wicked-crew 0.7.40 → 0.7.45

package/dist/api/mcp.js

@@ -0,0 +1,521 @@
+/**
+ * The `/api/v1/mcp/*` registry routes (DES-MCP-TOOLS-001 §8; slice S2).
+ *
+ *   GET    /mcp/servers                 upstreams, their tools (class, subject, status), health,
+ *                                       auth state, and the servers discovered in CLI homes (names only)
+ *   POST   /mcp/servers/preview         probe (10 s, hardened env): tools, classes and a previewHash
+ *                                       (`kind: "rest"`, slice S5a: the tools of an OpenAPI 3 document,
+ *                                       each pinned to the base `url`; see `mcp/rest.ts`)
+ *   POST   /mcp/servers                 save: `{previewHash}` only; missing, unknown or expired → 409
+ *   PATCH  /mcp/servers/:name           `{enabled}`
+ *   DELETE /mcp/servers/:name           remove the server and the keychain secret it owns
+ *   POST   /mcp/servers/:name/test      probe again: health plus the tool diff
+ *   PATCH  /mcp/tools/:subject          `{enabled?, classOverride?}`; `:subject` is `mcp:<server>/<tool>`, URL-encoded
+ *   PUT    /mcp/servers/:name/secret    `{value}` → the OS keychain; answers `{ref, set: true}`, never the value.
+ *                                       RE-KEY only (crew#719): the server must already reference
+ *                                       `keychain:wicked-mcp/<name>`. A new server's secret rides
+ *                                       `secret` on the PREVIEW body and is written by the save.
+ *   POST   /mcp/call                    the broker (§6, slice S3): `{token, subject, args?}` from the garden
+ *                                       shim; judged, budgeted, invoked, scrubbed, output-judged, recorded
+ *   POST   /mcp/tools                   `{token}` from the garden shim's `list` (slice S4): the tools the
+ *                                       token's unit may try, judged with no arguments, recorded nowhere
+ *
+ * Slice S6 (the policy preview and the approvals, `mcp/policies.ts`):
+ *
+ *   POST   /mcp/policies/preview        `{subject?, server?, phaseRole?, seat?, mode?, phaseId?}` → each
+ *                                       tool's decision per role × seat × mode; nothing is recorded
+ *   GET    /mcp/approvals               the approved subjects, the tools that would ask, the two ledgers
+ *   POST   /mcp/approvals               `{subject}`: a server joins `MCP-FIRST-USE` excludes; a tool joins
+ *                                       that and `MCP-POSTURE-WRITE` (audited rule upserts)
+ *   DELETE /mcp/approvals/:subject      removes it from both (`:subject` URL-encoded)
+ *
+ * Slice S7 (the usage fold, `mcp/usage.ts`):
+ *
+ *   GET    /mcp/usage                   `?days=1-30&subject&seat&decision` → counts, the decision split
+ *                                       (allow / ask / deny / guard_error), error rate, p50/p95/p99,
+ *                                       per-tool, per-server, tool × seat × run, chains, per day
+ *
+ * `POST /mcp/servers/preview` also answers the matrix (`policies`); a save that changes a saved
+ * tool's schema, and a removal, withdraw the approvals that named it, BEFORE the registry changes.
+ *
+ * The secret value is in no response, log, audit entry or file (D-2); tests/mcp-registry.test.ts
+ * scans all of them, a malformed secret body included.
+ */
+import { z } from 'zod';
+import { MCP_SERVER_NAME_RE } from '../mcp/classify.js';
+import { MCP_PREVIEW_ROLES, MCP_RUN_MODES, McpLedgerEditError } from '../mcp/policies.js';
+import { McpRegistryError } from '../mcp/registry.js';
+import { listUnitTools } from '../mcp/tool-list.js';
+import { McpRegistryCorruptError } from '../mcp/registry-store.js';
+import { parseSecretRef, SecretStoreError } from '../mcp/secrets.js';
+import { foldMcpUsage, MCP_USAGE_DECISIONS, MCP_USAGE_DEFAULT_DAYS, MCP_USAGE_MAX_DAYS } from '../mcp/usage.js';
+import { parseBaseUrl, REST_SPEC_MAX_BYTES } from '../mcp/rest.js';
+import { API_PREFIX } from './api-prefix.js';
+const V = API_PREFIX;
+const serverName = z.string().regex(MCP_SERVER_NAME_RE, 'a server name is 1-63 of a-z 0-9 _ -, starting with a letter or digit');
+const toolClass = z.enum(['read', 'write', 'destructive']);
+/** A pasted secret VALUE. Shared by the staged-secret preview field and `PUT …/secret` (crew#719). */
+const secretValue = z
+    .string()
+    .min(8, 'a secret is at least 8 characters')
+    .max(8192)
+    .refine((v) => !/[\r\n\0]/.test(v), { message: 'a secret is one line' });
+const AuthSchema = z
+    .object({
+    ref: z.string().refine((r) => parseSecretRef(r) !== null, { message: 'ref must be keychain:wicked-mcp/<name> or env:<NAME>' }),
+    env: z.string().regex(/^[A-Za-z_][A-Za-z0-9_]{0,127}$/).optional(),
+    header: z.string().regex(/^[A-Za-z0-9-]{1,64}$/).optional(),
+    prefix: z.string().max(32).optional(),
+})
+    .strict();
+// Exported so tests/wire-contract.test.ts can pin the published bodies against them.
+export const McpServerConfigSchema = z
+    .object({
+    name: serverName,
+    kind: z.enum(['mcp-stdio', 'mcp-http', 'rest']),
+    command: z.string().min(1).max(4096).optional(),
+    args: z.array(z.string().max(4096)).max(64).optional(),
+    url: z.string().max(4096).optional(),
+    auth: AuthSchema.nullable().optional(),
+    openapiUrl: z.string().max(4096).optional(),
+    openapi: z
+        .record(z.string(), z.unknown())
+        .refine((d) => Buffer.byteLength(JSON.stringify(d), 'utf8') <= REST_SPEC_MAX_BYTES, { message: `the OpenAPI document is at most ${REST_SPEC_MAX_BYTES} bytes` })
+        .optional(),
+    operations: z.array(z.string().min(1).max(256)).min(1).max(512).optional(),
+    /**
+     * (crew#719) The secret VALUE this server's keychain entry will hold. The preview is probed
+     * with it and it is held with the preview; `POST /mcp/servers` writes it to the OS store as
+     * part of the save, so the secret and the registry row commit together. Requires
+     * `auth.ref` = `keychain:wicked-mcp/<name>`. It is in no response, log, audit entry or file.
+     */
+    secret: secretValue.optional(),
+})
+    .strict()
+    .superRefine((c, ctx) => {
+    const issue = (path, message) => ctx.addIssue({ code: z.ZodIssueCode.custom, path: [path], message });
+    const httpUrl = (raw) => {
+        try {
+            const u = new URL(raw ?? '');
+            return u.protocol === 'https:' || u.protocol === 'http:';
+        }
+        catch {
+            return false;
+        }
+    };
+    if (c.kind !== 'rest' && (c.openapiUrl !== undefined || c.openapi !== undefined || c.operations !== undefined)) {
+        issue('openapi', 'openapiUrl, openapi and operations are for a rest server');
+    }
+    if (c.kind === 'rest') {
+        if (c.command !== undefined || c.args !== undefined)
+            issue('command', 'a rest server takes a base url, not a command');
+        if (parseBaseUrl(c.url ?? null) === null)
+            issue('url', 'a rest server needs an http(s) base url with no credentials, query or fragment');
+        if ((c.openapiUrl === undefined) === (c.openapi === undefined))
+            issue('openapi', 'a rest server takes openapiUrl or openapi (the document), exactly one');
+        if (c.openapiUrl !== undefined && !httpUrl(c.openapiUrl))
+            issue('openapiUrl', 'openapiUrl must be an http(s) url');
+        // The URL is stored and answered back, so it may not carry credentials: a secret goes in auth.ref.
+        if (c.openapiUrl !== undefined && httpUrl(c.openapiUrl) && new URL(c.openapiUrl).username + new URL(c.openapiUrl).password !== '') {
+            issue('openapiUrl', 'openapiUrl must not carry credentials; reference the secret with auth.ref');
+        }
+        if (c.auth != null && (c.auth.header === undefined || c.auth.env !== undefined))
+            issue('auth', 'a rest server injects its secret into one header: auth.header, no auth.env');
+    }
+    else if (c.kind === 'mcp-stdio') {
+        if (c.command === undefined)
+            issue('command', 'an mcp-stdio server needs a command');
+        if (c.url !== undefined)
+            issue('url', 'an mcp-stdio server takes no url');
+        if (c.auth != null && (c.auth.env === undefined || c.auth.header !== undefined))
+            issue('auth', 'an mcp-stdio server injects its secret into one env variable: auth.env, no auth.header');
+    }
+    else {
+        if (c.command !== undefined || c.args !== undefined)
+            issue('command', 'an mcp-http server takes a url, not a command');
+        let ok = false;
+        try {
+            const u = new URL(c.url ?? '');
+            ok = u.protocol === 'https:' || u.protocol === 'http:';
+        }
+        catch {
+            ok = false;
+        }
+        if (!ok)
+            issue('url', 'an mcp-http server needs an http(s) url');
+        if (c.auth != null && (c.auth.header === undefined || c.auth.env !== undefined))
+            issue('auth', 'an mcp-http server injects its secret into one header: auth.header, no auth.env');
+    }
+});
+export const SaveMcpServerSchema = z.object({ previewHash: z.string().min(1).max(128).optional() }).strict();
+export const PatchMcpServerSchema = z.object({ enabled: z.boolean() }).strict();
+export const PatchMcpToolSchema = z
+    .object({ enabled: z.boolean().optional(), classOverride: toolClass.nullable().optional() })
+    .strict()
+    .refine((p) => p.enabled !== undefined || p.classOverride !== undefined, { message: 'set enabled, classOverride or both' });
+export const PutMcpSecretSchema = z.object({ value: secretValue }).strict();
+export const McpCallSchema = z
+    .object({
+    token: z.string().min(1).max(256),
+    subject: z.string().min(1).max(512),
+    args: z.record(z.string(), z.unknown()).optional(),
+})
+    .strict();
+export const McpToolsSchema = z.object({ token: z.string().min(1).max(256) }).strict();
+export const McpPolicyPreviewSchema = z
+    .object({
+    subject: z.string().min(1).max(256).optional(),
+    server: serverName.optional(),
+    phaseRole: z.enum(MCP_PREVIEW_ROLES).optional(),
+    seat: z.string().regex(/^[A-Za-z0-9_.-]{1,64}$/).optional(),
+    mode: z.enum(MCP_RUN_MODES).optional(),
+    phaseId: z.string().regex(/^[A-Za-z0-9_.-]{1,128}$/).optional(),
+})
+    .strict()
+    .refine((b) => b.subject === undefined || b.server === undefined, { message: 'give subject or server, not both' });
+export const McpApprovalSchema = z.object({ subject: z.string().min(5).max(256) }).strict();
+export const McpUsageQuerySchema = z
+    .object({
+    days: z.coerce.number().int().min(1).max(MCP_USAGE_MAX_DAYS).optional(),
+    subject: z.string().min(1).max(512).optional(),
+    seat: z.string().regex(/^[A-Za-z0-9_.-]{1,64}$/).optional(),
+    decision: z.enum(MCP_USAGE_DECISIONS).optional(),
+})
+    .strict();
+function invalidBody(reply, err) {
+    return reply.code(400).send({ error: err.issues.map((i) => `${i.path.join('.') || 'body'}: ${i.message}`).join('; ') });
+}
+/** A ledger edit that failed part-way still changed rules: audit what it left changed. */
+function auditPartial(deps, req, err, subjects) {
+    if (!(err instanceof McpLedgerEditError) || err.changed.length === 0)
+        return;
+    deps.audit.record('mcp.approval.partial', deps.actorOf(req), { detail: { subjects, rules: err.changed } });
+    for (const id of err.changed)
+        deps.audit.record('governance.rule.upserted', deps.actorOf(req), { detail: { id, source: 'mcp-approval', partial: true } });
+}
+function fail(reply, err) {
+    if (err instanceof McpRegistryError)
+        return reply.code(err.status).send({ error: err.message, code: err.code });
+    if (err instanceof McpRegistryCorruptError)
+        return reply.code(503).send({ error: err.message, code: 'registry_corrupt' });
+    if (err instanceof SecretStoreError)
+        return reply.code(502).send({ error: err.message, code: 'secret_store_failed' });
+    throw err;
+}
+function toConfig(body) {
+    return {
+        name: body.name,
+        kind: body.kind,
+        command: body.command ?? null,
+        args: body.args ?? [],
+        url: body.url ?? null,
+        ...(body.kind === 'rest'
+            ? { openapiUrl: body.openapiUrl ?? null, openapi: body.openapi ?? null, operations: body.operations ?? null }
+            : {}),
+        auth: body.auth == null
+            ? null
+            : {
+                ref: body.auth.ref,
+                ...(body.auth.env !== undefined ? { env: body.auth.env } : {}),
+                ...(body.auth.header !== undefined ? { header: body.auth.header } : {}),
+                ...(body.auth.prefix !== undefined ? { prefix: body.auth.prefix } : {}),
+            },
+    };
+}
+export function registerMcpRoutes(app, deps) {
+    const registry = (reply) => {
+        if (deps.registry !== undefined)
+            return deps.registry;
+        void reply.code(503).send({ error: 'the MCP registry is not configured on this daemon', code: 'mcp_unavailable' });
+        return null;
+    };
+    app.get(`${V}/mcp/servers`, { config: { manifest: { responseType: 'McpServersResponse', statusCodes: [200, 503] } } }, async (_req, reply) => {
+        const r = registry(reply);
+        if (r === null)
+            return reply;
+        try {
+            return await r.list();
+        }
+        catch (err) {
+            return fail(reply, err);
+        }
+    });
+    app.post(`${V}/mcp/servers/preview`, { config: { manifest: { requestType: 'McpServerConfigBody', responseType: 'McpPreviewResponse', statusCodes: [200, 400, 409, 501, 502, 503] } } }, async (req, reply) => {
+        const r = registry(reply);
+        if (r === null)
+            return reply;
+        const parsed = McpServerConfigSchema.safeParse(req.body);
+        if (!parsed.success)
+            return invalidBody(reply, parsed.error);
+        try {
+            const preview = await r.preview(toConfig(parsed.data), parsed.data.secret ?? null);
+            if (deps.policies === undefined)
+                return preview;
+            let policies = null;
+            try {
+                policies = await deps.policies.previewUnsaved(preview.server, preview.tools);
+            }
+            catch {
+                policies = null; // the registry preview stands; the matrix is disclosed as unavailable
+            }
+            return { ...preview, policies };
+        }
+        catch (err) {
+            return fail(reply, err);
+        }
+    });
+    app.post(`${V}/mcp/servers`, { config: { manifest: { requestType: 'SaveMcpServerBody', responseType: 'McpServer', statusCodes: [201, 400, 409, 500, 502, 503] } } }, async (req, reply) => {
+        const r = registry(reply);
+        if (r === null)
+            return reply;
+        const parsed = SaveMcpServerSchema.safeParse(req.body ?? {});
+        if (!parsed.success)
+            return invalidBody(reply, parsed.error);
+        try {
+            // A saved tool whose schema changed loses its approvals BEFORE the save lands, so a failed
+            // withdrawal refuses the save rather than leaving an approval over a schema nobody approved.
+            const held = parsed.data.previewHash === undefined ? null : r.peekPreview(parsed.data.previewHash);
+            if (held !== null && deps.policies !== undefined) {
+                const tokens = await deps.policies.withdrawnBySave(held);
+                if (tokens.length > 0) {
+                    const rules = await deps.policies.withdraw(tokens).catch((e) => { auditPartial(deps, req, e, tokens); throw e; });
+                    deps.audit.record('mcp.approval.withdrawn', deps.actorOf(req), { detail: { subjects: tokens, rules, why: 'schema_changed' } });
+                    for (const id of rules)
+                        deps.audit.record('governance.rule.upserted', deps.actorOf(req), { detail: { id, source: 'mcp-approval' } });
+                }
+            }
+            const server = await r.save(parsed.data.previewHash);
+            deps.audit.record('mcp.server.saved', deps.actorOf(req), {
+                detail: { name: server.name, kind: server.kind, tools: server.tools.length, authRef: server.auth?.ref ?? null },
+            });
+            return reply.code(201).send(server);
+        }
+        catch (err) {
+            return fail(reply, err);
+        }
+    });
+    app.patch(`${V}/mcp/servers/:name`, { config: { manifest: { requestType: 'PatchMcpServerBody', responseType: 'McpServer', statusCodes: [200, 400, 404, 503] } } }, async (req, reply) => {
+        const r = registry(reply);
+        if (r === null)
+            return reply;
+        const parsed = PatchMcpServerSchema.safeParse(req.body);
+        if (!parsed.success)
+            return invalidBody(reply, parsed.error);
+        try {
+            const server = await r.setServerEnabled(req.params.name, parsed.data.enabled);
+            deps.audit.record(parsed.data.enabled ? 'mcp.server.enabled' : 'mcp.server.disabled', deps.actorOf(req), { detail: { name: server.name } });
+            return server;
+        }
+        catch (err) {
+            return fail(reply, err);
+        }
+    });
+    app.delete(`${V}/mcp/servers/:name`, { config: { manifest: { responseType: '{ removed: string }', statusCodes: [200, 404, 500, 502, 503] } } }, async (req, reply) => {
+        const r = registry(reply);
+        if (r === null)
+            return reply;
+        try {
+            await r.get(req.params.name); // 404 before anything is withdrawn
+            if (deps.policies !== undefined) {
+                const tokens = await deps.policies.tokensOf(req.params.name);
+                if (tokens.length > 0) {
+                    const rules = await deps.policies.withdraw(tokens).catch((e) => { auditPartial(deps, req, e, tokens); throw e; });
+                    deps.audit.record('mcp.approval.withdrawn', deps.actorOf(req), { detail: { subjects: tokens, rules, why: 'server_removed' } });
+                    for (const id of rules)
+                        deps.audit.record('governance.rule.upserted', deps.actorOf(req), { detail: { id, source: 'mcp-approval' } });
+                }
+            }
+            await r.remove(req.params.name);
+            deps.audit.record('mcp.server.removed', deps.actorOf(req), { detail: { name: req.params.name } });
+            return { removed: req.params.name };
+        }
+        catch (err) {
+            return fail(reply, err);
+        }
+    });
+    app.post(`${V}/mcp/servers/:name/test`, { config: { manifest: { responseType: 'McpServerTestResponse', statusCodes: [200, 404, 409, 503] } } }, async (req, reply) => {
+        const r = registry(reply);
+        if (r === null)
+            return reply;
+        try {
+            return await r.test(req.params.name);
+        }
+        catch (err) {
+            return fail(reply, err);
+        }
+    });
+    app.patch(`${V}/mcp/tools/:subject`, { config: { manifest: { requestType: 'PatchMcpToolBody', responseType: 'McpTool', statusCodes: [200, 400, 404, 503] } } }, async (req, reply) => {
+        const r = registry(reply);
+        if (r === null)
+            return reply;
+        const parsed = PatchMcpToolSchema.safeParse(req.body);
+        if (!parsed.success)
+            return invalidBody(reply, parsed.error);
+        try {
+            const tool = await r.patchTool(req.params.subject, parsed.data);
+            deps.audit.record('mcp.tool.updated', deps.actorOf(req), { detail: { subject: tool.subject, ...parsed.data } });
+            return tool;
+        }
+        catch (err) {
+            return fail(reply, err);
+        }
+    });
+    // The broker (§6). The body carries a worker's arguments: a malformed one is refused without
+    // echoing any of it, and nothing of the body is logged or audited (the call record is the record).
+    app.post(`${V}/mcp/call`, { config: { manifest: { requestType: 'McpCallBody', responseType: 'McpCallResponse', statusCodes: [200, 400, 401, 403, 409, 429, 500, 502, 503, 504] } } }, async (req, reply) => {
+        if (deps.broker === undefined)
+            return reply.code(503).send({ error: 'the MCP broker is not configured on this daemon', code: 'mcp_unavailable' });
+        const parsed = McpCallSchema.safeParse(req.body);
+        if (!parsed.success) {
+            return reply.code(400).send({ error: `body: ${parsed.error.issues.map((i) => `${i.path.join('.') || 'body'} ${i.code}`).join('; ')}`, code: 'bad_request' });
+        }
+        const answer = await deps.broker.call({
+            token: parsed.data.token,
+            subject: parsed.data.subject,
+            ...(parsed.data.args !== undefined ? { args: parsed.data.args } : {}),
+        });
+        return reply.code(answer.status).send(answer.body);
+    });
+    // The unit's tool list (S4). Like the call, the token travels in the body so it never reaches a
+    // request log, and nothing of the body is logged or audited.
+    app.post(`${V}/mcp/tools`, { config: { manifest: { requestType: 'McpToolsBody', responseType: 'McpToolsResponse', statusCodes: [200, 400, 401, 500, 503] } } }, async (req, reply) => {
+        const registry = deps.registry;
+        const toolLister = deps.toolLister;
+        if (registry === undefined || toolLister === undefined) {
+            return reply.code(503).send({ error: 'the MCP registry is not configured on this daemon', code: 'mcp_unavailable' });
+        }
+        const parsed = McpToolsSchema.safeParse(req.body);
+        if (!parsed.success) {
+            return reply.code(400).send({ error: `body: ${parsed.error.issues.map((i) => `${i.path.join('.') || 'body'} ${i.code}`).join('; ')}`, code: 'bad_request' });
+        }
+        const answer = await listUnitTools({ registry, lister: toolLister }, parsed.data.token);
+        return reply.code(answer.status).send(answer.body);
+    });
+    // (crew#719) RE-KEY only: the server must already be registered and already reference this
+    // keychain entry. A NEW server's secret is staged with its preview (`secret` on the preview
+    // body) and committed by the save, so the two can no longer half-land.
+    app.put(`${V}/mcp/servers/:name/secret`, {
+        config: { manifest: { requestType: 'PutMcpSecretBody', responseType: 'McpSecretResponse', statusCodes: [200, 400, 404, 501, 502, 503] } },
+    }, async (req, reply) => {
+        const r = registry(reply);
+        if (r === null)
+            return reply;
+        const name = serverName.safeParse(req.params.name);
+        if (!name.success)
+            return invalidBody(reply, name.error);
+        const parsed = PutMcpSecretSchema.safeParse(req.body);
+        if (!parsed.success)
+            return invalidBody(reply, parsed.error);
+        try {
+            const ref = await r.setSecret(name.data, parsed.data.value);
+            deps.audit.record('mcp.secret.set', deps.actorOf(req), { detail: { name: name.data, ref } });
+            return { ref, set: true };
+        }
+        catch (err) {
+            return fail(reply, err);
+        }
+    });
+    // ── S6: the policy preview and the approvals ────────────────────────────────────────────────
+    const policies = (reply) => {
+        if (deps.registry !== undefined && deps.policies !== undefined)
+            return deps.policies;
+        void reply.code(503).send({ error: 'MCP policies are not configured on this daemon', code: 'mcp_unavailable' });
+        return null;
+    };
+    app.post(`${V}/mcp/policies/preview`, { config: { manifest: { requestType: 'McpPolicyPreviewBody', responseType: 'McpPolicyPreviewResponse', statusCodes: [200, 400, 404, 501, 502, 503] } } }, async (req, reply) => {
+        const p = policies(reply);
+        if (p === null)
+            return reply;
+        const parsed = McpPolicyPreviewSchema.safeParse(req.body ?? {});
+        if (!parsed.success)
+            return invalidBody(reply, parsed.error);
+        try {
+            const b = parsed.data;
+            return await p.preview({
+                subject: b.subject,
+                server: b.server,
+                phaseRole: b.phaseRole,
+                seat: b.seat,
+                mode: b.mode,
+                phaseId: b.phaseId,
+            });
+        }
+        catch (err) {
+            return fail(reply, err);
+        }
+    });
+    app.get(`${V}/mcp/approvals`, { config: { manifest: { responseType: 'McpApprovalsResponse', statusCodes: [200, 503] } } }, async (_req, reply) => {
+        const p = policies(reply);
+        if (p === null)
+            return reply;
+        try {
+            return await p.approvals();
+        }
+        catch (err) {
+            return fail(reply, err);
+        }
+    });
+    app.post(`${V}/mcp/approvals`, { config: { manifest: { requestType: 'McpApprovalBody', responseType: 'McpApprovalResponse', statusCodes: [200, 400, 404, 503] } } }, async (req, reply) => {
+        const p = policies(reply);
+        if (p === null)
+            return reply;
+        const parsed = McpApprovalSchema.safeParse(req.body);
+        if (!parsed.success)
+            return invalidBody(reply, parsed.error);
+        try {
+            const subject = parsed.data.subject;
+            const rules = await p.approve(subject).catch((e) => { auditPartial(deps, req, e, [subject]); throw e; });
+            deps.audit.record('mcp.approval.granted', deps.actorOf(req), { detail: { subject, rules } });
+            for (const id of rules)
+                deps.audit.record('governance.rule.upserted', deps.actorOf(req), { detail: { id, source: 'mcp-approval' } });
+            const body = { subject, approved: true, rulesChanged: rules };
+            return body;
+        }
+        catch (err) {
+            return fail(reply, err);
+        }
+    });
+    app.delete(`${V}/mcp/approvals/:subject`, { config: { manifest: { responseType: 'McpApprovalResponse', statusCodes: [200, 400, 404, 503] } } }, async (req, reply) => {
+        const p = policies(reply);
+        if (p === null)
+            return reply;
+        try {
+            const subject = req.params.subject;
+            const rules = await p.revoke(subject).catch((e) => { auditPartial(deps, req, e, [subject]); throw e; });
+            deps.audit.record('mcp.approval.revoked', deps.actorOf(req), { detail: { subject, rules } });
+            for (const id of rules)
+                deps.audit.record('governance.rule.upserted', deps.actorOf(req), { detail: { id, source: 'mcp-approval' } });
+            const body = { subject, approved: false, rulesChanged: rules };
+            return body;
+        }
+        catch (err) {
+            return fail(reply, err);
+        }
+    });
+    // ── S7: the usage fold over the call records ────────────────────────────────────────────────
+    app.get(`${V}/mcp/usage`, { config: { manifest: { responseType: 'McpUsageResponse', statusCodes: [200, 400, 503] } } }, async (req, reply) => {
+        if (deps.usage === undefined) {
+            return reply.code(503).send({ error: 'MCP usage is not configured on this daemon', code: 'mcp_unavailable' });
+        }
+        const parsed = McpUsageQuerySchema.safeParse(req.query ?? {});
+        if (!parsed.success)
+            return invalidBody(reply, parsed.error);
+        const q = parsed.data;
+        const now = (deps.now ?? Date.now)();
+        let read;
+        try {
+            read = await deps.usage.read(now);
+        }
+        catch (err) {
+            return reply.code(503).send({ error: `the MCP call records could not be read: ${err instanceof Error ? err.message : String(err)}`, code: 'records_unreadable' });
+        }
+        const body = foldMcpUsage(read.records, {
+            days: q.days ?? MCP_USAGE_DEFAULT_DAYS,
+            ...(q.subject !== undefined ? { subject: q.subject } : {}),
+            ...(q.seat !== undefined ? { seat: q.seat } : {}),
+            ...(q.decision !== undefined ? { decision: q.decision } : {}),
+        }, now, read.skipped);
+        return body;
+    });
+}
+//# sourceMappingURL=mcp.js.map

package/dist/api/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/api/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAoB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErE,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEhH,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,MAAM,CAAC,GAAG,UAAU,CAAC;AACrB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,EAAE,uEAAuE,CAAC,CAAC;AACjI,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;AAC3D,sGAAsG;AACtG,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,mCAAmC,CAAC;KAC3C,GAAG,CAAC,IAAI,CAAC;KACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAE3E,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,OAAO,EAAE,sDAAsD,EAAE,CAAC;IAC9H,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,QAAQ,EAAE;IAClE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;IAC3D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,qFAAqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC/C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACpC,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,CAAC;SACP,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,mBAAmB,EAAE,EAAE,OAAO,EAAE,mCAAmC,mBAAmB,QAAQ,EAAE,CAAC;SAC/J,QAAQ,EAAE;IACb,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC1E;;;;;OAKG;IACH,MAAM,EAAE,WAAW,CAAC,QAAQ,EAAE;CAC/B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACtB,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,OAAe,EAAQ,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5H,MAAM,OAAO,GAAG,CAAC,GAAuB,EAAW,EAAE;QACnD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YAC7B,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,EAAE,CAAC;QAC/G,KAAK,CAAC,SAAS,EAAE,0DAA0D,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,SAAS,EAAE,+CAA+C,CAAC,CAAC;QACvH,IAAI,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,IAAI;YAAE,KAAK,CAAC,KAAK,EAAE,gFAAgF,CAAC,CAAC;QACzI,IAAI,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC;YAAE,KAAK,CAAC,SAAS,EAAE,uEAAuE,CAAC,CAAC;QAC1J,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;YAAE,KAAK,CAAC,YAAY,EAAE,mCAAmC,CAAC,CAAC;QACnH,mGAAmG;QACnG,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;YAClI,KAAK,CAAC,YAAY,EAAE,2EAA2E,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC;YAAE,KAAK,CAAC,MAAM,EAAE,4EAA4E,CAAC,CAAC;IAC/K,CAAC;SAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,SAAS,EAAE,qCAAqC,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;QAC1E,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;YAAE,KAAK,CAAC,MAAM,EAAE,wFAAwF,CAAC,CAAC;IAC3L,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,SAAS,EAAE,+CAA+C,CAAC,CAAC;QACvH,IAAI,EAAE,GAAG,KAAK,CAAC;QACf,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YAC/B,EAAE,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,EAAE,GAAG,KAAK,CAAC;QACb,CAAC;QACD,IAAI,CAAC,EAAE;YAAE,KAAK,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;QACjE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC;YAAE,KAAK,CAAC,MAAM,EAAE,iFAAiF,CAAC,CAAC;IACpL,CAAC;AACH,CAAC,CAAC,CAAC;AACL,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC7G,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;KAC3F,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,EAAE,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;AAC9H,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAE5E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC9C,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,iBAA0C,CAAC,CAAC,QAAQ,EAAE;IACxE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;IAC3D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,aAAsC,CAAC,CAAC,QAAQ,EAAE;IAC/D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;CAChE,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;AACrH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IACvE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;IAC3D,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,mBAA4C,CAAC,CAAC,QAAQ,EAAE;CAC1E,CAAC;KACD,MAAM,EAAE,CAAC;AAmBZ,SAAS,WAAW,CAAC,KAAmB,EAAE,GAAe;IACvD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1H,CAAC;AAED,0FAA0F;AAC1F,SAAS,YAAY,CAAC,IAAkB,EAAE,GAAmB,EAAE,GAAY,EAAE,QAAkB;IAC7F,IAAI,CAAC,CAAC,GAAG,YAAY,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC7E,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC3G,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,OAAO;QAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AAC5J,CAAC;AAED,SAAS,IAAI,CAAC,KAAmB,EAAE,GAAY;IAC7C,IAAI,GAAG,YAAY,gBAAgB;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAChH,IAAI,GAAG,YAAY,uBAAuB;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC1H,IAAI,GAAG,YAAY,gBAAgB;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACtH,MAAM,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,QAAQ,CAAC,IAA2C;IAC3D,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;QACrB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI;QACrB,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM;YACtB,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE;YAC7G,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,EACF,IAAI,CAAC,IAAI,IAAI,IAAI;YACf,CAAC,CAAC,IAAI;YACN,CAAC,CAAC;gBACE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;gBAClB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAoB,EAAE,IAAkB;IACxE,MAAM,QAAQ,GAAG,CAAC,KAAmB,EAAsB,EAAE;QAC3D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACtD,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mDAAmD,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACnH,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,oBAAoB,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAC3I,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CACN,GAAG,CAAC,sBAAsB,EAC1B,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,qBAAqB,EAAE,YAAY,EAAE,oBAAoB,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EACjJ,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;YACnF,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC;YAChD,IAAI,QAAQ,GAAmC,IAAI,CAAC;YACpD,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/E,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,IAAI,CAAC,CAAC,sEAAsE;YACzF,CAAC;YACD,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,GAAG,CAAC,cAAc,EAClB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EACtI,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,2FAA2F;YAC3F,6FAA6F;YAC7F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACnG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBACzD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC3H,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,wBAAwB,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;oBAC/H,KAAK,MAAM,EAAE,IAAI,KAAK;wBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;gBACvI,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACrD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;gBACvD,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE;aAChH,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,KAAK,CACP,GAAG,CAAC,oBAAoB,EACxB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAC7H,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9E,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5I,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CACR,GAAG,CAAC,oBAAoB,EACxB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EACzG,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,mCAAmC;YACjE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC7D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC3H,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,wBAAwB,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;oBAC/H,KAAK,MAAM,EAAE,IAAI,KAAK;wBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;gBACvI,CAAC;YACH,CAAC;YACD,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAClG,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,GAAG,CAAC,yBAAyB,EAC7B,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,uBAAuB,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EACtG,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,KAAK,CACP,GAAG,CAAC,qBAAqB,EACzB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EACzH,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAChE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAChH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,6FAA6F;IAC7F,mGAAmG;IACnG,GAAG,CAAC,IAAI,CACN,GAAG,CAAC,WAAW,EACf,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAC1J,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iDAAiD,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAClJ,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/J,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACpC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;YACxB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;YAC5B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC,CACF,CAAC;IAEF,gGAAgG;IAChG,6DAA6D;IAC7D,GAAG,CAAC,IAAI,CACN,GAAG,CAAC,YAAY,EAChB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EACnI,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YACvD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mDAAmD,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACvH,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/J,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxF,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC,CACF,CAAC;IAEF,2FAA2F;IAC3F,4FAA4F;IAC5F,uEAAuE;IACvE,GAAG,CAAC,GAAG,CACL,GAAG,CAAC,2BAA2B,EAC/B;QACE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,YAAY,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE;KAC1I,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC7F,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAa,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,+FAA+F;IAC/F,MAAM,QAAQ,GAAG,CAAC,KAAmB,EAAsB,EAAE;QAC3D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACrF,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gDAAgD,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAChH,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,GAAG,CAAC,uBAAuB,EAC3B,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,YAAY,EAAE,0BAA0B,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EACxJ,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;YACtB,OAAO,MAAM,CAAC,CAAC,OAAO,CAAC;gBACrB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,SAAS,EAAE,CAAC,CAAC,SAA+B;gBAC5C,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAA0B;gBAClC,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,GAAG,CAAC,gBAAgB,EACpB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,sBAAsB,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAC3F,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,GAAG,CAAC,gBAAgB,EACpB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EACpI,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;YACpC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAC7F,KAAK,MAAM,EAAE,IAAI,KAAK;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;YACrI,MAAM,IAAI,GAAwB,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YACnF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CACR,GAAG,CAAC,yBAAyB,EAC7B,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EACpG,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAC7F,KAAK,MAAM,EAAE,IAAI,KAAK;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;YACrI,MAAM,IAAI,GAAwB,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YACpF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,+FAA+F;IAC/F,GAAG,CAAC,GAAG,CACL,GAAG,CAAC,YAAY,EAChB,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAC5F,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4CAA4C,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QACtB,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,IAAsD,CAAC;QAC3D,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACpK,CAAC;QACD,MAAM,IAAI,GAAqB,YAAY,CACzC,IAAI,CAAC,OAAO,EACZ;YACE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,sBAAsB;YACtC,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAA2B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,EACD,GAAG,EACH,IAAI,CAAC,OAAO,CACb,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/api/plan-schema.d.ts

@@ -0,0 +1,56 @@
+/**
+ * The plan command body shared by `POST /runs {plan}`, `POST /runs/:id/gate {plan}`,
+ * `POST /runs/:id/plan` and `POST /plans/preview` (DES-TEAMING-002 T3/T8).
+ */
+import { z } from 'zod';
+import type { LaunchPlan } from '../core/types.js';
+/** DES-TEAMING-002 §8.4 (seam T3) — a USER-COMPOSED plan: `steps[]` over the phase catalog (a
+ *  step's `id` defaults to its catalog id), the predicted `touch` set (the intent score's input)
+ *  and an optional MANUAL-mode floor `override`. The ENGINE validates every step key and every rule
+ *  (compose, the floor, the override in auto mode); this schema only shapes the command. */
+export declare const PlanSchema: z.ZodObject<{
+    steps: z.ZodArray<z.ZodObject<{
+        catalog: z.ZodString;
+        id: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        catalog: z.ZodString;
+        id: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        catalog: z.ZodString;
+        id: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
+    touch: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    override: z.ZodOptional<z.ZodObject<{
+        remove: z.ZodArray<z.ZodString, "many">;
+        reason: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        reason: string;
+        remove: string[];
+    }, {
+        reason: string;
+        remove: string[];
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    steps: z.objectOutputType<{
+        catalog: z.ZodString;
+        id: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">[];
+    override?: {
+        reason: string;
+        remove: string[];
+    } | undefined;
+    touch?: string[] | undefined;
+}, {
+    steps: z.objectInputType<{
+        catalog: z.ZodString;
+        id: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">[];
+    override?: {
+        reason: string;
+        remove: string[];
+    } | undefined;
+    touch?: string[] | undefined;
+}>;
+/** The parsed plan as the engine command's `LaunchPlan` (an absent optional stays absent). */
+export declare function toLaunchPlan(p: z.infer<typeof PlanSchema>): LaunchPlan;
+//# sourceMappingURL=plan-schema.d.ts.map

package/dist/api/plan-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-schema.d.ts","sourceRoot":"","sources":["../../src/api/plan-schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;;4FAG4F;AAC5F,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMZ,CAAC;AAEZ,8FAA8F;AAC9F,wBAAgB,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,GAAG,UAAU,CAKtE"}