@sentropic/h2a 0.97.2 → 0.97.3

package/dist/runtime/mcp/discovery-pagination.js

@@ -0,0 +1,446 @@
+/**
+ * Bounded, paginated `h2a_discover_instances` (lot L1).
+ *
+ * The historical handler returned EVERY registration in one frame — 19,185,053 B
+ * for the demo seed, over both the 1 MiB frame budget and Claude's 16 MiB cap.
+ * This pager replaces that with:
+ *   - a default of the 200 MOST RECENT inscriptions (a documented public change),
+ *   - `total` / `hasMore` / an opaque authenticated `cursor` for full traversal,
+ *   - a stable canonical order (createdAt desc; missing/invalid last; then id by
+ *     code point), with a duplicate id refused as `registry_inconsistent`,
+ *   - a per-request STABLE snapshot: both registry sources are captured with
+ *     before/after content checks, and a change during capture is `registry_changed`,
+ *   - a `generation` fingerprint (registry ∪ grants ∪ sort version) so a cursor
+ *     from a stale corpus (or a restarted server) fails `cursor_stale` rather than
+ *     silently omitting or duplicating a row,
+ *   - a page trimmed until the REAL serialized frame fits the budget, and an
+ *     indivisible oversize entry surfaced as `entry_too_large` with a durable
+ *     recovery ref and a `resumeCursor` — never skipped, never a silent drop.
+ *
+ * The CLI `discover` verb and `LocalStore.listInstances()` keep their exhaustive
+ * contract; only the MCP tool paginates.
+ */
+import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
+import { readFileSync, statSync } from "node:fs";
+import { effectiveOrgInstances } from "@sentropic/h2a";
+import { encodeFrame } from "./frame-budget.js";
+const DEFAULT_LIMIT = 200;
+const MAX_LIMIT = 1000;
+const MAX_ROLE_BYTES = 64;
+const MAX_SCOPE_BYTES = 256;
+const MAX_CURSOR_CHARS = 2048;
+const SORT_ORDER_VERSION = "discovery-order-v1";
+const CAPTURE_ATTEMPTS = 3;
+/**
+ * Bytes reserved below the budget when fitting a page: the placeholder id used
+ * for measurement is 1 char, but a real id is ≤128 UTF-8 bytes and an SSE frame
+ * adds `event:`/`data:`/blank-line overhead. Reserving here keeps the fitted page
+ * within budget on every transport; the transport's universal guard is the final
+ * backstop that never lets a raw oversize frame reach the wire.
+ */
+const PAGE_FRAME_RESERVE = 1024;
+// eslint-disable-next-line no-control-regex
+const C0_DEL_RE = /[\u0000-\u001f\u007f]/;
+function err(code, message, data) {
+    return { kind: "error", error: { code, message, ...(data ? { data } : {}) } };
+}
+/** Compare two strings by Unicode code point (ascending) without `localeCompare`. */
+function codePointCompare(a, b) {
+    const ai = a[Symbol.iterator]();
+    const bi = b[Symbol.iterator]();
+    for (;;) {
+        const x = ai.next();
+        const y = bi.next();
+        if (x.done && y.done)
+            return 0;
+        if (x.done)
+            return -1;
+        if (y.done)
+            return 1;
+        const cx = x.value.codePointAt(0) ?? 0;
+        const cy = y.value.codePointAt(0) ?? 0;
+        if (cx !== cy)
+            return cx - cy;
+    }
+}
+function readOrEmpty(path) {
+    try {
+        return readFileSync(path);
+    }
+    catch (e) {
+        if (e.code === "ENOENT")
+            return Buffer.alloc(0);
+        throw e;
+    }
+}
+function statSig(path) {
+    try {
+        const s = statSync(path);
+        return `${s.size}:${s.mtimeMs}:${s.ino}`;
+    }
+    catch {
+        return "absent";
+    }
+}
+/**
+ * Capture BOTH registry sources as a stable photograph: record every source's
+ * metadata, read every source, then re-read and re-check every source. A change
+ * detected across the window is `registry_changed` (retried up to 3 times). Not
+ * mtime/size alone — the byte content is compared, so a same-size mutation is
+ * still caught.
+ */
+function captureSources(instancesPath, grantsPath) {
+    for (let attempt = 0; attempt < CAPTURE_ATTEMPTS; attempt += 1) {
+        const beforeI = statSig(instancesPath);
+        const beforeG = statSig(grantsPath);
+        const instances = readOrEmpty(instancesPath);
+        const grants = readOrEmpty(grantsPath);
+        const instances2 = readOrEmpty(instancesPath);
+        const grants2 = readOrEmpty(grantsPath);
+        const afterI = statSig(instancesPath);
+        const afterG = statSig(grantsPath);
+        if (beforeI === afterI &&
+            beforeG === afterG &&
+            instances.equals(instances2) &&
+            grants.equals(grants2)) {
+            return { instances, grants };
+        }
+    }
+    return undefined;
+}
+function uint64BE(n) {
+    const b = Buffer.alloc(8);
+    b.writeBigUInt64BE(BigInt(n));
+    return b;
+}
+/** Generation = SHA-256 of length-prefixed(instances) ++ length-prefixed(grants) ++ order version. */
+function computeGeneration(capture) {
+    const h = createHash("sha256");
+    h.update(uint64BE(capture.instances.length));
+    h.update(capture.instances);
+    h.update(uint64BE(capture.grants.length));
+    h.update(capture.grants);
+    h.update(SORT_ORDER_VERSION);
+    return `sha256:${h.digest("hex")}`;
+}
+function toArray(value) {
+    if (value === undefined || value === null)
+        return [];
+    return Array.isArray(value) ? value : [value];
+}
+/**
+ * Canonical stable identity for ordering + duplicate detection. `instance` is
+ * always present; `id` is the pre-DEC-114 legacy address and may be absent on an
+ * old row, so the key falls back to `instance` (still unique per registration).
+ */
+function regKey(reg) {
+    return typeof reg.id === "string" && reg.id.length > 0 ? reg.id : reg.instance;
+}
+function parseCorpus(capture) {
+    const registrations = [];
+    const seen = new Set();
+    const text = capture.instances.toString("utf8");
+    if (text.length > 0) {
+        for (const line of text.split("\n")) {
+            if (line.length === 0)
+                continue;
+            let reg;
+            try {
+                reg = JSON.parse(line);
+            }
+            catch {
+                return { duplicateOrInvalid: true };
+            }
+            if (typeof reg.instance !== "string" || reg.instance.length === 0) {
+                return { duplicateOrInvalid: true };
+            }
+            const key = regKey(reg);
+            if (seen.has(key))
+                return { duplicateOrInvalid: true };
+            seen.add(key);
+            registrations.push({ ...reg, roles: toArray(reg.roles), scopes: toArray(reg.scopes) });
+        }
+    }
+    const grants = [];
+    const gtext = capture.grants.toString("utf8");
+    if (gtext.length > 0) {
+        for (const line of gtext.split("\n")) {
+            if (line.length === 0)
+                continue;
+            try {
+                grants.push(JSON.parse(line));
+            }
+            catch {
+                return { duplicateOrInvalid: true };
+            }
+        }
+    }
+    return { registrations, grants };
+}
+function b64url(input) {
+    return Buffer.from(input).toString("base64url");
+}
+function macFor(secret, body) {
+    return createHmac("sha256", secret).update(body).digest();
+}
+function encodeCursor(secret, payload) {
+    const body = b64url(JSON.stringify(payload));
+    const mac = b64url(macFor(secret, body));
+    return `${body}.${mac}`;
+}
+function decodeCursor(secret, serverEpoch, raw) {
+    if (raw.length === 0 || raw.length > MAX_CURSOR_CHARS)
+        return { ok: false, code: "invalid_cursor" };
+    const dot = raw.indexOf(".");
+    if (dot <= 0 || dot === raw.length - 1)
+        return { ok: false, code: "invalid_cursor" };
+    const body = raw.slice(0, dot);
+    const mac = raw.slice(dot + 1);
+    let payload;
+    try {
+        payload = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
+    }
+    catch {
+        return { ok: false, code: "invalid_cursor" };
+    }
+    if (payload === null ||
+        typeof payload !== "object" ||
+        payload.v !== 1 ||
+        typeof payload.e !== "string" ||
+        typeof payload.g !== "string" ||
+        !Number.isInteger(payload.o) ||
+        payload.o < 0 ||
+        !Number.isInteger(payload.l) ||
+        typeof payload.r !== "string" ||
+        typeof payload.s !== "string") {
+        return { ok: false, code: "invalid_cursor" };
+    }
+    const expected = macFor(secret, body);
+    let macValid = false;
+    try {
+        const got = Buffer.from(mac, "base64url");
+        macValid = got.length === expected.length && timingSafeEqual(got, expected);
+    }
+    catch {
+        macValid = false;
+    }
+    if (!macValid) {
+        // A cursor minted by a PREVIOUS server instance (different secret) cannot be
+        // authenticated; distinguish a stale traversal from a forged/tampered cursor
+        // by the embedded (unauthenticated) epoch — either way traversal is refused.
+        return payload.e !== serverEpoch
+            ? { ok: false, code: "cursor_stale" }
+            : { ok: false, code: "invalid_cursor" };
+    }
+    if (payload.e !== serverEpoch)
+        return { ok: false, code: "cursor_stale" };
+    return { ok: true, payload };
+}
+const CURSOR_STALE_MESSAGE = "registry changed or server restarted; restart discovery without cursor";
+export function createDiscoveryPager(store, options) {
+    const secret = options.secret ?? randomBytes(32);
+    const serverEpoch = options.serverEpoch ?? randomUUID();
+    const budget = options.budget;
+    const effectiveBudget = Math.max(1024, budget.maxBytes - PAGE_FRAME_RESERVE);
+    /** Measure the REAL frame bytes for a page (placeholder id; reserve covers the delta). */
+    function frameBytesFor(page) {
+        const text = JSON.stringify(page);
+        return encodeFrame({
+            jsonrpc: "2.0",
+            id: 0,
+            result: { content: [{ type: "text", text }] }
+        }).bytes;
+    }
+    function validateFilter(value, maxBytes) {
+        if (value === undefined)
+            return { ok: true, value: undefined };
+        if (typeof value !== "string")
+            return { ok: false };
+        if (C0_DEL_RE.test(value))
+            return { ok: false };
+        if (Buffer.byteLength(value, "utf8") > maxBytes)
+            return { ok: false };
+        return { ok: true, value: value.length === 0 ? undefined : value };
+    }
+    function discover(args) {
+        const a = args ?? {};
+        // 1. Validate filters and limit (cheap, before any registry read).
+        const roleV = validateFilter(a.role, MAX_ROLE_BYTES);
+        if (!roleV.ok) {
+            return err("invalid_filter", "role or scope exceeds the supported filter format");
+        }
+        const scopeV = validateFilter(a.scope, MAX_SCOPE_BYTES);
+        if (!scopeV.ok) {
+            return err("invalid_filter", "role or scope exceeds the supported filter format");
+        }
+        if (a.limit !== undefined) {
+            if (typeof a.limit !== "number" || !Number.isInteger(a.limit) || a.limit < 1 || a.limit > MAX_LIMIT) {
+                return err("invalid_limit", "limit must be an integer between 1 and 1000");
+            }
+        }
+        if (a.cursor !== undefined) {
+            if (typeof a.cursor !== "string" || a.cursor.length === 0 || a.cursor.length > MAX_CURSOR_CHARS) {
+                return err("invalid_cursor", "cursor is malformed or does not match the query");
+            }
+        }
+        // 2. Capture a stable photograph of BOTH sources.
+        const capture = captureSources(store.paths.instances, store.paths.orgMembership);
+        if (!capture) {
+            return err("registry_changed", "registry changed during capture; retry discovery", {
+                retryable: true
+            });
+        }
+        // 3. Generation fingerprint (registry ∪ grants ∪ sort version).
+        const generation = computeGeneration(capture);
+        // 4. Parse corpus (duplicate id / malformed row → inconsistent).
+        const parsed = parseCorpus(capture);
+        if ("duplicateOrInvalid" in parsed) {
+            return err("registry_inconsistent", "registry contains conflicting or invalid records", {
+                generation
+            });
+        }
+        // 5. Resolve offset + effective filters/limit from the cursor when present.
+        let offset = 0;
+        let role = roleV.value;
+        let scope = scopeV.value;
+        let limit = a.limit ?? DEFAULT_LIMIT;
+        if (a.cursor !== undefined) {
+            const decoded = decodeCursor(secret, serverEpoch, a.cursor);
+            if (!decoded.ok) {
+                if (decoded.code === "cursor_stale") {
+                    return err("cursor_stale", CURSOR_STALE_MESSAGE, { restartRequired: true });
+                }
+                return err("invalid_cursor", "cursor is malformed or does not match the query");
+            }
+            const p = decoded.payload;
+            if (p.g !== generation) {
+                return err("cursor_stale", CURSOR_STALE_MESSAGE, { restartRequired: true });
+            }
+            // The client keeps its filters/limit OR omits them; a DIFFERENT explicit
+            // value is a mismatch (invalid_cursor), never a silent override.
+            const cursorRole = p.r === "" ? undefined : p.r;
+            const cursorScope = p.s === "" ? undefined : p.s;
+            if (a.role !== undefined && roleV.value !== cursorRole) {
+                return err("invalid_cursor", "cursor is malformed or does not match the query");
+            }
+            if (a.scope !== undefined && scopeV.value !== cursorScope) {
+                return err("invalid_cursor", "cursor is malformed or does not match the query");
+            }
+            if (a.limit !== undefined && a.limit !== p.l) {
+                return err("invalid_cursor", "cursor is malformed or does not match the query");
+            }
+            offset = p.o;
+            role = cursorRole;
+            scope = cursorScope;
+            limit = p.l;
+        }
+        // 6. Filter on the effective org view (registration ∪ grants), like the CLI.
+        const effective = effectiveOrgInstances(parsed.registrations, parsed.grants);
+        const effByInstance = new Map(effective.map((e) => [e.instance, e]));
+        let filtered = parsed.registrations;
+        if (role !== undefined) {
+            filtered = filtered.filter((reg) => effByInstance.get(reg.instance)?.roles.includes(role));
+        }
+        if (scope !== undefined) {
+            filtered = filtered.filter((reg) => effByInstance.get(reg.instance)?.scopes.includes(scope));
+        }
+        // 7. Canonical order: createdAt desc (valid), missing/invalid last, then id by code point.
+        const decorated = filtered.map((reg) => {
+            const ts = Date.parse(reg.createdAt);
+            return { reg, ts, hasValid: Number.isFinite(ts) };
+        });
+        decorated.sort((x, y) => {
+            if (x.hasValid && y.hasValid) {
+                if (x.ts !== y.ts)
+                    return y.ts - x.ts;
+            }
+            else if (x.hasValid !== y.hasValid) {
+                return x.hasValid ? -1 : 1;
+            }
+            return codePointCompare(regKey(x.reg), regKey(y.reg));
+        });
+        const sorted = decorated.map((d) => d.reg);
+        const total = sorted.length;
+        if (offset > total) {
+            // A cursor whose offset is past the (possibly shrunk) end for THIS
+            // generation cannot be trusted to complete the traversal.
+            return err("cursor_stale", CURSOR_STALE_MESSAGE, { restartRequired: true });
+        }
+        // 8. Build the page, trimming until the REAL frame fits the budget.
+        const maxAvailable = Math.min(limit, total - offset);
+        const buildPage = (n) => {
+            const instances = sorted.slice(offset, offset + n);
+            const nextOffset = offset + n;
+            const hasMore = nextOffset < total;
+            const nextCursor = hasMore
+                ? encodeCursor(secret, {
+                    v: 1,
+                    e: serverEpoch,
+                    g: generation,
+                    o: nextOffset,
+                    l: limit,
+                    r: role ?? "",
+                    s: scope ?? ""
+                })
+                : null;
+            return { instances, total, hasMore, nextCursor, generation, limit, returned: n };
+        };
+        if (total === 0 || maxAvailable === 0) {
+            return { kind: "page", page: buildPage(0) };
+        }
+        // Binary search for the largest n whose full frame fits the reserved budget.
+        let lo = 0;
+        let hi = maxAvailable;
+        while (lo < hi) {
+            const mid = Math.ceil((lo + hi) / 2);
+            if (frameBytesFor(buildPage(mid)) <= effectiveBudget)
+                lo = mid;
+            else
+                hi = mid - 1;
+        }
+        const fitCount = lo;
+        if (fitCount === 0) {
+            // Even a single entry at `offset` overflows: recover its intact bytes and
+            // hand back a resumeCursor for the NEXT offset — never skip the entry.
+            const entry = sorted[offset];
+            const entryId = regKey(entry);
+            const entryJson = JSON.stringify(entry);
+            const entryBytes = Buffer.byteLength(entryJson, "utf8");
+            let recovery;
+            if (options.payloadStore) {
+                try {
+                    recovery = options.payloadStore.persistOutput(Buffer.from(entryJson, "utf8"));
+                }
+                catch {
+                    recovery = undefined;
+                }
+            }
+            const resumeOffset = offset + 1;
+            const resumeCursor = resumeOffset < total
+                ? encodeCursor(secret, {
+                    v: 1,
+                    e: serverEpoch,
+                    g: generation,
+                    o: resumeOffset,
+                    l: limit,
+                    r: role ?? "",
+                    s: scope ?? ""
+                })
+                : null;
+            return err("entry_too_large", "one registry entry exceeds the MCP frame budget", {
+                budgetBytes: budget.maxBytes,
+                entryBytes,
+                id: entryId.length > 256 ? `${entryId.slice(0, 256)}…` : entryId,
+                entrySha256: `sha256:${createHash("sha256").update(entryJson).digest("hex")}`,
+                generation,
+                total,
+                offset,
+                resumeCursor,
+                ...(recovery ? { recovery } : {})
+            });
+        }
+        return { kind: "page", page: buildPage(fitCount) };
+    }
+    return { discover };
+}
+//# sourceMappingURL=discovery-pagination.js.map

package/dist/runtime/mcp/discovery-pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-pagination.js","sourceRoot":"","sources":["../../../src/runtime/mcp/discovery-pagination.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,OAAO,EAAE,qBAAqB,EAA6B,MAAM,gBAAgB,CAAC;AAGlF,OAAO,EAAE,WAAW,EAAoB,MAAM,mBAAmB,CAAC;AA0DlE,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,4CAA4C;AAC5C,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAE1C,SAAS,GAAG,CAAC,IAAwB,EAAE,OAAe,EAAE,IAA8B;IACpF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;AAChF,CAAC;AAED,qFAAqF;AACrF,SAAS,gBAAgB,CAAC,CAAS,EAAE,CAAS;IAC5C,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;IAChC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;IAChC,SAAS,CAAC;QACR,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC;QACrB,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAOD,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,aAAqB,EAAE,UAAkB;IAC/D,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,gBAAgB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACnC,IACE,OAAO,KAAK,MAAM;YAClB,OAAO,KAAK,MAAM;YAClB,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EACtB,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,sGAAsG;AACtG,SAAS,iBAAiB,CAAC,OAAsB;IAC/C,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC7B,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,OAAO,CAAI,KAAiC;IACnD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CAAC,GAAyB;IACvC,OAAO,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;AACjF,CAAC;AAOD,SAAS,WAAW,CAAC,OAAsB;IACzC,MAAM,aAAa,GAA2B,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,IAAI,GAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyB,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;YACtC,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;YACtC,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;YACvD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAgD,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAYD,SAAS,MAAM,CAAC,KAAsB;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAc,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,MAAM,CAAC,MAAc,EAAE,IAAY;IAC1C,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,OAAsB;IAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACzC,OAAO,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;AAC1B,CAAC;AAMD,SAAS,YAAY,CAAC,MAAc,EAAE,WAAmB,EAAE,GAAW;IACpE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,gBAAgB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACpG,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACrF,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,OAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAkB,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IAC/C,CAAC;IACD,IACE,OAAO,KAAK,IAAI;QAChB,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,CAAC,CAAC,KAAK,CAAC;QACf,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ;QAC7B,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ;QAC7B,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC,GAAG,CAAC;QACb,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5B,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ;QAC7B,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ,EAC7B,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC1C,QAAQ,GAAG,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,6EAA6E;QAC7E,6EAA6E;QAC7E,6EAA6E;QAC7E,OAAO,OAAO,CAAC,CAAC,KAAK,WAAW;YAC9B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE;YACrC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,KAAK,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC1E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,oBAAoB,GAAG,wEAAwE,CAAC;AAEtG,MAAM,UAAU,oBAAoB,CAClC,KAAiB,EACjB,OAA8B;IAE9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,UAAU,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,GAAG,kBAAkB,CAAC,CAAC;IAE7E,0FAA0F;IAC1F,SAAS,aAAa,CAAC,IAA2B;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,WAAW,CAAC;YACjB,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,CAAC;YACL,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE;SAC9C,CAAC,CAAC,KAAK,CAAC;IACX,CAAC;IAED,SAAS,cAAc,CACrB,KAAc,EACd,QAAgB;QAEhB,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QACpD,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QAChD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IACrE,CAAC;IAED,SAAS,QAAQ,CAAC,IAAuC;QACvD,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QAErB,mEAAmE;QACnE,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,GAAG,CAAC,gBAAgB,EAAE,mDAAmD,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,gBAAgB,EAAE,mDAAmD,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,SAAS,EAAE,CAAC;gBACpG,OAAO,GAAG,CAAC,eAAe,EAAE,6CAA6C,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBAChG,OAAO,GAAG,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACjF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,CAAC,kBAAkB,EAAE,kDAAkD,EAAE;gBACjF,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QAED,gEAAgE;QAChE,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAE9C,iEAAiE;QACjE,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,oBAAoB,IAAI,MAAM,EAAE,CAAC;YACnC,OAAO,GAAG,CAAC,uBAAuB,EAAE,kDAAkD,EAAE;gBACtF,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QAED,4EAA4E;QAC5E,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QACvB,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QACzB,IAAI,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,aAAa,CAAC;QACrC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBACpC,OAAO,GAAG,CAAC,cAAc,EAAE,oBAAoB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9E,CAAC;gBACD,OAAO,GAAG,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;YAC1B,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;gBACvB,OAAO,GAAG,CAAC,cAAc,EAAE,oBAAoB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,yEAAyE;YACzE,iEAAiE;YACjE,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACvD,OAAO,GAAG,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAC;YAClF,CAAC;YACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC1D,OAAO,GAAG,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAC;YAClF,CAAC;YACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,OAAO,GAAG,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACb,IAAI,GAAG,UAAU,CAAC;YAClB,KAAK,GAAG,WAAW,CAAC;YACpB,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;QAED,6EAA6E;QAC7E,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC;QACpC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAc,CAAC,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAe,CAAC,CAAC,CAAC;QACzG,CAAC;QAED,2FAA2F;QAC3F,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACrC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACrC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACpD,CAAC,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACtB,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC7B,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE;oBAAE,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACxC,CAAC;iBAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACrC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;QAE5B,IAAI,MAAM,GAAG,KAAK,EAAE,CAAC;YACnB,mEAAmE;YACnE,0DAA0D;YAC1D,OAAO,GAAG,CAAC,cAAc,EAAE,oBAAoB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,oEAAoE;QACpE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC,CAAC;QAErD,MAAM,SAAS,GAAG,CAAC,CAAS,EAAyB,EAAE;YACrD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,CAAC;YAC9B,MAAM,OAAO,GAAG,UAAU,GAAG,KAAK,CAAC;YACnC,MAAM,UAAU,GAAG,OAAO;gBACxB,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE;oBACnB,CAAC,EAAE,CAAC;oBACJ,CAAC,EAAE,WAAW;oBACd,CAAC,EAAE,UAAU;oBACb,CAAC,EAAE,UAAU;oBACb,CAAC,EAAE,KAAK;oBACR,CAAC,EAAE,IAAI,IAAI,EAAE;oBACb,CAAC,EAAE,KAAK,IAAI,EAAE;iBACf,CAAC;gBACJ,CAAC,CAAC,IAAI,CAAC;YACT,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACnF,CAAC,CAAC;QAEF,IAAI,KAAK,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,CAAC;QAED,6EAA6E;QAC7E,IAAI,EAAE,GAAG,CAAC,CAAC;QACX,IAAI,EAAE,GAAG,YAAY,CAAC;QACtB,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACrC,IAAI,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,eAAe;gBAAE,EAAE,GAAG,GAAG,CAAC;;gBAC1D,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,QAAQ,GAAG,EAAE,CAAC;QAEpB,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,0EAA0E;YAC1E,uEAAuE;YACvE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACxD,IAAI,QAAwC,CAAC;YAC7C,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;gBAChF,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,GAAG,SAAS,CAAC;gBACvB,CAAC;YACH,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,CAAC;YAChC,MAAM,YAAY,GAChB,YAAY,GAAG,KAAK;gBAClB,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE;oBACnB,CAAC,EAAE,CAAC;oBACJ,CAAC,EAAE,WAAW;oBACd,CAAC,EAAE,UAAU;oBACb,CAAC,EAAE,YAAY;oBACf,CAAC,EAAE,KAAK;oBACR,CAAC,EAAE,IAAI,IAAI,EAAE;oBACb,CAAC,EAAE,KAAK,IAAI,EAAE;iBACf,CAAC;gBACJ,CAAC,CAAC,IAAI,CAAC;YACX,OAAO,GAAG,CAAC,iBAAiB,EAAE,iDAAiD,EAAE;gBAC/E,WAAW,EAAE,MAAM,CAAC,QAAQ;gBAC5B,UAAU;gBACV,EAAE,EAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO;gBAChE,WAAW,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBAC7E,UAAU;gBACV,KAAK;gBACL,MAAM;gBACN,YAAY;gBACZ,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC"}

package/dist/runtime/mcp/frame-budget.d.ts

@@ -0,0 +1,149 @@
+/**
+ * Universal MCP output-emission policy (lot L1).
+ *
+ * EVERY frame written to a client — a success result, a JSON-RPC error, a parse
+ * error, `initialize`, `tools/list`, a preformatted Track result, AND every
+ * server-pushed notification — passes through this policy so no single write can
+ * exceed the negotiated byte budget. The budget is measured on the EXACT bytes
+ * finally emitted: one `JSON.stringify` of the whole message (its inner MCP text
+ * is already stringified), a trailing `\n`, then `Buffer.byteLength(..,"utf8")`.
+ *
+ * Substantiated budget (see build brief): the frozen frame ceiling is 1 MiB.
+ * `initialize` (~153 B) and `tools/list` (~30.8 kB) fit with >4x margin; a
+ * 200-record discovery page (~130-170 kB) fits with >6x. The full historical
+ * discover result (19,185,053 B) exceeds BOTH this ceiling AND Claude's
+ * 16,777,216 B cap — so the contract is pagination + chunked read-recovery +
+ * an explicit oversize refusal, NEVER a raised cap and NEVER a silent truncation
+ * that could cut a UTF-8 codepoint or corrupt JSON.
+ */
+import type { PayloadRecoveryRef } from "./payload-store.js";
+/** Frozen frame ceiling. Substantiated at 1 MiB; never raised toward the 16 MiB cap. */
+export declare const MCP_MAX_FRAME_BYTES = 1048576;
+/** Technical floor: a budget below this cannot hold a fixed bounded error. */
+export declare const MCP_MIN_FRAME_BYTES: number;
+/** Env override (never above the ceiling; never below the floor). */
+export declare const MCP_FRAME_BUDGET_ENV = "H2A_MCP_MAX_FRAME_BYTES";
+/** Overflow notice method for an oversize notification (a notice, not a payload). */
+export declare const MCP_OVERFLOW_NOTIFICATION_METHOD = "notifications/h2a/overflow";
+/** Max UTF-8 bytes an incoming request `id` string may carry (kept correlatable). */
+export declare const MCP_MAX_REQUEST_ID_BYTES = 128;
+export interface FrameBudget {
+    readonly maxBytes: number;
+}
+export interface EncodedFrame {
+    /** The single JSON serialization of the whole message (no newline). */
+    readonly json: string;
+    /** The exact bytes written to the wire, including the trailing `\n`. */
+    readonly line: string;
+    /** `Buffer.byteLength(line, "utf8")` — the calibration ground truth. */
+    readonly bytes: number;
+}
+export type JsonRpcId = string | number | null;
+/**
+ * Resolve the effective budget. An explicit/env value is clamped to
+ * `[MCP_MIN_FRAME_BYTES, MCP_MAX_FRAME_BYTES]`. A value below the floor is a
+ * bootstrap misconfiguration; we clamp UP to the floor so a fixed bounded error
+ * can always be emitted rather than crashing the transport.
+ */
+export declare function resolveFrameBudget(env?: Record<string, string | undefined>): FrameBudget;
+/**
+ * Encode a message as the exact bytes finally emitted. A SINGLE `JSON.stringify`
+ * — the inner MCP `content[].text` is already a string. Throws only on a cyclic
+ * / non-serializable value; the caller converts that into a bounded -32603.
+ */
+export declare function encodeFrame(message: unknown): EncodedFrame;
+/**
+ * Validate an incoming JSON-RPC `id` BEFORE execution: a finite JSON number,
+ * `null`, or a UTF-8 string ≤128 bytes. Anything else (a huge string, an object,
+ * an array) cannot be correlated within budget → the caller answers -32600 with
+ * `id:null`. Absent id (a notification) is handled by the caller, not here.
+ */
+export declare function isAcceptableRequestId(id: unknown): id is JsonRpcId;
+export interface JsonRpcErrorFrameObject {
+    jsonrpc: "2.0";
+    id: JsonRpcId;
+    error: {
+        code: number;
+        message: string;
+        data?: unknown;
+    };
+}
+/** -32600 Invalid Request with `id:null` (an unusable incoming id). */
+export declare function buildInvalidRequestId(): JsonRpcErrorFrameObject;
+/** -32010 response_too_large: a produced result exceeded the byte budget. */
+export declare function buildResponseTooLargeError(id: JsonRpcId, info: {
+    budgetBytes: number;
+    actualBytes: number;
+    recovery?: PayloadRecoveryRef | undefined;
+}): JsonRpcErrorFrameObject;
+/** -32603 serialization_failed: the value could not be serialized (e.g. cyclic). */
+export declare function buildSerializationFailedError(id: JsonRpcId): JsonRpcErrorFrameObject;
+/**
+ * Bound a full JSON-RPC RESPONSE object to the budget. Returns the frame to
+ * actually write — the original when it fits, else a fixed bounded -32010 (with
+ * a recovery ref when `recover` persisted the intact bytes), else a bounded
+ * -32603 when the value cannot even be serialized. The bounded error is small
+ * and always fits a valid budget (≥16 KiB).
+ */
+export declare function boundResponseFrame(id: JsonRpcId, responseObject: unknown, budget: FrameBudget, recover?: (intactJson: string, intactBytes: number) => PayloadRecoveryRef | undefined): EncodedFrame;
+export interface CallToolResultShape {
+    content: Array<{
+        type: string;
+        text?: string;
+        [k: string]: unknown;
+    }>;
+    isError?: boolean;
+    [k: string]: unknown;
+}
+/**
+ * Bound an SDK CallToolResult before the SDK serializes it (central / hosted
+ * transports). Models the emitted JSON-RPC frame; an oversize result is replaced
+ * with a bounded error result carrying a recovery ref, so the SDK never emits a
+ * frame over budget. A small reserve covers the id delta and SSE/HTTP framing;
+ * the stdio path's universal guard remains the exact backstop there.
+ */
+export declare function boundCallToolResult(result: CallToolResultShape, budget: FrameBudget, recover?: (intactJson: string, intactBytes: number) => PayloadRecoveryRef | undefined): CallToolResultShape;
+export interface NotificationFrameOutcome {
+    /** The frame to write (the original, an overflow notice, or a recovery-unavailable notice). */
+    readonly frame: EncodedFrame;
+    /**
+     * Whether the dispatcher may advance its snapshot: true when the original fit
+     * OR the intact bytes were persisted (a recoverable overflow notice went out);
+     * false when persistence was impossible (the source event is NOT acknowledged).
+     */
+    readonly accepted: boolean;
+    /** Byte size of the original notification when it overflowed. */
+    readonly originalBytes?: number;
+}
+/** Build the bounded overflow notice for an oversize notification. */
+export declare function buildOverflowNotification(info: {
+    originalMethod: string;
+    topic?: string | undefined;
+    bytes: number;
+    recovery: PayloadRecoveryRef;
+}): {
+    jsonrpc: "2.0";
+    method: string;
+    params: Record<string, unknown>;
+};
+/** Build the bounded recovery-unavailable notice (persistence was impossible). */
+export declare function buildRecoveryUnavailableNotification(info: {
+    originalMethod: string;
+    topic?: string | undefined;
+    bytes: number;
+    cause: string;
+}): {
+    jsonrpc: "2.0";
+    method: string;
+    params: Record<string, unknown>;
+};
+/**
+ * Bound a NOTIFICATION frame. Notifications carry no id, so an overflow yields a
+ * bounded NOTICE (never a JSON-RPC response). Returns `undefined` only when the
+ * notification itself cannot be serialized (dropped; the caller logs).
+ */
+export declare function boundNotificationFrame(notification: unknown, meta: {
+    method: string;
+    topic?: string | undefined;
+}, budget: FrameBudget, recover?: (intactJson: string, intactBytes: number) => PayloadRecoveryRef | undefined): NotificationFrameOutcome | undefined;
+//# sourceMappingURL=frame-budget.d.ts.map

package/dist/runtime/mcp/frame-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frame-budget.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp/frame-budget.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,UAAY,CAAC;AAE7C,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB,QAAY,CAAC;AAE7C,qEAAqE;AACrE,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAE9D,qFAAqF;AACrF,eAAO,MAAM,gCAAgC,+BAA+B,CAAC;AAE7E,qFAAqF;AACrF,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAE/C;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,WAAW,CASb;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,CAQ1D;AAOD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,OAAO,GAAG,EAAE,IAAI,SAAS,CAKlE;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,SAAS,CAAC;IACd,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC1D;AAED,uEAAuE;AACvE,wBAAgB,qBAAqB,IAAI,uBAAuB,CAE/D;AAED,6EAA6E;AAC7E,wBAAgB,0BAA0B,CACxC,EAAE,EAAE,SAAS,EACb,IAAI,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAA;CAAE,GAC5F,uBAAuB,CAgBzB;AAED,oFAAoF;AACpF,wBAAgB,6BAA6B,CAAC,EAAE,EAAE,SAAS,GAAG,uBAAuB,CAMpF;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,SAAS,EACb,cAAc,EAAE,OAAO,EACvB,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,kBAAkB,GAAG,SAAS,GACpF,YAAY,CA6Bd;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC,CAAC;IACtE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,kBAAkB,GAAG,SAAS,GACpF,mBAAmB,CAoCrB;AAED,MAAM,WAAW,wBAAwB;IACvC,+FAA+F;IAC/F,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,sEAAsE;AACtE,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,kBAAkB,CAAC;CAC9B,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAiBtE;AAED,kFAAkF;AAClF,wBAAgB,oCAAoC,CAAC,IAAI,EAAE;IACzD,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAatE;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,OAAO,EACrB,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,EACpD,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,kBAAkB,GAAG,SAAS,GACpF,wBAAwB,GAAG,SAAS,CA4CtC"}