omitly-mcp 0.0.0 → 0.1.0

package/dist/index.js

@@ -0,0 +1,582 @@
+#!/usr/bin/env node
+/**
+ * Omitly MCP server.
+ *
+ * Exposes Omitly's local, verifiable PDF redaction to MCP clients (Claude Code,
+ * Claude Desktop, etc.) as callable tools. The whole point: an agent can redact a
+ * document *without uploading it anywhere* — redaction runs on-device via the
+ * Omitly engine and returns a signed audit log proving the data is gone.
+ *
+ * The natural flow across the three tools:
+ *   find_sensitive_regions → the engine extracts text WITH coordinates and
+ *     returns PII candidates, so the model works in entity space ("redact every
+ *     SSN") and never has to guess PDF point geometry from a rendered image.
+ *   redact_pdf            → remove the chosen regions' bytes, verify, audit.
+ *   verify_redaction      → independently re-confirm the output.
+ *
+ * Integration point — the engine binary:
+ *   This server shells out to a local CLI (`omitly-redact`, in
+ *   crates/omitly-cli) that wraps the `redaction-core` Rust crate. Build it with
+ *   `cargo build -p omitly-cli` and point OMITLY_REDACT_BIN at the binary. The
+ *   contract is documented in README.md and in `runEngine()` below: a JSON
+ *   request on stdin, a JSON response (result + audit log) on stdout.
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { spawn } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { createRequire } from "node:module";
+import * as path from "node:path";
+import { z } from "zod";
+import { allowedRoot, confineInput, confineOutput } from "./paths.js";
+/**
+ * WASM fallback for the four detection/verify tools — bundled in the npm
+ * package (see package.json "files"/"build:wasm"), so `find_sensitive_regions`,
+ * `locate_text`, `check_redaction` and `verify_redaction` work out of the box
+ * with NO native engine binary and NO Rust toolchain on the caller's machine.
+ * This is the wasm-bindgen twin of `redaction-core`'s detector (same crate
+ * already shipped for the web leak-checker at omitly.app) — detection-only,
+ * no qpdf/process/filesystem, so it crosses to wasm cleanly.
+ *
+ * `redact_pdf`/`redact_by_entity`/`create_pdf` still require a configured
+ * native engine (ENGINE_BIN/PDF_BIN below) — write access and PDF generation
+ * (a real headless browser) can't run in wasm. When a native engine IS
+ * configured, it's preferred over wasm for the four tools too (more complete:
+ * the native `find` path also covers survivor/off-page detection the exact
+ * same way; wasm and native currently agree on output shape for this reason).
+ */
+const wasmRequire = createRequire(import.meta.url);
+let wasmEngine;
+try {
+    wasmEngine = wasmRequire("../wasm/leakcheck_wasm.js");
+}
+catch {
+    // Not built (e.g. local dev before `npm run build`) — tools below fail
+    // loudly with a clear message rather than silently no-op.
+    wasmEngine = undefined;
+}
+/** Normalises the wasm `ScanResult` to the same field names the native `find`
+ *  response already uses (`regions` instead of `leaks`), so every downstream
+ *  formatter in this file works unchanged regardless of which engine ran. */
+function wasmScanToFindShape(raw) {
+    const r = JSON.parse(raw);
+    if (!r.ok)
+        return { ok: false, error: r.error ?? "wasm scan failed" };
+    return {
+        ok: true,
+        clean: r.clean,
+        count: r.count,
+        total_findings: r.total_findings,
+        regions: r.leaks,
+        survivors: r.survivors,
+        off_page: r.off_page,
+        coverage: r.coverage,
+    };
+}
+function runWasmScan(bytes) {
+    if (!wasmEngine) {
+        return { ok: false, error: "bundled wasm engine not built — run `npm run build` (needs wasm-pack + Rust)" };
+    }
+    return wasmScanToFindShape(wasmEngine.scan(new Uint8Array(bytes)));
+}
+function runWasmLocate(bytes, needles) {
+    if (!wasmEngine) {
+        return { ok: false, error: "bundled wasm engine not built — run `npm run build` (needs wasm-pack + Rust)" };
+    }
+    const raw = JSON.parse(wasmEngine.locate(new Uint8Array(bytes), JSON.stringify(needles)));
+    if (!raw.ok)
+        return { ok: false, error: raw.error ?? "wasm locate failed" };
+    return { ok: true, count: raw.count, regions: raw.leaks };
+}
+/** Single source of truth for the server version (keeps the MCP handshake in
+ *  lockstep with the published package). */
+const VERSION = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version;
+/**
+ * Engine discovery — one env var for the common case, two for overrides:
+ *   OMITLY_ENGINE_DIR   directory holding both `omitly-redact` and `omitly-pdf`
+ *   OMITLY_REDACT_BIN / OMITLY_PDF_BIN   per-binary overrides (win over the dir)
+ * Two binaries by design: document generation is a different trust model from
+ * the verifiable redaction engine (see crates/omitly-pdf/Cargo.toml).
+ */
+function discover(explicit, name) {
+    if (explicit)
+        return explicit;
+    const dir = process.env.OMITLY_ENGINE_DIR;
+    if (!dir)
+        return undefined;
+    for (const cand of [path.join(dir, name), path.join(dir, `${name}.exe`)]) {
+        if (existsSync(cand))
+            return cand;
+    }
+    return undefined;
+}
+const ENGINE_BIN = discover(process.env.OMITLY_REDACT_BIN, "omitly-redact");
+const PDF_BIN = discover(process.env.OMITLY_PDF_BIN, "omitly-pdf");
+/** Kill a wedged engine rather than hang the agent's tool call forever. */
+const ENGINE_TIMEOUT_MS = Number(process.env.OMITLY_ENGINE_TIMEOUT_MS) || 120_000;
+/** Filesystem confinement root (see paths.ts) — resolved once at startup so a
+ *  misconfigured OMITLY_ALLOWED_DIR fails loudly here, not mid-conversation. */
+const ROOT = allowedRoot();
+const regionSchema = z.object({
+    page: z.number().int().min(0).describe("0-based page index"),
+    x: z.number().describe("left, in PDF points (origin bottom-left)"),
+    y: z.number().describe("bottom, in PDF points"),
+    width: z.number().positive(),
+    height: z.number().positive(),
+    reason: z.string().optional().describe("audit-log reason, e.g. 'PII: SSN'"),
+});
+/**
+ * Invoke the local Omitly engine CLI with a JSON request on stdin and parse the
+ * JSON response from stdout. Contract (proposed for the redaction-core CLI):
+ *
+ *   stdin:  { "command": "redact" | "verify", ...args }
+ *   stdout: { "ok": true, "output": "<path>", "audit": { ...signed audit log } }
+ *           { "ok": false, "error": "<message>" }
+ */
+function spawnEngine(bin, request) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(bin, [], { stdio: ["pipe", "pipe", "pipe"] });
+        let out = "";
+        let err = "";
+        const timer = setTimeout(() => {
+            child.kill("SIGKILL");
+            reject(new Error(`engine timed out after ${ENGINE_TIMEOUT_MS}ms and was killed ` +
+                `(override with OMITLY_ENGINE_TIMEOUT_MS)`));
+        }, ENGINE_TIMEOUT_MS);
+        child.stdout.on("data", (d) => (out += d.toString()));
+        child.stderr.on("data", (d) => (err += d.toString()));
+        child.stdin.on("error", () => { }); // EPIPE if the engine dies early; close handles it
+        child.on("error", (e) => {
+            clearTimeout(timer);
+            reject(e);
+        });
+        child.on("close", (code) => {
+            clearTimeout(timer);
+            if (code !== 0) {
+                reject(new Error(`engine exited ${code}: ${err.trim() || "no stderr"}`));
+                return;
+            }
+            try {
+                resolve(JSON.parse(out));
+            }
+            catch {
+                reject(new Error(`engine returned non-JSON output: ${out.slice(0, 500)}`));
+            }
+        });
+        child.stdin.write(JSON.stringify(request));
+        child.stdin.end();
+    });
+}
+/** Drive the redaction engine (`OMITLY_REDACT_BIN`). */
+function runEngine(request) {
+    if (!ENGINE_BIN) {
+        return Promise.reject(new Error("No redaction engine configured. Set OMITLY_ENGINE_DIR to the directory " +
+            "holding the omitly-redact binary (or OMITLY_REDACT_BIN to the binary " +
+            "itself). Redaction runs on-device; nothing is uploaded."));
+    }
+    return spawnEngine(ENGINE_BIN, request);
+}
+/** Drive the document generator (`OMITLY_PDF_BIN`). */
+function runPdfEngine(request) {
+    if (!PDF_BIN) {
+        return Promise.reject(new Error("No PDF generator configured. Set OMITLY_ENGINE_DIR to the directory " +
+            "holding the omitly-pdf binary (or OMITLY_PDF_BIN to the binary itself). " +
+            "PDF generation renders on-device; nothing is uploaded."));
+    }
+    return spawnEngine(PDF_BIN, request);
+}
+const server = new McpServer({ name: "omitly-mcp", version: VERSION });
+const REGIONS = z.enum(["generic", "us", "au"]);
+/** Run "find" via the native engine if configured, else the bundled wasm
+ *  fallback (see the wasm block near the top of this file). `regions`
+ *  narrowing (generic/us/au) only applies to the native path — wasm always
+ *  scans every pattern, a safe default (more results, never fewer) rather
+ *  than silently dropping the requested narrowing. */
+function findViaEngineOrWasm(confinedPath, regions) {
+    if (ENGINE_BIN)
+        return runEngine({ command: "find", pdfPath: confinedPath, regions });
+    const res = runWasmScan(readFileSync(confinedPath));
+    if (res.ok && regions && regions.length) {
+        res.note = "Regional narrowing (regions filter) needs a native engine — showing all detected kinds.";
+    }
+    return res;
+}
+server.tool("find_sensitive_regions", "Scan a PDF on-device and return candidate regions that look like PII — " +
+    "emails, US SSNs, phone numbers, card numbers, and Australian identifiers " +
+    "(TFN, ABN, ACN, Medicare, Centrelink CRN, IHI, BSB; kinds 'tfn'/'abn'/" +
+    "'acn'/'medicare'/'crn'/'ihi'/'bsb') — each with the page and exact " +
+    "coordinates (in PDF " +
+    "points) the redaction engine needs. Use this FIRST so you select regions " +
+    "by entity ('redact every TFN') and pass the returned coordinates straight " +
+    "to redact_pdf, instead of guessing geometry from a rendered page. Numeric " +
+    "kinds are check-digit validated where a published algorithm exists (CRN " +
+    "has none — its matches are format-only). Candidates are best-effort " +
+    "pattern matches for review — not a completeness guarantee and not a " +
+    "compliance assessment; the file is never uploaded — detection runs " +
+    "locally. Each candidate carries a MASKED preview (e.g. '•••-••-6789'), " +
+    "never the raw value: the secret stays on the machine. You don't need the " +
+    "plaintext to redact — drive it by page + coordinates. (A human reviewer " +
+    "has the file open locally for full context.)", {
+    pdfPath: z.string().describe("absolute path to the PDF to scan"),
+    regions: z
+        .array(REGIONS)
+        .optional()
+        .describe("narrow LISTED pattern kinds to these regional packs (generic kinds " +
+        "always listed; confirmed under-mark survivors always report); omit " +
+        "to scan everything — the safe default"),
+}, async ({ pdfPath, regions }) => {
+    try {
+        const res = await findViaEngineOrWasm(confineInput(pdfPath, ROOT), regions);
+        if (!res?.ok) {
+            return {
+                content: [{ type: "text", text: `Scan failed: ${res?.error ?? "unknown error"}` }],
+                isError: true,
+            };
+        }
+        const found = res.regions ?? [];
+        const summary = `Found ${found.length} candidate region(s).\n` +
+            `Pass any subset to redact_pdf as its "regions" argument (page + x/y/width/height carry over).\n\n` +
+            (res.note ? `Note: ${res.note}\n\n` : "") +
+            JSON.stringify(found, null, 2);
+        return { content: [{ type: "text", text: summary }] };
+    }
+    catch (e) {
+        return {
+            content: [{ type: "text", text: `Could not scan: ${e.message}` }],
+            isError: true,
+        };
+    }
+});
+server.tool("locate_text", "Locate exact text strings in a PDF and return each occurrence's page and " +
+    "coordinates (in PDF points). Use this for what pattern-matching can't catch " +
+    "— names, addresses, account references — by doing the entity recognition " +
+    "YOURSELF and passing the literal strings here; the engine resolves where " +
+    "they sit so you never guess geometry from a rendered page. Feed the returned " +
+    "regions straight to redact_pdf. Case-insensitive; a string the PDF splits " +
+    "across text operators may not match as one run. Each hit returns a masked " +
+    "preview, not the raw text. Nothing is uploaded.", {
+    pdfPath: z.string().describe("absolute path to the PDF to search"),
+    texts: z.array(z.string()).min(1).describe("literal strings to locate"),
+}, async ({ pdfPath, texts }) => {
+    try {
+        const confined = confineInput(pdfPath, ROOT);
+        const res = ENGINE_BIN
+            ? await runEngine({ command: "locate_text", pdfPath: confined, texts })
+            : runWasmLocate(readFileSync(confined), texts);
+        if (!res?.ok) {
+            return {
+                content: [{ type: "text", text: `Search failed: ${res?.error ?? "unknown error"}` }],
+                isError: true,
+            };
+        }
+        const regions = res.regions ?? [];
+        const summary = `Located ${regions.length} occurrence(s). Pass any subset to redact_pdf as "regions".\n\n` +
+            JSON.stringify(regions, null, 2);
+        return { content: [{ type: "text", text: summary }] };
+    }
+    catch (e) {
+        return {
+            content: [{ type: "text", text: `Could not search: ${e.message}` }],
+            isError: true,
+        };
+    }
+});
+server.tool("redact_by_entity", "Find and redact PII in a PDF in ONE on-device step: scan, keep only the " +
+    "requested entity kinds (email/ssn/phone/card plus the Australian " +
+    "tfn/abn/acn/medicare/crn/ihi/bsb — omit `kinds` to redact every kind " +
+    "detected), remove them, verify, and return what was redacted plus the " +
+    "audit log. This is the 'just scrub the obvious PII' shortcut; when you need " +
+    "to review before removing, call find_sensitive_regions first. Same caveat as " +
+    "the detector: matches are best-effort pattern matching, not a completeness " +
+    "guarantee and not a compliance assessment. Nothing is uploaded.", {
+    pdfPath: z.string().describe("absolute path to the source PDF"),
+    outputPath: z.string().describe("absolute path to write the redacted PDF"),
+    kinds: z
+        .array(z.enum([
+        "email",
+        "ssn",
+        "phone",
+        "card",
+        "tfn",
+        "abn",
+        "acn",
+        "medicare",
+        "crn",
+        "ihi",
+        "bsb",
+    ]))
+        .optional()
+        .describe("entity kinds to redact; omit to redact all detected"),
+    regions: z
+        .array(REGIONS)
+        .optional()
+        .describe("narrow to these regional packs (intersects with `kinds`); omit for all"),
+    drawBox: z.boolean().optional().describe("also paint a black bar (default: opaque fill only)"),
+}, async ({ pdfPath, outputPath, kinds, regions, drawBox }) => {
+    try {
+        const res = await runEngine({
+            command: "redact_entities",
+            pdfPath: confineInput(pdfPath, ROOT),
+            outputPath: confineOutput(outputPath, ROOT),
+            kinds,
+            regions,
+            drawBox,
+        });
+        if (!res?.ok) {
+            return {
+                content: [{ type: "text", text: `Redaction failed: ${res?.error ?? "unknown error"}` }],
+                isError: true,
+            };
+        }
+        const redacted = res.redacted ?? [];
+        if (redacted.length === 0) {
+            return {
+                content: [{ type: "text", text: `No matching entities found — nothing was written.` }],
+            };
+        }
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Redacted ${redacted.length} entit${redacted.length === 1 ? "y" : "ies"} → ${res.output}\n` +
+                        `Verification: ${res.audit?.verdict ?? "see audit log"}\n\n` +
+                        `Removed:\n${JSON.stringify(redacted, null, 2)}\n\n` +
+                        `Audit log:\n${JSON.stringify(res.audit, null, 2)}`,
+                },
+            ],
+        };
+    }
+    catch (e) {
+        return {
+            content: [{ type: "text", text: `Could not run redaction: ${e.message}` }],
+            isError: true,
+        };
+    }
+});
+server.tool("redact_pdf", "Permanently redact regions of a PDF on-device using Omitly. Removes the " +
+    "underlying text and image data (not a black box over it), verifies nothing " +
+    "survives in each region, and returns a signed audit log. The file is never " +
+    "uploaded — redaction happens locally.", {
+    pdfPath: z.string().describe("absolute path to the source PDF"),
+    outputPath: z.string().describe("absolute path to write the redacted PDF"),
+    regions: z.array(regionSchema).min(1).describe("regions to remove"),
+}, async ({ pdfPath, outputPath, regions }) => {
+    try {
+        const res = await runEngine({
+            command: "redact",
+            pdfPath: confineInput(pdfPath, ROOT),
+            outputPath: confineOutput(outputPath, ROOT),
+            regions,
+        });
+        if (!res?.ok) {
+            return {
+                content: [{ type: "text", text: `Redaction failed: ${res?.error ?? "unknown error"}` }],
+                isError: true,
+            };
+        }
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Redacted ${regions.length} region(s) → ${res.output}\n` +
+                        `Verification: ${res.audit?.verdict ?? "see audit log"}\n\n` +
+                        `Audit log:\n${JSON.stringify(res.audit, null, 2)}`,
+                },
+            ],
+        };
+    }
+    catch (e) {
+        return {
+            content: [{ type: "text", text: `Could not run redaction: ${e.message}` }],
+            isError: true,
+        };
+    }
+});
+server.tool("verify_redaction", "Re-scan an already-redacted PDF on-device and confirm nothing recoverable " +
+    "remains. With a configured native engine and this file's own " +
+    "`<path>.audit.json` sidecar (written by redact_pdf/redact_by_entity), this " +
+    "re-checks exactly the regions that were redacted — the strongest form of " +
+    "this check. Without a native engine (or without that sidecar — e.g. the " +
+    "file wasn't redacted by this tool), it falls back to a general on-device " +
+    "re-scan of the whole file and reports whether anything is still " +
+    "detectable — a good-faith re-check, not a claim of the same rigor as the " +
+    "sidecar-based path.", {
+    pdfPath: z.string().describe("absolute path to the redacted PDF to verify"),
+}, async ({ pdfPath }) => {
+    try {
+        const confined = confineInput(pdfPath, ROOT);
+        if (ENGINE_BIN) {
+            const hasSidecar = existsSync(`${confined}.audit.json`);
+            if (hasSidecar) {
+                const res = await runEngine({ command: "verify", pdfPath: confined });
+                return {
+                    content: [{ type: "text", text: JSON.stringify(res, null, 2) }],
+                    isError: res?.ok === false,
+                };
+            }
+        }
+        // Fallback: general re-scan (wasm if no native engine; the native `find`
+        // command otherwise) — no sidecar, so nothing to check regions against,
+        // but a non-empty result still means recoverable PII survived.
+        const res = ENGINE_BIN
+            ? await runEngine({ command: "find", pdfPath: confined })
+            : runWasmScan(readFileSync(confined));
+        if (!res?.ok) {
+            return {
+                content: [{ type: "text", text: `Could not verify: ${res?.error ?? "unknown error"}` }],
+                isError: true,
+            };
+        }
+        const clean = res.clean ?? (res.total_findings ?? 0) === 0;
+        const summary = clean
+            ? `✅ No recoverable PII found on the surfaces scanned (general re-scan — no redaction sidecar to check specific regions against).`
+            : `⚠️ Found ${res.total_findings ?? res.regions?.length ?? 0} recoverable item(s) — this file is not clean.\n\n${JSON.stringify(res, null, 2)}`;
+        return { content: [{ type: "text", text: summary }], isError: !clean };
+    }
+    catch (e) {
+        return {
+            content: [{ type: "text", text: `Could not verify: ${e.message}` }],
+            isError: true,
+        };
+    }
+});
+server.tool("create_pdf", "Generate a clean PDF from Markdown (or raw HTML) on-device, rendered through " +
+    "a real browser engine so it looks printed — not like a script's best guess. " +
+    "Give it Markdown inline via `source` (or a file via `sourcePath`) and an " +
+    "`outputPath`; it writes the PDF and returns the path. Use this instead of " +
+    "writing a one-off reportlab/LaTeX/pandoc script. Nothing is uploaded.", {
+    outputPath: z.string().describe("absolute path to write the PDF"),
+    source: z.string().optional().describe("inline Markdown/HTML (omit if using sourcePath)"),
+    sourcePath: z.string().optional().describe("absolute path to a Markdown/HTML file"),
+    format: z.enum(["markdown", "html"]).optional().describe("input format (default: markdown)"),
+    title: z.string().optional().describe("document <title> / metadata"),
+    css: z.string().optional().describe("extra CSS appended after the default print styles"),
+}, async ({ outputPath, source, sourcePath, format, title, css }) => {
+    try {
+        const res = await runPdfEngine({
+            command: "create",
+            outputPath: confineOutput(outputPath, ROOT),
+            source,
+            sourcePath: sourcePath === undefined ? undefined : confineInput(sourcePath, ROOT),
+            format,
+            title,
+            css,
+        });
+        if (!res?.ok) {
+            return {
+                content: [{ type: "text", text: `PDF generation failed: ${res?.error ?? "unknown error"}` }],
+                isError: true,
+            };
+        }
+        return { content: [{ type: "text", text: `Created PDF → ${res.output}` }] };
+    }
+    catch (e) {
+        return {
+            content: [{ type: "text", text: `Could not generate PDF: ${e.message}` }],
+            isError: true,
+        };
+    }
+});
+server.tool("check_redaction", "Audit an ALREADY-redacted PDF and report whether sensitive text still survives " +
+    "underneath the redaction — the 'did my black boxes actually remove the data?' " +
+    "check. Most tools redact by drawing a rectangle over text while leaving the " +
+    "characters in the file, where they stay selectable and extractable. This " +
+    "re-extracts the text on-device and flags any emails, SSNs, phone or card " +
+    "numbers that are still present, each with a MASKED preview — the raw value " +
+    "never leaves the machine. It checks the page text layer, text surviving UNDER " +
+    "redaction marks, incremental-update prior revisions (the classic 'redacted then " +
+    "saved, original still in the file' failure), document metadata, AcroForm field " +
+    "values and embedded attachments, and returns a coverage report so a clean result " +
+    "is scoped to what was inspected. A non-empty result means the redaction leaked. " +
+    "Nothing is uploaded. (Pattern-based: names/addresses, image-only text, and the " +
+    "surfaces listed as not-inspected aren't covered; absence of hits isn't proof of " +
+    "completeness.)", {
+    pdfPath: z.string().describe("absolute path to the supposedly-redacted PDF to audit"),
+}, async ({ pdfPath }) => {
+    try {
+        const res = await findViaEngineOrWasm(confineInput(pdfPath, ROOT), undefined);
+        if (!res?.ok) {
+            return {
+                content: [{ type: "text", text: `Audit failed: ${res?.error ?? "unknown error"}` }],
+                isError: true,
+            };
+        }
+        const regions = res.regions ?? [];
+        const survivors = res.survivors ?? [];
+        const offPage = res.off_page ?? [];
+        const cov = res.coverage ?? {};
+        const total = res.total_findings ?? regions.length;
+        const clean = res.clean ?? total === 0;
+        // Honest coverage disclosure — what was inspected, and what was NOT, so a
+        // "clean" result is scoped and never reads as "no PII anywhere".
+        const scanned = [
+            `${cov.pages_scanned ?? "?"}/${cov.pages_total ?? "?"} page text layer`,
+            cov.prior_revisions_scanned && "prior (superseded) revisions",
+            cov.metadata_scanned && "metadata",
+            cov.acroform_scanned && "form fields",
+            cov.attachments_scanned && "attachments",
+            (cov.form_xobjects_scanned ?? 0) > 0 && `${cov.form_xobjects_scanned} Form XObject(s)`,
+            (cov.annotation_appearances_scanned ?? 0) > 0 &&
+                `${cov.annotation_appearances_scanned} annotation appearance(s)`,
+        ].filter(Boolean);
+        const notScanned = [
+            ...(cov.not_scanned ?? []),
+            ...((cov.pages_failed ?? []).length
+                ? [`${cov.pages_failed.length} page(s) that could not be parsed`]
+                : []),
+        ];
+        const scope = `Scanned: ${scanned.join(", ")}.` +
+            (notScanned.length ? `\nNOT inspected: ${notScanned.join("; ")}.` : "");
+        if (clean) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `✅ No recoverable PII found on the surfaces scanned in ${pdfPath}.\n\n` +
+                            `${scope}\n\n` +
+                            `This is a scoped result, not a completeness guarantee — the surfaces listed as ` +
+                            `NOT inspected, plus names/addresses (which need human or model review), are out of ` +
+                            `scope. For a removed-and-verified result with a signed audit log, use the Omitly app.`,
+                    },
+                ],
+            };
+        }
+        const byKind = {};
+        for (const r of [...regions, ...survivors, ...offPage])
+            byKind[r.kind] = (byKind[r.kind] ?? 0) + 1;
+        const tally = Object.entries(byKind)
+            .map(([k, n]) => `${n} ${k}${n > 1 ? "s" : ""}`)
+            .join(", ");
+        const parts = [];
+        if (regions.length)
+            parts.push(`Text layer (${regions.length}):\n${JSON.stringify(regions, null, 2)}`);
+        if (survivors.length)
+            parts.push(`Surviving UNDER a redaction mark (${survivors.length}):\n${JSON.stringify(survivors, null, 2)}`);
+        if (offPage.length)
+            parts.push(`Off-page — prior revisions / metadata / form fields / attachments (${offPage.length}):\n` +
+                `${JSON.stringify(offPage, null, 2)}`);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `⚠️ LEAK: this "redacted" PDF still contains ${total} sensitive item(s) (${tally}) — ` +
+                        `the redaction did not actually remove the data.\n\n` +
+                        `${parts.join("\n\n")}\n\n` +
+                        `${scope}\n\n` +
+                        `Previews are masked; the raw values stayed on-device. To actually remove this data ` +
+                        `(not just cover it) and get an independent verification + signed audit log, redact it ` +
+                        `with Omitly — https://omitly.app`,
+                },
+            ],
+        };
+    }
+    catch (e) {
+        return {
+            content: [{ type: "text", text: `Could not audit: ${e.message}` }],
+            isError: true,
+        };
+    }
+});
+const transport = new StdioServerTransport();
+await server.connect(transport);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEnD,IAAI,UAAkC,CAAC;AACvC,IAAI,CAAC;IACH,UAAU,GAAG,WAAW,CAAC,2BAA2B,CAAe,CAAC;AACtE,CAAC;AAAC,MAAM,CAAC;IACP,uEAAuE;IACvE,0DAA0D;IAC1D,UAAU,GAAG,SAAS,CAAC;AACzB,CAAC;AAwBD;;6EAE6E;AAC7E,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IAC5C,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,kBAAkB,EAAE,CAAC;IACtE,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,OAAO,EAAE,CAAC,CAAC,KAAK;QAChB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8EAA8E,EAAE,CAAC;IAC9G,CAAC;IACD,OAAO,mBAAmB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,OAAiB;IACrD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8EAA8E,EAAE,CAAC;IAC9G,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAmB,CAAC;IAC5G,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,oBAAoB,EAAE,CAAC;IAC5E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED;4CAC4C;AAC5C,MAAM,OAAO,GAAW,IAAI,CAAC,KAAK,CAChC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAClE,CAAC,OAAO,CAAC;AAEV;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,QAA4B,EAAE,IAAY;IAC1D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,CAAC;QACzE,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC;AAC5E,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;AAEnE,2EAA2E;AAC3E,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,OAAO,CAAC;AAElF;gFACgF;AAChF,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;AAE3B,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAC5D,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IAClE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;CAC5E,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,GAAW,EAAE,OAAgB;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CACJ,IAAI,KAAK,CACP,0BAA0B,iBAAiB,oBAAoB;gBAC7D,0CAA0C,CAC7C,CACF,CAAC;QACJ,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACtD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACtD,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,mDAAmD;QACtF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;gBACzE,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wDAAwD;AACxD,SAAS,SAAS,CAAC,OAAgB;IACjC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,yEAAyE;YACvE,uEAAuE;YACvE,yDAAyD,CAC5D,CACF,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,uDAAuD;AACvD,SAAS,YAAY,CAAC,OAAgB;IACpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,sEAAsE;YACpE,0EAA0E;YAC1E,wDAAwD,CAC3D,CACF,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAEvE,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAEhD;;;;sDAIsD;AACtD,SAAS,mBAAmB,CAAC,YAAoB,EAAE,OAA6B;IAC9E,IAAI,UAAU;QAAE,OAAO,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IACtF,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;IACpD,IAAI,GAAG,CAAC,EAAE,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,GAAG,yFAAyF,CAAC;IACvG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,yEAAyE;IACvE,2EAA2E;IAC3E,wEAAwE;IACxE,qEAAqE;IACrE,sBAAsB;IACtB,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,8CAA8C,EAChD;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAChE,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,OAAO,CAAC;SACd,QAAQ,EAAE;SACV,QAAQ,CACP,qEAAqE;QACnE,qEAAqE;QACrE,uCAAuC,CAC1C;CACJ,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,EAAE,KAAK,IAAI,eAAe,EAAE,EAAE,CAAC;gBAClF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QAChC,MAAM,OAAO,GACX,SAAS,KAAK,CAAC,MAAM,yBAAyB;YAC9C,mGAAmG;YACnG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACxD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAoB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,aAAa,EACb,2EAA2E;IACzE,8EAA8E;IAC9E,2EAA2E;IAC3E,2EAA2E;IAC3E,+EAA+E;IAC/E,4EAA4E;IAC5E,4EAA4E;IAC5E,iDAAiD,EACnD;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAClE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;CACxE,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;IAC3B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,UAAU;YACpB,CAAC,CAAC,MAAM,SAAS,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACvE,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,EAAE,KAAK,IAAI,eAAe,EAAE,EAAE,CAAC;gBACpF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GACX,WAAW,OAAO,CAAC,MAAM,iEAAiE;YAC1F,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACxD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAsB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,0EAA0E;IACxE,mEAAmE;IACnE,uEAAuE;IACvE,wEAAwE;IACxE,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,iEAAiE,EACnE;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC/D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC1E,KAAK,EAAE,CAAC;SACL,KAAK,CACJ,CAAC,CAAC,IAAI,CAAC;QACL,OAAO;QACP,KAAK;QACL,OAAO;QACP,MAAM;QACN,KAAK;QACL,KAAK;QACL,KAAK;QACL,UAAU;QACV,KAAK;QACL,KAAK;QACL,KAAK;KACN,CAAC,CACH;SACA,QAAQ,EAAE;SACV,QAAQ,CAAC,qDAAqD,CAAC;IAClE,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,OAAO,CAAC;SACd,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;IACrF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;CAC/F,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC;YAC1B,OAAO,EAAE,iBAAiB;YAC1B,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;YACpC,UAAU,EAAE,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC;YAC3C,KAAK;YACL,OAAO;YACP,OAAO;SACR,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,GAAG,EAAE,KAAK,IAAI,eAAe,EAAE,EAAE,CAAC;gBACvF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mDAAmD,EAAE,CAAC;aACvF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,YAAY,QAAQ,CAAC,MAAM,SAAS,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,MAAM,IAAI;wBAC3F,iBAAiB,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,MAAM;wBAC5D,aAAa,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM;wBACpD,eAAe,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;iBACtD;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA6B,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YACrF,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,0EAA0E;IACxE,6EAA6E;IAC7E,6EAA6E;IAC7E,uCAAuC,EACzC;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC/D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC1E,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;CACpE,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC;YAC1B,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;YACpC,UAAU,EAAE,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC;YAC3C,OAAO;SACR,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,GAAG,EAAE,KAAK,IAAI,eAAe,EAAE,EAAE,CAAC;gBACvF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,YAAY,OAAO,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAM,IAAI;wBACxD,iBAAiB,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,MAAM;wBAC5D,eAAe,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;iBACtD;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA6B,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YACrF,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,4EAA4E;IAC1E,+DAA+D;IAC/D,6EAA6E;IAC7E,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,kEAAkE;IAClE,2EAA2E;IAC3E,qBAAqB,EACvB;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;CAC5E,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IACpB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,QAAQ,aAAa,CAAC,CAAC;YACxD,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACtE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,EAAE,KAAK,KAAK;iBAC3B,CAAC;YACJ,CAAC;QACH,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,GAAG,GAAG,UAAU;YACpB,CAAC,CAAC,MAAM,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;YACzD,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,GAAG,EAAE,KAAK,IAAI,eAAe,EAAE,EAAE,CAAC;gBACvF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,KAAK;YACnB,CAAC,CAAC,gIAAgI;YAClI,CAAC,CAAC,YAAY,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,qDAAqD,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAClJ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC;IACzE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAsB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,+EAA+E;IAC7E,8EAA8E;IAC9E,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE,EACzE;IACE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IACjE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IACzF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACnF,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC5F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACpE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;CACzF,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC;YAC7B,OAAO,EAAE,QAAQ;YACjB,UAAU,EAAE,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC;YAC3C,MAAM;YACN,UAAU,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC;YACjF,MAAM;YACN,KAAK;YACL,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,GAAG,EAAE,KAAK,IAAI,eAAe,EAAE,EAAE,CAAC;gBAC5F,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAC9E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA4B,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YACpF,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,iFAAiF;IAC/E,gFAAgF;IAChF,8EAA8E;IAC9E,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,gFAAgF;IAChF,kFAAkF;IAClF,iFAAiF;IACjF,mFAAmF;IACnF,kFAAkF;IAClF,iFAAiF;IACjF,kFAAkF;IAClF,gBAAgB,EAClB;IACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;CACtF,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9E,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,EAAE,KAAK,IAAI,eAAe,EAAE,EAAE,CAAC;gBACnF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,KAAK,KAAK,CAAC,CAAC;QAEvC,0EAA0E;QAC1E,iEAAiE;QACjE,MAAM,OAAO,GAAG;YACd,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,kBAAkB;YACvE,GAAG,CAAC,uBAAuB,IAAI,8BAA8B;YAC7D,GAAG,CAAC,gBAAgB,IAAI,UAAU;YAClC,GAAG,CAAC,gBAAgB,IAAI,aAAa;YACrC,GAAG,CAAC,mBAAmB,IAAI,aAAa;YACxC,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,qBAAqB,kBAAkB;YACtF,CAAC,GAAG,CAAC,8BAA8B,IAAI,CAAC,CAAC,GAAG,CAAC;gBAC3C,GAAG,GAAG,CAAC,8BAA8B,2BAA2B;SACnE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClB,MAAM,UAAU,GAAG;YACjB,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YAC1B,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM;gBACjC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,mCAAmC,CAAC;gBACjE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,KAAK,GACT,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACjC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAE1E,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EACF,yDAAyD,OAAO,OAAO;4BACvE,GAAG,KAAK,MAAM;4BACd,iFAAiF;4BACjF,qFAAqF;4BACrF,uFAAuF;qBAC1F;iBACF;aACF,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,EAAE,GAAG,OAAO,CAAC;YAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;aACjC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;aAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,MAAM,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACvG,IAAI,SAAS,CAAC,MAAM;YAClB,KAAK,CAAC,IAAI,CAAC,qCAAqC,SAAS,CAAC,MAAM,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/G,IAAI,OAAO,CAAC,MAAM;YAChB,KAAK,CAAC,IAAI,CACR,sEAAsE,OAAO,CAAC,MAAM,MAAM;gBACxF,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CACxC,CAAC;QACJ,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,+CAA+C,KAAK,uBAAuB,KAAK,MAAM;wBACtF,qDAAqD;wBACrD,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;wBAC3B,GAAG,KAAK,MAAM;wBACd,qFAAqF;wBACrF,wFAAwF;wBACxF,kCAAkC;iBACrC;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAqB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}