surfil 3.6.7

package/README.md

@@ -0,0 +1,68 @@
+# surfil-mcp
+
+> **Note:** The live npm package name is `@surfil/mcp` (the canonical npm package is now scoped under the `surfil` org · it will be restored as the canonical name once the lock expires). Install with `npm i -g @surfil/mcp` or use `npx -y @surfil/mcp@latest`.
+
+**Surfil MCP server** — published on npm as `surfil-mcp` for automatic AI session tracking across official Surfil adapters.
+
+Once connected, Surfil automatically:
+- Opens a session when your AI tool starts
+- Tracks tool usage throughout the session
+- Closes the session when your AI tool exits
+- Displays everything on your [Surfil dashboard](https://surfil.com/dashboard)
+
+## Install
+
+`surfil-mcp` is normally installed for you automatically via the Surfil CLI:
+
+```bash
+surfil connect <tool>
+```
+
+Supported official adapters:
+- `claude-code`
+- `cursor`
+- `vscode`
+- `windsurf`
+- `jetbrains`
+- `opencode`
+- `neovim`
+- `copilot`
+- `continue`
+- `codex`
+- `gemini-cli`
+- `aider`
+- `zed`
+- `warp`
+- `roo`
+- `cline`
+- `powershell`
+
+## Manual MCP config
+
+If you need to wire it into another MCP-compatible tool manually, add this server entry:
+
+```json
+{
+  "command": "npx",
+  "args": ["-y", "@surfil/mcp@latest"]
+}
+```
+
+Surfil-generated configs handle `SURFIL_KEYSTORE=file://` automatically when a tool needs the file-backed keystore path.
+
+## How it works
+
+- **Session start** → emitted automatically when the MCP server initializes
+- **Session end** → emitted automatically when the AI tool disconnects
+- **Tool tracking** → emitted as MCP-aware tools invoke Surfil-managed actions
+- **Goal and attribution** → attached to the current Surfil device, session, and project context
+
+## Requirements
+
+- Node.js ≥ 18
+- Surfil account at [surfil.com](https://surfil.com)
+- `surfil` CLI activated with a valid license token
+
+## License
+
+See [LICENSE](../LICENSE) — UpgradIQ, Inc.

package/dist/index.d.ts

@@ -0,0 +1,33 @@
+#!/usr/bin/env node
+/**
+ * Surfil MCP Server
+ *
+ * Runs as an MCP stdio server. If a session was started with `surfil on`, this
+ * server attaches to that session. Otherwise it creates its own session and
+ * emits SessionStart/SessionEnd. Exposes tools: surfil_set_goal, surfil_status,
+ * surfil_track.
+ *
+ * Uses the surfil binary from PATH — same binary that Claude Code hooks use.
+ */
+declare function emitSignal(event: string, tool: string, extraArgs?: string[]): void;
+declare function handleCallTool(req: {
+    params: {
+        name: string;
+        arguments?: unknown;
+    };
+}): Promise<{
+    content: Array<{
+        type: string;
+        text: string;
+    }>;
+    isError?: boolean;
+}>;
+export declare const __test: {
+    emitSignal: typeof emitSignal;
+    signalCount: () => number;
+    reset(id: string): void;
+    handleCallTool: typeof handleCallTool;
+    getGoal: () => string | null;
+};
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;GASG;AAuJH,iBAAS,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,GAAE,MAAM,EAAO,GAAG,IAAI,CAsB/E;AA8WD,iBAAe,cAAc,CAAC,GAAG,EAAE;IAAE,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CA8GpK;AAmED,eAAO,MAAM,MAAM;;;cAGP,MAAM;;;CAMjB,CAAC"}

package/dist/index.js

@@ -0,0 +1,749 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * Surfil MCP Server
+ *
+ * Runs as an MCP stdio server. If a session was started with `surfil on`, this
+ * server attaches to that session. Otherwise it creates its own session and
+ * emits SessionStart/SessionEnd. Exposes tools: surfil_set_goal, surfil_status,
+ * surfil_track.
+ *
+ * Uses the surfil binary from PATH — same binary that Claude Code hooks use.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.__test = void 0;
+const index_js_1 = require("@modelcontextprotocol/sdk/server/index.js");
+const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
+const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
+const temper_standard_js_1 = require("./temper-standard.js");
+const crypto = __importStar(require("crypto"));
+const cp = __importStar(require("child_process"));
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+// ── Active session discovery ──────────────────────────────────────────────────
+const SESSION_MAX_AGE_MS = 8 * 60 * 60 * 1000; // manual-session stale guard (8h)
+const ADAPTER_FRESH_SKEW_MS = 120 * 1000; // adapter session must be this fresh vs our start
+/**
+ * Authoritative per-process session id exposed by some adapters via env.
+ * GitHub Copilot CLI sets COPILOT_AGENT_SESSION_ID to the exact session id its
+ * lifecycle hooks use (verified on v1.0.59). Reading it is race-free and stays
+ * correct under parallel sessions — each Copilot process gets its own env —
+ * unlike the shared session.json file. Returns "" when no authoritative env id
+ * is available, so callers fall back to session.json discovery.
+ */
+function adapterEnvSessionId() {
+    const id = process.env["COPILOT_AGENT_SESSION_ID"];
+    return id && id.trim() !== "" ? id.trim() : "";
+}
+/**
+ * Read the active session from the surfil state directory (session.json), written
+ * by the surfil binary on `surfil on` or an adapter SessionStart hook. Returns null
+ * when the file is missing, partial, or invalid JSON (all treated as transient
+ * during the resolve poll). Attach eligibility is decided separately by
+ * isAttachable() so the freshness/source rules live in one place.
+ */
+function readActiveSession() {
+    const stateDir = process.env["XDG_DATA_HOME"]
+        ? path.join(process.env["XDG_DATA_HOME"], "surfil")
+        : path.join(os.homedir(), ".local", "share", "surfil");
+    const sessionFile = path.join(stateDir, "session.json");
+    try {
+        const data = fs.readFileSync(sessionFile, "utf8");
+        const parsed = JSON.parse(data);
+        if (!parsed.session_id)
+            return null;
+        const startedAtMs = parsed.started_at ? new Date(parsed.started_at).getTime() : NaN;
+        const lastSignalMs = parsed.last_signal_at ? new Date(parsed.last_signal_at).getTime() : NaN;
+        return {
+            sessionId: parsed.session_id,
+            goal: parsed.goal,
+            source: parsed.source ?? "",
+            startedAtMs: Number.isNaN(startedAtMs) ? 0 : startedAtMs,
+            lastSignalMs: Number.isNaN(lastSignalMs) ? 0 : lastSignalMs,
+        };
+    }
+    catch { /* missing / partial / invalid json — transient during poll */ }
+    return null;
+}
+/**
+ * Decide whether the on-disk session belongs to this MCP process so we can
+ * attach (forward goal/track) instead of minting a competing session.
+ *   - Manual `surfil on` (or a legacy binary that does not tag source): attach
+ *     within the 8h stale window — manual attachment is intentional.
+ *   - Adapter-tagged session: attach only when it matches our own client tool
+ *     AND is the live current run (started/last-signalled around our start), so
+ *     we never inherit a different tool's session or a stale crashed one.
+ */
+function isAttachable(a) {
+    if (!a.sessionId)
+        return false;
+    if (a.startedAtMs > 0 && Date.now() - a.startedAtMs > SESSION_MAX_AGE_MS)
+        return false;
+    if (a.source === "")
+        return true;
+    if (a.source === TOOL_NAME) {
+        return a.startedAtMs >= MCP_START_MS - ADAPTER_FRESH_SKEW_MS
+            || a.lastSignalMs >= MCP_START_MS - ADAPTER_FRESH_SKEW_MS;
+    }
+    return false;
+}
+// ── Session state ─────────────────────────────────────────────────────────────
+//
+// Session identity is resolved LAZILY, not at module load. Resolving at load
+// races the adapter's SessionStart hook (which writes session.json a moment
+// after Copilot spawns this server) and, when it loses, mints a competing
+// session id — producing a duplicate session row. Instead we resolve on first
+// use: a non-owning probe at Initialize, and a full resolve (attach-or-own)
+// right before the first emitted signal.
+const MCP_START_MS = Date.now();
+let resolveState = "unresolved";
+let sessionId = ""; // empty until resolved
+let ownedStartEmitted = false; // we emit our own SessionStart at most once
+let sessionGoal = null;
+let signalCount = 0;
+let startedAt = Date.now();
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+// ── surfil binary discovery ─────────────────────────────────────────────────────
+function surfilBinary() {
+    // Honour explicit override, then search common install locations
+    if (process.env["SURFIL_BIN"])
+        return process.env["SURFIL_BIN"];
+    const candidates = [
+        "/usr/local/bin/surfil",
+        path.join(os.homedir(), ".local", "bin", "surfil"),
+        path.join(os.homedir(), ".surfil", "bin", "surfil"),
+        "surfil", // PATH fallback
+    ];
+    for (const c of candidates) {
+        if (c === "surfil")
+            return c; // let shell resolve
+        try {
+            fs.accessSync(c, fs.constants.X_OK);
+            return c;
+        }
+        catch { /* next */ }
+    }
+    return "surfil";
+}
+function isSurfilInstalled() {
+    try {
+        const r = cp.spawnSync(surfilBinary(), ["version"], {
+            timeout: 3000,
+            encoding: "utf8",
+            env: { ...process.env, SURFIL_KEYSTORE: process.env["SURFIL_KEYSTORE"] ?? "file://" },
+        });
+        return r.status === 0;
+    }
+    catch {
+        return false;
+    }
+}
+// ── Signal emission via surfil emit ─────────────────────────────────────────────
+function emitSignal(event, tool, extraArgs = []) {
+    if (!sessionId)
+        return; // never emit before the session id is resolved
+    try {
+        const args = [
+            "emit",
+            "--event", event,
+            "--session", sessionId,
+            "--tool", tool,
+            ...extraArgs,
+        ];
+        const r = cp.spawnSync(surfilBinary(), args, {
+            timeout: 5000,
+            encoding: "utf8",
+            env: { ...process.env, SURFIL_KEYSTORE: process.env["SURFIL_KEYSTORE"] ?? "file://" },
+        });
+        // M12: only count signals the agent actually accepted. A missing binary
+        // (r.error) or a non-zero exit means the emit did not land — don't inflate
+        // the counter.
+        if (!r.error && r.status === 0)
+            signalCount++;
+    }
+    catch {
+        // Silent — never crash the MCP server over a signal failure
+    }
+}
+// ── Lifecycle / resolution ────────────────────────────────────────────────────
+function commitAttached(id, goal) {
+    sessionId = id;
+    if (sessionGoal == null && goal)
+        sessionGoal = goal;
+    resolveState = "attached";
+    process.env["SURFIL_SESSION_ID"] = sessionId;
+}
+/**
+ * Non-owning probe. Attaches to an identifiable session (authoritative adapter
+ * env id first, then session.json) but NEVER mints a session. Safe to call at
+ * Initialize and from surfil_status so a harmless status check never creates a
+ * row. No-op once resolved.
+ */
+function probeAttach() {
+    if (resolveState !== "unresolved")
+        return;
+    const envId = adapterEnvSessionId();
+    if (envId) {
+        commitAttached(envId);
+        return;
+    }
+    const a = readActiveSession();
+    if (a && isAttachable(a))
+        commitAttached(a.sessionId, a.goal);
+}
+/**
+ * Owning resolve. Used right before we emit a real signal (goal/track): attach
+ * if we can identify the session, briefly polling to absorb the hook-write race
+ * and partial reads; only if nothing attachable appears do we mint our own
+ * session. Single-flight so concurrent tool calls share one decision.
+ */
+let owningResolve = null;
+function resolveForEmit() {
+    if (resolveState !== "unresolved")
+        return Promise.resolve();
+    if (!owningResolve)
+        owningResolve = doOwningResolve();
+    return owningResolve;
+}
+async function doOwningResolve() {
+    const envId = adapterEnvSessionId();
+    if (envId) {
+        commitAttached(envId);
+        return;
+    }
+    for (let i = 0; i < 6; i++) { // ~6 × 180ms ≈ 1s grace for the SessionStart hook
+        const a = readActiveSession();
+        if (a && isAttachable(a)) {
+            commitAttached(a.sessionId, a.goal);
+            return;
+        }
+        if (i < 5)
+            await sleep(180);
+    }
+    // Standalone host (no hooks, no manual session): own the lifecycle ourselves.
+    sessionId = crypto.randomUUID();
+    resolveState = "owned";
+    process.env["SURFIL_SESSION_ID"] = sessionId;
+}
+// Emit our own SessionStart exactly once, and only for sessions we own. Attached
+// sessions are created and finalized by the adapter's own hooks, so emitting our
+// own lifecycle signals there would duplicate or prematurely end the session.
+function ensureOwnedStart() {
+    if (resolveState === "owned" && !ownedStartEmitted) {
+        startedAt = Date.now();
+        emitSignal("SessionStart", TOOL_NAME);
+        ownedStartEmitted = true;
+    }
+}
+function maybeEmitEnd() {
+    if (resolveState === "owned" && ownedStartEmitted) {
+        const goalArgs = sessionGoal ? ["--goal", sessionGoal] : [];
+        emitSignal("SessionEnd", TOOL_NAME, goalArgs);
+    }
+}
+// Short, display-only session label for tool responses. Shows "(pending)" until
+// the session id is resolved on the first goal/track call.
+function shortSessionLabel() {
+    return sessionId ? sessionId.replace(/-/g, "").slice(0, 8).toUpperCase() : "(pending)";
+}
+// ── MCP Server ────────────────────────────────────────────────────────────────
+const server = new index_js_1.Server({ name: "surfil", version: "1.0.0" }, { capabilities: { tools: {}, prompts: {} } });
+// Map MCP clientInfo.name values → valid Surfil tool names.
+// Called at Initialize time; overrides the env-var detection for better accuracy.
+// Covers canonical names, capitalization variants, and branded product names.
+const CLIENT_NAME_MAP = {
+    // GitHub Copilot
+    "github-copilot": "copilot",
+    "copilot": "copilot",
+    "github-copilot-chat": "copilot",
+    // OpenCode
+    "opencode": "opencode",
+    // Cursor
+    "cursor": "cursor",
+    // VS Code / Copilot Chat in VS Code
+    "visual-studio-code": "vscode",
+    "vscode": "vscode",
+    "vs-code": "vscode",
+    // Windsurf
+    "windsurf": "windsurf",
+    "windsurf-ide": "windsurf",
+    "codeium-windsurf": "windsurf",
+    // Claude Code
+    "claude-code": "claude-code",
+    "claude": "claude-code",
+    // Cline
+    "cline": "cline",
+    // Roo Code — sends "Roo Code", "RooCode", or "roo-code"
+    "roo": "roo",
+    "roo-code": "roo",
+    "roocode": "roo",
+    "roo-codeapp": "roo",
+    // Continue.dev
+    "continue": "continue",
+    "continue-ai": "continue",
+    "continuecode": "continue",
+    "continue-dev": "continue",
+    // Aider
+    "aider": "aider",
+    "aider-chat": "aider",
+    // Codex CLI (OpenAI)
+    "codex": "codex",
+    "codex-cli": "codex",
+    "openai-codex": "codex",
+    "openai-codex-cli": "codex",
+    // Warp terminal
+    "warp": "warp",
+    "warp-terminal": "warp",
+    "warp-app": "warp",
+    // JetBrains — covers all IDEs
+    "jetbrains": "jetbrains",
+    "jetbrains-ide": "jetbrains",
+    "jetbrains-gateway": "jetbrains",
+    "intellij-idea": "jetbrains",
+    "intellij": "jetbrains",
+    "idea": "jetbrains",
+    "webstorm": "jetbrains",
+    "pycharm": "jetbrains",
+    "goland": "jetbrains",
+    "rider": "jetbrains",
+    "clion": "jetbrains",
+    "phpstorm": "jetbrains",
+    "rubymine": "jetbrains",
+    "datagrip": "jetbrains",
+    "android-studio": "jetbrains",
+    // Zed
+    "zed": "zed",
+    "zed-editor": "zed",
+    // Gemini CLI (Google)
+    "gemini-cli": "gemini-cli",
+    "gemini": "gemini-cli",
+    "google-gemini": "gemini-cli",
+    "google-gemini-cli": "gemini-cli",
+    "gemini-code": "gemini-cli",
+    // Neovim
+    "neovim": "neovim",
+    "nvim": "neovim",
+    // PowerShell
+    "powershell": "powershell",
+    "pwsh": "powershell",
+    // Generic CLI
+    "cli": "cli",
+};
+// Detect which AI tool is calling us from env hints.
+// Check both purpose-set MCP flags and well-known CLI env vars.
+function detectTool() {
+    // Explicit adapter override always wins
+    if (process.env["SURFIL_ADAPTER"])
+        return process.env["SURFIL_ADAPTER"];
+    // MCP-specific flags
+    if (process.env["COPILOT_MCP"])
+        return "copilot";
+    if (process.env["CURSOR_MCP"])
+        return "cursor";
+    if (process.env["VSCODE_MCP"])
+        return "vscode";
+    if (process.env["WINDSURF_MCP"])
+        return "windsurf";
+    // GitHub Copilot CLI — sets COPILOT_CLI=1, COPILOT_RUN_APP=1, COPILOT_AGENT_SESSION_ID
+    if (process.env["COPILOT_CLI"] || process.env["COPILOT_RUN_APP"] || process.env["COPILOT_AGENT_SESSION_ID"])
+        return "copilot";
+    // Cursor desktop sets CURSOR_TRACE_ID
+    if (process.env["CURSOR_TRACE_ID"])
+        return "cursor";
+    // VS Code sets VSCODE_PID
+    if (process.env["VSCODE_PID"])
+        return "vscode";
+    // Gemini CLI sets GEMINI_CLI or GOOGLE_CLOUD_CLI_*
+    if (process.env["GEMINI_CLI"] || process.env["GEMINI_API_KEY_SOURCE"] === "gemini-cli")
+        return "gemini-cli";
+    // Codex CLI (OpenAI) sets CODEX_CLI or OPENAI_CODEX_CLI
+    if (process.env["CODEX_CLI"] || process.env["OPENAI_CODEX_CLI"])
+        return "codex";
+    // Warp terminal sets WARP_IS_LOCAL_SHELL_SESSION or TERM_PROGRAM=WarpTerminal
+    if (process.env["WARP_IS_LOCAL_SHELL_SESSION"] || process.env["TERM_PROGRAM"] === "WarpTerminal")
+        return "warp";
+    return "unknown";
+}
+// Map a raw MCP clientInfo.name to a valid Surfil tool name.
+// Falls back to the env-detected TOOL_NAME if no mapping exists.
+function clientNameToTool(clientName, fallback) {
+    if (!clientName)
+        return fallback;
+    const normalized = clientName.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
+    return CLIENT_NAME_MAP[normalized] ?? fallback;
+}
+// Mutable — updated at Initialize time from clientInfo.name for better accuracy.
+let TOOL_NAME = detectTool();
+server.setRequestHandler(types_js_1.ListToolsRequestSchema, async () => ({
+    tools: [
+        {
+            name: "surfil_set_goal",
+            description: "Set the goal or task description for the current Surfil session. Call this at the start of a task to get accurate session tracking.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    goal: {
+                        type: "string",
+                        description: "The task or goal for this AI coding session (e.g. 'Fix the login bug in auth.ts')",
+                    },
+                },
+                required: ["goal"],
+            },
+        },
+        {
+            name: "surfil_status",
+            description: "Get the current Surfil session status — session ID, goal, duration, and signal count.",
+            inputSchema: {
+                type: "object",
+                properties: {},
+            },
+        },
+        {
+            name: "surfil_track",
+            description: "Track a completed tool use or task step in the current Surfil session. Call after completing a meaningful action.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    tool: {
+                        type: "string",
+                        description: "Name of the tool or action that was used",
+                    },
+                    success: {
+                        type: "boolean",
+                        description: "Whether the tool use succeeded",
+                        default: true,
+                    },
+                    model: {
+                        type: "string",
+                        description: "Optional model name used for this step (e.g. gpt-4o, claude-3-5-sonnet)",
+                    },
+                    tokens_used: {
+                        type: "integer",
+                        description: "Optional token count for this step",
+                    },
+                },
+                required: ["tool"],
+            },
+        },
+        {
+            name: "surfil_telemetry",
+            description: "Report model usage and cost telemetry for the current Surfil session. Call after each LLM turn to surface tokens, model, and cost in the dashboard.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    model: {
+                        type: "string",
+                        description: "Model name (e.g. gpt-4o, claude-3-5-sonnet-20241022)",
+                    },
+                    tokens_used: {
+                        type: "integer",
+                        description: "Total tokens consumed (prompt + completion)",
+                    },
+                    tokens_saved: {
+                        type: "integer",
+                        description: "Tokens saved by Surfil optimizations (if known)",
+                        default: 0,
+                    },
+                    cost_usd: {
+                        type: "number",
+                        description: "Estimated cost in USD for this turn",
+                    },
+                },
+                required: ["model", "tokens_used"],
+            },
+        },
+        {
+            name: "temper_instructions",
+            description: `Return the Surfil Temper Standard behavioral governance rules for AI coding assistants. Exposes the same content as the 'temper' prompt but as a callable tool. Use when you need to programmatically retrieve the rules at a specific enforcement level.`,
+            inputSchema: {
+                type: "object",
+                properties: {
+                    mode: {
+                        type: "string",
+                        enum: ["basic", "full", "ultra"],
+                        description: "Enforcement level. 'basic' = advisory; 'full' (default) = enforced; 'ultra' = extremist + scope challenges.",
+                        default: "full",
+                    },
+                },
+            },
+            // MCP annotation: read-only, no side effects.
+            annotations: {
+                readOnlyHint: true,
+                openWorldHint: false,
+            },
+        },
+        {
+            name: "surfil_retrieve",
+            description: `Retrieve the byte-exact original content for a compressed CCR entry by its content hash. Use this when the model needs the full uncompressed version of a compressed context block. Read-only — no side effects. Max 3 retrievals per hash (DR-14).`,
+            inputSchema: {
+                type: "object",
+                properties: {
+                    hash: {
+                        type: "string",
+                        description: "The SHA-256 content hash of the CCR entry to retrieve.",
+                    },
+                    query: {
+                        type: "string",
+                        description: "Optional search query within the retrieved content (for BM25 search).",
+                    },
+                },
+                required: ["hash"],
+            },
+            annotations: {
+                readOnlyHint: true,
+                openWorldHint: false,
+            },
+        },
+    ],
+}));
+// ── Prompts — temper ──────────────────────────────────────────────────────────
+// The `temper` prompt exposes the Surfil Temper Standard as an MCP prompt entry.
+// Hosts that only have access to the prompt menu (not tool calls) can inject
+// the rules directly by selecting this prompt.
+server.setRequestHandler(types_js_1.ListPromptsRequestSchema, async () => ({
+    prompts: [
+        {
+            name: "temper",
+            description: `Surfil Temper Standard v${temper_standard_js_1.TEMPER_VERSION} — behavioral governance rules for AI coding assistants. Enforces the Restraint Ladder, Token-Efficiency Rules, and Non-Negotiable Carve-Outs.`,
+            arguments: [
+                {
+                    name: "mode",
+                    description: "Enforcement level: 'basic' (advisory), 'full' (default, enforced), or 'ultra' (extremist + scope challenges).",
+                    required: false,
+                },
+            ],
+        },
+    ],
+}));
+server.setRequestHandler(types_js_1.GetPromptRequestSchema, async (req) => {
+    const { name, arguments: promptArgs } = req.params;
+    if (name !== "temper") {
+        throw new Error(`Unknown prompt: ${name}`);
+    }
+    const mode = String(promptArgs?.mode ?? "full");
+    const text = (0, temper_standard_js_1.getStandardForLevel)(mode);
+    return {
+        description: `Surfil Temper Standard v${temper_standard_js_1.TEMPER_VERSION} — level: ${mode}`,
+        messages: [
+            {
+                role: "user",
+                content: {
+                    type: "text",
+                    text,
+                },
+            },
+        ],
+    };
+});
+async function handleCallTool(req) {
+    const { name, arguments: args } = req.params;
+    if (name === "surfil_set_goal") {
+        const goal = String(args?.goal ?? "").slice(0, 500);
+        sessionGoal = goal;
+        await resolveForEmit();
+        ensureOwnedStart();
+        // UserPromptSubmit carries goal_declared into the resolved session so the
+        // engine records it (works whether attached to the adapter session or owned).
+        emitSignal("UserPromptSubmit", TOOL_NAME, ["--goal", goal]);
+        return {
+            content: [{ type: "text", text: `✅ Surfil goal set: "${goal}" (session ${shortSessionLabel()})` }],
+        };
+    }
+    if (name === "surfil_status") {
+        probeAttach(); // identify the session if possible, but never create one
+        const installed = isSurfilInstalled();
+        const durationSec = Math.floor((Date.now() - startedAt) / 1000);
+        const m = Math.floor(durationSec / 60);
+        const s = durationSec % 60;
+        const mode = resolveState === "attached"
+            ? "attached (adapter/surfil-on session)"
+            : resolveState === "owned"
+                ? "standalone (surfil-mcp owns this session)"
+                : "pending (starts on first goal/track)";
+        return {
+            content: [{
+                    type: "text",
+                    text: [
+                        `**Surfil Session**`,
+                        `ID: ${shortSessionLabel()}`,
+                        `Adapter: ${TOOL_NAME}`,
+                        `Mode: ${mode}`,
+                        `Duration: ${m > 0 ? `${m}m ` : ""}${s}s`,
+                        `Signals sent: ${signalCount}`,
+                        `Goal: ${sessionGoal ?? "(not set — call surfil_set_goal)"}`,
+                        `Agent binary: ${installed ? "✅ found" : "❌ not found — install from surfil.com"}`,
+                    ].join("\n"),
+                }],
+        };
+    }
+    if (name === "surfil_track") {
+        const tool = String(args?.tool ?? "unknown");
+        const success = args?.success !== false;
+        const model = String(args?.model ?? "");
+        const tokensUsed = Number(args?.tokens_used ?? 0);
+        await resolveForEmit();
+        ensureOwnedStart();
+        const extra = ["--tool", tool, "--success", success ? "true" : "false"];
+        if (model)
+            extra.push("--model", model);
+        if (tokensUsed > 0)
+            extra.push("--tokens-used", String(tokensUsed));
+        emitSignal("PostToolUse", TOOL_NAME, extra);
+        return {
+            content: [{ type: "text", text: `✅ Tracked: ${tool} (success=${success})` }],
+        };
+    }
+    if (name === "surfil_telemetry") {
+        const model = String(args?.model ?? "");
+        const tokensUsed = Number(args?.tokens_used ?? 0);
+        const tokensSaved = Number(args?.tokens_saved ?? 0);
+        const costUsd = Number(args?.cost_usd ?? 0);
+        await resolveForEmit();
+        ensureOwnedStart();
+        const extra = [];
+        if (model)
+            extra.push("--model", model);
+        if (tokensUsed > 0)
+            extra.push("--tokens-used", String(tokensUsed));
+        if (tokensSaved > 0)
+            extra.push("--tokens-saved", String(tokensSaved));
+        if (costUsd > 0)
+            extra.push("--cost-usd", String(costUsd));
+        // Emit as a synthetic PostToolUse with telemetry payload so the engine
+        // records model and tokens for dashboard surfacing.
+        emitSignal("PostToolUse", TOOL_NAME, extra);
+        return {
+            content: [{ type: "text", text: `📊 Telemetry: ${model} · ${tokensUsed.toLocaleString()} tokens` }],
+        };
+    }
+    if (name === "temper_instructions") {
+        const mode = String(args?.mode ?? "full");
+        const text = (0, temper_standard_js_1.getStandardForLevel)(mode);
+        return {
+            content: [{ type: "text", text }],
+            // No side effects: read-only return of the embedded standard.
+        };
+    }
+    if (name === "surfil_retrieve") {
+        const hash = String(args?.hash ?? "");
+        if (!hash) {
+            return { content: [{ type: "text", text: "Error: hash is required" }], isError: true };
+        }
+        // In production, this calls the engine CCR store via retrieveFromEngine.
+        // For the framework, we return a placeholder indicating the retrieval mechanism.
+        // The actual retrieval is wired when the engine endpoint is deployed.
+        const query = args?.query ? ` (query: "${String(args.query)}")` : "";
+        return {
+            content: [{
+                    type: "text",
+                    text: `Retrieve request for hash ${hash}${query} — use engine /temper/ccr-retrieve endpoint. Max 3 rounds per hash (DR-14). Read-only: no content was modified.`,
+                }],
+        };
+    }
+    return {
+        content: [{ type: "text", text: `Unknown tool: ${name}` }],
+        isError: true,
+    };
+}
+server.setRequestHandler(types_js_1.CallToolRequestSchema, handleCallTool);
+// ── Main ──────────────────────────────────────────────────────────────────────
+async function main() {
+    const transport = new stdio_js_1.StdioServerTransport();
+    // Resolve the session id from clientInfo first so source-matching is correct,
+    // then run a NON-OWNING probe: for Copilot this attaches to the authoritative
+    // COPILOT_AGENT_SESSION_ID immediately (race-free); otherwise it stays
+    // unresolved until the first goal/track call, which avoids the load-time race
+    // that previously minted a duplicate session.
+    server.setRequestHandler(types_js_1.InitializeRequestSchema, async (req) => {
+        const rawClientName = req.params?.clientInfo?.name ?? "";
+        TOOL_NAME = clientNameToTool(rawClientName, TOOL_NAME);
+        probeAttach();
+        // Standalone host (VS Code, Cursor, etc.) — no adapter hooks and no manual
+        // session. Immediately own the lifecycle so a session row exists from turn 1.
+        if (resolveState === "unresolved") {
+            sessionId = crypto.randomUUID();
+            resolveState = "owned";
+            process.env["SURFIL_SESSION_ID"] = sessionId;
+            ensureOwnedStart();
+        }
+        return {
+            protocolVersion: "2024-11-05",
+            capabilities: { tools: {} },
+            serverInfo: { name: "surfil", version: "1.0.0" },
+        };
+    });
+    // On exit, finalize only sessions we own; attached adapter sessions are
+    // finalized by the adapter's own SessionEnd hook.
+    const shutdown = () => {
+        maybeEmitEnd();
+        process.exit(0);
+    };
+    process.on("SIGTERM", shutdown);
+    process.on("SIGINT", shutdown);
+    process.on("disconnect", shutdown);
+    // Heartbeat: keep owned-session last_signal_at fresh so the dashboard marks
+    // it live. Attached sessions rely on adapter hooks; owned sessions beat here.
+    setInterval(() => {
+        if (resolveState === "owned" && ownedStartEmitted) {
+            emitSignal("Heartbeat", TOOL_NAME);
+        }
+    }, 30000);
+    await server.connect(transport);
+}
+// Entrypoint guard: only start the stdio server when executed directly
+// (`node dist/index.js`). When imported by the test suite, the handlers and
+// emitSignal are exercised in isolation without spawning a server.
+if (typeof require !== "undefined" && require.main === module) {
+    main().catch((err) => {
+        process.stderr.write(`surfil-mcp error: ${err}\n`);
+        process.exit(1);
+    });
+}
+// Test-only surface: lets the suite drive the REAL emitSignal (and observe the
+// signal counter) instead of re-implementing the logic. Not part of the public
+// MCP contract.
+exports.__test = {
+    emitSignal,
+    signalCount: () => signalCount,
+    reset(id) {
+        sessionId = id;
+        signalCount = 0;
+    },
+    handleCallTool,
+    getGoal: () => sessionGoal,
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;AACA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,wEAAmE;AACnE,wEAAiF;AACjF,iEAM4C;AAC5C,6DAA2E;AAC3E,+CAAiC;AACjC,kDAAoC;AACpC,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAE7B,iFAAiF;AAEjF,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAG,kCAAkC;AACnF,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,CAAC,CAAQ,kDAAkD;AAEnG;;;;;;;GAOG;AACH,SAAS,mBAAmB;IAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACnD,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAUD;;;;;;GAMG;AACH,SAAS,iBAAiB;IACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QAC3C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC;QACnD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAM7B,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACpF,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7F,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,UAAU;YAC5B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW;YACxD,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY;SAC5D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC,CAAC,8DAA8D,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,CAAgB;IACpC,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,CAAC,CAAC,WAAW,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,WAAW,GAAG,kBAAkB;QAAE,OAAO,KAAK,CAAC;IACvF,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,CAAC,WAAW,IAAI,YAAY,GAAG,qBAAqB;eACvD,CAAC,CAAC,YAAY,IAAI,YAAY,GAAG,qBAAqB,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,8EAA8E;AAC9E,4EAA4E;AAC5E,yCAAyC;AAEzC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAGhC,IAAI,YAAY,GAAiB,YAAY,CAAC;AAC9C,IAAI,SAAS,GAAG,EAAE,CAAC,CAAiB,uBAAuB;AAC3D,IAAI,iBAAiB,GAAG,KAAK,CAAC,CAAM,4CAA4C;AAChF,IAAI,WAAW,GAAkB,IAAI,CAAC;AACtC,IAAI,WAAW,GAAG,CAAC,CAAC;AACpB,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAE3B,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEtF,mFAAmF;AAEnF,SAAS,YAAY;IACnB,iEAAiE;IACjE,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG;QACjB,uBAAuB;QACvB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC;QACnD,QAAQ,EAAE,gBAAgB;KAC3B,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,CAAC,oBAAoB;QAClD,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB;IACxB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE;YAClD,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,MAAM;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,SAAS,EAAE;SACtF,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,mFAAmF;AAEnF,SAAS,UAAU,CAAC,KAAa,EAAE,IAAY,EAAE,YAAsB,EAAE;IACvE,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,+CAA+C;IACvE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG;YACX,MAAM;YACN,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,SAAS;YACtB,QAAQ,EAAE,IAAI;YACd,GAAG,SAAS;SACb,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE;YAC3C,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,MAAM;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,SAAS,EAAE;SACtF,CAAC,CAAC;QACH,wEAAwE;QACxE,2EAA2E;QAC3E,eAAe;QACf,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,WAAW,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,SAAS,cAAc,CAAC,EAAU,EAAE,IAAa;IAC/C,SAAS,GAAG,EAAE,CAAC;IACf,IAAI,WAAW,IAAI,IAAI,IAAI,IAAI;QAAE,WAAW,GAAG,IAAI,CAAC;IACpD,YAAY,GAAG,UAAU,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW;IAClB,IAAI,YAAY,KAAK,YAAY;QAAE,OAAO;IAC1C,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,KAAK,EAAE,CAAC;QAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,iBAAiB,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC;QAAE,cAAc,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,IAAI,aAAa,GAAyB,IAAI,CAAC;AAC/C,SAAS,cAAc;IACrB,IAAI,YAAY,KAAK,YAAY;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5D,IAAI,CAAC,aAAa;QAAE,aAAa,GAAG,eAAe,EAAE,CAAC;IACtD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,eAAe;IAC5B,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,KAAK,EAAE,CAAC;QAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,kDAAkD;QAC9E,MAAM,CAAC,GAAG,iBAAiB,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,cAAc,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,8EAA8E;IAC9E,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAChC,YAAY,GAAG,OAAO,CAAC;IACvB,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;AAC/C,CAAC;AAED,iFAAiF;AACjF,iFAAiF;AACjF,8EAA8E;AAC9E,SAAS,gBAAgB;IACvB,IAAI,YAAY,KAAK,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACnD,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,UAAU,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QACtC,iBAAiB,GAAG,IAAI,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,YAAY,KAAK,OAAO,IAAI,iBAAiB,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,2DAA2D;AAC3D,SAAS,iBAAiB;IACxB,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;AACzF,CAAC;AAED,iFAAiF;AAEjF,MAAM,MAAM,GAAG,IAAI,iBAAM,CACvB,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EACpC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAC7C,CAAC;AAEF,4DAA4D;AAC5D,kFAAkF;AAClF,8EAA8E;AAC9E,MAAM,eAAe,GAA2B;IAC9C,iBAAiB;IACjB,gBAAgB,EAAE,SAAS;IAC3B,SAAS,EAAE,SAAS;IACpB,qBAAqB,EAAE,SAAS;IAChC,WAAW;IACX,UAAU,EAAE,UAAU;IACtB,SAAS;IACT,QAAQ,EAAE,QAAQ;IAClB,oCAAoC;IACpC,oBAAoB,EAAE,QAAQ;IAC9B,QAAQ,EAAE,QAAQ;IAClB,SAAS,EAAE,QAAQ;IACnB,WAAW;IACX,UAAU,EAAE,UAAU;IACtB,cAAc,EAAE,UAAU;IAC1B,kBAAkB,EAAE,UAAU;IAC9B,cAAc;IACd,aAAa,EAAE,aAAa;IAC5B,QAAQ,EAAE,aAAa;IACvB,QAAQ;IACR,OAAO,EAAE,OAAO;IAChB,wDAAwD;IACxD,KAAK,EAAE,KAAK;IACZ,UAAU,EAAE,KAAK;IACjB,SAAS,EAAE,KAAK;IAChB,aAAa,EAAE,KAAK;IACpB,eAAe;IACf,UAAU,EAAE,UAAU;IACtB,aAAa,EAAE,UAAU;IACzB,cAAc,EAAE,UAAU;IAC1B,cAAc,EAAE,UAAU;IAC1B,QAAQ;IACR,OAAO,EAAE,OAAO;IAChB,YAAY,EAAE,OAAO;IACrB,qBAAqB;IACrB,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,OAAO;IACpB,cAAc,EAAE,OAAO;IACvB,kBAAkB,EAAE,OAAO;IAC3B,gBAAgB;IAChB,MAAM,EAAE,MAAM;IACd,eAAe,EAAE,MAAM;IACvB,UAAU,EAAE,MAAM;IAClB,8BAA8B;IAC9B,WAAW,EAAE,WAAW;IACxB,eAAe,EAAE,WAAW;IAC5B,mBAAmB,EAAE,WAAW;IAChC,eAAe,EAAE,WAAW;IAC5B,UAAU,EAAE,WAAW;IACvB,MAAM,EAAE,WAAW;IACnB,UAAU,EAAE,WAAW;IACvB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,WAAW;IACrB,OAAO,EAAE,WAAW;IACpB,OAAO,EAAE,WAAW;IACpB,UAAU,EAAE,WAAW;IACvB,UAAU,EAAE,WAAW;IACvB,UAAU,EAAE,WAAW;IACvB,gBAAgB,EAAE,WAAW;IAC7B,MAAM;IACN,KAAK,EAAE,KAAK;IACZ,YAAY,EAAE,KAAK;IACnB,sBAAsB;IACtB,YAAY,EAAE,YAAY;IAC1B,QAAQ,EAAE,YAAY;IACtB,eAAe,EAAE,YAAY;IAC7B,mBAAmB,EAAE,YAAY;IACjC,aAAa,EAAE,YAAY;IAC3B,SAAS;IACT,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,QAAQ;IAChB,aAAa;IACb,YAAY,EAAE,YAAY;IAC1B,MAAM,EAAE,YAAY;IACpB,cAAc;IACd,KAAK,EAAE,KAAK;CACb,CAAC;AAEF,qDAAqD;AACrD,gEAAgE;AAChE,SAAS,UAAU;IACjB,wCAAwC;IACxC,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxE,qBAAqB;IACrB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAAG,OAAO,QAAQ,CAAC;IAChD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAAG,OAAO,QAAQ,CAAC;IAChD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAAE,OAAO,UAAU,CAAC;IACnD,uFAAuF;IACvF,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9H,sCAAsC;IACtC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAAE,OAAO,QAAQ,CAAC;IACpD,0BAA0B;IAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/C,mDAAmD;IACnD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IAC5G,wDAAwD;IACxD,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAAE,OAAO,OAAO,CAAC;IAChF,8EAA8E;IAC9E,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,cAAc;QAAE,OAAO,MAAM,CAAC;IAChH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6DAA6D;AAC7D,iEAAiE;AACjE,SAAS,gBAAgB,CAAC,UAAkB,EAAE,QAAgB;IAC5D,IAAI,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC;IACjC,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9F,OAAO,eAAe,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC;AACjD,CAAC;AAED,iFAAiF;AACjF,IAAI,SAAS,GAAG,UAAU,EAAE,CAAC;AAE7B,MAAM,CAAC,iBAAiB,CAAC,iCAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5D,KAAK,EAAE;QACL;YACE,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,qIAAqI;YAClJ,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,mFAAmF;qBACjG;iBACF;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;QACD;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,uFAAuF;YACpG,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE;aACf;SACF;QACD;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,mHAAmH;YAChI,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,0CAA0C;qBACxD;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,gCAAgC;wBAC7C,OAAO,EAAE,IAAI;qBACd;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,yEAAyE;qBACvF;oBACD,WAAW,EAAE;wBACX,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,oCAAoC;qBAClD;iBACF;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,qJAAqJ;YAClK,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,sDAAsD;qBACpE;oBACD,WAAW,EAAE;wBACX,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,6CAA6C;qBAC3D;oBACD,YAAY,EAAE;wBACZ,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,iDAAiD;wBAC9D,OAAO,EAAE,CAAC;qBACX;oBACD,QAAQ,EAAE;wBACR,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,qCAAqC;qBACnD;iBACF;gBACD,QAAQ,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC;aACnC;SACF;QACD;YACE,IAAI,EAAE,qBAAqB;YAC3B,WAAW,EAAE,2PAA2P;YACxQ,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;wBAChC,WAAW,EAAE,6GAA6G;wBAC1H,OAAO,EAAE,MAAM;qBAChB;iBACF;aACF;YACD,8CAA8C;YAC9C,WAAW,EAAE;gBACX,YAAY,EAAE,IAAI;gBAClB,aAAa,EAAE,KAAK;aACrB;SACF;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,qPAAqP;YAClQ,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,wDAAwD;qBACtE;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,uEAAuE;qBACrF;iBACF;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;YACD,WAAW,EAAE;gBACX,YAAY,EAAE,IAAI;gBAClB,aAAa,EAAE,KAAK;aACrB;SACF;KACF;CACF,CAAC,CAAC,CAAC;AAEJ,iFAAiF;AACjF,iFAAiF;AACjF,6EAA6E;AAC7E,+CAA+C;AAE/C,MAAM,CAAC,iBAAiB,CAAC,mCAAwB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9D,OAAO,EAAE;QACP;YACE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,2BAA2B,mCAAc,gJAAgJ;YACtM,SAAS,EAAE;gBACT;oBACE,IAAI,EAAE,MAAM;oBACZ,WAAW,EAAE,+GAA+G;oBAC5H,QAAQ,EAAE,KAAK;iBAChB;aACF;SACF;KACF;CACF,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,iBAAiB,CAAC,iCAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;IAC7D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,EAAE,IAAI,IAAI,MAAM,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,IAAA,wCAAmB,EAAC,IAAI,CAAC,CAAC;IACvC,OAAO;QACL,WAAW,EAAE,2BAA2B,mCAAc,aAAa,IAAI,EAAE;QACzE,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAe;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI;iBACL;aACF;SACF;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,cAAc,CAAC,GAAsD;IAClF,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAE7C,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAE,IAAY,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7D,WAAW,GAAG,IAAI,CAAC;QACnB,MAAM,cAAc,EAAE,CAAC;QACvB,gBAAgB,EAAE,CAAC;QACnB,0EAA0E;QAC1E,8EAA8E;QAC9E,UAAU,CAAC,kBAAkB,EAAE,SAAS,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,IAAI,cAAc,iBAAiB,EAAE,GAAG,EAAE,CAAC;SACnG,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,WAAW,EAAE,CAAC,CAAC,yDAAyD;QACxE,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,WAAW,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,YAAY,KAAK,UAAU;YACtC,CAAC,CAAC,sCAAsC;YACxC,CAAC,CAAC,YAAY,KAAK,OAAO;gBACxB,CAAC,CAAC,2CAA2C;gBAC7C,CAAC,CAAC,sCAAsC,CAAC;QAC7C,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE;wBACJ,oBAAoB;wBACpB,OAAO,iBAAiB,EAAE,EAAE;wBAC5B,YAAY,SAAS,EAAE;wBACvB,SAAS,IAAI,EAAE;wBACf,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG;wBACzC,iBAAiB,WAAW,EAAE;wBAC9B,SAAS,WAAW,IAAI,kCAAkC,EAAE;wBAC5D,iBAAiB,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uCAAuC,EAAE;qBACnF,CAAC,IAAI,CAAC,IAAI,CAAC;iBACb,CAAC;SACH,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAE,IAAY,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC;QACtD,MAAM,OAAO,GAAI,IAAY,EAAE,OAAO,KAAK,KAAK,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,CAAE,IAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,CAAE,IAAY,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;QAC3D,MAAM,cAAc,EAAE,CAAC;QACvB,gBAAgB,EAAE,CAAC;QACnB,MAAM,KAAK,GAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAClF,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACxC,IAAI,UAAU,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACpE,UAAU,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5C,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,IAAI,aAAa,OAAO,GAAG,EAAE,CAAC;SAC7E,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,CAAE,IAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,CAAE,IAAY,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,MAAM,CAAE,IAAY,EAAE,YAAY,IAAI,CAAC,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,MAAM,CAAE,IAAY,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;QACrD,MAAM,cAAc,EAAE,CAAC;QACvB,gBAAgB,EAAE,CAAC;QACnB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACxC,IAAI,UAAU,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACpE,IAAI,WAAW,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QACvE,IAAI,OAAO,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3D,uEAAuE;QACvE,oDAAoD;QACpD,UAAU,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5C,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,KAAK,MAAM,UAAU,CAAC,cAAc,EAAE,SAAS,EAAE,CAAC;SACpG,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAE,IAAY,EAAE,IAAI,IAAI,MAAM,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,IAAA,wCAAmB,EAAC,IAAI,CAAC,CAAC;QACvC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACjC,8DAA8D;SAC/D,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAE,IAAY,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACzF,CAAC;QACD,yEAAyE;QACzE,iFAAiF;QACjF,sEAAsE;QACtE,MAAM,KAAK,GAAI,IAAY,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa,MAAM,CAAE,IAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,6BAA6B,IAAI,GAAG,KAAK,iHAAiH;iBACjK,CAAC;SACH,CAAC;IACJ,CAAC;IAED,OAAO;QACJ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;QAC3D,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,iBAAiB,CAAC,gCAAqB,EAAE,cAAc,CAAC,CAAC;AAEhE,iFAAiF;AAEjF,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAE7C,8EAA8E;IAC9E,8EAA8E;IAC9E,uEAAuE;IACvE,8EAA8E;IAC9E,8CAA8C;IAC9C,MAAM,CAAC,iBAAiB,CAAC,kCAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC9D,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC;QACzD,SAAS,GAAG,gBAAgB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QACvD,WAAW,EAAE,CAAC;QACd,2EAA2E;QAC3E,8EAA8E;QAC9E,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;YAClC,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAChC,YAAY,GAAG,OAAO,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;YAC7C,gBAAgB,EAAE,CAAC;QACrB,CAAC;QACD,OAAO;YACL,eAAe,EAAE,YAAY;YAC7B,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;SACjD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,kDAAkD;IAClD,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,YAAY,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAEnC,4EAA4E;IAC5E,8EAA8E;IAC9E,WAAW,CAAC,GAAG,EAAE;QACf,IAAI,YAAY,KAAK,OAAO,IAAI,iBAAiB,EAAE,CAAC;YAClD,UAAU,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,EAAE,KAAM,CAAC,CAAC;IAEX,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,uEAAuE;AACvE,4EAA4E;AAC5E,mEAAmE;AACnE,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC9D,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,+EAA+E;AAC/E,gBAAgB;AACH,QAAA,MAAM,GAAG;IACpB,UAAU;IACV,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW;IAC9B,KAAK,CAAC,EAAU;QACd,SAAS,GAAG,EAAE,CAAC;QACf,WAAW,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,cAAc;IACd,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW;CAC3B,CAAC"}

package/dist/retrieve.d.ts

@@ -0,0 +1,70 @@
+/**
+ * retrieve.ts — Task 9.6: Retrieve-on-demand via surfil-mcp (family J) + multi-turn tracker.
+ *
+ * Exposes `surfil_retrieve(hash, query?)` as a Surfil-MCP tool. The tool calls the
+ * engine's CCR store (9.2) to retrieve the byte-exact original content by hash.
+ *
+ * Multi-turn tracker: tracks which compressed entries have been referenced across
+ * turns and proactively re-expands them when a later turn references the same hash.
+ *
+ * DR-14: max 3 retrieve rounds per hash.
+ * Mode: OO (overlay/observability), read-only tool.
+ * Ownership-scoped: retrieval is scoped to the current session/user.
+ */
+export interface RetrieveRecord {
+    hash: string;
+    retrievedAt: number;
+    turn: number;
+    roundsUsed: number;
+}
+export interface MultiTurnTracker {
+    records: Map<string, RetrieveRecord>;
+    currentTurn: number;
+    totalRetrievals: number;
+}
+/**
+ * Create a new multi-turn tracker.
+ */
+export declare function createTracker(): MultiTurnTracker;
+/**
+ * advanceTurn increments the turn counter.
+ * Called at the start of each new model turn.
+ */
+export declare function advanceTurn(tracker: MultiTurnTracker): void;
+/**
+ * recordRetrieve logs a retrieve action in the multi-turn tracker.
+ * Returns false if the max rounds (DR-14: 3) have been exceeded for this hash.
+ */
+export declare function recordRetrieve(tracker: MultiTurnTracker, hash: string): boolean;
+/**
+ * getReferencedHashes returns all hashes that have been referenced across turns.
+ * Used for proactive re-expansion.
+ */
+export declare function getReferencedHashes(tracker: MultiTurnTracker): string[];
+/**
+ * isMaxRoundsReached checks if a hash has exhausted its retrieve rounds.
+ */
+export declare function isMaxRoundsReached(tracker: MultiTurnTracker, hash: string): boolean;
+/**
+ * getRetrieveCount returns how many times a hash has been retrieved.
+ */
+export declare function getRetrieveCount(tracker: MultiTurnTracker, hash: string): number;
+/**
+ * clearTracker resets the multi-turn tracker (e.g. on session end).
+ */
+export declare function clearTracker(tracker: MultiTurnTracker): void;
+export interface RetrieveResult {
+    found: boolean;
+    original: string | null;
+    hash: string;
+    roundsUsed: number;
+    maxRoundsReached: boolean;
+    error: string | null;
+}
+/**
+ * retrieveFromEngine calls the engine's CCR store endpoint to retrieve content by hash.
+ * In production, this makes an HTTP call to engine.surfil.com/temper/ccr-retrieve?hash=...
+ * For the framework, this is a placeholder that the MCP server wires up.
+ */
+export declare function retrieveFromEngine(hash: string, engineUrl: string, internalKey: string, tracker: MultiTurnTracker): Promise<RetrieveResult>;
+//# sourceMappingURL=retrieve.d.ts.map

package/dist/retrieve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retrieve.d.ts","sourceRoot":"","sources":["../src/retrieve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,gBAAgB,CAMhD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAE3D;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAiB/E;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAEvE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAGnF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhF;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAI5D;AAID,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,cAAc,CAAC,CA0DzB"}

package/dist/retrieve.js

@@ -0,0 +1,147 @@
+"use strict";
+/**
+ * retrieve.ts — Task 9.6: Retrieve-on-demand via surfil-mcp (family J) + multi-turn tracker.
+ *
+ * Exposes `surfil_retrieve(hash, query?)` as a Surfil-MCP tool. The tool calls the
+ * engine's CCR store (9.2) to retrieve the byte-exact original content by hash.
+ *
+ * Multi-turn tracker: tracks which compressed entries have been referenced across
+ * turns and proactively re-expands them when a later turn references the same hash.
+ *
+ * DR-14: max 3 retrieve rounds per hash.
+ * Mode: OO (overlay/observability), read-only tool.
+ * Ownership-scoped: retrieval is scoped to the current session/user.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTracker = createTracker;
+exports.advanceTurn = advanceTurn;
+exports.recordRetrieve = recordRetrieve;
+exports.getReferencedHashes = getReferencedHashes;
+exports.isMaxRoundsReached = isMaxRoundsReached;
+exports.getRetrieveCount = getRetrieveCount;
+exports.clearTracker = clearTracker;
+exports.retrieveFromEngine = retrieveFromEngine;
+/**
+ * Create a new multi-turn tracker.
+ */
+function createTracker() {
+    return {
+        records: new Map(),
+        currentTurn: 0,
+        totalRetrievals: 0,
+    };
+}
+/**
+ * advanceTurn increments the turn counter.
+ * Called at the start of each new model turn.
+ */
+function advanceTurn(tracker) {
+    tracker.currentTurn++;
+}
+/**
+ * recordRetrieve logs a retrieve action in the multi-turn tracker.
+ * Returns false if the max rounds (DR-14: 3) have been exceeded for this hash.
+ */
+function recordRetrieve(tracker, hash) {
+    const existing = tracker.records.get(hash);
+    const roundsUsed = existing ? existing.roundsUsed + 1 : 1;
+    // DR-14: max 3 retrieve rounds per hash.
+    if (roundsUsed > 3) {
+        return false; // exceeded max rounds
+    }
+    tracker.records.set(hash, {
+        hash,
+        retrievedAt: Date.now(),
+        turn: tracker.currentTurn,
+        roundsUsed,
+    });
+    tracker.totalRetrievals++;
+    return true;
+}
+/**
+ * getReferencedHashes returns all hashes that have been referenced across turns.
+ * Used for proactive re-expansion.
+ */
+function getReferencedHashes(tracker) {
+    return Array.from(tracker.records.keys());
+}
+/**
+ * isMaxRoundsReached checks if a hash has exhausted its retrieve rounds.
+ */
+function isMaxRoundsReached(tracker, hash) {
+    const record = tracker.records.get(hash);
+    return record !== undefined && record.roundsUsed >= 3;
+}
+/**
+ * getRetrieveCount returns how many times a hash has been retrieved.
+ */
+function getRetrieveCount(tracker, hash) {
+    return tracker.records.get(hash)?.roundsUsed ?? 0;
+}
+/**
+ * clearTracker resets the multi-turn tracker (e.g. on session end).
+ */
+function clearTracker(tracker) {
+    tracker.records.clear();
+    tracker.currentTurn = 0;
+    tracker.totalRetrievals = 0;
+}
+/**
+ * retrieveFromEngine calls the engine's CCR store endpoint to retrieve content by hash.
+ * In production, this makes an HTTP call to engine.surfil.com/temper/ccr-retrieve?hash=...
+ * For the framework, this is a placeholder that the MCP server wires up.
+ */
+async function retrieveFromEngine(hash, engineUrl, internalKey, tracker) {
+    // Check if max rounds already reached (DR-14).
+    if (isMaxRoundsReached(tracker, hash)) {
+        return {
+            found: false,
+            original: null,
+            hash,
+            roundsUsed: getRetrieveCount(tracker, hash),
+            maxRoundsReached: true,
+            error: "Max retrieve rounds (3) reached for this hash — content may have expired",
+        };
+    }
+    try {
+        const res = await fetch(`${engineUrl}/temper/ccr-retrieve?hash=${encodeURIComponent(hash)}`, {
+            method: "GET",
+            headers: { Authorization: `Bearer ${internalKey}` },
+            signal: AbortSignal.timeout(5000),
+        });
+        if (!res.ok) {
+            // Record the attempt even on failure.
+            recordRetrieve(tracker, hash);
+            return {
+                found: false,
+                original: null,
+                hash,
+                roundsUsed: getRetrieveCount(tracker, hash),
+                maxRoundsReached: false,
+                error: `Engine returned HTTP ${res.status}`,
+            };
+        }
+        const data = await res.json();
+        recordRetrieve(tracker, hash);
+        return {
+            found: data.found,
+            original: data.found ? data.original : null,
+            hash,
+            roundsUsed: getRetrieveCount(tracker, hash),
+            maxRoundsReached: isMaxRoundsReached(tracker, hash),
+            error: data.expired ? "Content expired (TTL 5min passed)" : null,
+        };
+    }
+    catch (e) {
+        recordRetrieve(tracker, hash);
+        return {
+            found: false,
+            original: null,
+            hash,
+            roundsUsed: getRetrieveCount(tracker, hash),
+            maxRoundsReached: false,
+            error: e instanceof Error ? e.message : String(e),
+        };
+    }
+}
+//# sourceMappingURL=retrieve.js.map

package/dist/retrieve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retrieve.js","sourceRoot":"","sources":["../src/retrieve.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAoBH,sCAMC;AAMD,kCAEC;AAMD,wCAiBC;AAMD,kDAEC;AAKD,gDAGC;AAKD,4CAEC;AAKD,oCAIC;AAkBD,gDA+DC;AAzJD;;GAEG;AACH,SAAgB,aAAa;IAC3B,OAAO;QACL,OAAO,EAAE,IAAI,GAAG,EAAE;QAClB,WAAW,EAAE,CAAC;QACd,eAAe,EAAE,CAAC;KACnB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,OAAyB;IACnD,OAAO,CAAC,WAAW,EAAE,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,OAAyB,EAAE,IAAY;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1D,yCAAyC;IACzC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC,CAAC,sBAAsB;IACtC,CAAC;IAED,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;QACxB,IAAI;QACJ,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACvB,IAAI,EAAE,OAAO,CAAC,WAAW;QACzB,UAAU;KACX,CAAC,CAAC;IACH,OAAO,CAAC,eAAe,EAAE,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,OAAyB;IAC3D,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAAC,OAAyB,EAAE,IAAY;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,OAAyB,EAAE,IAAY;IACtE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,OAAyB;IACpD,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;IACxB,OAAO,CAAC,eAAe,GAAG,CAAC,CAAC;AAC9B,CAAC;AAaD;;;;GAIG;AACI,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,SAAiB,EACjB,WAAmB,EACnB,OAAyB;IAEzB,+CAA+C;IAC/C,IAAI,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,IAAI;YACd,IAAI;YACJ,UAAU,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC;YAC3C,gBAAgB,EAAE,IAAI;YACtB,KAAK,EAAE,0EAA0E;SAClF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,SAAS,6BAA6B,kBAAkB,CAAC,IAAI,CAAC,EAAE,EACnE;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;YACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CACF,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,sCAAsC;YACtC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9B,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,QAAQ,EAAE,IAAI;gBACd,IAAI;gBACJ,UAAU,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC;gBAC3C,gBAAgB,EAAE,KAAK;gBACvB,KAAK,EAAE,wBAAwB,GAAG,CAAC,MAAM,EAAE;aAC5C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAmE,CAAC;QAC/F,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAE9B,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;YAC3C,IAAI;YACJ,UAAU,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC;YAC3C,gBAAgB,EAAE,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC;YACnD,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,IAAI;SACjE,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,IAAI;YACd,IAAI;YACJ,UAAU,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC;YAC3C,gBAAgB,EAAE,KAAK;YACvB,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;SAClD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/temper-standard.d.ts

@@ -0,0 +1,17 @@
+/**
+ * temper-standard.ts
+ *
+ * TypeScript embedding of the Surfil Temper Standard for surfil-mcp.
+ * Mirrors agent/internal/temper/standard.md — update both when the standard changes.
+ * Version: 1.0.0
+ */
+declare const VALID_LEVELS: readonly ["basic", "full", "ultra"];
+/**
+ * Returns the Temper Standard text for the given enforcement level.
+ * Invalid levels fall back to "full".
+ * All levels include the Non-Negotiable Carve-Outs (never stripped).
+ */
+export declare function getStandardForLevel(level: string): string;
+export declare const TEMPER_VERSION = "1.0.0";
+export { VALID_LEVELS };
+//# sourceMappingURL=temper-standard.d.ts.map

package/dist/temper-standard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"temper-standard.d.ts","sourceRoot":"","sources":["../src/temper-standard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAkHH,QAAA,MAAM,YAAY,qCAAsC,CAAC;AAGzD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMzD;AAED,eAAO,MAAM,cAAc,UAAU,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,CAAC"}

package/dist/temper-standard.js

@@ -0,0 +1,137 @@
+"use strict";
+/**
+ * temper-standard.ts
+ *
+ * TypeScript embedding of the Surfil Temper Standard for surfil-mcp.
+ * Mirrors agent/internal/temper/standard.md — update both when the standard changes.
+ * Version: 1.0.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VALID_LEVELS = exports.TEMPER_VERSION = void 0;
+exports.getStandardForLevel = getStandardForLevel;
+const STANDARD_FULL = `# Surfil Temper Standard
+
+Version: 1.0.0
+Owner: Surfil (surfil.com)
+
+The Temper Standard is a behavioral governance specification for AI coding
+assistants operating under Surfil oversight. It encodes the principle that the
+best code is the code that does not need to exist.
+
+---
+
+## The Restraint Ladder
+
+Before writing any code, climb the ladder from the top. Stop at the first
+rung that solves the problem. Never skip down to a lower rung without
+exhausting every higher one.
+
+1. **Does this need to exist?** If the requirement is speculative, deferred,
+   or already handled elsewhere, skip it entirely and say so in one line.
+   Building something nobody asked for is the most expensive mistake. (YAGNI)
+
+2. **Does the standard library solve it?** Use the language's built-in
+   facilities. No dependency beats no dependency.
+
+3. **Does a native platform feature cover it?** CSS instead of JavaScript,
+   a database constraint instead of application code, an HTTP header instead
+   of middleware, a filesystem operation instead of a library wrapper.
+
+4. **Does an already-installed dependency solve it?** Search the existing
+   dependency manifest before adding anything. Adding a package to do what
+   an installed package already does is waste.
+
+5. **Can it be one function or one expression?** If the entire solution fits
+   in a single readable line or a named one-liner, write that and stop.
+
+6. **Write the minimum code that works.** No abstraction without at least two
+   callers. No interface with one implementation. No factory for one product.
+   No configuration for a value that never changes. No scaffolding "for later."
+
+---
+
+## Non-Negotiable Carve-Outs
+
+The following are NEVER subject to the Restraint Ladder. They must be
+implemented completely and correctly regardless of effort.
+
+### Input validation at trust boundaries
+Every surface that accepts external input must validate and sanitize before use.
+
+### Error handling that prevents data loss
+Any code path that writes, transforms, or deletes persistent data must handle
+errors explicitly. Swallowing errors on mutation paths is not acceptable.
+
+### Security controls
+Authentication, authorization, cryptographic operations, secrets handling, and
+audit logging must be implemented to their full specification.
+
+### Accessibility basics
+Interactive UI components must be keyboard-navigable and carry correct ARIA
+roles and labels.
+
+### Anything explicitly requested
+If the user or task specification asks for something, build it in full. The
+Restraint Ladder applies to things not asked for.
+
+---
+
+## The \`surfil-temper:\` Marker Convention
+
+Mark deliberate simplifications with a \`surfil-temper:\` comment naming the
+ceiling and upgrade path:
+
+\`\`\`
+// surfil-temper: <what was simplified> · ceiling: <known limit> · upgrade: <when/how>
+\`\`\`
+
+---
+
+## Token-Efficiency Rules
+
+- Keep functions, modules, and files small.
+- Name things precisely; a precise name eliminates the need for a comment.
+- No speculative comments.
+- Flat over nested.
+- One thing per unit.
+- Delete before adding.
+- Mark deliberate shortcuts with \`surfil-temper:\`.
+
+---
+
+## Levels
+
+### basic
+Restraint Ladder advisory. Non-Negotiable Carve-Outs mandatory.
+
+### full (default)
+Restraint Ladder enforced. Token-Efficiency Rules enforced.
+\`surfil-temper:\` markers required for known ceilings.
+Non-Negotiable Carve-Outs mandatory.
+
+### ultra
+Restraint Ladder extremist. Scope challenges active.
+Every addition must justify its existence. Delete speculatively.
+Non-Negotiable Carve-Outs mandatory.
+`;
+const LEVEL_HEADERS = {
+    basic: "<!-- surfil-temper level: basic — Restraint Ladder advisory; Non-Negotiable Carve-Outs mandatory -->",
+    full: "<!-- surfil-temper level: full (default) — Restraint Ladder enforced; Token-Efficiency Rules enforced; Non-Negotiable Carve-Outs mandatory -->",
+    ultra: "<!-- surfil-temper level: ultra — Restraint Ladder extremist; scope challenges active; Non-Negotiable Carve-Outs mandatory -->",
+};
+const VALID_LEVELS = ["basic", "full", "ultra"];
+exports.VALID_LEVELS = VALID_LEVELS;
+/**
+ * Returns the Temper Standard text for the given enforcement level.
+ * Invalid levels fall back to "full".
+ * All levels include the Non-Negotiable Carve-Outs (never stripped).
+ */
+function getStandardForLevel(level) {
+    const l = VALID_LEVELS.includes(level)
+        ? level
+        : "full";
+    const header = LEVEL_HEADERS[l] ?? LEVEL_HEADERS["full"];
+    return header + "\n\n" + STANDARD_FULL;
+}
+exports.TEMPER_VERSION = "1.0.0";
+//# sourceMappingURL=temper-standard.js.map

package/dist/temper-standard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"temper-standard.js","sourceRoot":"","sources":["../src/temper-standard.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AA0HH,kDAMC;AA9HD,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwGrB,CAAC;AAEF,MAAM,aAAa,GAA2B;IAC5C,KAAK,EAAG,sGAAsG;IAC9G,IAAI,EAAG,gJAAgJ;IACvJ,KAAK,EAAE,gIAAgI;CACxI,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC;AAiBhD,oCAAY;AAdrB;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,KAAa;IAC/C,MAAM,CAAC,GAAiB,YAAkC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxE,CAAC,CAAE,KAAqB;QACxB,CAAC,CAAC,MAAM,CAAC;IACX,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,MAAM,CAAE,CAAC;IAC1D,OAAO,MAAM,GAAG,MAAM,GAAG,aAAa,CAAC;AACzC,CAAC;AAEY,QAAA,cAAc,GAAG,OAAO,CAAC"}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "surfil",
+  "version": "3.6.7",
+  "description": "Surfil MCP server \u2014 bridges MCP-capable editors (Cursor, VS Code, Codex, Zed, Continue, Windsurf, etc.) to the local surfil CLI. Canonical npm name; republishing after npm 24h lock expires.",
+  "keywords": [
+    "surfil",
+    "mcp",
+    "ai",
+    "session-tracking",
+    "observability"
+  ],
+  "homepage": "https://surfil.com",
+  "author": "UpgradIQ, Inc.",
+  "license": "SEE LICENSE IN https://surfil.com/legal/license",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/UpgradIQ/surfil.git",
+    "directory": "surfil-mcp"
+  },
+  "main": "dist/index.js",
+  "bin": {
+    "surfil-mcp": "dist/index.js"
+  },
+  "files": [
+    "dist/"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "prepublishOnly": "npm run build"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.9.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.12.0",
+    "typescript": "^5.4.5",
+    "vitest": "^3.2.0"
+  },
+  "overrides": {
+    "esbuild": "^0.28.1",
+    "hono": "^4.12.27"
+  }
+}