npm - @wildo-ai/saas-backend-lib - Versions diffs - 1.1.1 → 1.1.3 - Mend

@wildo-ai/saas-backend-lib 1.1.1 → 1.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (972) hide show

package/dist/esm/mcp/services/mcp-tool-adapter.backend.service.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"mcp-tool-adapter.backend.service.js","sourceRoot":"","sources":["../../../../../src/mcp/services/mcp-tool-adapter.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAIL,oBAAoB,EACpB,iCAAiC,EACjC,0BAA0B,EAC1B,qBAAqB,EACrB,4BAA4B,EAC5B,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,gCAAgC,EAAE,2BAA2B,EAAE,MAAM,mEAAmE,CAAC;AAClJ,OAAO,EAKL,uBAAuB,EACvB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;GASG;AACH,MAAM,wBAAwB,GAAsC,IAAI,GAAG,CAAC;IAC1E,oBAAoB,CAAC,aAAa;IAClC,oBAAoB,CAAC,WAAW;CACjC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,+BAA+B,GAAsC,IAAI,GAAG,CAAC;IACjF,oBAAoB,CAAC,aAAa;IAClC,oBAAoB,CAAC,WAAW;IAChC,oBAAoB,CAAC,SAAS;CAC/B,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,0BAA0B,GAAsC,IAAI,GAAG,EAAE,CAAC;AAEhF;;;;GAIG;AACH,MAAM,CAAN,IAAY,kBAOX;AAPD,WAAY,kBAAkB;IAC5B,gCAAgC;IAChC,6CAAuB,CAAA;IACvB,0EAA0E;IAC1E,yCAAmB,CAAA;IACnB,sFAAsF;IACtF,uDAAiC,CAAA;AACnC,CAAC,EAPW,kBAAkB,KAAlB,kBAAkB,QAO7B;AAED;;;;;;GAMG;AACH;;;;;;;;GAQG;AACH,MAAM,UAAU,kCAAkC,CAAC,eAAwB;IACzE,OAAO,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,SAA6B;IAC1E,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,kBAAkB,CAAC,cAAc;YACpC,OAAO,+BAA+B,CAAC;QACzC,KAAK,kBAAkB,CAAC,OAAO;YAC7B,OAAO,wBAAwB,CAAC;QAClC,KAAK,kBAAkB,CAAC,SAAS;YAC/B,OAAO,0BAA0B,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,4BAA4B,CAAC,SAA4E;IACvH,OAAO,MAAM,CAAC,SAAS,CAAC,qBAAqB,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,6BAA6B,CAAC,kBAA0B;IACtE,OAAO,kBAAkB,KAAK,qBAAqB,CAAC,IAAI;WACnD,kBAAkB,KAAK,qBAAqB,CAAC,MAAM;WACnD,kBAAkB,KAAK,qBAAqB,CAAC,KAAK,CAAC;AAC1D,CAAC;AAED,+EAA+E;AAC/E,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAS;IACrE,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,KAAK;CAC5B,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,gCAAgC,GAAwB,IAAI,GAAG,CAAS;IAC5E,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,MAAM;CAC7B,CAAC,CAAC;AAEH,mDAAmD;AACnD,MAAM,uBAAuB,GAA4C,IAAI,GAAG,CAAC;IAC/E,0BAA0B,CAAC,IAAI;IAC/B,0BAA0B,CAAC,QAAQ;CACpC,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEI,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IAIiB;IAEnC;IALX,QAAQ,CAA+D;IAEjF,YACwD,MAAqB,EAExD,iBAAkD;QAFf,WAAM,GAAN,MAAM,CAAe;QAExD,sBAAiB,GAAjB,iBAAiB,CAAiC;QAErE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,8BAA8B,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAED;;;;;OAKG;IACI,oBAAoB,CAAC,UAAsC,EAAE;QAClE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;QACzF,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,wBAAwB,CAAC;QAC5E,MAAM,WAAW,GAAwB,EAAE,CAAC;QAE5C,KAAK,MAAM,YAAY,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,YAAY,CAAC,CAAC;YAChF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC,QAAQ,CAAC,gEAAgE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClG,SAAS;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,eAAe,CAAC;gBAAE,SAAS;YACjE,+FAA+F;YAC/F,2FAA2F;YAC3F,8FAA8F;YAC9F,sFAAsF;YACtF,yDAAyD;YACzD,IAAI,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;gBACxE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wFAAwF,EAAE;oBACzG,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;oBAC7C,SAAS,EAAE,uBAAuB;iBACnC,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,4BAA4B,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YACzH,WAAW,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACI,yBAAyB,CAC9B,YAA0B,EAC1B,mBAA2B,EAC3B,kBAAqD,wBAAwB,EAC7E,WAAoB;QAEpB,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,YAAY,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,eAAe,CAAC;YAAE,OAAO,SAAS,CAAC;QACpF,8FAA8F;QAC9F,4FAA4F;QAC5F,0BAA0B;QAC1B,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACvH,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAC3B,CAAC,SAAS,EAAE,EAAE,CACZ,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,mBAAmB;eAC1D,4BAA4B,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;eAC9E,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;eAC5B,CAAC,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC;YAC/C,6FAA6F;YAC7F,+EAA+E;YAC/E,kDAAkD;eAC/C,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC,CACxD,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,mBAAmB,CAAC,MAAgC,EAAE,eAAkD;QAC9G,OAAO,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACK,sBAAsB,CAAC,MAA+B,EAAE,YAAkC;QAChG,MAAM,UAAU,GAAG,iCAAiC,CAAC,YAAY,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU;YAAE,OAAO,MAAM,CAAC;QAE/B,MAAM,KAAK,GAAG,CAAC,IAAa,EAAW,EAAE;YACvC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACnD,MAAM,GAAG,GAAG,IAA2B,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;gBAAE,OAAO,GAAG,CAAC;YACtE,MAAM,UAAU,GAA4B,EAAE,CAAC;YAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAqC,CAAC,EAAE,CAAC;gBACrF,IAAI,GAAG,KAAK,UAAU;oBAAE,SAAS;gBACjC,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC1C,CAAC,CAAE,GAAG,CAAC,QAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC;gBAC5D,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YACjB,OAAO,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACjF,CAAC,CAAC;QAEF,OAAO,KAAK,CAAC,MAAM,CAA4B,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,SAAyD;QAC5E,OAAO,SAAS,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,2BAA2B,CAAC,SAAyD;QAC3F,OAAQ,SAAwD,CAAC,4BAA4B,KAAK,SAAS,CAAC;IAC9G,CAAC;IAED;;;;;;;;;;OAUG;IACK,qBAAqB,CAC3B,SAAyD,EACzD,WAA+B;QAE/B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC;QACvC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,WAAW,KAAK,SAAS,CAAC;QACvE,OAAO,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpE,CAAC;IAED;;;OAGG;IACK,4BAA4B,CAClC,MAAgC,EAChC,mBAA2D,EAC3D,WAA+B;QAE/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,WAAW,GAAwB,EAAE,CAAC;QAE5C,qFAAqF;QACrF,sEAAsE;QACtE,sFAAsF;QACtF,8EAA8E;QAC9E,MAAM,mBAAmB,GAAuB,IAAI,CAAC,iBAAiB,CAAC,8BAA8B,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAEnI,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAC1C,MAAM,mBAAmB,GAAG,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAClE,+EAA+E;YAC/E,+EAA+E;YAC/E,IAAI,CAAC,4BAA4B,CAAC,SAAS,EAAE,mBAAmB,CAAC;gBAAE,SAAS;YAC5E,wFAAwF;YACxF,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC5C,8EAA8E;YAC9E,IAAI,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC1D,0EAA0E;YAC1E,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC;gBAAE,SAAS;YAClE,0EAA0E;YAC1E,8EAA8E;YAC9E,8CAA8C;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;YAChF,0FAA0F;YAC1F,gGAAgG;YAChG,8FAA8F;YAC9F,4FAA4F;YAC5F,8FAA8F;YAC9F,+FAA+F;YAC/F,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sFAAsF,EAAE;oBACvG,QAAQ,EAAE,IAAI;oBACd,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;oBAC7C,mBAAmB;oBACnB,iBAAiB,EAAE,mBAAmB;oBACtC,SAAS,EAAE,wBAAwB;iBACpC,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAEf,4EAA4E;YAC5E,gFAAgF;YAChF,iFAAiF;YACjF,iFAAiF;YACjF,gFAAgF;YAChF,kFAAkF;YAClF,4EAA4E;YAC5E,mCAAmC;YACnC,MAAM,eAAe,GAAG,CAAC,CAAC,mBAAmB;mBACxC,CAAC,SAAS,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAClB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,eAAe,KAAK,mBAAmB;uBAC9C,SAAS,CAAC,YAAY,KAAK,MAAM,CAAC,kBAAkB,CAC1D,CACF,CAAC;YAEJ,MAAM,eAAe,GAAG,IAAI,CAAC,4BAA4B,CACvD,gCAAgC,CAAC,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,EACzE,SAAS,CACV,CAAC;YACF,0FAA0F;YAC1F,gFAAgF;YAChF,0FAA0F;YAC1F,sFAAsF;YACtF,uFAAuF;YACvF,8FAA8F;YAC9F,MAAM,gBAAgB,GAAG,eAAe;mBACnC,mBAAmB;mBACnB,CAAC,2BAA2B,CAAC,SAAS,CAAC,UAAU,CAAC;gBACrD,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,eAAe,EAAE,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,CAAC;gBAC/F,CAAC,CAAC,eAAe,CAAC;YACpB,wEAAwE;YACxE,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAE/F,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI;gBACJ,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,SAAS,EAAE,mBAAmB,CAAC;gBACpH,WAAW;gBACX,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,SAAS,CAAC,SAAS,CAAC;gBAC5E,YAAY,EAAE,MAAM,CAAC,kBAAkB;gBACvC,mBAAmB;aACpB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,qDAAqD;IAC7C,aAAa,CAAC,kBAAgC,EAAE,mBAA2B;QACjF,OAAO,GAAG,MAAM,CAAC,kBAAkB,CAAC,GAAG,uBAAuB,GAAG,mBAAmB,EAAE,CAAC;IACzF,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,uBAAuB,CAC7B,eAAwC,EACxC,eAAuB,EACvB,YAA0B;QAE1B,IAAI,eAAe,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,eAAe,CAAC;QAC9D,MAAM,UAAU,GAA4B;YAC1C,GAAI,eAAe,CAAC,UAAkD;YACtE,CAAC,eAAe,CAAC,EAAE;gBACjB,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,qBAAqB,MAAM,CAAC,YAAY,CAAC,yCAAyC;aAChG;SACF,CAAC;QACF,MAAM,QAAQ,GAAa,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC;YAChE,CAAC,CAAC,CAAC,GAAI,eAAe,CAAC,QAAqB,CAAC;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxE,OAAO,EAAE,GAAG,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACtD,CAAC;IAED;;;OAGG;IACK,kBAAkB,CACxB,YAA0B,EAC1B,mBAA2B,EAC3B,SAAyD,EACzD,mBAA2D;QAE3D,6EAA6E;QAC7E,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACpD,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QACtE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,IAAI,CAAC,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC,CAAC;IACpH,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACK,gBAAgB,CAAC,SAAyD,EAAE,WAAmB;QACrG,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC,UAAU,CAAC;YAAE,OAAO,WAAW,CAAC;QAC3E,OAAO,GAAG,WAAW,2JAA2J,CAAC;IACnL,CAAC;IAED;;;OAGG;IACK,qBAAqB,CAC3B,YAA0B,EAC1B,mBAA2B,EAC3B,SAAyD;QAEzD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;YAC/D,CAAC,CAAC,WAAW,SAAS,CAAC,SAAS,GAAG;YACnC,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,gBAAgB,mBAAmB,kBAAkB,MAAM,CAAC,YAAY,CAAC,aAAa,QAAQ,GAAG,CAAC;IAC3G,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,4BAA4B,CAClC,MAA+B,EAC/B,SAAyD;QAEzD,IAAK,SAAwC,CAAC,YAAY;YAAE,OAAO,MAAM,CAAC;QAC1E,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAiD,CAAC;QAClF,MAAM,OAAO,GAAG,gBAAgB,EAAE,OAAoF,CAAC;QACvH,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,CAAC,CAAC,eAAe,IAAI,OAAO,CAAC,UAAU,CAAC;YAAE,OAAO,MAAM,CAAC;QACpF,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,yBAAyB,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;QACvF,OAAO;YACL,GAAG,MAAM;YACT,UAAU,EAAE;gBACV,GAAG,gBAAgB;gBACnB,OAAO,EAAE;oBACP,GAAG,OAAO;oBACV,UAAU,EAAE,yBAAyB;oBACrC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvG;aACF;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACK,uBAAuB,CAAC,SAAyD;QACvF,IAAI,CAAC,6BAA6B,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC,UAAU,CAAC;QACzG,gGAAgG;QAChG,iGAAiG;QACjG,+BAA+B;QAC/B,MAAM,UAAU,GAAG,gCAAgC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC,UAAU,CAAC;QAErF,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,SAGpC,CAAC;QACF,+FAA+F;QAC/F,6FAA6F;QAC7F,wDAAwD;QACxD,MAAM,qBAAqB,GAAwB,EAAE,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YAC1D,+FAA+F;YAC/F,4FAA4F;YAC5F,8EAA8E;YAC9E,IAAI,OAAO,KAAK,KAAK,UAAU;gBAAE,qBAAqB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,OAAO,sCAAsC,CAAC;YAC5C,YAAY,EAAE,qBAAqB;YACnC,iBAAiB,EAAE,UAAU,IAAI,EAAE;YACnC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACK,gBAAgB,CAAC,mBAA2B,EAAE,SAAqC;QACzF,MAAM,YAAY,GAAG,yBAAyB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACxE,MAAM,eAAe,GAAG,mBAAmB,KAAK,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC;eAC/E,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO;YACL,YAAY;YACZ,eAAe;YACf,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,gCAAgC,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACtG,aAAa,EAAE,KAAK;SACrB,CAAC;IACJ,CAAC;CACF,CAAA;AA5gBY,4BAA4B;IADxC,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;+CACb,+BAA+B;GAN5D,4BAA4B,CA4gBxC","sourcesContent":["import { injectable, inject } from 'inversify';\nimport { z } from 'zod';\nimport {\n ResourceType,\n AnyResourceConfiguration,\n ResourceConfiguration_Operation,\n ResourcePrimaryScope,\n PRIMARY_SCOPE_TO_FIELD_IDENTIFIER,\n ResourceOperationRiskLevel,\n CoreResourceOperation,\n isDefaultUrlBearingOperation,\n createResourceSearchQueryRequestSchema,\n} from '@wildo-ai/saas-models';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport { convertZodSchemaToMcpInputSchema, isMcpValueWrappedRequestDto } from '~wildo-backend-lib/mcp/utils/zod-to-mcp-json-schema.backend.utils';\nimport {\n McpToolDescriptor,\n McpToolAnnotations,\n McpToolAdapterBuildOptions,\n McpToolDescriptionProvider,\n MCP_TOOL_NAME_SEPARATOR,\n MCP_TOOL_NAME_MAX_LENGTH,\n isSpecConformantMcpToolName,\n} from '~wildo-backend-lib/mcp/models/mcp-tool.backend.schemas';\n\n/*\n Resource primary scopes a machine principal can reach — ORG / APP only. Verified against the\n * authorizer (`authorizations.backend.service.ts`): `authorizeUserSelf` requires\n * `initiatorIds.userId` and `validateFKRelationshipAccess` throws for any non-`USER_REQUEST`\n * execution type on a user-FK path. A machine principal (api-key OR OAuth client) carries no\n * `userId`, so `USER_SELF` (and `ANONYMOUS`) resources are unreachable by it and MUST NOT be\n * advertised to it — doing so would surface tools that always 403. This is the MACHINE catalog, and\n * ONLY the machine's: an anonymous caller borrowed it until 2026-08-11, which advertised twelve\n * role-gated tools to a principal holding no roles. See {@link ANONYMOUS_REACHABLE_SCOPES}.\n /\nconst MACHINE_REACHABLE_SCOPES: ReadonlySet<ResourcePrimaryScope> = new Set([\n ResourcePrimaryScope.ORGANIZATIONS,\n ResourcePrimaryScope.APPLICATION,\n]);\n\n/\n Resource primary scopes a user-delegated principal (an `authorization_code` token that carries\n * a `userId`) can reach — ORG / APP PLUS `USER_SELF`. The authorizer's `authorizeUserSelf` succeeds\n * for such a principal (it supplies `initiatorIds.userId`), so a delegated user's own USER_SELF\n * operations are legitimately callable and may be advertised to them. `ANONYMOUS` stays excluded — it\n * is the pre-auth anonymous surface, not a delegated one.\n /\nconst USER_DELEGATED_REACHABLE_SCOPES: ReadonlySet<ResourcePrimaryScope> = new Set([\n ResourcePrimaryScope.ORGANIZATIONS,\n ResourcePrimaryScope.APPLICATION,\n ResourcePrimaryScope.USER_SELF,\n]);\n\n/\n Scopes reachable by a caller that presented NO credentials.\n \n EMPTY, and empty is the honest answer rather than a placeholder. Two facts decide it:\n \n 1. `tools/call` requires a Bearer unconditionally — there is no anonymous dispatch path on this\n * plane at all. So no tool, of any scope, is invocable without credentials.\n * 2. `ResourcePrimaryScope.ANONYMOUS` — the framework's genuine pre-auth surface — is therefore not\n * servable over MCP either, and must NOT be advertised even if an application declares\n * `mcp: { exposed: true }` on such a resource. Advertising a tool that cannot be called is the\n * exact defect this set exists to end.\n \n Until 2026-08-11 an anonymous caller was classified as a MACHINE principal and handed the ORG/APP\n * catalogue — twelve tools it could not invoke, because those operations are role-gated and it holds\n * no roles. That was not a partial truth, it was a lie with a consequence: the client saw a working\n * server, was never challenged, and so never began authorization. A real client (Cursor) reported\n * \"successfully authenticated\" without ever opening a browser, because clicking Authenticate merely\n * reconnects — and `initialize` + `tools/list` both answered 200.\n \n When an anonymous dispatch path exists, this becomes `{ ANONYMOUS }` and the catalogue stops being\n * empty for apps that expose such tools. That is the ONLY change required here; the classification,\n * the challenge rule and the call gate are already shaped for it.\n /\nconst ANONYMOUS_REACHABLE_SCOPES: ReadonlySet<ResourcePrimaryScope> = new Set();\n\n/\n Who is asking. Three principals, because there are three genuinely different answers — and the\n * defect above came from encoding it as a boolean, which forced \"anonymous\" to borrow the machine\n * answer for want of a third value.\n /\nexport enum McpCallerPrincipal {\n /* No credentials presented. /\n ANONYMOUS = 'anonymous',\n /* A `client_credentials` token — acts as ITSELF, carries no `userId`. /\n MACHINE = 'machine',\n /* An `authorization_code` token — acts FOR a consenting user, carries a `userId`. /\n USER_DELEGATED = 'user_delegated',\n}\n\n/\n The MCP tool scopes reachable by the caller (progressive principal-awareness). Both the\n * `tools/list` catalog and the `callTool` exposability gate derive their scope set from THIS single\n * source, so advertise ≡ callable per principal — no tool an agent sees is un-callable by it, and\n * none it can call is hidden. That invariant was CLAIMED here before 2026-08-11 and was false for the\n * anonymous caller; it is true now.\n /\n/\n Classify a caller that has ALREADY authenticated.\n \n `tools/call` and the `callTool` exposability gate both run after `authenticateExternalToken`\n * succeeded, so ANONYMOUS is unreachable there by construction — the only question left is whether\n * the token carries a `userId`. Named rather than inlined so those sites cannot accidentally pass a\n * boolean into the three-valued resolver and silently mean \"machine\" when they mean \"anonymous\",\n * which is the shape of the defect this whole model replaced.\n /\nexport function mcpPrincipalForAuthenticatedCaller(isUserDelegated: boolean): McpCallerPrincipal {\n return isUserDelegated ? McpCallerPrincipal.USER_DELEGATED : McpCallerPrincipal.MACHINE;\n}\n\nexport function mcpReachableScopesForPrincipal(principal: McpCallerPrincipal): ReadonlySet<ResourcePrimaryScope> {\n switch (principal) {\n case McpCallerPrincipal.USER_DELEGATED:\n return USER_DELEGATED_REACHABLE_SCOPES;\n case McpCallerPrincipal.MACHINE:\n return MACHINE_REACHABLE_SCOPES;\n case McpCallerPrincipal.ANONYMOUS:\n return ANONYMOUS_REACHABLE_SCOPES;\n }\n}\n\n/\n The operation a tool REALLY performs — a custom operation declares what it behaves like via\n * `resourceOperationLike`, and every decision keyed on operation identity must ask this, not the\n * raw identifier.\n \n Lives here, and is exported, because three surfaces now need the same answer: the catalogue\n * (which input envelope to ADVERTISE), the input normalisation, and the output pagination wrapper.\n * `McpServerBackendService` derived it privately and its own comment records why that mattered —\n * when two of those surfaces answered separately, a custom LIST-like operation that only one of\n * them recognised was normalised as a collection on the way in and dispatched without pagination on\n * the way out. A third private copy in the adapter would have reopened exactly that.\n /\nexport function resolveEffectiveMcpOperation(operation: { resourceOperationLike?: unknown; operationIdentifier: unknown }): string {\n return String(operation.resourceOperationLike ?? operation.operationIdentifier);\n}\n\n/\n Collection-shaped queries — the operations that take the `{ filters, pagination, sorting }`\n * argument envelope. Exported for the same reason as {@link resolveEffectiveMcpOperation}: the\n * catalogue and the dispatch must agree on the set, or one advertises an envelope the other refuses\n * (or, as shipped until now, refuses an envelope the other accepts).\n \n `COUNT` belongs here even though it returns a scalar: it FILTERS like a collection. The output\n * side is deliberately a different set (see `isPaginationWrappedOperation`), and conflating the two\n * would ask the repository to wrap a scalar in a pagination envelope its response DTO never declares.\n /\nexport function isCollectionQueryMcpOperation(effectiveOperation: string): boolean {\n return effectiveOperation === CoreResourceOperation.LIST\n \|\| effectiveOperation === CoreResourceOperation.SEARCH\n \|\| effectiveOperation === CoreResourceOperation.COUNT;\n}\n\n/* Core operations that only read — surfaced as `annotations.readOnlyHint`. /\nconst READ_ONLY_CORE_OPERATIONS: ReadonlySet<string> = new Set<string>([\n CoreResourceOperation.READ,\n CoreResourceOperation.LIST,\n CoreResourceOperation.SEARCH,\n CoreResourceOperation.COUNT,\n]);\n\n/\n Write operations where repeating the call with the same arguments changes nothing further.\n \n UPDATE settles the row to the same value; DELETE removes an already-removed row and reports\n * not-found. CREATE is deliberately ABSENT — calling it twice makes two rows, which is exactly the\n * case an agent retrying after a timeout needs to know about.\n * spec-cite: MCP schema — `ToolAnnotations.idempotentHint`\n /\nconst IDEMPOTENT_WRITE_CORE_OPERATIONS: ReadonlySet<string> = new Set<string>([\n CoreResourceOperation.UPDATE,\n CoreResourceOperation.DELETE,\n]);\n\n/* Risk levels that flag a tool as destructive. /\nconst DESTRUCTIVE_RISK_LEVELS: ReadonlySet<ResourceOperationRiskLevel> = new Set([\n ResourceOperationRiskLevel.HIGH,\n ResourceOperationRiskLevel.CRITICAL,\n]);\n\n/\n Adapts registered resource operations into MCP tool descriptors.\n \n # What it exposes\n \n For each in-scope resource, it enumerates the DEFAULT, non-bulk, URL-bearing\n * operations (`API_CALL` / `API_CALL_WITH_CALLBACK` — the only variants carrying an\n * HTTP surface, selected via `isDefaultUrlBearingOperation`) that OPT IN via\n * `operation.mcp.exposed === true` (D4 — fail-closed) and builds a tool\n * descriptor `{ name, description, inputSchema, annotations }` where:\n * - `name` = `<resourceIdentifier>__<operationIdentifier>`,\n * - `inputSchema` = the operation `requestDto` converted to JSON Schema, PLUS the\n * resource's own id (a required string) for instance-scoped operations whose URL\n * binds it — see {@link McpToolAdapterBackendService.withInstanceIdParameter}\n * (kept symmetric with the transport's `extractResourceId`),\n * - `description` = spec `purpose`/`whenToUse` (injected — see below) or a\n * synthesized fallback,\n * - `annotations` = read-only / destructive hints from the op identifier + `riskLevel`.\n \n # Scope constraint (verified, principal-aware)\n \n Exposability is filtered by the CALLER's reachable scopes (progressive principal-awareness). A\n * MACHINE principal reaches ORGANIZATION / APPLICATION only (a machine carries no `userId`, so\n * `USER_SELF` always 403s); an ANONYMOUS caller reaches nothing at all. A USER-DELEGATED principal\n * (`authorization_code`, carries a `userId`) additionally reaches `USER_SELF`, including its collection\n * reads — the socket path scopes those to the caller by seeding the authenticated `userId` into the\n * context map (`buildContextFromSocketAuth`). See {@link mcpReachableScopesForPrincipal}; `ANONYMOUS`\n * is never exposed.\n \n # Description sourcing\n \n Priority: (1) the authored `operation.mcp.description` (D4 config-local field — the\n * agent-facing description the app author wrote for this tool); else (2) a caller-injected\n * {@link McpToolDescriptionProvider} sourcing the spec `purpose`/`whenToUse` (the backend\n * cannot import `saas-specifications` without inverting the layer graph); else (3) a\n * synthesized fallback from config metadata.\n /\n@injectable()\nexport class McpToolAdapterBackendService {\n protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger) protected readonly logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ResourceRegistryService)\n protected readonly resourcesRegistry: ResourcesRegistryBackendService,\n ) {\n this.logDebug = this.logger.debugByType('McpToolAdapterBackendService');\n this.logger.setDebugTypeLogging('McpToolAdapterBackendService', false);\n }\n\n /\n Build the MCP tool descriptor set for the requested resources, filtered to the caller's reachable\n * scopes (`options.reachableScopes`, default = machine-reachable ORG/APP). A user-delegated caller\n * passes the delegated set so their USER_SELF tools are advertised too. Tools are returned in\n * deterministic order (resource type, then operation identifier) so `tools/list` output is stable.\n /\n public buildToolDescriptors(options: McpToolAdapterBuildOptions = {}): McpToolDescriptor[] {\n const resourceTypes = options.resourceTypes ?? this.resourcesRegistry.getResourceTypes();\n const reachableScopes = options.reachableScopes ?? MACHINE_REACHABLE_SCOPES;\n const descriptors: McpToolDescriptor[] = [];\n\n for (const resourceType of [...resourceTypes].sort()) {\n const config = this.resourcesRegistry.tryGetResourceConfiguration(resourceType);\n if (!config) {\n this.logDebug('Skipping unregistered resource type requested for MCP exposure', { resourceType });\n continue;\n }\n if (!this.isResourceExposable(config, reachableScopes)) continue;\n // Tool-name round-trip invariant: a tool name is `<resourceIdentifier>__<operationIdentifier>`\n // and `McpServerBackendService.parseToolName` splits on the FIRST separator, so a resource\n // identifier that itself contains `__` would mis-parse into a non-existent resource/operation\n // and produce an un-callable tool. Skip such a resource (fail-closed) and surface the\n // misconfiguration rather than emit a broken descriptor.\n if (String(config.resourceIdentifier).includes(MCP_TOOL_NAME_SEPARATOR)) {\n this.logger.warn('Skipping MCP exposure for a resource whose identifier contains the tool-name separator', {\n resourceIdentifier: config.resourceIdentifier,\n separator: MCP_TOOL_NAME_SEPARATOR,\n });\n continue;\n }\n\n const operationDescriptors = this.buildResourceToolDescriptors(config, options.descriptionProvider, options.instanceRef);\n descriptors.push(...operationDescriptors);\n }\n\n return descriptors;\n }\n\n /\n Resolve the single exposable operation for a `resourceType` +\n * `operationIdentifier`, or `undefined` if it is not exposable. This is the\n * SINGLE source of exposability truth — {@link McpServerBackendService.callTool}\n * calls it (with the caller's reachable scopes) before authorizing so a crafted tool name can never\n * reach a scope the caller cannot use (e.g. a machine principal hitting a USER_SELF operation).\n * Applies the exact same filter as {@link buildToolDescriptors}: reachable scope + default, non-bulk,\n * URL-bearing variant, opted in, not an acknowledged gap, on this instance, and a conformant name.\n * `reachableScopes` defaults to machine-reachable (ORG/APP); a user-delegated caller passes the\n * delegated set so a USER_SELF operation resolves for THEM.\n \n \"the exact same filter\" is load-bearing, and it was FALSE until 2026-08-13: this method omitted\n * {@link isAcknowledgedUnimplemented}, so an operation withdrawn from the catalogue for provably\n * not working stayed invocable by name. That is the harm that guard exists to prevent (an agent\n * that cannot tell \"not implemented\" from \"bad arguments\" retries forever), arriving through the\n * one door the guard did not cover — and every pin on it was green throughout, because all of them\n * interrogate the advertise side. Any clause added to one of these two lists belongs in the other\n * in the same edit.\n /\n public resolveExposableOperation(\n resourceType: ResourceType,\n operationIdentifier: string,\n reachableScopes: ReadonlySet<ResourcePrimaryScope> = MACHINE_REACHABLE_SCOPES,\n instanceRef?: string,\n ): ResourceConfiguration_Operation<any, any, any> \| undefined {\n const config = this.resourcesRegistry.tryGetResourceConfiguration(resourceType);\n if (!config \|\| !this.isResourceExposable(config, reachableScopes)) return undefined;\n // SEP-986 naming, checked on the SAME composed name the catalogue would advertise. A name the\n // catalogue refuses to publish must not remain callable by a client that guessed it, or the\n // withdrawal is cosmetic.\n if (!isSpecConformantMcpToolName(this.buildToolName(config.resourceIdentifier, operationIdentifier))) return undefined;\n return config.operations.find(\n (operation) =>\n String(operation.operationIdentifier) === operationIdentifier\n && isDefaultUrlBearingOperation(operation, String(operation.operationIdentifier))\n && this.isMcpExposed(operation)\n && !this.isAcknowledgedUnimplemented(operation)\n // R-2: the tool must belong to the server instance it is being called on — so a tool curated\n // onto `support` cannot be invoked at `/mcp` (or at `ops`) even by name. Keeps\n // advertise ≡ callable per (principal, instance).\n && this.isOnMcpServerInstance(operation, instanceRef),\n );\n }\n\n /\n A resource is exposable only if its primary scope is in the caller's reachable set. The default\n * (machine) set is ORG / APP — USER_SELF and ANONYMOUS excluded fail-closed; a user-delegated caller\n * passes a set that also includes USER_SELF (see {@link mcpReachableScopesForPrincipal}).\n /\n private isResourceExposable(config: AnyResourceConfiguration, reachableScopes: ReadonlySet<ResourcePrimaryScope>): boolean {\n return reachableScopes.has(config.resourcePrimaryScope);\n }\n\n /\n Remove the resource's PRIMARY-SCOPE field from an advertised tool schema.\n \n A tool schema is derived from the operation's `requestDto`, and a search or list DTO commonly\n * declares its own scope FK (`organizationId`) among its filterable fields. On the REST plane that\n * is harmless — the field also appears on the URL, and `validateInitiatorCriticalParameters`\n * refuses any request whose sources disagree. Advertised as a TOOL PARAMETER it is neither\n * harmless nor even meaningful: a machine caller's tenant comes from its token, so the only reason\n * to set it is to try another tenant's.\n \n The repository now refuses such a call outright, so this is defence in depth rather than the\n * control — but advertising a parameter whose only use is an attack, and which is guaranteed to\n * fail, is a catalogue defect on its own: an agent reading the schema is invited to set it and is\n * then refused for reasons it cannot see.\n \n Both nesting positions are stripped, top level and inside `filters`, because the DTO builder\n * places it in either depending on the operation.\n \n assurance-control: WILDO.DATA.TENANT_ISOLATION — an agent is never offered its tenant as a knob\n /\n private withoutScopeParameters(schema: Record<string, unknown>, primaryScope: ResourcePrimaryScope): Record<string, unknown> {\n const scopeField = PRIMARY_SCOPE_TO_FIELD_IDENTIFIER[primaryScope];\n if (!scopeField) return schema;\n\n const strip = (node: unknown): unknown => {\n if (!node \|\| typeof node !== 'object') return node;\n const obj = node as Record<string, any>;\n if (!obj.properties \|\| typeof obj.properties !== 'object') return obj;\n const properties: Record<string, unknown> = {};\n for (const [key, value] of Object.entries(obj.properties as Record<string, unknown>)) {\n if (key === scopeField) continue;\n properties[key] = strip(value);\n }\n const required = Array.isArray(obj.required)\n ? (obj.required as string[]).filter((r) => r !== scopeField)\n : obj.required;\n return { ...obj, properties, ...(required === undefined ? {} : { required }) };\n };\n\n return strip(schema) as Record<string, unknown>;\n }\n\n /\n D4 opt-in (fail-closed): an operation is exposed as an MCP tool ONLY when its config\n * explicitly sets `mcp.exposed === true`. Absent/false ⇒ not exposed. This is a discovery\n * gate, NOT authorization — `callTool` still runs `authorizeInController` per call.\n /\n private isMcpExposed(operation: ResourceConfiguration_Operation<any, any, any>): boolean {\n return operation.mcp?.exposed === true;\n }\n\n /\n An operation declared a KNOWN implementation gap is never advertised, whatever its config says.\n \n `unimplementedAcknowledgement` marks a variant that both unblocks startup AND makes the request\n * refuse, so it can never answer 2xx. Advertising it as a tool tells an agent a capability exists\n * that provably does not: the agent calls it, is refused, and — having no way to distinguish \"not\n * implemented\" from \"bad arguments\" — retries with different arguments and loops. That is the same\n * agent-facing harm the fail-closed opt-in exists to prevent, arriving through a different door.\n \n This OVERRIDES the author's opt-in rather than trusting it, because the two declarations are\n * written at different times by different people: `mcp.exposed` is authored when the verb is\n * designed, `unimplementedAcknowledgement` is added later when someone discovers it does not work.\n * A rule that asks the author to remember to also retract the exposure is a rule that will be\n * missed exactly when it matters most.\n /\n private isAcknowledgedUnimplemented(operation: ResourceConfiguration_Operation<any, any, any>): boolean {\n return (operation as { unimplementedAcknowledgement?: unknown }).unimplementedAcknowledgement !== undefined;\n }\n\n /\n Instance membership (R-2, multiple named MCP servers). Membership is EXCLUSIVE and defaults safely:\n \n - `operation.mcp.servers` ABSENT ⇒ the operation belongs to the DEFAULT server (the plain `/mcp`\n * endpoint) and to no named server. This is what makes multi-server strictly additive: every\n * already-exposed operation keeps appearing exactly where it does today.\n * - `servers` PRESENT ⇒ the operation belongs ONLY to the named servers (it leaves the default\n * catalog). Curating a server is therefore a deliberate move, never an accidental duplication.\n \n @param instanceRef - the server being served, or `undefined` for the default server.\n /\n private isOnMcpServerInstance(\n operation: ResourceConfiguration_Operation<any, any, any>,\n instanceRef: string \| undefined,\n ): boolean {\n const servers = operation.mcp?.servers;\n if (!servers \|\| servers.length === 0) return instanceRef === undefined;\n return instanceRef !== undefined && servers.includes(instanceRef);\n }\n\n /\n Enumerate the exposable default URL-bearing operations of one resource and\n * build their tool descriptors, sorted by operation identifier.\n /\n private buildResourceToolDescriptors(\n config: AnyResourceConfiguration,\n descriptionProvider: McpToolDescriptionProvider \| undefined,\n instanceRef: string \| undefined,\n ): McpToolDescriptor[] {\n const seen = new Set<string>();\n const descriptors: McpToolDescriptor[] = [];\n\n // The resource's own id field identifier (e.g. `todolistId`). This is the SAME value\n // the transport's `extractResourceId` pulls out of the tool arguments\n // (`MCPControllerBackendService.extractResourceId` reads the identical registry map),\n // so advertising it here keeps advertise ≡ extract for instance-scoped tools.\n const selfFieldIdentifier: string \| undefined = this.resourcesRegistry.getAllResourceFieldIdentifiers()[config.resourceIdentifier];\n\n for (const operation of config.operations) {\n const operationIdentifier = String(operation.operationIdentifier);\n // `isDefaultUrlBearingOperation` narrows to API_CALL / API_CALL_WITH_CALLBACK,\n // requires isOperationDefault, and excludes bulk — the exact HTTP-surface set.\n if (!isDefaultUrlBearingOperation(operation, operationIdentifier)) continue;\n // D4 opt-in (fail-closed): only operations that explicitly set `mcp.exposed` are tools.\n if (!this.isMcpExposed(operation)) continue;\n // …and an acknowledged implementation gap is withdrawn even when it opted in.\n if (this.isAcknowledgedUnimplemented(operation)) continue;\n // R-2: only the operations belonging to the server instance being served.\n if (!this.isOnMcpServerInstance(operation, instanceRef)) continue;\n // A resource can carry multiple default url-bearing variants for the same\n // identifier only across data modes; de-dupe by the tool name so `tools/list`\n // never returns two tools with the same name.\n const name = this.buildToolName(config.resourceIdentifier, operationIdentifier);\n // SEP-986 naming (`2025-11-25`). Checked on the COMPOSED name rather than on either half,\n // because that is the string the client parses and the length bound applies to the whole of it.\n // Fail-closed and per-OPERATION: one badly named custom operation withdraws itself, while its\n // resource's other tools keep working — unlike the `__`-separator guard above, which has to\n // skip the whole resource because it corrupts the round-trip identity of every name under it.\n // Mirrored in `resolveExposableOperation`, so the tool is un-callable as well as unadvertised.\n if (!isSpecConformantMcpToolName(name)) {\n this.logger.warn('Skipping MCP exposure for a tool whose name does not satisfy the MCP naming guidance', {\n toolName: name,\n resourceIdentifier: config.resourceIdentifier,\n operationIdentifier,\n allowedCharacters: 'A-Z a-z 0-9 _ - .',\n maxLength: MCP_TOOL_NAME_MAX_LENGTH,\n });\n continue;\n }\n if (seen.has(name)) continue;\n seen.add(name);\n\n // Instance-scoped operation? An entity-level op (READ / UPDATE / DELETE and\n // instance-scoped custom ops) binds the resource's OWN id as a URL path param —\n // `getOperationSegments` stamps it as `{ fieldIdentifier: <selfFieldIdentifier>,\n // resourceType: <this resource> }` (one-to-one / complete-M2M singletons omit it\n // and are identified by parent scope instead). That id lives on the URL, NOT in\n // `requestDto`, so without advertising it the calling agent is never told it must\n // supply an id. `operation` is narrowed to the URL-bearing variant here, so\n // `initiatorInfos` is a safe read.\n const bindsInstanceId = !!selfFieldIdentifier\n && (operation.initiatorInfos ?? []).some((info) =>\n info.parameters.some(\n (parameter) =>\n parameter.fieldIdentifier === selfFieldIdentifier\n && parameter.resourceType === config.resourceIdentifier,\n ),\n );\n\n const baseInputSchema = this.withoutUnsupportedTextSearch(\n convertZodSchemaToMcpInputSchema(this.advertisedRequestSchema(operation)),\n operation,\n );\n // A `{value:...}`-wrapped union/primitive-root DTO is dispatched by the transport WITHOUT\n // an id split — it unwraps the envelope and passes the payload straight through\n // (`MCPControllerBackendService`), so an id must NOT be advertised for it. Only a genuine\n // object-root DTO (or the empty-object no-body case) carries the resource-id, keeping\n // advertise ≡ extract. Gate on the SAME predicate the transport uses, not on the built\n // schema's `type` (the value-wrapper is itself object-root and would slip past a type check).\n const advertisedSchema = bindsInstanceId\n && selfFieldIdentifier\n && !isMcpValueWrappedRequestDto(operation.requestDto)\n ? this.withInstanceIdParameter(baseInputSchema, selfFieldIdentifier, config.resourceIdentifier)\n : baseInputSchema;\n // …then withdraw the SCOPE field, wherever the DTO happens to place it.\n const inputSchema = this.withoutScopeParameters(advertisedSchema, config.resourcePrimaryScope);\n\n descriptors.push({\n name,\n description: this.resolveDescription(config.resourceIdentifier, operationIdentifier, operation, descriptionProvider),\n inputSchema,\n annotations: this.buildAnnotations(operationIdentifier, operation.riskLevel),\n resourceType: config.resourceIdentifier,\n operationIdentifier,\n });\n }\n\n return descriptors.sort((a, b) => a.operationIdentifier.localeCompare(b.operationIdentifier));\n }\n\n /* `<resourceIdentifier>__<operationIdentifier>`. /\n private buildToolName(resourceIdentifier: ResourceType, operationIdentifier: string): string {\n return `${String(resourceIdentifier)}${MCP_TOOL_NAME_SEPARATOR}${operationIdentifier}`;\n }\n\n /\n Advertise the resource's own id as a REQUIRED string on an instance-scoped tool's\n * `inputSchema`, mirroring the URL path parameter the transport splits back out\n * (`MCPControllerBackendService.extractResourceId`). Without it, an agent reading the\n * schema is never told it must supply the id, so instance READ / UPDATE / DELETE tools\n * are un-invokable as advertised.\n \n Only OBJECT-root schemas are augmented: a `{value:...}`-wrapped union/primitive-root\n * DTO (e.g. a discriminated-union create) is dispatched WITHOUT an id split by the\n * transport, so injecting an id there would break the advertise ≡ extract symmetry.\n * `instanceIdField` is the resource's registry field identifier — the exact key the\n * transport reads back — so a compliant agent supplies it under the name the server expects.\n /\n private withInstanceIdParameter(\n baseInputSchema: Record<string, unknown>,\n instanceIdField: string,\n resourceType: ResourceType,\n ): Record<string, unknown> {\n if (baseInputSchema.type !== 'object') return baseInputSchema;\n const properties: Record<string, unknown> = {\n ...(baseInputSchema.properties as Record<string, unknown> \| undefined),\n [instanceIdField]: {\n type: 'string',\n description: `Identifier of the ${String(resourceType)} record to act on (URL path parameter).`,\n },\n };\n const required: string[] = Array.isArray(baseInputSchema.required)\n ? [...(baseInputSchema.required as string[])]\n : [];\n if (!required.includes(instanceIdField)) required.push(instanceIdField);\n return { ...baseInputSchema, properties, required };\n }\n\n /\n Prefer spec-sourced prose from the injected provider; fall back to a\n * synthesized description built from the operation's own config metadata.\n /\n private resolveDescription(\n resourceType: ResourceType,\n operationIdentifier: string,\n operation: ResourceConfiguration_Operation<any, any, any>,\n descriptionProvider: McpToolDescriptionProvider \| undefined,\n ): string {\n // D4: an authored `mcp.description` on the operation config wins — it is the\n // agent-facing tool description the app author wrote explicitly for this tool.\n const authored = operation.mcp?.description?.trim();\n if (authored) return this.withEnvelopeNote(operation, authored);\n const spec = descriptionProvider?.(resourceType, operationIdentifier);\n if (spec && (spec.purpose \|\| spec.whenToUse)) {\n const parts: string[] = [];\n if (spec.purpose) parts.push(spec.purpose.trim());\n if (spec.whenToUse) parts.push(`When to use: ${spec.whenToUse.trim()}`);\n return this.withEnvelopeNote(operation, parts.join('\\n\\n'));\n }\n return this.withEnvelopeNote(operation, this.synthesizeDescription(resourceType, operationIdentifier, operation));\n }\n\n /\n Name the `{ value: … }` envelope, because nothing else does.\n \n A resource whose main schema is a FAMILY (a discriminated union) produces a union-root request\n * DTO, which the transport wraps as `{ value: <payload> }` — so `todos__create` advertises one\n * opaque `value` property carrying a `oneOf`, where its sibling `tasks__create` advertises eight\n * named fields. The schema is correct and an agent that validates against it succeeds; the hazard\n * is the DESCRIPTION, which an app author writes about the payload (\"provide a title; optionally\n * description, priority…\") and which therefore describes the INSIDE of an envelope it never\n * mentions. An agent that reads the prose and skips the schema builds `{title}` and is rejected.\n \n Appended by the ENGINE rather than asked of the author, deliberately: the envelope is an artefact\n * of how the framework compiles a schema family, so requiring every app author to hand-write it\n * would push an engine internal into app prose and go stale the moment a resource stops being\n * polymorphic. The note is derived from the same predicate the transport uses to decide whether to\n * unwrap, so it appears exactly when the envelope is real.\n /\n private withEnvelopeNote(operation: ResourceConfiguration_Operation<any, any, any>, description: string): string {\n if (!isMcpValueWrappedRequestDto(operation.requestDto)) return description;\n return `${description}\\n\\nArguments must be wrapped: pass the payload as the \"value\" property (this resource accepts several shapes, listed under \"value\" in the input schema).`;\n }\n\n /\n Minimal fallback description from config metadata. Honest about being\n * auto-generated so an operator can tell which tools still need authored prose.\n /\n private synthesizeDescription(\n resourceType: ResourceType,\n operationIdentifier: string,\n operation: ResourceConfiguration_Operation<any, any, any>,\n ): string {\n const riskNote = DESTRUCTIVE_RISK_LEVELS.has(operation.riskLevel)\n ? ` (risk: ${operation.riskLevel})`\n : '';\n return `Perform the \"${operationIdentifier}\" operation on ${String(resourceType)} resources${riskNote}.`;\n }\n\n /\n Withdraw `filters.searchRequest` from an operation that cannot perform a text search.\n \n The shared collection envelope extends a BASE filter schema that always carries\n * `searchRequest`, because it was written for SEARCH. Advertising it on an operation that does not\n * declare `isSearchable` would promise a text search the repository refuses outright\n * (`REPOSITORY_RESOURCE_SEARCH_NOT_ENABLED`) — or, worse on the LIST path, one that is quietly\n * discarded by the filter allow-list, handing the agent an UNFILTERED collection it believes was\n * narrowed. That is the exact failure the collection normalisation was introduced to end, and\n * reintroducing it while fixing its mirror image would be a poor trade.\n \n `createdAt` / `updatedAt` stay: generic date-range filtering IS translated for any collection\n * operation, so those two are honoured wherever they are advertised.\n /\n private withoutUnsupportedTextSearch(\n schema: Record<string, unknown>,\n operation: ResourceConfiguration_Operation<any, any, any>,\n ): Record<string, unknown> {\n if ((operation as { isSearchable?: boolean }).isSearchable) return schema;\n const schemaProperties = schema.properties as Record<string, unknown> \| undefined;\n const filters = schemaProperties?.filters as { properties?: Record<string, unknown>; required?: string[] } \| undefined;\n if (!filters?.properties \|\| !('searchRequest' in filters.properties)) return schema;\n const { searchRequest: _withdrawn, ...remainingFilterProperties } = filters.properties;\n return {\n ...schema,\n properties: {\n ...schemaProperties,\n filters: {\n ...filters,\n properties: remainingFilterProperties,\n ...(filters.required ? { required: filters.required.filter((name) => name !== 'searchRequest') } : {}),\n },\n },\n };\n }\n\n /\n The schema this tool ADVERTISES as its arguments.\n \n For almost every operation that is simply `requestDto`. Collection-shaped operations are the\n * exception, and the reason is a split between two contracts that only LOOKS like one:\n \n - SEARCH is a POST; the factory promotes its `searchQueryRequestSchema` to `requestDto`, so\n * `{ filters, pagination, sorting }` is already advertised.\n * - LIST / COUNT are GETs. Their filters travel in the QUERY STRING, so their `requestDto`\n * stays `z.object({})` — correctly, because giving a GET a request body would misdescribe the\n * REST contract and the generated OpenAPI.\n \n But MCP has no query string. `McpServerBackendService.toDispatchArguments` routes EVERY\n * collection-shaped operation through `normalizeCollectionQueryRequestData`, bypassing the strict\n * `requestDto.parse` entirely — so a LIST tool has always ACCEPTED `{ filters, pagination,\n * sorting }` and applied the operation's filter allow-list to it. It just advertised\n * `{properties:{}, additionalProperties:false}`, which tells a conformant agent the opposite: that\n * arguments are forbidden.\n \n That is this surface's own \"the advertised contract is not the enforced contract\" defect,\n * inverted. The earlier instance advertised filters and silently ignored them; this one accepts\n * filters and refuses to admit it. An agent could only discover the capability by violating the\n * schema it was given.\n \n The envelope is built from the SAME `filterFields` / `sortFields` the dispatch allow-lists\n * against, through the same builder the factory uses for SEARCH — so advertise ≡ extract holds by\n * construction rather than by two definitions happening to agree.\n \n `requestDto` is deliberately NOT modified: the REST contract, the OpenAPI document and the\n * response shape are all untouched by this. Only what MCP tells an agent changes.\n /\n private advertisedRequestSchema(operation: ResourceConfiguration_Operation<any, any, any>): z.ZodTypeAny \| undefined {\n if (!isCollectionQueryMcpOperation(resolveEffectiveMcpOperation(operation))) return operation.requestDto;\n // A collection operation that already advertises a non-empty contract (SEARCH, or any operation\n // carrying an explicit authored `requestDto`) is left exactly as authored — this fills a gap, it\n // does not override an author.\n const advertised = convertZodSchemaToMcpInputSchema(operation.requestDto);\n if (Object.keys(advertised.properties ?? {}).length > 0) return operation.requestDto;\n\n const { filterFields, sortFields } = operation as unknown as {\n filterFields?: Record<string, unknown>;\n sortFields?: readonly string[];\n };\n // Nothing declared to filter or sort by ⇒ nothing to advertise beyond pagination. Emitting the\n // envelope anyway is still right: pagination is what makes a collection tool usable past its\n // first page, and it needs no per-resource declaration.\n const primitiveFilterFields: Record<string, any> = {};\n Object.entries(filterFields ?? {}).forEach(([key, value]) => {\n // A FUNCTION-valued entry is a filter REFERENCE (a cross-resource pointer the factory resolves\n // elsewhere), not a schema — the same exclusion the factory applies when it builds SEARCH's\n // envelope. Advertising it would put an uncallable key in front of the agent.\n if (typeof value !== 'function') primitiveFilterFields[key] = value;\n });\n\n return createResourceSearchQueryRequestSchema({\n filterFields: primitiveFilterFields,\n allowedSortFields: sortFields ?? [],\n pagination: true,\n });\n }\n\n /\n Behaviour hints from the operation identifier + risk level.\n \n Every one of these has a DEFAULT in the specification, so an omitted hint is not a neutral\n * silence — it is an assertion of that default. Two of them defaulted against us:\n \n - `openWorldHint` defaults to true, so omitting it advertised every Wildo tool as\n * potentially reaching arbitrary external systems. It is always `false` here: a tool operates on\n * this application's own resources, through its own authorization, and reaches nothing else.\n * - `idempotentHint` defaults to false, i.e. \"retrying may double the effect\" — true for\n * CREATE, wrong for UPDATE and DELETE. This is the hint an agent uses to decide whether a retry\n * after a timeout is safe, which makes the wrong default an availability problem, not a\n * cosmetic one.\n \n `idempotentHint` is emitted ONLY for writes because the specification defines it as \"meaningful\n * only when `readOnlyHint == false`\". `destructiveHint` is emitted unconditionally despite the same\n * caveat: `false` is TRUE of a read tool, and a client that reads it without first checking\n * `readOnlyHint` is safer for having it.\n \n spec-cite: MCP 2026-07-28 — `ToolAnnotations`, `idempotentHint` and `destructiveHint` doc\n * comments (\"(This property is meaningful only when `readOnlyHint == false`)\"), and the `Default:`\n * lines on `openWorldHint` (true), `idempotentHint` (false) and `destructiveHint` (true).\n * <https://raw.githubusercontent.com/modelcontextprotocol/modelcontextprotocol/main/schema/2026-07-28/schema.ts>\n */\n private buildAnnotations(operationIdentifier: string, riskLevel: ResourceOperationRiskLevel): McpToolAnnotations {\n const readOnlyHint = READ_ONLY_CORE_OPERATIONS.has(operationIdentifier);\n const destructiveHint = operationIdentifier === String(CoreResourceOperation.DELETE)\n \|\| DESTRUCTIVE_RISK_LEVELS.has(riskLevel);\n return {\n readOnlyHint,\n destructiveHint,\n ...(readOnlyHint ? {} : { idempotentHint: IDEMPOTENT_WRITE_CORE_OPERATIONS.has(operationIdentifier) }),\n openWorldHint: false,\n };\n }\n}\n"]}
1	+ {"version":3,"file":"mcp-tool-adapter.backend.service.js","sourceRoot":"","sources":["../../../../../src/mcp/services/mcp-tool-adapter.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,EAIL,oBAAoB,EACpB,iCAAiC,EACjC,0BAA0B,EAC1B,qBAAqB,EACrB,4BAA4B,EAC5B,sCAAsC,EACtC,sCAAsC,EACtC,iCAAiC,EACjC,0BAA0B,GAE3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAGpF,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,gCAAgC,EAAE,2BAA2B,EAAE,MAAM,mEAAmE,CAAC;AAClJ,OAAO,EAKL,uBAAuB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,wDAAwD,CAAC;AAEhE;;;;;;;;;GASG;AACH,MAAM,wBAAwB,GAAsC,IAAI,GAAG,CAAC;IAC1E,oBAAoB,CAAC,aAAa;IAClC,oBAAoB,CAAC,WAAW;CACjC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,+BAA+B,GAAsC,IAAI,GAAG,CAAC;IACjF,oBAAoB,CAAC,aAAa;IAClC,oBAAoB,CAAC,WAAW;IAChC,oBAAoB,CAAC,SAAS;CAC/B,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,0BAA0B,GAAsC,IAAI,GAAG,EAAE,CAAC;AAEhF;;;;GAIG;AACH,MAAM,CAAN,IAAY,kBAOX;AAPD,WAAY,kBAAkB;IAC5B,gCAAgC;IAChC,6CAAuB,CAAA;IACvB,0EAA0E;IAC1E,yCAAmB,CAAA;IACnB,sFAAsF;IACtF,uDAAiC,CAAA;AACnC,CAAC,EAPW,kBAAkB,KAAlB,kBAAkB,QAO7B;AAED;;;;;;GAMG;AACH;;;;;;;;GAQG;AACH,MAAM,UAAU,kCAAkC,CAAC,eAAwB;IACzE,OAAO,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,SAA6B;IAC1E,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,kBAAkB,CAAC,cAAc;YACpC,OAAO,+BAA+B,CAAC;QACzC,KAAK,kBAAkB,CAAC,OAAO;YAC7B,OAAO,wBAAwB,CAAC;QAClC,KAAK,kBAAkB,CAAC,SAAS;YAC/B,OAAO,0BAA0B,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,4BAA4B,CAAC,SAA4E;IACvH,OAAO,MAAM,CAAC,SAAS,CAAC,qBAAqB,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,6BAA6B,CAAC,kBAA0B;IACtE,OAAO,kBAAkB,KAAK,qBAAqB,CAAC,IAAI;WACnD,kBAAkB,KAAK,qBAAqB,CAAC,MAAM;WACnD,kBAAkB,KAAK,qBAAqB,CAAC,KAAK,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,OAAO,0BAA0B,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,+EAA+E;AAC/E,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAS;IACrE,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,IAAI;IAC1B,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,KAAK;CAC5B,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,gCAAgC,GAAwB,IAAI,GAAG,CAAS;IAC5E,qBAAqB,CAAC,MAAM;IAC5B,qBAAqB,CAAC,MAAM;CAC7B,CAAC,CAAC;AAEH,mDAAmD;AACnD,MAAM,uBAAuB,GAA4C,IAAI,GAAG,CAAC;IAC/E,0BAA0B,CAAC,IAAI;IAC/B,0BAA0B,CAAC,QAAQ;CACpC,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEI,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IAIiB;IAEnC;IASA;IAdX,QAAQ,CAA+D;IAEjF,YACwD,MAAqB,EAExD,iBAAkD,EASlD,kBAAqD;QAXlB,WAAM,GAAN,MAAM,CAAe;QAExD,sBAAiB,GAAjB,iBAAiB,CAAiC;QASlD,uBAAkB,GAAlB,kBAAkB,CAAmC;QAExE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,8BAA8B,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAED;;;;;OAKG;IACI,oBAAoB,CAAC,UAAsC,EAAE;QAClE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;QACzF,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,wBAAwB,CAAC;QAC5E,MAAM,WAAW,GAAwB,EAAE,CAAC;QAE5C,KAAK,MAAM,YAAY,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,YAAY,CAAC,CAAC;YAChF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC,QAAQ,CAAC,gEAAgE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClG,SAAS;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,eAAe,CAAC;gBAAE,SAAS;YACjE,+FAA+F;YAC/F,2FAA2F;YAC3F,8FAA8F;YAC9F,sFAAsF;YACtF,yDAAyD;YACzD,IAAI,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;gBACxE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wFAAwF,EAAE;oBACzG,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;oBAC7C,SAAS,EAAE,uBAAuB;iBACnC,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,4BAA4B,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;YACzH,WAAW,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACI,yBAAyB,CAC9B,YAA0B,EAC1B,mBAA2B,EAC3B,kBAAqD,wBAAwB,EAC7E,WAAoB;QAEpB,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,YAAY,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,eAAe,CAAC;YAAE,OAAO,SAAS,CAAC;QACpF,8FAA8F;QAC9F,4FAA4F;QAC5F,0BAA0B;QAC1B,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACvH,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAC3B,CAAC,SAAS,EAAE,EAAE,CACZ,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,mBAAmB;eAC1D,4BAA4B,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;eAC9E,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;eAC5B,CAAC,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC;YAC/C,6FAA6F;YAC7F,+EAA+E;YAC/E,kDAAkD;eAC/C,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC,CACxD,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,mBAAmB,CAAC,MAAgC,EAAE,eAAkD;QAC9G,OAAO,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACK,sBAAsB,CAAC,MAA+B,EAAE,YAAkC;QAChG,MAAM,UAAU,GAAG,iCAAiC,CAAC,YAAY,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU;YAAE,OAAO,MAAM,CAAC;QAE/B,MAAM,KAAK,GAAG,CAAC,IAAa,EAAW,EAAE;YACvC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACnD,MAAM,GAAG,GAAG,IAA2B,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;gBAAE,OAAO,GAAG,CAAC;YACtE,MAAM,UAAU,GAA4B,EAAE,CAAC;YAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAqC,CAAC,EAAE,CAAC;gBACrF,IAAI,GAAG,KAAK,UAAU;oBAAE,SAAS;gBACjC,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC1C,CAAC,CAAE,GAAG,CAAC,QAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC;gBAC5D,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YACjB,OAAO,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACjF,CAAC,CAAC;QAEF,OAAO,KAAK,CAAC,MAAM,CAA4B,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,SAAyD;QAC5E,OAAO,SAAS,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,2BAA2B,CAAC,SAAyD;QAC3F,OAAQ,SAAwD,CAAC,4BAA4B,KAAK,SAAS,CAAC;IAC9G,CAAC;IAED;;;;;;;;;;OAUG;IACK,qBAAqB,CAC3B,SAAyD,EACzD,WAA+B;QAE/B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC;QACvC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,WAAW,KAAK,SAAS,CAAC;QACvE,OAAO,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpE,CAAC;IAED;;;OAGG;IACK,4BAA4B,CAClC,MAAgC,EAChC,mBAA2D,EAC3D,WAA+B;QAE/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,WAAW,GAAwB,EAAE,CAAC;QAE5C,qFAAqF;QACrF,sEAAsE;QACtE,sFAAsF;QACtF,8EAA8E;QAC9E,MAAM,mBAAmB,GAAuB,IAAI,CAAC,iBAAiB,CAAC,8BAA8B,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAEnI,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAC1C,MAAM,mBAAmB,GAAG,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAClE,+EAA+E;YAC/E,+EAA+E;YAC/E,IAAI,CAAC,4BAA4B,CAAC,SAAS,EAAE,mBAAmB,CAAC;gBAAE,SAAS;YAC5E,wFAAwF;YACxF,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC5C,8EAA8E;YAC9E,IAAI,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC1D,0EAA0E;YAC1E,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC;gBAAE,SAAS;YAClE,0EAA0E;YAC1E,8EAA8E;YAC9E,8CAA8C;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;YAChF,0FAA0F;YAC1F,gGAAgG;YAChG,8FAA8F;YAC9F,4FAA4F;YAC5F,8FAA8F;YAC9F,+FAA+F;YAC/F,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sFAAsF,EAAE;oBACvG,QAAQ,EAAE,IAAI;oBACd,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;oBAC7C,mBAAmB;oBACnB,iBAAiB,EAAE,mBAAmB;oBACtC,SAAS,EAAE,wBAAwB;iBACpC,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAEf,4EAA4E;YAC5E,gFAAgF;YAChF,iFAAiF;YACjF,iFAAiF;YACjF,gFAAgF;YAChF,kFAAkF;YAClF,4EAA4E;YAC5E,mCAAmC;YACnC,MAAM,eAAe,GAAG,CAAC,CAAC,mBAAmB;mBACxC,CAAC,SAAS,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAClB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,eAAe,KAAK,mBAAmB;uBAC9C,SAAS,CAAC,YAAY,KAAK,MAAM,CAAC,kBAAkB,CAC1D,CACF,CAAC;YAEJ,MAAM,eAAe,GAAG,IAAI,CAAC,4BAA4B,CACvD,gCAAgC,CAAC,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,EACzE,SAAS,CACV,CAAC;YACF,0FAA0F;YAC1F,gFAAgF;YAChF,0FAA0F;YAC1F,sFAAsF;YACtF,uFAAuF;YACvF,8FAA8F;YAC9F,MAAM,gBAAgB,GAAG,eAAe;mBACnC,mBAAmB;mBACnB,CAAC,2BAA2B,CAAC,SAAS,CAAC,UAAU,CAAC;gBACrD,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,eAAe,EAAE,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,CAAC;gBAC/F,CAAC,CAAC,eAAe,CAAC;YACpB,wEAAwE;YACxE,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAE/F,MAAM,oBAAoB,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;YAE1G,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI;gBACJ,WAAW,EAAE,IAAI,CAAC,mBAAmB,CACnC,MAAM,CAAC,kBAAkB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,SAAS,EAAE,mBAAmB,CAAC,CACxG;gBACD,WAAW;gBACX,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,SAAS,CAAC,SAAS,CAAC;gBAC5E,YAAY,EAAE,MAAM,CAAC,kBAAkB;gBACvC,mBAAmB;aACpB,CAAC,CAAC;YAEH;;;;;;;;;;;;;;;;eAgBG;YACH,8FAA8F;YAC9F,gGAAgG;YAChG,gGAAgG;YAChG,qFAAqF;YACrF,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE,CAAC;gBAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACtK,IAAI,CAAC,2BAA2B,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC9C,wFAAwF;oBACxF,2FAA2F;oBAC3F,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4FAA4F,EAAE;wBAC7G,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,wBAAwB;qBAC/J,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;oBAAE,SAAS;gBACpC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACtB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;YACrL,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAChG,CAAC;IAED;;;OAGG;IACK,uBAAuB,CAAC,YAA0B,EAAE,mBAA2B;QACrF,IAAI,mBAAmB,KAAK,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,mBAAmB,KAAK,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5I,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,IAAI,CAAC,4BAA4B,EAAE,CAAC;YACpC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;IACvE,CAAC;IAEO,0BAA0B,GAAG,KAAK,CAAC;IAC3C;;;;OAIG;IACK,4BAA4B;QAClC,IAAI,IAAI,CAAC,0BAA0B;YAAE,OAAO;QAC5C,IAAI,CAAC,0BAA0B,GAAG,IAAI,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,qFAAqF,CAAC,CAAC;IACvG,CAAC;IAED;;;;;OAKG;IACK,mBAAmB,CAAC,YAA0B,EAAE,mBAA2B,EAAE,UAA+B,EAAE,WAAmB;QACvI,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,WAAW,CAAC;QAChD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACjC,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,4BAA4B,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,iCAAiC,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gFAAgF,CAAC,CAAC;QAC7S,OAAO,GAAG,WAAW;;eAEV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACK,0BAA0B,CAChC,YAA0B,EAC1B,yBAAiC,EACjC,SAA4B,EAC5B,IAAY,EACZ,eAAmC,EACnC,cAAsB;QAEtB,MAAM,UAAU,GAA4B;YAC1C,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,MAAM,CAAC,YAAY,CAAC,yCAAyC,cAAc,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/K,gBAAgB,EAAE;gBAChB,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,sCAAsC;gBAC5E,WAAW,EAAE,2CAA2C,iCAAiC,aAAa,sCAAsC,IAAI;aACjJ;YACD,kGAAkG;YAClG,wFAAwF;YACxF,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,oEAAoE,EAAE;YAC3H,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,8EAA+E,SAAS,CAAC,YAAY,CAAC,gBAAyC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE;YACnO,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,iEAAiE,EAAE;SACtH,CAAC;QACF,MAAM,MAAM,GAAG,QAAQ,SAAS,CAAC,SAAS,eAAe,MAAM,CAAC,YAAY,CAAC,YAAY,yBAAyB,GAAG,CAAC;QACtH,OAAO;YACL,IAAI;YACJ,WAAW,EACT,qCAAqC,MAAM,mFAAmF;kBAC5H,oMAAoM;kBACpM,qHAAqH;kBACrH,yHAAyH,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,QAAQ,cAAc,IAAI;kBAChO,gEAAgE;YACpE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE;YACrI,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;YACzG,YAAY;YACZ,mBAAmB,EAAE,iCAAiC,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;SAC9H,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,sBAAsB,CACpB,YAA0B,EAC1B,aAAqB,EACrB,eAAkD,EAClD,WAAoB;QAEpB,MAAM,MAAM,GAAG,iCAAiC,CAAC,aAAa,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,yBAAyB,CAAC;QAC9C,IAAI,IAAI,KAAK,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QACrH,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACpG,MAAM,eAAe,GAAG,IAAI,CAAC,yBAAyB,CAAC,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;QACzG,IAAI,CAAC,eAAe;YAAE,OAAO,SAAS,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC5I,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE,IAAgC,EAAE,CAAC;IAC1G,CAAC;IAED,qDAAqD;IAC7C,aAAa,CAAC,kBAAgC,EAAE,mBAA2B;QACjF,OAAO,GAAG,MAAM,CAAC,kBAAkB,CAAC,GAAG,uBAAuB,GAAG,mBAAmB,EAAE,CAAC;IACzF,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,uBAAuB,CAC7B,eAAwC,EACxC,eAAuB,EACvB,YAA0B;QAE1B,IAAI,eAAe,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,eAAe,CAAC;QAC9D,MAAM,UAAU,GAA4B;YAC1C,GAAI,eAAe,CAAC,UAAkD;YACtE,CAAC,eAAe,CAAC,EAAE;gBACjB,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,qBAAqB,MAAM,CAAC,YAAY,CAAC,yCAAyC;aAChG;SACF,CAAC;QACF,MAAM,QAAQ,GAAa,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC;YAChE,CAAC,CAAC,CAAC,GAAI,eAAe,CAAC,QAAqB,CAAC;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxE,OAAO,EAAE,GAAG,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACtD,CAAC;IAED;;;OAGG;IACK,kBAAkB,CACxB,YAA0B,EAC1B,mBAA2B,EAC3B,SAAyD,EACzD,mBAA2D;QAE3D,6EAA6E;QAC7E,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACpD,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QACtE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,IAAI,CAAC,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC,CAAC;IACpH,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACK,gBAAgB,CAAC,SAAyD,EAAE,WAAmB;QACrG,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC,UAAU,CAAC;YAAE,OAAO,WAAW,CAAC;QAC3E,OAAO,GAAG,WAAW,2JAA2J,CAAC;IACnL,CAAC;IAED;;;OAGG;IACK,qBAAqB,CAC3B,YAA0B,EAC1B,mBAA2B,EAC3B,SAAyD;QAEzD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;YAC/D,CAAC,CAAC,WAAW,SAAS,CAAC,SAAS,GAAG;YACnC,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,gBAAgB,mBAAmB,kBAAkB,MAAM,CAAC,YAAY,CAAC,aAAa,QAAQ,GAAG,CAAC;IAC3G,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,4BAA4B,CAClC,MAA+B,EAC/B,SAAyD;QAEzD,IAAK,SAAwC,CAAC,YAAY;YAAE,OAAO,MAAM,CAAC;QAC1E,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAiD,CAAC;QAClF,MAAM,OAAO,GAAG,gBAAgB,EAAE,OAAoF,CAAC;QACvH,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,CAAC,CAAC,eAAe,IAAI,OAAO,CAAC,UAAU,CAAC;YAAE,OAAO,MAAM,CAAC;QACpF,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,yBAAyB,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;QACvF,OAAO;YACL,GAAG,MAAM;YACT,UAAU,EAAE;gBACV,GAAG,gBAAgB;gBACnB,OAAO,EAAE;oBACP,GAAG,OAAO;oBACV,UAAU,EAAE,yBAAyB;oBACrC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvG;aACF;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACK,uBAAuB,CAAC,SAAyD;QACvF,IAAI,CAAC,6BAA6B,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC,UAAU,CAAC;QACzG,gGAAgG;QAChG,iGAAiG;QACjG,+BAA+B;QAC/B,MAAM,UAAU,GAAG,gCAAgC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC,UAAU,CAAC;QAErF,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,SAGpC,CAAC;QACF,+FAA+F;QAC/F,6FAA6F;QAC7F,wDAAwD;QACxD,MAAM,qBAAqB,GAAwB,EAAE,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YAC1D,+FAA+F;YAC/F,4FAA4F;YAC5F,8EAA8E;YAC9E,IAAI,OAAO,KAAK,KAAK,UAAU;gBAAE,qBAAqB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,OAAO,sCAAsC,CAAC;YAC5C,YAAY,EAAE,qBAAqB;YACnC,iBAAiB,EAAE,UAAU,IAAI,EAAE;YACnC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACK,gBAAgB,CAAC,mBAA2B,EAAE,SAAqC;QACzF,MAAM,YAAY,GAAG,yBAAyB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACxE,MAAM,eAAe,GAAG,mBAAmB,KAAK,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC;eAC/E,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO;YACL,YAAY;YACZ,eAAe;YACf,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,gCAAgC,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACtG,aAAa,EAAE,KAAK;SACrB,CAAC;IACJ,CAAC;CACF,CAAA;AA5qBY,4BAA4B;IADxC,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IASlD,WAAA,MAAM,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;+CAR3B,+BAA+B;GAN5D,4BAA4B,CA4qBxC","sourcesContent":["import { injectable, inject, optional } from 'inversify';\nimport { z } from 'zod';\nimport {\n ResourceType,\n AnyResourceConfiguration,\n ResourceConfiguration_Operation,\n ResourcePrimaryScope,\n PRIMARY_SCOPE_TO_FIELD_IDENTIFIER,\n ResourceOperationRiskLevel,\n CoreResourceOperation,\n isDefaultUrlBearingOperation,\n createResourceSearchQueryRequestSchema,\n FILE_UPLOAD_GRANT_ABSOLUTE_MAX_MINUTES,\n FILE_UPLOAD_GRANT_DEFAULT_MINUTES,\n ResourcesConfigNamingUtils,\n type FileUploadGrantOperation,\n} from '@wildo-ai/saas-models';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { FileFieldDetectionBackendService, FileFieldMetadata } from '~wildo-backend-lib/files/services/file-field-detection.backend.service';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport { convertZodSchemaToMcpInputSchema, isMcpValueWrappedRequestDto } from '~wildo-backend-lib/mcp/utils/zod-to-mcp-json-schema.backend.utils';\nimport {\n McpToolDescriptor,\n McpToolAnnotations,\n McpToolAdapterBuildOptions,\n McpToolDescriptionProvider,\n MCP_TOOL_NAME_SEPARATOR,\n MCP_TOOL_NAME_MAX_LENGTH,\n isSpecConformantMcpToolName,\n buildUploadGrantToolOperationPart,\n parseUploadGrantToolOperationPart,\n} from '~wildo-backend-lib/mcp/models/mcp-tool.backend.schemas';\n\n/*\n Resource primary scopes a machine principal can reach — ORG / APP only. Verified against the\n * authorizer (`authorizations.backend.service.ts`): `authorizeUserSelf` requires\n * `initiatorIds.userId` and `validateFKRelationshipAccess` throws for any non-`USER_REQUEST`\n * execution type on a user-FK path. A machine principal (api-key OR OAuth client) carries no\n * `userId`, so `USER_SELF` (and `ANONYMOUS`) resources are unreachable by it and MUST NOT be\n * advertised to it — doing so would surface tools that always 403. This is the MACHINE catalog, and\n * ONLY the machine's: an anonymous caller borrowed it until 2026-08-11, which advertised twelve\n * role-gated tools to a principal holding no roles. See {@link ANONYMOUS_REACHABLE_SCOPES}.\n /\nconst MACHINE_REACHABLE_SCOPES: ReadonlySet<ResourcePrimaryScope> = new Set([\n ResourcePrimaryScope.ORGANIZATIONS,\n ResourcePrimaryScope.APPLICATION,\n]);\n\n/\n Resource primary scopes a user-delegated principal (an `authorization_code` token that carries\n * a `userId`) can reach — ORG / APP PLUS `USER_SELF`. The authorizer's `authorizeUserSelf` succeeds\n * for such a principal (it supplies `initiatorIds.userId`), so a delegated user's own USER_SELF\n * operations are legitimately callable and may be advertised to them. `ANONYMOUS` stays excluded — it\n * is the pre-auth anonymous surface, not a delegated one.\n /\nconst USER_DELEGATED_REACHABLE_SCOPES: ReadonlySet<ResourcePrimaryScope> = new Set([\n ResourcePrimaryScope.ORGANIZATIONS,\n ResourcePrimaryScope.APPLICATION,\n ResourcePrimaryScope.USER_SELF,\n]);\n\n/\n Scopes reachable by a caller that presented NO credentials.\n \n EMPTY, and empty is the honest answer rather than a placeholder. Two facts decide it:\n \n 1. `tools/call` requires a Bearer unconditionally — there is no anonymous dispatch path on this\n * plane at all. So no tool, of any scope, is invocable without credentials.\n * 2. `ResourcePrimaryScope.ANONYMOUS` — the framework's genuine pre-auth surface — is therefore not\n * servable over MCP either, and must NOT be advertised even if an application declares\n * `mcp: { exposed: true }` on such a resource. Advertising a tool that cannot be called is the\n * exact defect this set exists to end.\n \n Until 2026-08-11 an anonymous caller was classified as a MACHINE principal and handed the ORG/APP\n * catalogue — twelve tools it could not invoke, because those operations are role-gated and it holds\n * no roles. That was not a partial truth, it was a lie with a consequence: the client saw a working\n * server, was never challenged, and so never began authorization. A real client (Cursor) reported\n * \"successfully authenticated\" without ever opening a browser, because clicking Authenticate merely\n * reconnects — and `initialize` + `tools/list` both answered 200.\n \n When an anonymous dispatch path exists, this becomes `{ ANONYMOUS }` and the catalogue stops being\n * empty for apps that expose such tools. That is the ONLY change required here; the classification,\n * the challenge rule and the call gate are already shaped for it.\n /\nconst ANONYMOUS_REACHABLE_SCOPES: ReadonlySet<ResourcePrimaryScope> = new Set();\n\n/\n Who is asking. Three principals, because there are three genuinely different answers — and the\n * defect above came from encoding it as a boolean, which forced \"anonymous\" to borrow the machine\n * answer for want of a third value.\n /\nexport enum McpCallerPrincipal {\n /* No credentials presented. /\n ANONYMOUS = 'anonymous',\n /* A `client_credentials` token — acts as ITSELF, carries no `userId`. /\n MACHINE = 'machine',\n /* An `authorization_code` token — acts FOR a consenting user, carries a `userId`. /\n USER_DELEGATED = 'user_delegated',\n}\n\n/\n The MCP tool scopes reachable by the caller (progressive principal-awareness). Both the\n * `tools/list` catalog and the `callTool` exposability gate derive their scope set from THIS single\n * source, so advertise ≡ callable per principal — no tool an agent sees is un-callable by it, and\n * none it can call is hidden. That invariant was CLAIMED here before 2026-08-11 and was false for the\n * anonymous caller; it is true now.\n /\n/\n Classify a caller that has ALREADY authenticated.\n \n `tools/call` and the `callTool` exposability gate both run after `authenticateExternalToken`\n * succeeded, so ANONYMOUS is unreachable there by construction — the only question left is whether\n * the token carries a `userId`. Named rather than inlined so those sites cannot accidentally pass a\n * boolean into the three-valued resolver and silently mean \"machine\" when they mean \"anonymous\",\n * which is the shape of the defect this whole model replaced.\n /\nexport function mcpPrincipalForAuthenticatedCaller(isUserDelegated: boolean): McpCallerPrincipal {\n return isUserDelegated ? McpCallerPrincipal.USER_DELEGATED : McpCallerPrincipal.MACHINE;\n}\n\nexport function mcpReachableScopesForPrincipal(principal: McpCallerPrincipal): ReadonlySet<ResourcePrimaryScope> {\n switch (principal) {\n case McpCallerPrincipal.USER_DELEGATED:\n return USER_DELEGATED_REACHABLE_SCOPES;\n case McpCallerPrincipal.MACHINE:\n return MACHINE_REACHABLE_SCOPES;\n case McpCallerPrincipal.ANONYMOUS:\n return ANONYMOUS_REACHABLE_SCOPES;\n }\n}\n\n/\n The operation a tool REALLY performs — a custom operation declares what it behaves like via\n * `resourceOperationLike`, and every decision keyed on operation identity must ask this, not the\n * raw identifier.\n \n Lives here, and is exported, because three surfaces now need the same answer: the catalogue\n * (which input envelope to ADVERTISE), the input normalisation, and the output pagination wrapper.\n * `McpServerBackendService` derived it privately and its own comment records why that mattered —\n * when two of those surfaces answered separately, a custom LIST-like operation that only one of\n * them recognised was normalised as a collection on the way in and dispatched without pagination on\n * the way out. A third private copy in the adapter would have reopened exactly that.\n /\nexport function resolveEffectiveMcpOperation(operation: { resourceOperationLike?: unknown; operationIdentifier: unknown }): string {\n return String(operation.resourceOperationLike ?? operation.operationIdentifier);\n}\n\n/\n Collection-shaped queries — the operations that take the `{ filters, pagination, sorting }`\n * argument envelope. Exported for the same reason as {@link resolveEffectiveMcpOperation}: the\n * catalogue and the dispatch must agree on the set, or one advertises an envelope the other refuses\n * (or, as shipped until now, refuses an envelope the other accepts).\n \n `COUNT` belongs here even though it returns a scalar: it FILTERS like a collection. The output\n * side is deliberately a different set (see `isPaginationWrappedOperation`), and conflating the two\n * would ask the repository to wrap a scalar in a pagination envelope its response DTO never declares.\n /\nexport function isCollectionQueryMcpOperation(effectiveOperation: string): boolean {\n return effectiveOperation === CoreResourceOperation.LIST\n \|\| effectiveOperation === CoreResourceOperation.SEARCH\n \|\| effectiveOperation === CoreResourceOperation.COUNT;\n}\n\n/\n The kebab-case segment a file field gets in its upload ROUTE (`…/files/<segment>`) — the same\n * transform `ResourcesConfigOperationsUrlsBuilderUtils.buildFileUploadRouteForOperation` applies, so\n * a derived tool name and the route it mints for agree by construction.\n /\nexport function fileFieldRouteSegment(fieldName: string): string {\n return ResourcesConfigNamingUtils.toKebabCase(fieldName.replace(/\\./g, '-'));\n}\n\n/* Core operations that only read — surfaced as `annotations.readOnlyHint`. /\nconst READ_ONLY_CORE_OPERATIONS: ReadonlySet<string> = new Set<string>([\n CoreResourceOperation.READ,\n CoreResourceOperation.LIST,\n CoreResourceOperation.SEARCH,\n CoreResourceOperation.COUNT,\n]);\n\n/\n Write operations where repeating the call with the same arguments changes nothing further.\n \n UPDATE settles the row to the same value; DELETE removes an already-removed row and reports\n * not-found. CREATE is deliberately ABSENT — calling it twice makes two rows, which is exactly the\n * case an agent retrying after a timeout needs to know about.\n * spec-cite: MCP schema — `ToolAnnotations.idempotentHint`\n /\nconst IDEMPOTENT_WRITE_CORE_OPERATIONS: ReadonlySet<string> = new Set<string>([\n CoreResourceOperation.UPDATE,\n CoreResourceOperation.DELETE,\n]);\n\n/* Risk levels that flag a tool as destructive. /\nconst DESTRUCTIVE_RISK_LEVELS: ReadonlySet<ResourceOperationRiskLevel> = new Set([\n ResourceOperationRiskLevel.HIGH,\n ResourceOperationRiskLevel.CRITICAL,\n]);\n\n/\n Adapts registered resource operations into MCP tool descriptors.\n \n # What it exposes\n \n For each in-scope resource, it enumerates the DEFAULT, non-bulk, URL-bearing\n * operations (`API_CALL` / `API_CALL_WITH_CALLBACK` — the only variants carrying an\n * HTTP surface, selected via `isDefaultUrlBearingOperation`) that OPT IN via\n * `operation.mcp.exposed === true` (D4 — fail-closed) and builds a tool\n * descriptor `{ name, description, inputSchema, annotations }` where:\n * - `name` = `<resourceIdentifier>__<operationIdentifier>`,\n * - `inputSchema` = the operation `requestDto` converted to JSON Schema, PLUS the\n * resource's own id (a required string) for instance-scoped operations whose URL\n * binds it — see {@link McpToolAdapterBackendService.withInstanceIdParameter}\n * (kept symmetric with the transport's `extractResourceId`),\n * - `description` = spec `purpose`/`whenToUse` (injected — see below) or a\n * synthesized fallback,\n * - `annotations` = read-only / destructive hints from the op identifier + `riskLevel`.\n \n # Scope constraint (verified, principal-aware)\n \n Exposability is filtered by the CALLER's reachable scopes (progressive principal-awareness). A\n * MACHINE principal reaches ORGANIZATION / APPLICATION only (a machine carries no `userId`, so\n * `USER_SELF` always 403s); an ANONYMOUS caller reaches nothing at all. A USER-DELEGATED principal\n * (`authorization_code`, carries a `userId`) additionally reaches `USER_SELF`, including its collection\n * reads — the socket path scopes those to the caller by seeding the authenticated `userId` into the\n * context map (`buildContextFromSocketAuth`). See {@link mcpReachableScopesForPrincipal}; `ANONYMOUS`\n * is never exposed.\n \n # Description sourcing\n \n Priority: (1) the authored `operation.mcp.description` (D4 config-local field — the\n * agent-facing description the app author wrote for this tool); else (2) a caller-injected\n * {@link McpToolDescriptionProvider} sourcing the spec `purpose`/`whenToUse` (the backend\n * cannot import `saas-specifications` without inverting the layer graph); else (3) a\n * synthesized fallback from config metadata.\n /\n@injectable()\nexport class McpToolAdapterBackendService {\n protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger) protected readonly logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ResourceRegistryService)\n protected readonly resourcesRegistry: ResourcesRegistryBackendService,\n /\n Detects the user-uploadable file fields a resource carries — the same detector the resource\n * controller uses to REGISTER upload routes, so a derived upload-grant tool is advertised for\n * exactly the fields that have a route. Optional only so harnesses that never look at file\n * fields can construct the adapter; the container always binds it, and without it no derived\n * tool is advertised or callable (fail-closed, logged once).\n /\n @inject(SAAS_SERVICE_TYPES.FileFieldDetectionService) @optional()\n protected readonly fileFieldDetection?: FileFieldDetectionBackendService,\n ) {\n this.logDebug = this.logger.debugByType('McpToolAdapterBackendService');\n this.logger.setDebugTypeLogging('McpToolAdapterBackendService', false);\n }\n\n /\n Build the MCP tool descriptor set for the requested resources, filtered to the caller's reachable\n * scopes (`options.reachableScopes`, default = machine-reachable ORG/APP). A user-delegated caller\n * passes the delegated set so their USER_SELF tools are advertised too. Tools are returned in\n * deterministic order (resource type, then operation identifier) so `tools/list` output is stable.\n /\n public buildToolDescriptors(options: McpToolAdapterBuildOptions = {}): McpToolDescriptor[] {\n const resourceTypes = options.resourceTypes ?? this.resourcesRegistry.getResourceTypes();\n const reachableScopes = options.reachableScopes ?? MACHINE_REACHABLE_SCOPES;\n const descriptors: McpToolDescriptor[] = [];\n\n for (const resourceType of [...resourceTypes].sort()) {\n const config = this.resourcesRegistry.tryGetResourceConfiguration(resourceType);\n if (!config) {\n this.logDebug('Skipping unregistered resource type requested for MCP exposure', { resourceType });\n continue;\n }\n if (!this.isResourceExposable(config, reachableScopes)) continue;\n // Tool-name round-trip invariant: a tool name is `<resourceIdentifier>__<operationIdentifier>`\n // and `McpServerBackendService.parseToolName` splits on the FIRST separator, so a resource\n // identifier that itself contains `__` would mis-parse into a non-existent resource/operation\n // and produce an un-callable tool. Skip such a resource (fail-closed) and surface the\n // misconfiguration rather than emit a broken descriptor.\n if (String(config.resourceIdentifier).includes(MCP_TOOL_NAME_SEPARATOR)) {\n this.logger.warn('Skipping MCP exposure for a resource whose identifier contains the tool-name separator', {\n resourceIdentifier: config.resourceIdentifier,\n separator: MCP_TOOL_NAME_SEPARATOR,\n });\n continue;\n }\n\n const operationDescriptors = this.buildResourceToolDescriptors(config, options.descriptionProvider, options.instanceRef);\n descriptors.push(...operationDescriptors);\n }\n\n return descriptors;\n }\n\n /\n Resolve the single exposable operation for a `resourceType` +\n * `operationIdentifier`, or `undefined` if it is not exposable. This is the\n * SINGLE source of exposability truth — {@link McpServerBackendService.callTool}\n * calls it (with the caller's reachable scopes) before authorizing so a crafted tool name can never\n * reach a scope the caller cannot use (e.g. a machine principal hitting a USER_SELF operation).\n * Applies the exact same filter as {@link buildToolDescriptors}: reachable scope + default, non-bulk,\n * URL-bearing variant, opted in, not an acknowledged gap, on this instance, and a conformant name.\n * `reachableScopes` defaults to machine-reachable (ORG/APP); a user-delegated caller passes the\n * delegated set so a USER_SELF operation resolves for THEM.\n \n \"the exact same filter\" is load-bearing, and it was FALSE until 2026-08-13: this method omitted\n * {@link isAcknowledgedUnimplemented}, so an operation withdrawn from the catalogue for provably\n * not working stayed invocable by name. That is the harm that guard exists to prevent (an agent\n * that cannot tell \"not implemented\" from \"bad arguments\" retries forever), arriving through the\n * one door the guard did not cover — and every pin on it was green throughout, because all of them\n * interrogate the advertise side. Any clause added to one of these two lists belongs in the other\n * in the same edit.\n /\n public resolveExposableOperation(\n resourceType: ResourceType,\n operationIdentifier: string,\n reachableScopes: ReadonlySet<ResourcePrimaryScope> = MACHINE_REACHABLE_SCOPES,\n instanceRef?: string,\n ): ResourceConfiguration_Operation<any, any, any> \| undefined {\n const config = this.resourcesRegistry.tryGetResourceConfiguration(resourceType);\n if (!config \|\| !this.isResourceExposable(config, reachableScopes)) return undefined;\n // SEP-986 naming, checked on the SAME composed name the catalogue would advertise. A name the\n // catalogue refuses to publish must not remain callable by a client that guessed it, or the\n // withdrawal is cosmetic.\n if (!isSpecConformantMcpToolName(this.buildToolName(config.resourceIdentifier, operationIdentifier))) return undefined;\n return config.operations.find(\n (operation) =>\n String(operation.operationIdentifier) === operationIdentifier\n && isDefaultUrlBearingOperation(operation, String(operation.operationIdentifier))\n && this.isMcpExposed(operation)\n && !this.isAcknowledgedUnimplemented(operation)\n // R-2: the tool must belong to the server instance it is being called on — so a tool curated\n // onto `support` cannot be invoked at `/mcp` (or at `ops`) even by name. Keeps\n // advertise ≡ callable per (principal, instance).\n && this.isOnMcpServerInstance(operation, instanceRef),\n );\n }\n\n /\n A resource is exposable only if its primary scope is in the caller's reachable set. The default\n * (machine) set is ORG / APP — USER_SELF and ANONYMOUS excluded fail-closed; a user-delegated caller\n * passes a set that also includes USER_SELF (see {@link mcpReachableScopesForPrincipal}).\n /\n private isResourceExposable(config: AnyResourceConfiguration, reachableScopes: ReadonlySet<ResourcePrimaryScope>): boolean {\n return reachableScopes.has(config.resourcePrimaryScope);\n }\n\n /\n Remove the resource's PRIMARY-SCOPE field from an advertised tool schema.\n \n A tool schema is derived from the operation's `requestDto`, and a search or list DTO commonly\n * declares its own scope FK (`organizationId`) among its filterable fields. On the REST plane that\n * is harmless — the field also appears on the URL, and `validateInitiatorCriticalParameters`\n * refuses any request whose sources disagree. Advertised as a TOOL PARAMETER it is neither\n * harmless nor even meaningful: a machine caller's tenant comes from its token, so the only reason\n * to set it is to try another tenant's.\n \n The repository now refuses such a call outright, so this is defence in depth rather than the\n * control — but advertising a parameter whose only use is an attack, and which is guaranteed to\n * fail, is a catalogue defect on its own: an agent reading the schema is invited to set it and is\n * then refused for reasons it cannot see.\n \n Both nesting positions are stripped, top level and inside `filters`, because the DTO builder\n * places it in either depending on the operation.\n \n assurance-control: WILDO.DATA.TENANT_ISOLATION — an agent is never offered its tenant as a knob\n /\n private withoutScopeParameters(schema: Record<string, unknown>, primaryScope: ResourcePrimaryScope): Record<string, unknown> {\n const scopeField = PRIMARY_SCOPE_TO_FIELD_IDENTIFIER[primaryScope];\n if (!scopeField) return schema;\n\n const strip = (node: unknown): unknown => {\n if (!node \|\| typeof node !== 'object') return node;\n const obj = node as Record<string, any>;\n if (!obj.properties \|\| typeof obj.properties !== 'object') return obj;\n const properties: Record<string, unknown> = {};\n for (const [key, value] of Object.entries(obj.properties as Record<string, unknown>)) {\n if (key === scopeField) continue;\n properties[key] = strip(value);\n }\n const required = Array.isArray(obj.required)\n ? (obj.required as string[]).filter((r) => r !== scopeField)\n : obj.required;\n return { ...obj, properties, ...(required === undefined ? {} : { required }) };\n };\n\n return strip(schema) as Record<string, unknown>;\n }\n\n /\n D4 opt-in (fail-closed): an operation is exposed as an MCP tool ONLY when its config\n * explicitly sets `mcp.exposed === true`. Absent/false ⇒ not exposed. This is a discovery\n * gate, NOT authorization — `callTool` still runs `authorizeInController` per call.\n /\n private isMcpExposed(operation: ResourceConfiguration_Operation<any, any, any>): boolean {\n return operation.mcp?.exposed === true;\n }\n\n /\n An operation declared a KNOWN implementation gap is never advertised, whatever its config says.\n \n `unimplementedAcknowledgement` marks a variant that both unblocks startup AND makes the request\n * refuse, so it can never answer 2xx. Advertising it as a tool tells an agent a capability exists\n * that provably does not: the agent calls it, is refused, and — having no way to distinguish \"not\n * implemented\" from \"bad arguments\" — retries with different arguments and loops. That is the same\n * agent-facing harm the fail-closed opt-in exists to prevent, arriving through a different door.\n \n This OVERRIDES the author's opt-in rather than trusting it, because the two declarations are\n * written at different times by different people: `mcp.exposed` is authored when the verb is\n * designed, `unimplementedAcknowledgement` is added later when someone discovers it does not work.\n * A rule that asks the author to remember to also retract the exposure is a rule that will be\n * missed exactly when it matters most.\n /\n private isAcknowledgedUnimplemented(operation: ResourceConfiguration_Operation<any, any, any>): boolean {\n return (operation as { unimplementedAcknowledgement?: unknown }).unimplementedAcknowledgement !== undefined;\n }\n\n /\n Instance membership (R-2, multiple named MCP servers). Membership is EXCLUSIVE and defaults safely:\n \n - `operation.mcp.servers` ABSENT ⇒ the operation belongs to the DEFAULT server (the plain `/mcp`\n * endpoint) and to no named server. This is what makes multi-server strictly additive: every\n * already-exposed operation keeps appearing exactly where it does today.\n * - `servers` PRESENT ⇒ the operation belongs ONLY to the named servers (it leaves the default\n * catalog). Curating a server is therefore a deliberate move, never an accidental duplication.\n \n @param instanceRef - the server being served, or `undefined` for the default server.\n /\n private isOnMcpServerInstance(\n operation: ResourceConfiguration_Operation<any, any, any>,\n instanceRef: string \| undefined,\n ): boolean {\n const servers = operation.mcp?.servers;\n if (!servers \|\| servers.length === 0) return instanceRef === undefined;\n return instanceRef !== undefined && servers.includes(instanceRef);\n }\n\n /\n Enumerate the exposable default URL-bearing operations of one resource and\n * build their tool descriptors, sorted by operation identifier.\n /\n private buildResourceToolDescriptors(\n config: AnyResourceConfiguration,\n descriptionProvider: McpToolDescriptionProvider \| undefined,\n instanceRef: string \| undefined,\n ): McpToolDescriptor[] {\n const seen = new Set<string>();\n const descriptors: McpToolDescriptor[] = [];\n\n // The resource's own id field identifier (e.g. `todolistId`). This is the SAME value\n // the transport's `extractResourceId` pulls out of the tool arguments\n // (`MCPControllerBackendService.extractResourceId` reads the identical registry map),\n // so advertising it here keeps advertise ≡ extract for instance-scoped tools.\n const selfFieldIdentifier: string \| undefined = this.resourcesRegistry.getAllResourceFieldIdentifiers()[config.resourceIdentifier];\n\n for (const operation of config.operations) {\n const operationIdentifier = String(operation.operationIdentifier);\n // `isDefaultUrlBearingOperation` narrows to API_CALL / API_CALL_WITH_CALLBACK,\n // requires isOperationDefault, and excludes bulk — the exact HTTP-surface set.\n if (!isDefaultUrlBearingOperation(operation, operationIdentifier)) continue;\n // D4 opt-in (fail-closed): only operations that explicitly set `mcp.exposed` are tools.\n if (!this.isMcpExposed(operation)) continue;\n // …and an acknowledged implementation gap is withdrawn even when it opted in.\n if (this.isAcknowledgedUnimplemented(operation)) continue;\n // R-2: only the operations belonging to the server instance being served.\n if (!this.isOnMcpServerInstance(operation, instanceRef)) continue;\n // A resource can carry multiple default url-bearing variants for the same\n // identifier only across data modes; de-dupe by the tool name so `tools/list`\n // never returns two tools with the same name.\n const name = this.buildToolName(config.resourceIdentifier, operationIdentifier);\n // SEP-986 naming (`2025-11-25`). Checked on the COMPOSED name rather than on either half,\n // because that is the string the client parses and the length bound applies to the whole of it.\n // Fail-closed and per-OPERATION: one badly named custom operation withdraws itself, while its\n // resource's other tools keep working — unlike the `__`-separator guard above, which has to\n // skip the whole resource because it corrupts the round-trip identity of every name under it.\n // Mirrored in `resolveExposableOperation`, so the tool is un-callable as well as unadvertised.\n if (!isSpecConformantMcpToolName(name)) {\n this.logger.warn('Skipping MCP exposure for a tool whose name does not satisfy the MCP naming guidance', {\n toolName: name,\n resourceIdentifier: config.resourceIdentifier,\n operationIdentifier,\n allowedCharacters: 'A-Z a-z 0-9 _ - .',\n maxLength: MCP_TOOL_NAME_MAX_LENGTH,\n });\n continue;\n }\n if (seen.has(name)) continue;\n seen.add(name);\n\n // Instance-scoped operation? An entity-level op (READ / UPDATE / DELETE and\n // instance-scoped custom ops) binds the resource's OWN id as a URL path param —\n // `getOperationSegments` stamps it as `{ fieldIdentifier: <selfFieldIdentifier>,\n // resourceType: <this resource> }` (one-to-one / complete-M2M singletons omit it\n // and are identified by parent scope instead). That id lives on the URL, NOT in\n // `requestDto`, so without advertising it the calling agent is never told it must\n // supply an id. `operation` is narrowed to the URL-bearing variant here, so\n // `initiatorInfos` is a safe read.\n const bindsInstanceId = !!selfFieldIdentifier\n && (operation.initiatorInfos ?? []).some((info) =>\n info.parameters.some(\n (parameter) =>\n parameter.fieldIdentifier === selfFieldIdentifier\n && parameter.resourceType === config.resourceIdentifier,\n ),\n );\n\n const baseInputSchema = this.withoutUnsupportedTextSearch(\n convertZodSchemaToMcpInputSchema(this.advertisedRequestSchema(operation)),\n operation,\n );\n // A `{value:...}`-wrapped union/primitive-root DTO is dispatched by the transport WITHOUT\n // an id split — it unwraps the envelope and passes the payload straight through\n // (`MCPControllerBackendService`), so an id must NOT be advertised for it. Only a genuine\n // object-root DTO (or the empty-object no-body case) carries the resource-id, keeping\n // advertise ≡ extract. Gate on the SAME predicate the transport uses, not on the built\n // schema's `type` (the value-wrapper is itself object-root and would slip past a type check).\n const advertisedSchema = bindsInstanceId\n && selfFieldIdentifier\n && !isMcpValueWrappedRequestDto(operation.requestDto)\n ? this.withInstanceIdParameter(baseInputSchema, selfFieldIdentifier, config.resourceIdentifier)\n : baseInputSchema;\n // …then withdraw the SCOPE field, wherever the DTO happens to place it.\n const inputSchema = this.withoutScopeParameters(advertisedSchema, config.resourcePrimaryScope);\n\n const uploadableFileFields = this.uploadableFileFieldsFor(config.resourceIdentifier, operationIdentifier);\n\n descriptors.push({\n name,\n description: this.withUploadGrantNote(\n config.resourceIdentifier,\n operationIdentifier,\n uploadableFileFields,\n this.resolveDescription(config.resourceIdentifier, operationIdentifier, operation, descriptionProvider),\n ),\n inputSchema,\n annotations: this.buildAnnotations(operationIdentifier, operation.riskLevel),\n resourceType: config.resourceIdentifier,\n operationIdentifier,\n });\n\n /\n * ## Coverage: unit tests only, accepted deliberately — 2026-09-08 (#467)\n \n NO application reaches this derivation. Neither dogfood exposes an MCP operation carrying a\n * user-uploadable file field: the two file fields declared belong to `todo-lists` and\n * `knowledge-documents`, neither MCP-exposed, and the only file field on an MCP-exposed\n * resource is `todos.generatedSummaryPdf` — PDF-template generated, and therefore excluded\n * from uploadable fields BY DESIGN. So the derivation below, `resolveUploadGrantTool` and the\n * mint path are covered by unit tests only.\n \n Nothing is wrong; the shape that reaches this code simply does not exist in any application.\n * Buying the proof would mean authoring an uploadable file field for the purpose of testing\n * it, which proves the harness more than the product — weighed and accepted.\n \n What would change the answer: an MCP-exposed resource gaining a user-uploadable file\n * field. That author is the first party to execute this path.\n /\n // Issue #312, D11: one DERIVED upload-grant tool per user-uploadable file field of an exposed\n // CREATE / UPDATE. It inherits every gate the parent just passed (exposure, instance, scope) by\n // construction — it is emitted inside the parent's own iteration — and is resolved back through\n // the parent by `resolveUploadGrantTool`, so advertised ≡ callable holds for it too.\n for (const fileField of uploadableFileFields) {\n const derivedName = this.buildToolName(config.resourceIdentifier, buildUploadGrantToolOperationPart(operationIdentifier, fileFieldRouteSegment(fileField.fieldName)));\n if (!isSpecConformantMcpToolName(derivedName)) {\n // Same withdrawal as the parent's guard above: a name the client could not parse is not\n // advertised, and `resolveUploadGrantTool` mirrors the check so it is not callable either.\n this.logger.warn('Skipping MCP upload-grant tool whose derived name does not satisfy the MCP naming guidance', {\n toolName: derivedName, resourceIdentifier: config.resourceIdentifier, operationIdentifier, fieldName: fileField.fieldName, maxLength: MCP_TOOL_NAME_MAX_LENGTH,\n });\n continue;\n }\n if (seen.has(derivedName)) continue;\n seen.add(derivedName);\n descriptors.push(this.buildUploadGrantDescriptor(config.resourceIdentifier, operationIdentifier, fileField, derivedName, bindsInstanceId ? selfFieldIdentifier : undefined, name));\n }\n }\n\n return descriptors.sort((a, b) => a.operationIdentifier.localeCompare(b.operationIdentifier));\n }\n\n /\n The user-uploadable file fields a CREATE / UPDATE operation carries; `[]` for every other operation\n * (a READ or DELETE never receives a file) and whenever no detector is bound.\n /\n private uploadableFileFieldsFor(resourceType: ResourceType, operationIdentifier: string): FileFieldMetadata[] {\n if (operationIdentifier !== String(CoreResourceOperation.CREATE) && operationIdentifier !== String(CoreResourceOperation.UPDATE)) return [];\n if (!this.fileFieldDetection) {\n this.warnOnceNoFileFieldDetection();\n return [];\n }\n return this.fileFieldDetection.getUploadableFileFields(resourceType);\n }\n\n private warnedNoFileFieldDetection = false;\n /\n Debug, not warn: the container always binds the detector, so in production this never fires; where\n * it does fire — a harness that constructs the adapter bare — a warning would be noise about a\n * dependency the harness deliberately left out.\n /\n private warnOnceNoFileFieldDetection(): void {\n if (this.warnedNoFileFieldDetection) return;\n this.warnedNoFileFieldDetection = true;\n this.logDebug('No FileFieldDetectionService bound — no upload-grant tool is advertised or callable');\n }\n\n /\n Append, to the PARENT tool's description, where each file field's `fileId` comes from. Engine-\n * appended for the same reason as the envelope note: how a file reaches a resource is a framework\n * fact, not app prose, and an agent reading `attachments.fileId: string` would otherwise have no way\n * to learn that the value cannot be invented.\n /\n private withUploadGrantNote(resourceType: ResourceType, operationIdentifier: string, fileFields: FileFieldMetadata[], description: string): string {\n if (fileFields.length === 0) return description;\n const lines = fileFields.map((f) =>\n `\"${f.fieldName}.${f.fileMetadata.multiple ? 'fileIds' : 'fileId'}\" is obtained by calling ${this.buildToolName(resourceType, buildUploadGrantToolOperationPart(operationIdentifier, fileFieldRouteSegment(f.fieldName)))} and uploading the file with the link it returns; a fileId cannot be invented.`);\n return `${description}\n\nFile fields: ${lines.join(' ')}`;\n }\n\n /\n The derived upload-grant descriptor. Its arguments are the parent's instance id (UPDATE only —\n * the same id the parent advertises, split out by the transport exactly the same way) and an\n * optional lifetime bounded by the engine ceiling. Nothing about the file itself: bytes never\n * travel through a tool call, which is the whole reason this tool exists.\n /\n private buildUploadGrantDescriptor(\n resourceType: ResourceType,\n parentOperationIdentifier: string,\n fileField: FileFieldMetadata,\n name: string,\n instanceIdField: string \| undefined,\n parentToolName: string,\n ): McpToolDescriptor {\n const properties: Record<string, unknown> = {\n ...(instanceIdField ? { [instanceIdField]: { type: 'string', description: `The ${String(resourceType)} record the file is for — the same id ${parentToolName} takes.` } } : {}),\n expiresInMinutes: {\n type: 'integer', minimum: 1, maximum: FILE_UPLOAD_GRANT_ABSOLUTE_MAX_MINUTES,\n description: `How long the link stays usable (default ${FILE_UPLOAD_GRANT_DEFAULT_MINUTES}, at most ${FILE_UPLOAD_GRANT_ABSOLUTE_MAX_MINUTES}).`,\n },\n // Declaring the file up front lets the server refuse an impossible one BEFORE a link exists — the\n // same facts the MCP File Objects proposal has a client declare when it asks to upload.\n name: { type: 'string', maxLength: 255, description: 'The file name you intend to upload (used in the returned command).' },\n mimeType: { type: 'string', maxLength: 255, description: `Declared MIME type; refused now if the field does not accept it (accepted: ${(fileField.fileMetadata.allowedMimeTypes as string[] \| undefined)?.join(', ') \|\| 'any'}).` },\n size: { type: 'integer', minimum: 1, description: 'Declared size in bytes; refused now if above the field maximum.' },\n };\n const target = `the \"${fileField.fieldName}\" file of a ${String(resourceType)} record (${parentOperationIdentifier})`;\n return {\n name,\n description:\n `Mint a single-use upload link for ${target}. NOTHING is uploaded by this call and no bytes ever travel through a tool call. `\n + 'It returns uploadCommand — run it if you can execute commands and the file is on your filesystem — and uploadPageUrl — show it to the user otherwise, so they can drop the file in their browser. '\n + 'The link is not the caller\\'s credential: it unlocks exactly ONE upload of ONE file into this field and then dies. '\n + `Afterwards read the produced fileId (from the upload response, or from statusUrl if a human uploaded) and pass it as \"${fileField.fieldName}.${fileField.fileMetadata.multiple ? 'fileIds' : 'fileId'}\" in ${parentToolName}. `\n + 'If the link expires or the upload is refused, call this again.',\n inputSchema: { type: 'object', properties, ...(instanceIdField ? { required: [instanceIdField] } : {}), additionalProperties: false },\n annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },\n resourceType,\n operationIdentifier: buildUploadGrantToolOperationPart(parentOperationIdentifier, fileFieldRouteSegment(fileField.fieldName)),\n };\n }\n\n /\n Resolve a DERIVED upload-grant tool back to its parent operation and file field — the callable\n * half of `buildToolDescriptors`' derived emission, kept symmetric with it: the parent is resolved\n * through `resolveExposableOperation` (so exposure, instance and principal-scope gating are\n * inherited verbatim), the field must be one of the resource's uploadable file fields, and the\n * composed name must satisfy the naming guidance. `undefined` for anything that is not a well-formed,\n * advertised derived tool.\n /\n resolveUploadGrantTool(\n resourceType: ResourceType,\n operationPart: string,\n reachableScopes: ReadonlySet<ResourcePrimaryScope>,\n instanceRef?: string,\n ): { parentOperation: ResourceConfiguration_Operation<any, any, any>; fieldName: string; operationKind: FileUploadGrantOperation } \| undefined {\n const parsed = parseUploadGrantToolOperationPart(operationPart);\n if (!parsed) return undefined;\n const kind = parsed.parentOperationIdentifier;\n if (kind !== String(CoreResourceOperation.CREATE) && kind !== String(CoreResourceOperation.UPDATE)) return undefined;\n if (!isSpecConformantMcpToolName(this.buildToolName(resourceType, operationPart))) return undefined;\n const parentOperation = this.resolveExposableOperation(resourceType, kind, reachableScopes, instanceRef);\n if (!parentOperation) return undefined;\n const field = this.uploadableFileFieldsFor(resourceType, kind).find((f) => fileFieldRouteSegment(f.fieldName) === parsed.fieldRouteSegment);\n if (!field) return undefined;\n return { parentOperation, fieldName: field.fieldName, operationKind: kind as FileUploadGrantOperation };\n }\n\n /* `<resourceIdentifier>__<operationIdentifier>`. /\n private buildToolName(resourceIdentifier: ResourceType, operationIdentifier: string): string {\n return `${String(resourceIdentifier)}${MCP_TOOL_NAME_SEPARATOR}${operationIdentifier}`;\n }\n\n /\n Advertise the resource's own id as a REQUIRED string on an instance-scoped tool's\n * `inputSchema`, mirroring the URL path parameter the transport splits back out\n * (`MCPControllerBackendService.extractResourceId`). Without it, an agent reading the\n * schema is never told it must supply the id, so instance READ / UPDATE / DELETE tools\n * are un-invokable as advertised.\n \n Only OBJECT-root schemas are augmented: a `{value:...}`-wrapped union/primitive-root\n * DTO (e.g. a discriminated-union create) is dispatched WITHOUT an id split by the\n * transport, so injecting an id there would break the advertise ≡ extract symmetry.\n * `instanceIdField` is the resource's registry field identifier — the exact key the\n * transport reads back — so a compliant agent supplies it under the name the server expects.\n /\n private withInstanceIdParameter(\n baseInputSchema: Record<string, unknown>,\n instanceIdField: string,\n resourceType: ResourceType,\n ): Record<string, unknown> {\n if (baseInputSchema.type !== 'object') return baseInputSchema;\n const properties: Record<string, unknown> = {\n ...(baseInputSchema.properties as Record<string, unknown> \| undefined),\n [instanceIdField]: {\n type: 'string',\n description: `Identifier of the ${String(resourceType)} record to act on (URL path parameter).`,\n },\n };\n const required: string[] = Array.isArray(baseInputSchema.required)\n ? [...(baseInputSchema.required as string[])]\n : [];\n if (!required.includes(instanceIdField)) required.push(instanceIdField);\n return { ...baseInputSchema, properties, required };\n }\n\n /\n Prefer spec-sourced prose from the injected provider; fall back to a\n * synthesized description built from the operation's own config metadata.\n /\n private resolveDescription(\n resourceType: ResourceType,\n operationIdentifier: string,\n operation: ResourceConfiguration_Operation<any, any, any>,\n descriptionProvider: McpToolDescriptionProvider \| undefined,\n ): string {\n // D4: an authored `mcp.description` on the operation config wins — it is the\n // agent-facing tool description the app author wrote explicitly for this tool.\n const authored = operation.mcp?.description?.trim();\n if (authored) return this.withEnvelopeNote(operation, authored);\n const spec = descriptionProvider?.(resourceType, operationIdentifier);\n if (spec && (spec.purpose \|\| spec.whenToUse)) {\n const parts: string[] = [];\n if (spec.purpose) parts.push(spec.purpose.trim());\n if (spec.whenToUse) parts.push(`When to use: ${spec.whenToUse.trim()}`);\n return this.withEnvelopeNote(operation, parts.join('\\n\\n'));\n }\n return this.withEnvelopeNote(operation, this.synthesizeDescription(resourceType, operationIdentifier, operation));\n }\n\n /\n Name the `{ value: … }` envelope, because nothing else does.\n \n A resource whose main schema is a FAMILY (a discriminated union) produces a union-root request\n * DTO, which the transport wraps as `{ value: <payload> }` — so `todos__create` advertises one\n * opaque `value` property carrying a `oneOf`, where its sibling `tasks__create` advertises eight\n * named fields. The schema is correct and an agent that validates against it succeeds; the hazard\n * is the DESCRIPTION, which an app author writes about the payload (\"provide a title; optionally\n * description, priority…\") and which therefore describes the INSIDE of an envelope it never\n * mentions. An agent that reads the prose and skips the schema builds `{title}` and is rejected.\n \n Appended by the ENGINE rather than asked of the author, deliberately: the envelope is an artefact\n * of how the framework compiles a schema family, so requiring every app author to hand-write it\n * would push an engine internal into app prose and go stale the moment a resource stops being\n * polymorphic. The note is derived from the same predicate the transport uses to decide whether to\n * unwrap, so it appears exactly when the envelope is real.\n /\n private withEnvelopeNote(operation: ResourceConfiguration_Operation<any, any, any>, description: string): string {\n if (!isMcpValueWrappedRequestDto(operation.requestDto)) return description;\n return `${description}\\n\\nArguments must be wrapped: pass the payload as the \"value\" property (this resource accepts several shapes, listed under \"value\" in the input schema).`;\n }\n\n /\n Minimal fallback description from config metadata. Honest about being\n * auto-generated so an operator can tell which tools still need authored prose.\n /\n private synthesizeDescription(\n resourceType: ResourceType,\n operationIdentifier: string,\n operation: ResourceConfiguration_Operation<any, any, any>,\n ): string {\n const riskNote = DESTRUCTIVE_RISK_LEVELS.has(operation.riskLevel)\n ? ` (risk: ${operation.riskLevel})`\n : '';\n return `Perform the \"${operationIdentifier}\" operation on ${String(resourceType)} resources${riskNote}.`;\n }\n\n /\n Withdraw `filters.searchRequest` from an operation that cannot perform a text search.\n \n The shared collection envelope extends a BASE filter schema that always carries\n * `searchRequest`, because it was written for SEARCH. Advertising it on an operation that does not\n * declare `isSearchable` would promise a text search the repository refuses outright\n * (`REPOSITORY_RESOURCE_SEARCH_NOT_ENABLED`) — or, worse on the LIST path, one that is quietly\n * discarded by the filter allow-list, handing the agent an UNFILTERED collection it believes was\n * narrowed. That is the exact failure the collection normalisation was introduced to end, and\n * reintroducing it while fixing its mirror image would be a poor trade.\n \n `createdAt` / `updatedAt` stay: generic date-range filtering IS translated for any collection\n * operation, so those two are honoured wherever they are advertised.\n /\n private withoutUnsupportedTextSearch(\n schema: Record<string, unknown>,\n operation: ResourceConfiguration_Operation<any, any, any>,\n ): Record<string, unknown> {\n if ((operation as { isSearchable?: boolean }).isSearchable) return schema;\n const schemaProperties = schema.properties as Record<string, unknown> \| undefined;\n const filters = schemaProperties?.filters as { properties?: Record<string, unknown>; required?: string[] } \| undefined;\n if (!filters?.properties \|\| !('searchRequest' in filters.properties)) return schema;\n const { searchRequest: _withdrawn, ...remainingFilterProperties } = filters.properties;\n return {\n ...schema,\n properties: {\n ...schemaProperties,\n filters: {\n ...filters,\n properties: remainingFilterProperties,\n ...(filters.required ? { required: filters.required.filter((name) => name !== 'searchRequest') } : {}),\n },\n },\n };\n }\n\n /\n The schema this tool ADVERTISES as its arguments.\n \n For almost every operation that is simply `requestDto`. Collection-shaped operations are the\n * exception, and the reason is a split between two contracts that only LOOKS like one:\n \n - SEARCH is a POST; the factory promotes its `searchQueryRequestSchema` to `requestDto`, so\n * `{ filters, pagination, sorting }` is already advertised.\n * - LIST / COUNT are GETs. Their filters travel in the QUERY STRING, so their `requestDto`\n * stays `z.object({})` — correctly, because giving a GET a request body would misdescribe the\n * REST contract and the generated OpenAPI.\n \n But MCP has no query string. `McpServerBackendService.toDispatchArguments` routes EVERY\n * collection-shaped operation through `normalizeCollectionQueryRequestData`, bypassing the strict\n * `requestDto.parse` entirely — so a LIST tool has always ACCEPTED `{ filters, pagination,\n * sorting }` and applied the operation's filter allow-list to it. It just advertised\n * `{properties:{}, additionalProperties:false}`, which tells a conformant agent the opposite: that\n * arguments are forbidden.\n \n That is this surface's own \"the advertised contract is not the enforced contract\" defect,\n * inverted. The earlier instance advertised filters and silently ignored them; this one accepts\n * filters and refuses to admit it. An agent could only discover the capability by violating the\n * schema it was given.\n \n The envelope is built from the SAME `filterFields` / `sortFields` the dispatch allow-lists\n * against, through the same builder the factory uses for SEARCH — so advertise ≡ extract holds by\n * construction rather than by two definitions happening to agree.\n \n `requestDto` is deliberately NOT modified: the REST contract, the OpenAPI document and the\n * response shape are all untouched by this. Only what MCP tells an agent changes.\n /\n private advertisedRequestSchema(operation: ResourceConfiguration_Operation<any, any, any>): z.ZodTypeAny \| undefined {\n if (!isCollectionQueryMcpOperation(resolveEffectiveMcpOperation(operation))) return operation.requestDto;\n // A collection operation that already advertises a non-empty contract (SEARCH, or any operation\n // carrying an explicit authored `requestDto`) is left exactly as authored — this fills a gap, it\n // does not override an author.\n const advertised = convertZodSchemaToMcpInputSchema(operation.requestDto);\n if (Object.keys(advertised.properties ?? {}).length > 0) return operation.requestDto;\n\n const { filterFields, sortFields } = operation as unknown as {\n filterFields?: Record<string, unknown>;\n sortFields?: readonly string[];\n };\n // Nothing declared to filter or sort by ⇒ nothing to advertise beyond pagination. Emitting the\n // envelope anyway is still right: pagination is what makes a collection tool usable past its\n // first page, and it needs no per-resource declaration.\n const primitiveFilterFields: Record<string, any> = {};\n Object.entries(filterFields ?? {}).forEach(([key, value]) => {\n // A FUNCTION-valued entry is a filter REFERENCE (a cross-resource pointer the factory resolves\n // elsewhere), not a schema — the same exclusion the factory applies when it builds SEARCH's\n // envelope. Advertising it would put an uncallable key in front of the agent.\n if (typeof value !== 'function') primitiveFilterFields[key] = value;\n });\n\n return createResourceSearchQueryRequestSchema({\n filterFields: primitiveFilterFields,\n allowedSortFields: sortFields ?? [],\n pagination: true,\n });\n }\n\n /\n Behaviour hints from the operation identifier + risk level.\n \n Every one of these has a DEFAULT in the specification, so an omitted hint is not a neutral\n * silence — it is an assertion of that default. Two of them defaulted against us:\n \n - `openWorldHint` defaults to true, so omitting it advertised every Wildo tool as\n * potentially reaching arbitrary external systems. It is always `false` here: a tool operates on\n * this application's own resources, through its own authorization, and reaches nothing else.\n * - `idempotentHint` defaults to false, i.e. \"retrying may double the effect\" — true for\n * CREATE, wrong for UPDATE and DELETE. This is the hint an agent uses to decide whether a retry\n * after a timeout is safe, which makes the wrong default an availability problem, not a\n * cosmetic one.\n \n `idempotentHint` is emitted ONLY for writes because the specification defines it as \"meaningful\n * only when `readOnlyHint == false`\". `destructiveHint` is emitted unconditionally despite the same\n * caveat: `false` is TRUE of a read tool, and a client that reads it without first checking\n * `readOnlyHint` is safer for having it.\n \n spec-cite: MCP 2026-07-28 — `ToolAnnotations`, `idempotentHint` and `destructiveHint` doc\n * comments (\"(This property is meaningful only when `readOnlyHint == false`)\"), and the `Default:`\n * lines on `openWorldHint` (true), `idempotentHint` (false) and `destructiveHint` (true).\n * <https://raw.githubusercontent.com/modelcontextprotocol/modelcontextprotocol/main/schema/2026-07-28/schema.ts>\n */\n private buildAnnotations(operationIdentifier: string, riskLevel: ResourceOperationRiskLevel): McpToolAnnotations {\n const readOnlyHint = READ_ONLY_CORE_OPERATIONS.has(operationIdentifier);\n const destructiveHint = operationIdentifier === String(CoreResourceOperation.DELETE)\n \|\| DESTRUCTIVE_RISK_LEVELS.has(riskLevel);\n return {\n readOnlyHint,\n destructiveHint,\n ...(readOnlyHint ? {} : { idempotentHint: IDEMPOTENT_WRITE_CORE_OPERATIONS.has(operationIdentifier) }),\n openWorldHint: false,\n };\n }\n}\n"]}

package/dist/esm/monitoring/analytics/controllers/analytics.backend.controller.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"analytics.backend.controller.d.ts","sourceRoot":"","sources":["../../../../../../src/monitoring/analytics/controllers/analytics.backend.controller.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,+BAA+B,EAAE,MAAM,sFAAsF,CAAC;~~AACvI~~,OAAO,KAAK,EAAE,yCAAyC,EAAE,MAAM,oFAAoF,CAAC;AAEpJ,qBACa,0BAA2B,SAAQ,gCAAgC;IAKV,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAC5D,OAAO,CAAC,MAAM;IACJ,OAAO,CAAC,iBAAiB;gBAL9C,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EACxC,YAAY,EAAE,mBAAmB,EACE,uBAAuB,EAAE,qCAAqC,EAC3F,MAAM,EAAE,+BAA+B,EAC7B,iBAAiB,EAAE,yCAAyC;IAK9H,SAAS,CAAC,WAAW,IAAI,IAAI;IAO7B;;;OAGG;YACW,YAAY;~~IA4B1B~~;;;OAGG;YACW,kBAAkB;~~IAMhC~~;;OAEG;YACW,kBAAkB;~~IA4BhC~~;;;OAGG;YACW,uBAAuB;CAItC"}
1	+ {"version":3,"file":"analytics.backend.controller.d.ts","sourceRoot":"","sources":["../../../../../../src/monitoring/analytics/controllers/analytics.backend.controller.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,+BAA+B,EAAE,MAAM,sFAAsF,CAAC;AAEvI,OAAO,KAAK,EAAE,yCAAyC,EAAE,MAAM,oFAAoF,CAAC;AAEpJ,qBACa,0BAA2B,SAAQ,gCAAgC;IAKV,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAC5D,OAAO,CAAC,MAAM;IACJ,OAAO,CAAC,iBAAiB;gBAL9C,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EACxC,YAAY,EAAE,mBAAmB,EACE,uBAAuB,EAAE,qCAAqC,EAC3F,MAAM,EAAE,+BAA+B,EAC7B,iBAAiB,EAAE,yCAAyC;IAK9H,SAAS,CAAC,WAAW,IAAI,IAAI;IAO7B;;;OAGG;YACW,YAAY;IAqC1B;;;OAGG;YACW,kBAAkB;IAShC;;OAEG;YACW,kBAAkB;IAiEhC;;;OAGG;YACW,uBAAuB;CAItC"}

package/dist/esm/monitoring/analytics/controllers/analytics.backend.controller.js CHANGED Viewed

@@ -19,6 +19,7 @@ import { ErrorHandlerService } from '../../../errors/services/error-handler.back
 import { AbstractControllerBackendService } from '../../../base-classes/services/controllers/abstract-controller.backend.service.js';
 import { ExecutionContextCreatorBackendService } from '../../../runtime/services/execution-context-creator.backend.service.js';
 import { ValueMomentEngineBackendService } from '../../../monitoring/analytics/services/value-moment-engine.backend.service.js';
+import { ValueMomentWriteOutcome } from '../../../monitoring/analytics/services/value-moment-engine.backend.service.js';
 let AnalyticsBackendController = class AnalyticsBackendController extends AbstractControllerBackendService {
     executionContextCreator;
     engine;
@@ -55,7 +56,16 @@ let AnalyticsBackendController = class AnalyticsBackendController extends Abstra
                     resourceType: event.properties.resourceType ?? 'unknown',
                     operationIdentifier: event.properties.operation ?? 'unknown',
                     operationResult: event.properties,
-                    executionContext,
+                    /*
+                     * The IDENTITY, not the whole execution context. The engine resolves which progression-
+                     * state row to write from the user and organization ids and needs nothing else; handing it
+                     * the context would let a future change read request-shaped state inside an evaluator that
+                     * also runs from a cron and from a worker.
+                     */
+                    principal: {
+                        userId: executionContext.initiatorIds?.userId,
+                        organizationId: executionContext.initiatorIds?.organizationId,
+                    },
                 }).catch(err => this.logger.error('[Analytics] Signal evaluation failed', err));
             }
         }
@@ -67,7 +77,10 @@ let AnalyticsBackendController = class AnalyticsBackendController extends Abstra
      */
     async getAchievedMoments(req, res, _next) {
         const executionContext = await this.executionContextCreator.createExecutionContextForManualController(req);
-        const moments = await this.engine.getAchievedMoments(executionContext);
+        const moments = await this.engine.getAchievedMoments({
+            userId: executionContext.initiatorIds?.userId,
+            organizationId: executionContext.initiatorIds?.organizationId,
+        });
         res.json({ moments: moments.map(m => m.momentIdentifier) });
     }
     /**
@@ -92,8 +105,40 @@ let AnalyticsBackendController = class AnalyticsBackendController extends Abstra
                 return;
             }
         }
-        await this.engine.markAchieved(momentIdentifier, executionContext, scope);
-        res.status(201).json({ success: true, momentIdentifier });
+        /*
+         * ─── THE STATUS CODE FOLLOWS THE OUTCOME ───────────────────────────────────────────────────
+         *
+         * This answered 201 unconditionally while the engine behind it stored nothing (#414), so a
+         * caller could not tell an accepted write from a discarded one — the part of the placeholder
+         * engine that actively misled rather than merely under-delivering.
+         *
+         *   RECORDED          201 — newly achieved and persisted.
+         *   ALREADY_ACHIEVED  200 — success, and nothing changed. Distinct from 201 because a value
+         *                     moment is achieved ONCE; a client re-syncing its local set must be able to
+         *                     tell that it did not just cause anything.
+         *   SCOPE_UNAVAILABLE 422 — the request is well-formed and the moment is real, but the scope it
+         *                     measures is not present on this execution. Not 403: nothing was forbidden.
+         *   NOT_PERSISTED     503 — the store could not be reached. The honest answer, and the one that
+         *                     makes the frontend retry rather than mark the moment done locally.
+         */
+        const outcome = await this.engine.markAchieved(momentIdentifier, {
+            userId: executionContext.initiatorIds?.userId,
+            organizationId: executionContext.initiatorIds?.organizationId,
+        }, scope);
+        switch (outcome) {
+            case ValueMomentWriteOutcome.RECORDED:
+                res.status(201).json({ success: true, momentIdentifier, outcome });
+                return;
+            case ValueMomentWriteOutcome.ALREADY_ACHIEVED:
+                res.status(200).json({ success: true, momentIdentifier, outcome });
+                return;
+            case ValueMomentWriteOutcome.SCOPE_UNAVAILABLE:
+                res.status(422).json({ success: false, momentIdentifier, outcome, error: 'The scope this moment measures is not present on this execution' });
+                return;
+            case ValueMomentWriteOutcome.NOT_PERSISTED:
+                res.status(503).json({ success: false, momentIdentifier, outcome, error: 'Value moment could not be persisted' });
+                return;
+        }
     }
     /**
      * Return all registered milestone definitions.

package/dist/esm/monitoring/analytics/controllers/analytics.backend.controller.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"analytics.backend.controller.js","sourceRoot":"","sources":["../../../../../../src/monitoring/analytics/controllers/analytics.backend.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,kBAAkB,EAAE,6BAA6B,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACtI,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,+BAA+B,EAAE,MAAM,sFAAsF,CAAC;AAIhI,IAAM,0BAA0B,GAAhC,MAAM,0BAA2B,SAAQ,gCAAgC;IAKO;IAC7B;IACU;IANlE,YACqC,MAAqB,EACR,YAAwC,EACxC,YAAiC,EACE,uBAA8D,EAC3F,MAAuC,EAC7B,iBAA4D;QAE5H,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,4BAA4B,CAAC,CAAC;QAJW,4BAAuB,GAAvB,uBAAuB,CAAuC;QAC3F,WAAM,GAAN,MAAM,CAAiC;QAC7B,sBAAiB,GAAjB,iBAAiB,CAA2C;IAG9H,CAAC;IAES,WAAW;QACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5I,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3J,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5J,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9J,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,YAAY,CAAC,GAAY,EAAE,GAAa,EAAE,KAAmB;QACzE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEpE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,yCAAyC,CAAC,GAAG,CAAC,CAAC;QAC3G,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,EAAE,MAAM,IAAI,WAAW,CAAC;QAEpE,IAAI,CAAC,QAAQ,CAAC,wBAAwB,SAAS,CAAC,MAAM,qBAAqB,MAAM,EAAE,CAAC,CAAC;QAErF,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,KAAK,EAAE,IAAI,KAAK,kBAAkB,CAAC,kBAAkB,IAAI,KAAK,EAAE,UAAU,EAAE,CAAC;gBAC/E,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;oBAClC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,YAAY,IAAI,SAAS;oBACxD,mBAAmB,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS,IAAI,SAAS;oBAC5D,eAAe,EAAE,KAAK,CAAC,UAAU;oBACjC,gBAAgB;iBACjB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,kBAAkB,CAAC,GAAY,EAAE,GAAa,EAAE,KAAmB;QAC/E,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,yCAAyC,CAAC,GAAG,CAAC,CAAC;QAC3G,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAAC,GAAY,EAAE,GAAa,EAAE,KAAmB;QAC/E,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAEnD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAa,CAAC;QAChE,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,KAAK,qBAAqB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,yCAAyC,CAAC,GAAG,CAAC,CAAC;QAE3G,IAAI,KAAK,KAAK,gBAAgB,CAAC,YAAY,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,gBAAgB,CAAC,YAAY,EAAE,cAAc,CAAC;YAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oEAAoE,EAAE,CAAC,CAAC;gBACtG,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,uBAAuB,CAAC,IAAa,EAAE,GAAa,EAAE,KAAmB;QACrF,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;QAC/D,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5B,CAAC;CACF,CAAA;AApGY,0BAA0B;IADtC,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAChE,WAAA,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAA;IAC5C,WAAA,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAA;qCALZ,aAAa;QACM,0BAA0B;QAC1B,mBAAmB;QAC2B,qCAAqC;QACnF,+BAA+B;GANpF,0BAA0B,CAoGtC","sourcesContent":["import { injectable, inject } from 'inversify';\nimport { Request, Response, NextFunction } from 'express';\nimport { AnalyticsEventName, MANUAL_CONTROLLER_ROUTES_URLS, ManualControllerRouteKey, ValueMomentScope } from '@wildo-ai/saas-models';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { ErrorHandlerService } from '~wildo-backend-lib/errors/services/error-handler.backend.service';\nimport { AbstractControllerBackendService } from '~wildo-backend-lib/base-classes/services/controllers/abstract-controller.backend.service';\nimport { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport { ValueMomentEngineBackendService } from '~wildo-backend-lib/monitoring/analytics/services/value-moment-engine.backend.service';\nimport type { MilestoneDefinitionRegistryBackendService } from '~wildo-backend-lib/guidance/services/milestone-definition-registry.backend.service';\n\n@injectable()\nexport class AnalyticsBackendController extends AbstractControllerBackendService {\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger) logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.ErrorHandlerService) errorHandler: ErrorHandlerService,\n @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) private readonly executionContextCreator: ExecutionContextCreatorBackendService,\n @inject(SAAS_SERVICE_TYPES.ValueMomentEngine) private engine: ValueMomentEngineBackendService,\n @inject(SAAS_SERVICE_TYPES.MilestoneDefinitionRegistry) private milestoneRegistry: MilestoneDefinitionRegistryBackendService,\n ) {\n super(logger, errorBuilder, errorHandler, 'AnalyticsBackendController');\n }\n\n protected setupRoutes(): void {\n this.router.post(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.ANALYTICS_EVENTS], this.asyncHandler(this.ingestEvents.bind(this)));\n this.router.get(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.ANALYTICS_MOMENTS_ACHIEVED], this.asyncHandler(this.getAchievedMoments.bind(this)));\n this.router.post(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.ANALYTICS_MOMENTS_ACHIEVED], this.asyncHandler(this.markMomentAchieved.bind(this)));\n this.router.get(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.PROGRESSION_MILESTONES], this.asyncHandler(this.getMilestoneDefinitions.bind(this)));\n }\n\n /*\n Ingest a batch of analytics events from the frontend BackendProxyAnalyticsProvider.\n * Accepts { events: AnalyticsEvent[], userId?: string } and returns 202 Accepted.\n /\n private async ingestEvents(req: Request, res: Response, _next: NextFunction): Promise<void> {\n const { events } = req.body ?? {};\n const eventList = Array.isArray(events) ? events.slice(0, 500) : [];\n\n if (eventList.length === 0) {\n res.status(400).json({ error: 'No valid events provided' });\n return;\n }\n\n const executionContext = await this.executionContextCreator.createExecutionContextForManualController(req);\n const userId = executionContext.initiatorIds?.userId ?? 'anonymous';\n\n this.logDebug(`[Analytics] Ingested ${eventList.length} events from user=${userId}`);\n\n for (const event of eventList) {\n if (event?.name === AnalyticsEventName.RESOURCE_OPERATION && event?.properties) {\n this.engine.evaluateOperationSignal({\n resourceType: event.properties.resourceType ?? 'unknown',\n operationIdentifier: event.properties.operation ?? 'unknown',\n operationResult: event.properties,\n executionContext,\n }).catch(err => this.logger.error('[Analytics] Signal evaluation failed', err));\n }\n }\n\n res.status(202).json({ accepted: eventList.length });\n }\n\n /\n Return the list of achieved value moment identifiers for the current execution context.\n * Frontend expects { moments: string[] }.\n /\n private async getAchievedMoments(req: Request, res: Response, _next: NextFunction): Promise<void> {\n const executionContext = await this.executionContextCreator.createExecutionContextForManualController(req);\n const moments = await this.engine.getAchievedMoments(executionContext);\n res.json({ moments: moments.map(m => m.momentIdentifier) });\n }\n\n /\n Mark a specific value moment as achieved.\n /\n private async markMomentAchieved(req: Request, res: Response, _next: NextFunction): Promise<void> {\n const { momentIdentifier, scope } = req.body ?? {};\n\n if (!momentIdentifier) {\n res.status(400).json({ error: 'momentIdentifier is required' });\n return;\n }\n\n const validScopes = Object.values(ValueMomentScope) as string[];\n if (scope && !validScopes.includes(scope)) {\n res.status(400).json({ error: `Invalid scope: ${scope}. Must be one of: ${validScopes.join(', ')}` });\n return;\n }\n\n const executionContext = await this.executionContextCreator.createExecutionContextForManualController(req);\n\n if (scope === ValueMomentScope.ORGANIZATION) {\n const orgId = executionContext.initiatorIds?.organizationId;\n if (!orgId) {\n res.status(403).json({ error: 'Organization-scoped moments require an active organization context' });\n return;\n }\n }\n\n await this.engine.markAchieved(momentIdentifier, executionContext, scope);\n res.status(201).json({ success: true, momentIdentifier });\n }\n\n /\n Return all registered milestone definitions.\n * Frontend uses this to render milestone trackers, browse milestones, etc.\n */\n private async getMilestoneDefinitions(_req: Request, res: Response, _next: NextFunction): Promise<void> {\n const definitions = this.milestoneRegistry.getAllDefinitions();\n res.json({ definitions });\n }\n}\n"]}
1	+ {"version":3,"file":"analytics.backend.controller.js","sourceRoot":"","sources":["../../../../../../src/monitoring/analytics/controllers/analytics.backend.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,kBAAkB,EAAE,6BAA6B,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACtI,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAC9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,kEAAkE,CAAC;AACvG,OAAO,EAAE,gCAAgC,EAAE,MAAM,0FAA0F,CAAC;AAC5I,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,EAAE,+BAA+B,EAAE,MAAM,sFAAsF,CAAC;AACvI,OAAO,EAAE,uBAAuB,EAAE,MAAM,sFAAsF,CAAC;AAIxH,IAAM,0BAA0B,GAAhC,MAAM,0BAA2B,SAAQ,gCAAgC;IAKO;IAC7B;IACU;IANlE,YACqC,MAAqB,EACR,YAAwC,EACxC,YAAiC,EACE,uBAA8D,EAC3F,MAAuC,EAC7B,iBAA4D;QAE5H,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,4BAA4B,CAAC,CAAC;QAJW,4BAAuB,GAAvB,uBAAuB,CAAuC;QAC3F,WAAM,GAAN,MAAM,CAAiC;QAC7B,sBAAiB,GAAjB,iBAAiB,CAA2C;IAG9H,CAAC;IAES,WAAW;QACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5I,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3J,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,0BAA0B,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5J,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,wBAAwB,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9J,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,YAAY,CAAC,GAAY,EAAE,GAAa,EAAE,KAAmB;QACzE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEpE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,yCAAyC,CAAC,GAAG,CAAC,CAAC;QAC3G,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,EAAE,MAAM,IAAI,WAAW,CAAC;QAEpE,IAAI,CAAC,QAAQ,CAAC,wBAAwB,SAAS,CAAC,MAAM,qBAAqB,MAAM,EAAE,CAAC,CAAC;QAErF,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,KAAK,EAAE,IAAI,KAAK,kBAAkB,CAAC,kBAAkB,IAAI,KAAK,EAAE,UAAU,EAAE,CAAC;gBAC/E,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;oBAClC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,YAAY,IAAI,SAAS;oBACxD,mBAAmB,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS,IAAI,SAAS;oBAC5D,eAAe,EAAE,KAAK,CAAC,UAAU;oBACjC;;;;;uBAKG;oBACH,SAAS,EAAE;wBACT,MAAM,EAAE,gBAAgB,CAAC,YAAY,EAAE,MAAM;wBAC7C,cAAc,EAAE,gBAAgB,CAAC,YAAY,EAAE,cAAc;qBAC9D;iBACF,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,kBAAkB,CAAC,GAAY,EAAE,GAAa,EAAE,KAAmB;QAC/E,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,yCAAyC,CAAC,GAAG,CAAC,CAAC;QAC3G,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;YACnD,MAAM,EAAE,gBAAgB,CAAC,YAAY,EAAE,MAAM;YAC7C,cAAc,EAAE,gBAAgB,CAAC,YAAY,EAAE,cAAc;SAC9D,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAAC,GAAY,EAAE,GAAa,EAAE,KAAmB;QAC/E,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAEnD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAa,CAAC;QAChE,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,KAAK,qBAAqB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,yCAAyC,CAAC,GAAG,CAAC,CAAC;QAE3G,IAAI,KAAK,KAAK,gBAAgB,CAAC,YAAY,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,gBAAgB,CAAC,YAAY,EAAE,cAAc,CAAC;YAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oEAAoE,EAAE,CAAC,CAAC;gBACtG,OAAO;YACT,CAAC;QACH,CAAC;QAED;;;;;;;;;;;;;;;WAeG;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAC5C,gBAAgB,EAChB;YACE,MAAM,EAAE,gBAAgB,CAAC,YAAY,EAAE,MAAM;YAC7C,cAAc,EAAE,gBAAgB,CAAC,YAAY,EAAE,cAAc;SAC9D,EACD,KAAK,CACN,CAAC;QAEF,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,uBAAuB,CAAC,QAAQ;gBACnC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;gBACnE,OAAO;YACT,KAAK,uBAAuB,CAAC,gBAAgB;gBAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;gBACnE,OAAO;YACT,KAAK,uBAAuB,CAAC,iBAAiB;gBAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,iEAAiE,EAAE,CAAC,CAAC;gBAC9I,OAAO;YACT,KAAK,uBAAuB,CAAC,aAAa;gBACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC;gBAClH,OAAO;QACX,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,uBAAuB,CAAC,IAAa,EAAE,GAAa,EAAE,KAAmB;QACrF,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;QAC/D,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5B,CAAC;CACF,CAAA;AArJY,0BAA0B;IADtC,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAChE,WAAA,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAA;IAC5C,WAAA,MAAM,CAAC,kBAAkB,CAAC,2BAA2B,CAAC,CAAA;qCALZ,aAAa;QACM,0BAA0B;QAC1B,mBAAmB;QAC2B,qCAAqC;QACnF,+BAA+B;GANpF,0BAA0B,CAqJtC","sourcesContent":["import { injectable, inject } from 'inversify';\nimport { Request, Response, NextFunction } from 'express';\nimport { AnalyticsEventName, MANUAL_CONTROLLER_ROUTES_URLS, ManualControllerRouteKey, ValueMomentScope } from '@wildo-ai/saas-models';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport { ErrorHandlerService } from '~wildo-backend-lib/errors/services/error-handler.backend.service';\nimport { AbstractControllerBackendService } from '~wildo-backend-lib/base-classes/services/controllers/abstract-controller.backend.service';\nimport { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport { ValueMomentEngineBackendService } from '~wildo-backend-lib/monitoring/analytics/services/value-moment-engine.backend.service';\nimport { ValueMomentWriteOutcome } from '~wildo-backend-lib/monitoring/analytics/services/value-moment-engine.backend.service';\nimport type { MilestoneDefinitionRegistryBackendService } from '~wildo-backend-lib/guidance/services/milestone-definition-registry.backend.service';\n\n@injectable()\nexport class AnalyticsBackendController extends AbstractControllerBackendService {\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger) logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.ErrorHandlerService) errorHandler: ErrorHandlerService,\n @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) private readonly executionContextCreator: ExecutionContextCreatorBackendService,\n @inject(SAAS_SERVICE_TYPES.ValueMomentEngine) private engine: ValueMomentEngineBackendService,\n @inject(SAAS_SERVICE_TYPES.MilestoneDefinitionRegistry) private milestoneRegistry: MilestoneDefinitionRegistryBackendService,\n ) {\n super(logger, errorBuilder, errorHandler, 'AnalyticsBackendController');\n }\n\n protected setupRoutes(): void {\n this.router.post(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.ANALYTICS_EVENTS], this.asyncHandler(this.ingestEvents.bind(this)));\n this.router.get(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.ANALYTICS_MOMENTS_ACHIEVED], this.asyncHandler(this.getAchievedMoments.bind(this)));\n this.router.post(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.ANALYTICS_MOMENTS_ACHIEVED], this.asyncHandler(this.markMomentAchieved.bind(this)));\n this.router.get(MANUAL_CONTROLLER_ROUTES_URLS[ManualControllerRouteKey.PROGRESSION_MILESTONES], this.asyncHandler(this.getMilestoneDefinitions.bind(this)));\n }\n\n /*\n Ingest a batch of analytics events from the frontend BackendProxyAnalyticsProvider.\n * Accepts { events: AnalyticsEvent[], userId?: string } and returns 202 Accepted.\n /\n private async ingestEvents(req: Request, res: Response, _next: NextFunction): Promise<void> {\n const { events } = req.body ?? {};\n const eventList = Array.isArray(events) ? events.slice(0, 500) : [];\n\n if (eventList.length === 0) {\n res.status(400).json({ error: 'No valid events provided' });\n return;\n }\n\n const executionContext = await this.executionContextCreator.createExecutionContextForManualController(req);\n const userId = executionContext.initiatorIds?.userId ?? 'anonymous';\n\n this.logDebug(`[Analytics] Ingested ${eventList.length} events from user=${userId}`);\n\n for (const event of eventList) {\n if (event?.name === AnalyticsEventName.RESOURCE_OPERATION && event?.properties) {\n this.engine.evaluateOperationSignal({\n resourceType: event.properties.resourceType ?? 'unknown',\n operationIdentifier: event.properties.operation ?? 'unknown',\n operationResult: event.properties,\n /\n * The IDENTITY, not the whole execution context. The engine resolves which progression-\n * state row to write from the user and organization ids and needs nothing else; handing it\n * the context would let a future change read request-shaped state inside an evaluator that\n * also runs from a cron and from a worker.\n /\n principal: {\n userId: executionContext.initiatorIds?.userId,\n organizationId: executionContext.initiatorIds?.organizationId,\n },\n }).catch(err => this.logger.error('[Analytics] Signal evaluation failed', err));\n }\n }\n\n res.status(202).json({ accepted: eventList.length });\n }\n\n /\n Return the list of achieved value moment identifiers for the current execution context.\n * Frontend expects { moments: string[] }.\n /\n private async getAchievedMoments(req: Request, res: Response, _next: NextFunction): Promise<void> {\n const executionContext = await this.executionContextCreator.createExecutionContextForManualController(req);\n const moments = await this.engine.getAchievedMoments({\n userId: executionContext.initiatorIds?.userId,\n organizationId: executionContext.initiatorIds?.organizationId,\n });\n res.json({ moments: moments.map(m => m.momentIdentifier) });\n }\n\n /\n Mark a specific value moment as achieved.\n /\n private async markMomentAchieved(req: Request, res: Response, _next: NextFunction): Promise<void> {\n const { momentIdentifier, scope } = req.body ?? {};\n\n if (!momentIdentifier) {\n res.status(400).json({ error: 'momentIdentifier is required' });\n return;\n }\n\n const validScopes = Object.values(ValueMomentScope) as string[];\n if (scope && !validScopes.includes(scope)) {\n res.status(400).json({ error: `Invalid scope: ${scope}. Must be one of: ${validScopes.join(', ')}` });\n return;\n }\n\n const executionContext = await this.executionContextCreator.createExecutionContextForManualController(req);\n\n if (scope === ValueMomentScope.ORGANIZATION) {\n const orgId = executionContext.initiatorIds?.organizationId;\n if (!orgId) {\n res.status(403).json({ error: 'Organization-scoped moments require an active organization context' });\n return;\n }\n }\n\n /\n * ─── THE STATUS CODE FOLLOWS THE OUTCOME ───────────────────────────────────────────────────\n \n This answered 201 unconditionally while the engine behind it stored nothing (#414), so a\n * caller could not tell an accepted write from a discarded one — the part of the placeholder\n * engine that actively misled rather than merely under-delivering.\n \n RECORDED 201 — newly achieved and persisted.\n * ALREADY_ACHIEVED 200 — success, and nothing changed. Distinct from 201 because a value\n * moment is achieved ONCE; a client re-syncing its local set must be able to\n * tell that it did not just cause anything.\n * SCOPE_UNAVAILABLE 422 — the request is well-formed and the moment is real, but the scope it\n * measures is not present on this execution. Not 403: nothing was forbidden.\n * NOT_PERSISTED 503 — the store could not be reached. The honest answer, and the one that\n * makes the frontend retry rather than mark the moment done locally.\n /\n const outcome = await this.engine.markAchieved(\n momentIdentifier,\n {\n userId: executionContext.initiatorIds?.userId,\n organizationId: executionContext.initiatorIds?.organizationId,\n },\n scope,\n );\n\n switch (outcome) {\n case ValueMomentWriteOutcome.RECORDED:\n res.status(201).json({ success: true, momentIdentifier, outcome });\n return;\n case ValueMomentWriteOutcome.ALREADY_ACHIEVED:\n res.status(200).json({ success: true, momentIdentifier, outcome });\n return;\n case ValueMomentWriteOutcome.SCOPE_UNAVAILABLE:\n res.status(422).json({ success: false, momentIdentifier, outcome, error: 'The scope this moment measures is not present on this execution' });\n return;\n case ValueMomentWriteOutcome.NOT_PERSISTED:\n res.status(503).json({ success: false, momentIdentifier, outcome, error: 'Value moment could not be persisted' });\n return;\n }\n }\n\n /\n Return all registered milestone definitions.\n * Frontend uses this to render milestone trackers, browse milestones, etc.\n */\n private async getMilestoneDefinitions(_req: Request, res: Response, _next: NextFunction): Promise<void> {\n const definitions = this.milestoneRegistry.getAllDefinitions();\n res.json({ definitions });\n }\n}\n"]}

package/dist/esm/monitoring/analytics/services/value-moment-definition-registry.backend.service.d.ts ADDED Viewed

@@ -0,0 +1,66 @@
+/**
+ * The registered value-moment definitions, indexed by what can trigger them.
+ *
+ * Mirrors `MilestoneDefinitionRegistryBackendService` deliberately: same registration-at-startup
+ * shape, same trigger index, same fail-fast validation. The two vocabularies are distinct (a
+ * milestone is authored progression; a value moment is a measured behavioural moment with a role, a
+ * composition mode and typed signals) but the REGISTRY problem is identical, and solving it a second
+ * way would have produced two answers to "which definitions does this operation touch".
+ *
+ * Before #414 nothing registered these at all. The definitions were read once at startup, purely to
+ * warn about invalid feature references, and then discarded — so `ValueMomentEngineBackendService`
+ * had nothing to evaluate even if it had been implemented.
+ */
+import 'reflect-metadata';
+import type { ValueMoment, ValueSignal } from '@wildo-ai/saas-models';
+import type { LoggerService } from '../../../monitoring/logger/services/logger.service';
+/**
+ * The stable key of one signal WITHIN one moment.
+ *
+ * `ValueMomentMode.ALL` has to remember which signals have already fired, and it has to survive the
+ * definition being edited. An INDEX would not: inserting a signal at the front of the list silently
+ * re-points every recorded observation at a different signal. The key is derived from the signal's
+ * own content, so a signal that did not change keeps its identity, and one that did legitimately
+ * loses its recorded observation.
+ */
+export declare function valueSignalKey(signal: ValueSignal): string;
+export declare class ValueMomentDefinitionRegistryBackendService {
+    private readonly logger;
+    private definitions;
+    /** `<resourceType>:<operation>` → moments carrying a matching RESOURCE_OPERATION signal. */
+    private operationIndex;
+    /** custom event name → moments carrying a matching CUSTOM_EVENT signal. */
+    private eventIndex;
+    /**
+     * resource type → moments carrying a RESOURCE_STATE signal on it.
+     *
+     * Indexed by TYPE alone, not by operation: a state signal asks "how many rows match", and any
+     * write to that resource can change the answer. Keying it by operation would evaluate it only
+     * after a CREATE and miss the UPDATE that moved a row into the filter.
+     */
+    private stateIndex;
+    private logDebug;
+    constructor(logger: LoggerService);
+    registerDefinitions(definitions: ValueMoment[]): void;
+    private registerDefinition;
+    private removeFromIndexes;
+    /**
+     * Fail-fast validation, run at startup after registration.
+     *
+     * Reports rather than throws. A milestone misconfiguration prevents boot because milestones gate
+     * feature unlocks; a value moment MEASURES and gates nothing, so refusing to start an application
+     * over a mis-declared metric would be a worse failure than the metric being wrong. The findings go
+     * to the log at WARN, which is where the startup summary of every other registry lands.
+     */
+    validateDefinitions(): string[];
+    getDefinition(identifier: string): ValueMoment | undefined;
+    getAllDefinitions(): ValueMoment[];
+    /** Moments with a RESOURCE_OPERATION signal for this exact resource + operation. */
+    getMomentsForOperation(resourceType: string, operationIdentifier: string): ValueMoment[];
+    /** Moments with a CUSTOM_EVENT signal for this event name. */
+    getMomentsForEvent(eventName: string): ValueMoment[];
+    /** Moments with a RESOURCE_STATE signal on this resource type. */
+    getMomentsForResourceState(resourceType: string): ValueMoment[];
+    logStartupSummary(): void;
+}
+//# sourceMappingURL=value-moment-definition-registry.backend.service.d.ts.map

package/dist/esm/monitoring/analytics/services/value-moment-definition-registry.backend.service.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"value-moment-definition-registry.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../src/monitoring/analytics/services/value-moment-definition-registry.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAElG;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAa1D;AAED,qBACa,2CAA2C;IAkBjB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAjB5D,OAAO,CAAC,WAAW,CAAuC;IAC1D,4FAA4F;IAC5F,OAAO,CAAC,cAAc,CAAyC;IAC/D,2EAA2E;IAC3E,OAAO,CAAC,UAAU,CAAyC;IAC3D;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAAyC;IAE3D,OAAO,CAAC,QAAQ,CAA+D;gBAGzB,MAAM,EAAE,aAAa;IAMpE,mBAAmB,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,IAAI;IAO5D,OAAO,CAAC,kBAAkB;IAyB1B,OAAO,CAAC,iBAAiB;IAUzB;;;;;;;OAOG;IACI,mBAAmB,IAAI,MAAM,EAAE;IA2C/B,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAI1D,iBAAiB,IAAI,WAAW,EAAE;IAIzC,oFAAoF;IAC7E,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,WAAW,EAAE;IAI/F,8DAA8D;IACvD,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE;IAI3D,kEAAkE;IAC3D,0BAA0B,CAAC,YAAY,EAAE,MAAM,GAAG,WAAW,EAAE;IAI/D,iBAAiB,IAAI,IAAI;CASjC"}