agentfootprint 12.0.1 → 12.2.0

package/dist/mcp/pool/errors.js

@@ -0,0 +1,96 @@
+"use strict";
+/**
+ * errors — the pool's two refusals, each one fixed sentence.
+ *
+ * Pattern: typed errors whose message reaches the model and whose fields reach
+ *          the app.
+ * Role:    A refusal comes before the `tools/call` is sent, and says so
+ *          (`sent: false`) for the record of what that attempt did. Control
+ *          requests made on the way — the `initialize` of a replacement client,
+ *          a revalidating `tools/list` — may already have reached the server;
+ *          `sent` describes the `tools/call` only.
+ *
+ * A message is a fixed sentence per reason. It names no identity, no key, no
+ * session and no count: the counts ride typed fields the app reads, and the
+ * original error of a failed open rides `cause`, for the app, never composed
+ * into the message.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PoolFullError = exports.POOL_FULL_SENTENCE = exports.McpPoolRefusedError = exports.MCP_POOL_REFUSAL_SENTENCES = void 0;
+/** The sentence each refusal reaches the model as. */
+exports.MCP_POOL_REFUSAL_SENTENCES = Object.freeze({
+    'no-identity': "This tool needs the caller's identity and none was named, so the call this result answers was not sent.",
+    'incomplete-identity': 'This tool needs a complete caller identity and the one named is incomplete, so the call this result answers was not sent.',
+    'identity-mismatch': 'This tool was listed for another conversation, so the tool call was not sent.',
+    'init-timeout': 'The connection to this server did not open in time, so the tool call was not sent.',
+    'init-failed': 'The connection to this server could not be opened, so the tool call was not sent.',
+    'stale-tools': "This tool's definition is no longer current, so the tool call was not sent. List the tools again.",
+    'binding-changed': 'This tool was listed for another configuration of this server, so the tool call was not sent. List the tools again.',
+    'request-unmatched': "The pool could not check this tool's request against its listing before sending it, so the tool call was not sent.",
+    'lease-expired': 'This connection lease has expired, so the tool call was not sent.',
+    closed: 'The connection pool for this server is closed, so the tool call was not sent.',
+});
+/**
+ * The pool refused before the `tools/call` was sent — by `reason`.
+ *
+ * `init-failed` keeps the open's own error as `cause`, for the app; its text is
+ * never in the message.
+ */
+class McpPoolRefusedError extends Error {
+    reason;
+    server;
+    code = 'ERR_MCP_POOL_REFUSED';
+    /** The `tools/call` was not sent. Control requests on the way may have been. */
+    sent = false;
+    constructor(reason, 
+    /** The pool's name: the server. */
+    server, options = {}) {
+        super(exports.MCP_POOL_REFUSAL_SENTENCES[reason], {
+            ...(options.cause !== undefined && { cause: options.cause }),
+        });
+        this.reason = reason;
+        this.server = server;
+        this.name = 'McpPoolRefusedError';
+    }
+}
+exports.McpPoolRefusedError = McpPoolRefusedError;
+/** The one sentence a full pool reaches the model as. */
+exports.POOL_FULL_SENTENCE = 'The connection pool for this server was full, so the tool call was not sent.';
+/**
+ * A budget was full, so the work was refused at once — there is no queue. Its
+ * scope is the `tools/call`, as with `sent: false`. The counts ride typed fields.
+ */
+class PoolFullError extends Error {
+    server;
+    limit;
+    max;
+    busy;
+    ending;
+    operations;
+    code = 'ERR_MCP_POOL_FULL';
+    sent = false;
+    constructor(
+    /** The pool's name: the server. */
+    server, 
+    /** Which budget was full. */
+    limit, 
+    /** That budget's size. */
+    max, 
+    /** Busy clients when it was refused. */
+    busy, 
+    /** Clients being ended when it was refused. */
+    ending, 
+    /** Operations charged when it was refused. */
+    operations) {
+        super(exports.POOL_FULL_SENTENCE);
+        this.server = server;
+        this.limit = limit;
+        this.max = max;
+        this.busy = busy;
+        this.ending = ending;
+        this.operations = operations;
+        this.name = 'PoolFullError';
+    }
+}
+exports.PoolFullError = PoolFullError;
+//# sourceMappingURL=errors.js.map

package/dist/mcp/pool/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/mcp/pool/errors.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAeH,sDAAsD;AACzC,QAAA,0BAA0B,GAA6C,MAAM,CAAC,MAAM,CAAC;IAChG,aAAa,EACX,yGAAyG;IAC3G,qBAAqB,EACnB,2HAA2H;IAC7H,mBAAmB,EACjB,+EAA+E;IACjF,cAAc,EACZ,oFAAoF;IACtF,aAAa,EACX,mFAAmF;IACrF,aAAa,EACX,mGAAmG;IACrG,iBAAiB,EACf,qHAAqH;IACvH,mBAAmB,EACjB,oHAAoH;IACtH,eAAe,EAAE,mEAAmE;IACpF,MAAM,EAAE,+EAA+E;CACxF,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAa,mBAAoB,SAAQ,KAAK;IAMjC;IAEA;IAPF,IAAI,GAAG,sBAA+B,CAAC;IAChD,gFAAgF;IACvE,IAAI,GAAG,KAAc,CAAC;IAE/B,YACW,MAAsB;IAC/B,mCAAmC;IAC1B,MAAc,EACvB,UAAwC,EAAE;QAE1C,KAAK,CAAC,kCAA0B,CAAC,MAAM,CAAC,EAAE;YACxC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SAC7D,CAAC,CAAC;QAPM,WAAM,GAAN,MAAM,CAAgB;QAEtB,WAAM,GAAN,MAAM,CAAQ;QAMvB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAhBD,kDAgBC;AAKD,yDAAyD;AAC5C,QAAA,kBAAkB,GAC7B,8EAA8E,CAAC;AAEjF;;;GAGG;AACH,MAAa,aAAc,SAAQ,KAAK;IAM3B;IAEA;IAEA;IAEA;IAEA;IAEA;IAfF,IAAI,GAAG,mBAA4B,CAAC;IACpC,IAAI,GAAG,KAAc,CAAC;IAE/B;IACE,mCAAmC;IAC1B,MAAc;IACvB,6BAA6B;IACpB,KAAmB;IAC5B,0BAA0B;IACjB,GAAW;IACpB,wCAAwC;IAC/B,IAAY;IACrB,+CAA+C;IACtC,MAAc;IACvB,8CAA8C;IACrC,UAAkB;QAE3B,KAAK,CAAC,0BAAkB,CAAC,CAAC;QAZjB,WAAM,GAAN,MAAM,CAAQ;QAEd,UAAK,GAAL,KAAK,CAAc;QAEnB,QAAG,GAAH,GAAG,CAAQ;QAEX,SAAI,GAAJ,IAAI,CAAQ;QAEZ,WAAM,GAAN,MAAM,CAAQ;QAEd,eAAU,GAAV,UAAU,CAAQ;QAG3B,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AArBD,sCAqBC"}

package/dist/mcp/pool/identityKey.js

@@ -0,0 +1,99 @@
+"use strict";
+/**
+ * identityKey — the conversation a pooled client belongs to, as one key.
+ *
+ * Pattern: the library's one identity encoding, never a second.
+ * Role:    The client key is `identityNamespace` of the identity the CALLER
+ *          named — each field through `encodeIdentityField`, the encoding the
+ *          memory layer calls the tenant boundary. It is injective: tenant
+ *          `acme/hr` with principal `alice` and tenant `acme` with principal
+ *          `hr/alice` are two keys, and an absent field and a field named `_`
+ *          are two keys. A pool is one server, so the key needs no server
+ *          segment, and two pools never share a client.
+ *
+ * Two doors only: the run's caller identity (`ToolDispatchContext.callerIdentity`,
+ * `ToolExecutionContext.identity`) and the identity app code passes to `acquire`
+ * and `terminate`. Never tool arguments, model output, a message, a request
+ * body, or a `sessionId` alone. No identity value is ever written to an error,
+ * an event or a report: the wire carries `keyHash`, the tool-session digest.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scopeMatcher = exports.poolKeyOf = void 0;
+const encode_js_1 = require("../../memory/identity/encode.js");
+const types_js_1 = require("../../memory/identity/types.js");
+const toolSessions_js_1 = require("../../tools/toolSessions.js");
+/**
+ * The key for `identity`, or why there is none: `'no-identity'` when nothing was
+ * named (a derived identity counts as none), `'incomplete-identity'` when it
+ * lacks a `conversationId`, a required `principal` or a required `tenant`, or a
+ * field is not a string.
+ */
+function poolKeyOf(identity, rules) {
+    if (identity === undefined || identity === null)
+        return 'no-identity';
+    if (typeof identity !== 'object' || Array.isArray(identity))
+        return 'incomplete-identity';
+    const raw = identity;
+    const fields = {};
+    for (const name of ['tenant', 'principal', 'conversationId']) {
+        let value;
+        try {
+            value = raw[name];
+        }
+        catch {
+            return 'incomplete-identity';
+        }
+        if (value === undefined || value === null || value === '')
+            continue;
+        if (typeof value !== 'string')
+            return 'incomplete-identity';
+        fields[name] = value;
+    }
+    if (fields.conversationId === undefined)
+        return 'incomplete-identity';
+    if (rules.requirePrincipal && fields.principal === undefined)
+        return 'incomplete-identity';
+    if (rules.requireTenant && fields.tenant === undefined)
+        return 'incomplete-identity';
+    const named = Object.freeze({
+        conversationId: fields.conversationId,
+        ...(fields.tenant !== undefined && { tenant: fields.tenant }),
+        ...(fields.principal !== undefined && { principal: fields.principal }),
+    });
+    const key = (0, types_js_1.identityNamespace)(named);
+    const tenant = (0, encode_js_1.encodeIdentityField)(named.tenant);
+    return {
+        key,
+        principal: `${tenant}/${(0, encode_js_1.encodeIdentityField)(named.principal)}`,
+        tenant,
+        keyHash: (0, toolSessions_js_1.hashSessionKey)(key),
+        identity: named,
+    };
+}
+exports.poolKeyOf = poolKeyOf;
+/**
+ * Which keys a scope names. The tenant is matched exactly, always — an absent
+ * tenant is the absent segment, never a wildcard, because the tenant is the
+ * boundary. A scope that names a `conversationId` names exactly that one
+ * conversation (an absent principal is then the absent segment, as in the key).
+ * A scope without one names every conversation of its principal, and a scope
+ * without a principal either names every conversation of its tenant.
+ */
+function scopeMatcher(scope) {
+    const tenant = (0, encode_js_1.encodeIdentityField)(scope.tenant);
+    if (scope.conversationId !== undefined && scope.conversationId !== '') {
+        const exact = (0, types_js_1.identityNamespace)({
+            conversationId: scope.conversationId,
+            ...(scope.tenant !== undefined && { tenant: scope.tenant }),
+            ...(scope.principal !== undefined && { principal: scope.principal }),
+        });
+        return (key) => key.key === exact;
+    }
+    if (scope.principal !== undefined && scope.principal !== '') {
+        const principal = `${tenant}/${(0, encode_js_1.encodeIdentityField)(scope.principal)}`;
+        return (key) => key.principal === principal;
+    }
+    return (key) => key.tenant === tenant;
+}
+exports.scopeMatcher = scopeMatcher;
+//# sourceMappingURL=identityKey.js.map

package/dist/mcp/pool/identityKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identityKey.js","sourceRoot":"","sources":["../../../src/mcp/pool/identityKey.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;AAEH,+DAAsE;AACtE,6DAAmE;AACnE,iEAA6D;AAuB7D;;;;;GAKG;AACH,SAAgB,SAAS,CACvB,QAAiB,EACjB,KAAoB;IAEpB,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC;IACtE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAC1F,MAAM,GAAG,GAAG,QAAmC,CAAC;IAChD,MAAM,MAAM,GAAwD,EAAE,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACtE,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,qBAAqB,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;YAAE,SAAS;QACpE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,qBAAqB,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,qBAAqB,CAAC;IACtE,IAAI,KAAK,CAAC,gBAAgB,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,qBAAqB,CAAC;IAC3F,IAAI,KAAK,CAAC,aAAa,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,qBAAqB,CAAC;IACrF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7D,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;KACvE,CAAoB,CAAC;IACtB,MAAM,GAAG,GAAG,IAAA,4BAAiB,EAAC,KAAK,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,IAAA,+BAAmB,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO;QACL,GAAG;QACH,SAAS,EAAE,GAAG,MAAM,IAAI,IAAA,+BAAmB,EAAC,KAAK,CAAC,SAAS,CAAC,EAAE;QAC9D,MAAM;QACN,OAAO,EAAE,IAAA,gCAAc,EAAC,GAAG,CAAC;QAC5B,QAAQ,EAAE,KAAK;KAChB,CAAC;AACJ,CAAC;AApCD,8BAoCC;AAED;;;;;;;GAOG;AACH,SAAgB,YAAY,CAAC,KAI5B;IACC,MAAM,MAAM,GAAG,IAAA,+BAAmB,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,EAAE,EAAE,CAAC;QACtE,MAAM,KAAK,GAAG,IAAA,4BAAiB,EAAC;YAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3D,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;SACrE,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,CAAC;IACpC,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,IAAA,+BAAmB,EAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC;IAC9C,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;AACxC,CAAC;AAnBD,oCAmBC"}

package/dist/mcp/pool/lease.js

@@ -0,0 +1,55 @@
+"use strict";
+/**
+ * lease — the app's explicit, bounded hold on one conversation's client.
+ *
+ * Pattern: a handle that releases at most once, by hand or by `await using`.
+ * Role:    § 3.3 and § 5.2 of the design. `acquire` is for code that drives a
+ *          sequence itself, or a host that must keep a conversation's client
+ *          from eviction for a whole turn (it holds one around `agent.run()`, and
+ *          the provider then finds the same client). It is the only way to
+ *          protect a client between calls: there is no hidden grace period.
+ *
+ * The `acquire` that opened it was the operation; the held lease is not one. It
+ * is bounded by `maxLeaseMs`: past it, it is revoked at the next pool
+ * interaction and reported, and its next use throws `lease-expired`. Calls
+ * already in flight keep their own leases until they settle.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.leaseHandle = void 0;
+const lifecycle_js_1 = require("../../strategies/lifecycle.js");
+const boundTool_js_1 = require("./boundTool.js");
+const listTools_js_1 = require("./listTools.js");
+const record_js_1 = require("./record.js");
+/** The lease handle for `held`, on `key`'s client. */
+function leaseHandle(pool, key, held) {
+    const release = () => {
+        if (held.released)
+            return;
+        held.released = true;
+        pool.endLease(held);
+        pool.interact();
+    };
+    const handle = {
+        async tools(options) {
+            pool.interact();
+            if (held.revoked || held.released)
+                throw pool.refused('lease-expired');
+            const facts = new record_js_1.UseFacts(pool.settings.name, 'list');
+            try {
+                return await (0, listTools_js_1.listTools)(pool, key, options?.signal, facts);
+            }
+            catch (error) {
+                (0, boundTool_js_1.noteRefusal)(facts, error);
+                throw error;
+            }
+        },
+        release,
+        [lifecycle_js_1.ASYNC_DISPOSE]: async () => release(),
+    };
+    // The computed key gives TypeScript a symbol index rather than the one
+    // well-known member `AsyncDisposable` names; at runtime it IS
+    // `Symbol.asyncDispose` on every engine this package supports.
+    return handle;
+}
+exports.leaseHandle = leaseHandle;
+//# sourceMappingURL=lease.js.map

package/dist/mcp/pool/lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.js","sourceRoot":"","sources":["../../../src/mcp/pool/lease.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAEH,gEAA8D;AAE9D,iDAA6C;AAE7C,iDAA2C;AAE3C,2CAAuC;AAiBvC,sDAAsD;AACtD,SAAgB,WAAW,CAAC,IAAU,EAAE,GAAY,EAAE,IAAe;IACnE,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG;QACb,KAAK,CAAC,KAAK,CAAC,OAA2C;YACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACvE,MAAM,KAAK,GAAG,IAAI,oBAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACvD,IAAI,CAAC;gBACH,OAAO,MAAM,IAAA,wBAAS,EAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAA,0BAAW,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC1B,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO;QACP,CAAC,4BAAa,CAAC,EAAE,KAAK,IAAmB,EAAE,CAAC,OAAO,EAAE;KACtD,CAAC;IACF,uEAAuE;IACvE,8DAA8D;IAC9D,+DAA+D;IAC/D,OAAO,MAAiC,CAAC;AAC3C,CAAC;AA1BD,kCA0BC"}

package/dist/mcp/pool/listTools.js

@@ -0,0 +1,150 @@
+"use strict";
+/**
+ * listTools — one conversation's tools, bound to it: one listing operation.
+ *
+ * Pattern: one admitted operation per call, the provider's and the lease's alike.
+ * Role:    § 3.2 and § 6 of the design. A listing is one `list(ctx)` for one
+ *          conversation, admitted against `maxOperations`. Its setup — the open
+ *          of the key's client, the `tools/list` — runs inside its slot.
+ *
+ *   - PER CLIENT: the conversation's own client is opened (or reused) and its own
+ *     list served, listed again when it cannot be served as it stands.
+ *   - SHARED, under the app's contract: the plan is resolved and the context
+ *     computed WITHOUT opening anything; a current entry is served touching no
+ *     client (`client: 'not-needed'`); a listing already under way for it is
+ *     joined; otherwise the listing runs on THIS conversation's own client —
+ *     never in another conversation's session.
+ *   - THE CALLER'S CONTEXT AFTER EVERY WAIT: the app's names are asked again
+ *     after a joined listing and after this one's own (`Pool.ensureListed`); a
+ *     list is served only under the context the caller has at that moment, and
+ *     a moved context is resolved again — at most three rounds, then refused
+ *     (`binding-changed`).
+ *
+ * A refused listing never reaches the model as a tool result: it fails that
+ * iteration's tool discovery (`agentfootprint.tools.discovery_failed`), as any
+ * failing `ToolProvider` does. A list that cannot be read to its end
+ * (`McpToolListIncompleteError`, from the client's own discovery) is never
+ * served cut short.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listTools = void 0;
+const abort_js_1 = require("../../lib/abort.js");
+const toolSessions_js_1 = require("../../tools/toolSessions.js");
+const sessionEnded_js_1 = require("./sessionEnded.js");
+const boundTool_js_1 = require("./boundTool.js");
+const plan_js_1 = require("./plan.js");
+/** List `key`'s conversation's tools, bound to it, under one admitted operation. */
+async function listTools(pool, key, signal, facts) {
+    facts.keyHash = key.keyHash;
+    pool.interact();
+    const operation = pool.admit('listing', 'listing', signal);
+    try {
+        for (let round = 0; round < 3; round += 1) {
+            const current = pool.clients.currentFor(key.key);
+            let plan;
+            if (current === undefined) {
+                try {
+                    plan = (0, plan_js_1.resolvePlan)(pool.settings, key);
+                }
+                catch (cause) {
+                    throw pool.refused('init-failed', cause);
+                }
+            }
+            // A key with a client: the app's names asked again, so a changed
+            // authorization reaches this conversation as it would a new one.
+            const definitions = current === undefined ? plan : pool.refreshContext(current);
+            if (definitions.shared) {
+                const served = await sharedWithoutClient(pool, key, definitions.context, operation.signal);
+                if (served !== undefined) {
+                    // After that wait, the caller's names once more: served only under
+                    // the context they give now — otherwise resolved again.
+                    if (!callerStillIn(pool, key, plan, served.context))
+                        continue;
+                    facts.client = 'not-needed';
+                    facts.definitions = 'shared';
+                    facts.definitionsAgeMs = Math.max(0, pool.now() - served.list.listedAt);
+                    return bindAll(pool, key, served, undefined);
+                }
+            }
+            const client = await pool.leaseClient(key, operation, facts, plan);
+            let served;
+            try {
+                // Under the client's context of now, checked with no wait since.
+                served = await pool.ensureListed(client, operation);
+            }
+            catch (error) {
+                throw classifiedListing(pool, client, facts, error);
+            }
+            facts.definitions = served.shared ? 'shared' : 'listed';
+            if (served.shared)
+                facts.definitionsAgeMs = Math.max(0, pool.now() - served.list.listedAt);
+            return bindAll(pool, key, served, client);
+        }
+        // The app's names kept moving under this listing.
+        throw pool.refused('binding-changed');
+    }
+    finally {
+        operation.finish();
+    }
+}
+exports.listTools = listTools;
+/**
+ * Do the caller's names still give `context` — asked now? Through the key's
+ * client when it has one by now, else over the plan's configuration. False
+ * when `share` cannot answer: the next round says why.
+ */
+function callerStillIn(pool, key, plan, context) {
+    const current = pool.clients.currentFor(key.key);
+    if (current !== undefined)
+        return pool.contextHolds(current, context);
+    if (plan === undefined)
+        return false;
+    try {
+        return (0, plan_js_1.contextFor)(pool.settings, key, plan.configHash).context === context;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The shared entry for `plan`, when it can be served without touching a client
+ * — at once, or once a listing already under way for it is done.
+ */
+async function sharedWithoutClient(pool, key, context, signal) {
+    const entry = pool.shared.entryFor(context, key.tenant);
+    const servable = () => entry.list.servable(pool.now(), pool.settings.definitionTtlMs);
+    if (!servable() && entry.list.listing !== undefined) {
+        // Joined inside this operation's own slot; if it fails, this one lists itself.
+        await (0, abort_js_1.untilAborted)(entry.list.listing, signal).catch(() => undefined);
+    }
+    return servable() ? { list: entry.list, shared: true, context } : undefined;
+}
+/** Every definition of `served`, bound to `key` and to the list it came from. */
+function bindAll(pool, key, served, client) {
+    const base = {
+        key,
+        context: served.context,
+        shared: served.shared,
+        listId: served.list.id,
+        generation: served.list.generation,
+        ...(!served.shared && client !== undefined && { clientId: client.clientId }),
+    };
+    return served.list.all().map((definition) => (0, boundTool_js_1.boundTool)(pool, { ...base, definition }));
+}
+/** A listing that failed because the client's session expired or its handle was lost. */
+function classifiedListing(pool, client, facts, error) {
+    if (client.lost === 'expired') {
+        facts.client = 'expired';
+        facts.evidence = 'server-404';
+        return new sessionEnded_js_1.ServerEndedSessionError(pool.settings.name, client.clientId, error);
+    }
+    if (client.lost === 'handle-lost') {
+        facts.client = 'handle-lost';
+        facts.evidence = 'transport-forgot-handle';
+        return (0, toolSessions_js_1.isLocalSessionHandleLost)(error)
+            ? error
+            : new toolSessions_js_1.LocalSessionHandleLostError({ cause: error });
+    }
+    return error;
+}
+//# sourceMappingURL=listTools.js.map

package/dist/mcp/pool/listTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listTools.js","sourceRoot":"","sources":["../../../src/mcp/pool/listTools.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;AAEH,iDAAkD;AAElD,iEAAoG;AACpG,uDAA4D;AAC5D,iDAA2C;AAE3C,uCAAqE;AAKrE,oFAAoF;AAC7E,KAAK,UAAU,SAAS,CAC7B,IAAU,EACV,GAAY,EACZ,MAA+B,EAC/B,KAAe;IAEf,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;IAChB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,IAA4B,CAAC;YACjC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACH,IAAI,GAAG,IAAA,qBAAW,EAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBACzC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;YACD,iEAAiE;YACjE,iEAAiE;YACjE,MAAM,WAAW,GACf,OAAO,KAAK,SAAS,CAAC,CAAC,CAAE,IAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAC9E,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC3F,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,mEAAmE;oBACnE,wDAAwD;oBACxD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC;wBAAE,SAAS;oBAC9D,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC;oBAC5B,KAAK,CAAC,WAAW,GAAG,QAAQ,CAAC;oBAC7B,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACxE,OAAO,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACnE,IAAI,MAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,iEAAiE;gBACjE,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC;YACD,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;YACxD,IAAI,MAAM,CAAC,MAAM;gBAAE,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3F,OAAO,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,kDAAkD;QAClD,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AArDD,8BAqDC;AAED;;;;GAIG;AACH,SAAS,aAAa,CACpB,IAAU,EACV,GAAY,EACZ,IAA4B,EAC5B,OAAe;IAEf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,IAAA,oBAAU,EAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAU,EACV,GAAY,EACZ,OAAe,EACf,MAAmB;IAEnB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,GAAY,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC/F,IAAI,CAAC,QAAQ,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACpD,+EAA+E;QAC/E,MAAM,IAAA,uBAAY,EAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,iFAAiF;AACjF,SAAS,OAAO,CACd,IAAU,EACV,GAAY,EACZ,MAAkB,EAClB,MAAgC;IAEhC,MAAM,IAAI,GAAG;QACX,GAAG;QACH,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;QACtB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;QAClC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;KAC7E,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAA,wBAAS,EAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,yFAAyF;AACzF,SAAS,iBAAiB,CACxB,IAAU,EACV,MAAoB,EACpB,KAAe,EACf,KAAc;IAEd,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;QACzB,KAAK,CAAC,QAAQ,GAAG,YAAY,CAAC;QAC9B,OAAO,IAAI,yCAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAClC,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC;QAC7B,KAAK,CAAC,QAAQ,GAAG,yBAAyB,CAAC;QAC3C,OAAO,IAAA,0CAAwB,EAAC,KAAK,CAAC;YACpC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,6CAA2B,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/mcp/pool/mcpClientPool.js

@@ -0,0 +1,155 @@
+"use strict";
+/**
+ * mcpClientPool — a client per conversation, for one MCP server.
+ *
+ *   const orders = mcpClientPool({
+ *     name: 'orders',
+ *     transport: () =>
+ *       agentCoreRuntimeMcpTransport({ agentRuntimeArn, region, session: 'reuse', client: aws }),
+ *   });
+ *   const agent = Agent.create({ provider, model }).toolProvider(orders.toolProvider()).build();
+ *   await agent.run({ message, identity: { tenant, principal, conversationId } });
+ *
+ * Pattern: Facade over one state machine (`pool.ts`), its accounting (`work.ts`),
+ *          its definitions (`definitions.ts`) and its bound tools (`boundTool.ts`).
+ * Role:    `docs/design/2026-10-mcp-client-pool.md`. A `'reuse'` session costs a
+ *          cold start once per conversation instead of once per call — but only
+ *          if each conversation has a client of its own, opened once, bounded,
+ *          never closed while in use, ended remotely and said to be. This is
+ *          the one place that does all of it:
+ *
+ *   - one client per authenticated conversation, keyed by the library's
+ *     identity encoding of the identity the CALLER named;
+ *   - one open per key, under the pool's own signal and `initTimeoutMs`;
+ *   - three budgets — open clients, endings, outstanding operations — each
+ *     charged until the work under it has SETTLED, and `PoolFullError` at once
+ *     when one is full: there is no queue;
+ *   - tool definitions per client incarnation by default, shared only under the
+ *     app's declared contract, every tool re-checked after each wait and at the
+ *     send gate;
+ *   - every ending through `terminate()`, with the remote outcome reported, and
+ *     `close()` still only local.
+ *
+ * What it does not do: repeat a call, share anything across processes, bound a
+ * remote session it could not end, or make a server enforce per-user
+ * permissions.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mcpClientPool = void 0;
+const mcpClientUse_js_1 = require("../../tools/mcpClientUse.js");
+const toolSessions_js_1 = require("../../tools/toolSessions.js");
+const boundTool_js_1 = require("./boundTool.js");
+const identityKey_js_1 = require("./identityKey.js");
+const lease_js_1 = require("./lease.js");
+const listTools_js_1 = require("./listTools.js");
+const options_js_1 = require("./options.js");
+const pool_js_1 = require("./pool.js");
+const record_js_1 = require("./record.js");
+/**
+ * Build a pool for one MCP server.
+ *
+ * @throws TypeError when an option is missing, mistyped or out of range, or when
+ *   `connection` is given — here, when the pool is built
+ */
+function mcpClientPool(options) {
+    const settings = (0, options_js_1.readPoolOptions)(options);
+    const pool = new pool_js_1.Pool(settings);
+    const rules = {
+        requirePrincipal: settings.requirePrincipal,
+        requireTenant: settings.requireTenant,
+    };
+    let closing;
+    const provider = {
+        id: `mcp-pool:${settings.name}`,
+        list: async (ctx) => {
+            const facts = new record_js_1.UseFacts(settings.name, 'list');
+            try {
+                const key = (0, identityKey_js_1.poolKeyOf)(ctx.callerIdentity, rules);
+                if (typeof key === 'string')
+                    throw pool.refused(key);
+                return await (0, listTools_js_1.listTools)(pool, key, ctx.signal, facts);
+            }
+            catch (error) {
+                (0, boundTool_js_1.noteRefusal)(facts, error);
+                throw error;
+            }
+            finally {
+                // Filed against the context the tools slot passed; the slot emits it.
+                (0, mcpClientUse_js_1.fileListUse)(ctx, facts.toUse());
+            }
+        },
+    };
+    return {
+        name: settings.name,
+        toolProvider: () => provider,
+        async acquire(identity, acquireOptions) {
+            const key = (0, identityKey_js_1.poolKeyOf)(identity, rules);
+            if (typeof key === 'string')
+                throw pool.refused(key);
+            pool.interact();
+            const operation = pool.admit('acquire', 'open', acquireOptions?.signal);
+            try {
+                const facts = new record_js_1.UseFacts(settings.name, 'list');
+                for (let round = 0; round < 3; round += 1) {
+                    const client = await pool.leaseClient(key, operation, facts);
+                    // After that wait, before anything is held: the pool may have closed,
+                    // the caller may have gone, the client may have been named by a
+                    // terminate. Refused, the operation's own lease ends with it below.
+                    if (pool.closed)
+                        throw pool.refused('closed');
+                    operation.check();
+                    if (client.serving)
+                        return (0, lease_js_1.leaseHandle)(pool, key, pool.holdLease(client));
+                }
+                throw pool.refused('init-failed');
+            }
+            finally {
+                operation.finish();
+            }
+        },
+        async terminate(scope) {
+            assertScope(scope, settings.name);
+            pool.interact();
+            return pool.terminate((0, identityKey_js_1.scopeMatcher)(scope), 'terminated', toolSessions_js_1.TOOL_TEARDOWN_TIMEOUT_MS);
+        },
+        close() {
+            closing ??= pool.closeAll(toolSessions_js_1.TOOL_TEARDOWN_TIMEOUT_MS);
+            return closing;
+        },
+        settled: () => pool.settled(),
+        permissionsChanged(scope) {
+            assertFields(scope, settings.name, 'permissionsChanged');
+            pool.permissionsChanged(scope);
+        },
+        toolsChanged: () => pool.toolsChanged(),
+        sweep: () => pool.interact(),
+        stats: () => pool.stats(),
+    };
+}
+exports.mcpClientPool = mcpClientPool;
+/**
+ * A `terminate` scope names a principal or a conversation: ending every
+ * conversation of a whole tenant is `close()`'s job, and a mistyped scope must
+ * not do it.
+ */
+function assertScope(scope, name) {
+    assertFields(scope, name, 'terminate');
+    const named = (value) => value !== undefined && value !== '';
+    if (!named(scope.principal) && !named(scope.conversationId)) {
+        throw new TypeError(`mcpClientPool[${name}].terminate: the scope must name a principal or a conversation ` +
+            '({ tenant, principal } or { tenant, principal, conversationId }).');
+    }
+}
+/** Every field present is a string. Never quoted: a scope is an identity. */
+function assertFields(scope, name, door) {
+    if (scope === null || typeof scope !== 'object') {
+        throw new TypeError(`mcpClientPool[${name}].${door}: the scope must be an object.`);
+    }
+    for (const field of ['tenant', 'principal', 'conversationId']) {
+        const value = scope[field];
+        if (value !== undefined && typeof value !== 'string') {
+            throw new TypeError(`mcpClientPool[${name}].${door}: \`${field}\` must be a string when present.`);
+        }
+    }
+}
+//# sourceMappingURL=mcpClientPool.js.map

package/dist/mcp/pool/mcpClientPool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpClientPool.js","sourceRoot":"","sources":["../../../src/mcp/pool/mcpClientPool.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;AAGH,iEAA0D;AAC1D,iEAAuE;AAEvE,iDAA6C;AAC7C,qDAA2D;AAC3D,yCAA4D;AAC5D,iDAA2C;AAC3C,6CAAgG;AAChG,uCAAoD;AACpD,2CAAuC;AA4EvC;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,OAA6B;IACzD,MAAM,QAAQ,GAAG,IAAA,4BAAe,EAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,cAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG;QACZ,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,aAAa,EAAE,QAAQ,CAAC,aAAa;KACtC,CAAC;IACF,IAAI,OAA4D,CAAC;IAEjE,MAAM,QAAQ,GAAiB;QAC7B,EAAE,EAAE,YAAY,QAAQ,CAAC,IAAI,EAAE;QAC/B,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAClB,MAAM,KAAK,GAAG,IAAI,oBAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAA,0BAAS,EAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;gBACjD,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACrD,OAAO,MAAM,IAAA,wBAAS,EAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAA,0BAAW,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC1B,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,sEAAsE;gBACtE,IAAA,6BAAW,EAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;KACF,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,YAAY,EAAE,GAAG,EAAE,CAAC,QAAQ;QAC5B,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc;YACpC,MAAM,GAAG,GAAG,IAAA,0BAAS,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACvC,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,oBAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAClD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;oBAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;oBAC7D,sEAAsE;oBACtE,gEAAgE;oBAChE,oEAAoE;oBACpE,IAAI,IAAI,CAAC,MAAM;wBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAC9C,SAAS,CAAC,KAAK,EAAE,CAAC;oBAClB,IAAI,MAAM,CAAC,OAAO;wBAAE,OAAO,IAAA,sBAAW,EAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5E,CAAC;gBACD,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACpC,CAAC;oBAAS,CAAC;gBACT,SAAS,CAAC,MAAM,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,KAAK;YACnB,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAA,6BAAY,EAAC,KAAK,CAAC,EAAE,YAAY,EAAE,0CAAwB,CAAC,CAAC;QACrF,CAAC;QACD,KAAK;YACH,OAAO,KAAK,IAAI,CAAC,QAAQ,CAAC,0CAAwB,CAAC,CAAC;YACpD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE;QAC7B,kBAAkB,CAAC,KAAK;YACtB,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;YACzD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE;QACvC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE;QAC5B,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE;KAC1B,CAAC;AACJ,CAAC;AArED,sCAqEC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,KAAmB,EAAE,IAAY;IACpD,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,KAAyB,EAAW,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC;IAC1F,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,SAAS,CACjB,iBAAiB,IAAI,iEAAiE;YACpF,mEAAmE,CACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY,EAAE,IAAY;IAC9D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,SAAS,CAAC,iBAAiB,IAAI,KAAK,IAAI,gCAAgC,CAAC,CAAC;IACtF,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACvE,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,SAAS,CACjB,iBAAiB,IAAI,KAAK,IAAI,OAAO,KAAK,mCAAmC,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}