@trusty-squire/mcp 1.1.17 → 1.1.18-rc.2

package/dist/bot/broker/discovery.js

@@ -1,37 +1,22 @@
 import { createHash } from "node:crypto";
-import { closeSync, mkdirSync, lstatSync, openSync, readFileSync } from "node:fs";
-import { spawn } from "node:child_process";
-import { mkdir } from "node:fs/promises";
-import { hostname, tmpdir } from "node:os";
+import { spawn, execFileSync } from "node:child_process";
+import { closeSync, lstatSync, openSync, readFileSync } from "node:fs";
+import { hostname } from "node:os";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { acquireProfileOperationGuard, currentProfileDir, ProfileBusyError, profileOperationLockOwner, profilePathIdentity, processBirthIdentityState, } from "../profile.js";
-import { BrokerClient, brokerEndpointHasLiveListener, brokerSpeaksLegacyWire, } from "./transport.js";
+import { mkdirSync } from "node:fs";
+import { currentProfileDir, ProfileBusyError, profilePathIdentity } from "../profile.js";
+import { BrokerClient, brokerSpeaksLegacyWire } from "./transport.js";
 import { readBrokerAccountBinding } from "./account-binding.js";
 import { BrokerRefusal } from "./refusal.js";
 const BROKER_CONNECT_TIMEOUT_MS = 10_000;
 const BROKER_CONNECT_POLL_MS = 100;
-const RECLAIM_TIMINGS = {
-    termGraceMs: 10_000,
-    killGraceMs: 5_000,
-    pollMs: 100,
-};
-/** Canonical profile discovery is independent of cwd and each client's TMPDIR. */
 export function defaultBrokerSocket(profileDir = currentProfileDir()) {
-    const key = createHash("sha256")
-        .update(profilePathIdentity(profileDir))
-        .digest("hex")
-        .slice(0, 32);
+    const key = createHash("sha256").update(profilePathIdentity(profileDir)).digest("hex").slice(0, 32);
     return join("/tmp", `trusty-squire-broker-${process.getuid?.() ?? "local"}-${key}`, "broker.sock");
 }
-/** Where a profile's broker socket lives: the configured override, else the
- * derived default. Pure — no directory is created and nothing is asserted, so
- * a read-only probe can ask for a path that may not exist. */
 export function brokerSocketPath(profileDir = currentProfileDir()) {
-    const configured = process.env.TRUSTY_SQUIRE_BROKER_SOCKET?.trim();
-    if (configured)
-        return configured;
-    return defaultBrokerSocket(profileDir);
+    return process.env.TRUSTY_SQUIRE_BROKER_SOCKET?.trim() || defaultBrokerSocket(profileDir);
 }
 export function resolveBrokerSocket(profileDir = currentProfileDir()) {
     const path = brokerSocketPath(profileDir);
@@ -44,266 +29,62 @@ export function resolveBrokerSocket(profileDir = currentProfileDir()) {
         throw new Error("Broker socket directory must be owned by this user with mode 0700");
     return path;
 }
-export function brokerElectionRoot(profileDir = currentProfileDir()) {
-    return join(dirname(profilePathIdentity(profileDir)), ".trusty-squire-broker-leases");
-}
-export function brokerLaunchRoot(profileDir = currentProfileDir()) {
-    return join(brokerElectionRoot(profileDir), "launch");
-}
-async function prepareBrokerElectionRoot(profileDir) {
-    const root = brokerElectionRoot(profileDir);
-    await mkdir(root, { recursive: true, mode: 0o700 });
-    return root;
-}
-async function brokerElectionIsHeld(profileDir) {
-    const root = await prepareBrokerElectionRoot(profileDir);
-    try {
-        const lease = acquireProfileOperationGuard(profileDir, root);
-        lease.release();
-        return false;
-    }
-    catch (error) {
-        if (error instanceof ProfileBusyError)
-            return true;
-        throw error;
-    }
-}
-/** True when the error means "no live broker socket could be reached at
- * all" — no listener (ENOENT), connection refused, or the broker was lost
- * mid-handshake. Exported for the ceremony's connect-or-launch decision: a
- * genuinely absent broker means "self-launch may serve", while any other
- * failure (an identified resident's refusal, a handshake timeout) must
- * propagate verbatim instead of being swallowed into a self-launch that
- * fail-fasts with the generic profile-busy message. */
 export function isUnavailable(error) {
     const code = error.code;
     return code === "ENOENT" || code === "ECONNREFUSED" || code === "broker_lost";
 }
-/** The refusals that mean another session HAS the browser, as opposed to the
- * broker failing at something. `broker_unavailable` is an identified resident
- * declining to yield; `profile_busy` is the profile layer itself saying "not
- * now". Every other code (a lost connection, a launch timeout, a server-side
- * execution failure) is this run breaking, not contention, and a caller told
- * to wait for a holder would wait on nothing. */
 export function isBrowserContentionRefusal(error) {
-    return (error instanceof BrokerRefusal &&
-        (error.code === "broker_unavailable" || error.code === "profile_busy"));
-}
-function isUnauthorizedRefusal(error) {
-    return error instanceof BrokerRefusal && error.code === "unauthorized";
+    return error instanceof BrokerRefusal &&
+        (error.code === "broker_unavailable" || error.code === "profile_busy");
 }
 const sleep = async (ms) => await new Promise((resolve) => setTimeout(resolve, ms));
-/** Best-effort argv corroboration that a lease owner really is a broker
- * daemon: the daemon is spawned with a `broker` argv marker in this repo
- * (connectOrLaunchBroker's spawn, kept in sync with this check). Returns
- * true when the argv cannot be read, because the wire probe and election
- * lease already carry the positive identification. */
-function processArgvLooksLikeBroker(pid) {
-    if (process.platform !== "linux")
-        return true;
-    try {
-        const argv = readFileSync(`/proc/${pid}/cmdline`, "utf8")
-            .split("\0")
-            .filter((arg) => arg.length > 0);
-        return argv.includes("broker");
-    }
-    catch {
-        return true;
-    }
-}
-function isProcessAlive(pid) {
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/** Connected SOCK_STREAM peers on a pathname Unix socket (Linux
- * `/proc/net/unix` state 03). Null when the count cannot be observed.
- * Reclaim uses this to refuse killing a stale-credential broker that still
- * has attached clients. */
-function brokerSocketConnectedPeerCount(path) {
-    if (process.platform !== "linux")
+/** Upgrade only: identify the old daemon from its live Unix listener, rather
+ * than reading any of its four recorded ownership files. */
+function legacyBrokerPid(path) {
+    if (process.platform === "win32")
         return null;
     try {
-        let n = 0;
-        for (const line of readFileSync("/proc/net/unix", "utf8").split("\n")) {
-            if (!line.includes(path))
-                continue;
-            const fields = line.trim().split(/\s+/);
-            // Num: RefCount Protocol Flags Type St Inode Path…
-            if (fields.length < 8)
+        const pids = execFileSync("lsof", ["-t", "-U", "--", path], { encoding: "utf8" })
+            .trim().split(/\s+/).map(Number).filter((pid) => Number.isSafeInteger(pid) && pid > 0);
+        for (const pid of pids) {
+            if (pid === process.pid)
                 continue;
-            if (fields.slice(7).join(" ") !== path)
-                continue;
-            if (fields[5] === "03")
-                n += 1;
-        }
-        return n;
-    }
-    catch {
-        return null;
-    }
-}
-/** The profile election lease plus a live broker-argv process on this host
- * identify the resident: the daemon holds the election lease for its whole
- * life, so the lease owner is the daemon the wire probe proved resident.
- * Returns null when any link of that identification is missing. Shared by
- * prior-contract and same-contract stale-credential reclaim. */
-function residentBrokerPid(profileDir) {
-    const owner = profileOperationLockOwner(profileDir, brokerElectionRoot(profileDir));
-    if (owner === null || owner.host !== hostname())
-        return null;
-    const { pid, start_time } = owner;
-    if (!Number.isSafeInteger(pid) || pid <= 0 || pid === process.pid)
-        return null;
-    if (!isProcessAlive(pid))
-        return null;
-    // A provably-reborn pid means the lease is a dead owner's leftover; the
-    // ordinary scavenge path owns that case and no signal may be sent.
-    if (start_time !== null && processBirthIdentityState({ pid, start_time }) === "stale") {
-        return null;
-    }
-    if (!processArgvLooksLikeBroker(pid))
-        return null;
-    return pid;
-}
-/** Wait for the election lease to become acquirable and the socket to have
- * no live listener. Acquiring (and releasing) reuses the lease machinery's
- * own stale-owner scavenging, which is what clears a SIGKILLed holder's
- * leftover lock. */
-async function waitForReclaimClear(profileDir, path, deadline, pollMs) {
-    while (Date.now() < deadline) {
-        let electionFree = false;
-        try {
-            const lease = acquireProfileOperationGuard(profileDir, brokerElectionRoot(profileDir));
-            lease.release();
-            electionFree = true;
-        }
-        catch (error) {
-            if (!(error instanceof ProfileBusyError))
-                throw error;
-        }
-        if (electionFree && !(await brokerEndpointHasLiveListener(path)))
-            return true;
-        await sleep(pollMs);
-    }
-    return false;
-}
-/** Reclaim the profile from a positively identified resident broker:
- * SIGTERM, then a bounded wait for its lease and socket to clear, escalating
- * to SIGKILL only if the graceful path does not clear it. Throws a refusal
- * that names the pid when reclaim cannot complete. */
-async function terminateResidentBroker(profileDir, path, pid, timings, unavailableMessage) {
-    for (const [signal, graceMs] of [
-        ["SIGTERM", timings.termGraceMs],
-        ["SIGKILL", timings.killGraceMs],
-    ]) {
-        try {
-            process.kill(pid, signal);
-        }
-        catch {
-            // Already gone: fall through and let the clear-wait decide.
-        }
-        if (await waitForReclaimClear(profileDir, path, Date.now() + graceMs, timings.pollMs)) {
-            return;
+            if (process.platform === "linux") {
+                const argv = readFileSync(`/proc/${pid}/cmdline`, "utf8").split("\0");
+                if (!argv.includes("broker"))
+                    continue;
+            }
+            return pid;
         }
     }
-    throw new BrokerRefusal("broker_unavailable", unavailableMessage(pid));
-}
-function staleCredentialLiveClientMessage(pid) {
-    return (`A resident broker (pid ${pid}) still owns this profile with a stale credential ` +
-        `and an attached client; finish those sessions, or confirm no other client is ` +
-        `attached and terminate pid ${pid} (TERM), then retry. No operator command was dispatched`);
+    catch { /* no old listener */ }
+    return null;
 }
-function staleCredentialUnreclaimedMessage(pid) {
-    return (`A resident broker (pid ${pid}) still owns this profile's browser with a stale ` +
-        `credential and could not be reclaimed; confirm no other client is attached, ` +
-        `terminate pid ${pid} (TERM), then retry. No operator command was dispatched`);
-}
-/** Reclaims a resident prior-contract broker for this profile, if one is
- * positively identified: a live daemon that refuses Contract B's `connect`
- * but still authenticates the pre-Contract-B `hello` handshake, while
- * holding this profile's election lease. A same-contract daemon never
- * authenticates `hello` (or is reached only through the ENOENT/unavailable
- * path), so it is never a prior-contract reclaim target — stale-credential
- * reclaim owns that case separately. Returns whether a reclaim happened;
- * throws only when a reclaim was proven possible but could not complete. */
-export async function reclaimPriorContractBrokerIfPresent(path, token, connectError, timings = RECLAIM_TIMINGS) {
-    // The legacy `hello` handshake is authenticated with the pre-Contract-B
-    // token, so an unenrolled machine cannot positively identify one. There is
-    // nothing to reclaim there anyway: a prior-contract broker could not have
-    // started without an enrollment.
-    if (token === undefined)
-        return false;
-    if (!isUnauthorizedRefusal(connectError))
+async function reclaimLegacyBroker(path, options, error) {
+    if (!(error instanceof BrokerRefusal) || error.code !== "unauthorized")
         return false;
-    if (!(await brokerSpeaksLegacyWire(path, token)))
+    const prior = options.agentSessionToken !== undefined &&
+        await brokerSpeaksLegacyWire(path, options.agentSessionToken);
+    const bound = options.accountId !== undefined &&
+        await readBrokerAccountBinding(profilePathIdentity(currentProfileDir())) === options.accountId;
+    if (!prior && !bound)
         return false;
-    const profileDir = profilePathIdentity(currentProfileDir());
-    const pid = residentBrokerPid(profileDir);
+    const pid = legacyBrokerPid(path);
     if (pid === null)
         return false;
-    await terminateResidentBroker(profileDir, path, pid, timings, (owner) => `A resident broker from an older release (pid ${owner}) still owns this profile's browser and could not be reclaimed; no operator command was dispatched`);
-    return true;
-}
-/** Reclaims a resident broker from an older Contract B release, if one is
- * positively identified: it refuses the token-less `connect` that this release
- * sends (`unauthorized: Authenticate before issuing commands`), it holds this
- * profile's election lease with a live, broker-argv-corroborated owner pid on
- * this host, and the profile's account binding names the caller's own enrolled
- * account. Every release before the token-less handshake gated `connect` on a
- * credential, so that refusal is the upgrade signal; the binding is what
- * proves the resident is OURS before any signal is sent, and a resident with
- * attached clients is never killed.
- *
- * A broker bound to another account (or carrying no readable binding) is left
- * alone and the original refusal propagates. SIGKILL is skipped if a client
- * appears after SIGTERM. Returns whether a reclaim happened; throws when the
- * resident is identified but must not be (or could not be) reclaimed. */
-export async function reclaimStaleCredentialBrokerIfPresent(path, accountId, connectError, timings = RECLAIM_TIMINGS) {
-    if (!isUnauthorizedRefusal(connectError))
-        return false;
-    if (accountId === undefined)
-        return false;
-    const profileDir = profilePathIdentity(currentProfileDir());
-    if ((await readBrokerAccountBinding(profileDir)) !== accountId)
-        return false;
-    const pid = residentBrokerPid(profileDir);
-    if (pid === null)
-        return false;
-    // The connect that just rejected us may still appear as a peer for a
-    // tick after socket.destroy(). Wait it out so an empty stale broker is
-    // reclaimed instead of being mistaken for an attached client.
-    const peerDeadline = Date.now() + 250;
-    let peers = brokerSocketConnectedPeerCount(path) ?? 0;
-    while (peers > 0 && Date.now() < peerDeadline) {
-        await sleep(25);
-        peers = brokerSocketConnectedPeerCount(path) ?? 0;
+    try {
+        process.kill(pid, "SIGTERM");
     }
-    if (peers > 0) {
-        throw new BrokerRefusal("broker_unavailable", staleCredentialLiveClientMessage(pid));
+    catch {
+        return true;
     }
-    for (const [signal, graceMs] of [
-        ["SIGTERM", timings.termGraceMs],
-        ["SIGKILL", timings.killGraceMs],
-    ]) {
-        if (signal === "SIGKILL" && (brokerSocketConnectedPeerCount(path) ?? 0) > 0) {
-            throw new BrokerRefusal("broker_unavailable", staleCredentialLiveClientMessage(pid));
-        }
-        try {
-            process.kill(pid, signal);
-        }
-        catch {
-            // Already gone: fall through and let the clear-wait decide.
-        }
-        if (await waitForReclaimClear(profileDir, path, Date.now() + graceMs, timings.pollMs)) {
+    const deadline = Date.now() + 10_000;
+    while (Date.now() < deadline) {
+        if (legacyBrokerPid(path) !== pid)
             return true;
-        }
+        await sleep(100);
     }
-    throw new BrokerRefusal("broker_unavailable", staleCredentialUnreclaimedMessage(pid));
+    throw new BrokerRefusal("broker_unavailable", `Older broker pid ${pid} did not release its listener`);
 }
 async function waitForBroker(path, failure) {
     const deadline = Date.now() + BROKER_CONNECT_TIMEOUT_MS;
@@ -318,105 +99,55 @@ async function waitForBroker(path, failure) {
             if (!isUnavailable(error))
                 throw error;
         }
-        await new Promise((resolve) => setTimeout(resolve, BROKER_CONNECT_POLL_MS));
+        await sleep(BROKER_CONNECT_POLL_MS);
     }
     throw new BrokerRefusal("broker_unavailable", "Broker did not become available within 10 seconds; no operator command was dispatched");
 }
 export function brokerEnvironment(env, path) {
     return { ...env, TRUSTY_SQUIRE_BROKER_SOCKET: path };
 }
-/**
- * A daemon claims the profile-operation lease during startup, BEFORE it
- * listens, so a lease another process holds kills it there — most often the
- * `connect` ceremony, which holds that lease for a whole interactive login.
- * Reporting that as a merely unavailable broker sends the caller to restart a
- * broker that cannot start, and the advised retry loops until connect ends.
- */
-function daemonExitRefusal(profileDir, reason) {
-    const owner = profileOperationLockOwner(profileDir, tmpdir());
-    if (owner !== null && owner.host === hostname() && owner.pid !== process.pid)
-        return new BrokerRefusal("profile_busy", `The Chrome profile lease is held by pid ${owner.pid}; no operator command was dispatched`);
-    return new BrokerRefusal("broker_unavailable", `Broker exited before attachment (${reason}); no operator command was dispatched`);
-}
 export async function connectOrLaunchBroker(path, options = {}) {
     try {
         return await BrokerClient.connect(path);
     }
     catch (error) {
-        if (isUnavailable(error)) {
-            // A socket with no live listener is a dead predecessor's orphan; the new
-            // broker's own bind reclaims it (probe -> unlink -> bind).
-        }
-        else if (await reclaimPriorContractBrokerIfPresent(path, options.agentSessionToken, error)) {
-            // A reclaimed prior-contract broker freed the profile: fall through to
-            // the ordinary launch of a current-contract daemon.
-        }
-        else if (await reclaimStaleCredentialBrokerIfPresent(path, options.accountId, error)) {
-            // A reclaimed same-contract broker whose strict open schema predates a
-            // field this release sends: fall through to a fresh daemon.
-        }
-        else {
+        if (!isUnavailable(error) && !(await reclaimLegacyBroker(path, options, error)))
             throw error;
-        }
     }
-    const profileDir = profilePathIdentity(currentProfileDir());
-    if (await brokerElectionIsHeld(profileDir))
-        return await waitForBroker(path);
-    const launchRoot = brokerLaunchRoot(profileDir);
-    let launchLease;
+    // Launches may race. Each daemon claims the same kernel SQLite lock before it
+    // touches Chrome or the socket; losers exit while clients attach to winner.
+    const logPath = join(dirname(path), "broker.log");
+    let logFd;
+    try {
+        logFd = openSync(logPath, "a", 0o600);
+    }
+    catch {
+        logFd = undefined;
+    }
+    const child = spawn(process.execPath, [fileURLToPath(new URL("../../bin.js", import.meta.url)), "broker"], {
+        detached: true,
+        stdio: logFd === undefined ? "ignore" : ["ignore", logFd, logFd],
+        env: brokerEnvironment(process.env, path),
+    });
+    if (logFd !== undefined)
+        closeSync(logFd);
+    let failure;
+    child.once("error", (error) => { failure = error; });
+    child.once("exit", (code, signal) => {
+        if (code !== 0 && signal !== null)
+            return; // Another elected daemon may be serving.
+        if (code !== 0 && code !== null)
+            return;
+        failure = new BrokerRefusal("broker_unavailable", `Broker exited before attachment (${signal ?? code})`);
+    });
+    child.unref();
     try {
-        await mkdir(launchRoot, { recursive: true, mode: 0o700 });
-        launchLease = acquireProfileOperationGuard(profileDir, launchRoot);
+        return await waitForBroker(path, () => failure);
     }
     catch (error) {
         if (error instanceof ProfileBusyError)
             return await waitForBroker(path);
         throw error;
     }
-    try {
-        try {
-            return await BrokerClient.connect(path);
-        }
-        catch (error) {
-            if (!isUnavailable(error))
-                throw error;
-        }
-        if (await brokerElectionIsHeld(profileDir))
-            return await waitForBroker(path);
-        // The broker's stderr carries its diagnostic channel (audit unseal lines,
-        // captcha/handoff diag). "ignore" made every standard deployment mute —
-        // measured while debugging the Bluesky signup gate (2026-09): the broker
-        // printed nothing anywhere. The daemon outlives this parent (detached,
-        // unref'd), so the log must be a real file fd, not a pipe: a pipe dies
-        // with the parent and the first write afterwards EPIPEs the broker. Best
-        // effort — a log that cannot be opened must not block the launch.
-        let brokerLogFd;
-        try {
-            brokerLogFd = openSync(join(launchRoot, "broker.log"), "a", 0o600);
-        }
-        catch {
-            brokerLogFd = undefined;
-        }
-        const child = spawn(process.execPath, [fileURLToPath(new URL("../../bin.js", import.meta.url)), "broker"], {
-            detached: true,
-            stdio: brokerLogFd === undefined ? "ignore" : ["ignore", brokerLogFd, brokerLogFd],
-            env: brokerEnvironment(process.env, path),
-        });
-        // The child dups its own copies of the fd at spawn; release ours.
-        if (brokerLogFd !== undefined)
-            closeSync(brokerLogFd);
-        let failure;
-        child.once("error", (error) => {
-            failure = error;
-        });
-        child.once("exit", (code, signal) => {
-            failure = daemonExitRefusal(profileDir, signal ?? code);
-        });
-        child.unref();
-        return await waitForBroker(path, () => failure);
-    }
-    finally {
-        launchLease.release();
-    }
 }
 //# sourceMappingURL=discovery.js.map

package/dist/bot/broker/discovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/bot/broker/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClF,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,4BAA4B,EAC5B,iBAAiB,EACjB,gBAAgB,EAChB,yBAAyB,EACzB,mBAAmB,EACnB,yBAAyB,GAE1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,6BAA6B,EAC7B,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAYnC,MAAM,eAAe,GAAmB;IACtC,WAAW,EAAE,MAAM;IACnB,WAAW,EAAE,KAAK;IAClB,MAAM,EAAE,GAAG;CACZ,CAAC;AAEF,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,UAAU,GAAG,iBAAiB,EAAE;IAClE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC7B,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;SACvC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,IAAI,CACT,MAAM,EACN,wBAAwB,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,IAAI,GAAG,EAAE,EAC9D,aAAa,CACd,CAAC;AACJ,CAAC;AAED;;8DAE8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,UAAU,GAAG,iBAAiB,EAAE;IAC/D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,CAAC;IACnE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,OAAO,mBAAmB,CAAC,UAAU,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,UAAU,GAAG,iBAAiB,EAAE;IAClE,MAAM,IAAI,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,mBAAmB,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE;QACrF,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAU,GAAG,iBAAiB,EAAE;IACjE,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,EAAE,8BAA8B,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAU,GAAG,iBAAiB,EAAE;IAC/D,OAAO,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,UAAkB;IACzD,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IACpD,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,4BAA4B,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC7D,KAAK,CAAC,OAAO,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB;YAAE,OAAO,IAAI,CAAC;QACnD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;uDAMuD;AACvD,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;IACnD,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,aAAa,CAAC;AAChF,CAAC;AAED;;;;;iDAKiD;AACjD,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO,CACL,KAAK,YAAY,aAAa;QAC9B,CAAC,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CACvE,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;AACzE,CAAC;AAED,MAAM,KAAK,GAAG,KAAK,EAAE,EAAU,EAAiB,EAAE,CAChD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE1D;;;;sDAIsD;AACtD,SAAS,0BAA0B,CAAC,GAAW;IAC7C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,UAAU,EAAE,MAAM,CAAC;aACtD,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;2BAG2B;AAC3B,SAAS,8BAA8B,CAAC,IAAY;IAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,SAAS;YACnC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACxC,mDAAmD;YACnD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS;YAChC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,SAAS;YACjD,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;gEAIgE;AAChE,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,MAAM,KAAK,GAAG,yBAAyB,CAAC,UAAU,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;IACpF,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/E,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,wEAAwE;IACxE,mEAAmE;IACnE,IAAI,UAAU,KAAK,IAAI,IAAI,yBAAyB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC;QACtF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;oBAGoB;AACpB,KAAK,UAAU,mBAAmB,CAChC,UAAkB,EAClB,IAAY,EACZ,QAAgB,EAChB,MAAc;IAEd,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,4BAA4B,CAAC,UAAU,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;YACvF,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,gBAAgB,CAAC;gBAAE,MAAM,KAAK,CAAC;QACxD,CAAC;QACD,IAAI,YAAY,IAAI,CAAC,CAAC,MAAM,6BAA6B,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9E,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;sDAGsD;AACtD,KAAK,UAAU,uBAAuB,CACpC,UAAkB,EAClB,IAAY,EACZ,GAAW,EACX,OAAuB,EACvB,kBAA2C;IAE3C,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI;QAC9B,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC;QAChC,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC;KACxB,EAAE,CAAC;QACX,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;QACD,IAAI,MAAM,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACtF,OAAO;QACT,CAAC;IACH,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,gCAAgC,CAAC,GAAW;IACnD,OAAO,CACL,0BAA0B,GAAG,oDAAoD;QACjF,+EAA+E;QAC/E,8BAA8B,GAAG,yDAAyD,CAC3F,CAAC;AACJ,CAAC;AAED,SAAS,iCAAiC,CAAC,GAAW;IACpD,OAAO,CACL,0BAA0B,GAAG,mDAAmD;QAChF,8EAA8E;QAC9E,iBAAiB,GAAG,yDAAyD,CAC9E,CAAC;AACJ,CAAC;AAED;;;;;;;4EAO4E;AAC5E,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,IAAY,EACZ,KAAyB,EACzB,YAAqB,EACrB,UAA0B,eAAe;IAEzC,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,iCAAiC;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,MAAM,UAAU,GAAG,mBAAmB,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,uBAAuB,CAC3B,UAAU,EACV,IAAI,EACJ,GAAG,EACH,OAAO,EACP,CAAC,KAAK,EAAE,EAAE,CACR,gDAAgD,KAAK,oGAAoG,CAC5J,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;yEAayE;AACzE,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,IAAY,EACZ,SAA6B,EAC7B,YAAqB,EACrB,UAA0B,eAAe;IAEzC,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,UAAU,GAAG,mBAAmB,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,wBAAwB,CAAC,UAAU,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7E,MAAM,GAAG,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/B,qEAAqE;IACrE,uEAAuE;IACvE,8DAA8D;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC;IACtC,IAAI,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,OAAO,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC;QAC9C,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,gCAAgC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI;QAC9B,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC;QAChC,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC;KACxB,EAAE,CAAC;QACX,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,gCAAgC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;QACD,IAAI,MAAM,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACtF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,OAAiC;IAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,yBAAyB,CAAC;IACxD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,OAAO,EAAE,EAAE,CAAC;QAClC,IAAI,aAAa,KAAK,SAAS;YAAE,MAAM,aAAa,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QACzC,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,IAAI,aAAa,CACrB,oBAAoB,EACpB,uFAAuF,CACxF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAsB,EAAE,IAAY;IACpE,OAAO,EAAE,GAAG,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CACxB,UAAkB,EAClB,MAAsC;IAEtC,MAAM,KAAK,GAAG,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;QAC1E,OAAO,IAAI,aAAa,CACtB,cAAc,EACd,2CAA2C,KAAK,CAAC,GAAG,sCAAsC,CAC3F,CAAC;IACJ,OAAO,IAAI,aAAa,CACtB,oBAAoB,EACpB,oCAAoC,MAAM,uCAAuC,CAClF,CAAC;AACJ,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,UAAgC,EAAE;IAElC,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,yEAAyE;YACzE,2DAA2D;QAC7D,CAAC;aAAM,IAAI,MAAM,mCAAmC,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC;YAC7F,uEAAuE;YACvE,oDAAoD;QACtD,CAAC;aAAM,IAAI,MAAM,qCAAqC,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;YACvF,uEAAuE;YACvE,4DAA4D;QAC9D,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC5D,IAAI,MAAM,oBAAoB,CAAC,UAAU,CAAC;QAAE,OAAO,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,WAAkC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,WAAW,GAAG,4BAA4B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB;YAAE,OAAO,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACxE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QACzC,CAAC;QACD,IAAI,MAAM,oBAAoB,CAAC,UAAU,CAAC;YAAE,OAAO,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7E,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,kEAAkE;QAClE,IAAI,WAA+B,CAAC;QACpC,IAAI,CAAC;YACH,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,GAAG,SAAS,CAAC;QAC1B,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CACjB,OAAO,CAAC,QAAQ,EAChB,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,EACnE;YACE,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;YAClF,GAAG,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;SAC1C,CACF,CAAC;QACF,kEAAkE;QAClE,IAAI,WAAW,KAAK,SAAS;YAAE,SAAS,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,OAA0B,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,WAAW,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/bot/broker/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC,MAAM,UAAU,mBAAmB,CAAC,UAAU,GAAG,iBAAiB,EAAE;IAClE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpG,OAAO,IAAI,CAAC,MAAM,EAAE,wBAAwB,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,IAAI,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAU,GAAG,iBAAiB,EAAE;IAC/D,OAAO,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,UAAU,GAAG,iBAAiB,EAAE;IAClE,MAAM,IAAI,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,mBAAmB,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE;QACrF,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;IACnD,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,aAAa,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO,KAAK,YAAY,aAAa;QACnC,CAAC,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,KAAK,GAAG,KAAK,EAAE,EAAU,EAAiB,EAAE,CAChD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE1D;4DAC4D;AAC5D,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;aAC9E,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;QACzF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG;gBAAE,SAAS;YAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,UAAU,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACtE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAAE,SAAS;YACzC,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,OAA6B,EAAE,KAAc;IAC5F,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IACrF,MAAM,KAAK,GAAG,OAAO,CAAC,iBAAiB,KAAK,SAAS;QACnD,MAAM,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS;QAC3C,MAAM,wBAAwB,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,SAAS,CAAC;IACjG,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,oBAAoB,GAAG,+BAA+B,CAAC,CAAC;AACxG,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,OAAiC;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,yBAAyB,CAAC;IACxD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,OAAO,EAAE,EAAE,CAAC;QAClC,IAAI,aAAa,KAAK,SAAS;YAAE,MAAM,aAAa,CAAC;QACrD,IAAI,CAAC;YAAC,OAAO,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAChD,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;QACzD,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,uFAAuF,CAAC,CAAC;AACzI,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAsB,EAAE,IAAY;IACpE,OAAO,EAAE,GAAG,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC;AACvD,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,UAAgC,EAAE;IAC1F,IAAI,CAAC;QAAC,OAAO,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAChD,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAAE,MAAM,KAAK,CAAC;IAC/F,CAAC;IACD,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;IAClD,IAAI,KAAyB,CAAC;IAC9B,IAAI,CAAC;QAAC,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,KAAK,GAAG,SAAS,CAAC;IAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE;QACzG,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;QAChE,GAAG,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;KAC1C,CAAC,CAAC;IACH,IAAI,KAAK,KAAK,SAAS;QAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,OAA0B,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAClC,IAAI,IAAI,KAAK,CAAC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,yCAAyC;QACpF,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO;QACxC,OAAO,GAAG,IAAI,aAAa,CAAC,oBAAoB,EAAE,oCAAoC,MAAM,IAAI,IAAI,GAAG,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,IAAI,CAAC;QAAC,OAAO,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IACxD,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,gBAAgB;YAAE,OAAO,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACxE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/bot/broker/mcp-principal.d.ts

@@ -0,0 +1,18 @@
+import { type SessionGuard } from "../../session-guard.js";
+import type { OperatorBroker } from "./operator.js";
+import { type BrokerNotifier } from "./transport.js";
+import type { BrokerPrincipal } from "./authority.js";
+/** One MCP socket owns one principal. No broker wire or browser handle crosses it. */
+export declare class InProcessOperatorPrincipal {
+    readonly principal: BrokerPrincipal;
+    private readonly operator;
+    private readonly guard;
+    private readonly sessions;
+    private readonly refusedStarts;
+    private closed;
+    constructor(principal: BrokerPrincipal, operator: OperatorBroker, guard: SessionGuard);
+    private account;
+    invoke(name: string, originalArgs: Record<string, unknown>, requestId?: `${string}-${string}-${string}-${string}-${string}`, signal?: AbortSignal, notifyUser?: BrokerNotifier): Promise<unknown>;
+    disconnect(): Promise<void>;
+}
+//# sourceMappingURL=mcp-principal.d.ts.map

package/dist/bot/broker/mcp-principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-principal.d.ts","sourceRoot":"","sources":["../../../src/bot/broker/mcp-principal.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEjF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAMtD,sFAAsF;AACtF,qBAAa,0BAA0B;IAMnC,QAAQ,CAAC,SAAS,EAAE,eAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAPxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA8C;IAC5E,OAAO,CAAC,MAAM,CAAS;gBAGZ,SAAS,EAAE,eAAe,EAClB,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,YAAY;YAGxB,OAAO;IAWf,MAAM,CACV,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACrC,SAAS,sDAAe,EACxB,MAAM,CAAC,EAAE,WAAW,EACpB,UAAU,CAAC,EAAE,cAAc,GAC1B,OAAO,CAAC,OAAO,CAAC;IAkIb,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAKlC"}