search
+never finds something it then hides. See
+[`.docs/message-body-clamp.md`](../../../.docs/message-body-clamp.md) for the
+render sites and the census that watches it.
+
 ## Admin Hono routes
 
 Every admin sub-app is mounted by
@@ -4352,9 +4367,9 @@ one, over the same automation set the routes list. The roster seed's own
 `descNull` counter is its narrow twin, scoped to seeded rows and so blind to
 exactly the operator-created ones most likely to carry no caption.
 
-**The shipped roster.** Every account starts with fourteen routines —
+**The shipped roster.** Every account starts with thirteen routines —
 `start-of-day`, `inbound-check`, `telegram-inbound-check`, `end-of-day`,
-`appointment-reminder`, `commitment-chase`, `calendar-reconcile`,
+`commitment-chase`, `calendar-reconcile`,
 `contact-reconcile`, `crm-reconcile`, `finance-reconcile`, `weekly-digest`,
 `channel-link-check`, `graph-health`, `filesystem-health`, in `/routines`
 display order. `ROUTINE_ROSTER_KEYS.length`

package/payload/platform/plugins/admin/skills/whats-new/SKILL.md

@@ -9,6 +9,16 @@ Invoked by the admin agent directly.
 
 This is the platform's release timeline, newest first. Each entry shows the date it shipped and the version it shipped in, so you can tell the operator how current their install is. To compare, read the installed version from `capabilities-here` and match it against the versions below. Keep answers high level and in plain English; this is a summary, not a full commit log.
 
+## 2026-08-14 (0.1.606)
+
+- Conversations start after an install again. The installer marked only your home folder as trusted, and the assistant now asks about the folder each account actually runs from, so a session would stop at a trust prompt nobody could answer.
+- A long chat message is capped at eight lines with a control to show the rest, instead of filling the pane.
+
+## 2026-08-14 (0.1.605)
+
+- Five more routines now check whether there is anything to do before waking the assistant. Mail triage, appointment reminders, the operational and finance reconciles, and the two health reports all previously ran on the clock and did the deciding after starting up.
+- Email kept in the graph is now pruned on a schedule, so it does not grow without limit.
+
 ## 2026-08-13 (0.1.604)
 
 - Your assistant can now read a Telegram conversation back to you, both sides of it, from the record kept on your own machine. Ask for the chat with someone and you get every message they sent and every one the bot sent, in order, with a voice note shown as its transcript and a message they deleted marked as deleted.

package/payload/platform/plugins/connector/PLUGIN.md

@@ -41,11 +41,19 @@ The credential is stored in the account's secrets file and is never returned by
 
 ## Capabilities
 
-- **connector-register** — store a named API's base URL and a static credential. The credential scheme is one of bearer, api-key-header (a named header), or basic. Returns the non-secret record only.
+- **connector-register** — store a named API's base URL and a static credential, and optionally describe its changed-since queue. The credential scheme is one of bearer, api-key-header (a named header), or basic. Returns the non-secret record only.
 - **connector-call** — make a request (GET or a mutating method) to a registered connector. The credential is injected from the secret store; the request is host-bound and SSRF-guarded. Returns the status, redacted response headers, and the (size-capped) body.
 - **connector-list** — the registered connectors for this account: names and base URLs only.
 - **connector-deregister** — remove a connector and its stored credential.
 
+## The changed-since queue
+
+A registered connector may carry a `queue`, which is what lets a scheduled routine wake only when that system has actually moved. It names four things: the `kind` (`operational` or `accounting`), the `path` to read under the base URL, the `changedSinceParam` the API expects the watermark in, and the `itemsField` holding the array of changed records.
+
+The kind decides which routine watches it. The shipped operational-system reconcile gates on `operational` and the finance reconcile on `accounting`, and neither names a connector: the routine names a kind, the account names the queue. A connector registered without a queue is watched by nothing, which is visible in the listing rather than silent.
+
+The scheduling gate reads it by calling `connector-list` and then `connector-call`, so the credential and the host guard never leave this plugin. A queue whose credential is refused (401 or 403) reports no work rather than an error, so the routine no-ops instead of waking a model to rediscover a dead credential every fire. Registering an existing name again replaces its record, so omitting the queue removes it; that drop writes `op=register name=<n> queue=dropped`, because a queue lost in silence mutes whichever routine gated on it.
+
 ## Who can use it
 
 These tools are admin-driven. The operator's admin agent registers connectors and makes calls; the tools are not granted to any specialist agent, given their reach (arbitrary authenticated outbound requests and a credential store). A vertical agent that needs an external API is served by the admin acting on its behalf.

package/payload/platform/plugins/connector/mcp/dist/__tests__/queue-descriptor.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=queue-descriptor.test.d.ts.map

package/payload/platform/plugins/connector/mcp/dist/__tests__/queue-descriptor.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue-descriptor.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/queue-descriptor.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/connector/mcp/dist/__tests__/queue-descriptor.test.js

@@ -0,0 +1,67 @@
+/**
+ * Task 2688 — the changed-since queue a registered connector can describe.
+ *
+ * The descriptor exists so a shipped routine template can gate on "this
+ * account's operational system" without naming a connector, a path or an
+ * address (Task 2389). These assert the two properties the gate depends on:
+ * the descriptor survives a round trip through the registry, and it reaches a
+ * reader through the listing while the credential never does.
+ */
+import { mkdtempSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { describe, expect, it } from "vitest";
+import { listConnectors, queueFromArgs, readRegistry, registerConnector } from "../lib/store.js";
+const ACCOUNT = "20028fb5-0000-4000-8000-000000000000";
+const REC = {
+    baseUrl: "https://api.example.com",
+    host: "api.example.com",
+    authScheme: "bearer",
+};
+const QUEUE = {
+    kind: "operational",
+    path: "/v2/jobs/changed",
+    changedSinceParam: "updatedSince",
+    itemsField: "items",
+};
+function root() {
+    return join(mkdtempSync(join(tmpdir(), "connector-store-")), "platform");
+}
+describe("queue descriptor", () => {
+    it("round-trips through the registry", () => {
+        const p = root();
+        registerConnector(p, ACCOUNT, "jobs", { ...REC, queue: QUEUE }, "secret");
+        expect(readRegistry(p, ACCOUNT).jobs.queue).toEqual(QUEUE);
+    });
+    it("is returned by the connector listing, and the credential is not", () => {
+        const p = root();
+        registerConnector(p, ACCOUNT, "jobs", { ...REC, queue: QUEUE }, "secret");
+        expect(listConnectors(p, ACCOUNT)).toEqual([
+            { name: "jobs", baseUrl: REC.baseUrl, queue: QUEUE },
+        ]);
+    });
+    it("omits the queue for a connector registered without one", () => {
+        const p = root();
+        registerConnector(p, ACCOUNT, "plain", REC, "secret");
+        expect(listConnectors(p, ACCOUNT)).toEqual([{ name: "plain", baseUrl: REC.baseUrl }]);
+    });
+});
+describe("queue validation", () => {
+    it("accepts a complete descriptor", () => {
+        expect(queueFromArgs(QUEUE)).toEqual({ queue: QUEUE });
+    });
+    it("refuses a kind outside the two", () => {
+        expect(queueFromArgs({ ...QUEUE, kind: "sales" })).toEqual({
+            refusal: "queue.kind must be operational or accounting.",
+        });
+    });
+    it("refuses a blank field", () => {
+        expect(queueFromArgs({ ...QUEUE, path: "  " })).toEqual({
+            refusal: "queue.path must not be blank.",
+        });
+    });
+    it("passes undefined through as no queue", () => {
+        expect(queueFromArgs(undefined)).toEqual({});
+    });
+});
+//# sourceMappingURL=queue-descriptor.test.js.map

package/payload/platform/plugins/connector/mcp/dist/__tests__/queue-descriptor.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue-descriptor.test.js","sourceRoot":"","sources":["../../src/__tests__/queue-descriptor.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEjG,MAAM,OAAO,GAAG,sCAAsC,CAAC;AACvD,MAAM,GAAG,GAAG;IACV,OAAO,EAAE,yBAAyB;IAClC,IAAI,EAAE,iBAAiB;IACvB,UAAU,EAAE,QAAiB;CAC9B,CAAC;AACF,MAAM,KAAK,GAAG;IACZ,IAAI,EAAE,aAAsB;IAC5B,IAAI,EAAE,kBAAkB;IACxB,iBAAiB,EAAE,cAAc;IACjC,UAAU,EAAE,OAAO;CACpB,CAAC;AAEF,SAAS,IAAI;IACX,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;AAC3E,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC1E,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC1E,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YACzC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE;SACrD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,OAAO,EAAE,+CAA+C;SACzD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACtD,OAAO,EAAE,+BAA+B;SACzC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/connector/mcp/dist/index.js

@@ -2,7 +2,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
 import { lifelineTool } from "../../../../lib/mcp-lifeline/dist/index.js";
-import { readRegistry, listConnectors, registerConnector, deregisterConnector, resolveConnector, } from "./lib/store.js";
+import { readRegistry, listConnectors, registerConnector, deregisterConnector, resolveConnector, queueFromArgs, } from "./lib/store.js";
 import { performCall } from "./lib/call.js";
 import { hostResolvesPrivate } from "./lib/ssrf.js";
 // Plugin-system boot tolerance: module init must never throw. tools/list is enumerated
@@ -41,7 +41,7 @@ function ctx(tool) {
     return { platformRoot: PLATFORM_ROOT, accountId: ACCOUNT_ID };
 }
 const server = new McpServer({ name: "connector", version: "0.1.0" });
-lifelineTool(server, "connector-register", "Register a named third-party REST API: store its base URL and a static credential so the agent can call it. auth.scheme is bearer | api-key-header | basic; headerName is required for api-key-header. The credential is stored in the account secrets file and is never returned or logged. Returns the non-secret record only.", {
+lifelineTool(server, "connector-register", "Register a named third-party REST API: store its base URL and a static credential so the agent can call it. auth.scheme is bearer | api-key-header | basic; headerName is required for api-key-header. The credential is stored in the account secrets file and is never returned or logged. Optionally describe a changed-since queue, which is what lets a scheduled reconcile wake only when this system has moved: queue.kind (operational or accounting) chooses which routine watches it, queue.path is the endpoint under the base URL, queue.changedSinceParam is the query parameter carrying the watermark, and queue.itemsField is the response field holding the array of changed records. Registering an existing name again replaces its record, so omitting queue removes it. Returns the non-secret record only.", {
     name: z.string().min(1),
     baseUrl: z.string().min(1),
     auth: z.object({
@@ -49,7 +49,15 @@ lifelineTool(server, "connector-register", "Register a named third-party REST AP
         value: z.string().min(1),
         headerName: z.string().min(1).optional(),
     }),
-}, async ({ name, baseUrl, auth }) => {
+    queue: z
+        .object({
+        kind: z.enum(["operational", "accounting"]),
+        path: z.string().min(1),
+        changedSinceParam: z.string().min(1),
+        itemsField: z.string().min(1),
+    })
+        .optional(),
+}, async ({ name, baseUrl, auth, queue }) => {
     const c = ctx("connector-register");
     if ("refusal" in c)
         return c.refusal;
@@ -68,15 +76,38 @@ lifelineTool(server, "connector-register", "Register a named third-party REST AP
         process.stderr.write(`[connector] op=register-refused name=${name} reason=private-ip target=${url.hostname}\n`);
         return fail("connector-register: refused — baseUrl host resolves to a private or loopback address.");
     }
+    // Task 2688 — the zod schema already refuses a malformed queue from a tool
+    // call; this refuses one that reached the handler any other way, and it is
+    // the single place the shape is judged, so the store and the tool cannot
+    // disagree about what a valid descriptor is.
+    const parsedQueue = queueFromArgs(queue);
+    if (parsedQueue.refusal)
+        return fail(`connector-register: ${parsedQueue.refusal}`);
+    // Registering an existing name REPLACES its record, so omitting the queue
+    // removes it. Merging instead would be invented behaviour; the drop is made
+    // visible, because a queue silently lost mutes whichever routine gated on
+    // it and no other surface would say so.
+    const previous = readRegistry(c.platformRoot, c.accountId)[name];
+    if (previous?.queue && !parsedQueue.queue) {
+        process.stderr.write(`[connector] op=register name=${name} queue=dropped\n`);
+    }
     const rec = {
         baseUrl,
         host: url.hostname,
         authScheme: auth.scheme,
         ...(auth.scheme === "api-key-header" ? { headerName: auth.headerName } : {}),
+        ...(parsedQueue.queue ? { queue: parsedQueue.queue } : {}),
     };
     registerConnector(c.platformRoot, c.accountId, name, rec, auth.value);
-    process.stderr.write(`[connector] op=register name=${name} host=${url.hostname} scheme=${auth.scheme}\n`);
-    return ok({ name, baseUrl, host: url.hostname, authScheme: auth.scheme });
+    process.stderr.write(`[connector] op=register name=${name} host=${url.hostname} scheme=${auth.scheme} ` +
+        `queue=${parsedQueue.queue?.kind ?? "none"}\n`);
+    return ok({
+        name,
+        baseUrl,
+        host: url.hostname,
+        authScheme: auth.scheme,
+        ...(parsedQueue.queue ? { queue: parsedQueue.queue } : {}),
+    });
 });
 lifelineTool(server, "connector-call", "Make an authenticated request to a registered connector. The credential is injected from the secret store; the request is confined to the registered host (a different host, a private address, or a cross-host redirect is refused). Returns { status, headers (redacted), body (capped) }.", {
     name: z.string().min(1),

package/payload/platform/plugins/connector/mcp/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EACL,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GAEjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD,uFAAuF;AACvF,oFAAoF;AACpF,4EAA4E;AAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;AAClD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC;AAExD,SAAS,eAAe;IACtB,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,UAAU,IAAI,MAAM,eAAe,eAAe,EAAE,IAAI,CAAC,CAAC;AAE9G,IAAI,OAAO,GAAG,CAAC,CAAC;AAChB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAElE,SAAS,EAAE,CAAC,IAAa;IACvB,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;KAC5G,CAAC;AACJ,CAAC;AACD,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;AACrF,CAAC;AACD,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,qCAAqC,CAAC,CAAC;IACpF,OAAO,IAAI,CAAC,GAAG,IAAI,kFAAkF,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,GAAG,CAAC,IAAY;IACvB,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAEtE,YAAY,CACV,MAAM,EACN,oBAAoB,EACpB,kUAAkU,EAClU;IACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACrD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC;CACH,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACpC,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACrC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACvH,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC,2EAA2E,CAAC,CAAC;IACnJ,IAAI,MAAM,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,IAAI,6BAA6B,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QAChH,OAAO,IAAI,CAAC,uFAAuF,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,GAAG,GAAoB;QAC3B,OAAO;QACP,IAAI,EAAE,GAAG,CAAC,QAAQ;QAClB,UAAU,EAAE,IAAI,CAAC,MAAM;QACvB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC;IACF,iBAAiB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,IAAI,SAAS,GAAG,CAAC,QAAQ,WAAW,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAC1G,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5E,CAAC,CACF,CAAC;AAEF,YAAY,CACV,MAAM,EACN,gBAAgB,EAChB,8RAA8R,EAC9R;IACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzC,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACrD,MAAM,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChC,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACrC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,uCAAuC,IAAI,kBAAkB,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,QAAQ,CAAC,GAAG,EACZ,QAAQ,CAAC,MAAM,EACf,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EACtC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,CACxE,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,2BAA2B,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAC1E,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;AAChH,CAAC,CACF,CAAC;AAEF,YAAY,CAAC,MAAM,EAAE,gBAAgB,EAAE,iGAAiG,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;IACvJ,MAAM,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChC,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACrC,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAEH,YAAY,CACV,MAAM,EACN,sBAAsB,EACtB,0HAA0H,EAC1H,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACjB,MAAM,CAAC,GAAG,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACtC,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACrC,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,IAAI,YAAY,GAAG,IAAI,CAAC,CAAC;IAChF,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,2BAA2B,IAAI,IAAI,CAAC,CAAC,CAAC,uBAAuB,IAAI,mBAAmB,CAAC,CAAC;AACxG,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EACL,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,GAEd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD,uFAAuF;AACvF,oFAAoF;AACpF,4EAA4E;AAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;AAClD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC;AAExD,SAAS,eAAe;IACtB,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,UAAU,IAAI,MAAM,eAAe,eAAe,EAAE,IAAI,CAAC,CAAC;AAE9G,IAAI,OAAO,GAAG,CAAC,CAAC;AAChB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAElE,SAAS,EAAE,CAAC,IAAa;IACvB,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;KAC5G,CAAC;AACJ,CAAC;AACD,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;AACrF,CAAC;AACD,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,qCAAqC,CAAC,CAAC;IACpF,OAAO,IAAI,CAAC,GAAG,IAAI,kFAAkF,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,GAAG,CAAC,IAAY;IACvB,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAEtE,YAAY,CACV,MAAM,EACN,oBAAoB,EACpB,kyBAAkyB,EAClyB;IACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACrD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC;IACF,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC9B,CAAC;SACD,QAAQ,EAAE;CACd,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;IACvC,MAAM,CAAC,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACpC,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACrC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACvH,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC,2EAA2E,CAAC,CAAC;IACnJ,IAAI,MAAM,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,IAAI,6BAA6B,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QAChH,OAAO,IAAI,CAAC,uFAAuF,CAAC,CAAC;IACvG,CAAC;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,6CAA6C;IAC7C,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,WAAW,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,uBAAuB,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnF,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,wCAAwC;IACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,QAAQ,EAAE,KAAK,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,IAAI,kBAAkB,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,GAAG,GAAoB;QAC3B,OAAO;QACP,IAAI,EAAE,GAAG,CAAC,QAAQ;QAClB,UAAU,EAAE,IAAI,CAAC,MAAM;QACvB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC;IACF,iBAAiB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gCAAgC,IAAI,SAAS,GAAG,CAAC,QAAQ,WAAW,IAAI,CAAC,MAAM,GAAG;QAChF,SAAS,WAAW,CAAC,KAAK,EAAE,IAAI,IAAI,MAAM,IAAI,CACjD,CAAC;IACF,OAAO,EAAE,CAAC;QACR,IAAI;QACJ,OAAO;QACP,IAAI,EAAE,GAAG,CAAC,QAAQ;QAClB,UAAU,EAAE,IAAI,CAAC,MAAM;QACvB,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,YAAY,CACV,MAAM,EACN,gBAAgB,EAChB,8RAA8R,EAC9R;IACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzC,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IACrD,MAAM,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChC,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACrC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,uCAAuC,IAAI,kBAAkB,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,QAAQ,CAAC,GAAG,EACZ,QAAQ,CAAC,MAAM,EACf,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EACtC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,CACxE,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,2BAA2B,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAC1E,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;AAChH,CAAC,CACF,CAAC;AAEF,YAAY,CAAC,MAAM,EAAE,gBAAgB,EAAE,iGAAiG,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;IACvJ,MAAM,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChC,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACrC,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAEH,YAAY,CACV,MAAM,EACN,sBAAsB,EACtB,0HAA0H,EAC1H,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACjB,MAAM,CAAC,GAAG,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACtC,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACrC,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,IAAI,YAAY,GAAG,IAAI,CAAC,CAAC;IAChF,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,2BAA2B,IAAI,IAAI,CAAC,CAAC,CAAC,uBAAuB,IAAI,mBAAmB,CAAC,CAAC;AACxG,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/payload/platform/plugins/connector/mcp/dist/lib/store.d.ts

@@ -1,11 +1,45 @@
 export type AuthScheme = "bearer" | "api-key-header" | "basic";
+/** Task 2688 — which routine watches this queue. A scheduled reconcile names
+ *  the KIND, never the connector, because a shipped routine template can carry
+ *  no per-account value (Task 2389). */
+export type ConnectorQueueKind = "operational" | "accounting";
+/**
+ * Task 2688 — how this connector answers "what changed since <instant>".
+ *
+ * Held on the registry record rather than on the gate that reads it: the
+ * account knows its own API and describes it once, and the scheduling gate then
+ * asks for whichever queues carry the kind it was armed with. Without this the
+ * gate would have to name a path and a parameter itself, which no shipped
+ * template can do.
+ */
+export interface ConnectorQueue {
+    kind: ConnectorQueueKind;
+    /** Path under the registered base URL, e.g. "/v2/jobs/changed". */
+    path: string;
+    /** The query parameter that carries the watermark, e.g. "updatedSince". */
+    changedSinceParam: string;
+    /** Top-level response field holding the array of changed records. */
+    itemsField: string;
+}
 export interface ConnectorRecord {
     baseUrl: string;
     host: string;
     authScheme: AuthScheme;
     /** Required when authScheme is "api-key-header"; the header the credential is sent in. */
     headerName?: string;
+    queue?: ConnectorQueue;
 }
+/**
+ * Validate a queue descriptor arriving off tool arguments.
+ *
+ * Returns `{}` for an absent queue, `{ queue }` for a valid one, and
+ * `{ refusal }` for anything else. A refusal string rather than a throw,
+ * because the tool answers a refusal as text and never as an exception.
+ */
+export declare function queueFromArgs(raw: unknown): {
+    queue?: ConnectorQueue;
+    refusal?: string;
+};
 type Registry = Record<string, ConnectorRecord>;
 type Secrets = Record<string, string>;
 export declare function readRegistry(platformRoot: string, accountId: string): Registry;
@@ -20,6 +54,7 @@ export declare function resolveConnector(platformRoot: string, accountId: string
 export declare function listConnectors(platformRoot: string, accountId: string): {
     name: string;
     baseUrl: string;
+    queue?: ConnectorQueue;
 }[];
 export {};
 //# sourceMappingURL=store.d.ts.map

package/payload/platform/plugins/connector/mcp/dist/lib/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/lib/store.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,gBAAgB,GAAG,OAAO,CAAC;AAE/D,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,UAAU,CAAC;IACvB,0FAA0F;IAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAChD,KAAK,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAyBtC,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,QAAQ,CAE9E;AAED,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAE5E;AAED,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,GACb,IAAI,CAON;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CASlG;AAED,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX;IAAE,GAAG,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKjD;AAED,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CAK3G"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/lib/store.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,gBAAgB,GAAG,OAAO,CAAC;AAE/D;;wCAEwC;AACxC,MAAM,MAAM,kBAAkB,GAAG,aAAa,GAAG,YAAY,CAAC;AAE9D;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,UAAU,CAAC;IACvB,0FAA0F;IAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,cAAc,CAAC;CACxB;AAID;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,KAAK,CAAC,EAAE,cAAc,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAoBxF;AAED,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAChD,KAAK,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAyBtC,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,QAAQ,CAE9E;AAED,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAE5E;AAED,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,GACb,IAAI,CAON;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CASlG;AAED,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX;IAAE,GAAG,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKjD;AAED,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,GAChB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,cAAc,CAAA;CAAE,EAAE,CAQ7D"}