common-qa-mcp 0.1.0

package/dist/config.js

@@ -0,0 +1,211 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+const DEFAULT_CAPS = ['tc', 'suites', 'runs', 'objects', 'alm'];
+function asProvider(v) {
+    return v === 'walnut' || v === 'simplifyqa' ? v : undefined;
+}
+function asWalnutAuth(v) {
+    return v === 'key' || v === 'jwt' ? v : undefined;
+}
+function asCaps(v) {
+    if (v == null)
+        return undefined;
+    const parts = Array.isArray(v) ? v.map(String) : String(v).split(',');
+    const cleaned = parts.map((s) => s.trim()).filter(Boolean);
+    return cleaned.length ? new Set(cleaned) : undefined;
+}
+function asPort(v) {
+    if (v == null || v === '')
+        return undefined;
+    const n = Number(v);
+    return Number.isFinite(n) ? n : undefined;
+}
+function asString(v) {
+    return typeof v === 'string' && v.length > 0 ? v : undefined;
+}
+// Shared normalizer for the two raw, loosely-typed sources (env vars and the
+// JSON config file) that both describe a connection using the same field set.
+function normalizeLayer(raw) {
+    const layer = {};
+    const provider = asProvider(raw['provider']);
+    if (provider)
+        layer.provider = provider;
+    const url = asString(raw['url']);
+    if (url)
+        layer.url = url;
+    const token = asString(raw['token']);
+    if (token)
+        layer.token = token;
+    const projectId = asString(raw['projectId']);
+    if (projectId)
+        layer.projectId = projectId;
+    const customerId = asString(raw['customerId']);
+    if (customerId)
+        layer.customerId = customerId;
+    const moduleId = asString(raw['moduleId']);
+    if (moduleId)
+        layer.moduleId = moduleId;
+    const walnutAuth = asWalnutAuth(raw['walnutAuth']);
+    if (walnutAuth)
+        layer.walnutAuth = walnutAuth;
+    const caps = asCaps(raw['caps']);
+    if (caps)
+        layer.caps = caps;
+    const port = asPort(raw['port']);
+    if (port !== undefined)
+        layer.port = port;
+    const walnutUiOrigin = asString(raw['walnutUiOrigin']);
+    if (walnutUiOrigin)
+        layer.walnutUiOrigin = walnutUiOrigin;
+    const agentUrl = asString(raw['agentUrl']);
+    if (agentUrl)
+        layer.agentUrl = agentUrl;
+    return layer;
+}
+function parseEnvLayer(env) {
+    return normalizeLayer({
+        provider: env['QA_MCP_PROVIDER'],
+        url: env['QA_MCP_URL'],
+        token: env['QA_MCP_TOKEN'],
+        projectId: env['QA_MCP_PROJECT_ID'],
+        customerId: env['QA_MCP_CUSTOMER_ID'],
+        moduleId: env['QA_MCP_MODULE_ID'],
+        walnutAuth: env['QA_MCP_WALNUT_AUTH'],
+        caps: env['QA_MCP_CAPS'],
+        port: env['QA_MCP_PORT'],
+        walnutUiOrigin: env['QA_MCP_WALNUT_UI'],
+        agentUrl: env['QA_MCP_AGENT_URL'],
+    });
+}
+// Reads the named connection out of ~/.common-qa-mcp/config.json. An absent
+// or malformed file (or a missing connection name) is just an empty layer —
+// this must never throw, since it runs on every server boot.
+function readConfigFileLayer(connectionName) {
+    try {
+        const filePath = path.join(os.homedir(), '.common-qa-mcp', 'config.json');
+        const raw = fs.readFileSync(filePath, 'utf8');
+        const parsed = JSON.parse(raw);
+        const name = connectionName ?? parsed.default ?? 'default';
+        const entry = parsed.connections?.[name];
+        return entry ? normalizeLayer(entry) : {};
+    }
+    catch {
+        return {};
+    }
+}
+// Copies only the keys `layer` actually defines onto `target`, so later,
+// lower-priority-but-earlier-applied layers are never clobbered by absent keys.
+function applyLayer(target, layer) {
+    for (const key of Object.keys(layer)) {
+        const value = layer[key];
+        if (value !== undefined)
+            target[key] = value;
+    }
+}
+// Only url + token are required to be CONNECTED. projectId is intentionally NOT here: a session may
+// connect with no project selected, then the user picks one at runtime (list_projects ->
+// qa_switch_project). Hardcoding a project in config defeats the "any project, any client" model.
+const REQUIRED_FIELDS = [
+    ['url', 'QA_MCP_URL'],
+    ['token', 'QA_MCP_TOKEN'],
+];
+/**
+ * Resolution order (spec §12): defaults -> ~/.common-qa-mcp/config.json
+ * (named connections; cliFlags.connection selects) -> QA_MCP_* env -> CLI flags.
+ * Each layer only overrides keys it actually sets.
+ *
+ * Credentials (url/token) are optional overall:
+ *  - BOTH url+token ABSENT -> OfflineQaConfig, no throw. The normal, supported way
+ *    to run with no backend at all (author drafts, hand off to the editor).
+ *  - ONE of url/token present but not the other -> misconfiguration, throws naming
+ *    the missing var.
+ *  - url+token present -> ConnectedQaConfig. projectId is OPTIONAL: absent means
+ *    "connected, no project selected yet" and the user chooses one at runtime.
+ * Never logs `token` -- callers must go through `mask()` from log.ts if they log
+ * config at all.
+ */
+export function resolveConfig(env, cliFlags = {}) {
+    const merged = {
+        walnutAuth: 'key',
+        caps: new Set(DEFAULT_CAPS),
+    };
+    applyLayer(merged, readConfigFileLayer(cliFlags.connection));
+    applyLayer(merged, parseEnvLayer(env));
+    applyLayer(merged, cliFlags);
+    const missing = REQUIRED_FIELDS.filter(([key]) => !merged[key]).map(([, envVar]) => envVar);
+    if (missing.length === REQUIRED_FIELDS.length) {
+        // No credentials supplied at all -- offline is the intended, error-free outcome.
+        return { ...merged, mode: 'offline' };
+    }
+    if (missing.length) {
+        throw new Error(`Missing required configuration: set ${missing.join(', ')} (via environment variables, ` +
+            `~/.common-qa-mcp/config.json, or CLI flags).`);
+    }
+    return { ...merged, mode: 'connected' };
+}
+// A probe that throws (DNS failure, TLS failure, timeout, connection refused) is not a
+// signal either way -- it collapses to "no response", same as never matching.
+async function safeFetch(fetchImpl, url, init) {
+    try {
+        return await fetchImpl(url, init);
+    }
+    catch {
+        return null;
+    }
+}
+// A 200 only counts as a match -- for EITHER probe -- when it's actually JSON: a SPA
+// catch-all (or any host that 200s everything, GET or POST) must not be mistaken for a
+// product match just because it answered with 200. The content-type must say JSON AND the
+// body must actually parse. Shared by both probes so neither gets a weaker bar than the other.
+async function isJson200(res) {
+    if (!res || res.status !== 200)
+        return false;
+    const contentType = res.headers.get('content-type') ?? '';
+    if (!contentType.toLowerCase().includes('application/json'))
+        return false;
+    try {
+        await res.json();
+        return true;
+    }
+    catch {
+        return false; // content-type lied -- body didn't actually parse as JSON
+    }
+}
+/**
+ * Best-effort provider auto-detect (spec §3: explicit config always wins over this).
+ * Runs both probes concurrently (never short-circuits) and only returns a provider when
+ * exactly one of them gives a confident match. Returns null on any ambiguity -- including
+ * ties -- so the caller surfaces `describeAmbiguousProvider` instead of guessing.
+ */
+export async function detectProvider(url, fetchImpl = fetch) {
+    const [health, search] = await Promise.all([
+        safeFetch(fetchImpl, `${url}/api/health`),
+        safeFetch(fetchImpl, `${url}/pm/project/search`, { method: 'POST' }),
+    ]);
+    // Symmetric rule for both probes: a 200 only counts when it's confirmed JSON (isJson200);
+    // a bare 401 only counts with corroboration; anything else (404, other statuses, a throw
+    // already collapsed to null by safeFetch) is no-match.
+    const isWalnut = await isJson200(health);
+    // A bare 401 on the search probe is only trusted as an SQA-specific signal when the
+    // health probe didn't hit the identical status -- if BOTH the walnut-only health route
+    // and the SQA search route 401 identically, that's a blanket auth gate on this host, not
+    // evidence of SQA (a genuine SQA host has no reason to 401 a route it doesn't implement).
+    // Walnut has no equivalent 401 path: its match is JSON-only, so it needs no such rule.
+    const isSimplifyQa = (await isJson200(search)) || (search?.status === 401 && health?.status !== 401);
+    if (isWalnut && !isSimplifyQa)
+        return 'walnut';
+    if (isSimplifyQa && !isWalnut)
+        return 'simplifyqa';
+    return null;
+}
+/**
+ * The exact message a caller (the adapter factory, Task 5/6/11/12) should surface when
+ * `detectProvider` returns null -- spec §3: "on ambiguity, error asking for QA_MCP_PROVIDER".
+ * `detectProvider` itself never throws; this is a pure formatter for whoever does.
+ */
+export function describeAmbiguousProvider(url) {
+    return (`Could not auto-detect the QA provider at ${url}. ` +
+        `Set QA_MCP_PROVIDER to "walnut" or "simplifyqa" explicitly.`);
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAyD7B,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;AAKhE,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,SAAS,YAAY,CAAC,CAAU;IAC9B,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,SAAS,MAAM,CAAC,CAAU;IACxB,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,MAAM,CAAC,CAAU;IACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,6EAA6E;AAC7E,8EAA8E;AAC9E,SAAS,cAAc,CAAC,GAA4B;IAClD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7C,IAAI,QAAQ;QAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACjC,IAAI,GAAG;QAAE,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC;IACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAC/B,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7C,IAAI,SAAS;QAAE,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3C,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/C,IAAI,UAAU;QAAE,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;IAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3C,IAAI,QAAQ;QAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACxC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACnD,IAAI,UAAU;QAAE,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACjC,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAC1C,MAAM,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACvD,IAAI,cAAc;QAAE,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC;IAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3C,IAAI,QAAQ;QAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,GAAsB;IAC3C,OAAO,cAAc,CAAC;QACpB,QAAQ,EAAE,GAAG,CAAC,iBAAiB,CAAC;QAChC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC;QACtB,KAAK,EAAE,GAAG,CAAC,cAAc,CAAC;QAC1B,SAAS,EAAE,GAAG,CAAC,mBAAmB,CAAC;QACnC,UAAU,EAAE,GAAG,CAAC,oBAAoB,CAAC;QACrC,QAAQ,EAAE,GAAG,CAAC,kBAAkB,CAAC;QACjC,UAAU,EAAE,GAAG,CAAC,oBAAoB,CAAC;QACrC,IAAI,EAAE,GAAG,CAAC,aAAa,CAAC;QACxB,IAAI,EAAE,GAAG,CAAC,aAAa,CAAC;QACxB,cAAc,EAAE,GAAG,CAAC,kBAAkB,CAAC;QACvC,QAAQ,EAAE,GAAG,CAAC,kBAAkB,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAID,4EAA4E;AAC5E,4EAA4E;AAC5E,6DAA6D;AAC7D,SAAS,mBAAmB,CAAC,cAAuB;IAClD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;QAChD,MAAM,IAAI,GAAG,cAAc,IAAI,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,gFAAgF;AAChF,SAAS,UAAU,CAAmB,MAAS,EAAE,KAAiB;IAChE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAmB,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAmB,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,yFAAyF;AACzF,kGAAkG;AAClG,MAAM,eAAe,GAAoC;IACvD,CAAC,KAAK,EAAE,YAAY,CAAC;IACrB,CAAC,OAAO,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,aAAa,CAAC,GAAsB,EAAE,WAA8B,EAAE;IACpF,MAAM,MAAM,GAAyE;QACnF,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC;KAC5B,CAAC;IAEF,UAAU,CAAC,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7D,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE7B,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAE5F,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;QAC9C,iFAAiF;QACjF,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,SAAS,EAAqB,CAAC;IAC3D,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,uCAAuC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B;YACtF,8CAA8C,CACjD,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,WAAW,EAAuB,CAAC;AAC/D,CAAC;AAED,uFAAuF;AACvF,8EAA8E;AAC9E,KAAK,UAAU,SAAS,CAAC,SAAuB,EAAE,GAAW,EAAE,IAAkB;IAC/E,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,uFAAuF;AACvF,0FAA0F;AAC1F,+FAA+F;AAC/F,KAAK,UAAU,SAAS,CAAC,GAAoB;IAC3C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,0DAA0D;IAC1E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,YAA0B,KAAK;IAE/B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzC,SAAS,CAAC,SAAS,EAAE,GAAG,GAAG,aAAa,CAAC;QACzC,SAAS,CAAC,SAAS,EAAE,GAAG,GAAG,oBAAoB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;KACrE,CAAC,CAAC;IAEH,0FAA0F;IAC1F,yFAAyF;IACzF,uDAAuD;IACvD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACzC,oFAAoF;IACpF,uFAAuF;IACvF,yFAAyF;IACzF,0FAA0F;IAC1F,uFAAuF;IACvF,MAAM,YAAY,GAAG,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,GAAG,IAAI,MAAM,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC;IAErG,IAAI,QAAQ,IAAI,CAAC,YAAY;QAAE,OAAO,QAAQ,CAAC;IAC/C,IAAI,YAAY,IAAI,CAAC,QAAQ;QAAE,OAAO,YAAY,CAAC;IACnD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACnD,OAAO,CACL,4CAA4C,GAAG,IAAI;QACnD,6DAA6D,CAC9D,CAAC;AACJ,CAAC"}

package/dist/connection.d.ts

@@ -0,0 +1,101 @@
+/**
+ * The live backend connection: URL + token supplied AT RUNTIME by the user.
+ *
+ * WHY THIS EXISTS. `resolveConfig()` reads credentials once, from the environment or
+ * `~/.common-qa-mcp/config.json`, and `createAdapter()` is called once at mount -- so connecting
+ * meant restarting the agent with env vars set. That is the wrong shape for the product: an AI
+ * client is supposed to connect by handing the MCP an app URL and a token, in conversation
+ * ("connect to https://… with this token"), and switch project or org without a restart.
+ *
+ * So the resolved config becomes the STARTING point and this holder owns what is current. Tools
+ * read `connection.adapter()` per call instead of closing over one built at mount; when there are
+ * no credentials it is `null` and the offline authoring path (record -> preview -> draft, no
+ * backend, no network) works exactly as before -- that mode is the whole verified surface and must
+ * never require a token.
+ *
+ * WHAT IT DELIBERATELY DOES NOT DO:
+ *  - No credential on disk. The TOKEN lives in memory for the life of the process. Persisting it
+ *    would put a credential in a file this feature has no mandate to manage; `~/.common-qa-mcp/
+ *    config.json` already exists for users who WANT that, and it is still read at boot. (The
+ *    last-selected projectId — a NON-secret id — IS remembered across restarts via projectStore,
+ *    so a client relaunch doesn't drop you back to project-less; the token is never written.)
+ *  - No logging of the token, ever -- `describe()` reports its presence and length, nothing else.
+ *  - No optimistic accept: `connect()` VALIDATES against the backend and keeps the previous
+ *    connection when validation fails, so a typo cannot silently break a working session.
+ *
+ * SCOPE: process-wide, not per MCP client. The agent is a single-user local process (loopback-bound,
+ * one desktop user), so one current connection is the honest model; two AI clients pointed at
+ * different orgs through the same agent would share it. Documented rather than pretended away.
+ */
+import type { ProviderAdapter } from './adapters/types.js';
+import type { QaConfig } from './config.js';
+export interface ConnectRequest {
+    /** Walnut app URL, e.g. `https://app.walnut.ai` or a self-hosted origin. */
+    url: string;
+    /** Bearer token: a Walnut session JWT, or an MCP API key. */
+    token: string;
+    /** Required for a JWT (the token alone carries no project context); optional for an API key,
+     *  which is already project-scoped server-side. */
+    projectId?: string;
+    /** `jwt` (default) sends `Authorization` + `x-project-id`; `key` sends only `Authorization`.
+     *  Mirrors WalnutAdapter.headers(). */
+    auth?: 'jwt' | 'key';
+    /** Which product to route to. `walnut` (default) uses the in-process Walnut adapter (REST);
+     *  `simplifyqa` routes to the SQA agent MCP (a remote MCP) — `url` is then its /mcp endpoint. */
+    product?: 'walnut' | 'simplifyqa';
+}
+export interface ConnectionDescription {
+    mode: 'offline' | 'connected';
+    url?: string;
+    projectId?: string;
+    auth?: 'jwt' | 'key';
+    /** Presence + length only. The value is never logged or returned. */
+    token?: string;
+    /** Where the current credentials came from, so a user can tell a stale env var from what they
+     *  just typed. */
+    source: 'none' | 'startup-config' | 'runtime-connect';
+}
+export declare class QaConnection {
+    private readonly startup;
+    private current;
+    private source;
+    private cached;
+    /** The config the adapter in `cached` was built from -- rebuild only when it actually changes. */
+    private cachedFor;
+    constructor(startup: QaConfig);
+    /** The adapter for the CURRENT credentials, or null when offline. Call per request. */
+    adapter(): ProviderAdapter | null;
+    config(): QaConfig;
+    describe(): ConnectionDescription;
+    /**
+     * Validate `req` against the backend and adopt it on success.
+     *
+     * Validation is `adapter.info()` -- `GET /api/projects/:id` -- which is the one call that proves
+     * all three parts at once: the URL is reachable, the token is accepted, and the project exists
+     * and is visible to that token. On failure NOTHING changes.
+     */
+    connect(req: ConnectRequest): Promise<{
+        ok: true;
+        info: unknown;
+    } | {
+        ok: false;
+        error: string;
+    }>;
+    /**
+     * Switch to a different project on the CURRENT connection -- same url/token/product/auth, only the
+     * projectId changes. Reuses connect()'s validate-before-adopt contract (probe.info()), so a bad id
+     * leaves the working connection untouched. Requires a connected session; offline callers are told
+     * to qa_connect first. Lets an AI client change project WITHOUT re-sending credentials.
+     */
+    switchProject(projectId: string): Promise<{
+        ok: true;
+        info: unknown;
+    } | {
+        ok: false;
+        error: string;
+    }>;
+    /** Back to the credentials the process started with (usually none). Offline authoring is
+     *  unaffected either way -- it never used a connection. */
+    disconnect(): void;
+}
+//# sourceMappingURL=connection.d.ts.map

package/dist/connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAqB,QAAQ,EAAE,MAAM,aAAa,CAAC;AAM/D,MAAM,WAAW,cAAc;IAC7B,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd;uDACmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;2CACuC;IACvC,IAAI,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACrB;qGACiG;IACjG,OAAO,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC;CACnC;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,SAAS,GAAG,WAAW,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACrB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;sBACkB;IAClB,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;CACvD;AAED,qBAAa,YAAY;IAOX,OAAO,CAAC,QAAQ,CAAC,OAAO;IANpC,OAAO,CAAC,OAAO,CAAW;IAC1B,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,MAAM,CAAyB;IACvC,kGAAkG;IAClG,OAAO,CAAC,SAAS,CAAyB;gBAEb,OAAO,EAAE,QAAQ;IAoB9C,uFAAuF;IACvF,OAAO,IAAI,eAAe,GAAG,IAAI;IAOjC,MAAM,IAAI,QAAQ;IAIlB,QAAQ,IAAI,qBAAqB;IAajC;;;;;;OAMG;IACG,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAwDvG;;;;;OAKG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IA2B3G;+DAC2D;IAC3D,UAAU,IAAI,IAAI;CAOnB"}

package/dist/connection.js

@@ -0,0 +1,190 @@
+/**
+ * The live backend connection: URL + token supplied AT RUNTIME by the user.
+ *
+ * WHY THIS EXISTS. `resolveConfig()` reads credentials once, from the environment or
+ * `~/.common-qa-mcp/config.json`, and `createAdapter()` is called once at mount -- so connecting
+ * meant restarting the agent with env vars set. That is the wrong shape for the product: an AI
+ * client is supposed to connect by handing the MCP an app URL and a token, in conversation
+ * ("connect to https://… with this token"), and switch project or org without a restart.
+ *
+ * So the resolved config becomes the STARTING point and this holder owns what is current. Tools
+ * read `connection.adapter()` per call instead of closing over one built at mount; when there are
+ * no credentials it is `null` and the offline authoring path (record -> preview -> draft, no
+ * backend, no network) works exactly as before -- that mode is the whole verified surface and must
+ * never require a token.
+ *
+ * WHAT IT DELIBERATELY DOES NOT DO:
+ *  - No credential on disk. The TOKEN lives in memory for the life of the process. Persisting it
+ *    would put a credential in a file this feature has no mandate to manage; `~/.common-qa-mcp/
+ *    config.json` already exists for users who WANT that, and it is still read at boot. (The
+ *    last-selected projectId — a NON-secret id — IS remembered across restarts via projectStore,
+ *    so a client relaunch doesn't drop you back to project-less; the token is never written.)
+ *  - No logging of the token, ever -- `describe()` reports its presence and length, nothing else.
+ *  - No optimistic accept: `connect()` VALIDATES against the backend and keeps the previous
+ *    connection when validation fails, so a typo cannot silently break a working session.
+ *
+ * SCOPE: process-wide, not per MCP client. The agent is a single-user local process (loopback-bound,
+ * one desktop user), so one current connection is the honest model; two AI clients pointed at
+ * different orgs through the same agent would share it. Documented rather than pretended away.
+ */
+import { createAdapter } from './adapters/factory.js';
+import { readLastProject, writeLastProject } from './projectStore.js';
+import { createLogger } from './vendor/logger.js';
+const logger = createLogger('QaConnection');
+export class QaConnection {
+    constructor(startup) {
+        this.startup = startup;
+        /** The config the adapter in `cached` was built from -- rebuild only when it actually changes. */
+        this.cachedFor = null;
+        this.current = startup;
+        this.source = startup.mode === 'connected' ? 'startup-config' : 'none';
+        this.cached = null;
+        // Restore the last-selected project across restarts. The startup config carries url + token
+        // but usually NO project, so a client relaunch otherwise drops the connection back to
+        // project-less — which breaks downstream per-project model resolution for AI recording. If we
+        // booted connected to a backend we have a remembered project for, adopt it. Optimistic (no
+        // async validate here): the id was validated when it was saved via switchProject/connect; if it
+        // is since stale, project-scoped calls fail cleanly and the user can switch — the connection
+        // itself is fine.
+        if (startup.mode === 'connected' && !startup.projectId) {
+            const remembered = readLastProject(startup.url);
+            if (remembered) {
+                this.current = { ...startup, projectId: remembered };
+                logger.info(`Restored last-selected project ${remembered} for ${startup.url}`);
+            }
+        }
+    }
+    /** The adapter for the CURRENT credentials, or null when offline. Call per request. */
+    adapter() {
+        if (this.cachedFor === this.current)
+            return this.cached;
+        this.cached = createAdapter(this.current);
+        this.cachedFor = this.current;
+        return this.cached;
+    }
+    config() {
+        return this.current;
+    }
+    describe() {
+        const c = this.current;
+        if (c.mode !== 'connected')
+            return { mode: 'offline', source: this.source };
+        return {
+            mode: 'connected',
+            url: c.url,
+            projectId: c.projectId ?? '', // '' = connected but no project selected yet
+            auth: c.walnutAuth === 'key' ? 'key' : 'jwt',
+            token: `present (${c.token.length} chars)`,
+            source: this.source,
+        };
+    }
+    /**
+     * Validate `req` against the backend and adopt it on success.
+     *
+     * Validation is `adapter.info()` -- `GET /api/projects/:id` -- which is the one call that proves
+     * all three parts at once: the URL is reachable, the token is accepted, and the project exists
+     * and is visible to that token. On failure NOTHING changes.
+     */
+    async connect(req) {
+        const url = req.url?.trim();
+        // Tolerate a pasted/`headers.Authorization`-style "Bearer <token>": the field is labelled
+        // "Bearer token" and MCP-client header values carry the scheme, but we add `Bearer ` ourselves
+        // downstream -- so keep only the raw credential and never send "Bearer Bearer ...".
+        const token = (req.token ?? '').trim().replace(/^Bearer\s+/i, '').trim();
+        if (!url || !token)
+            return { ok: false, error: 'url and token are both required.' };
+        if (!/^https?:\/\//i.test(url)) {
+            return { ok: false, error: `url must be absolute and start with http:// or https:// -- got "${url}".` };
+        }
+        const product = req.product === 'simplifyqa' ? 'simplifyqa' : 'walnut';
+        const auth = req.auth === 'key' ? 'key' : 'jwt';
+        const projectId = req.projectId?.trim() ?? '';
+        // The JWT-needs-projectId rule is Walnut-specific (it sends x-project-id). SQA forwards the token
+        // to its own MCP, which resolves tenant context however it likes, so we don't force it there.
+        if (product === 'walnut' && auth === 'jwt' && !projectId) {
+            return {
+                ok: false,
+                error: 'projectId is required with a JWT (the token alone carries no project context). '
+                    + 'Pass projectId, or auth:"key" if this is an MCP API key.',
+            };
+        }
+        const candidate = {
+            ...this.startup,
+            mode: 'connected',
+            provider: product,
+            url: url.replace(/\/+$/, ''),
+            token,
+            // An API key is project-scoped server-side; keep whatever the startup config had so
+            // project-scoped helpers still have something to name, but never require it.
+            projectId: projectId || (this.startup.projectId ?? ''),
+            walnutAuth: auth,
+        };
+        const probe = createAdapter(candidate);
+        if (!probe)
+            return { ok: false, error: `Could not build an adapter for product "${product}".` };
+        try {
+            const info = await probe.info();
+            this.current = candidate;
+            this.cached = probe;
+            this.cachedFor = candidate;
+            this.source = 'runtime-connect';
+            // Remember the project so a later restart reboots into it (see projectStore). Only when one
+            // was actually chosen — a key-scoped connect may carry none.
+            if (candidate.projectId)
+                writeLastProject(candidate.url, candidate.projectId);
+            // URL and project only -- never the token, not even truncated.
+            logger.info(`Connected to ${candidate.url} (project ${candidate.projectId || '(key-scoped)'}, auth ${auth})`);
+            return { ok: true, info };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            logger.warn(`connect rejected for ${url}: ${message}`);
+            return { ok: false, error: message };
+        }
+    }
+    /**
+     * Switch to a different project on the CURRENT connection -- same url/token/product/auth, only the
+     * projectId changes. Reuses connect()'s validate-before-adopt contract (probe.info()), so a bad id
+     * leaves the working connection untouched. Requires a connected session; offline callers are told
+     * to qa_connect first. Lets an AI client change project WITHOUT re-sending credentials.
+     */
+    async switchProject(projectId) {
+        const pid = projectId?.trim();
+        if (!pid)
+            return { ok: false, error: 'projectId is required.' };
+        const c = this.current;
+        if (c.mode !== 'connected') {
+            return { ok: false, error: 'Not connected — use qa_connect first, then switch project.' };
+        }
+        const candidate = { ...c, projectId: pid };
+        const probe = createAdapter(candidate);
+        if (!probe)
+            return { ok: false, error: `Could not build an adapter for project "${pid}".` };
+        try {
+            const info = await probe.info();
+            this.current = candidate;
+            this.cached = probe;
+            this.cachedFor = candidate;
+            this.source = 'runtime-connect';
+            // Remember it so a restart reboots into this project instead of project-less (projectStore).
+            writeLastProject(candidate.url, pid);
+            logger.info(`Switched to project ${pid}`);
+            return { ok: true, info };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            logger.warn(`switchProject rejected for ${pid}: ${message}`);
+            return { ok: false, error: message };
+        }
+    }
+    /** Back to the credentials the process started with (usually none). Offline authoring is
+     *  unaffected either way -- it never used a connection. */
+    disconnect() {
+        this.current = this.startup;
+        this.source = this.startup.mode === 'connected' ? 'startup-config' : 'none';
+        this.cached = null;
+        this.cachedFor = null;
+        logger.info('Disconnected — back to the startup configuration');
+    }
+}
+//# sourceMappingURL=connection.js.map

package/dist/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAGtD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;AA8B5C,MAAM,OAAO,YAAY;IAOvB,YAA6B,OAAiB;QAAjB,YAAO,GAAP,OAAO,CAAU;QAH9C,kGAAkG;QAC1F,cAAS,GAAoB,IAAI,CAAC;QAGxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,4FAA4F;QAC5F,sFAAsF;QACtF,8FAA8F;QAC9F,2FAA2F;QAC3F,gGAAgG;QAChG,6FAA6F;QAC7F,kBAAkB;QAClB,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACvD,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,CAAC,kCAAkC,UAAU,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED,uFAAuF;IACvF,OAAO;QACL,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACxD,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9B,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,QAAQ;QACN,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5E,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE,6CAA6C;YAC3E,IAAI,EAAE,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;YAC5C,KAAK,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,MAAM,SAAS;YAC1C,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,GAAmB;QAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAC5B,0FAA0F;QAC1F,+FAA+F;QAC/F,oFAAoF;QACpF,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;QACpF,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mEAAmE,GAAG,IAAI,EAAE,CAAC;QAC1G,CAAC;QACD,MAAM,OAAO,GAA4B,GAAG,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;QAChG,MAAM,IAAI,GAAkB,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/D,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC9C,kGAAkG;QAClG,8FAA8F;QAC9F,IAAI,OAAO,KAAK,QAAQ,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACzD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,iFAAiF;sBACpF,0DAA0D;aAC/D,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAsB;YACnC,GAAI,IAAI,CAAC,OAA6B;YACtC,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,OAAO;YACjB,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5B,KAAK;YACL,oFAAoF;YACpF,6EAA6E;YAC7E,SAAS,EAAE,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;YACtD,UAAU,EAAE,IAAI;SACjB,CAAC;QAEF,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2CAA2C,OAAO,IAAI,EAAE,CAAC;QAChG,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC;YAChC,4FAA4F;YAC5F,6DAA6D;YAC7D,IAAI,SAAS,CAAC,SAAS;gBAAE,gBAAgB,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YAC9E,+DAA+D;YAC/D,MAAM,CAAC,IAAI,CAAC,gBAAgB,SAAS,CAAC,GAAG,aAAa,SAAS,CAAC,SAAS,IAAI,cAAc,UAAU,IAAI,GAAG,CAAC,CAAC;YAC9G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,wBAAwB,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC;YACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,MAAM,GAAG,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;QAChE,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4DAA4D,EAAE,CAAC;QAC5F,CAAC;QACD,MAAM,SAAS,GAAsB,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QAC9D,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2CAA2C,GAAG,IAAI,EAAE,CAAC;QAC5F,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC;YAChC,6FAA6F;YAC7F,gBAAgB,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YAC1C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,8BAA8B,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IAED;+DAC2D;IAC3D,UAAU;QACR,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAClE,CAAC;CACF"}