@tacuchi/agent-workflow-cli 23.0.0 → 24.0.0

package/dist/application/mcp-host-receipt-service.js

@@ -0,0 +1,399 @@
+import { isAbsolute } from "node:path";
+import { normalizeMcpInstance, validateMcpInstance } from "../domain/mcp-entry.js";
+import { redactSensitiveText } from "../domain/redaction.js";
+import { canonicalJson, semanticDigest } from "./semantic-operation/protocol.js";
+/**
+ * Durable, secret-free evidence about a host MCP registration.
+ *
+ * This module deliberately owns receipt semantics only. Persistence is behind
+ * {@link McpHostReceiptStore}, so callers such as setup, migration and the
+ * stdio server do not each invent their own partial state or file protocol.
+ */
+export const MCP_HOST_RECEIPT_SCHEMA_VERSION = 1;
+const MCP_HOSTS = ["claude", "codex", "warp", "gemini", "opencode", "crush", "kimi"];
+/** Error text intentionally never quotes a descriptor, DSN, SQL, or user input. */
+export class McpHostReceiptError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "McpHostReceiptError";
+    }
+}
+/**
+ * Deep receipt module used by setup/migration and by the MCP server lifecycle.
+ * A registration always revokes prior host-load proof and makes reload explicit.
+ */
+export class McpHostReceiptService {
+    store;
+    constructor(store) {
+        this.store = store;
+    }
+    async list() {
+        return await this.store.read();
+    }
+    async find(identity) {
+        const key = normalizeIdentity(identity);
+        return (await this.store.read()).find((receipt) => sameIdentity(receipt, key));
+    }
+    async register(input) {
+        const identity = normalizeIdentity(input);
+        const descriptorDigest = digestMcpReceiptDescriptor(input.descriptor);
+        const worklineVersion = requireVersion(input.worklineVersion);
+        const registeredAt = requireInstant(input.registeredAt ?? new Date().toISOString());
+        const receipt = {
+            schema_version: MCP_HOST_RECEIPT_SCHEMA_VERSION,
+            ...identity,
+            workline_version: worklineVersion,
+            descriptor_digest: descriptorDigest,
+            registered_at: registeredAt,
+            reload_required: true,
+        };
+        return await this.store.update((receipts) => ({
+            receipts: replaceReceipt(receipts, receipt),
+            result: receipt,
+        }));
+    }
+    /** Remove receipt evidence only after the matching host descriptor is gone. */
+    async remove(identityInput) {
+        const identity = normalizeIdentity(identityInput);
+        return await this.store.update((receipts) => {
+            const remaining = receipts.filter((receipt) => !sameIdentity(receipt, identity));
+            return { receipts: remaining, result: remaining.length !== receipts.length };
+        });
+    }
+    /**
+     * Record a real host lifecycle notification. A local probe cannot call this
+     * truthfully: it must know the exact currently persisted descriptor digest.
+     */
+    async observeHostLoad(input) {
+        const identity = normalizeIdentity(input);
+        const descriptorDigest = requireDigest(input.descriptorDigest);
+        const observedAt = requireInstant(input.observedAt ?? new Date().toISOString());
+        return await this.store.update((receipts) => {
+            const current = findReceipt(receipts, identity);
+            if (current === undefined) {
+                throw new McpHostReceiptError("MCP_RECEIPT_NOT_FOUND", "No existe un recibo MCP para la conexión y host indicados.");
+            }
+            if (current.descriptor_digest !== descriptorDigest) {
+                throw new McpHostReceiptError("MCP_RECEIPT_DESCRIPTOR_STALE", "El servidor corresponde a un descriptor MCP anterior; recargá el host antes de confirmarlo.");
+            }
+            const next = {
+                ...current,
+                reload_required: false,
+                last_host_load_observed: { observed_at: observedAt, descriptor_digest: descriptorDigest },
+            };
+            return { receipts: replaceReceipt(receipts, next), result: next };
+        });
+    }
+    /** Keep launchability separately from host loading, including its exact failing phase. */
+    async recordLaunchProbe(input) {
+        const identity = normalizeIdentity(input);
+        const observedAt = requireInstant(input.observedAt ?? new Date().toISOString());
+        const phase = requireProbePhase(input.phase);
+        const outcome = requireProbeOutcome(input.outcome);
+        const expectedDescriptorDigest = input.descriptorDigest === undefined ? undefined : requireDigest(input.descriptorDigest);
+        return await this.store.update((receipts) => {
+            const current = findReceipt(receipts, identity);
+            if (current === undefined) {
+                throw new McpHostReceiptError("MCP_RECEIPT_NOT_FOUND", "No existe un recibo MCP para la conexión y host indicados.");
+            }
+            if (expectedDescriptorDigest !== undefined &&
+                current.descriptor_digest !== expectedDescriptorDigest) {
+                throw new McpHostReceiptError("MCP_RECEIPT_DESCRIPTOR_STALE", "El descriptor MCP cambió durante el probe; la evidencia no se registró.");
+            }
+            const next = {
+                ...current,
+                last_launch_probe: { observed_at: observedAt, outcome, phase },
+            };
+            return { receipts: replaceReceipt(receipts, next), result: next };
+        });
+    }
+    /**
+     * Record only a failed native inspection. A passing inspection deliberately
+     * clears stale failure evidence, while the descriptor digest fences races
+     * with a later host-config write.
+     */
+    async recordNativeHostCheck(input) {
+        const identity = normalizeIdentity(input);
+        const descriptorDigest = requireDigest(input.descriptorDigest);
+        const outcome = requireNativeCheckOutcome(input.outcome);
+        const code = nativeCheckFailureCodeFor(outcome, input.code);
+        const observedAt = requireInstant(input.observedAt ?? new Date().toISOString());
+        return await this.store.update((receipts) => {
+            const current = findReceipt(receipts, identity);
+            if (current === undefined) {
+                throw new McpHostReceiptError("MCP_RECEIPT_NOT_FOUND", "No existe un recibo MCP para la conexión y host indicados.");
+            }
+            if (current.descriptor_digest !== descriptorDigest) {
+                throw new McpHostReceiptError("MCP_RECEIPT_DESCRIPTOR_STALE", "El descriptor MCP cambió durante la verificación nativa; la evidencia no se registró.");
+            }
+            const next = code === undefined
+                ? withoutNativeCheckFailure(current)
+                : { ...current, last_native_check_failure: { observed_at: observedAt, code } };
+            return { receipts: replaceReceipt(receipts, next), result: next };
+        });
+    }
+}
+/**
+ * The digest deliberately covers only the persisted, non-secret launch shape.
+ * Rejecting credential-shaped values before hashing prevents a receipt from
+ * becoming a stable fingerprint of a DSN that should never have been there.
+ */
+export function digestMcpReceiptDescriptor(descriptor) {
+    if (typeof descriptor.command !== "string" || !isAbsolute(descriptor.command)) {
+        throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "El descriptor MCP debe declarar una ruta absoluta al ejecutable de Node.");
+    }
+    if (!Array.isArray(descriptor.args) || descriptor.args.length === 0) {
+        throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "El descriptor MCP debe declarar el entrypoint absoluto y sus argumentos.");
+    }
+    if (!isAbsolute(descriptor.args[0] ?? "")) {
+        throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "El descriptor MCP debe declarar una ruta absoluta al entrypoint.");
+    }
+    assertSecretFree(descriptor.command);
+    for (const arg of descriptor.args) {
+        if (typeof arg !== "string") {
+            throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "El descriptor MCP contiene un argumento inválido.");
+        }
+        assertSecretFree(arg);
+        if (isSecretFlag(arg)) {
+            throw new McpHostReceiptError("MCP_RECEIPT_SECRET_REJECTED", "El recibo MCP rechazó un argumento que podría transportar una credencial.");
+        }
+    }
+    return `sha256:${semanticDigest({ command: descriptor.command, args: [...descriptor.args] })}`;
+}
+/** Parses persisted state fail-closed, without echoing a potentially secret file. */
+export function parseMcpHostReceiptBook(raw) {
+    let value;
+    try {
+        value = JSON.parse(raw);
+    }
+    catch {
+        throw new McpHostReceiptError("MCP_RECEIPT_MALFORMED", "El libro de recibos MCP no contiene JSON válido.");
+    }
+    if (!isRecord(value) ||
+        value.schema_version !== MCP_HOST_RECEIPT_SCHEMA_VERSION ||
+        !Array.isArray(value.receipts)) {
+        throw new McpHostReceiptError("MCP_RECEIPT_MALFORMED", "El libro de recibos MCP tiene una versión o forma no reconocida.");
+    }
+    const receipts = value.receipts.map(parseReceipt);
+    const keys = new Set();
+    for (const receipt of receipts) {
+        const key = receiptKey(receipt);
+        if (keys.has(key)) {
+            throw new McpHostReceiptError("MCP_RECEIPT_MALFORMED", "El libro de recibos MCP contiene identidades duplicadas.");
+        }
+        keys.add(key);
+    }
+    return { schema_version: MCP_HOST_RECEIPT_SCHEMA_VERSION, receipts: sortReceipts(receipts) };
+}
+/** Stable, newline-terminated bytes for atomic stores and readback comparison. */
+export function serializeMcpHostReceiptBook(receipts) {
+    const book = {
+        schema_version: MCP_HOST_RECEIPT_SCHEMA_VERSION,
+        receipts: sortReceipts(receipts),
+    };
+    // canonicalJson makes the digest/readback comparison deterministic across hosts.
+    return `${canonicalJson(book)}\n`;
+}
+export function emptyMcpHostReceiptBook() {
+    return { schema_version: MCP_HOST_RECEIPT_SCHEMA_VERSION, receipts: [] };
+}
+function parseReceipt(value) {
+    if (!isRecord(value) || value.schema_version !== MCP_HOST_RECEIPT_SCHEMA_VERSION) {
+        throw new McpHostReceiptError("MCP_RECEIPT_MALFORMED", "Un recibo MCP tiene una forma no reconocida.");
+    }
+    const identity = normalizeIdentity({
+        host: value.host,
+        scope: value.scope,
+        connection: value.connection,
+    });
+    const worklineVersion = requireVersion(value.workline_version);
+    const descriptorDigest = requireDigest(value.descriptor_digest);
+    const registeredAt = requireInstant(value.registered_at);
+    if (typeof value.reload_required !== "boolean") {
+        throw new McpHostReceiptError("MCP_RECEIPT_MALFORMED", "Un recibo MCP no declara reload_required.");
+    }
+    const base = {
+        schema_version: MCP_HOST_RECEIPT_SCHEMA_VERSION,
+        ...identity,
+        workline_version: worklineVersion,
+        descriptor_digest: descriptorDigest,
+        registered_at: registeredAt,
+        reload_required: value.reload_required,
+    };
+    const observed = value.last_host_load_observed;
+    const probe = value.last_launch_probe;
+    const nativeFailure = value.last_native_check_failure;
+    const parsedObservation = observed === undefined ? undefined : parseHostLoadObservation(observed);
+    if (!value.reload_required && parsedObservation === undefined) {
+        throw new McpHostReceiptError("MCP_RECEIPT_MALFORMED", "Un recibo MCP cargado no tiene una observación de host que lo respalde.");
+    }
+    if (!value.reload_required && parsedObservation?.descriptor_digest !== descriptorDigest) {
+        throw new McpHostReceiptError("MCP_RECEIPT_MALFORMED", "La observación de carga MCP no corresponde al descriptor vigente.");
+    }
+    return {
+        ...base,
+        ...(parsedObservation === undefined ? {} : { last_host_load_observed: parsedObservation }),
+        ...(probe === undefined ? {} : { last_launch_probe: parseLaunchProbe(probe) }),
+        ...(nativeFailure === undefined
+            ? {}
+            : { last_native_check_failure: parseNativeHostCheckFailure(nativeFailure) }),
+    };
+}
+function parseHostLoadObservation(value) {
+    if (!isRecord(value)) {
+        throw new McpHostReceiptError("MCP_RECEIPT_MALFORMED", "La observación de carga MCP es inválida.");
+    }
+    return {
+        observed_at: requireInstant(value.observed_at),
+        descriptor_digest: requireDigest(value.descriptor_digest),
+    };
+}
+function parseLaunchProbe(value) {
+    if (!isRecord(value) || (value.outcome !== "passed" && value.outcome !== "failed")) {
+        throw new McpHostReceiptError("MCP_RECEIPT_MALFORMED", "El probe MCP registrado es inválido.");
+    }
+    return {
+        observed_at: requireInstant(value.observed_at),
+        outcome: value.outcome,
+        phase: requireProbePhase(value.phase),
+    };
+}
+function parseNativeHostCheckFailure(value) {
+    if (!isRecord(value)) {
+        throw new McpHostReceiptError("MCP_RECEIPT_MALFORMED", "La evidencia nativa MCP registrada es inválida.");
+    }
+    try {
+        return {
+            observed_at: requireInstant(value.observed_at),
+            code: requireNativeCheckFailureCode(value.code),
+        };
+    }
+    catch (error) {
+        if (error instanceof McpHostReceiptError) {
+            throw new McpHostReceiptError("MCP_RECEIPT_MALFORMED", "La evidencia nativa MCP es inválida.");
+        }
+        throw error;
+    }
+}
+function normalizeIdentity(input) {
+    if (!MCP_HOSTS.includes(input.host)) {
+        throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "El host MCP indicado no es compatible.");
+    }
+    if (input.scope !== "workspace" && input.scope !== "global") {
+        throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "El scope del recibo MCP es inválido.");
+    }
+    if (typeof input.connection !== "string") {
+        throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "La conexión MCP es inválida.");
+    }
+    const connection = validateMcpInstance(input.connection);
+    if (!connection.ok) {
+        throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "La conexión MCP es inválida.");
+    }
+    return {
+        host: input.host,
+        scope: input.scope,
+        connection: normalizeMcpInstance(connection.value),
+    };
+}
+function replaceReceipt(receipts, replacement) {
+    return sortReceipts([
+        ...receipts.filter((receipt) => !sameIdentity(receipt, replacement)),
+        replacement,
+    ]);
+}
+function withoutNativeCheckFailure(receipt) {
+    const { last_native_check_failure: _discarded, ...remaining } = receipt;
+    return remaining;
+}
+function findReceipt(receipts, identity) {
+    return receipts.find((receipt) => sameIdentity(receipt, identity));
+}
+function sameIdentity(left, right) {
+    return (left.host === right.host && left.scope === right.scope && left.connection === right.connection);
+}
+function sortReceipts(receipts) {
+    return [...receipts].sort((left, right) => compareCodeUnits(receiptKey(left), receiptKey(right)));
+}
+function receiptKey(receipt) {
+    return `${receipt.scope}\u0000${receipt.host}\u0000${receipt.connection}`;
+}
+function requireVersion(value) {
+    if (typeof value !== "string" || value.trim().length === 0 || value.length > 128) {
+        throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "La versión Workline del recibo MCP es inválida.");
+    }
+    assertSecretFree(value);
+    return value.trim();
+}
+function requireDigest(value) {
+    if (typeof value !== "string" || !/^sha256:[a-f0-9]{64}$/.test(value)) {
+        throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "El digest del descriptor MCP es inválido.");
+    }
+    return value;
+}
+function requireInstant(value) {
+    if (typeof value !== "string" ||
+        value.length > 64 ||
+        Number.isNaN(Date.parse(value)) ||
+        new Date(value).toISOString() !== value) {
+        throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "La marca temporal del recibo MCP es inválida.");
+    }
+    return value;
+}
+function requireProbePhase(value) {
+    if (value !== "spawn" &&
+        value !== "initialize" &&
+        value !== "initialized" &&
+        value !== "tools/list" &&
+        value !== "tools/call") {
+        throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "La fase del probe MCP es inválida.");
+    }
+    return value;
+}
+function requireProbeOutcome(value) {
+    if (value !== "passed" && value !== "failed") {
+        throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "El resultado del probe MCP es inválido.");
+    }
+    return value;
+}
+function requireNativeCheckOutcome(value) {
+    if (value !== "passed" && value !== "failed") {
+        throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "El resultado de la verificación nativa MCP es inválido.");
+    }
+    return value;
+}
+function nativeCheckFailureCodeFor(outcome, value) {
+    if (outcome === "passed") {
+        if (value !== undefined) {
+            throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "Una verificación nativa MCP aprobada no puede declarar un fallo.");
+        }
+        return undefined;
+    }
+    return requireNativeCheckFailureCode(value);
+}
+function requireNativeCheckFailureCode(value) {
+    if (value !== "HOST_BINARY_MISSING" &&
+        value !== "HOST_NATIVE_CHECK_FAILED" &&
+        value !== "HOST_ENTRY_NOT_VISIBLE") {
+        throw new McpHostReceiptError("MCP_RECEIPT_INVALID", "El código de la verificación nativa MCP es inválido.");
+    }
+    return value;
+}
+function assertSecretFree(value) {
+    // A receipt never needs a connection URI or an assignment carrying credentials.
+    if (redactSensitiveText(value) !== value ||
+        /(?:^|[?&;\s-])(?:password|passwd|secret|token|api[-_]?key|dsn|pgpassword|pgpassfile)\s*=/i.test(value)) {
+        throw new McpHostReceiptError("MCP_RECEIPT_SECRET_REJECTED", "El recibo MCP rechazó material que podría contener una credencial.");
+    }
+}
+function isSecretFlag(value) {
+    return /^--?(?:token|secret|password|passwd|pwd|api[-_]?key|key|auth|dsn|database[-_]?url|pgpassword|pgpassfile)(?:=|$)/i.test(value);
+}
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function compareCodeUnits(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+//# sourceMappingURL=mcp-host-receipt-service.js.map

package/dist/application/mcp-host-receipt-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-host-receipt-service.js","sourceRoot":"","sources":["../../src/application/mcp-host-receipt-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAEjF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAEjD,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAU,CAAC;AA+H9F,mFAAmF;AACnF,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAEjC;IADX,YACW,IAA6B,EACtC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAyB;QAItC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,KAA0B;QAA1B,UAAK,GAAL,KAAK,CAAqB;IAAG,CAAC;IAE3D,KAAK,CAAC,IAAI;QACR,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAA4B;QACrC,MAAM,GAAG,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACxC,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA6B;QAC1C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACpF,MAAM,OAAO,GAAmB;YAC9B,cAAc,EAAE,+BAA+B;YAC/C,GAAG,QAAQ;YACX,gBAAgB,EAAE,eAAe;YACjC,iBAAiB,EAAE,gBAAgB;YACnC,aAAa,EAAE,YAAY;YAC3B,eAAe,EAAE,IAAI;SACtB,CAAC;QAEF,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC5C,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC3C,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,MAAM,CAAC,aAAiC;QAC5C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAClD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YACjF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC/E,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,KAAyB;QAC7C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,gBAAgB,GAAG,aAAa,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEhF,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAChD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,4DAA4D,CAC7D,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,iBAAiB,KAAK,gBAAgB,EAAE,CAAC;gBACnD,MAAM,IAAI,mBAAmB,CAC3B,8BAA8B,EAC9B,6FAA6F,CAC9F,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAmB;gBAC3B,GAAG,OAAO;gBACV,eAAe,EAAE,KAAK;gBACtB,uBAAuB,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,iBAAiB,EAAE,gBAAgB,EAAE;aAC1F,CAAC;YACF,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,iBAAiB,CAAC,KAA2B;QACjD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,wBAAwB,GAC5B,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAE3F,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAChD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,4DAA4D,CAC7D,CAAC;YACJ,CAAC;YACD,IACE,wBAAwB,KAAK,SAAS;gBACtC,OAAO,CAAC,iBAAiB,KAAK,wBAAwB,EACtD,CAAC;gBACD,MAAM,IAAI,mBAAmB,CAC3B,8BAA8B,EAC9B,yEAAyE,CAC1E,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAmB;gBAC3B,GAAG,OAAO;gBACV,iBAAiB,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE;aAC/D,CAAC;YACF,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,qBAAqB,CAAC,KAA+B;QACzD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,gBAAgB,GAAG,aAAa,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,yBAAyB,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEhF,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAChD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,4DAA4D,CAC7D,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,iBAAiB,KAAK,gBAAgB,EAAE,CAAC;gBACnD,MAAM,IAAI,mBAAmB,CAC3B,8BAA8B,EAC9B,uFAAuF,CACxF,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GACR,IAAI,KAAK,SAAS;gBAChB,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC;gBACpC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,yBAAyB,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;YACnF,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,UAAgC;IACzE,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB,EACrB,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB,EACrB,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB,EACrB,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB,EACrB,mDAAmD,CACpD,CAAC;QACJ,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,mBAAmB,CAC3B,6BAA6B,EAC7B,2EAA2E,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,UAAU,cAAc,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,KAAK,CAAC,cAAc,KAAK,+BAA+B;QACxD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,+BAA+B,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC/F,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,2BAA2B,CAAC,QAAmC;IAC7E,MAAM,IAAI,GAAuB;QAC/B,cAAc,EAAE,+BAA+B;QAC/C,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;KACjC,CAAC;IACF,iFAAiF;IACjF,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,OAAO,EAAE,cAAc,EAAE,+BAA+B,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,+BAA+B,EAAE,CAAC;QACjF,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,IAAI,EAAE,KAAK,CAAC,IAAe;QAC3B,KAAK,EAAE,KAAK,CAAC,KAAwB;QACrC,UAAU,EAAE,KAAK,CAAC,UAAoB;KACvC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,aAAa,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAmB;QAC3B,cAAc,EAAE,+BAA+B;QAC/C,GAAG,QAAQ;QACX,gBAAgB,EAAE,eAAe;QACjC,iBAAiB,EAAE,gBAAgB;QACnC,aAAa,EAAE,YAAY;QAC3B,eAAe,EAAE,KAAK,CAAC,eAAe;KACvC,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,uBAAuB,CAAC;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACtC,MAAM,aAAa,GAAG,KAAK,CAAC,yBAAyB,CAAC;IACtD,MAAM,iBAAiB,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAClG,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC9D,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,iBAAiB,EAAE,iBAAiB,KAAK,gBAAgB,EAAE,CAAC;QACxF,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,IAAI;QACP,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,CAAC;QAC1F,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,aAAa,KAAK,SAAS;YAC7B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,yBAAyB,EAAE,2BAA2B,CAAC,aAAa,CAAC,EAAE,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC;QAC9C,iBAAiB,EAAE,aAAa,CAAC,KAAK,CAAC,iBAAiB,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,mBAAmB,CAAC,uBAAuB,EAAE,sCAAsC,CAAC,CAAC;IACjG,CAAC;IACD,OAAO;QACL,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC;QAC9C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO;YACL,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC;YAC9C,IAAI,EAAE,6BAA6B,CAAC,KAAK,CAAC,IAAI,CAAC;SAChD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,sCAAsC,CACvC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,wCAAwC,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,sCAAsC,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,8BAA8B,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,8BAA8B,CAAC,CAAC;IACvF,CAAC;IACD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,oBAAoB,CAAC,UAAU,CAAC,KAAK,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,QAAmC,EACnC,WAA2B;IAE3B,OAAO,YAAY,CAAC;QAClB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACpE,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAuB;IACxD,MAAM,EAAE,yBAAyB,EAAE,UAAU,EAAE,GAAG,SAAS,EAAE,GAAG,OAAO,CAAC;IACxE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAClB,QAAmC,EACnC,QAA4B;IAE5B,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,YAAY,CAAC,IAAwB,EAAE,KAAyB;IACvE,OAAO,CACL,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAC/F,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAmC;IACvD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,UAAU,CAAC,OAA2B;IAC7C,OAAO,GAAG,OAAO,CAAC,KAAK,SAAS,OAAO,CAAC,IAAI,SAAS,OAAO,CAAC,UAAU,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACjF,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB,EACrB,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB,EACrB,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,EAAE;QACjB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EACvC,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB,EACrB,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IACE,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,YAAY;QACtB,KAAK,KAAK,aAAa;QACvB,KAAK,KAAK,YAAY;QACtB,KAAK,KAAK,YAAY,EACtB,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,oCAAoC,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,yCAAyC,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB,EACrB,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAChC,OAA4B,EAC5B,KAAc;IAEd,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB,EACrB,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,6BAA6B,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAc;IACnD,IACE,KAAK,KAAK,qBAAqB;QAC/B,KAAK,KAAK,0BAA0B;QACpC,KAAK,KAAK,wBAAwB,EAClC,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,qBAAqB,EACrB,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,gFAAgF;IAChF,IACE,mBAAmB,CAAC,KAAK,CAAC,KAAK,KAAK;QACpC,2FAA2F,CAAC,IAAI,CAC9F,KAAK,CACN,EACD,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,6BAA6B,EAC7B,oEAAoE,CACrE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,kHAAkH,CAAC,IAAI,CAC5H,KAAK,CACN,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/dist/application/mcp-host-receipt-store.js

@@ -0,0 +1,122 @@
+import { chmod, mkdir, open, readFile, rename, unlink } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { McpHostReceiptError, emptyMcpHostReceiptBook, parseMcpHostReceiptBook, serializeMcpHostReceiptBook, } from "./mcp-host-receipt-service.js";
+/**
+ * File adapter for {@link McpHostReceiptStore}.
+ *
+ * A `<file>.lock` is acquired with O_EXCL, so concurrent processes fail closed
+ * rather than losing an observation between read and replace. The actual book
+ * is written beside its destination and atomically renamed, then read back.
+ */
+export class NodeMcpHostReceiptStore {
+    file;
+    constructor(file) {
+        this.file = file;
+    }
+    async read() {
+        return (await this.readBook()).receipts;
+    }
+    async update(transaction) {
+        const lock = await this.acquireLock();
+        try {
+            const current = await this.readBook();
+            const next = transaction(current.receipts);
+            const payload = serializeMcpHostReceiptBook(next.receipts);
+            await this.writeAtomically(payload);
+            const readback = await this.readBook();
+            if (serializeMcpHostReceiptBook(readback.receipts) !== payload) {
+                throw new McpHostReceiptError("MCP_RECEIPT_MALFORMED", "La comprobación posterior de escritura del recibo MCP no coincide.");
+            }
+            return next.result;
+        }
+        finally {
+            try {
+                await lock.close();
+            }
+            catch {
+                // The lock is still unlinked below; a close failure must not strand it.
+            }
+            finally {
+                try {
+                    await unlink(this.lockFile());
+                }
+                catch {
+                    // The operation already has its outcome; lock cleanup is best effort.
+                }
+            }
+        }
+    }
+    async readBook() {
+        try {
+            return parseMcpHostReceiptBook(await readFile(this.file, "utf8"));
+        }
+        catch (err) {
+            if (err.code === "ENOENT")
+                return emptyMcpHostReceiptBook();
+            throw err;
+        }
+    }
+    async acquireLock() {
+        await mkdir(dirname(this.file), { recursive: true });
+        try {
+            return await open(this.lockFile(), "wx", 0o600);
+        }
+        catch (err) {
+            if (err.code === "EEXIST") {
+                throw new McpHostReceiptError("MCP_RECEIPT_BUSY", "Otro proceso está actualizando los recibos MCP; reintentá la operación.");
+            }
+            throw err;
+        }
+    }
+    async writeAtomically(payload) {
+        const staged = await this.reserveAtomicTempFile();
+        try {
+            await staged.handle.writeFile(payload, "utf8");
+            try {
+                await chmod(staged.path, 0o600);
+            }
+            catch {
+                // Some filesystems do not expose POSIX modes. The contents remain secret-free.
+            }
+            await staged.handle.close();
+            await rename(staged.path, this.file);
+        }
+        catch (err) {
+            try {
+                await staged.handle.close();
+            }
+            catch {
+                // The handle may have already been closed before a failed rename.
+            }
+            try {
+                await unlink(staged.path);
+            }
+            catch {
+                // Only this process can reach a reserved temporary path.
+            }
+            throw err;
+        }
+    }
+    async reserveAtomicTempFile() {
+        for (let attempt = 1; attempt <= 64; attempt += 1) {
+            const temporary = `${this.file}.${process.pid}.${attempt}.tmp`;
+            try {
+                return { path: temporary, handle: await open(temporary, "wx", 0o600) };
+            }
+            catch (err) {
+                if (err.code === "EEXIST")
+                    continue;
+                throw err;
+            }
+        }
+        throw new McpHostReceiptError("MCP_RECEIPT_BUSY", "No se pudo reservar un archivo temporal seguro para los recibos MCP; reintentá la operación.");
+    }
+    lockFile() {
+        return `${this.file}.lock`;
+    }
+}
+/** The single user-scoped receipt book covers both workspace and global host entries. */
+export function mcpHostReceiptFile(paths) {
+    return join(paths.userDevDir(), "mcp-host-receipts.json");
+}
+//# sourceMappingURL=mcp-host-receipt-store.js.map

package/dist/application/mcp-host-receipt-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-host-receipt-store.js","sourceRoot":"","sources":["../../src/application/mcp-host-receipt-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAEL,mBAAmB,EAGnB,uBAAuB,EACvB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AAOvC;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IACL;IAA7B,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7C,KAAK,CAAC,IAAI;QACR,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CACV,WAAkF;QAElF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,2BAA2B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3D,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,2BAA2B,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC/D,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,oEAAoE,CACrE,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,wEAAwE;YAC1E,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChC,CAAC;gBAAC,MAAM,CAAC;oBACP,sEAAsE;gBACxE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,IAAI,CAAC;YACH,OAAO,uBAAuB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAiB,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,uBAAuB,EAAE,CAAC;YAC3E,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAiB,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACzC,MAAM,IAAI,mBAAmB,CAC3B,kBAAkB,EAClB,yEAAyE,CAC1E,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,OAAe;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,+EAA+E;YACjF,CAAC;YACD,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,yDAAyD;YAC3D,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB;QAIjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAClD,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,MAAM,CAAC;YAC/D,IAAI,CAAC;gBACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YACzE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAAiB,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBACnD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,kBAAkB,EAClB,8FAA8F,CAC/F,CAAC;IACJ,CAAC;IAEO,QAAQ;QACd,OAAO,GAAG,IAAI,CAAC,IAAI,OAAO,CAAC;IAC7B,CAAC;CACF;AAED,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAAC,KAAmB;IACpD,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,wBAAwB,CAAC,CAAC;AAC5D,CAAC"}

package/dist/application/mcp-host-receipts.js

@@ -0,0 +1,28 @@
+import { readPackageVersion } from "../runtime/version.js";
+import { McpHostReceiptService, } from "./mcp-host-receipt-service.js";
+import { NodeMcpHostReceiptStore, mcpHostReceiptFile } from "./mcp-host-receipt-store.js";
+/** Creates the one namespaced, user-scoped receipt book used by MCP adapters. */
+export function openMcpHostReceiptService(paths) {
+    return new McpHostReceiptService(new NodeMcpHostReceiptStore(mcpHostReceiptFile(paths)));
+}
+/**
+ * Registers a receipt only after a host config write has succeeded. The entry
+ * is intentionally projected to command/args: env is neither persisted nor
+ * hashed, so a DSN can never reach a receipt.
+ */
+export async function registerPersistedMcpDescriptor(paths, input) {
+    return await openMcpHostReceiptService(paths).register({
+        host: input.host,
+        scope: input.scope,
+        connection: input.connection,
+        worklineVersion: readPackageVersion(),
+        descriptor: { command: input.entry.command, args: input.entry.args },
+    });
+}
+export async function removePersistedMcpReceipt(paths, identity) {
+    const service = openMcpHostReceiptService(paths);
+    if ((await service.find(identity)) === undefined)
+        return false;
+    return await service.remove(identity);
+}
+//# sourceMappingURL=mcp-host-receipts.js.map

package/dist/application/mcp-host-receipts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-host-receipts.js","sourceRoot":"","sources":["../../src/application/mcp-host-receipts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAEL,qBAAqB,GAEtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAG1F,iFAAiF;AACjF,MAAM,UAAU,yBAAyB,CAAC,KAAmB;IAC3D,OAAO,IAAI,qBAAqB,CAAC,IAAI,uBAAuB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3F,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAAmB,EACnB,KAAqC;IAErC,OAAO,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;QACrD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,eAAe,EAAE,kBAAkB,EAAE;QACrC,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;KACrE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAmB,EACnB,QAAuE;IAEvE,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/D,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC"}