taskflow-mcp-core 0.3.0-beta.1.1 → 1.0.0

package/dist/control/web-console/view.js

@@ -0,0 +1,122 @@
+/** Static shell only. All owner-provided content is inserted with textContent. */
+export const CONSOLE_HTML = `<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Taskflow · Operator console</title><link rel="stylesheet" href="/style.css"><script src="/app.js" defer></script></head>
+<body><header><div><strong>Taskflow</strong><span class="subtitle">Operator console</span></div><span id="connection" role="status">Disconnected</span></header>
+<section id="login" class="login"><h1>Connect to your local control service</h1><p>Enter the one-use session token provided by your trusted launcher. The token stays on this machine.</p><label for="token">Launcher session token</label><input id="token" type="password" autocomplete="off" spellcheck="false"><button id="connect">Connect</button><p id="login-error" role="alert"></p></section>
+<div id="console" hidden><aside><div class="section-heading"><h2>Projects</h2><button id="refresh-projects" class="quiet">Refresh</button></div><div id="projects"></div><button id="logout" class="quiet">End browser session</button></aside>
+<main><div class="section-heading"><div><h1 id="project-title">Select a project</h1><p id="project-context" class="mono muted"></p></div><button id="refresh" class="quiet">Refresh view</button></div>
+<p id="notice" role="status" aria-live="polite"></p><nav aria-label="Project views"><button data-tab="runs" class="selected">Runs</button><button data-tab="approvals">Approvals</button><button data-tab="evidence">Receipt & evidence</button></nav>
+<section id="runs-panel"><h2>Runs</h2><p class="muted">Status and stage are reported by the project ledger.</p><div id="runs"></div><pre id="run-detail" hidden></pre></section>
+<section id="approvals-panel" hidden><h2>Approval inbox</h2><p id="edit-capability" class="muted"></p><div id="approvals"></div></section>
+<section id="evidence-panel" hidden><h2>Receipt & evidence</h2><label for="run-choice">Run</label><select id="run-choice"></select><div class="actions"><button id="receipt">View receipt</button><button id="why-stale" class="quiet">Why stale</button><input id="effect-id" placeholder="Effect ID" aria-label="Effect ID"><input id="phase-id" placeholder="Phase ID (optional)" aria-label="Phase ID"><button id="why-effect" class="quiet">Why effect</button></div><p class="muted">Receipts are issued by control after final settlement. Missing evidence is never treated as verified.</p><pre id="evidence-output">Choose a run to inspect its committed evidence.</pre></section>
+<details><summary>Control connection details</summary><pre id="control-status"></pre></details></main></div>
+<footer>Local operator session · Live authorization remains with ControlHost</footer></body></html>`;
+export const CONSOLE_CSS = `:root{color-scheme:light;--ink:#192a30;--muted:#67777c;--line:#dce4e6;--accent:#146a60;--canvas:#f6f8f8}*{box-sizing:border-box}body{margin:0;background:var(--canvas);color:var(--ink);font:14px/1.55 -apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}header{height:68px;padding:0 30px;background:white;border-bottom:1px solid var(--line);display:flex;align-items:center;justify-content:space-between}header strong{font-size:20px;letter-spacing:-.6px}.subtitle{margin-left:18px;color:var(--muted)}#connection{font-size:12px;border:1px solid var(--line);padding:4px 10px;border-radius:20px}.login{max-width:610px;margin:70px auto;padding:32px;background:#fff;border:1px solid var(--line);border-radius:12px}h1{font-size:23px;letter-spacing:-.5px;margin:0 0 8px}h2{font-size:16px;margin:0}p{margin:8px 0 18px}.muted{color:var(--muted)}.mono,pre{font-family:ui-monospace,SFMono-Regular,monospace}label{display:block;margin:14px 0 6px;font-weight:600}input,select,textarea{font:inherit;padding:8px 10px;background:white;border:1px solid #b8c8cc;border-radius:6px;color:var(--ink)}input:focus,select:focus,textarea:focus{outline:2px solid #8ac5bb;outline-offset:2px}#token{width:100%;margin-bottom:14px}button{font:inherit;font-weight:600;cursor:pointer;background:var(--accent);color:white;border:1px solid var(--accent);border-radius:6px;padding:7px 13px}button:hover{filter:brightness(.95)}button:disabled{cursor:not-allowed;opacity:.48}.quiet{background:white;color:var(--ink);border-color:var(--line)}#console{display:grid;grid-template-columns:246px minmax(0,1fr);min-height:calc(100vh - 110px)}#console[hidden]{display:none}aside{padding:25px 18px;border-right:1px solid var(--line);background:#eef3f2}main{padding:30px 36px;max-width:1400px;width:100%}.section-heading{display:flex;align-items:center;justify-content:space-between;gap:14px;margin-bottom:20px}.section-heading p{margin-bottom:0;font-size:11px;overflow-wrap:anywhere}.project{display:block;width:100%;text-align:left;margin:8px 0;padding:12px;background:transparent;border:1px solid transparent;color:var(--ink);overflow-wrap:anywhere}.project.selected{background:white;border-color:#c5d7d2;box-shadow:0 1px 3px #163c3010}.project small{display:block;color:var(--muted);font-weight:400;margin-top:5px}#logout{margin-top:28px;width:100%}nav{display:flex;gap:6px;border-bottom:1px solid var(--line);margin:20px 0 25px;padding-bottom:10px}nav button{background:transparent;color:var(--muted);border-color:transparent}nav button.selected{background:#e4efeb;color:#155f53}#notice{min-height:22px;margin:0;color:var(--muted)}#notice.error,#login-error{color:#9c3131}.card{background:white;border:1px solid var(--line);border-radius:9px;padding:17px;margin:12px 0}.card h3{margin:0 0 6px;font-size:14px;overflow-wrap:anywhere}.row{display:flex;align-items:center;justify-content:space-between;gap:16px}.tag{display:inline-block;background:#edf1f2;color:#385158;font-size:12px;border-radius:4px;padding:2px 7px;margin-right:6px}.actions{display:flex;flex-wrap:wrap;gap:8px;margin-top:15px}.actions input{width:180px}.empty{padding:28px;border:1px dashed #c6d3d5;border-radius:8px;color:var(--muted);background:#fcfdfd}pre{white-space:pre-wrap;overflow-wrap:anywhere;padding:18px;border:1px solid var(--line);border-radius:8px;background:#fff;font-size:12px}textarea{display:block;width:100%;min-height:70px;margin:12px 0}details{margin-top:30px;color:var(--muted)}summary{cursor:pointer}footer{padding:10px 30px;font-size:11px;color:var(--muted);border-top:1px solid var(--line)}[hidden]{display:none!important}@media(max-width:800px){#console{grid-template-columns:1fr}aside{border-right:0;border-bottom:1px solid var(--line)}main{padding:24px 18px}.subtitle{display:none}.row{align-items:flex-start}.section-heading{align-items:flex-start}.login{margin:30px 15px}header{padding:0 18px}}`;
+export const CONSOLE_JS = String.raw `'use strict';
+const $ = (id) => document.getElementById(id);
+const state = { csrf: '', features: {}, project: null, projects: [], runs: [], generation: 0, evidenceGeneration: 0, commands: new Map() };
+function node(tag, text, className) { const e = document.createElement(tag); if (text !== undefined) e.textContent = text; if (className) e.className = className; return e; }
+function clear(e) { e.replaceChildren(); }
+function notice(text, error = false) { $('notice').textContent = text; $('notice').className = error ? 'error' : ''; }
+function message(error) { return (error.code ? error.code + ': ' : '') + error.message; }
+async function api(path, body, method) {
+ const headers = {}; if (body !== undefined) headers['Content-Type'] = 'application/json'; if (state.csrf) headers['X-Taskflow-CSRF'] = state.csrf;
+ const response = await fetch(path, { method: method || (body === undefined ? 'GET' : 'POST'), headers, credentials: 'same-origin', ...(body === undefined ? {} : { body: JSON.stringify(body) }) });
+ const value = await response.json(); if (!response.ok) { const e = new Error(value.error?.message || 'Control request failed'); e.code = value.error?.code; if (response.status === 401) $('connection').textContent = 'Session expired'; throw e; } return value;
+}
+function projectUrl(project, suffix) { return '/api/projects/' + encodeURIComponent(project.projectId) + suffix + '?controlDomainId=' + encodeURIComponent(project.controlDomainId); }
+function empty(parent, text) { parent.append(node('p', text, 'empty')); }
+function tab(name) { for (const n of ['runs', 'approvals', 'evidence']) $(n + '-panel').hidden = name !== n; for (const b of document.querySelectorAll('[data-tab]')) b.classList.toggle('selected', b.dataset.tab === name); }
+for (const b of document.querySelectorAll('[data-tab]')) b.addEventListener('click', () => tab(b.dataset.tab));
+function renderProjects() {
+ clear($('projects')); if (!state.projects.length) empty($('projects'), 'No authorized projects are mounted.');
+ for (const p of state.projects) { const b = node('button', undefined, 'project'); b.classList.toggle('selected', state.project?.projectId === p.projectId); b.append(node('span', p.name || p.path || p.projectId), node('small', p.mountState || 'Mounted project')); b.addEventListener('click', () => { state.project = p; renderProjects(); void refreshProject(); }); $('projects').append(b); }
+}
+function renderRuns(runs, project) {
+ clear($('runs')); clear($('run-choice')); state.runs = runs;
+ if (!runs.length) { empty($('runs'), 'No runs in this project.'); $('run-choice').append(node('option', 'No runs available')); }
+ for (const r of runs) {
+  const option = node('option', r.runId); option.value = r.runId; $('run-choice').append(option);
+  const card = node('div', undefined, 'card'); const row = node('div', undefined, 'row'); const info = node('div'); info.append(node('h3', r.runId));
+  const labels = node('div'); for (const value of [r.status, r.stage, 'slot: ' + r.slot]) labels.append(node('span', value, 'tag')); if (r.needsOperator) labels.append(node('span', 'Needs operator', 'tag')); info.append(labels);
+  const details = node('button', 'Inspect', 'quiet'); details.addEventListener('click', async () => { const g = state.generation; notice('Loading run…'); try { const data = await api(projectUrl(project, '/runs/' + encodeURIComponent(r.runId))); if (g !== state.generation) return; $('run-detail').hidden = false; $('run-detail').textContent = JSON.stringify(data.result, null, 2); $('run-choice').value = r.runId; notice('Run loaded from control.'); } catch (e) { if (g === state.generation) notice(message(e), true); } });
+  row.append(info, details); card.append(row); $('runs').append(card);
+ }
+ for (const id of ['receipt', 'why-stale', 'why-effect']) $(id).disabled = runs.length === 0;
+}
+function renderApprovals(approvals, project) {
+ clear($('approvals')); $('edit-capability').textContent = state.features.approvalOutputEdit ? 'Enter the revised output, then choose Edit to continue the run.' : state.features.approvalEditWithArtifactRef ? 'Editing requires an existing, authorized output ArtifactRef.' : 'Editing is not supported by the connected control service.';
+ if (!approvals.length) empty($('approvals'), 'No approval requests in this project.');
+ for (const a of approvals) {
+  const card = node('div', undefined, 'card'); card.append(node('h3', a.message || a.approvalRequestId), node('p', 'Run ' + a.runId + ' · version ' + a.expectedRunVersion + ' · ' + a.status, 'mono muted'), node('p', 'Deadline: ' + new Date(a.deadline).toLocaleString(), 'muted'));
+  let preparedEdit; const editRef = node('textarea'); editRef.placeholder = state.features.approvalOutputEdit ? 'Edited output' : 'Output ArtifactRef JSON'; editRef.setAttribute('aria-label', editRef.placeholder); editRef.hidden = !state.features.approvalEditWithArtifactRef || !a.allowedDecisions.includes('edit'); card.append(editRef);
+  const buttons = node('div', undefined, 'actions');
+  for (const decision of a.allowedDecisions) {
+   const b = node('button', decision[0].toUpperCase() + decision.slice(1), decision === 'approve' ? '' : 'quiet'); b.disabled = a.status !== 'pending' || (decision === 'edit' && !state.features.approvalEditWithArtifactRef); b.addEventListener('click', async () => {
+    const g = state.generation; const peers = Array.from(buttons.querySelectorAll('button')); peers.forEach(x => x.disabled = true); notice('Submitting ' + decision + '…');
+    try {
+     let editArtifactRef; let expectedRunVersion = a.expectedRunVersion;
+     if (decision === 'edit' && state.features.approvalOutputEdit) {
+      if (!editRef.value.trim()) throw new Error('Enter revised output text before choosing Edit.');
+      if (!preparedEdit || preparedEdit.content !== editRef.value) {
+       const staged = await api(projectUrl(project, '/runs/' + encodeURIComponent(a.runId) + '/approval-output'), { content: editRef.value });
+       const fresh = await api(projectUrl(project, '/approvals'));
+       const current = fresh.result.find(item => item.approvalRequestId === a.approvalRequestId);
+       if (!current || current.status !== 'pending' || current.expectedRunVersion !== a.expectedRunVersion + 1) { const error = new Error('Approval changed while staging the edit.'); error.code = 'TF_STALE_VERSION'; throw error; }
+       preparedEdit = { content: editRef.value, artifact: staged.result, version: current.expectedRunVersion };
+      }
+      editArtifactRef = preparedEdit.artifact; expectedRunVersion = preparedEdit.version;
+     } else if (decision === 'edit') editArtifactRef = JSON.parse(editRef.value);
+     const key = [project.projectId, a.approvalRequestId, expectedRunVersion, decision, JSON.stringify(editArtifactRef)].join(':');
+     if (!state.commands.has(key)) state.commands.set(key, crypto.randomUUID());
+     const body = { commandId: state.commands.get(key), runId: a.runId, expectedRunVersion, decision, ...(editArtifactRef === undefined ? {} : { editArtifactRef, editKind: 'output' }) };
+     await api(projectUrl(project, '/approvals/' + encodeURIComponent(a.approvalRequestId) + '/decisions'), body);
+     if (g !== state.generation) return; await refreshProject(); notice('Decision committed by control.');
+    } catch (e) {
+     if (g !== state.generation) return;
+     if (e.code === 'TF_STALE_VERSION') await refreshProject();
+     notice(message(e) + (e.code === 'TF_STALE_VERSION' ? ' The current request has been refreshed; review before deciding again.' : ''), true);
+     peers.forEach(x => x.disabled = a.status !== 'pending' || (x.textContent === 'Edit' && !state.features.approvalEditWithArtifactRef));
+    }
+   }); buttons.append(b);
+  }
+  card.append(buttons); $('approvals').append(card);
+ }
+}
+async function refreshProject() {
+ const p = state.project; const g = ++state.generation; $('run-detail').hidden = true; clear($('run-detail')); clear($('runs')); clear($('approvals')); clear($('run-choice')); $('evidence-output').textContent = 'Choose a run to inspect its committed evidence.';
+ for (const id of ['receipt', 'why-stale', 'why-effect']) $(id).disabled = true;
+ if (!p) { $('project-title').textContent = 'Select a project'; $('project-context').textContent = ''; return; }
+ $('project-title').textContent = p.name || p.path || p.projectId; $('project-context').textContent = p.projectId + ' · domain ' + p.controlDomainId; notice('Loading project…');
+ const results = await Promise.allSettled([api(projectUrl(p, '/runs')), api(projectUrl(p, '/approvals'))]); if (g !== state.generation) return;
+ const errors = [];
+ for (let i = 0; i < results.length; i++) { const r = results[i]; const target = $(i === 0 ? 'runs' : 'approvals'); if (r.status === 'fulfilled' && Array.isArray(r.value.result)) { if (i === 0) renderRuns(r.value.result, p); else renderApprovals(r.value.result, p); } else { const text = r.status === 'rejected' ? message(r.reason) : 'Control returned an invalid list'; empty(target, text); errors.push(text); } }
+ notice(errors.length ? errors.join(' · ') : 'Updated from the project ledger.', errors.length > 0);
+}
+async function projects() {
+ notice('Loading projects…');
+ try { const data = await api('/api/projects'); if (!Array.isArray(data.result)) throw new Error('Control returned an invalid project list'); state.projects = data.result; state.project = state.projects.find(p => p.projectId === state.project?.projectId) || state.projects[0] || null; renderProjects(); await refreshProject(); }
+ catch (e) { state.projects = []; state.project = null; renderProjects(); await refreshProject(); notice(message(e), true); }
+}
+async function connected(session) {
+ state.csrf = session.csrf; state.features = session.features; $('token').value = ''; $('login').hidden = true; $('console').hidden = false; $('connection').textContent = 'Local session';
+ try { const status = await api('/api/status'); $('control-status').textContent = JSON.stringify(status.result, null, 2); } catch (e) { $('control-status').textContent = message(e); }
+ await projects();
+}
+$('connect').addEventListener('click', async () => { $('connect').disabled = true; $('login-error').textContent = ''; try { const secret = $('token').value; $('token').value = ''; await connected(await api('/api/session', { token: secret })); } catch (e) { $('login-error').textContent = message(e); } finally { $('connect').disabled = false; } });
+$('token').addEventListener('keydown', (e) => { if (e.key === 'Enter') $('connect').click(); });
+$('refresh-projects').addEventListener('click', () => { void projects(); }); $('refresh').addEventListener('click', () => { void refreshProject(); });
+$('logout').addEventListener('click', async () => { try { await api('/api/session', undefined, 'DELETE'); location.reload(); } catch (e) { notice(message(e), true); } });
+async function evidence(kind) {
+ const p = state.project; const runId = $('run-choice').value; if (!p || !runId || !state.runs.length) return;
+ const g = state.generation; const e = ++state.evidenceGeneration; const effectId = $('effect-id').value; const phaseId = $('phase-id').value;
+ const current = () => g === state.generation && e === state.evidenceGeneration && runId === $('run-choice').value && effectId === $('effect-id').value && phaseId === $('phase-id').value;
+ $('evidence-output').textContent = 'Loading evidence…';
+ try { let url = projectUrl(p, '/runs/' + encodeURIComponent(runId) + (kind === 'receipt' ? '/receipt' : '/why')); if (kind !== 'receipt') url += '&kind=' + kind; if (kind === 'effect') url += '&effectId=' + encodeURIComponent(effectId); if (phaseId) url += '&phaseId=' + encodeURIComponent(phaseId); const data = await api(url); if (!current()) return; $('evidence-output').textContent = data.result === null && kind === 'receipt' ? 'No final Receipt has been issued for this run.' : JSON.stringify(data.result, null, 2); }
+ catch (error) { if (current()) $('evidence-output').textContent = message(error); }
+}
+for (const id of ['run-choice', 'effect-id', 'phase-id']) $(id).addEventListener('input', () => { state.evidenceGeneration++; $('evidence-output').textContent = 'Choose an evidence view for the current selection.'; });
+$('receipt').addEventListener('click', () => { void evidence('receipt'); }); $('why-stale').addEventListener('click', () => { void evidence('stale'); }); $('why-effect').addEventListener('click', () => { void evidence('effect'); });
+void api('/api/session').then(connected).catch(() => {});
+`;
+//# sourceMappingURL=view.js.map

package/dist/control/web-console/view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"view.js","sourceRoot":"","sources":["../../../../taskflow-control/src/web-console/view.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;oGAWwE,CAAC;AAErG,MAAM,CAAC,MAAM,WAAW,GAAG,4wHAA4wH,CAAC;AAExyH,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0GnC,CAAC"}

package/dist/control/web-console.d.ts

@@ -0,0 +1,50 @@
+export type WebConsoleOperation = "control.status" | "projects.list" | "runs.list" | "runs.get" | "approvals.list" | "approval.decide" | "approvals.stageEdit" | "receipts.get" | "evidence.why";
+export interface WebConsoleProject {
+    projectId: string;
+    controlDomainId: string;
+    name?: string;
+    path?: string;
+    mountState?: string;
+}
+/** Internal seam for the owner to map to its authenticated ControlHost client.
+ * projects.list returns WebConsoleProject[]; runs.list returns RunSnapshot[];
+ * approvals.list returns ApprovalRequest[] (scoped by the requested project);
+ * receipts.get returns Receipt|null; runs.get/control.status/evidence.why return
+ * their actual owner DTO. No zero-ID snapshots or synthetic success fallback.
+ */
+export interface WebConsoleControlClient {
+    call(operation: WebConsoleOperation, params: Readonly<Record<string, unknown>>): Promise<unknown>;
+}
+export interface WebConsoleAuthorization {
+    operation: WebConsoleOperation;
+    /** Re-check before dispatch and before disclosing its result; no second call. */
+    purpose: "execute" | "disclose";
+    /** Random browser-session handle, NEVER a claimed principal. */
+    sessionId: string;
+    projectId?: string;
+    controlDomainId?: string;
+}
+export interface WebConsoleOptions {
+    /** Required live check. Resolve verified identity from trusted launcher state,
+     * never from HTTP input/sessionId alone. Re-check project/operation policy for
+     * both purposes. The owner must also enforce live policy at mutation commit. */
+    authorize: (request: WebConsoleAuthorization) => Promise<WebConsoleControlClient>;
+    port?: number;
+    /** Absolute browser session lifetime, default 30 minutes. */
+    sessionTtlMs?: number;
+    /** Absolute one-use bootstrap lifetime, default 5 minutes. */
+    bootstrapTtlMs?: number;
+    /** Owner enables only after its output-edit ArtifactRef contract is wired. */
+    approvalEditWithArtifactRef?: boolean;
+    /** Owner supports staging output text as a same-run artifact. */
+    approvalOutputEdit?: boolean;
+}
+export interface WebConsoleServer {
+    readonly url: string;
+    /** One-use secret for trusted launcher/browser handoff. Never log, put in a
+     * URL, persist in localStorage or send to a remote service. */
+    readonly bootstrapToken: string;
+    close(): Promise<void>;
+}
+export declare function startWebConsole(options: WebConsoleOptions): Promise<WebConsoleServer>;
+//# sourceMappingURL=web-console.d.ts.map

package/dist/control/web-console.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-console.d.ts","sourceRoot":"","sources":["../../../taskflow-control/src/web-console.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG,eAAe,GAAG,WAAW,GAAG,UAAU,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,qBAAqB,GAAG,cAAc,GAAG,cAAc,CAAC;AACjM,MAAM,WAAW,iBAAiB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AACD;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACvC,IAAI,CAAC,SAAS,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAClG;AACD,MAAM,WAAW,uBAAuB;IACvC,SAAS,EAAE,mBAAmB,CAAC;IAC/B,iFAAiF;IACjF,OAAO,EAAE,SAAS,GAAG,UAAU,CAAC;IAChC,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AACD,MAAM,WAAW,iBAAiB;IACjC;;oFAEgF;IAChF,SAAS,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAClF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC7B;AACD,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;mEAC+D;IAC/D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AA8CD,wBAAsB,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAwL3F"}

package/dist/control/web-console.js

@@ -0,0 +1,317 @@
+/** Explicitly launched, loopback-only operator console. No store or auth authority.
+ * The trusted launcher owns OS identity; authorize MUST verify current policy on
+ * each operation and return a client bound to that verified principal. Browser
+ * sessions prove possession of launcher authority, not OS identity themselves.
+ */
+import { randomBytes, timingSafeEqual } from "node:crypto";
+import * as http from "node:http";
+import { Value } from "typebox/value";
+import { ArtifactRefSchema } from "./schema/evidence.js";
+import { UuidSchema } from "./schema/common.js";
+import { ControlError } from "./errors.js";
+import { CONSOLE_HTML, CONSOLE_JS, CONSOLE_CSS } from "./web-console/view.js";
+class HttpFailure extends Error {
+    status;
+    constructor(status, message) { super(message); this.status = status; }
+}
+const token = () => randomBytes(32).toString("base64url");
+const sameSecret = (actual, expected) => {
+    if (typeof actual !== "string")
+        return false;
+    const a = Buffer.from(actual);
+    const b = Buffer.from(expected);
+    return a.length === b.length && timingSafeEqual(a, b);
+};
+function positive(value, name) {
+    if (!Number.isSafeInteger(value) || value < 1)
+        throw new Error(`${name} must be a positive safe integer`);
+    return value;
+}
+function uuid(value, name) {
+    if (!Value.Check(UuidSchema, value))
+        throw new HttpFailure(400, `${name} must be a UUID`);
+    return value;
+}
+function boundedText(value, name) {
+    if (typeof value !== "string" || !value || value.length > 512)
+        throw new HttpFailure(400, `${name} is required (maximum 512 characters)`);
+    return value;
+}
+function onlyKeys(body, keys) {
+    if (Object.keys(body).some((key) => !keys.includes(key)))
+        throw new HttpFailure(400, "Unexpected request field");
+}
+async function jsonBody(request) {
+    if (request.headers["content-type"]?.split(";")[0]?.trim() !== "application/json")
+        throw new HttpFailure(415, "Content-Type must be application/json");
+    if (Number(request.headers["content-length"]) > 65_536)
+        throw new HttpFailure(413, "Request body exceeds 64 KiB");
+    const chunks = [];
+    let bytes = 0;
+    for await (const chunk of request) {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        bytes += buffer.length;
+        if (bytes > 65_536)
+            throw new HttpFailure(413, "Request body exceeds 64 KiB");
+        chunks.push(buffer);
+    }
+    let raw;
+    try {
+        raw = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+    }
+    catch {
+        throw new HttpFailure(400, "Malformed JSON request");
+    }
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        throw new HttpFailure(400, "Request must be a JSON object");
+    return raw;
+}
+export async function startWebConsole(options) {
+    if (typeof options.authorize !== "function")
+        throw new Error("A live authorize callback is required");
+    const port = options.port ?? 0;
+    if (!Number.isInteger(port) || port < 0 || port > 65_535)
+        throw new Error("port must be 0..65535");
+    const sessionTtlMs = positive(options.sessionTtlMs ?? 30 * 60_000, "sessionTtlMs");
+    const bootstrapExpiresAt = Date.now() + positive(options.bootstrapTtlMs ?? 5 * 60_000, "bootstrapTtlMs");
+    const bootstrapToken = token();
+    let bootstrapUsed = false;
+    let closed = false;
+    let closing;
+    let origin = "";
+    let authority = "";
+    const sessions = new Map();
+    const sockets = new Set();
+    const features = { approvalEditWithArtifactRef: options.approvalEditWithArtifactRef === true, approvalOutputEdit: options.approvalOutputEdit === true };
+    const server = http.createServer((request, response) => { void handle(request, response); });
+    server.requestTimeout = 10_000;
+    server.headersTimeout = 10_000;
+    server.on("connection", (socket) => { sockets.add(socket); socket.on("close", () => sockets.delete(socket)); });
+    server.on("clientError", (_error, socket) => socket.destroy());
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(port, "127.0.0.1", () => { server.off("error", reject); resolve(); });
+    });
+    authority = `127.0.0.1:${server.address().port}`;
+    origin = `http://${authority}`;
+    server.on("error", () => { });
+    async function handle(request, response) {
+        response.setHeader("Cache-Control", "no-store");
+        response.setHeader("X-Content-Type-Options", "nosniff");
+        response.setHeader("Referrer-Policy", "no-referrer");
+        response.setHeader("Content-Security-Policy", "default-src 'none'; script-src 'self'; style-src 'self'; connect-src 'self'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'");
+        const assertConnected = () => {
+            if (closed || request.aborted || request.socket.destroyed || response.destroyed || response.writableEnded)
+                throw new HttpFailure(503, "Console request closed");
+        };
+        let assertSession;
+        const send = (status, value) => {
+            assertConnected();
+            response.statusCode = status;
+            response.setHeader("Content-Type", "application/json; charset=utf-8");
+            response.end(JSON.stringify(value));
+        };
+        try {
+            assertConnected();
+            if (request.headers.host !== authority)
+                throw new HttpFailure(403, "Invalid console Host");
+            if (request.headers.origin !== undefined && request.headers.origin !== origin)
+                throw new HttpFailure(403, "Invalid console Origin");
+            const site = request.headers["sec-fetch-site"];
+            if (site !== undefined && site !== "same-origin" && site !== "none")
+                throw new HttpFailure(403, "Cross-site console request denied");
+            const url = new URL(request.url ?? "/", origin);
+            if (url.origin !== origin)
+                throw new HttpFailure(403, "Invalid request origin");
+            const method = request.method ?? "GET";
+            if (method === "GET" && ["/", "/app.js", "/style.css"].includes(url.pathname)) {
+                response.setHeader("Content-Type", url.pathname === "/" ? "text/html; charset=utf-8" : url.pathname === "/app.js" ? "text/javascript; charset=utf-8" : "text/css; charset=utf-8");
+                response.end(url.pathname === "/" ? CONSOLE_HTML : url.pathname === "/app.js" ? CONSOLE_JS : CONSOLE_CSS);
+                return;
+            }
+            if (!url.pathname.startsWith("/api/"))
+                throw new HttpFailure(404, "Unknown console route");
+            const mutating = method !== "GET";
+            if (!["GET", "POST", "DELETE"].includes(method))
+                throw new HttpFailure(405, "Method not allowed");
+            if (mutating && request.headers.origin !== origin)
+                throw new HttpFailure(403, "Console mutations require same Origin");
+            if (url.pathname === "/api/session" && method === "POST") {
+                const body = await jsonBody(request);
+                assertConnected();
+                onlyKeys(body, ["token"]);
+                if (bootstrapUsed || Date.now() >= bootstrapExpiresAt || !sameSecret(body.token, bootstrapToken))
+                    throw new HttpFailure(401, "Invalid or expired launcher token");
+                // Consume synchronously before any await: concurrent exchanges cannot reuse it.
+                bootstrapUsed = true;
+                const sessionId = token();
+                const session = { csrf: token(), expiresAt: Date.now() + sessionTtlMs };
+                sessions.set(sessionId, session);
+                response.setHeader("Set-Cookie", `taskflow_console=${sessionId}; HttpOnly; SameSite=Strict; Path=/; Max-Age=${Math.ceil(sessionTtlMs / 1000)}`);
+                send(200, { csrf: session.csrf, expiresAt: session.expiresAt, features });
+                return;
+            }
+            const cookies = (request.headers.cookie ?? "").split(";").map((part) => part.trim()).filter((part) => part.startsWith("taskflow_console="));
+            const sessionId = cookies.length === 1 ? cookies[0].slice("taskflow_console=".length) : "";
+            const session = sessions.get(sessionId);
+            if (!session || Date.now() >= session.expiresAt) {
+                sessions.delete(sessionId);
+                throw new HttpFailure(401, "Console session expired; launch a new session");
+            }
+            assertSession = () => {
+                assertConnected();
+                if (sessions.get(sessionId) !== session || Date.now() >= session.expiresAt) {
+                    if (sessions.get(sessionId) === session)
+                        sessions.delete(sessionId);
+                    throw new HttpFailure(401, "Console session expired; launch a new session");
+                }
+            };
+            if (mutating && !sameSecret(request.headers["x-taskflow-csrf"], session.csrf))
+                throw new HttpFailure(403, "Invalid CSRF token");
+            if (url.pathname === "/api/session") {
+                if (method === "DELETE") {
+                    sessions.delete(sessionId);
+                    response.setHeader("Set-Cookie", "taskflow_console=; HttpOnly; SameSite=Strict; Path=/; Max-Age=0");
+                    send(200, { closed: true });
+                }
+                else if (method === "GET")
+                    send(200, { csrf: session.csrf, expiresAt: session.expiresAt, features });
+                else
+                    throw new HttpFailure(405, "Method not allowed");
+                return;
+            }
+            let operation;
+            let params = {};
+            if (url.pathname === "/api/status" && method === "GET")
+                operation = "control.status";
+            else if (url.pathname === "/api/projects" && method === "GET")
+                operation = "projects.list";
+            else {
+                const segments = url.pathname.split("/").slice(1);
+                if (segments[0] !== "api" || segments[1] !== "projects")
+                    throw new HttpFailure(404, "Unknown console route");
+                params = { projectId: uuid(segments[2], "projectId"), controlDomainId: uuid(url.searchParams.get("controlDomainId"), "controlDomainId") };
+                if (segments.length === 4 && method === "GET" && segments[3] === "runs")
+                    operation = "runs.list";
+                else if (segments.length === 4 && method === "GET" && segments[3] === "approvals")
+                    operation = "approvals.list";
+                else if (segments[3] === "runs" && method === "GET" && [5, 6].includes(segments.length)) {
+                    params.runId = uuid(segments[4], "runId");
+                    if (segments.length === 5)
+                        operation = "runs.get";
+                    else if (segments[5] === "receipt")
+                        operation = "receipts.get";
+                    else if (segments[5] === "why") {
+                        operation = "evidence.why";
+                        params.kind = url.searchParams.get("kind");
+                        if (params.kind !== "stale" && params.kind !== "effect")
+                            throw new HttpFailure(400, "why kind must be stale or effect");
+                        if (params.kind === "effect")
+                            params.effectId = boundedText(url.searchParams.get("effectId"), "effectId");
+                        if (url.searchParams.has("phaseId"))
+                            params.phaseId = boundedText(url.searchParams.get("phaseId"), "phaseId");
+                    }
+                    else
+                        throw new HttpFailure(404, "Unknown console route");
+                }
+                else if (segments[3] === "runs" && segments[5] === "approval-output" && segments.length === 6 && method === "POST") {
+                    if (!features.approvalOutputEdit)
+                        throw new HttpFailure(409, "Output editing is unavailable on this control service");
+                    operation = "approvals.stageEdit";
+                    params.runId = uuid(segments[4], "runId");
+                    const body = await jsonBody(request);
+                    assertSession();
+                    onlyKeys(body, ["content"]);
+                    if (typeof body.content !== "string" || !body.content.trim() || body.content.includes("\0"))
+                        throw new HttpFailure(400, "Output text must be nonempty and contain no NUL characters");
+                    params.editKind = "output";
+                    params.content = body.content;
+                }
+                else if (segments[3] === "approvals" && segments[5] === "decisions" && segments.length === 6 && method === "POST") {
+                    operation = "approval.decide";
+                    params.approvalRequestId = uuid(segments[4], "approvalRequestId");
+                    const body = await jsonBody(request);
+                    assertSession();
+                    onlyKeys(body, ["commandId", "runId", "expectedRunVersion", "decision", "editArtifactRef", "editKind"]);
+                    params.commandId = uuid(body.commandId, "commandId");
+                    params.runId = uuid(body.runId, "runId");
+                    if (!Number.isSafeInteger(body.expectedRunVersion) || Number(body.expectedRunVersion) < 0)
+                        throw new HttpFailure(400, "expectedRunVersion must be a non-negative safe integer");
+                    params.expectedRunVersion = body.expectedRunVersion;
+                    if (typeof body.decision !== "string" || !["approve", "reject", "edit"].includes(body.decision))
+                        throw new HttpFailure(400, "Invalid approval decision");
+                    params.decision = body.decision;
+                    if (body.decision === "edit") {
+                        if (!features.approvalEditWithArtifactRef)
+                            throw new HttpFailure(409, "Approval editing is unavailable on this control service");
+                        if (!Value.Check(ArtifactRefSchema, body.editArtifactRef))
+                            throw new HttpFailure(400, "edit requires a valid editArtifactRef");
+                        params.editArtifactRef = body.editArtifactRef;
+                        if (body.editKind !== undefined && body.editKind !== "output")
+                            throw new HttpFailure(400, "Console edits support output only");
+                        params.editKind = "output";
+                    }
+                    else if (body.editArtifactRef !== undefined || body.editKind !== undefined)
+                        throw new HttpFailure(400, "editArtifactRef requires edit decision");
+                }
+                else
+                    throw new HttpFailure(404, "Unknown console route");
+            }
+            const authorization = { operation, sessionId, ...(typeof params.projectId === "string" ? { projectId: params.projectId } : {}), ...(typeof params.controlDomainId === "string" ? { controlDomainId: params.controlDomainId } : {}) };
+            assertSession();
+            const client = await options.authorize({ ...authorization, purpose: "execute" });
+            assertSession();
+            // A mutation is dispatched once. Revocation while it executes suppresses its
+            // response; authoritative cancellation/commit fencing remains the owner's job.
+            let outcome;
+            try {
+                outcome = { ok: true, result: await client.call(operation, params) };
+            }
+            catch (error) {
+                outcome = { ok: false, error };
+            }
+            assertSession();
+            await options.authorize({ ...authorization, purpose: "disclose" });
+            assertSession();
+            if (!outcome.ok)
+                throw outcome.error;
+            send(200, { result: outcome.result });
+        }
+        catch (error) {
+            if (closed || request.aborted || request.socket.destroyed || response.destroyed || response.writableEnded) {
+                response.destroy();
+                return;
+            }
+            // Do not disclose a delayed owner error to an expired or logged-out session.
+            try {
+                assertSession?.();
+            }
+            catch (sessionError) {
+                error = sessionError;
+            }
+            if (response.headersSent) {
+                response.destroy();
+                return;
+            }
+            if (error instanceof HttpFailure)
+                send(error.status, { error: { message: error.message } });
+            else if (error instanceof ControlError) {
+                const status = ["TF_POLICY_DENIED", "TF_AUTHORITY_REVOKED", "TF_CROSS_PRINCIPAL_COMMAND"].includes(error.code) ? 403 : ["TF_STALE_VERSION", "TF_IDEMPOTENCY_CONFLICT"].includes(error.code) ? 409 : error.code === "TF_FEATURE_REQUIRED" ? 503 : 500;
+                send(status, { error: error.toEnvelope() });
+            }
+            else
+                send(500, { error: { message: "Control service request failed" } });
+        }
+    }
+    return { url: origin, bootstrapToken, close: () => {
+            if (closing)
+                return closing;
+            closed = true;
+            sessions.clear();
+            for (const socket of sockets)
+                socket.destroy();
+            closing = new Promise((resolve) => server.close(() => resolve()));
+            return closing;
+        } };
+}
+//# sourceMappingURL=web-console.js.map

package/dist/control/web-console.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-console.js","sourceRoot":"","sources":["../../../taskflow-control/src/web-console.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAoB,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAmD9E,MAAM,WAAY,SAAQ,KAAK;IACrB,MAAM,CAAS;IACxB,YAAY,MAAc,EAAE,OAAe,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;CACtF;AACD,MAAM,KAAK,GAAG,GAAW,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClE,MAAM,UAAU,GAAG,CAAC,MAAe,EAAE,QAAgB,EAAW,EAAE;IACjE,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACvD,CAAC,CAAC;AACF,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;IAC1G,OAAO,KAAK,CAAC;AACd,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,IAAY;IACzC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,iBAAiB,CAAC,CAAC;IAC1F,OAAO,KAAe,CAAC;AACxB,CAAC;AACD,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,uCAAuC,CAAC,CAAC;IAC1I,OAAO,KAAK,CAAC;AACd,CAAC;AACD,SAAS,QAAQ,CAAC,IAA6B,EAAE,IAAuB;IACvE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;AAClH,CAAC;AACD,KAAK,UAAU,QAAQ,CAAC,OAA6B;IACpD,IAAI,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,kBAAkB;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;IACvJ,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,MAAM;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IAClH,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC;QACvB,IAAI,KAAK,GAAG,MAAM;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IACjE,MAAM,CAAC;QAAC,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IAAC,CAAC;IAC/D,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IACvH,OAAO,GAA8B,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAA0B;IAC/D,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACnG,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;IACnF,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,GAAG,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACzG,MAAM,cAAc,GAAG,KAAK,EAAE,CAAC;IAC/B,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,OAAkC,CAAC;IACvC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,QAAQ,GAAG,EAAE,2BAA2B,EAAE,OAAO,CAAC,2BAA2B,KAAK,IAAI,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;IAExJ,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChH,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IACH,SAAS,GAAG,aAAc,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,GAAG,UAAU,SAAS,EAAE,CAAC;IAC/B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAgD,CAAC,CAAC,CAAC;IAE3E,KAAK,UAAU,MAAM,CAAC,OAA6B,EAAE,QAA6B;QACjF,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAChD,QAAQ,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACxD,QAAQ,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QACrD,QAAQ,CAAC,SAAS,CAAC,yBAAyB,EAAE,0IAA0I,CAAC,CAAC;QAC1L,MAAM,eAAe,GAAG,GAAS,EAAE;YAClC,IAAI,MAAM,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa;gBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACjK,CAAC,CAAC;QACF,IAAI,aAAuC,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,KAAc,EAAQ,EAAE;YACrD,eAAe,EAAE,CAAC;YAClB,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;YAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;YACtE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC;QACF,IAAI,CAAC;YACJ,eAAe,EAAE,CAAC;YAClB,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;YAC3F,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;YACpI,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,MAAM;gBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;YACrI,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,MAAM,CAAC,CAAC;YAChD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;YAChF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;YACvC,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/E,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;gBAClL,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBAC1G,OAAO;YACR,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;YAC3F,MAAM,QAAQ,GAAG,MAAM,KAAK,KAAK,CAAC;YAClC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAClG,IAAI,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;YACvH,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACrC,eAAe,EAAE,CAAC;gBAClB,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC1B,IAAI,aAAa,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,kBAAkB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC;oBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;gBAClK,gFAAgF;gBAChF,aAAa,GAAG,IAAI,CAAC;gBACrB,MAAM,SAAS,GAAG,KAAK,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC;gBACxE,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACjC,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,oBAAoB,SAAS,gDAAgD,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChJ,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC1E,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAC5I,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5F,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACjD,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC3B,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;YAC7E,CAAC;YACD,aAAa,GAAG,GAAG,EAAE;gBACpB,eAAe,EAAE,CAAC;gBAClB,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;oBAC5E,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,OAAO;wBAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACpE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;gBAC7E,CAAC;YACF,CAAC,CAAC;YACF,IAAI,QAAQ,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAChI,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACrC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACzB,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC3B,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,iEAAiE,CAAC,CAAC;oBACpG,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7B,CAAC;qBAAM,IAAI,MAAM,KAAK,KAAK;oBAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;;oBAClG,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;gBACtD,OAAO;YACR,CAAC;YACD,IAAI,SAA8B,CAAC;YACnC,IAAI,MAAM,GAA4B,EAAE,CAAC;YACzC,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,MAAM,KAAK,KAAK;gBAAE,SAAS,GAAG,gBAAgB,CAAC;iBAChF,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe,IAAI,MAAM,KAAK,KAAK;gBAAE,SAAS,GAAG,eAAe,CAAC;iBACtF,CAAC;gBACL,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAClD,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,UAAU;oBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;gBAC7G,MAAM,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC,EAAE,CAAC;gBAC1I,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM;oBAAE,SAAS,GAAG,WAAW,CAAC;qBAC5F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,WAAW;oBAAE,SAAS,GAAG,gBAAgB,CAAC;qBAC3G,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACzF,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;wBAAE,SAAS,GAAG,UAAU,CAAC;yBAC7C,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS;wBAAE,SAAS,GAAG,cAAc,CAAC;yBAC1D,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;wBAChC,SAAS,GAAG,cAAc,CAAC;wBAC3B,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;wBAC3C,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;4BAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;wBACxH,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;4BAAE,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;wBAC1G,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC;4BAAE,MAAM,CAAC,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;oBAC/G,CAAC;;wBAAM,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;gBAC5D,CAAC;qBAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,iBAAiB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACtH,IAAI,CAAC,QAAQ,CAAC,kBAAkB;wBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,uDAAuD,CAAC,CAAC;oBACtH,SAAS,GAAG,qBAAqB,CAAC;oBAClC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBAC1C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;oBAAC,aAAa,EAAE,CAAC;oBACtD,QAAQ,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC5B,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;wBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,4DAA4D,CAAC,CAAC;oBACtL,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;oBAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC3D,CAAC;qBAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACrH,SAAS,GAAG,iBAAiB,CAAC;oBAC9B,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;oBAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACrC,aAAa,EAAE,CAAC;oBAChB,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC;oBACxG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;oBACrD,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;oBACzC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;wBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,wDAAwD,CAAC,CAAC;oBAChL,MAAM,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;oBACpD,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;wBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;oBACzJ,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;oBAChC,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;wBAC9B,IAAI,CAAC,QAAQ,CAAC,2BAA2B;4BAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,yDAAyD,CAAC,CAAC;wBACjI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,eAAe,CAAC;4BAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;wBAC/H,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,eAA8B,CAAC;wBAC7D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;4BAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;wBAC/H,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;oBAC5B,CAAC;yBAAM,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;wBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;gBACpJ,CAAC;;oBAAM,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,aAAa,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACrO,aAAa,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YACjF,aAAa,EAAE,CAAC;YAChB,6EAA6E;YAC7E,+EAA+E;YAC/E,IAAI,OAAsE,CAAC;YAC3E,IAAI,CAAC;gBAAC,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;YAAC,CAAC;YAC7E,OAAO,KAAK,EAAE,CAAC;gBAAC,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAAC,CAAC;YACjD,aAAa,EAAE,CAAC;YAChB,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YACnE,aAAa,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,MAAM,OAAO,CAAC,KAAK,CAAC;YACrC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,MAAM,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;gBAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC1I,6EAA6E;YAC7E,IAAI,CAAC;gBAAC,aAAa,EAAE,EAAE,CAAC;YAAC,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBAAC,KAAK,GAAG,YAAY,CAAC;YAAC,CAAC;YACzE,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzD,IAAI,KAAK,YAAY,WAAW;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;iBACvF,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,4BAA4B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBACrP,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC7C,CAAC;;gBAAM,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;IACF,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE;YACjD,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAC5B,MAAM,GAAG,IAAI,CAAC;YACd,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/C,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACxE,OAAO,OAAO,CAAC;QAChB,CAAC,EAAE,CAAC;AACL,CAAC"}

package/dist/mcp/jsonrpc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jsonrpc.d.ts","sourceRoot":"","sources":["../../src/mcp/jsonrpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CACf;AAED,kDAAkD;AAClD,eAAO,MAAM,GAAG;aACf,WAAW,EAAE,CAAC,KAAK;aACnB,eAAe,EAAE,CAAC,KAAK;aACvB,gBAAgB,EAAE,CAAC,KAAK;aACxB,cAAc,EAAE,CAAC,KAAK;aACtB,cAAc,EAAE,CAAC,KAAK;aACtB,iBAAiB,EAAE,CAAC,KAAK;CAChB,CAAC;AAEX;;gFAEgF;AAChF,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C,+EAA+E;AAC/E,qBAAa,QAAS,SAAQ,KAAK;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,YAAY,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAKxD;CACD;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IAC1B,mDAAmD;IACnD,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAClC,wEAAwE;IACxE,MAAM,EAAE,WAAW,CAAC;CACpB;AAED,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAE9F;;;GAGG;AACH,wBAAgB,UAAU,CACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,EACpC,EAAE,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAA;CAAO,GACxE,OAAO,CAAC,IAAI,CAAC,CAiMf"}
+{"version":3,"file":"jsonrpc.d.ts","sourceRoot":"","sources":["../../src/mcp/jsonrpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CACf;AAED,kDAAkD;AAClD,eAAO,MAAM,GAAG;aACf,WAAW,EAAE,CAAC,KAAK;aACnB,eAAe,EAAE,CAAC,KAAK;aACvB,gBAAgB,EAAE,CAAC,KAAK;aACxB,cAAc,EAAE,CAAC,KAAK;aACtB,cAAc,EAAE,CAAC,KAAK;aACtB,iBAAiB,EAAE,CAAC,KAAK;CAChB,CAAC;AAEX;;gFAEgF;AAChF,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C,+EAA+E;AAC/E,qBAAa,QAAS,SAAQ,KAAK;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,YAAY,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAKxD;CACD;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IAC1B,mDAAmD;IACnD,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAClC,wEAAwE;IACxE,MAAM,EAAE,WAAW,CAAC;CACpB;AAED,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAE9F;;;GAGG;AACH,wBAAgB,UAAU,CACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,EACpC,EAAE,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAA;CAAO,GACxE,OAAO,CAAC,IAAI,CAAC,CA0Mf"}

package/dist/mcp/jsonrpc.js

@@ -72,15 +72,24 @@ export function serveStdio(handlers, io = {}) {
         const trimmed = line.trim();
         if (!trimmed)
             return;
-        let msg;
+        let parsed;
         try {
-            msg = JSON.parse(trimmed);
+            parsed = JSON.parse(trimmed);
         }
         catch {
             // No recoverable id — per JSON-RPC, a parse error uses id:null.
             respondErr(null, { code: RPC.PARSE_ERROR, message: "Parse error" });
             return;
         }
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+            respondErr(null, { code: RPC.INVALID_REQUEST, message: "Invalid Request" });
+            return;
+        }
+        const msg = parsed;
+        if (msg.id !== undefined && msg.id !== null && typeof msg.id !== "string" && typeof msg.id !== "number") {
+            respondErr(null, { code: RPC.INVALID_REQUEST, message: "Invalid Request" });
+            return;
+        }
         const isNotification = msg.id === undefined || msg.id === null;
         const id = (msg.id ?? null);
         if (msg.jsonrpc !== "2.0" || typeof msg.method !== "string") {
@@ -99,7 +108,7 @@ export function serveStdio(handlers, io = {}) {
             }
             return;
         }
-        const handler = handlers[msg.method];
+        const handler = Object.hasOwn(handlers, msg.method) ? handlers[msg.method] : undefined;
         if (!handler) {
             // Unknown notifications are silently ignored (e.g. notifications/*).
             if (!isNotification)