@tiangong-ai/cli 0.0.23 → 0.0.24

package/dist/research/setup-command.js

@@ -0,0 +1,487 @@
+import { readFile } from "node:fs/promises";
+import { isAbsolute, resolve } from "node:path";
+import { CliError } from "../errors.js";
+import { stringifyJson, write } from "../io.js";
+import { parseStrictArgs, strictBoolean, strictString } from "../strict-args.js";
+import { EXTERNAL_SKILL_CONTEXT_PROFILE, EXTERNAL_SKILL_MEDIA_PROFILE, EXTERNAL_SKILL_PROFILE, } from "./workspace/external-skills.js";
+import { inspectResearchSetupCatalog } from "./workspace/setup-catalog.js";
+import { applyResearchSetupPlan, checkResearchSetupUpdates, createResearchSetupPlan, createResearchSetupUpgradePlan, doctorResearchSetup, inspectResearchSetupStatus, retryResearchSetup, runResearchSetupCompanion, setResearchSetupCredentialFromEnvironment, } from "./workspace/setup.js";
+import { isObject, workspacePaths } from "./workspace/storage.js";
+import { runResearchSetupWizard } from "./workspace/setup-wizard.js";
+const COMMON_OPTIONS = { help: "boolean", json: "boolean" };
+const WORKSPACE_OPTIONS = { ...COMMON_OPTIONS, workspace: "string" };
+export async function runResearchSetupCommand(argv, io) {
+    const [action, ...rest] = argv;
+    if (!action || action === "wizard" || action.startsWith("-")) {
+        return runResearchSetupWizard(action === "wizard" ? rest : argv, io);
+    }
+    if (action === "--help" || action === "-h" || action === "help") {
+        write(io.stdout, researchSetupHelp());
+        return 0;
+    }
+    if (action === "catalog")
+        return runCatalog(rest, io);
+    if (action === "plan")
+        return runPlan(rest, io);
+    if (action === "apply")
+        return runApply(rest, io);
+    if (action === "status")
+        return runStatus(rest, io);
+    if (action === "doctor")
+        return runDoctor(rest, io);
+    if (action === "credential")
+        return runCredential(rest, io);
+    if (action === "companion")
+        return runCompanion(rest, io);
+    if (action === "retry")
+        return runRetry(rest, io);
+    if (action === "update")
+        return runUpdate(rest, io);
+    if (action === "upgrade")
+        return runUpgrade(rest, io);
+    throw new CliError(`Unknown research setup action: ${action}`, {
+        code: "INVALID_ARGS",
+        exitCode: 2,
+    });
+}
+export function researchSetupHelp() {
+    return `Research setup commands:
+  tiangong-ai research setup
+      Interactive, user-initiated setup Wizard (TTY required).
+  tiangong-ai research setup catalog [--workspace <absolute-path>] [--scope project|global] [--agents codex,claude-code] [--json]
+  tiangong-ai research setup plan --workspace <absolute-path> --mode smoke-test|production-research --evidence-profile none|brave-baseline|brave-context|brave-media [--skills <csv>] [--scope project|global] [--agents <csv>] [--accept-license <csv>] [--settings <absolute-json>] [--credential-env <absolute-json>] [--agent-routes <absolute-json>] [--confirm-network-downloads] [--confirm-global] [--live] [--allow-synthetic-unstructure-upload] [--agent-smoke --confirm-agent-smoke-cost] [--replace-plan] [--json]
+  tiangong-ai research setup apply [--plan <absolute-json>] [--workspace <absolute-path>] [--skip-doctor] [--json]
+  tiangong-ai research setup status [--workspace <absolute-path>] [--json]
+  tiangong-ai research setup doctor [--workspace <absolute-path>] [--live] [--allow-synthetic-unstructure-upload] [--agent-smoke --confirm-agent-smoke-cost] [--json]
+  tiangong-ai research setup credential set --id <logical-id> --from-env <name> [--workspace <absolute-path>] [--json]
+  tiangong-ai research setup companion run --id tiangong.document-granular-decompose --input <absolute-file> --output <absolute-new-file> [--timeout <seconds>] [--workspace <absolute-path>] [--json]
+  tiangong-ai research setup companion run --id tiangong.academic-paper-download (--doi <doi> | --title <exact-title> [--author <name>] [--year <yyyy>]) --out <absolute-existing-directory> [--timeout <seconds>] [--workspace <absolute-path>] [--json]
+  tiangong-ai research setup retry --step <recorded-step> [--clear-stale-lock --confirm-clear-stale-lock] [--workspace <absolute-path>] [--json]
+  tiangong-ai research setup update --check [--workspace <absolute-path>] [--json]
+  tiangong-ai research setup upgrade --plan --confirm-upgrade --accept-license <csv> [--workspace <absolute-path>] [--json]
+
+Safety defaults:
+  Skills are never bundled or installed implicitly. Plans pin the installer,
+  source commits, tree hashes, destinations, licenses, and declared mutations.
+  Project-local copy mode is the default. Credentials are accepted only through
+  named owner environment variables and their values are never printed.
+  Every selected Skill requires its displayed license id and an explicit
+  network-download confirmation; an empty smoke-test plan requires neither.
+`;
+}
+async function runCatalog(argv, io) {
+    const args = parseStrictArgs(argv, { ...WORKSPACE_OPTIONS, scope: "string", agents: "string" }, "research setup catalog");
+    if (strictBoolean(args, "help"))
+        return writeSetupHelp(io);
+    rejectPositionals(args.positionals, "research setup catalog");
+    const result = await inspectResearchSetupCatalog({
+        selectedPath: workspaceArgument(args),
+        scope: setupScope(strictString(args, "scope")),
+        agents: setupAgents(strictString(args, "agents")),
+        environment: io.env,
+    });
+    writeSetupJson(io, result, args);
+    return 0;
+}
+async function runPlan(argv, io) {
+    const args = parseStrictArgs(argv, {
+        ...WORKSPACE_OPTIONS,
+        name: "string",
+        mode: "string",
+        "evidence-profile": "string",
+        skills: "string",
+        scope: "string",
+        agents: "string",
+        "accept-license": "string",
+        settings: "string",
+        "credential-env": "string",
+        "agent-routes": "string",
+        live: "boolean",
+        "allow-synthetic-unstructure-upload": "boolean",
+        "agent-smoke": "boolean",
+        "confirm-network-downloads": "boolean",
+        "confirm-global": "boolean",
+        "confirm-agent-smoke-cost": "boolean",
+        "replace-plan": "boolean",
+    }, "research setup plan");
+    if (strictBoolean(args, "help"))
+        return writeSetupHelp(io);
+    rejectPositionals(args.positionals, "research setup plan");
+    const workspace = requiredAbsoluteWorkspace(args);
+    const mode = setupMode(strictString(args, "mode"), true);
+    const evidenceProfile = setupEvidenceProfile(strictString(args, "evidence-profile"), true);
+    const settings = await optionalStringRecord(strictString(args, "settings"), "--settings");
+    const credentialEnvironment = await optionalStringRecord(strictString(args, "credential-env"), "--credential-env");
+    const agentRoutes = await optionalAgentRoutes(strictString(args, "agent-routes"));
+    const name = strictString(args, "name");
+    const plan = await createResearchSetupPlan({
+        workspace,
+        ...(name === undefined ? {} : { name }),
+        mode,
+        evidenceProfile,
+        skillIds: csv(strictString(args, "skills")),
+        scope: setupScope(strictString(args, "scope")),
+        agents: setupAgents(strictString(args, "agents")),
+        acceptedLicenseIds: csv(strictString(args, "accept-license")),
+        credentialEnvironment,
+        settings,
+        agentRoutes,
+        liveChecks: strictBoolean(args, "live"),
+        allowSyntheticUnstructureUpload: strictBoolean(args, "allow-synthetic-unstructure-upload"),
+        agentSmoke: strictBoolean(args, "agent-smoke"),
+        confirmNetworkDownloads: strictBoolean(args, "confirm-network-downloads"),
+        confirmGlobalMutation: strictBoolean(args, "confirm-global"),
+        confirmAgentSmokeCost: strictBoolean(args, "confirm-agent-smoke-cost"),
+        replacePlan: strictBoolean(args, "replace-plan"),
+        environment: io.env,
+    });
+    writeSetupJson(io, plan, args);
+    return 0;
+}
+async function runApply(argv, io) {
+    const args = parseStrictArgs(argv, { ...WORKSPACE_OPTIONS, plan: "string", "skip-doctor": "boolean" }, "research setup apply");
+    if (strictBoolean(args, "help"))
+        return writeSetupHelp(io);
+    rejectPositionals(args.positionals, "research setup apply");
+    const planPath = strictString(args, "plan");
+    if (planPath && !isAbsolute(planPath)) {
+        throw invalidSetupArgument("--plan must be an absolute file path.");
+    }
+    const root = workspaceArgument(args);
+    const result = await applyResearchSetupPlan(planPath ? resolve(planPath) : workspacePaths(root).setupPlan, { environment: io.env, skipDoctor: strictBoolean(args, "skip-doctor") });
+    writeSetupJson(io, result, args);
+    return result.state.status === "blocked" ? 3 : 0;
+}
+async function runStatus(argv, io) {
+    const args = parseStrictArgs(argv, WORKSPACE_OPTIONS, "research setup status");
+    if (strictBoolean(args, "help"))
+        return writeSetupHelp(io);
+    rejectPositionals(args.positionals, "research setup status");
+    const result = await inspectResearchSetupStatus(workspaceArgument(args), io.env);
+    writeSetupJson(io, result, args);
+    return result.state.status === "blocked" ? 3 : 0;
+}
+async function runDoctor(argv, io) {
+    const args = parseStrictArgs(argv, {
+        ...WORKSPACE_OPTIONS,
+        live: "boolean",
+        "allow-synthetic-unstructure-upload": "boolean",
+        "agent-smoke": "boolean",
+        "confirm-agent-smoke-cost": "boolean",
+    }, "research setup doctor");
+    if (strictBoolean(args, "help"))
+        return writeSetupHelp(io);
+    rejectPositionals(args.positionals, "research setup doctor");
+    if (strictBoolean(args, "allow-synthetic-unstructure-upload") && !strictBoolean(args, "live")) {
+        throw invalidSetupArgument("Synthetic upload confirmation is valid only together with --live.");
+    }
+    if (strictBoolean(args, "agent-smoke") && !strictBoolean(args, "confirm-agent-smoke-cost")) {
+        throw new CliError("Agent smoke may consume provider quota and requires explicit confirmation.", {
+            code: "RESEARCH_SETUP_CONFIRMATION_REQUIRED",
+            exitCode: 2,
+            details: {
+                step: "doctor",
+                minimumAction: "Pass --confirm-agent-smoke-cost or omit --agent-smoke.",
+            },
+        });
+    }
+    const result = await doctorResearchSetup(workspaceArgument(args), {
+        live: strictBoolean(args, "live"),
+        allowSyntheticUnstructureUpload: strictBoolean(args, "allow-synthetic-unstructure-upload"),
+        agentSmoke: strictBoolean(args, "agent-smoke"),
+        environment: io.env,
+    });
+    writeSetupJson(io, result, args);
+    return result.readiness === "READY" ? 0 : 3;
+}
+async function runCredential(argv, io) {
+    const [action, ...rest] = argv;
+    if (action === "--help" || action === "-h")
+        return writeSetupHelp(io);
+    if (action !== "set") {
+        throw new CliError(`Unknown research setup credential action: ${action ?? "missing"}`, {
+            code: "INVALID_ARGS",
+            exitCode: 2,
+        });
+    }
+    const args = parseStrictArgs(rest, { ...WORKSPACE_OPTIONS, id: "string", "from-env": "string" }, "research setup credential set");
+    if (strictBoolean(args, "help"))
+        return writeSetupHelp(io);
+    rejectPositionals(args.positionals, "research setup credential set");
+    const credentialId = strictString(args, "id");
+    const environmentName = strictString(args, "from-env");
+    if (!credentialId || !environmentName) {
+        throw invalidSetupArgument("research setup credential set requires --id and --from-env.");
+    }
+    const result = await setResearchSetupCredentialFromEnvironment({
+        workspace: workspaceArgument(args),
+        credentialId,
+        environmentName,
+        environment: io.env,
+    });
+    writeSetupJson(io, result, args);
+    return 0;
+}
+async function runCompanion(argv, io) {
+    const [action, ...rest] = argv;
+    if (action === "--help" || action === "-h")
+        return writeSetupHelp(io);
+    if (action !== "run") {
+        throw new CliError(`Unknown research setup companion action: ${action ?? "missing"}`, {
+            code: "INVALID_ARGS",
+            exitCode: 2,
+        });
+    }
+    const args = parseStrictArgs(rest, {
+        ...WORKSPACE_OPTIONS,
+        id: "string",
+        input: "string",
+        output: "string",
+        out: "string",
+        doi: "string",
+        title: "string",
+        author: "string",
+        year: "string",
+        timeout: "string",
+    }, "research setup companion run");
+    if (strictBoolean(args, "help"))
+        return writeSetupHelp(io);
+    rejectPositionals(args.positionals, "research setup companion run");
+    const id = strictString(args, "id");
+    const timeoutSeconds = optionalPositiveInteger(strictString(args, "timeout"), "--timeout");
+    let result;
+    if (id === "tiangong.document-granular-decompose") {
+        const inputPath = strictString(args, "input");
+        const outputPath = strictString(args, "output");
+        if (!inputPath || !outputPath) {
+            throw invalidSetupArgument("The document companion requires --input and --output.");
+        }
+        rejectPresentOptions(args, ["out", "doi", "title", "author", "year"], id);
+        result = await runResearchSetupCompanion({
+            workspace: workspaceArgument(args),
+            skillId: id,
+            inputPath,
+            outputPath,
+            ...(timeoutSeconds === undefined ? {} : { timeoutSeconds }),
+        }, { environment: io.env });
+    }
+    else if (id === "tiangong.academic-paper-download") {
+        const outputDirectory = strictString(args, "out");
+        if (!outputDirectory) {
+            throw invalidSetupArgument("The academic-paper companion requires --out.");
+        }
+        rejectPresentOptions(args, ["input", "output"], id);
+        const year = optionalPositiveInteger(strictString(args, "year"), "--year");
+        const doi = strictString(args, "doi");
+        const title = strictString(args, "title");
+        const author = strictString(args, "author");
+        result = await runResearchSetupCompanion({
+            workspace: workspaceArgument(args),
+            skillId: id,
+            outputDirectory,
+            ...(doi === undefined ? {} : { doi }),
+            ...(title === undefined ? {} : { title }),
+            ...(author === undefined ? {} : { author }),
+            ...(year === undefined ? {} : { year }),
+            ...(timeoutSeconds === undefined ? {} : { timeoutSeconds }),
+        }, { environment: io.env });
+    }
+    else {
+        throw invalidSetupArgument("--id must be tiangong.document-granular-decompose or tiangong.academic-paper-download.");
+    }
+    writeSetupJson(io, result, args);
+    return result.status === "browser-handoff-required" ? 4 : 0;
+}
+async function runRetry(argv, io) {
+    const args = parseStrictArgs(argv, {
+        ...WORKSPACE_OPTIONS,
+        step: "string",
+        "clear-stale-lock": "boolean",
+        "confirm-clear-stale-lock": "boolean",
+    }, "research setup retry");
+    if (strictBoolean(args, "help"))
+        return writeSetupHelp(io);
+    rejectPositionals(args.positionals, "research setup retry");
+    const step = strictString(args, "step");
+    if (!step)
+        throw invalidSetupArgument("research setup retry requires --step.");
+    const clear = strictBoolean(args, "clear-stale-lock");
+    if (clear && !strictBoolean(args, "confirm-clear-stale-lock")) {
+        throw new CliError("Clearing a stale setup lock requires a second explicit confirmation.", {
+            code: "RESEARCH_SETUP_CONFIRMATION_REQUIRED",
+            exitCode: 2,
+        });
+    }
+    const result = await retryResearchSetup({
+        workspace: workspaceArgument(args),
+        step,
+        clearStaleLock: clear,
+        options: { environment: io.env },
+    });
+    writeSetupJson(io, result, args);
+    return result.state.status === "blocked" ? 3 : 0;
+}
+async function runUpdate(argv, io) {
+    const args = parseStrictArgs(argv, { ...WORKSPACE_OPTIONS, check: "boolean" }, "research setup update");
+    if (strictBoolean(args, "help"))
+        return writeSetupHelp(io);
+    rejectPositionals(args.positionals, "research setup update");
+    if (!strictBoolean(args, "check")) {
+        throw invalidSetupArgument("research setup update is read-only and requires --check.");
+    }
+    const result = await checkResearchSetupUpdates(workspaceArgument(args), io.env);
+    writeSetupJson(io, result, args);
+    return 0;
+}
+async function runUpgrade(argv, io) {
+    const args = parseStrictArgs(argv, {
+        ...WORKSPACE_OPTIONS,
+        plan: "boolean",
+        "confirm-upgrade": "boolean",
+        "accept-license": "string",
+    }, "research setup upgrade");
+    if (strictBoolean(args, "help"))
+        return writeSetupHelp(io);
+    rejectPositionals(args.positionals, "research setup upgrade");
+    if (!strictBoolean(args, "plan")) {
+        throw invalidSetupArgument("Upgrade is plan-only; pass --plan and review the result before apply.");
+    }
+    const result = await createResearchSetupUpgradePlan({
+        workspace: workspaceArgument(args),
+        acceptedLicenseIds: csv(strictString(args, "accept-license")),
+        confirmUpgrade: strictBoolean(args, "confirm-upgrade"),
+        environment: io.env,
+    });
+    writeSetupJson(io, result, args);
+    return 0;
+}
+function workspaceArgument(args) {
+    return resolve(strictString(args, "workspace") ?? process.cwd());
+}
+function requiredAbsoluteWorkspace(args) {
+    const workspace = strictString(args, "workspace");
+    if (!workspace || !isAbsolute(workspace)) {
+        throw invalidSetupArgument("research setup plan requires an absolute --workspace path.");
+    }
+    return resolve(workspace);
+}
+function setupScope(value) {
+    if (!value || value === "project")
+        return "project";
+    if (value === "global")
+        return value;
+    throw invalidSetupArgument(`Unsupported setup scope: ${value}.`);
+}
+function setupAgents(value) {
+    const values = value ? csv(value) : ["codex"];
+    if (values.length === 0 || values.some((agent) => agent !== "codex" && agent !== "claude-code")) {
+        throw invalidSetupArgument("--agents must be codex, claude-code, or both as CSV.");
+    }
+    return [...new Set(values)];
+}
+function setupMode(value, required) {
+    if (value === "smoke-test" || value === "production-research")
+        return value;
+    if (!value && !required)
+        return "production-research";
+    throw invalidSetupArgument("--mode must be smoke-test or production-research.");
+}
+function setupEvidenceProfile(value, required) {
+    if (value === "none" ||
+        value === EXTERNAL_SKILL_PROFILE ||
+        value === EXTERNAL_SKILL_CONTEXT_PROFILE ||
+        value === EXTERNAL_SKILL_MEDIA_PROFILE) {
+        return value;
+    }
+    if (value === "brave-baseline")
+        return EXTERNAL_SKILL_PROFILE;
+    if (value === "brave-context")
+        return EXTERNAL_SKILL_CONTEXT_PROFILE;
+    if (value === "brave-media")
+        return EXTERNAL_SKILL_MEDIA_PROFILE;
+    if (!value && !required)
+        return EXTERNAL_SKILL_CONTEXT_PROFILE;
+    throw invalidSetupArgument("--evidence-profile must be none, brave-baseline, brave-context, or brave-media.");
+}
+function csv(value) {
+    if (!value)
+        return [];
+    const values = value
+        .split(",")
+        .map((item) => item.trim())
+        .filter(Boolean);
+    if (new Set(values).size !== values.length) {
+        throw invalidSetupArgument("CSV option values must not contain duplicates.");
+    }
+    return values;
+}
+function optionalPositiveInteger(value, label) {
+    if (value === undefined)
+        return undefined;
+    if (!/^[1-9][0-9]*$/.test(value)) {
+        throw invalidSetupArgument(`${label} must be a positive base-10 integer.`);
+    }
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed)) {
+        throw invalidSetupArgument(`${label} is outside the supported integer range.`);
+    }
+    return parsed;
+}
+function rejectPresentOptions(args, names, skillId) {
+    const present = names.filter((name) => args.flags.has(name));
+    if (present.length) {
+        throw invalidSetupArgument(`${present.map((name) => `--${name}`).join(", ")} do not apply to ${skillId}.`);
+    }
+}
+async function optionalStringRecord(path, label) {
+    if (!path)
+        return {};
+    const value = await readAbsoluteJson(path, label);
+    if (!isObject(value) || Object.values(value).some((item) => typeof item !== "string")) {
+        throw invalidSetupArgument(`${label} must contain one JSON object of string values.`);
+    }
+    return value;
+}
+async function optionalAgentRoutes(path) {
+    if (!path)
+        return {};
+    const value = await readAbsoluteJson(path, "--agent-routes");
+    if (!isObject(value)) {
+        throw invalidSetupArgument("--agent-routes must contain one JSON object.");
+    }
+    return value;
+}
+async function readAbsoluteJson(path, label) {
+    if (!isAbsolute(path))
+        throw invalidSetupArgument(`${label} must be an absolute JSON path.`);
+    try {
+        return JSON.parse(await readFile(path, "utf8"));
+    }
+    catch (error) {
+        throw new CliError(`${label} is missing or invalid JSON.`, {
+            code: "RESEARCH_SETUP_INPUT_INVALID",
+            exitCode: 2,
+            details: { label, error: String(error) },
+        });
+    }
+}
+function rejectPositionals(positionals, command) {
+    if (positionals.length) {
+        throw new CliError(`${command} does not accept positional arguments.`, {
+            code: "INVALID_ARGS",
+            exitCode: 2,
+            details: { positionals },
+        });
+    }
+}
+function invalidSetupArgument(message) {
+    return new CliError(message, { code: "RESEARCH_SETUP_ARGUMENT_INVALID", exitCode: 2 });
+}
+function writeSetupJson(io, value, args) {
+    write(io.stdout, stringifyJson(value, strictBoolean(args, "json")));
+}
+function writeSetupHelp(io) {
+    write(io.stdout, researchSetupHelp());
+    return 0;
+}
+//# sourceMappingURL=setup-command.js.map

package/dist/research/setup-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-command.js","sourceRoot":"","sources":["../../src/research/setup-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,EAC5B,sBAAsB,GACvB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,uBAAuB,EACvB,8BAA8B,EAC9B,mBAAmB,EACnB,0BAA0B,EAC1B,kBAAkB,EAClB,yBAAyB,EACzB,yCAAyC,GAG1C,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAElE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,MAAM,cAAc,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAW,CAAC;AACrE,MAAM,iBAAiB,GAAG,EAAE,GAAG,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAW,CAAC;AAE9E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAc,EAAE,EAAS;IACrE,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,OAAO,sBAAsB,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAChE,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5D,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,QAAQ,CAAC,kCAAkC,MAAM,EAAE,EAAE;QAC7D,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO;;;;;;;;;;;;;;;;;;;;;;CAsBR,CAAC;AACF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAc,EAAE,EAAS;IACjD,MAAM,IAAI,GAAG,eAAe,CAC1B,IAAI,EACJ,EAAE,GAAG,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,EAC3D,wBAAwB,CACzB,CAAC;IACF,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;IAC3D,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC;QAC/C,YAAY,EAAE,iBAAiB,CAAC,IAAI,CAAC;QACrC,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,EAAE,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjD,WAAW,EAAE,EAAE,CAAC,GAAG;KACpB,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAc,EAAE,EAAS;IAC9C,MAAM,IAAI,GAAG,eAAe,CAC1B,IAAI,EACJ;QACE,GAAG,iBAAiB;QACpB,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,QAAQ;QACd,kBAAkB,EAAE,QAAQ;QAC5B,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,QAAQ;QAChB,gBAAgB,EAAE,QAAQ;QAC1B,QAAQ,EAAE,QAAQ;QAClB,gBAAgB,EAAE,QAAQ;QAC1B,cAAc,EAAE,QAAQ;QACxB,IAAI,EAAE,SAAS;QACf,oCAAoC,EAAE,SAAS;QAC/C,aAAa,EAAE,SAAS;QACxB,2BAA2B,EAAE,SAAS;QACtC,gBAAgB,EAAE,SAAS;QAC3B,0BAA0B,EAAE,SAAS;QACrC,cAAc,EAAE,SAAS;KAC1B,EACD,qBAAqB,CACtB,CAAC;IACF,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;IAC3D,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,eAAe,GAAG,oBAAoB,CAAC,YAAY,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC;IAC1F,MAAM,qBAAqB,GAAG,MAAM,oBAAoB,CACtD,YAAY,CAAC,IAAI,EAAE,gBAAgB,CAAC,EACpC,kBAAkB,CACnB,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,YAAY,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC;QACzC,SAAS;QACT,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,IAAI;QACJ,eAAe;QACf,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3C,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,EAAE,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjD,kBAAkB,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAC7D,qBAAqB;QACrB,QAAQ;QACR,WAAW;QACX,UAAU,EAAE,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;QACvC,+BAA+B,EAAE,aAAa,CAAC,IAAI,EAAE,oCAAoC,CAAC;QAC1F,UAAU,EAAE,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC;QAC9C,uBAAuB,EAAE,aAAa,CAAC,IAAI,EAAE,2BAA2B,CAAC;QACzE,qBAAqB,EAAE,aAAa,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAC5D,qBAAqB,EAAE,aAAa,CAAC,IAAI,EAAE,0BAA0B,CAAC;QACtE,WAAW,EAAE,aAAa,CAAC,IAAI,EAAE,cAAc,CAAC;QAChD,WAAW,EAAE,EAAE,CAAC,GAAG;KACpB,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAc,EAAE,EAAS;IAC/C,MAAM,IAAI,GAAG,eAAe,CAC1B,IAAI,EACJ,EAAE,GAAG,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,EAClE,sBAAsB,CACvB,CAAC;IACF,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;IAC3D,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,oBAAoB,CAAC,uCAAuC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CACzC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,EAC7D,EAAE,WAAW,EAAE,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CACxE,CAAC;IACF,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAc,EAAE,EAAS;IAChD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IAC/E,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;IAC3D,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IACjF,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAc,EAAE,EAAS;IAChD,MAAM,IAAI,GAAG,eAAe,CAC1B,IAAI,EACJ;QACE,GAAG,iBAAiB;QACpB,IAAI,EAAE,SAAS;QACf,oCAAoC,EAAE,SAAS;QAC/C,aAAa,EAAE,SAAS;QACxB,0BAA0B,EAAE,SAAS;KACtC,EACD,uBAAuB,CACxB,CAAC;IACF,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;IAC3D,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;IAC7D,IAAI,aAAa,CAAC,IAAI,EAAE,oCAAoC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9F,MAAM,oBAAoB,CAAC,mEAAmE,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,0BAA0B,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,QAAQ,CAChB,4EAA4E,EAC5E;YACE,IAAI,EAAE,sCAAsC;YAC5C,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,aAAa,EAAE,wDAAwD;aACxE;SACF,CACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE;QAChE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;QACjC,+BAA+B,EAAE,aAAa,CAAC,IAAI,EAAE,oCAAoC,CAAC;QAC1F,UAAU,EAAE,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC;QAC9C,WAAW,EAAE,EAAE,CAAC,GAAG;KACpB,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAc,EAAE,EAAS;IACpD,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/B,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,6CAA6C,MAAM,IAAI,SAAS,EAAE,EAAE;YACrF,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAC1B,IAAI,EACJ,EAAE,GAAG,iBAAiB,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,EAC5D,+BAA+B,CAChC,CAAC;IACF,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;IAC3D,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACvD,IAAI,CAAC,YAAY,IAAI,CAAC,eAAe,EAAE,CAAC;QACtC,MAAM,oBAAoB,CAAC,6DAA6D,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,yCAAyC,CAAC;QAC7D,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC;QAClC,YAAY;QACZ,eAAe;QACf,WAAW,EAAE,EAAE,CAAC,GAAG;KACpB,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAc,EAAE,EAAS;IACnD,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/B,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,4CAA4C,MAAM,IAAI,SAAS,EAAE,EAAE;YACpF,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAC1B,IAAI,EACJ;QACE,GAAG,iBAAiB;QACpB,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,QAAQ;QAChB,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,QAAQ;KAClB,EACD,8BAA8B,CAC/B,CAAC;IACF,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;IAC3D,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;IACpE,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,cAAc,GAAG,uBAAuB,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;IAC3F,IAAI,MAAM,CAAC;IACX,IAAI,EAAE,KAAK,sCAAsC,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,EAAE,CAAC;YAC9B,MAAM,oBAAoB,CAAC,uDAAuD,CAAC,CAAC;QACtF,CAAC;QACD,oBAAoB,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,MAAM,GAAG,MAAM,yBAAyB,CACtC;YACE,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC;YAClC,OAAO,EAAE,EAAE;YACX,SAAS;YACT,UAAU;YACV,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;SAC5D,EACD,EAAE,WAAW,EAAE,EAAE,CAAC,GAAG,EAAE,CACxB,CAAC;IACJ,CAAC;SAAM,IAAI,EAAE,KAAK,kCAAkC,EAAE,CAAC;QACrD,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,oBAAoB,CAAC,8CAA8C,CAAC,CAAC;QAC7E,CAAC;QACD,oBAAoB,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,uBAAuB,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,GAAG,MAAM,yBAAyB,CACtC;YACE,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC;YAClC,OAAO,EAAE,EAAE;YACX,eAAe;YACf,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;YACrC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;SAC5D,EACD,EAAE,WAAW,EAAE,EAAE,CAAC,GAAG,EAAE,CACxB,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,oBAAoB,CACxB,wFAAwF,CACzF,CAAC;IACJ,CAAC;IACD,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,KAAK,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAc,EAAE,EAAS;IAC/C,MAAM,IAAI,GAAG,eAAe,CAC1B,IAAI,EACJ;QACE,GAAG,iBAAiB;QACpB,IAAI,EAAE,QAAQ;QACd,kBAAkB,EAAE,SAAS;QAC7B,0BAA0B,EAAE,SAAS;KACtC,EACD,sBAAsB,CACvB,CAAC;IACF,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;IAC3D,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI;QAAE,MAAM,oBAAoB,CAAC,uCAAuC,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACtD,IAAI,KAAK,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,0BAA0B,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,QAAQ,CAAC,sEAAsE,EAAE;YACzF,IAAI,EAAE,sCAAsC;YAC5C,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;QACtC,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC;QAClC,IAAI;QACJ,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,GAAG,EAAE;KACjC,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAc,EAAE,EAAS;IAChD,MAAM,IAAI,GAAG,eAAe,CAC1B,IAAI,EACJ,EAAE,GAAG,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,EAC1C,uBAAuB,CACxB,CAAC;IACF,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;IAC3D,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;IAC7D,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,oBAAoB,CAAC,0DAA0D,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IAChF,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAc,EAAE,EAAS;IACjD,MAAM,IAAI,GAAG,eAAe,CAC1B,IAAI,EACJ;QACE,GAAG,iBAAiB;QACpB,IAAI,EAAE,SAAS;QACf,iBAAiB,EAAE,SAAS;QAC5B,gBAAgB,EAAE,QAAQ;KAC3B,EACD,wBAAwB,CACzB,CAAC;IACF,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;IAC3D,iBAAiB,CAAC,IAAI,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;IAC9D,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,oBAAoB,CACxB,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC;QAClD,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC;QAClC,kBAAkB,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAC7D,cAAc,EAAE,aAAa,CAAC,IAAI,EAAE,iBAAiB,CAAC;QACtD,WAAW,EAAE,EAAE,CAAC,GAAG;KACpB,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAwC;IACjE,OAAO,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAwC;IACzE,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,oBAAoB,CAAC,4DAA4D,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,oBAAoB,CAAC,4BAA4B,KAAK,GAAG,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,aAAa,CAAC,EAAE,CAAC;QAChG,MAAM,oBAAoB,CAAC,sDAAsD,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAmC,CAAC;AAChE,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB,EAAE,QAAiB;IAC7D,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,qBAAqB;QAAE,OAAO,KAAK,CAAC;IAC5E,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;QAAE,OAAO,qBAAqB,CAAC;IACtD,MAAM,oBAAoB,CAAC,mDAAmD,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAyB,EACzB,QAAiB;IAEjB,IACE,KAAK,KAAK,MAAM;QAChB,KAAK,KAAK,sBAAsB;QAChC,KAAK,KAAK,8BAA8B;QACxC,KAAK,KAAK,4BAA4B,EACtC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,KAAK,gBAAgB;QAAE,OAAO,sBAAsB,CAAC;IAC9D,IAAI,KAAK,KAAK,eAAe;QAAE,OAAO,8BAA8B,CAAC;IACrE,IAAI,KAAK,KAAK,aAAa;QAAE,OAAO,4BAA4B,CAAC;IACjE,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;QAAE,OAAO,8BAA8B,CAAC;IAC/D,MAAM,oBAAoB,CACxB,iFAAiF,CAClF,CAAC;AACJ,CAAC;AAED,SAAS,GAAG,CAAC,KAAyB;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,KAAK;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,oBAAoB,CAAC,gDAAgD,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAyB,EAAE,KAAa;IACvE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,oBAAoB,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,oBAAoB,CAAC,GAAG,KAAK,0CAA0C,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAwC,EACxC,KAAe,EACf,OAAe;IAEf,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,oBAAoB,CACxB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,OAAO,GAAG,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,IAAwB,EACxB,KAAa;IAEb,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtF,MAAM,oBAAoB,CAAC,GAAG,KAAK,iDAAiD,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,KAA+B,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,IAAwB;IAExB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,oBAAoB,CAAC,8CAA8C,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,KAA6C,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACzD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,oBAAoB,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IAC7F,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,8BAA8B,EAAE;YACzD,IAAI,EAAE,8BAA8B;YACpC,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAqB,EAAE,OAAe;IAC/D,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAAC,GAAG,OAAO,wCAAwC,EAAE;YACrE,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,WAAW,EAAE;SACzB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,cAAc,CAAC,EAAS,EAAE,KAAc,EAAE,IAAwC;IACzF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,EAAS;IAC/B,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/research/workspace/broker.js

@@ -101,6 +101,10 @@ async function handleMcpRequest(input) {
                                     description: "Logical credential ID. It is selected automatically when the capability declares exactly one credential.",
                                 },
                                 url: { type: "string" },
+                                request_body: {
+                                    type: "object",
+                                    description: "JSON request body. Required only when the locked capability explicitly authorizes POST.",
+                                },
                                 json_pointer: { type: "string" },
                                 item_offset: { type: "integer", minimum: 0 },
                                 max_items: { type: "integer", minimum: 1 },
@@ -163,6 +167,7 @@ async function fetchCandidateSource(input) {
     const capabilityId = input.arguments.capability_id;
     const credentialId = input.arguments.credential_id;
     const rawUrl = input.arguments.url;
+    const requestBody = input.arguments.request_body;
     const jsonPointer = input.arguments.json_pointer;
     const requestedItemOffset = input.arguments.item_offset ?? 0;
     const requestedMaxItems = input.arguments.max_items;
@@ -199,6 +204,7 @@ async function fetchCandidateSource(input) {
     const target = validateHttpsUrl(rawUrl);
     if (!capability.http)
         throw new Error(`capability has no broker HTTP policy: ${capabilityId}`);
+    const encodedRequestBody = validateBrokerRequestBody(capability.http.method, requestBody, capability.http.maxRequestBytes);
     const credential = credentialId
         ? capability.credentials.find((candidate) => candidate.id === credentialId)
         : capability.credentials.length === 1
@@ -223,6 +229,8 @@ async function fetchCandidateSource(input) {
     const cacheKeySha256 = sha256Text(canonicalJson({
         capabilityId,
         targetSha256: sha256Text(target.toString()),
+        method: capability.http.method,
+        requestBodySha256: encodedRequestBody ? sha256Text(encodedRequestBody) : null,
         accept: capability.http.accept,
     }));
     await appendJournalEvent(workspacePaths(input.root).journal, "capability.fetch.attempted", input.projectId, {
@@ -231,6 +239,8 @@ async function fetchCandidateSource(input) {
         capabilityId,
         credentialId: effectiveCredentialId,
         targetSha256: sha256Text(target.toString()),
+        method: capability.http.method,
+        requestBodySha256: encodedRequestBody ? sha256Text(encodedRequestBody) : null,
         cacheMode,
         cacheKeySha256,
     });
@@ -261,14 +271,17 @@ async function fetchCandidateSource(input) {
                 return brokerToolResult(receipt, context.bytes, cached.contentType);
             }
         }
-        const headers = new Headers({ Accept: capability.http.accept });
+        const headers = new Headers(capability.http.staticHeaders);
+        headers.set("Accept", capability.http.accept);
+        if (encodedRequestBody)
+            headers.set("Content-Type", "application/json");
         if (credential) {
             const value = input.credentialMap.get(credential.id);
             if (!value)
                 throw new Error(`credential value is not configured: ${credential.id}`);
             headers.set(credential.headerName, `${credential.prefix}${value}`);
         }
-        const { response, finalUrl } = await fetchWithRedirectPolicy(target, headers, capability.allowedHosts, credential?.allowedHosts);
+        const { response, finalUrl } = await fetchWithRedirectPolicy(target, headers, capability.allowedHosts, credential?.allowedHosts, capability.http.method, encodedRequestBody);
         const responseLimit = Math.min(capability.http.maxResponseBytes, input.workspaceResponseBytes);
         const announcedLength = Number(response.headers.get("content-length") ?? "0");
         if (response.ok && announcedLength > responseLimit)
@@ -424,21 +437,26 @@ async function appendCompletedReceipt(root, projectId, receipt, cacheKeySha256)
         cacheKeySha256,
     });
 }
-async function fetchWithRedirectPolicy(initialUrl, headers, capabilityHosts, credentialHosts) {
+async function fetchWithRedirectPolicy(initialUrl, headers, capabilityHosts, credentialHosts, method, body) {
     let current = initialUrl;
     for (let redirects = 0; redirects <= 5; redirects += 1) {
         assertAllowedHost(current, capabilityHosts, "capability");
         if (credentialHosts)
             assertAllowedHost(current, credentialHosts, "credential");
         const response = await fetch(current, {
-            method: "GET",
+            method,
             headers,
+            ...(body === null ? {} : { body }),
             redirect: "manual",
             signal: AbortSignal.timeout(120_000),
         });
         if (![301, 302, 303, 307, 308].includes(response.status)) {
             return { response, finalUrl: current };
         }
+        if (method === "POST") {
+            await response.body?.cancel();
+            throw new Error("POST capability redirects are not authorized");
+        }
         const location = response.headers.get("location");
         await response.body?.cancel();
         if (!location)
@@ -449,6 +467,23 @@ async function fetchWithRedirectPolicy(initialUrl, headers, capabilityHosts, cre
     }
     throw new Error("HTTPS source exceeded the redirect limit");
 }
+function validateBrokerRequestBody(method, value, maxRequestBytes) {
+    if (method === "GET") {
+        if (value !== undefined)
+            throw new Error("GET capability does not accept request_body");
+        return null;
+    }
+    if (!isObject(value))
+        throw new Error("POST capability requires request_body as an object");
+    if (containsSensitiveJsonField(value)) {
+        throw new Error("request_body contains credential-like fields");
+    }
+    const encoded = JSON.stringify(value);
+    if (Buffer.byteLength(encoded, "utf8") > maxRequestBytes) {
+        throw new Error("request_body exceeds the capability request size limit");
+    }
+    return encoded;
+}
 function assertAllowedHost(url, allowedHosts, scope) {
     if (!allowedHosts.includes(url.host)) {
         throw new Error(`target host is outside ${scope} scope: ${url.host}`);