ocr-provenance-mcp 1.0.0

package/dist/models/provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.js","sourceRoot":"","sources":["../../src/models/provenance.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,CAAN,IAAY,cA8BX;AA9BD,WAAY,cAAc;IACxB,qCAAqC;IACrC,uCAAqB,CAAA;IAErB,+CAA+C;IAC/C,2CAAyB,CAAA;IAEzB,0CAA0C;IAC1C,iCAAe,CAAA;IAEf,iEAAiE;IACjE,iCAAe,CAAA;IAEf,wDAAwD;IACxD,qDAAmC,CAAA;IAEnC,0EAA0E;IAC1E,2CAAyB,CAAA;IAEzB,uDAAuD;IACvD,yCAAuB,CAAA;IAEvB,oEAAoE;IACpE,2CAAyB,CAAA;IAEzB,8DAA8D;IAC9D,2CAAyB,CAAA;IAEzB,yFAAyF;IACzF,yCAAuB,CAAA;AACzB,CAAC,EA9BW,cAAc,KAAd,cAAc,QA8BzB;AAED;;;;GAIG;AACH,gEAAgE;AAChE,yFAAyF;AACzF,MAAM,CAAC,MAAM,sBAAsB,GAAmC;IACpE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC5B,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;IAC9B,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;IACzB,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,EAAY,wCAAwC;IAC7E,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,cAAc;IACnD,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,EAAO,wCAAwC;IAC7E,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,EAAQ,+DAA+D;IACpG,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,EAAS,wCAAwC;IAC/E,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,EAAS,wCAAwC;IAC/E,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAQ,wEAAwE;CAC9G,CAAC"}

package/dist/models/uploaded-file.d.ts

@@ -0,0 +1,20 @@
+/**
+ * UploadedFile interface for Datalab cloud file uploads
+ * Provenance depth: 0 (root level, parallel to DOCUMENT)
+ */
+export interface UploadedFile {
+    id: string;
+    local_path: string;
+    file_name: string;
+    file_hash: string;
+    file_size: number;
+    content_type: string;
+    datalab_file_id: string | null;
+    datalab_reference: string | null;
+    upload_status: 'pending' | 'uploading' | 'confirming' | 'complete' | 'failed';
+    error_message: string | null;
+    created_at: string;
+    completed_at: string | null;
+    provenance_id: string;
+}
+//# sourceMappingURL=uploaded-file.d.ts.map

package/dist/models/uploaded-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploaded-file.d.ts","sourceRoot":"","sources":["../../src/models/uploaded-file.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,EAAE,SAAS,GAAG,WAAW,GAAG,YAAY,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC9E,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;CACvB"}

package/dist/models/uploaded-file.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=uploaded-file.js.map

package/dist/models/uploaded-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploaded-file.js","sourceRoot":"","sources":["../../src/models/uploaded-file.ts"],"names":[],"mappings":""}

package/dist/server/errors.d.ts

@@ -0,0 +1,93 @@
+/**
+ * MCP Server Error Handling
+ *
+ * FAIL FAST: All errors throw immediately with descriptive context.
+ * NO graceful degradation, NO fallbacks.
+ *
+ * @module server/errors
+ */
+/**
+ * Error categories for MCP tool errors
+ * Each category maps to specific failure modes for debugging
+ */
+export type ErrorCategory = 'VALIDATION_ERROR' | 'DATABASE_NOT_FOUND' | 'DATABASE_NOT_SELECTED' | 'DATABASE_ALREADY_EXISTS' | 'DOCUMENT_NOT_FOUND' | 'PROVENANCE_NOT_FOUND' | 'PROVENANCE_CHAIN_BROKEN' | 'INTEGRITY_VERIFICATION_FAILED' | 'OCR_API_ERROR' | 'OCR_RATE_LIMIT' | 'OCR_TIMEOUT' | 'GPU_NOT_AVAILABLE' | 'EMBEDDING_FAILED' | 'VLM_API_ERROR' | 'VLM_RATE_LIMIT' | 'IMAGE_EXTRACTION_FAILED' | 'FORM_FILL_API_ERROR' | 'CLUSTERING_ERROR' | 'GPU_OUT_OF_MEMORY' | 'EMBEDDING_MODEL_ERROR' | 'PATH_NOT_FOUND' | 'PATH_NOT_DIRECTORY' | 'PERMISSION_DENIED' | 'INTERNAL_ERROR';
+/**
+ * MCPError - Structured error class for all MCP tool failures
+ *
+ * FAIL FAST: Thrown immediately when any error condition is detected.
+ * Provides category, message, and optional details for debugging.
+ */
+export declare class MCPError extends Error {
+    readonly category: ErrorCategory;
+    readonly details?: Record<string, unknown>;
+    constructor(category: ErrorCategory, message: string, details?: Record<string, unknown>);
+    /**
+     * Create error from unknown caught value
+     * FAIL FAST: Always produces a typed error
+     */
+    static fromUnknown(error: unknown, defaultCategory?: ErrorCategory): MCPError;
+    /**
+     * Convert to JSON for logging/serialization
+     */
+    toJSON(): Record<string, unknown>;
+}
+/**
+ * Recovery hint for AI agents to self-correct after errors.
+ * Every ErrorCategory maps to a suggested tool and human-readable hint.
+ */
+export interface RecoveryHint {
+    tool: string;
+    hint: string;
+}
+/**
+ * Get recovery hint for an error category.
+ * Exported for testing and direct use.
+ */
+export declare function getRecoveryHint(category: ErrorCategory): RecoveryHint;
+/**
+ * Format MCPError for tool response
+ * ALWAYS includes category, message, recovery hint, and optional details.
+ * The recovery field tells AI agents which tool to call next and how to fix the issue.
+ */
+export declare function formatErrorResponse(error: MCPError): {
+    success: false;
+    error: {
+        category: ErrorCategory;
+        message: string;
+        recovery: RecoveryHint;
+        details?: Record<string, unknown>;
+    };
+};
+/**
+ * Create validation error
+ */
+export declare function validationError(message: string, details?: Record<string, unknown>): MCPError;
+/**
+ * Create database not selected error
+ */
+export declare function databaseNotSelectedError(): MCPError;
+/**
+ * Create database not found error
+ */
+export declare function databaseNotFoundError(name: string, storagePath?: string): MCPError;
+/**
+ * Create database already exists error
+ */
+export declare function databaseAlreadyExistsError(name: string): MCPError;
+/**
+ * Create document not found error
+ */
+export declare function documentNotFoundError(documentId: string): MCPError;
+/**
+ * Create provenance not found error
+ */
+export declare function provenanceNotFoundError(itemId: string): MCPError;
+/**
+ * Create path not found error
+ */
+export declare function pathNotFoundError(path: string): MCPError;
+/**
+ * Create path not directory error
+ */
+export declare function pathNotDirectoryError(path: string): MCPError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/server/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/server/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH;;;GAGG;AACH,MAAM,MAAM,aAAa,GAErB,kBAAkB,GAGlB,oBAAoB,GACpB,uBAAuB,GACvB,yBAAyB,GAGzB,oBAAoB,GAGpB,sBAAsB,GACtB,yBAAyB,GACzB,+BAA+B,GAG/B,eAAe,GACf,gBAAgB,GAChB,aAAa,GAGb,mBAAmB,GACnB,kBAAkB,GAGlB,eAAe,GACf,gBAAgB,GAGhB,yBAAyB,GAGzB,qBAAqB,GAGrB,kBAAkB,GAGlB,mBAAmB,GACnB,uBAAuB,GAGvB,gBAAgB,GAChB,oBAAoB,GACpB,mBAAmB,GAGnB,gBAAgB,CAAC;AAkFrB;;;;;GAKG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,SAAgB,QAAQ,EAAE,aAAa,CAAC;IACxC,SAAgB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAEtC,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAYvF;;;OAGG;IACH,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,GAAE,aAAgC,GAAG,QAAQ;IA6B/F;;OAEG;IACH,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CASlC;AAMD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAiCD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,GAAG,YAAY,CAErE;AAMD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,QAAQ,GAAG;IACpD,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE;QACL,QAAQ,EAAE,aAAa,CAAC;QACxB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,YAAY,CAAC;QACvB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,CAAC;CACH,CAUA;AAMD;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,QAAQ,CAE5F;AAED;;GAEG;AACH,wBAAgB,wBAAwB,IAAI,QAAQ,CAEnD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,QAAQ,CAKlF;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAIjE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAIlE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAIhE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAIxD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAI5D"}

package/dist/server/errors.js

@@ -0,0 +1,256 @@
+/**
+ * MCP Server Error Handling
+ *
+ * FAIL FAST: All errors throw immediately with descriptive context.
+ * NO graceful degradation, NO fallbacks.
+ *
+ * @module server/errors
+ */
+// ═══════════════════════════════════════════════════════════════════════════════
+// ERROR NAME TO CATEGORY MAPPING
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * Valid ErrorCategory values for runtime checking (OCRError has its own category field)
+ */
+const VALID_CATEGORIES = new Set([
+    'VALIDATION_ERROR', 'DATABASE_NOT_FOUND', 'DATABASE_NOT_SELECTED',
+    'DATABASE_ALREADY_EXISTS', 'DOCUMENT_NOT_FOUND', 'PROVENANCE_NOT_FOUND',
+    'PROVENANCE_CHAIN_BROKEN', 'INTEGRITY_VERIFICATION_FAILED',
+    'OCR_API_ERROR', 'OCR_RATE_LIMIT', 'OCR_TIMEOUT',
+    'GPU_NOT_AVAILABLE', 'GPU_OUT_OF_MEMORY', 'EMBEDDING_FAILED', 'EMBEDDING_MODEL_ERROR',
+    'VLM_API_ERROR', 'VLM_RATE_LIMIT',
+    'IMAGE_EXTRACTION_FAILED', 'FORM_FILL_API_ERROR', 'CLUSTERING_ERROR',
+    'PATH_NOT_FOUND', 'PATH_NOT_DIRECTORY', 'PERMISSION_DENIED',
+    'INTERNAL_ERROR',
+]);
+/**
+ * Check if a string is a valid ErrorCategory
+ */
+function isValidCategory(value) {
+    return VALID_CATEGORIES.has(value);
+}
+/**
+ * Map custom error class names to MCPError categories.
+ * CS-ERR-001: Every custom error gets its appropriate category so clients
+ * can programmatically distinguish rate limits from GPU failures from DB locks.
+ *
+ * OCRError and its subclasses are handled specially in fromUnknown() because
+ * they carry their own .category field with more specific information
+ * (e.g., OCR_RATE_LIMIT, OCR_TIMEOUT, FORM_FILL_API_ERROR).
+ */
+const ERROR_NAME_TO_CATEGORY = {
+    // Validation
+    ValidationError: 'VALIDATION_ERROR',
+    // Database / Storage
+    DatabaseError: 'DATABASE_NOT_FOUND',
+    VectorError: 'INTERNAL_ERROR',
+    MigrationError: 'INTERNAL_ERROR',
+    // OCR (default category; subclasses use their own .category field)
+    OCRError: 'OCR_API_ERROR',
+    OCRAPIError: 'OCR_API_ERROR',
+    OCRRateLimitError: 'OCR_RATE_LIMIT',
+    OCRTimeoutError: 'OCR_TIMEOUT',
+    OCRFileError: 'OCR_API_ERROR',
+    OCRAuthenticationError: 'OCR_API_ERROR',
+    // Embedding / GPU
+    EmbeddingError: 'EMBEDDING_FAILED',
+    // Provenance
+    ProvenanceError: 'PROVENANCE_CHAIN_BROKEN',
+    VerifierError: 'INTEGRITY_VERIFICATION_FAILED',
+    ExporterError: 'INTERNAL_ERROR',
+    // Gemini / VLM
+    CircuitBreakerOpenError: 'VLM_API_ERROR',
+    // Clustering
+    ClusteringError: 'CLUSTERING_ERROR',
+};
+/**
+ * OCR error class names that carry their own `.category` field.
+ * Used in fromUnknown() to prefer the error's category over the default mapping.
+ */
+const OCR_ERROR_NAMES = new Set([
+    'OCRError', 'OCRAPIError', 'OCRRateLimitError',
+    'OCRTimeoutError', 'OCRFileError', 'OCRAuthenticationError',
+]);
+// ═══════════════════════════════════════════════════════════════════════════════
+// MCP ERROR CLASS
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * MCPError - Structured error class for all MCP tool failures
+ *
+ * FAIL FAST: Thrown immediately when any error condition is detected.
+ * Provides category, message, and optional details for debugging.
+ */
+export class MCPError extends Error {
+    category;
+    details;
+    constructor(category, message, details) {
+        super(message);
+        this.name = 'MCPError';
+        this.category = category;
+        this.details = details;
+        // Preserve stack trace in V8 environments
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, MCPError);
+        }
+    }
+    /**
+     * Create error from unknown caught value
+     * FAIL FAST: Always produces a typed error
+     */
+    static fromUnknown(error, defaultCategory = 'INTERNAL_ERROR') {
+        if (error instanceof MCPError) {
+            return error;
+        }
+        if (error instanceof Error) {
+            // Map custom error class names to their appropriate MCPError categories.
+            // CS-ERR-001: Every custom error class maps to a specific category so
+            // clients can programmatically distinguish failure modes.
+            const category = ERROR_NAME_TO_CATEGORY[error.name] ?? defaultCategory;
+            // For OCRError subclasses, preserve the more specific category from the error itself
+            const ocrCategory = error.category;
+            const resolvedCategory = OCR_ERROR_NAMES.has(error.name) && ocrCategory && isValidCategory(ocrCategory)
+                ? ocrCategory
+                : category;
+            return new MCPError(resolvedCategory, error.message, {
+                originalName: error.name,
+                stack: error.stack,
+            });
+        }
+        return new MCPError(defaultCategory, String(error), {
+            originalValue: error,
+        });
+    }
+    /**
+     * Convert to JSON for logging/serialization
+     */
+    toJSON() {
+        return {
+            name: this.name,
+            category: this.category,
+            message: this.message,
+            details: this.details,
+            stack: this.stack,
+        };
+    }
+}
+/**
+ * Recovery hints for every error category.
+ * Agents use these to determine the next action after a failure.
+ */
+const RECOVERY_HINTS = {
+    VALIDATION_ERROR: { tool: 'ocr_guide', hint: 'Check parameter types and required fields' },
+    DATABASE_NOT_FOUND: { tool: 'ocr_db_list', hint: 'Use ocr_db_list to see available databases' },
+    DATABASE_NOT_SELECTED: { tool: 'ocr_db_select', hint: 'Use ocr_db_list to find database names, then ocr_db_select' },
+    DATABASE_ALREADY_EXISTS: { tool: 'ocr_db_list', hint: 'Choose a unique database name' },
+    DOCUMENT_NOT_FOUND: { tool: 'ocr_document_list', hint: 'Use ocr_document_list to browse available documents' },
+    PROVENANCE_NOT_FOUND: { tool: 'ocr_provenance_get', hint: 'Verify the item_id exists using ocr_document_get first' },
+    PROVENANCE_CHAIN_BROKEN: { tool: 'ocr_provenance_verify', hint: 'Re-ingest the document to rebuild provenance chain' },
+    INTEGRITY_VERIFICATION_FAILED: { tool: 'ocr_provenance_verify', hint: 'Compare content_hash against stored hash; re-ingest if tampered' },
+    OCR_API_ERROR: { tool: 'ocr_health_check', hint: 'Check DATALAB_API_KEY env var and Datalab API status' },
+    OCR_RATE_LIMIT: { tool: 'ocr_process_pending', hint: 'Wait and retry with lower max_concurrent' },
+    OCR_TIMEOUT: { tool: 'ocr_process_pending', hint: 'Retry with smaller documents or fewer pages' },
+    GPU_NOT_AVAILABLE: { tool: 'ocr_health_check', hint: 'Check CUDA/MPS availability; system will fall back to CPU' },
+    GPU_OUT_OF_MEMORY: { tool: 'ocr_config_set', hint: 'Reduce embedding_batch_size via ocr_config_set' },
+    EMBEDDING_FAILED: { tool: 'ocr_health_check', hint: 'Check Python embedding worker and GPU memory' },
+    EMBEDDING_MODEL_ERROR: { tool: 'ocr_health_check', hint: 'Verify nomic-embed-text model is downloaded' },
+    VLM_API_ERROR: { tool: 'ocr_vlm_status', hint: 'Check GEMINI_API_KEY and circuit breaker state' },
+    VLM_RATE_LIMIT: { tool: 'ocr_vlm_status', hint: 'Wait for rate limit reset; check rate_limiter.reset_in_ms' },
+    IMAGE_EXTRACTION_FAILED: { tool: 'ocr_health_check', hint: 'Check PyMuPDF/Pillow installation' },
+    FORM_FILL_API_ERROR: { tool: 'ocr_health_check', hint: 'Check DATALAB_API_KEY and form fill endpoint' },
+    CLUSTERING_ERROR: { tool: 'ocr_health_check', hint: 'Check Python clustering worker (scikit-learn)' },
+    PATH_NOT_FOUND: { tool: 'ocr_guide', hint: 'Verify the file path exists on the filesystem' },
+    PATH_NOT_DIRECTORY: { tool: 'ocr_guide', hint: 'Provide a directory path, not a file path' },
+    PERMISSION_DENIED: { tool: 'ocr_guide', hint: 'Check filesystem permissions on the target path' },
+    INTERNAL_ERROR: { tool: 'ocr_health_check', hint: 'Run ocr_health_check for diagnostics' },
+};
+/**
+ * Get recovery hint for an error category.
+ * Exported for testing and direct use.
+ */
+export function getRecoveryHint(category) {
+    return RECOVERY_HINTS[category];
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+// ERROR RESPONSE FORMATTING
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * Format MCPError for tool response
+ * ALWAYS includes category, message, recovery hint, and optional details.
+ * The recovery field tells AI agents which tool to call next and how to fix the issue.
+ */
+export function formatErrorResponse(error) {
+    return {
+        success: false,
+        error: {
+            category: error.category,
+            message: error.message,
+            recovery: RECOVERY_HINTS[error.category],
+            details: error.details,
+        },
+    };
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+// ERROR FACTORY FUNCTIONS
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * Create validation error
+ */
+export function validationError(message, details) {
+    return new MCPError('VALIDATION_ERROR', message, details);
+}
+/**
+ * Create database not selected error
+ */
+export function databaseNotSelectedError() {
+    return new MCPError('DATABASE_NOT_SELECTED', 'No database selected. Use ocr_db_list to see available databases, then ocr_db_select to choose one.');
+}
+/**
+ * Create database not found error
+ */
+export function databaseNotFoundError(name, storagePath) {
+    return new MCPError('DATABASE_NOT_FOUND', `Database "${name}" not found`, {
+        databaseName: name,
+        storagePath,
+    });
+}
+/**
+ * Create database already exists error
+ */
+export function databaseAlreadyExistsError(name) {
+    return new MCPError('DATABASE_ALREADY_EXISTS', `Database "${name}" already exists`, {
+        databaseName: name,
+    });
+}
+/**
+ * Create document not found error
+ */
+export function documentNotFoundError(documentId) {
+    return new MCPError('DOCUMENT_NOT_FOUND', `Document not found: ${documentId}. Use ocr_document_list to browse available documents.`, {
+        documentId,
+    });
+}
+/**
+ * Create provenance not found error
+ */
+export function provenanceNotFoundError(itemId) {
+    return new MCPError('PROVENANCE_NOT_FOUND', `Provenance for "${itemId}" not found`, {
+        itemId,
+    });
+}
+/**
+ * Create path not found error
+ */
+export function pathNotFoundError(path) {
+    return new MCPError('PATH_NOT_FOUND', `Path does not exist: ${path}`, {
+        path,
+    });
+}
+/**
+ * Create path not directory error
+ */
+export function pathNotDirectoryError(path) {
+    return new MCPError('PATH_NOT_DIRECTORY', `Path is not a directory: ${path}`, {
+        path,
+    });
+}
+//# sourceMappingURL=errors.js.map

package/dist/server/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/server/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA6DH,kFAAkF;AAClF,iCAAiC;AACjC,kFAAkF;AAElF;;GAEG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,kBAAkB,EAAE,oBAAoB,EAAE,uBAAuB;IACjE,yBAAyB,EAAE,oBAAoB,EAAE,sBAAsB;IACvE,yBAAyB,EAAE,+BAA+B;IAC1D,eAAe,EAAE,gBAAgB,EAAE,aAAa;IAChD,mBAAmB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,uBAAuB;IACrF,eAAe,EAAE,gBAAgB;IACjC,yBAAyB,EAAE,qBAAqB,EAAE,kBAAkB;IACpE,gBAAgB,EAAE,oBAAoB,EAAE,mBAAmB;IAC3D,gBAAgB;CACjB,CAAC,CAAC;AAEH;;GAEG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAAkC;IAC5D,aAAa;IACb,eAAe,EAAE,kBAAkB;IAEnC,qBAAqB;IACrB,aAAa,EAAE,oBAAoB;IACnC,WAAW,EAAE,gBAAgB;IAC7B,cAAc,EAAE,gBAAgB;IAEhC,mEAAmE;IACnE,QAAQ,EAAE,eAAe;IACzB,WAAW,EAAE,eAAe;IAC5B,iBAAiB,EAAE,gBAAgB;IACnC,eAAe,EAAE,aAAa;IAC9B,YAAY,EAAE,eAAe;IAC7B,sBAAsB,EAAE,eAAe;IAEvC,kBAAkB;IAClB,cAAc,EAAE,kBAAkB;IAElC,aAAa;IACb,eAAe,EAAE,yBAAyB;IAC1C,aAAa,EAAE,+BAA+B;IAC9C,aAAa,EAAE,gBAAgB;IAE/B,eAAe;IACf,uBAAuB,EAAE,eAAe;IAExC,aAAa;IACb,eAAe,EAAE,kBAAkB;CACpC,CAAC;AAEF;;;GAGG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,UAAU,EAAE,aAAa,EAAE,mBAAmB;IAC9C,iBAAiB,EAAE,cAAc,EAAE,wBAAwB;CAC5D,CAAC,CAAC;AAEH,kFAAkF;AAClF,kBAAkB;AAClB,kFAAkF;AAElF;;;;;GAKG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjB,QAAQ,CAAgB;IACxB,OAAO,CAA2B;IAElD,YAAY,QAAuB,EAAE,OAAe,EAAE,OAAiC;QACrF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,0CAA0C;QAC1C,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,WAAW,CAAC,KAAc,EAAE,kBAAiC,gBAAgB;QAClF,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,yEAAyE;YACzE,sEAAsE;YACtE,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC;YAEvE,qFAAqF;YACrF,MAAM,WAAW,GAAI,KAA+B,CAAC,QAAQ,CAAC;YAC9D,MAAM,gBAAgB,GACpB,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,IAAI,eAAe,CAAC,WAAW,CAAC;gBAC5E,CAAC,CAAE,WAA6B;gBAChC,CAAC,CAAC,QAAQ,CAAC;YAEf,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,KAAK,CAAC,OAAO,EAAE;gBACnD,YAAY,EAAE,KAAK,CAAC,IAAI;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;YAClD,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;IACJ,CAAC;CACF;AAeD;;;GAGG;AACH,MAAM,cAAc,GAAwC;IAC1D,gBAAgB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,2CAA2C,EAAE;IAC1F,kBAAkB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,4CAA4C,EAAE;IAC/F,qBAAqB,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,4DAA4D,EAAE;IACpH,uBAAuB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,+BAA+B,EAAE;IACvF,kBAAkB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,qDAAqD,EAAE;IAC9G,oBAAoB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,wDAAwD,EAAE;IACpH,uBAAuB,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,oDAAoD,EAAE;IACtH,6BAA6B,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,iEAAiE,EAAE;IACzI,aAAa,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,sDAAsD,EAAE;IACzG,cAAc,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,0CAA0C,EAAE;IACjG,WAAW,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,6CAA6C,EAAE;IACjG,iBAAiB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,2DAA2D,EAAE;IAClH,iBAAiB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,gDAAgD,EAAE;IACrG,gBAAgB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,8CAA8C,EAAE;IACpG,qBAAqB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,6CAA6C,EAAE;IACxG,aAAa,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,gDAAgD,EAAE;IACjG,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,2DAA2D,EAAE;IAC7G,uBAAuB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,mCAAmC,EAAE;IAChG,mBAAmB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,8CAA8C,EAAE;IACvG,gBAAgB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,+CAA+C,EAAE;IACrG,cAAc,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,+CAA+C,EAAE;IAC5F,kBAAkB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,2CAA2C,EAAE;IAC5F,iBAAiB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,iDAAiD,EAAE;IACjG,cAAc,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,sCAAsC,EAAE;CAC3F,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAuB;IACrD,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,kFAAkF;AAClF,4BAA4B;AAC5B,kFAAkF;AAElF;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAe;IASjD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC;YACxC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB;KACF,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,0BAA0B;AAC1B,kFAAkF;AAElF;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,OAAiC;IAChF,OAAO,IAAI,QAAQ,CAAC,kBAAkB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,IAAI,QAAQ,CAAC,uBAAuB,EAAE,qGAAqG,CAAC,CAAC;AACtJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,WAAoB;IACtE,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,aAAa,IAAI,aAAa,EAAE;QACxE,YAAY,EAAE,IAAI;QAClB,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,OAAO,IAAI,QAAQ,CAAC,yBAAyB,EAAE,aAAa,IAAI,kBAAkB,EAAE;QAClF,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,uBAAuB,UAAU,wDAAwD,EAAE;QACnI,UAAU;KACX,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,OAAO,IAAI,QAAQ,CAAC,sBAAsB,EAAE,mBAAmB,MAAM,aAAa,EAAE;QAClF,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,wBAAwB,IAAI,EAAE,EAAE;QACpE,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,4BAA4B,IAAI,EAAE,EAAE;QAC5E,IAAI;KACL,CAAC,CAAC;AACL,CAAC"}

package/dist/server/events.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Internal Event Bus
+ *
+ * Typed event emitter for internal system events.
+ * Listeners can trigger webhooks, audit log entries, or internal actions.
+ *
+ * CRITICAL: NEVER use console.log() - stdout is JSON-RPC protocol.
+ *
+ * @module server/events
+ */
+import { EventEmitter } from 'events';
+/** Event types emitted by the system */
+export type SystemEventType = 'document.ingested' | 'document.processed' | 'document.deleted' | 'workflow.state_changed' | 'annotation.created' | 'annotation.resolved' | 'search.alert_triggered' | 'obligation.overdue' | 'webhook.triggered' | 'user.created';
+/** All valid event type values for runtime validation */
+export declare const VALID_EVENT_TYPES: readonly SystemEventType[];
+export interface SystemEvent {
+    type: SystemEventType;
+    timestamp: string;
+    entityType?: string;
+    entityId?: string;
+    userId?: string;
+    sessionId?: string;
+    data: Record<string, unknown>;
+}
+declare class EventBus extends EventEmitter {
+    /** Emit a typed system event */
+    emitEvent(event: SystemEvent): void;
+    /** Subscribe to a specific event type */
+    onEvent(type: SystemEventType | '*', handler: (event: SystemEvent) => void): void;
+    /** Subscribe once */
+    onceEvent(type: SystemEventType, handler: (event: SystemEvent) => void): void;
+}
+/** Singleton event bus */
+export declare const eventBus: EventBus;
+export {};
+//# sourceMappingURL=events.d.ts.map

package/dist/server/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/server/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAMtC,wCAAwC;AACxC,MAAM,MAAM,eAAe,GACvB,mBAAmB,GACnB,oBAAoB,GACpB,kBAAkB,GAClB,wBAAwB,GACxB,oBAAoB,GACpB,qBAAqB,GACrB,wBAAwB,GACxB,oBAAoB,GACpB,mBAAmB,GACnB,cAAc,CAAC;AAEnB,yDAAyD;AACzD,eAAO,MAAM,iBAAiB,EAAE,SAAS,eAAe,EAW9C,CAAC;AAEX,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAMD,cAAM,QAAS,SAAQ,YAAY;IACjC,gCAAgC;IAChC,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAMnC,yCAAyC;IACzC,OAAO,CAAC,IAAI,EAAE,eAAe,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GAAG,IAAI;IAIjF,qBAAqB;IACrB,SAAS,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GAAG,IAAI;CAG9E;AAED,0BAA0B;AAC1B,eAAO,MAAM,QAAQ,UAAiB,CAAC"}

package/dist/server/events.js

@@ -0,0 +1,48 @@
+/**
+ * Internal Event Bus
+ *
+ * Typed event emitter for internal system events.
+ * Listeners can trigger webhooks, audit log entries, or internal actions.
+ *
+ * CRITICAL: NEVER use console.log() - stdout is JSON-RPC protocol.
+ *
+ * @module server/events
+ */
+import { EventEmitter } from 'events';
+/** All valid event type values for runtime validation */
+export const VALID_EVENT_TYPES = [
+    'document.ingested',
+    'document.processed',
+    'document.deleted',
+    'workflow.state_changed',
+    'annotation.created',
+    'annotation.resolved',
+    'search.alert_triggered',
+    'obligation.overdue',
+    'webhook.triggered',
+    'user.created',
+];
+// =============================================================================
+// EVENT BUS
+// =============================================================================
+class EventBus extends EventEmitter {
+    /** Emit a typed system event */
+    emitEvent(event) {
+        console.error(`[EventBus] ${event.type}: ${event.entityType ?? ''}/${event.entityId ?? ''}`);
+        this.emit(event.type, event);
+        this.emit('*', event); // Wildcard listener for all events
+    }
+    /** Subscribe to a specific event type */
+    onEvent(type, handler) {
+        this.on(type, handler);
+    }
+    /** Subscribe once */
+    onceEvent(type, handler) {
+        this.once(type, handler);
+    }
+}
+/** Singleton event bus */
+export const eventBus = new EventBus();
+// Set higher listener limit since many tools may subscribe
+eventBus.setMaxListeners(100);
+//# sourceMappingURL=events.js.map

package/dist/server/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/server/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAmBtC,yDAAyD;AACzD,MAAM,CAAC,MAAM,iBAAiB,GAA+B;IAC3D,mBAAmB;IACnB,oBAAoB;IACpB,kBAAkB;IAClB,wBAAwB;IACxB,oBAAoB;IACpB,qBAAqB;IACrB,wBAAwB;IACxB,oBAAoB;IACpB,mBAAmB;IACnB,cAAc;CACN,CAAC;AAYX,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,QAAS,SAAQ,YAAY;IACjC,gCAAgC;IAChC,SAAS,CAAC,KAAkB;QAC1B,OAAO,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU,IAAI,EAAE,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7F,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,mCAAmC;IAC5D,CAAC;IAED,yCAAyC;IACzC,OAAO,CAAC,IAA2B,EAAE,OAAqC;QACxE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,qBAAqB;IACrB,SAAS,CAAC,IAAqB,EAAE,OAAqC;QACpE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;CACF;AAED,0BAA0B;AAC1B,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;AAEvC,2DAA2D;AAC3D,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC"}

package/dist/server/permissions.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Tool-Level Permission System
+ *
+ * 6 permission scopes, 4 roles.
+ * Each tool declares a required scope.
+ * Permission check runs before handler execution.
+ *
+ * FAIL FAST: Unauthorized access throws immediately.
+ *
+ * CRITICAL: NEVER use console.log() - stdout is reserved for JSON-RPC protocol.
+ *
+ * @module server/permissions
+ */
+export type PermissionScope = 'ocr:read' | 'ocr:write' | 'ocr:review' | 'ocr:configure' | 'ocr:delete' | 'ocr:admin';
+export type UserRole = 'viewer' | 'reviewer' | 'editor' | 'admin';
+/** Check if a role has a specific permission scope */
+export declare function hasPermission(role: UserRole, scope: PermissionScope): boolean;
+/** Get all scopes for a role */
+export declare function getScopesForRole(role: UserRole): PermissionScope[];
+/** Validate that a role string is valid */
+export declare function isValidRole(role: string): role is UserRole;
+/** Tool name to required scope mapping */
+export declare const TOOL_SCOPES: Record<string, PermissionScope>;
+/** Check permission - returns true if allowed, false if denied. Admin always passes. */
+export declare function checkToolPermission(toolName: string, userRole: UserRole | null): boolean;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/server/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/server/permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,MAAM,MAAM,eAAe,GACvB,UAAU,GACV,WAAW,GACX,YAAY,GACZ,eAAe,GACf,YAAY,GACZ,WAAW,CAAC;AAEhB,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;AAyBlE,sDAAsD;AACtD,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAE7E;AAED,gCAAgC;AAChC,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,eAAe,EAAE,CAElE;AAED,2CAA2C;AAC3C,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,QAAQ,CAE1D;AAMD,0CAA0C;AAC1C,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAsIvD,CAAC;AAMF,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,GAAG,OAAO,CASxF"}