@spine-event-engine/ai 0.0.0-stage → 2.0.0-snapshot.23

package/dist/internal/execution.js

@@ -0,0 +1,143 @@
+/*
+ * Copyright 2026, CodeMatters. All rights reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License. You may obtain a copy of the License at
+ *
+ * https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under the License
+ * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+ * or implied. See the License for the specific language governing permissions and limitations under
+ * the License.
+ */
+import { AiOutcome } from "@spine-event-engine/proto/agent";
+/**
+ * Rejects a nonterminal tool proposal in incompatible conversation/event contexts.
+ *
+ * @param content Typed response or terminal System event.
+ */
+export const assertAiOutcomeContext = (content) => {
+    if (content.$typeName !== "spine.ts.agent.GenerationResponse") {
+        if (content.outcome === AiOutcome.TOOL_REQUESTED)
+            throw new TypeError("TOOL_REQUESTED is only a generation response outcome");
+        return;
+    }
+    const hasCalls = content.toolCalls.length > 0;
+    const hasOutput = content.admittedOutput !== undefined;
+    if (content.outcome === AiOutcome.TOOL_REQUESTED && (!hasCalls || hasOutput))
+        throw new TypeError("TOOL_REQUESTED requires proposals without admitted output");
+    if (content.outcome === AiOutcome.ADMITTED && (!hasOutput || hasCalls))
+        throw new TypeError("ADMITTED requires output without outstanding proposals");
+    if (content.outcome !== AiOutcome.ADMITTED && hasOutput)
+        throw new TypeError("Only ADMITTED may carry application output");
+    if (content.anthropicContent && content.openaiContent)
+        throw new TypeError("Generation response has multiple provider content envelopes");
+    if (content.anthropicContent)
+        assertAnthropicProjection(content);
+    if (content.openaiContent)
+        assertOpenAiProjection(content);
+};
+/**
+ * Checks the typed Responses projection without depending on provider SDK data.
+ *
+ * @param content Generation response with ordered Responses items.
+ */
+const assertOpenAiProjection = (content) => {
+    const receipt = content.openaiContent;
+    if (!receipt)
+        return;
+    if ((content.outcome === AiOutcome.ADMITTED || content.outcome === AiOutcome.TOOL_REQUESTED) &&
+        !receipt.complete)
+        throw new TypeError("Responses receipt incomplete");
+    const { text, calls } = projectOpenAiItems(receipt);
+    const partialFailure = !receipt.complete &&
+        (content.outcome === AiOutcome.FAILED || content.outcome === AiOutcome.REFUSED);
+    const savedText = text.join("");
+    const textMatches = partialFailure
+        ? content.rawOutput.startsWith(savedText)
+        : savedText === content.rawOutput;
+    const callCountMatches = partialFailure
+        ? calls.length <= content.toolCalls.length
+        : calls.length === content.toolCalls.length;
+    if (!textMatches ||
+        !callCountMatches ||
+        calls.some((call, index) => call.providerCallId !== content.toolCalls[index]?.providerCallId ||
+            call.toolName !== content.toolCalls[index].toolName ||
+            call.argumentsJson !== content.toolCalls[index].argumentsJson))
+        throw new TypeError("Responses projection differs from standard fields");
+};
+/**
+ * @param receipt Ordered typed Responses items.
+ * @returns Standard text and tool projection.
+ */
+const projectOpenAiItems = (receipt) => {
+    const text = [];
+    const calls = [];
+    for (const item of receipt.items) {
+        if (item.content.case === "message") {
+            for (const part of item.content.value.parts) {
+                if (part.content.case === "outputText")
+                    text.push(part.content.value);
+            }
+        }
+        else if (item.content.case === "functionCall") {
+            if (!item.content.value.call)
+                throw new TypeError("Responses call missing");
+            calls.push(item.content.value.call);
+        }
+        else if (item.content.case !== "reasoning")
+            throw new TypeError("Responses item kind missing");
+    }
+    return { text, calls };
+};
+/**
+ * Checks that ordered Anthropic blocks project to the journal's standard fields.
+ *
+ * @param content Generation response with ordered Anthropic content.
+ */
+const assertAnthropicProjection = (content) => {
+    const text = [];
+    const calls = [];
+    for (const block of content.anthropicContent?.blocks ?? [])
+        collectAnthropicBlock(content.outcome, block, text, calls);
+    if (text.join("") !== content.rawOutput)
+        throw new TypeError("Anthropic text projection differs from raw output");
+    if (calls.length !== content.toolCalls.length ||
+        calls.some((call, index) => {
+            const saved = content.toolCalls[index];
+            if (saved === undefined)
+                return true;
+            return (call.providerCallId !== saved.providerCallId ||
+                call.toolName !== saved.toolName ||
+                call.argumentsJson !== saved.argumentsJson);
+        }))
+        throw new TypeError("Anthropic tool projection differs from proposals");
+};
+/**
+ * Projects a block while requiring complete reasoning for terminal proposals.
+ *
+ * @param outcome Saved generation outcome.
+ * @param block Ordered Anthropic block.
+ * @param text Mutable projected text segments.
+ * @param calls Mutable projected tool proposals.
+ */
+const collectAnthropicBlock = (outcome, block, text, calls) => {
+    if (block.content.case === "text")
+        text.push(block.content.value);
+    else if (block.content.case === "toolCall")
+        calls.push(block.content.value);
+    else if (block.content.case === "thinking") {
+        if ((outcome === AiOutcome.TOOL_REQUESTED || outcome === AiOutcome.ADMITTED) &&
+            !block.content.value.signature)
+            throw new TypeError("Complete Anthropic thinking requires a signature");
+    }
+    else if (block.content.case === "redactedThinking") {
+        if ((outcome === AiOutcome.TOOL_REQUESTED || outcome === AiOutcome.ADMITTED) &&
+            !block.content.value.data)
+            throw new TypeError("Complete Anthropic redacted thinking requires data");
+    }
+    else
+        throw new TypeError("Anthropic content block kind missing");
+};
+//# sourceMappingURL=execution.js.map

package/dist/internal/execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../src/internal/execution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAeH,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AA6C5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,OAK0B,EACpB,EAAE;IACR,IAAI,OAAO,CAAC,SAAS,KAAK,mCAAmC,EAAE,CAAC;QAC9D,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,cAAc;YAC9C,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC;IACvD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,cAAc,IAAI,CAAC,CAAC,QAAQ,IAAI,SAAS,CAAC;QAC1E,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAC;IACnF,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC;QACpE,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;IAChF,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,QAAQ,IAAI,SAAS;QACrD,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,aAAa;QACnD,MAAM,IAAI,SAAS,CAAC,6DAA6D,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,gBAAgB;QAAE,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,aAAa;QAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,CAAC,OAA2B,EAAQ,EAAE;IACnE,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IACE,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,cAAc,CAAC;QACxF,CAAC,OAAO,CAAC,QAAQ;QAEjB,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACtD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,cAAc,GAClB,CAAC,OAAO,CAAC,QAAQ;QACjB,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,cAAc;QAChC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;QACzC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,gBAAgB,GAAG,cAAc;QACrC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM;QAC1C,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;IAC9C,IACE,CAAC,WAAW;QACZ,CAAC,gBAAgB;QACjB,KAAK,CAAC,IAAI,CACR,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,cAAc,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,cAAc;YAChE,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ;YACnD,IAAI,CAAC,aAAa,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,aAAa,CAChE;QAED,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,kBAAkB,GAAG,CAAC,OAAyD,EAAE,EAAE;IACvF,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAoC,EAAE,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC5C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI;gBAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;YAC5E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW;YAC1C,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,yBAAyB,GAAG,CAAC,OAA2B,EAAQ,EAAE;IACtE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,gBAAgB,EAAE,MAAM,IAAI,EAAE;QACxD,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,SAAS;QACrC,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;IAC3E,IACE,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,MAAM;QACzC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACzB,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACrC,OAAO,CACL,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;gBAC5C,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;gBAChC,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,CAC3C,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;AAC5E,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG,CAC5B,OAAkB,EAClB,KAA4E,EAC5E,IAAc,EACd,KAAsC,EAChC,EAAE;IACR,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;SAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;SACvE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC3C,IACE,CAAC,OAAO,KAAK,SAAS,CAAC,cAAc,IAAI,OAAO,KAAK,SAAS,CAAC,QAAQ,CAAC;YACxE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS;YAE9B,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC5E,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACrD,IACE,CAAC,OAAO,KAAK,SAAS,CAAC,cAAc,IAAI,OAAO,KAAK,SAAS,CAAC,QAAQ,CAAC;YACxE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI;YAEzB,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;IAC9E,CAAC;;QAAM,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;AACrE,CAAC,CAAC"}

package/dist/internal/mcp-protocol.d.ts

@@ -0,0 +1,282 @@
+import type { AiScope, McpServerDefinition } from "./contracts.js";
+/**
+ * Safe, nonretryable failure while preparing a selected MCP catalog.
+ */
+export declare class AiMcpSetupFailure extends Error {
+    readonly code: "AUTHENTICATION_REQUIRED" | "UNSUPPORTED_CAPABILITY";
+    /**
+     * Creates one fixed category without retaining provider or credential text.
+     *
+     * @param code Supported safe setup failure category.
+     */
+    constructor(code: "AUTHENTICATION_REQUIRED" | "UNSUPPORTED_CAPABILITY");
+}
+/**
+ * Durable admission for one physical MCP protocol send.
+ */
+export interface AiMcpMessageTicket {
+    /**
+     * Runtime-assigned reservation identifier.
+     */
+    readonly id: string;
+    /**
+     * Fenced cancellation signal.
+     */
+    readonly signal: AbortSignal;
+    /**
+     * Absolute send deadline.
+     */
+    readonly deadlineEpochMs?: number;
+    /**
+     * Full decoded response credit, when configured, reserved before dispatch.
+     */
+    readonly maxOutputBytes?: number;
+}
+/**
+ * Materialized protocol message submitted for durable reservation.
+ */
+export interface AiMcpMessageRequest {
+    /**
+     * Setup or tool-call phase.
+     */
+    readonly phase: "setup" | "call";
+    /**
+     * Actual MCP JSON-RPC method or HTTP method.
+     */
+    readonly method: string;
+    /**
+     * Exact serialized request-body bytes.
+     */
+    readonly inputBytes: number;
+    /**
+     * Optional full response credit requested for this message.
+     */
+    readonly maxOutputBytes?: number;
+    /**
+     * Runtime-assigned tool call identity, present only for tool dispatch.
+     */
+    readonly toolCallId?: string;
+}
+/**
+ * Fenced runtime controls for all MCP setup and tool sends.
+ */
+export interface AiMcpProtocolControl {
+    /**
+     * Invocation cancellation.
+     */
+    readonly signal: AbortSignal;
+    /**
+     * Invocation deadline.
+     */
+    readonly deadlineEpochMs?: number;
+    /**
+     * Reads current epoch milliseconds from the runtime clock.
+     *
+     * @returns Current epoch milliseconds from the runtime clock.
+     */
+    readonly nowEpochMs: () => number;
+    /**
+     * Checks whether the active execution fence still admits sends.
+     *
+     * @returns Whether the active execution fence still admits sends.
+     */
+    readonly hasAuthority: () => boolean;
+    /**
+     * Acquires request bytes and full output credit before physical send.
+     *
+     * @param request Exact physical message and requested credit.
+     * @returns Fenced reservation ticket after persistence.
+     */
+    readonly reserveMessage: (request: AiMcpMessageRequest) => Promise<AiMcpMessageTicket>;
+    /**
+     * Records each received chunk, including a crossing chunk, synchronously.
+     *
+     * @param ticketId Reservation receiving bytes.
+     * @param bytes Decoded bytes in this chunk.
+     */
+    readonly onReceived: (ticketId: string, bytes: number) => void;
+    /**
+     * Persists known receipt once a send settles; absent bytes retain uncertain credit.
+     *
+     * @param ticketId Settled reservation.
+     * @param receivedBytes Complete measured decoded bytes; absent after an incomplete response.
+     * @returns Completion after durable receipt recording.
+     */
+    readonly finishMessage: (ticketId: string, receivedBytes?: number) => Promise<void>;
+}
+/**
+ * Credentials resolved by runtime callbacks before protocol construction.
+ */
+export interface AiMcpResolvedConnection {
+    /**
+     * Scoped HTTP headers; never included in recorded identity.
+     */
+    readonly headers?: Readonly<Record<string, string>>;
+    /**
+     * Scoped child environment; never included in recorded identity.
+     */
+    readonly environment?: Readonly<Record<string, string>>;
+}
+/**
+ * Credential-free configured endpoint pinned before protocol dispatch.
+ */
+export interface AiMcpConnectionIdentity {
+    /**
+     * Registered server identifier.
+     */
+    readonly serverId: string;
+    /**
+     * Registered server revision.
+     */
+    readonly revision: string;
+    /**
+     * `sha256:` followed by the SHA-256 hex digest of the configured HTTP URL, or of
+     * JSON.stringify([executable, args, cwd]) for stdio. Resolved headers and
+     * environment are excluded. The digest is compared before discovery.
+     */
+    readonly endpoint: string;
+}
+/**
+ * Accepted remote tool definition advertised to the selected model.
+ */
+export interface AiMcpToolDefinition {
+    /**
+     * Exact configured MCP tool name.
+     */
+    readonly name: string;
+    /**
+     * Bounded discovered description.
+     */
+    readonly description: string;
+    /**
+     * Accepted input schema serialized as JSON.
+     */
+    readonly inputSchemaJson: string;
+    /**
+     * Canonical supported output schema, when advertised by the server.
+     */
+    readonly outputSchemaJson?: string;
+}
+/**
+ * Runtime-selected discovered definition tied to one configured tool reference.
+ */
+export interface AiMcpAdvertisedTool {
+    /**
+     * Configured MCP server identifier.
+     */
+    readonly server: string;
+    /**
+     * Configured tool name within that server.
+     */
+    readonly tool: string;
+    /**
+     * Bounded discovered description.
+     */
+    readonly description: string;
+    /**
+     * Canonical accepted JSON input schema.
+     */
+    readonly inputSchemaJson: string;
+    /**
+     * Canonical supported output schema retained for request replay comparison.
+     */
+    readonly outputSchemaJson?: string;
+}
+/**
+ * Bounded MCP result content admitted into a tool response.
+ */
+export type AiMcpResultContent = {
+    /**
+     * Text result discriminant.
+     */
+    readonly kind: "text";
+    /**
+     * Bounded UTF-8 text.
+     */
+    readonly text: string;
+} | {
+    /**
+     * Structured JSON result discriminant.
+     */
+    readonly kind: "json";
+    /**
+     * Bounded canonical JSON text.
+     */
+    readonly json: string;
+};
+/**
+ * One response from an externally dispatched MCP tool.
+ */
+export interface AiMcpToolResult {
+    /**
+     * Text or structured JSON, without resource or binary content.
+     */
+    readonly content: readonly AiMcpResultContent[];
+    /**
+     * MCP application error flag, distinct from an uncertain transport failure.
+     */
+    readonly isError: boolean;
+}
+/**
+ * One registered-server MCP connection; it cannot bypass runtime call intent.
+ */
+export interface AiMcpProtocolSession {
+    /**
+     * Credential-free server identity for persisted reconnection checks.
+     */
+    readonly identity: AiMcpConnectionIdentity;
+    /**
+     * Lists and validates only configured tool names. A bounded schema or catalog
+     * rejection uses AiMcpSetupFailure("UNSUPPORTED_CAPABILITY"). Raw transport,
+     * cancellation, storage, and fencing failures reject without that classification.
+     *
+     * @param allowedNames Registered names allowed for this invocation.
+     * @returns Bounded accepted definitions.
+     */
+    discover(allowedNames: readonly string[]): Promise<readonly AiMcpToolDefinition[]>;
+    /**
+     * Validates canonical JSON arguments locally before runtime authorization.
+     *
+     * @param name Advertised tool name.
+     * @param canonicalJson Serialized argument object.
+     */
+    validateArguments(name: string, canonicalJson: string): void;
+    /**
+     * Dispatches one already-authorized and journaled tool call.
+     *
+     * @param name Advertised tool name.
+     * @param canonicalJson Locally validated argument object.
+     * @param options Runtime tool identity and call bounds.
+     * @returns Bounded text or structured JSON result.
+     */
+    call(name: string, canonicalJson: string, options: {
+        readonly toolCallId: string;
+        readonly signal: AbortSignal;
+        readonly deadlineEpochMs?: number;
+        readonly maxResultBytes?: number;
+    }): Promise<AiMcpToolResult>;
+    /**
+     * Closes protocol sends and resources.
+     *
+     * @returns Completion after protocol sends and resources close.
+     */
+    close(): Promise<void>;
+}
+/**
+ * Optional registration-scoped MCP protocol implementation.
+ */
+export interface AiMcpProtocolFactory {
+    /**
+     * Creates one selected server connection after runtime authorization.
+     *
+     * @param options Registered server, scoped credentials, and runtime controls.
+     * @returns Negotiated session with credential-free identity.
+     */
+    connect(options: {
+        readonly server: McpServerDefinition;
+        readonly scope: AiScope;
+        readonly resolved: AiMcpResolvedConnection;
+        readonly control: AiMcpProtocolControl;
+    }): Promise<AiMcpProtocolSession>;
+}
+//# sourceMappingURL=mcp-protocol.d.ts.map

package/dist/internal/mcp-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-protocol.d.ts","sourceRoot":"","sources":["../../src/internal/mcp-protocol.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAEnE;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAM9B,QAAQ,CAAC,IAAI,EAAE,yBAAyB,GAAG,wBAAwB;IAL/E;;;;OAIG;gBACkB,IAAI,EAAE,yBAAyB,GAAG,wBAAwB;CAQhF;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAE7B;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAElC;;OAEG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC;IAEjC;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAEjC;;OAEG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAE7B;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAElC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC;IAElC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,OAAO,CAAC;IAErC;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAEvF;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAE/D;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrF;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEpD;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACzD;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IAEjC;;OAEG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IAEjC;;OAEG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IACE;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IACE;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEN;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAEhD;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAE3C;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC;IAEnF;;;;;OAKG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7D;;;;;;;OAOG;IACH,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE;QACP,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;QAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;KAClC,GACA,OAAO,CAAC,eAAe,CAAC,CAAC;IAE5B;;;;OAIG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,OAAO,CAAC,OAAO,EAAE;QACf,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;QACrC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QACxB,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;QAC3C,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;KACxC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACnC"}

package/dist/internal/mcp-protocol.js

@@ -0,0 +1,32 @@
+/*
+ * Copyright 2026, CodeMatters. All rights reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License. You may obtain a copy of the License at
+ *
+ * https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under the License
+ * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+ * or implied. See the License for the specific language governing permissions and limitations under
+ * the License.
+ */
+/**
+ * Safe, nonretryable failure while preparing a selected MCP catalog.
+ */
+export class AiMcpSetupFailure extends Error {
+    code;
+    /**
+     * Creates one fixed category without retaining provider or credential text.
+     *
+     * @param code Supported safe setup failure category.
+     */
+    constructor(code) {
+        super(code === "AUTHENTICATION_REQUIRED"
+            ? "MCP connection authorization denied."
+            : "MCP tool capability is unsupported.");
+        this.code = code;
+        this.name = "AiMcpSetupFailure";
+    }
+}
+//# sourceMappingURL=mcp-protocol.js.map

package/dist/internal/mcp-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-protocol.js","sourceRoot":"","sources":["../../src/internal/mcp-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAMrB;IALrB;;;;OAIG;IACH,YAAqB,IAA0D;QAC7E,KAAK,CACH,IAAI,KAAK,yBAAyB;YAChC,CAAC,CAAC,sCAAsC;YACxC,CAAC,CAAC,qCAAqC,CAC1C,CAAC;QALiB,SAAI,GAAJ,IAAI,CAAsD;QAM7E,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF"}

package/dist/internal/mcp.d.ts

@@ -0,0 +1,36 @@
+import type { McpServerDefinition } from "./contracts.js";
+declare const mcpServerBrand: unique symbol;
+/**
+ * Factory-created MCP server configuration accepted by the registry.
+ */
+export interface McpServerRegistration {
+    /**
+     * Private marker carried only by a factory-created MCP registration.
+     */
+    readonly [mcpServerBrand]: true;
+    /**
+     * Validated MCP server identifier.
+     */
+    readonly id: string;
+}
+/**
+ * Defines application-approved MCP servers without creating a connection.
+ */
+export declare const Mcp: {
+    /**
+     * Validates and snapshots explicit connection and tool policy.
+     *
+     * @param definition Application MCP configuration.
+     * @returns Factory-created registry entry.
+     */
+    server(definition: McpServerDefinition): McpServerRegistration;
+};
+/**
+ * Reads a validated MCP policy after checking runtime provenance.
+ *
+ * @param registration Candidate configuration.
+ * @returns Original frozen settings.
+ */
+export declare const mcpDefinition: (registration: McpServerRegistration) => McpServerDefinition;
+export {};
+//# sourceMappingURL=mcp.d.ts.map

package/dist/internal/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/internal/mcp.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,mBAAmB,EAA+B,MAAM,gBAAgB,CAAC;AAGvF,QAAA,MAAM,cAAc,EAAE,OAAO,MAAiC,CAAC;AAG/D;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,QAAQ,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC;IAEhC;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAuFD;;GAEG;AACH,eAAO,MAAM,GAAG;IACd;;;;;OAKG;uBACgB,mBAAmB,GAAG,qBAAqB;CAoB/D,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GAAI,cAAc,qBAAqB,KAAG,mBAMnE,CAAC"}

package/dist/internal/mcp.js

@@ -0,0 +1,144 @@
+/*
+ * Copyright 2026, CodeMatters. All rights reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License. You may obtain a copy of the License at
+ *
+ * https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under the License
+ * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+ * or implied. See the License for the specific language governing permissions and limitations under
+ * the License.
+ */
+import { nonblank, positiveInteger } from "./model.js";
+const mcpServerBrand = Symbol("SpineMcpServer");
+const mcpDefinitions = new WeakMap();
+/**
+ * Copies an application-defined transport without retaining mutable arrays.
+ *
+ * @param transport Streamable HTTP or local stdio configuration.
+ * @returns Immutable transport options.
+ */
+const copyTransport = (transport) => {
+    if (transport.kind === "streamable-http") {
+        let url;
+        try {
+            url = new URL(nonblank(transport.url, "transport.url"));
+        }
+        catch {
+            throw new TypeError("transport.url must be absolute HTTP URL");
+        }
+        if (!["http:", "https:"].includes(url.protocol))
+            throw new TypeError("transport.url must be HTTP or HTTPS");
+        if (url.username || url.password)
+            throw new TypeError("transport.url cannot embed credentials");
+        if (url.hash)
+            throw new TypeError("transport.url cannot contain a fragment");
+        return Object.freeze({
+            kind: "streamable-http",
+            url: url.href,
+            ...(transport.headers ? { headers: transport.headers } : {}),
+        });
+    }
+    const kind = transport.kind;
+    if (kind !== "stdio")
+        throw new TypeError("MCP transport kind is unsupported");
+    const executable = nonblank(transport.executable, "transport.executable");
+    if (!absolutePath(executable))
+        throw new TypeError("transport.executable must be absolute");
+    if (transport.cwd && !absolutePath(transport.cwd))
+        throw new TypeError("transport.cwd must be absolute");
+    if (!Array.isArray(transport.args) || transport.args.some((arg) => typeof arg !== "string"))
+        throw new TypeError("transport.args must be fixed strings");
+    return Object.freeze({
+        kind: "stdio",
+        executable,
+        args: Object.freeze(Array.from(transport.args, (argument) => argument)),
+        ...(transport.cwd ? { cwd: transport.cwd } : {}),
+        ...(transport.environment ? { environment: transport.environment } : {}),
+    });
+};
+/**
+ * Checks a configured executable or directory path.
+ *
+ * @param path Application-supplied path.
+ * @returns Whether the path is absolute on POSIX or Windows.
+ */
+const absolutePath = (path) => {
+    return path.startsWith("/") || /^[A-Za-z]:[\\/]/u.test(path);
+};
+/**
+ * Copies one bounded authorization policy.
+ *
+ * @param name Advertised exact tool name.
+ * @param policy Application policy.
+ * @returns Frozen validated policy.
+ */
+const copyPolicy = (name, policy) => {
+    nonblank(name, "tool name");
+    const effect = policy.effect;
+    if (effect !== "read" && effect !== "write")
+        throw new TypeError(`tool ${name} effect is unsupported`);
+    if (typeof policy.authorize !== "function")
+        throw new TypeError(`tool ${name} authorize is required`);
+    return Object.freeze({
+        effect: policy.effect,
+        ...(policy.timeoutMs === undefined
+            ? {}
+            : { timeoutMs: positiveInteger(policy.timeoutMs, `tool ${name} timeoutMs`) }),
+        ...(policy.maxArgumentBytes === undefined
+            ? {}
+            : {
+                maxArgumentBytes: positiveInteger(policy.maxArgumentBytes, `tool ${name} maxArgumentBytes`),
+            }),
+        ...(policy.maxResultBytes === undefined
+            ? {}
+            : { maxResultBytes: positiveInteger(policy.maxResultBytes, `tool ${name} maxResultBytes`) }),
+        authorize: policy.authorize,
+    });
+};
+/**
+ * Defines application-approved MCP servers without creating a connection.
+ */
+export const Mcp = {
+    /**
+     * Validates and snapshots explicit connection and tool policy.
+     *
+     * @param definition Application MCP configuration.
+     * @returns Factory-created registry entry.
+     */
+    server(definition) {
+        const id = nonblank(definition.id, "MCP server id");
+        const revision = nonblank(definition.revision, "MCP server revision");
+        if (typeof definition.authorizeConnect !== "function")
+            throw new TypeError("authorizeConnect callback is required");
+        const tools = Object.fromEntries(Object.entries(definition.tools).map(([name, policy]) => [name, copyPolicy(name, policy)]));
+        if (Object.keys(tools).length === 0)
+            throw new TypeError("MCP server tools are required");
+        const copy = Object.freeze({
+            id,
+            revision,
+            transport: copyTransport(definition.transport),
+            authorizeConnect: definition.authorizeConnect,
+            tools: Object.freeze(tools),
+        });
+        const registration = Object.freeze({ [mcpServerBrand]: true, id });
+        mcpDefinitions.set(registration, copy);
+        return registration;
+    },
+};
+/**
+ * Reads a validated MCP policy after checking runtime provenance.
+ *
+ * @param registration Candidate configuration.
+ * @returns Original frozen settings.
+ */
+export const mcpDefinition = (registration) => {
+    const candidate = registration;
+    const definition = typeof candidate === "object" && candidate !== null ? mcpDefinitions.get(candidate) : undefined;
+    if (!definition)
+        throw new TypeError("MCP registration must come from a factory");
+    return definition;
+};
+//# sourceMappingURL=mcp.js.map

package/dist/internal/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/internal/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEvD,MAAM,cAAc,GAAkB,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAC/D,MAAM,cAAc,GAAG,IAAI,OAAO,EAA+B,CAAC;AAiBlE;;;;;GAKG;AACH,MAAM,aAAa,GAAG,CAAC,SAAuB,EAAgB,EAAE;IAC9D,IAAI,SAAS,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACzC,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAE,CAAC,OAAO,EAAE,QAAQ,CAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC3D,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;QAChG,IAAI,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,GAAG,CAAC,IAAI;YACb,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAY,SAAS,CAAC,IAAI,CAAC;IACrC,IAAI,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;IAC1E,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC5F,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC;QAC/C,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;QACzF,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,OAAO;QACb,UAAU;QACV,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC/E,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,YAAY,GAAG,CAAC,IAAY,EAAW,EAAE;IAC7C,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,MAAqB,EAAiB,EAAE;IACxE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAY,MAAM,CAAC,MAAM,CAAC;IACtC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,OAAO;QACzC,MAAM,IAAI,SAAS,CAAC,QAAQ,IAAI,wBAAwB,CAAC,CAAC;IAC5D,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,UAAU;QACxC,MAAM,IAAI,SAAS,CAAC,QAAQ,IAAI,wBAAwB,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;YAChC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,IAAI,YAAY,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,gBAAgB,EAAE,eAAe,CAC/B,MAAM,CAAC,gBAAgB,EACvB,QAAQ,IAAI,mBAAmB,CAChC;aACF,CAAC;QACN,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,eAAe,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,IAAI,iBAAiB,CAAC,EAAE,CAAC;QAC9F,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB;;;;;OAKG;IACH,MAAM,CAAC,UAA+B;QACpC,MAAM,EAAE,GAAG,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;QACtE,IAAI,OAAO,UAAU,CAAC,gBAAgB,KAAK,UAAU;YACnD,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAC3F,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;YACzB,EAAE;YACF,QAAQ;YACR,SAAS,EAAE,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC;YAC9C,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;YAC7C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,IAAa,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACvC,OAAO,YAAY,CAAC;IACtB,CAAC;CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,YAAmC,EAAuB,EAAE;IACxF,MAAM,SAAS,GAAY,YAAY,CAAC;IACxC,MAAM,UAAU,GACd,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IAClF,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC"}