pilotswarm 0.0.1 → 0.4.1

package/mcp/dist/bin/pilotswarm-mcp.js

@@ -0,0 +1,367 @@
+#!/usr/bin/env node
+import { parseArgs } from "node:util";
+import { randomUUID, timingSafeEqual } from "node:crypto";
+import { Buffer } from "node:buffer";
+import { createContext } from "../src/context.js";
+import { createMcpServer } from "../src/server.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+const { values } = parseArgs({
+    options: {
+        transport: { type: "string", default: "stdio" },
+        port: { type: "string", default: "3100" },
+        host: { type: "string" },
+        "allowed-hosts": { type: "string" },
+        "max-sessions": { type: "string" },
+        "session-idle-timeout-ms": { type: "string" },
+        store: { type: "string" },
+        "api-url": { type: "string" },
+        plugin: { type: "string", multiple: true },
+        "model-providers": { type: "string" },
+        "log-level": { type: "string", default: "error" },
+    },
+});
+// Log-level wiring — gates the lifecycle messages emitted by the bin
+// (startup banner, signal handlers, shutdown). Lower tiers also include the
+// higher tiers; "silent" suppresses everything. Fatal `Error:` messages on
+// stderr before process.exit() always print regardless of level.
+const LOG_LEVELS = ["debug", "info", "warn", "error", "silent"];
+const requestedLevel = (values["log-level"] ?? "error").toLowerCase();
+const activeLevel = LOG_LEVELS.includes(requestedLevel)
+    ? requestedLevel
+    : "error";
+const activeLevelIdx = LOG_LEVELS.indexOf(activeLevel);
+const log = {
+    debug: (msg) => { if (activeLevelIdx <= 0)
+        console.error(msg); },
+    info: (msg) => { if (activeLevelIdx <= 1)
+        console.error(msg); },
+    warn: (msg) => { if (activeLevelIdx <= 2)
+        console.error(msg); },
+    error: (msg) => { if (activeLevelIdx <= 3)
+        console.error(msg); },
+};
+// Web API mode (supported): no database credentials in this process. Direct
+// --store mode remains for trusted/co-located placement and internal testing.
+const apiUrl = (values["api-url"] ?? process.env.PILOTSWARM_API_URL)?.trim();
+const store = values.store ?? process.env.DATABASE_URL;
+if (apiUrl && values.store) {
+    console.error("Error: pass either --api-url (Web API mode) or --store (direct mode), not both.");
+    process.exit(1);
+}
+if (!apiUrl && !store) {
+    console.error("Error: --api-url <url> (Web API mode) or --store <url> / DATABASE_URL (direct mode) is required.");
+    process.exit(1);
+}
+const ctx = await createContext({
+    ...(apiUrl ? { apiUrl } : { store }),
+    modelProvidersPath: values["model-providers"],
+    pluginDirs: values.plugin,
+});
+if (values.transport === "stdio") {
+    const server = createMcpServer(ctx);
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    const shutdown = async (signal) => {
+        log.info(`[pilotswarm-mcp] ${signal} received — closing stdio transport`);
+        try {
+            await transport.close?.();
+        }
+        catch { /* ignore */ }
+        try {
+            await ctx.client.stop?.();
+        }
+        catch { /* ignore */ }
+        try {
+            await ctx.mgmt.stop?.();
+        }
+        catch { /* ignore */ }
+        try {
+            await ctx.facts.close?.();
+        }
+        catch { /* ignore */ }
+        process.exit(0);
+    };
+    process.on("SIGTERM", () => void shutdown("SIGTERM"));
+    process.on("SIGINT", () => void shutdown("SIGINT"));
+}
+else if (values.transport === "http") {
+    const mcpKey = process.env.PILOTSWARM_MCP_KEY;
+    if (!mcpKey) {
+        console.error("Error: PILOTSWARM_MCP_KEY env var required for HTTP transport.");
+        process.exit(1);
+    }
+    const expectedAuthBuf = Buffer.from(`Bearer ${mcpKey}`);
+    const { WebStandardStreamableHTTPServerTransport } = await import("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js");
+    const { Hono } = await import("hono");
+    const { cors } = await import("hono/cors");
+    const { serve } = await import("@hono/node-server");
+    const port = parseInt(values.port ?? "3100", 10);
+    const host = values.host ??
+        process.env.PILOTSWARM_MCP_HOST ??
+        "127.0.0.1";
+    // allowedHosts — Host header allowlist to prevent DNS-rebinding attacks.
+    // Defaults to localhost-equivalents on the chosen port plus the host:port the
+    // server is bound to. Operators bridging through reverse proxies / public DNS
+    // must pass --allowed-hosts (or PILOTSWARM_MCP_ALLOWED_HOSTS) explicitly.
+    const allowedHostsSrc = values["allowed-hosts"] ??
+        process.env.PILOTSWARM_MCP_ALLOWED_HOSTS ??
+        "";
+    const allowedHosts = new Set(allowedHostsSrc
+        .split(",")
+        .map((s) => s.trim().toLowerCase())
+        .filter((s) => s.length > 0));
+    // Always permit the bound host:port + standard localhost aliases on the
+    // configured port so the default `--transport http` invocation works without
+    // additional flags.
+    allowedHosts.add(`${host}:${port}`.toLowerCase());
+    allowedHosts.add(`127.0.0.1:${port}`);
+    allowedHosts.add(`localhost:${port}`);
+    allowedHosts.add(`[::1]:${port}`);
+    // max-sessions — concurrent MCP session cap. New sessions beyond this cap are
+    // rejected with a 503 + JSON-RPC service-unavailable shape so memory cannot be
+    // exhausted by an unbounded number of long-lived SSE connections.
+    const maxSessionsRaw = values["max-sessions"] ??
+        process.env.PILOTSWARM_MCP_MAX_SESSIONS ??
+        "256";
+    const parsedMax = parseInt(maxSessionsRaw, 10);
+    const maxSessions = Number.isFinite(parsedMax) && parsedMax > 0 ? parsedMax : 256;
+    // session-idle-timeout-ms — close + free sessions whose last request was
+    // more than this many milliseconds ago. Required because one-shot HTTP
+    // clients (initialize + disconnect without DELETE /mcp) never trigger
+    // transport.onclose, which would otherwise leak max-sessions slots.
+    // Default: 5 minutes (300_000 ms). Set to 0 to disable the sweeper.
+    const idleTimeoutRaw = values["session-idle-timeout-ms"] ??
+        process.env.PILOTSWARM_MCP_SESSION_IDLE_MS ??
+        "300000";
+    const parsedIdle = parseInt(idleTimeoutRaw, 10);
+    const sessionIdleTimeoutMs = Number.isFinite(parsedIdle) && parsedIdle >= 0 ? parsedIdle : 300_000;
+    // Sweep cadence: every 30s, but never longer than the idle threshold itself
+    // (otherwise tiny test thresholds are missed entirely).
+    const sweepIntervalMs = sessionIdleTimeoutMs > 0
+        ? Math.max(1_000, Math.min(30_000, Math.floor(sessionIdleTimeoutMs / 2) || 1_000))
+        : 0;
+    const app = new Hono();
+    const sessions = new Map();
+    // Atomic in-flight counter for the max-sessions cap — incremented BEFORE
+    // transport construction (so concurrent bursts cannot all observe
+    // sessions.size < maxSessions and slip past the gate) and decremented on
+    // construction failure or transport close. The counter is the source of
+    // truth for cap enforcement; `sessions` is just the lookup table.
+    let inFlightSessionCount = 0;
+    const acquireSlot = () => {
+        if (inFlightSessionCount >= maxSessions)
+            return false;
+        inFlightSessionCount++;
+        return true;
+    };
+    const releaseSlot = () => {
+        if (inFlightSessionCount > 0)
+            inFlightSessionCount--;
+    };
+    const touchSession = (id) => {
+        const entry = sessions.get(id);
+        if (entry)
+            entry.lastActivityAt = Date.now();
+    };
+    // Track in-flight HTTP request handlers so SIGTERM can wait for them to drain
+    // instead of severing connections mid-response.
+    const inFlight = new Set();
+    let shuttingDown = false;
+    app.use("*", async (c, next) => {
+        if (shuttingDown) {
+            return c.json({ error: "Server shutting down" }, 503);
+        }
+        // DNS-rebinding defense: validate Host header against the allowlist.
+        const hostHeader = (c.req.header("host") ?? "").toLowerCase();
+        if (!allowedHosts.has(hostHeader)) {
+            return c.json({ error: "Host not allowed" }, 403);
+        }
+        await next();
+    });
+    app.use("*", cors({
+        origin: "*",
+        allowMethods: ["GET", "POST", "DELETE", "OPTIONS"],
+        allowHeaders: ["Content-Type", "Authorization", "mcp-session-id", "Last-Event-ID", "mcp-protocol-version"],
+        exposeHeaders: ["mcp-session-id", "mcp-protocol-version"],
+    }));
+    // Bearer token auth middleware — constant-time comparison to avoid leaking
+    // the token via timing side-channels.
+    app.use("/mcp", async (c, next) => {
+        const auth = c.req.header("authorization") ?? "";
+        const authBuf = Buffer.from(auth);
+        const ok = authBuf.length === expectedAuthBuf.length &&
+            timingSafeEqual(authBuf, expectedAuthBuf);
+        if (!ok) {
+            return c.json({ error: "Unauthorized" }, 401);
+        }
+        await next();
+    });
+    app.post("/mcp", async (c) => {
+        const sessionId = c.req.header("mcp-session-id");
+        if (sessionId && sessions.has(sessionId)) {
+            touchSession(sessionId);
+            const p = sessions.get(sessionId).transport.handleRequest(c.req.raw);
+            inFlight.add(p);
+            try {
+                return await p;
+            }
+            finally {
+                inFlight.delete(p);
+                touchSession(sessionId);
+            }
+        }
+        if (sessionId && !sessions.has(sessionId)) {
+            return c.json({ error: "Unknown session" }, 404);
+        }
+        // Atomic cap check — increment BEFORE constructing the transport so
+        // concurrent bursts cannot all observe spare capacity simultaneously.
+        if (!acquireSlot()) {
+            return c.json({
+                jsonrpc: "2.0",
+                error: {
+                    code: -32000,
+                    message: `Server at session capacity (${maxSessions}); try again later.`,
+                },
+                id: null,
+            }, 503);
+        }
+        // New session — create per-session server+transport pair. The slot is
+        // already reserved; releaseSlot is called exactly once via
+        // transport.onclose (which fires from DELETE /mcp, the idle sweeper,
+        // shutdown, or any underlying transport-level close).
+        let transport;
+        try {
+            transport = new WebStandardStreamableHTTPServerTransport({
+                sessionIdGenerator: () => randomUUID(),
+                onsessioninitialized: (id) => {
+                    sessions.set(id, { transport, lastActivityAt: Date.now() });
+                },
+            });
+            let slotReleased = false;
+            transport.onclose = () => {
+                if (transport.sessionId)
+                    sessions.delete(transport.sessionId);
+                if (!slotReleased) {
+                    slotReleased = true;
+                    releaseSlot();
+                }
+            };
+            const server = createMcpServer(ctx);
+            await server.connect(transport);
+        }
+        catch (err) {
+            releaseSlot();
+            throw err;
+        }
+        const p = transport.handleRequest(c.req.raw);
+        inFlight.add(p);
+        try {
+            return await p;
+        }
+        finally {
+            inFlight.delete(p);
+            if (transport.sessionId)
+                touchSession(transport.sessionId);
+        }
+    });
+    // SSE stream endpoint
+    app.get("/mcp", async (c) => {
+        const sessionId = c.req.header("mcp-session-id");
+        if (sessionId && sessions.has(sessionId)) {
+            touchSession(sessionId);
+            return sessions.get(sessionId).transport.handleRequest(c.req.raw);
+        }
+        return c.json({ error: "Invalid or missing session" }, 400);
+    });
+    // Session cleanup endpoint (per MCP spec)
+    app.delete("/mcp", async (c) => {
+        const sessionId = c.req.header("mcp-session-id");
+        if (!sessionId || !sessions.has(sessionId)) {
+            return c.json({ error: "Unknown session" }, 404);
+        }
+        const entry = sessions.get(sessionId);
+        await entry.transport.close();
+        sessions.delete(sessionId);
+        return c.json({ closed: true });
+    });
+    // Idle-session sweeper — reaps sessions whose last request was more than
+    // sessionIdleTimeoutMs ago. This is the primary defense against
+    // max-sessions slot leaks from one-shot HTTP clients that disconnect
+    // without sending DELETE /mcp (transport.onclose only fires when the
+    // SDK observes an explicit transport close, which one-shot HTTP requests
+    // do not trigger).
+    let sweeperTimer = null;
+    if (sessionIdleTimeoutMs > 0 && sweepIntervalMs > 0) {
+        sweeperTimer = setInterval(() => {
+            const cutoff = Date.now() - sessionIdleTimeoutMs;
+            // Snapshot keys to avoid mutating during iteration.
+            const expired = [];
+            for (const [id, entry] of sessions) {
+                if (entry.lastActivityAt < cutoff)
+                    expired.push([id, entry]);
+            }
+            for (const [id, entry] of expired) {
+                log.debug(`[pilotswarm-mcp] sweeping idle session ${id}`);
+                sessions.delete(id);
+                // transport.close() will fire onclose, which calls releaseSlot.
+                Promise.resolve(entry.transport.close()).catch(() => { });
+            }
+        }, sweepIntervalMs);
+        sweeperTimer.unref?.();
+    }
+    const httpServer = serve({ fetch: app.fetch, port, hostname: host }, () => {
+        log.info(`PilotSwarm MCP server listening on http://${host}:${port}/mcp`);
+    });
+    const shutdown = async (signal) => {
+        if (shuttingDown)
+            return;
+        shuttingDown = true;
+        log.info(`[pilotswarm-mcp] ${signal} received — draining ${inFlight.size} in-flight request(s), closing ${sessions.size} session(s)`);
+        if (sweeperTimer) {
+            clearInterval(sweeperTimer);
+            sweeperTimer = null;
+        }
+        const drainTimeoutMs = 5_000;
+        await Promise.race([
+            Promise.allSettled([...inFlight]),
+            new Promise((r) => setTimeout(r, drainTimeoutMs)),
+        ]);
+        for (const entry of sessions.values()) {
+            try {
+                await entry.transport.close();
+            }
+            catch { /* ignore */ }
+        }
+        sessions.clear();
+        await new Promise((resolve) => {
+            try {
+                httpServer.close(() => resolve());
+            }
+            catch {
+                resolve();
+            }
+            setTimeout(() => resolve(), drainTimeoutMs).unref?.();
+        });
+        try {
+            await ctx.client.stop?.();
+        }
+        catch { /* ignore */ }
+        try {
+            await ctx.mgmt.stop?.();
+        }
+        catch { /* ignore */ }
+        try {
+            await ctx.facts.close?.();
+        }
+        catch { /* ignore */ }
+        log.info(`[pilotswarm-mcp] shutdown complete`);
+        process.exit(0);
+    };
+    process.on("SIGTERM", () => void shutdown("SIGTERM"));
+    process.on("SIGINT", () => void shutdown("SIGINT"));
+}
+else {
+    console.error(`Unknown transport: ${values.transport}. Use "stdio" or "http".`);
+    process.exit(1);
+}
+//# sourceMappingURL=pilotswarm-mcp.js.map

package/mcp/dist/bin/pilotswarm-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pilotswarm-mcp.js","sourceRoot":"","sources":["../../bin/pilotswarm-mcp.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACzB,OAAO,EAAE;QACL,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;QAC/C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE;QACzC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClC,yBAAyB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC7C,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC1C,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACrC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;KACpD;CACJ,CAAC,CAAC;AAEH,qEAAqE;AACrE,4EAA4E;AAC5E,2EAA2E;AAC3E,iEAAiE;AACjE,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAEzE,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,EAAc,CAAC;AAClF,MAAM,WAAW,GAAc,UAAgC,CAAC,QAAQ,CAAC,cAAc,CAAC;IACpF,CAAC,CAAC,cAAc;IAChB,CAAC,CAAC,OAAO,CAAC;AACd,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AACvD,MAAM,GAAG,GAAG;IACR,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,GAAG,IAAI,cAAc,IAAI,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,EAAG,CAAC,GAAW,EAAE,EAAE,GAAG,IAAI,cAAc,IAAI,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,EAAG,CAAC,GAAW,EAAE,EAAE,GAAG,IAAI,cAAc,IAAI,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxE,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,GAAG,IAAI,cAAc,IAAI,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAC3E,CAAC;AAEF,4EAA4E;AAC5E,8EAA8E;AAC9E,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC;AAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;AACvD,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IACzB,OAAO,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACjG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AACD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,OAAO,CAAC,KAAK,CAAC,kGAAkG,CAAC,CAAC;IAClH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;IAC5B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IACpC,kBAAkB,EAAE,MAAM,CAAC,iBAAiB,CAAC;IAC7C,UAAU,EAAE,MAAM,CAAC,MAAM;CAC5B,CAAC,CAAC;AAEH,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACtC,GAAG,CAAC,IAAI,CAAC,oBAAoB,MAAM,qCAAqC,CAAC,CAAC;QAC1E,IAAI,CAAC;YAAC,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC;YAAC,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC;YAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC;YAAC,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxD,CAAC;KAAM,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;IAExD,MAAM,EAAE,wCAAwC,EAAE,GAAG,MAAM,MAAM,CAC7D,+DAA+D,CAClE,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAEpD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,IAAI,GACN,MAAM,CAAC,IAAI;QACX,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,WAAW,CAAC;IAEhB,yEAAyE;IACzE,8EAA8E;IAC9E,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,eAAe,GACjB,MAAM,CAAC,eAAe,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,4BAA4B;QACxC,EAAE,CAAC;IACP,MAAM,YAAY,GAAG,IAAI,GAAG,CACxB,eAAe;SACV,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CACnC,CAAC;IACF,wEAAwE;IACxE,6EAA6E;IAC7E,oBAAoB;IACpB,YAAY,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,YAAY,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IACtC,YAAY,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IACtC,YAAY,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAElC,8EAA8E;IAC9E,+EAA+E;IAC/E,kEAAkE;IAClE,MAAM,cAAc,GAChB,MAAM,CAAC,cAAc,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,2BAA2B;QACvC,KAAK,CAAC;IACV,MAAM,SAAS,GAAG,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;IAElF,yEAAyE;IACzE,uEAAuE;IACvE,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,MAAM,cAAc,GAChB,MAAM,CAAC,yBAAyB,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,8BAA8B;QAC1C,QAAQ,CAAC;IACb,MAAM,UAAU,GAAG,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,oBAAoB,GACtB,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1E,4EAA4E;IAC5E,wDAAwD;IACxD,MAAM,eAAe,GACjB,oBAAoB,GAAG,CAAC;QACpB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,oBAAoB,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC,CAAC;IAEZ,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IASvB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEjD,yEAAyE;IACzE,kEAAkE;IAClE,yEAAyE;IACzE,wEAAwE;IACxE,kEAAkE;IAClE,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,GAAY,EAAE;QAC9B,IAAI,oBAAoB,IAAI,WAAW;YAAE,OAAO,KAAK,CAAC;QACtD,oBAAoB,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,GAAG,EAAE;QACrB,IAAI,oBAAoB,GAAG,CAAC;YAAE,oBAAoB,EAAE,CAAC;IACzD,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,EAAU,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,KAAK;YAAE,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACjD,CAAC,CAAC;IAEF,8EAA8E;IAC9E,gDAAgD;IAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC7C,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC3B,IAAI,YAAY,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,qEAAqE;QACrE,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC;QACd,MAAM,EAAE,GAAG;QACX,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;QAClD,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,sBAAsB,CAAC;QAC1G,aAAa,EAAE,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;KAC5D,CAAC,CAAC,CAAC;IAEJ,2EAA2E;IAC3E,sCAAsC;IACtC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,EAAE,GACJ,OAAO,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM;YACzC,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC9C,IAAI,CAAC,EAAE,EAAE,CAAC;YACN,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAEjD,IAAI,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtE,QAAQ,CAAC,GAAG,CAAC,CAAqB,CAAC,CAAC;YACpC,IAAI,CAAC;gBAAC,OAAO,MAAM,CAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAC7B,QAAQ,CAAC,MAAM,CAAC,CAAqB,CAAC,CAAC;gBACvC,YAAY,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;QACL,CAAC;QAED,IAAI,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QAED,oEAAoE;QACpE,sEAAsE;QACtE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CACT;gBACI,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACH,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,+BAA+B,WAAW,qBAAqB;iBAC3E;gBACD,EAAE,EAAE,IAAI;aACX,EACD,GAAG,CACN,CAAC;QACN,CAAC;QAED,sEAAsE;QACtE,2DAA2D;QAC3D,qEAAqE;QACrE,sDAAsD;QACtD,IAAI,SAAwE,CAAC;QAC7E,IAAI,CAAC;YACD,SAAS,GAAG,IAAI,wCAAwC,CAAC;gBACrD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;gBACtC,oBAAoB,EAAE,CAAC,EAAU,EAAE,EAAE;oBACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAChE,CAAC;aACJ,CAAC,CAAC;YACH,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;gBACrB,IAAI,SAAS,CAAC,SAAS;oBAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAC9D,IAAI,CAAC,YAAY,EAAE,CAAC;oBAChB,YAAY,GAAG,IAAI,CAAC;oBACpB,WAAW,EAAE,CAAC;gBAClB,CAAC;YACL,CAAC,CAAC;YACF,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,WAAW,EAAE,CAAC;YACd,MAAM,GAAG,CAAC;QACd,CAAC;QACD,MAAM,CAAC,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,QAAQ,CAAC,GAAG,CAAC,CAAqB,CAAC,CAAC;QACpC,IAAI,CAAC;YAAC,OAAO,MAAM,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAC7B,QAAQ,CAAC,MAAM,CAAC,CAAqB,CAAC,CAAC;YACvC,IAAI,SAAS,CAAC,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/D,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,sBAAsB;IACtB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACjD,IAAI,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,OAAO,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,0CAA0C;IAC1C,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;QACvC,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC9B,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,gEAAgE;IAChE,qEAAqE;IACrE,qEAAqE;IACrE,yEAAyE;IACzE,mBAAmB;IACnB,IAAI,YAAY,GAA0B,IAAI,CAAC;IAC/C,IAAI,oBAAoB,GAAG,CAAC,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;QAClD,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,CAAC;YACjD,oDAAoD;YACpD,MAAM,OAAO,GAAkC,EAAE,CAAC;YAClD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACjC,IAAI,KAAK,CAAC,cAAc,GAAG,MAAM;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBAChC,GAAG,CAAC,KAAK,CAAC,0CAA0C,EAAE,EAAE,CAAC,CAAC;gBAC1D,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACpB,gEAAgE;gBAChE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAgB,CAAC,CAAC,CAAC;YAC3E,CAAC;QACL,CAAC,EAAE,eAAe,CAAC,CAAC;QACpB,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE;QACtE,GAAG,CAAC,IAAI,CAAC,6CAA6C,IAAI,IAAI,IAAI,MAAM,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACtC,IAAI,YAAY;YAAE,OAAO;QACzB,YAAY,GAAG,IAAI,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,oBAAoB,MAAM,wBAAwB,QAAQ,CAAC,IAAI,kCAAkC,QAAQ,CAAC,IAAI,aAAa,CAAC,CAAC;QAEtI,IAAI,YAAY,EAAE,CAAC;YACf,aAAa,CAAC,YAAY,CAAC,CAAC;YAC5B,YAAY,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,MAAM,cAAc,GAAG,KAAK,CAAC;QAC7B,MAAM,OAAO,CAAC,IAAI,CAAC;YACf,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;YACjC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;SACpD,CAAC,CAAC;QAEH,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC;gBAAC,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACjE,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEjB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAChC,IAAI,CAAC;gBAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,CAAC;YAAC,CAAC;YAC/D,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YAAC,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC;YAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC;YAAC,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAEzD,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxD,CAAC;KAAM,CAAC;IACJ,OAAO,CAAC,KAAK,CAAC,sBAAsB,MAAM,CAAC,SAAS,0BAA0B,CAAC,CAAC;IAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/mcp/dist/src/auth.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Resolve a `getAccessToken` callback for a Web API deployment, or null when
+ * the deployment needs no auth. Throws with actionable guidance when an Entra
+ * deployment has no usable credential.
+ */
+export declare function createApiTokenProvider(apiUrl: string): Promise<(() => Promise<string | null>) | null>;
+//# sourceMappingURL=auth.d.ts.map

package/mcp/dist/src/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/auth.ts"],"names":[],"mappings":"AAuEA;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CA8B3G"}

package/mcp/dist/src/auth.js

@@ -0,0 +1,99 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { ApiClient } from "pilotswarm-sdk/api";
+/**
+ * Bearer-token supplier for the MCP server's Web API (`--api-url`) mode.
+ *
+ * The MCP server is headless (launched by an MCP host), so it cannot run the
+ * interactive browser sign-in the TUI uses. Two credential paths, discovered
+ * from the deployment's public `GET /api/v1/auth/config`:
+ *
+ *   - **no-auth deployments** → no token.
+ *   - **Entra deployments** →
+ *       1. `PILOTSWARM_API_TOKEN` (static bearer — service principal / CI), else
+ *       2. the cached user token the TUI writes at
+ *          `~/.config/pilotswarm/auth/<origin>.json` — run `pilotswarm auth
+ *          login --api-url <url>` once, and the MCP server acquires silently
+ *          from that cache (dev convenience).
+ */
+const AUTH_CACHE_DIR = path.join(process.env.XDG_CONFIG_HOME || path.join(os.homedir(), ".config"), "pilotswarm", "auth");
+function cacheFileForOrigin(apiUrl) {
+    const origin = new URL(apiUrl).origin.replace(/[^\w.-]+/g, "_");
+    return path.join(AUTH_CACHE_DIR, `${origin}.json`);
+}
+async function silentTokenProviderFromCache(apiUrl, client) {
+    let msal;
+    try {
+        msal = await import("@azure/msal-node");
+    }
+    catch {
+        return null;
+    }
+    const cacheFile = cacheFileForOrigin(apiUrl);
+    const app = new msal.PublicClientApplication({
+        auth: { clientId: client.clientId, authority: client.authority },
+        cache: {
+            cachePlugin: {
+                beforeCacheAccess: async (ctx) => {
+                    try {
+                        ctx.tokenCache.deserialize(await fs.promises.readFile(cacheFile, "utf8"));
+                    }
+                    catch { }
+                },
+                afterCacheAccess: async (ctx) => {
+                    if (!ctx.cacheHasChanged)
+                        return;
+                    await fs.promises.mkdir(AUTH_CACHE_DIR, { recursive: true, mode: 0o700 });
+                    await fs.promises.writeFile(cacheFile, ctx.tokenCache.serialize(), { mode: 0o600 });
+                },
+            },
+        },
+    });
+    const scopes = [`${client.clientId}/.default`];
+    return async () => {
+        const accounts = await app.getTokenCache().getAllAccounts();
+        const account = accounts[0];
+        if (!account)
+            return null;
+        try {
+            const result = await app.acquireTokenSilent({ account, scopes });
+            return result?.accessToken || null;
+        }
+        catch {
+            return null;
+        }
+    };
+}
+/**
+ * Resolve a `getAccessToken` callback for a Web API deployment, or null when
+ * the deployment needs no auth. Throws with actionable guidance when an Entra
+ * deployment has no usable credential.
+ */
+export async function createApiTokenProvider(apiUrl) {
+    const api = new ApiClient({ apiUrl });
+    const authConfig = await api.getAuthConfig();
+    if (!authConfig?.enabled || authConfig?.provider === "none") {
+        return null;
+    }
+    if (authConfig.provider !== "entra") {
+        throw new Error(`Unsupported auth provider '${authConfig.provider}' reported by ${apiUrl}.`);
+    }
+    const staticToken = String(process.env.PILOTSWARM_API_TOKEN || "").trim();
+    if (staticToken) {
+        return async () => staticToken;
+    }
+    const client = authConfig.client;
+    if (client?.clientId && client?.authority) {
+        const provider = await silentTokenProviderFromCache(apiUrl, client);
+        if (provider) {
+            // Verify the cache actually yields a token; fail fast otherwise.
+            const token = await provider();
+            if (token)
+                return provider;
+        }
+    }
+    throw new Error(`${apiUrl} requires Entra auth but no credential is available. Set PILOTSWARM_API_TOKEN `
+        + `(service principal / CI), or run: pilotswarm auth login --api-url ${apiUrl}`);
+}
+//# sourceMappingURL=auth.js.map

package/mcp/dist/src/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C;;;;;;;;;;;;;;GAcG;AAEH,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAC5B,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EACjE,YAAY,EACZ,MAAM,CACT,CAAC;AAEF,SAAS,kBAAkB,CAAC,MAAc;IACtC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,MAAc,EAAE,MAA+C;IACvG,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACD,IAAI,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,uBAAuB,CAAC;QACzC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;QAChE,KAAK,EAAE;YACH,WAAW,EAAE;gBACT,iBAAiB,EAAE,KAAK,EAAE,GAAQ,EAAE,EAAE;oBAClC,IAAI,CAAC;wBACD,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;oBAC9E,CAAC;oBAAC,MAAM,CAAC,CAAA,CAAC;gBACd,CAAC;gBACD,gBAAgB,EAAE,KAAK,EAAE,GAAQ,EAAE,EAAE;oBACjC,IAAI,CAAC,GAAG,CAAC,eAAe;wBAAE,OAAO;oBACjC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC1E,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxF,CAAC;aACJ;SACJ;KACJ,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,WAAW,CAAC,CAAC;IAC/C,OAAO,KAAK,IAAI,EAAE;QACd,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC,cAAc,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,OAAO,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAc;IACvD,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACtC,MAAM,UAAU,GAAQ,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC;IAElD,IAAI,CAAC,UAAU,EAAE,OAAO,IAAI,UAAU,EAAE,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,8BAA8B,UAAU,CAAC,QAAQ,iBAAiB,MAAM,GAAG,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,IAAI,WAAW,EAAE,CAAC;QACd,OAAO,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC;IACnC,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACjC,IAAI,MAAM,EAAE,QAAQ,IAAI,MAAM,EAAE,SAAS,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpE,IAAI,QAAQ,EAAE,CAAC;YACX,iEAAiE;YACjE,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;YAC/B,IAAI,KAAK;gBAAE,OAAO,QAAQ,CAAC;QAC/B,CAAC;IACL,CAAC;IAED,MAAM,IAAI,KAAK,CACX,GAAG,MAAM,gFAAgF;UACvF,qEAAqE,MAAM,EAAE,CAClF,CAAC;AACN,CAAC"}

package/mcp/dist/src/context.d.ts

@@ -0,0 +1,48 @@
+import { PilotSwarmClient, PilotSwarmManagementClient, ModelProviderRegistry, loadAgentFiles, type FactStore } from "pilotswarm-sdk";
+type AgentConfig = ReturnType<typeof loadAgentFiles>[number];
+export interface ServerContext {
+    client: PilotSwarmClient;
+    mgmt: PilotSwarmManagementClient;
+    facts: FactStore;
+    /** True when running over the Web API (`--api-url`); false in direct mode. */
+    webMode: boolean;
+    models: ModelProviderRegistry | null;
+    skills: Array<{
+        name: string;
+        description: string;
+        prompt: string;
+    }>;
+    /**
+     * Agent definitions visible to this MCP server, loaded from
+     * `<pluginDir>/agents/*.agent.md` for each configured plugin dir.
+     * Used by the read-only `list_registered_agents` tool. Workers in
+     * different processes may have a different catalog — see the tool
+     * description for the divergence note.
+     */
+    registeredAgents: AgentConfig[];
+    /**
+     * Set of agentIds for sessions where `isSystem === true`, derived from
+     * `mgmt.listSessions()` at startup. Used by resource registrations and
+     * subscription filters that need to enumerate system agents without
+     * hardcoding their names.
+     */
+    systemAgentIds: Set<string>;
+    /**
+     * Re-query the management API to refresh `systemAgentIds`. Tool/resource
+     * handlers may call this when they suspect the list has drifted (e.g. a
+     * new system agent was registered after server startup). Cheap to call —
+     * shares the same listSessions() call already used elsewhere.
+     */
+    refreshSystemAgentIds(): Promise<void>;
+}
+export interface CreateContextOptions {
+    /** Direct database URL (internal/trusted placement). Mutually exclusive with apiUrl. */
+    store?: string;
+    /** Web API base URL (supported remote mode). Mutually exclusive with store. */
+    apiUrl?: string;
+    modelProvidersPath?: string;
+    pluginDirs?: string[];
+}
+export declare function createContext(opts: CreateContextOptions): Promise<ServerContext>;
+export {};
+//# sourceMappingURL=context.d.ts.map

package/mcp/dist/src/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAI1B,qBAAqB,EAErB,cAAc,EACd,KAAK,SAAS,EACjB,MAAM,gBAAgB,CAAC;AAIxB,KAAK,WAAW,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,MAAM,WAAW,aAAa;IAC1B,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,0BAA0B,CAAC;IACjC,KAAK,EAAE,SAAS,CAAC;IACjB,8EAA8E;IAC9E,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACrC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE;;;;;;OAMG;IACH,gBAAgB,EAAE,WAAW,EAAE,CAAC;IAChC;;;;;OAKG;IACH,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B;;;;;OAKG;IACH,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACjC,wFAAwF;IACxF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CA8EtF"}

package/mcp/dist/src/context.js

@@ -0,0 +1,83 @@
+import { PilotSwarmClient, PilotSwarmManagementClient, createFactStoreForUrl, createWebFactStore, loadModelProviders, loadSkills, loadAgentFiles, } from "pilotswarm-sdk";
+import { ApiClient } from "pilotswarm-sdk/api";
+import { createApiTokenProvider } from "./auth.js";
+export async function createContext(opts) {
+    let client;
+    let mgmt;
+    let facts;
+    if (opts.apiUrl) {
+        // Web API mode (supported): no database credentials in this process.
+        const getAccessToken = await createApiTokenProvider(opts.apiUrl) ?? undefined;
+        client = new PilotSwarmClient({ apiUrl: opts.apiUrl, getAccessToken });
+        await client.start();
+        mgmt = new PilotSwarmManagementClient({ apiUrl: opts.apiUrl, getAccessToken });
+        await mgmt.start();
+        const api = new ApiClient({ apiUrl: opts.apiUrl, getAccessToken });
+        facts = await createWebFactStore(api);
+    }
+    else if (opts.store) {
+        // Direct mode (internal/testing): straight to the datastore.
+        client = new PilotSwarmClient({ store: opts.store });
+        await client.start();
+        mgmt = new PilotSwarmManagementClient({ store: opts.store });
+        await mgmt.start();
+        facts = await createFactStoreForUrl(opts.store);
+        await facts.initialize();
+    }
+    else {
+        throw new Error("createContext requires either apiUrl (web mode) or store (direct mode).");
+    }
+    const models = loadModelProviders(opts.modelProvidersPath ?? undefined) ?? null;
+    let skills = [];
+    if (opts.pluginDirs) {
+        for (const dir of opts.pluginDirs) {
+            try {
+                const loaded = await loadSkills(dir + "/skills");
+                skills.push(...loaded.map(s => ({ name: s.name, description: s.description, prompt: s.prompt })));
+            }
+            catch {
+                // Directory may not have skills — skip
+            }
+        }
+    }
+    let registeredAgents = [];
+    if (opts.pluginDirs) {
+        // Mirror the worker's loading semantics: name-keyed, last-write-wins
+        // (see packages/sdk/src/worker.ts ~line 720). Keying on `id ?? name`
+        // would let the MCP catalog diverge from any specific worker's
+        // runtime when two plugin dirs share a name but differ on id.
+        const byName = new Map();
+        for (const dir of opts.pluginDirs) {
+            try {
+                const loaded = loadAgentFiles(dir + "/agents");
+                for (const agent of loaded) {
+                    if (!agent.name)
+                        continue;
+                    byName.set(agent.name, agent);
+                }
+            }
+            catch {
+                // Directory may not have agents — skip
+            }
+        }
+        registeredAgents = Array.from(byName.values());
+    }
+    const systemAgentIds = new Set();
+    async function refreshSystemAgentIds() {
+        try {
+            const sessions = await mgmt.listSessions();
+            systemAgentIds.clear();
+            for (const s of sessions) {
+                if (s?.isSystem && typeof s.agentId === "string" && s.agentId.length > 0) {
+                    systemAgentIds.add(s.agentId);
+                }
+            }
+        }
+        catch {
+            // Best-effort — leave existing set untouched if mgmt is transiently unavailable.
+        }
+    }
+    await refreshSystemAgentIds();
+    return { client, mgmt, facts, webMode: Boolean(opts.apiUrl), models, skills, registeredAgents, systemAgentIds, refreshSystemAgentIds };
+}
+//# sourceMappingURL=context.js.map

package/mcp/dist/src/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAElB,UAAU,EACV,cAAc,GAEjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AA6CnD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA0B;IAC1D,IAAI,MAAwB,CAAC;IAC7B,IAAI,IAAgC,CAAC;IACrC,IAAI,KAAgB,CAAC;IAErB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,qEAAqE;QACrE,MAAM,cAAc,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;QAC9E,MAAM,GAAG,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,EAAS,CAAC,CAAC;QAC9E,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,GAAG,IAAI,0BAA0B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,EAAS,CAAC,CAAC;QACtF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QACnE,KAAK,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;SAAM,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,6DAA6D;QAC7D,MAAM,GAAG,IAAI,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,GAAG,IAAI,0BAA0B,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;IAC7B,CAAC;SAAM,CAAC;QACJ,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,kBAAkB,IAAI,SAAS,CAAC,IAAI,IAAI,CAAC;IAEhF,IAAI,MAAM,GAAiE,EAAE,CAAC;IAC9E,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAChC,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;YACtG,CAAC;YAAC,MAAM,CAAC;gBACL,uCAAuC;YAC3C,CAAC;QACL,CAAC;IACL,CAAC;IAED,IAAI,gBAAgB,GAAkB,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,qEAAqE;QACrE,qEAAqE;QACrE,+DAA+D;QAC/D,8DAA8D;QAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAChC,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;gBAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBACzB,IAAI,CAAC,KAAK,CAAC,IAAI;wBAAE,SAAS;oBAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAClC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACL,uCAAuC;YAC3C,CAAC;QACL,CAAC;QACD,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,KAAK,UAAU,qBAAqB;QAChC,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3C,cAAc,CAAC,KAAK,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,IAAI,QAAiB,EAAE,CAAC;gBAChC,IAAI,CAAC,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAClC,CAAC;YACL,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,iFAAiF;QACrF,CAAC;IACL,CAAC;IACD,MAAM,qBAAqB,EAAE,CAAC;IAE9B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,qBAAqB,EAAE,CAAC;AAC3I,CAAC"}